last executing test programs: 28.879296409s ago: executing program 1 (id=3533): mmap$auto(0x0, 0xb0, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1008000) (async) mlockall$auto(0x7) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x35dc80000000) (async, rerun: 64) r0 = epoll_create$auto(0x3e) (async) unshare$auto(0x40000080) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) epoll_ctl$auto(r0, 0x1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mprotect$auto(0x0, 0x806121, 0x6) (async) mlockall$auto(0xffffba00) 27.775081112s ago: executing program 1 (id=3535): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(r1, 0x90009427, &(0x7f0000001080)={@inferred, "90f76cafdf9350e097b7b41c4bce9027e1427278beb634e4ff4a9bbba4d7f7e88a63db963884a3b5a9618d36b67bc26208db95f99006c537550d92cbc7484a20b3546e5a8518601c773244d928695cd77cbef7d4fb0065edd10d670a4b9f830839535277ad4a024d17a5f6d8ba6e4cad2d70a72aa060b12931eed03755ed42a5412922e6d8d5a98f4b050a5513c6ff1bc983dbbf96b7bd1ae2a514ce48e2d0a50079b4a93680f99112c5bbcd06f22b360f7d07d20fe0a4ed4d2f465d1b0e4ad600a62fd9518c4bef013761ed260766cef5622f52b078105bde182758a9a3e56958d275d9f281386ccba530f8905f57b3f0d3de06b2ef1684af704f73038baffaf929e9d43b2c1131b4a47bda7f18af6cd990419d76076c11cc99425cd9e001ba205b9e587a9e45e8de4fd5a77c31d7dc4c481bec73c665b64ed01215c396e33c19022ca522c509f00291367ed6e2bade11ce0308dafd07dc7601654d75d9db66c3c4595b8788a657208607a8ff2b5d57616668ddc6016d8227a85dafbfa4b7986ba00ecb90c8852f84179d3e7ac2987e72ba9cb2e49486db6670cbf15255cf0be32f5e65fb97d1ce34318cb8251bc47892f36be9420992b9fcf4ead79667866aa2206732d9211a1f4a58438c10ade99862b6563d2bf98bd491aada2b5343f11546154f89d0b22d3a4a1e29ffe58b797917cac97585fa43644075c18ef89f011883f136ef39beb7886d3d28954b460d170859e2168a1d2c552d6fd76e8a76bd11b7025dda3c41759bb6b81fa28916ae9c41eb4a6f5e8d32db3bebc15ed74fa29c3fc0fffba2851e12aa8c8cb20a5432c1c7a89d7dac97cfd7b067491cb489204ad67d7ee39c2bdd9e932a1db11c0600bca8353c1712bb6ca6a1bb41ac80f613e8ba3cfca16169b617e4b5df142b8107bf7300999ed255ffda3c16e36587c5e24bd3e01521cb44b0fd0dab4af45baf2d4bcadb035a656084a3dc9b3cd858a823fecce56b18334556a95ff2cca445e214b3da494b08938a4b4c0e1b90997a53532bc2849c2e12d589d6d99cffeef1535ebb9922d4e5418ecc10df5fed72e1b6307af3cb73fff67e8c5629fc43c88124d510958bc346cfdeac05b7b49a44a3951c0dbe373234a2d50d2e8d8f5dfd75f045b273e7540e524c9d54b3dd11c8456f80066fb6c43df197fafe816be352be2e0393701ec7b1eab80acd83fa00903eba4e2bebb07dd8aabec9847b2c41c93563f5f9da171bf5eb083daa38d686f7911dc02118478db7b658a44bf57762bede58d36030d6297068c62004e7f7caa2aa0fbe20c2a0a6bc64db45016b7395ba4841a4f41ad7e9ef1fd22126ff72f9bfcd3615f00f23368be20cb7a429e4443b04b5ff856435c2311aa1c87e51bda28b49fc7a7f53e815dcd018bad063ab5a0a5b12d2c5e55e3780c399b0f047a58d5244c05e42ebf788cf7d135d00416c18128da52ec36d5eb5b5098838884a14d3d92f088e7831fdbd9d68eafdf75dfb41abf28d2e7fc314745e2d2ea99ed867bab04167058bc7c27124c07f86e772ddddf654bfe997d0382c4a3735fb3a7443fadcf1bf478785a70e0070a141780bac8f4bd64bd15784cec607f6d613f7f3529acb3ff275adfb37f1573761a3f36257780f0e3fba020d62b6eb45e933df36b7d5390e80f413212fd1cbf686d9ca9173a9d5f7dcd185c85f1d525333b2f669b5904943688b7a7198ba851bfd70b5511d2315c5cef3be254c3b49464fb2595f6b91c532189dbac160d6249bd0b8ac3330d1ce0d50bcee80ed87e831cff2f7e64711e1cf3d5da5a6fb8002c57397be9b919ae802710c281def52ee3001b6399c7e4570bbb1a4fba8d877e8fb5f31987a17b918bc44bb68c27d055028b4360b12ed94bbfe46b8f00360438733b605833ad856ac04a0239eae9ca8b2b28d8f66475f4fbeac8439dc62443822c9c38b2536b70b7b00c7d0dc1349eedede1ca6f82da5f033e0f359908fb70269dd0304a086515010bc84a5e895504544a4d4b557d17420bd7e8e4629b9d2a0a7823fe8b54b1a09936811146532e8e0bb8400545dc49103e88f4508bd354638c7111db72e22ab7ec6ad396265928d8ea68e58a7a88bd714b53386ef0b06b204f1a1eb9ba8d0c2296f1d0678ce91ead03eebbcd59fa3fed37bdecb717e8e26a9ebc477d15e6b7c0159227331787d90eaa0d4e69a97319551671e18611c4b547a35fae8a6e01ee1ba4926bb3608306b0a9189c3de83551da3021537c40f51d859d569e38499b76cf8efced00c9e4f3ae00621e4a74c29c72b9a6c62e20f96366c25c5108dd1d25f72dd64db48a63b17fa41aa024bd6390a913a838e4001dad1e656c8dc1304f46e50e3c00f721da50415309886a2dd0841029178c1106dab067406c42abc2734ae6a747c67251661e51cd7dd7e7a5df845f6fb53af99990c40e9505dc5795f0953dcda33619d8c8bfc4d2e9e2414ab80bc77bdb922e75e9d84e4c507324b0a0004e622f5ed89fc6ebc9e49dbd4cad15fa6fc38f012199afd62b6c6c5c58766134dd3cb58af513addac79fd1f776d3a13fbc544c1aeeea3103715069d459cebb455aa173511d68768869ec185ad41054bb0a6ed61c376f869078fa662426f12b427ebb153d12544fdd8c08ba55bdb6be0c94ec82d2b76b399d03da67ab9a242dec3b02d0b788b00fee9249c277b4a295017d02d8e08d6f17eb300f5a1dc9ac5eef3224d7e3ff7027fdf220f0afee826f2882a4f2a78ff767de88c48e79d0adcb55fee06319b60bf0954b8279354900387836d17f9b644875b9907e59a68a3b11403c1f6c3238cace2fa1ec86d04bea605fa86bdcd8cf12c448e662a32a3c59bfcd1cd33425e0b7caee3c88899bc891d7e20c265b03b1642ce0e642088c38a16eb693a644904774b82de1e3bc71a224bf716356211606d878015748a1ad6a58fe691c1727e231380309fdea45f45ee28c3c80ade9e251ddd396d783fac205512c8751fc4f3da9107e33a457b6237e1121088a2c97dc450b46ba6c4850277ba46e7e222713c5fa4f4438470118d1450d4d72f2acf456d94d755791e1f84cd5b680a0a60f6e9458ab87f60f0e391f53784424f48dbd8b58bf28f989f93eb78f82037164eb15eefad2d8eea33a4e1f95a6914abf7f5757a7d3821266363f961d1f2415c7f9f55dab2e8e53fddbba63e45850325667dc951e7a58108b31556dd47cc40a9963159beffb1d480ceddff6245f553cbb78223e98db356e4bdcbe9953fcdd6527827eae5419f0320825ce2648e14e29e848c6c2e7b01417a2b9fd4f069c3aeedf983cd4412af2f82264c5d4f7a956582b1041564e5d6ab4fee2ca9ebffcb27218c99d8b6541477f2b5b9c4ae10d60c748f6999010b40e99ef45fe453fb79cefe2e61e4a3e3fc6fb1ce42ad26e41f2a02b52c598a0d5629000429824760e01cf4fd5ef33aa3ccc6d3a718b1f7c2ba5fbe7b0eec2fa7cc27911417ce434809aa874c219c635ae7cefb7968e1b3a62497eaaf1eee046967cfd0c9f6540e05d3f415aae01a11a1f9824a767a3327f0dac933db32a04a7c8e82ab2dd0def4bc847d06a4469fd85ce58da8fb3c40a608bfccb6277fbda2a59cbbb0362dcb0594e15612d50b3a4b7de1435a6b4138008ef5115ead122fd080aa43b435861dd928b1a18e807fab349c7fc0e87f252692bef5b5db3187eaf876b574ca7ef7199091d9a1e13094cd9efea25fc8ce0fee0f9b3be269ef9bfef83f179e8ddd1ef429f7144e58f76d87d5c9256235960b9546645be7557f43d56fbebaa2fe98600320a50832ab33540afde9524551c3cd3460e585fef92e6bd633e6c422d99b1d3875ea9d4c66a1b5536792dfae3aa29cba98c00d595ff2f3e62165d1a115e25b8b52ef05c88b2e348fff927eb8a3a8f82123547368cb6b23ff3a956e55eb5580db2a10b5ecd08f65772a02fbee728ebfc61578ffd4c5e27cfb2acbeb7d2d3be6b438c63fd61b67856f6bcf3387ee551827266ea98c4d074a86b8839e08a7bd65a309f3d05291fd02ede1b865e92070dcc4625e2bd6080c49d092da1e8873fdd6036d5ffe9f4c0c8b46e9aa4a3643a87e5a5e85e4a55863537e5b5154871d93b7a42edc728d5a91da814097433821e9c083823edab3d3e4639c03d60a9f8ed46afcfe0a1349e0d94d88e71eed3cc84bf5af7eb50a8ae4b049b9efd394a2337e6db8342c0ca78b9306222a475db6d7925fcb484cf711dbd03bb75fa77b7da29a86f0b5128f0c87c0d797c91ed583705790826f711a087db787be9c56bb7fbdcd2b408104716866295e5da3075c42fd0307779ee46f7367de7c941ff72a8c038a5c020f1e238620e77ee056119ae7f7951d995a5d5e2a863a558ad8d29f0450e5a9262df963be362e225c27b205e97e21f18c93e4bc032dc39e4c69703b1117f14ed080e7db327a4fab222c7767c683af3d7c0b2d2bb4c7ccc92eec8666fb6d707383ee3fdcf77a649e9efb3d95aef25fcbb73323eed03a6dc1ab01eadaf86ea70799ab33e06933528f98398296f21fb3fbfdbaf4c0ee7a68c445fe9d93b8bbbf6485415856ebba787ee7b792335d70436d7d546f0e76972691ff6142e5eb94f68789c35d9b4f0948571080850ab113ad2fcd5511f9e58bcb96465584c0d41bd05bb02777a4c53cd1c184a8ef9b0d438a018c2507036a96d1009144672935dd1b3c7c623b30d5151c32e326ffa5642fa044f5c31d78837814cda04628b3afc952216f896025ea58bac9541c578a43ad4906cd7ba0612e29592d5df29607f03ffefd1b9c48d08c93923bc94f645eae9fd6b7634980bba114f74bd5ed18f594016a6476434b04461c4d3b34fe200e5450869799f298cc29ffc4ea57219a453c6c5803d5aa04757fce3d5aa26467d3fb684a6c6af8d70ae8757d232172570b0af0f6b7695cb9940cfb06aeaef049d4d6603919c30b26fdaf4f36f6d9390c1951f027e79b5ac6fc690872a7d197a57b07d5547909c79e106e336ce55be78b2498857eaa2dd7685ad9bfd8537d6543c0881f1180da6531018876858ab1583d91cf8bb04335b832af8efe9df32bd9a21d01c73de685c9594c0ca550d4918ba27c48feb590f9075329004350ab97be1bac240659d590e1a368a2a1df7966abd8d64810d88988d2ec08c85888b7d1644ed805f446769b000bbc376a0f275bc079f16238fcd9c7826c06dc8993d8a2e788ffec2a1f03bed3a2758a8071d714079e245e3afaadc49355570358212112092783c35e5de496ba6608a3436c8ac3139f78eaedb61aed51d4098438219f5099da1d8fb92e73c396876e5bd8c4349b3456454246d3bd0803e71d7813edacf216cfbb0cb1bcdf1bbf489637d6c91da9bc729de9aedcee243da70744c1c3051edd7d7e444c817b64219757d542831e521bf8fb7c488497c232bc1dbc01f46d42448b9a0212f92e97a4c6a846b4909d556dbf8db2f74ec7aae264a85555fd605416955390f62d82e50a0038b5cbda96011c7eefc8f4610afc088669a4746363215547e519d21265af8fd5579f99581afc398d83b62030c2d9d731e0d1549df34e5a66dd20027cf19ce4fbef7ff057331eca9b37c93f4b8f8d1ff98ccd4549c6f46b92e1d2a840c82864f584815d867e13a91117c2c25c7980df8af39b367e35d928714d17c1a51a636d0d761e7c83f68d688e6e1ff91da5b60e9ace8aa814f932bb42ab96c8de6dafa1cf111c3cfe45ce8c5b0b2764b491891f35c86474316c8210906e05341b00"}) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x7, 0x3, 0x9000000eb1, r0, 0x8000) lseek$auto(0x3, 0xffffffffff800002, 0x10) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r3, 0x1, 0x820, 0xfffffffffffffffa) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) unshare$auto(0x40000080) r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) prctl$auto(0x42, 0x1, 0x0, 0x40800000000401, 0x6) r6 = pidfd_getfd$auto(r5, r1, 0x5e) sendmsg$auto_TIPC_NL_NODE_GET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000002080)={0x1e90, 0x0, 0x408, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2e5, 0x1, 0x0, 0x1, [@nested={0x8, 0x87, 0x0, 0x1, [@nested={0x4, 0x3d}]}, @typed={0x8, 0xee, 0x0, 0x0, @pid}, @generic="f7b61aad54402c429930b1c57bfbc2141d13fa0f58eb9fca78f8acf5bdf0918448c4e095d33420a0b206accba3b793b19b754d1298", @nested={0x12d, 0xf9, 0x0, 0x1, [@generic="1fba20fa4e4a48811b35b1ceee7cbe0322a64f5276575a651e9caa0c24c4bd5f841e6dcde8c53037686013e56fcc505e45beda1ea340ad7a0c497886095b616dc9836aa9f5a69812f6a93a44c5e5e52ceef86c85362f6703ca2c13dcd80a4e4218d421fb0883f7af88f9caf635528b8113881b1996ebbadca9de78e32c17fd8820820fcc24a4317aab70aae7bd06218e4fd0e5e075fe312c342e01dac4dff1e59ea7ceb5", @nested={0x4, 0x53}, @nested={0x4, 0x4d}, @nested={0x4, 0x40}, @typed={0x8, 0x1f, 0x0, 0x0, @fd=r1}, @generic="460f4e6740d28e88cdd4efeb3b9a3310f69582548a83d7eebe165985bcfc45560b3077b349122800a43e588890be296e07a47f3fc78c05430f5ab1015c071a667d72187ae88a7f33fb2ca3a8acad0af11a6ed10659d84316ea8254dd2d14901a4d1f740d10a4e971ad2f6b41628dd3c4f9"]}, @nested={0x95, 0xa4, 0x0, 0x1, [@nested={0x4, 0x18}, @nested={0x4, 0x136}, @generic="26df7fac2b00160742b4f3e00d8c82cf103a132471fdc42bdc413f2251e4fbe961257654fb136b2867e456fdaf3d787571262ea5e91ff7da8843993c95e1670cff522152b19c622908528e5cfeab1ffb1cf8132a56b591af2441b73be92acf562597ed8cc0077ad8ae151617cc334727ddc66e26e252d260f5ea9cba097df22cfbe874c7f60fdd588c"]}, @nested={0xd4, 0x14e, 0x0, 0x1, [@typed={0xbe, 0x7d, 0x0, 0x0, @binary="0674c4000615afb34a1e80be5d2574be4220f0649ade44f637cb2bf86eda8e069e7a435417437325a6b6e6d85e628aa19d24abbdb6747de01a3ce6f0d608beab19378345107acc609c963e68946717907ebfd33886581f935b4a9827b7dbd0abf481cee71f82812aae222826f8974de43e03ca99ceffcc73eb5c402071f19b609958e34c1c686b8abc4b6bc96b0545c39240d766bc61cefff74ca6e9823d5a57531d9d56a42e0aef476368a8bd40164d943926d2986bac000116"}, @typed={0x4, 0x116}, @typed={0xc, 0x132, 0x0, 0x0, @u64=0x4}]}]}, @TIPC_NLA_MON={0x4b, 0x9, 0x0, 0x1, [@generic="5f2617d0e80a58b70ceccd136ec5c4a7804f1d287f891cd615ab64be9b8ad9151c9c54a1a5f0db60c53b4f46af3dfb7f4f388c8d687c8b296081c2ede25ae7ea015f687edb7a60"]}, @TIPC_NLA_UNSPEC={0x52, 0x0, "323f53dda7359c4b682ce8e662905b3a05437371c336266d5da3201ae7acbe76dccea138f5cea33abda75bf41dd38e1a853ae25f39f9d9bdb1a1a0664fdeefae7290cc308b1bc890fa2d516f91fb"}, @TIPC_NLA_NODE={0x1377, 0x6, 0x0, 0x1, [@nested={0xd6, 0x105, 0x0, 0x1, [@generic="46884f8e7ef53e4eb5f6f0b65fdfe6dcaacbe13c073bfd636d35943d6f2eb97eeaeaa97f74770e7bc34fdc31e42096f9c03a3ddadb1fa0e00ea2d897b28f61cceb24779cab68da016f45154b7020e3761c217af93c83d2dc3e0000ec8c2c5ca43eddeea2bb8bf862acb2501757092e3f7eb0d1eecdf90fac1bd49e8538ce28d5ba732d39fd57d3d73ecb744601f8b3c7104e2915aa94665059c0b0a469efcea8a43fb5bbddd49d1a71fccda75b9721e4857b2b8accc4d326d5bc20c7b231c235ff755f60fb67abec9e6a9c6d2bda215c71be"]}, @typed={0x14, 0xae, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @nested={0xc9, 0x47, 0x0, 0x1, [@nested={0x4, 0x13e}, @typed={0x4, 0x77}, @generic="ed2dafbd568c98c95ade92d58d1d8a58cdf05ea6b0e351395b9a9648fb94ed700d1a233b4dd20a2c009f2530a4ea47737fc95e99c459083ca64e0afc212f14ca331329baaf3740df083525256c38b11a9133b3234e82dedbc73c7b1e8328833e46e37f794194811cacaad25bcb5570902da59e676651493c9bcdfb2502e476f3d3e0484f882c4254d4dc7534f19fd970b42318c1d6e023c891892329d8d1dbb5d268448c9e6c72fc1a03ec6e027c5484b3486435534b3fd20b1be2fca5"]}, @generic="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", @typed={0x53, 0xdd, 0x0, 0x0, @binary="cc4206a425c6d34d8df85f65d196c4ee456594b2f0c72728e8c5bb8c1ac373efa9d106fd4f06b89904b7d10a78b3afb2a13993763803b5f1eafe554da70ad57e114e0ad7940a6143e4e31e09fd8a2d"}, @typed={0x8, 0x153, 0x0, 0x0, @ipv4=@loopback}, @generic="7b83a64a3fdb3f12997a5db9ea023b19b90fbf0d41c370c31f8a8d84a13edc0e70061b42b7816bce7a4855866fb15dcbba769e9231b299f9ca5efbe837c968c353a4410a25e501a84622b3b5ee0b6f54d30946e1f54f8642f0cca7f23ba5747480a070432c5683d17078", @generic="2e6a595fa5930b564824e7d3eab36fbc35c6c81cc04433b4d5355e31bab5d159418c2ccc4f715021768acf51c3a4a0f0194ffc6b7463a55b7d6d2682b2242a856d6069ab5aceea0366f10a52ac6713d8ae6e6536cf8ecbbde45940cf39270b79abcc845a4445ebddfe60d2c9b477022afd963c3b4acc9d3476563e44d3519bfe715607567966a3154770b6ead324a7e7c739cd7d8e535fe7a45bec0af6b9d46b172c127de281ff85be8b3c9f1bd45218d95f29efc45c0231b399e8e1f1c43fbc443949b146345c8a978bff20a11d7084f839bbb4f9f3693951e127c0cd7c51df793f5dfbd1054cd7888fa0e777c459c87887dae84c"]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@nested={0xc, 0x117, 0x0, 0x1, [@typed={0x5, 0x106, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x156, 0x0, 0x0, @u32=0x3}]}, @TIPC_NLA_SOCK={0x466, 0x2, 0x0, 0x1, [@typed={0x15, 0x4f, 0x0, 0x0, @str='/dev/virtual_nci\x00'}, @generic="93706d0bad6e9351455c6b1fbcfc1072cde983a0a28d9543046b8470b3068102567ad0045b207b1ac5ac8a75d4b08c9b8965b25570a8d6ca273350bf2636056765c45a73958298a35b93a093a1a2961ddba4065f027a18067bd818893b9ab700f5a577181a74be1f60fa9f8ada686733ca17e738d18f363eeb52bd0de58f1162dfe0af5b587f5ba3be5f03124a94d843aaf42b187b9394162ca2eec279dd935c01c0e8e9", @nested={0x3c, 0xb1, 0x0, 0x1, [@nested={0x4, 0x131}, @generic="af5c039141eaa759e9af6d68288c7194208ea6ffb55f7560fe8f8434955c2037253fe9bb85479d24d0a322b1416d451a", @nested={0x4, 0x2c}]}, @generic="99ad480d74c48866c8b7720019f56c68467313b5894504b39961313f04caf141604e2655701761f5d9e9c775682eb7da41a579ce9ec29aae84d9917fadd47a7de4b760dc59eafbb5d4cbfb77278dcbd341d8753370dcc96ab6f103a91b5580be2501010c4177a98e0ac5f4", @generic="e2ebf037aaffedd0837134fd74b58d5887051936a7edc1771002c537316100f26354e70a7ccb4dadab7ee4d2aebd9f760ffb0284a19b2ebc11984060eb4a7ee95049d589b2ab10eb5420d08eafc16ce0cbd9ab68cda7619d62a2a103b3543b44ef974988bb2d800647a98b9c49564a1950b15164c8efb1fb93d2eb961b8355367a90bb1d78a4707e3a075e218449720fe996fa7bb528bee40eec323eed0b58cd720433113422f5c06b75636dc075e42a75bc32", @nested={0x8, 0x147, 0x0, 0x1, [@nested={0x4, 0x16}]}, @nested={0x11a, 0x56, 0x0, 0x1, [@generic="4065dd2dee5212174de81c76647f1b569c581b1eddbd62a192f4243c9d98997281e11ac7e149d418248554ee77c19f7a221174da2bfa4a30985b3889d6", @generic="f7b9ac5668a088cd55798e7a3ae3fdd9c9c24276262a65736d0dfb883342227b1e0fe43111071f13676b52193316a39da41abe77d2c3709bbb78f2c65701da857040b3a0b6626d3b454cce21668056b413cf007278849b73303af13f8d02fc7dd89a1d0c60b6a3020af8ec14a91c63fce63c0b9aa526ac4d7e2b31b0f8243c0a99b0d4a63167245b33826f5c764f3a378f5f7009600053144ada16269dfe", @generic="a2760d9c1a5525d1d5e80156bf954bd8376dcb84088ba2523411a12aeca5beb70c9d3ff32786f5a042a24205b5f8db080378e6cc480870", @nested={0x4, 0x63}]}, @nested={0x126, 0x54, 0x0, 0x1, [@typed={0x8d, 0x39, 0x0, 0x0, @binary="1edfb922eea177828b3c21d433f70dc36641b179f818c6576ff11725615ed42663f5b8c7b53aa61b2d72dcfe316ee43588540784faf15180c0fa7bbd10161086a899f23ca49fb15c362160cd369040e3a5a943f2112f6f2e842428976aaffada27a96c998c5b009178827b49d3a4923ae4a2e2e907f9a3e7cab8df9b75b1c8986324a51fe79d826bc8"}, @typed={0x8, 0x39, 0x0, 0x0, @fd=r5}, @generic="f5ee4f2750faa20536c1", @typed={0x8, 0x9f, 0x0, 0x0, @uid=0xee01}, @generic="46a5f26e271f02520710fa13c8e8685f56f421bdd689471bbaa8c2365c7d1c7afa85a77aeab4b12c9caf749130c15df5b87b475e8e160b3c260329fdc19e8c4b1ca7f4da8a77388f653815c5f14613ecde62e2b2", @typed={0x4, 0x111}, @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@loopback}, @generic='.sIz', @typed={0x8, 0x107, 0x0, 0x0, @ipv4=@loopback}]}]}, @TIPC_NLA_NET={0x2fb, 0x7, 0x0, 0x1, [@generic="620ace93e2966afefe6a396d5eb6138c88306b916591c8cab9", @typed={0x14, 0xee, 0x0, 0x0, @ipv6=@loopback}, @generic="46634f9e77b7a3e7efb7e1a01b6d27c45d0816ded4f8d2d7f202e103e1cb7ac742c4025cf93d8c1cd921852a8f011ddbc76a0670e57822678d7dffd91755d07d040d7206a83a930876d190b8dda25e11b21f4439718333f749afea5a3bc91fb603f6361f628e8f0ba3724cef86816b58c541730b02ae849e55b92ae9462b0067d43fd3013a225e48ccc52174b4b40a5e863acb74cf3ba6a04178cac38bcdf724b0114c32bcca", @typed={0x8, 0x122, 0x0, 0x0, @pid}, @nested={0x205, 0xcc, 0x0, 0x1, [@nested={0x4, 0x5d}, @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x10}, @nested={0x4, 0x5}, @typed={0xc6, 0x108, 0x0, 0x0, @binary="e909039ef5e1c9249e3082bd630e1024a6a652f052c7cd39fc600ca66b5e5ef1a6f6a1fe458a87246a2a950913292599339600dc9293fb468db802c4bc487efbf12be1b65b03fc97a8a6a95418d965d69b2e1bdd968c1a96167a500d51ff206aec012355cc1bc898778a1fdad23d54334e6b4cdd8d8f6514e3c399dd469c659aa14fcd0c0e5c231aa165f7f9995b2dc4f74c514c4c7cd0b58218894b11d4c88e8b8b31d019f8a6569ed49a71f427e51126d68761fdebc32cbacc12833433e35dbcff"}, @typed={0x8, 0x72, 0x0, 0x0, @ipv4=@local}, @generic="ec3326bc4dc7593f88a095d31ca0e4c5c34b25f9ddc725936d1e57a063467725a6c761aaf89afc806fa20c47c46843ccb9ee341dbd95dcf64fd7aba9c1231cd1ad032d13ac166820f60b80c5b00bd90afb62c697b1e0940e00cf8890bc91839915b2f69747bf25088a68bb6552d7ab50a8fac46198f1df673c639849f9f2408394", @typed={0xc, 0x4c, 0x0, 0x0, @u64}, @nested={0x4, 0x12e}, @generic="91583d5efacc6ad587a2abf8c0df4b0666218a0f0b228a5c2e8660506e015817febbbcdc310e7895d9d5ef8b5536f78afdc48543c9b68cf55f48c1337b7111659521abb20249b4ffee05caeb58b2967660cd57571ebfe67836a5007aba1aaab2c420e938f5582ebdb77e71daea3baff548230222fefaa219f08625bda86c3344c297a4e0c4ad03b043635748"]}, @typed={0x8, 0x153, 0x0, 0x0, @fd=r4}, @nested={0xc, 0xed, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @fd=r6}]}]}]}, 0x1e90}, 0x1, 0x0, 0x0, 0x4000018}, 0x8800) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r7, 0x0) socket(0x10, 0x2, 0x4) 26.227987566s ago: executing program 1 (id=3540): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffff953, 0x9, 0x4, 0x800019b72, 0x9, 0x4) prctl$auto(0x10001, 0x81, 0x0, 0x4002, 0x7) capget$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x682, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) socket(0x27, 0x80000, 0x1) setsockopt$auto_SO_RCVTIMEO_NEW(r0, 0x8, 0x42, &(0x7f0000000000)='\x00', 0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) process_vm_readv$auto(0xd1d, 0x0, 0x4, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/irq/11/smp_affinity\x00', 0x129542, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 24.377083953s ago: executing program 1 (id=3544): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) unshare$auto(0x40000080) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) r2 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy11/hwsim/rx_rssi\x00', 0x200000, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x10000, 0x0) ioctl$auto_EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0xa53b) read$auto_hwsim_fops_rx_rssi_(r2, 0x0, 0x0) preadv2$auto(r1, 0x0, 0x6, 0x200, 0x8000000000000, 0x2f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) write$auto(r4, 0x0, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r6, 0x936355e497c8b7e5, 0x70bd25, 0x25dddbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r7 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000140), r5) ioctl$auto_BLKPG2(r7, 0x1269, 0x0) 23.005477914s ago: executing program 1 (id=3549): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) listen$auto(0x3, 0x81) r1 = accept$auto(0x3, 0x0, 0x0) setsockopt$auto(r1, 0x10000000084, 0x7d, 0x0, 0xd) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01022bbd7000ffdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000048) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}}) pipe2$auto(&(0x7f00000000c0), 0x0) ioctl$auto(r0, 0x40246f4c, 0x38) 21.854522253s ago: executing program 1 (id=3553): r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x44001, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYBLOB="0101"], 0x20}, 0x1, 0x0, 0x0, 0x60040440}, 0x4c8d0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000000c0), r1) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async, rerun: 32) r3 = socket(0x2, 0x5, 0x0) (rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) (async, rerun: 32) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x9d}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x3}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x6, 0xd, '-\x00'}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x8}, @THERMAL_GENL_ATTR_TZ={0x7c, 0x1, 0x0, 0x1, [@nested={0x78, 0x59, 0x0, 0x1, [@typed={0x56, 0x152, 0x0, 0x0, @binary="9f45fe0bb3172e4d89d7d6c7c31871b1bc7df51c435e18bbe5d0f479db14d0931eec8a4e41c1755d99f2b1e63f92ed129ee9078af99d1027190e5f721db0e6dfc6f32b644d2a833e5a7f2120ca54c15658c2"}, @typed={0x8, 0x1a, 0x0, 0x0, @uid=0xee00}, @typed={0x6, 0xf7, 0x0, 0x0, @str='-\x00'}, @typed={0x8, 0xb8, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x96}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008040}, 0x810) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x2, 0x1, 0x0) (async) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) read$auto(r4, 0x0, 0x7ff) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) io_uring_setup$auto(0x1, 0x0) (async) socket(0x11, 0x3, 0x400) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x500000000000) (async) setresuid$auto(0x0, 0x2, 0x0) (async, rerun: 32) write$auto(0x3, 0x0, 0x5c8) (async, rerun: 32) socket(0x10, 0x2, 0xc) (async, rerun: 64) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) (rerun: 64) 9.97520017s ago: executing program 2 (id=3590): r0 = ioctl$auto_TUNSETLINK(0xffffffffffffffff, 0x400454cd, &(0x7f0000000180)=0x6) mmap$auto(0x4, 0x40009, 0xdf, 0x9b72, r0, 0x28000) socket(0x28, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$auto_RTC_IRQP_READ(r2, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e23, @multicast1}, 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(r1, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020004) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x0, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) socket(0x2, 0x1, 0x106) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0xa901, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x8, 0x7, 0x0, 0x81b6) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000000) 9.188916071s ago: executing program 2 (id=3592): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffff953, 0x9, 0x4, 0x800019b72, 0x9, 0x4) prctl$auto(0x10001, 0x81, 0x0, 0x4002, 0x7) capget$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x682, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) socket(0x27, 0x80000, 0x1) setsockopt$auto_SO_RCVTIMEO_NEW(r0, 0x8, 0x42, &(0x7f0000000000)='\x00', 0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) process_vm_readv$auto(0xd1d, 0x0, 0x4, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/irq/11/smp_affinity\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0xf34) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 7.710463816s ago: executing program 0 (id=3594): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getdents64$auto(0xffffffffffffffff, &(0x7f0000000ac0)={0x5, 0x2, 0x5, 0x10, "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"}, 0x1) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) kexec_load$auto(0x5, 0x2, &(0x7f0000000100)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xfff}, 0x2) unshare$auto(0x8) write$auto(0xca, 0x0, 0x7f) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000005440)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0xfffffffffffffffd) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r1, 0x5427, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) lstat$auto(0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ed9cd97192c906bad7be05b73682eb35511dedde6a063126f31007dda9cdd35fa4e7b94aaf9a9ae4a096e0520df28a89c894"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000340)=',02.15.4 ]\x98\x0f7V\xd4l\xf2AC\x04\xecQ=\xa2\xce\nO}\x1d\xd7\xb5\x92\xf7\xb2\xc2\xddm\xfbR\xfb\x92x\xd8\xb2\x8a&\xda\\\xa1}&^\x03\x02\xf28\xfd|\xed~\a\xaf\x14\xb5.\x92\"-6.\xb2$\x88\xeb\xdc\x0f\xba$?c\x8b\xcb\xf4q\r\xf5>}4\x99(\xb8D\x15\xb8\xc9U\x14\xd6r\xc9\x81\xbbI\xc9+^\x00\xf6\xb5\xd9\x1e\x89G?/\xc5\x86\xd0\xab\xb3\xfd\xc9?\xa7B\x1b\xdc\xff\xab\xb6~\x96\xd6\x9f\x1d\xfb\xa1dg\x9d\x8d]\xdek\x9c0\xea\xb3\nV\x1d\x10g\xaa\xf9\xf0\xc9\n\x8c\xf25G\x9c\x19\xe5\xd8\xa3\xee\x11\x12f\xd5o\x00\xeaY\n\xe0\x9f\r\xd4\x8e9G\x01\x04\xb2j\xbfYX\x9a)OQ\xedk\xb9\x85\x03c\xf3\x80\x10eG(\x94m81PL\x8d\xa47\x1a\x16\x11\xcd\xcdf\x15\r\x19\xc3\x90\xbe\x12\x85V\xeb\x8d\x97\xf0\x9c!\x86:\xe8\x8b\xa7@l', 0x3) getpid() r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xc1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r5, 0x0) r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x364f9cefc8a0a83, 0x0) ioctl$auto_tracing_buffers_fops_trace(r6, 0x5220, 0x0) 7.627459695s ago: executing program 2 (id=3595): mmap$auto(0x34, 0x7, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mlock$auto(0x1000, 0x6) 6.542058832s ago: executing program 32 (id=3553): r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x44001, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYBLOB="0101"], 0x20}, 0x1, 0x0, 0x0, 0x60040440}, 0x4c8d0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000000c0), r1) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async, rerun: 32) r3 = socket(0x2, 0x5, 0x0) (rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) (async, rerun: 32) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x9d}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x3}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x6, 0xd, '-\x00'}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x8}, @THERMAL_GENL_ATTR_TZ={0x7c, 0x1, 0x0, 0x1, [@nested={0x78, 0x59, 0x0, 0x1, [@typed={0x56, 0x152, 0x0, 0x0, @binary="9f45fe0bb3172e4d89d7d6c7c31871b1bc7df51c435e18bbe5d0f479db14d0931eec8a4e41c1755d99f2b1e63f92ed129ee9078af99d1027190e5f721db0e6dfc6f32b644d2a833e5a7f2120ca54c15658c2"}, @typed={0x8, 0x1a, 0x0, 0x0, @uid=0xee00}, @typed={0x6, 0xf7, 0x0, 0x0, @str='-\x00'}, @typed={0x8, 0xb8, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x96}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008040}, 0x810) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x2, 0x1, 0x0) (async) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) read$auto(r4, 0x0, 0x7ff) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) io_uring_setup$auto(0x1, 0x0) (async) socket(0x11, 0x3, 0x400) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x500000000000) (async) setresuid$auto(0x0, 0x2, 0x0) (async, rerun: 32) write$auto(0x3, 0x0, 0x5c8) (async, rerun: 32) socket(0x10, 0x2, 0xc) (async, rerun: 64) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) (rerun: 64) 6.476936736s ago: executing program 0 (id=3598): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC0D0p\x00', 0x40002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x82000000) bpf$auto(0xd, &(0x7f0000000000)=@test={r1, 0x71c, 0xfaab, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x2, 0x1fc, 0xfd, 0xb5, 0x4, 0x40004, 0xd96e}, 0xe3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) r2 = getpid() ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={"7e89de25905a5cd9f8af440325a62fdc442c065b910fffc2799e8d964431c771", 0x8, 0xc, 0xe, 0xfffffffffffffffd, 0x80, r2}) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x6}, 0xffffffff, &(0x7f00000000c0)={&(0x7f0000000440)="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", 0x1}, 0x0, 0xffffffffffffffff) ioctl$auto(r0, 0x400454ca, 0x38) ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, 0x0) 6.292046577s ago: executing program 0 (id=3599): madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0) unshare$auto(0x40000080) times$auto(&(0x7f0000000000)={0x69, 0x8000, 0x800, 0x10}) 4.791344173s ago: executing program 2 (id=3602): openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) (async) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC0D0c\x00', 0x1200, 0x0) readv$auto(r0, &(0x7f00000004c0)={0x0, 0x5}, 0x369) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop11\x00', 0x0, 0x0) mmap$auto(0x6, 0x1, 0x4000000000de, 0x40eb1, r1, 0x1) (async) r2 = socket(0x29, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket(0xa, 0x801, 0x106) setsockopt$auto(r3, 0x6, 0x21, 0x0, 0x10) close_range$auto(r1, r2, 0x1) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) mmap$auto(0x0, 0x400004, 0x9, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000000040)=0x10) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) (async) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)='\t', 0x1) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.5/usb19/tx_lanes\x00', 0x2ab42, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) (async) r8 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r8, 0xaf01, 0x5) 3.198384638s ago: executing program 2 (id=3604): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x22240, 0x1d7) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty14\x00', 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b67, r2) ioctl$auto_FS_IOC_MEASURE_VERITY2(r2, 0xc0046686, &(0x7f0000000040)={0x4b0, 0x10, "6edefdab31ae3093530d892bf35e1a2ab118471121055006f0771eee21861da3455f766cd375f92b2336487829e1ca785809b89f648d8debd6e60da4017e6bf322e93780b0ed43041abe6f45b086ef47714a634d5bb718b68a7c60da5ac5b2a2398400f1000bf60b78b69a96d38ef8e8b7ff3f7851784b24b7cf9ed32b67a855bc207c00b0a1750854d1"}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4c602, 0x0) process_madvise$auto_MADV_WILLNEED(r0, &(0x7f0000000440)={&(0x7f0000000340)="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", 0x9}, 0xfff, 0x3, 0x4) acct$auto(&(0x7f00000002c0)='/dev/rfkill\x00') ioctl$auto(0x3, 0x80106f53, r3) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000180), 0x6, &(0x7f0000000280)={&(0x7f0000000240)="652c472bada965704d", 0x100000000}, 0x8, &(0x7f00000002c0)="874745f20acc2dd961cf189e7def13ef4c4fee73afa92e51864df44d18108144f5875f04104973049cf08e2fe956b04e70360332f1820a", 0x4, 0x4}, 0x9}, 0x2, 0xb) 2.220426999s ago: executing program 2 (id=3605): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0x6, 0x0, 0x1000, 0x0) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xe3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r2 = dup$auto(r1) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r3, 0x81004523, r2) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r4, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) flock$auto(r2, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) 762.765663ms ago: executing program 3 (id=3613): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd6\x00', 0x2c86c3, 0x0) ioctl$auto_IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000000)={0x80000001, 0x6, 0x2}) gettid() (async) r1 = gettid() bpf$auto(0xfffffff7, &(0x7f0000000040)=@task_fd_query={r1, r0, 0xa, 0x2, 0x4, 0x8, r0, 0x9, 0xfffffffffffffff0}, 0xfffffff8) 427.333746ms ago: executing program 3 (id=3614): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x22240, 0x1d7) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty14\x00', 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b67, r2) ioctl$auto_FS_IOC_MEASURE_VERITY2(r2, 0xc0046686, &(0x7f0000000040)={0x4b0, 0x10, "6edefdab31ae3093530d892bf35e1a2ab118471121055006f0771eee21861da3455f766cd375f92b2336487829e1ca785809b89f648d8debd6e60da4017e6bf322e93780b0ed43041abe6f45b086ef47714a634d5bb718b68a7c60da5ac5b2a2398400f1000bf60b78b69a96d38ef8e8b7ff3f7851784b24b7cf9ed32b67a855bc207c00b0a1750854d1"}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4c602, 0x0) process_madvise$auto_MADV_WILLNEED(r0, &(0x7f0000000440)={&(0x7f0000000340)="c690a7877dcc826c0fe064293ded8f5c71dc05223c1c817531452e9fc06bc788457ce6ea3df6269fe585e55b9eb8979cf76ffb01e60231b3c3e634856793214ecb0585d00805f065632aeae7605efb9f79ea93a64a636a6f5da5e71a10c496eeece5c395ed2b7f938b23578b0bb58a6f90f4355549cad9fa876ad41212a6c2868aea5fb65e1c3be7f73fc24fe5bb29f9e8b233120ce77d5c72b5731e0bc390226688df3487d831afa148c84109542a8da569769fa2d28df24ee7f618f5bac5a8f82c4e0ebcde7124db5abc11ffafe9aa483b90fa6048a00b4d9e2e07373eb8a84e953edec282c3122e52b931cf485d4d3dbceb8748aee466f61ac915ea36", 0x9}, 0xfff, 0x3, 0x4) acct$auto(&(0x7f00000002c0)='/dev/rfkill\x00') ioctl$auto(0x3, 0x80106f53, r3) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000180), 0x6, &(0x7f0000000280)={&(0x7f0000000240)="652c472bada965704d", 0x100000000}, 0x8, &(0x7f00000002c0)="874745f20acc2dd961cf189e7def13ef4c4fee73afa92e51864df44d18108144f5875f04104973049cf08e2fe956b04e70360332f1820a", 0x4, 0x4}, 0x9}, 0x2, 0xb) 0s ago: executing program 3 (id=3615): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x28, 0x1, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu3\x00', 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto(r3, 0x89f0, r3) write$auto(r1, 0x0, 0x6) kernel console output (not intermixed with test programs): call_64+0x106/0xf80 [ 134.058714][ T6543] ? clear_bhb_loop+0x40/0x90 [ 134.058751][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.058782][ T6543] RIP: 0033:0x7f355e19c799 [ 134.058808][ T6543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.058835][ T6543] RSP: 002b:00007f355f026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 134.058864][ T6543] RAX: ffffffffffffffda RBX: 00007f355e415fa0 RCX: 00007f355e19c799 [ 134.058883][ T6543] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 134.058900][ T6543] RBP: 00007f355f026090 R08: 0000000000000000 R09: 0000000000000000 [ 134.058916][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.058933][ T6543] R13: 00007f355e416038 R14: 00007f355e415fa0 R15: 00007ffef36906c8 [ 134.058972][ T6543] [ 136.255285][ T6597] FAULT_INJECTION: forcing a failure. [ 136.255285][ T6597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.356683][ T6597] CPU: 1 UID: 0 PID: 6597 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT(full) [ 136.356721][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.356737][ T6597] Call Trace: [ 136.356746][ T6597] [ 136.356757][ T6597] dump_stack_lvl+0x100/0x190 [ 136.356805][ T6597] should_fail_ex.cold+0x5/0xa [ 136.356838][ T6597] _copy_from_iter+0x1f4/0x1690 [ 136.356878][ T6597] ? __pfx__copy_from_iter+0x10/0x10 [ 136.356907][ T6597] ? find_held_lock+0x2b/0x80 [ 136.356935][ T6597] ? pfn_valid+0x2ce/0x4e0 [ 136.356973][ T6597] ? pfn_valid+0x2ce/0x4e0 [ 136.357021][ T6597] copy_page_from_iter+0xde/0x180 [ 136.357055][ T6597] bio_copy_from_iter+0x129/0x280 [ 136.357098][ T6597] blk_rq_map_user_iov+0xa1e/0x14c0 [ 136.357143][ T6597] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 136.357180][ T6597] ? trace_contention_end+0x140/0x180 [ 136.357221][ T6597] ? __mutex_lock+0x26a/0x1b90 [ 136.357258][ T6597] ? rcu_is_watching+0x12/0xc0 [ 136.357301][ T6597] ? find_held_lock+0x2b/0x80 [ 136.357326][ T6597] ? sg_common_write.isra.0+0xe26/0x1b90 [ 136.357368][ T6597] ? sg_common_write.isra.0+0xe26/0x1b90 [ 136.357408][ T6597] ? import_ubuf+0x1b6/0x220 [ 136.357454][ T6597] blk_rq_map_user_io+0x1ff/0x230 [ 136.357498][ T6597] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 136.357531][ T6597] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.357585][ T6597] sg_common_write.isra.0+0xf74/0x1b90 [ 136.357644][ T6597] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 136.357701][ T6597] sg_write+0x7eb/0xdb0 [ 136.357744][ T6597] ? __pfx_sg_write+0x10/0x10 [ 136.357822][ T6597] ? apparmor_file_permission+0x13f/0x1c0 [ 136.357869][ T6597] ? bpf_lsm_file_permission+0x9/0x10 [ 136.357913][ T6597] ? security_file_permission+0x76/0x210 [ 136.357945][ T6597] ? rw_verify_area+0xce/0x6d0 [ 136.357989][ T6597] ? __pfx_sg_write+0x10/0x10 [ 136.358025][ T6597] vfs_writev+0x5ea/0xe10 [ 136.358079][ T6597] ? __pfx_vfs_writev+0x10/0x10 [ 136.358123][ T6597] ? find_held_lock+0x2b/0x80 [ 136.358173][ T6597] ? __fget_files+0x21f/0x3d0 [ 136.358211][ T6597] ? do_writev+0x13e/0x340 [ 136.358251][ T6597] do_writev+0x13e/0x340 [ 136.358294][ T6597] ? __pfx_do_writev+0x10/0x10 [ 136.358348][ T6597] do_syscall_64+0x106/0xf80 [ 136.358382][ T6597] ? clear_bhb_loop+0x40/0x90 [ 136.358418][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.358447][ T6597] RIP: 0033:0x7f355e19c799 [ 136.358479][ T6597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.358505][ T6597] RSP: 002b:00007f355f026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 136.358533][ T6597] RAX: ffffffffffffffda RBX: 00007f355e415fa0 RCX: 00007f355e19c799 [ 136.358551][ T6597] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 136.358568][ T6597] RBP: 00007f355f026090 R08: 0000000000000000 R09: 0000000000000000 [ 136.358584][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.358601][ T6597] R13: 00007f355e416038 R14: 00007f355e415fa0 R15: 00007ffef36906c8 [ 136.358639][ T6597] [ 138.470291][ T6629] FAULT_INJECTION: forcing a failure. [ 138.470291][ T6629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.513148][ T6629] CPU: 1 UID: 0 PID: 6629 Comm: syz.0.192 Not tainted syzkaller #0 PREEMPT(full) [ 138.513186][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.513203][ T6629] Call Trace: [ 138.513212][ T6629] [ 138.513223][ T6629] dump_stack_lvl+0x100/0x190 [ 138.513271][ T6629] should_fail_ex.cold+0x5/0xa [ 138.513305][ T6629] _copy_from_iter+0x1f4/0x1690 [ 138.513343][ T6629] ? __pfx__copy_from_iter+0x10/0x10 [ 138.513374][ T6629] ? find_held_lock+0x2b/0x80 [ 138.513400][ T6629] ? pfn_valid+0x2ce/0x4e0 [ 138.513437][ T6629] ? pfn_valid+0x2ce/0x4e0 [ 138.513486][ T6629] copy_page_from_iter+0xde/0x180 [ 138.513522][ T6629] bio_copy_from_iter+0x129/0x280 [ 138.513565][ T6629] blk_rq_map_user_iov+0xa1e/0x14c0 [ 138.513611][ T6629] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 138.513658][ T6629] ? trace_contention_end+0x140/0x180 [ 138.513701][ T6629] ? __mutex_lock+0x26a/0x1b90 [ 138.513738][ T6629] ? rcu_is_watching+0x12/0xc0 [ 138.513782][ T6629] ? find_held_lock+0x2b/0x80 [ 138.513808][ T6629] ? sg_common_write.isra.0+0xe26/0x1b90 [ 138.513850][ T6629] ? sg_common_write.isra.0+0xe26/0x1b90 [ 138.513890][ T6629] ? import_ubuf+0x1b6/0x220 [ 138.513939][ T6629] blk_rq_map_user_io+0x1ff/0x230 [ 138.513975][ T6629] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 138.514009][ T6629] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.514064][ T6629] sg_common_write.isra.0+0xf74/0x1b90 [ 138.514124][ T6629] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 138.514188][ T6629] sg_write+0x7eb/0xdb0 [ 138.514233][ T6629] ? __pfx_sg_write+0x10/0x10 [ 138.514311][ T6629] ? apparmor_file_permission+0x13f/0x1c0 [ 138.514360][ T6629] ? bpf_lsm_file_permission+0x9/0x10 [ 138.514403][ T6629] ? security_file_permission+0x76/0x210 [ 138.514436][ T6629] ? rw_verify_area+0xce/0x6d0 [ 138.514481][ T6629] ? __pfx_sg_write+0x10/0x10 [ 138.514518][ T6629] vfs_writev+0x5ea/0xe10 [ 138.514571][ T6629] ? __pfx_vfs_writev+0x10/0x10 [ 138.514616][ T6629] ? find_held_lock+0x2b/0x80 [ 138.514673][ T6629] ? __fget_files+0x21f/0x3d0 [ 138.514712][ T6629] ? do_writev+0x13e/0x340 [ 138.514752][ T6629] do_writev+0x13e/0x340 [ 138.514797][ T6629] ? __pfx_do_writev+0x10/0x10 [ 138.514851][ T6629] do_syscall_64+0x106/0xf80 [ 138.514885][ T6629] ? clear_bhb_loop+0x40/0x90 [ 138.514922][ T6629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.514952][ T6629] RIP: 0033:0x7f355e19c799 [ 138.514978][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.515005][ T6629] RSP: 002b:00007f355f026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 138.515033][ T6629] RAX: ffffffffffffffda RBX: 00007f355e415fa0 RCX: 00007f355e19c799 [ 138.515052][ T6629] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 138.515069][ T6629] RBP: 00007f355f026090 R08: 0000000000000000 R09: 0000000000000000 [ 138.515086][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.515102][ T6629] R13: 00007f355e416038 R14: 00007f355e415fa0 R15: 00007ffef36906c8 [ 138.515140][ T6629] [ 139.199462][ T6630] FAULT_INJECTION: forcing a failure. [ 139.199462][ T6630] name failslab, interval 1, probability 0, space 0, times 0 [ 139.287363][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.1.193 Not tainted syzkaller #0 PREEMPT(full) [ 139.287403][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.287421][ T6630] Call Trace: [ 139.287430][ T6630] [ 139.287441][ T6630] dump_stack_lvl+0x100/0x190 [ 139.287490][ T6630] should_fail_ex.cold+0x5/0xa [ 139.287525][ T6630] should_failslab+0xc2/0x120 [ 139.287556][ T6630] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 139.287599][ T6630] ? __proc_create+0x2cb/0x8c0 [ 139.287653][ T6630] __proc_create+0x2cb/0x8c0 [ 139.287711][ T6630] ? __pfx___proc_create+0x10/0x10 [ 139.287764][ T6630] ? _raw_write_unlock+0x28/0x50 [ 139.287804][ T6630] proc_create_reg+0x75/0x170 [ 139.287837][ T6630] proc_create_data+0x86/0x110 [ 139.287864][ T6630] ? __pfx_proc_create_data+0x10/0x10 [ 139.287892][ T6630] ? cache_register_net+0x137/0x5e0 [ 139.287931][ T6630] ? cache_register_net+0x137/0x5e0 [ 139.287977][ T6630] cache_register_net+0x1e0/0x5e0 [ 139.288018][ T6630] gss_svc_init_net+0x98/0x640 [ 139.288048][ T6630] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 139.288086][ T6630] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 139.288120][ T6630] ops_init+0x1e2/0x5f0 [ 139.288161][ T6630] setup_net+0x118/0x3a0 [ 139.288199][ T6630] ? __pfx_setup_net+0x10/0x10 [ 139.288233][ T6630] ? lockdep_init_map_type+0x5c/0x250 [ 139.288273][ T6630] ? mutex_init_lockep+0x110/0x150 [ 139.288318][ T6630] copy_net_ns+0x46f/0x7c0 [ 139.288363][ T6630] create_new_namespaces+0x3ea/0xac0 [ 139.288402][ T6630] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 139.288437][ T6630] ksys_unshare+0x473/0xad0 [ 139.288474][ T6630] ? __pfx_ksys_unshare+0x10/0x10 [ 139.288524][ T6630] __x64_sys_unshare+0x31/0x40 [ 139.288559][ T6630] do_syscall_64+0x106/0xf80 [ 139.288592][ T6630] ? clear_bhb_loop+0x40/0x90 [ 139.288627][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.288656][ T6630] RIP: 0033:0x7f91bc19c799 [ 139.288680][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.288715][ T6630] RSP: 002b:00007f91bd112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 139.288743][ T6630] RAX: ffffffffffffffda RBX: 00007f91bc415fa0 RCX: 00007f91bc19c799 [ 139.288762][ T6630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 139.288780][ T6630] RBP: 00007f91bc232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 139.288798][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.288815][ T6630] R13: 00007f91bc416038 R14: 00007f91bc415fa0 R15: 00007fff2f09a2f8 [ 139.288855][ T6630] [ 141.521639][ T6658] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 142.212112][ T6674] FAULT_INJECTION: forcing a failure. [ 142.212112][ T6674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.234134][ T6674] CPU: 1 UID: 0 PID: 6674 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT(full) [ 142.234180][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.234196][ T6674] Call Trace: [ 142.234205][ T6674] [ 142.234216][ T6674] dump_stack_lvl+0x100/0x190 [ 142.234262][ T6674] should_fail_ex.cold+0x5/0xa [ 142.234296][ T6674] _copy_from_iter+0x1f4/0x1690 [ 142.234332][ T6674] ? __pfx__copy_from_iter+0x10/0x10 [ 142.234361][ T6674] ? find_held_lock+0x2b/0x80 [ 142.234386][ T6674] ? pfn_valid+0x2ce/0x4e0 [ 142.234422][ T6674] ? pfn_valid+0x2ce/0x4e0 [ 142.234469][ T6674] copy_page_from_iter+0xde/0x180 [ 142.234501][ T6674] bio_copy_from_iter+0x129/0x280 [ 142.234541][ T6674] blk_rq_map_user_iov+0xa1e/0x14c0 [ 142.234584][ T6674] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 142.234626][ T6674] ? trace_contention_end+0x140/0x180 [ 142.234665][ T6674] ? __mutex_lock+0x26a/0x1b90 [ 142.234700][ T6674] ? rcu_is_watching+0x12/0xc0 [ 142.234738][ T6674] ? find_held_lock+0x2b/0x80 [ 142.234762][ T6674] ? sg_common_write.isra.0+0xe26/0x1b90 [ 142.234801][ T6674] ? sg_common_write.isra.0+0xe26/0x1b90 [ 142.234839][ T6674] ? import_ubuf+0x1b6/0x220 [ 142.234885][ T6674] blk_rq_map_user_io+0x1ff/0x230 [ 142.234918][ T6674] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 142.234949][ T6674] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.235001][ T6674] sg_common_write.isra.0+0xf74/0x1b90 [ 142.235057][ T6674] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 142.235111][ T6674] sg_write+0x7eb/0xdb0 [ 142.235153][ T6674] ? __pfx_sg_write+0x10/0x10 [ 142.235227][ T6674] ? apparmor_file_permission+0x13f/0x1c0 [ 142.235274][ T6674] ? bpf_lsm_file_permission+0x9/0x10 [ 142.235320][ T6674] ? security_file_permission+0x76/0x210 [ 142.235356][ T6674] ? rw_verify_area+0xce/0x6d0 [ 142.235397][ T6674] ? __pfx_sg_write+0x10/0x10 [ 142.235429][ T6674] vfs_writev+0x5ea/0xe10 [ 142.235479][ T6674] ? __pfx_vfs_writev+0x10/0x10 [ 142.235519][ T6674] ? find_held_lock+0x2b/0x80 [ 142.235562][ T6674] ? __fget_files+0x21f/0x3d0 [ 142.235584][ T6674] ? do_writev+0x13e/0x340 [ 142.235617][ T6674] do_writev+0x13e/0x340 [ 142.235647][ T6674] ? __pfx_do_writev+0x10/0x10 [ 142.235679][ T6674] do_syscall_64+0x106/0xf80 [ 142.235699][ T6674] ? clear_bhb_loop+0x40/0x90 [ 142.235721][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.235739][ T6674] RIP: 0033:0x7f355e19c799 [ 142.235754][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.235771][ T6674] RSP: 002b:00007f355f026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 142.235788][ T6674] RAX: ffffffffffffffda RBX: 00007f355e415fa0 RCX: 00007f355e19c799 [ 142.235802][ T6674] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 142.235812][ T6674] RBP: 00007f355f026090 R08: 0000000000000000 R09: 0000000000000000 [ 142.235822][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.235831][ T6674] R13: 00007f355e416038 R14: 00007f355e415fa0 R15: 00007ffef36906c8 [ 142.235853][ T6674] [ 142.935607][ T6678] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input5 [ 143.216748][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 143.281179][ T6688] block2mtd: Using custom MTD label '' for dev [ 143.317899][ T6688] block2mtd: error: cannot open device [ 143.323751][ T6689] block2mtd: Using custom MTD label '' for dev [ 143.397071][ T6689] block2mtd: error: cannot open device [ 143.767652][ T6702] FAULT_INJECTION: forcing a failure. [ 143.767652][ T6702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.825502][ T6702] CPU: 0 UID: 0 PID: 6702 Comm: syz.2.213 Not tainted syzkaller #0 PREEMPT(full) [ 143.825541][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.825557][ T6702] Call Trace: [ 143.825567][ T6702] [ 143.825579][ T6702] dump_stack_lvl+0x100/0x190 [ 143.825628][ T6702] should_fail_ex.cold+0x5/0xa [ 143.825663][ T6702] _copy_from_iter+0x1f4/0x1690 [ 143.825702][ T6702] ? __pfx__copy_from_iter+0x10/0x10 [ 143.825733][ T6702] ? find_held_lock+0x2b/0x80 [ 143.825761][ T6702] ? pfn_valid+0x2ce/0x4e0 [ 143.825801][ T6702] ? pfn_valid+0x2ce/0x4e0 [ 143.825850][ T6702] copy_page_from_iter+0xde/0x180 [ 143.825885][ T6702] bio_copy_from_iter+0x129/0x280 [ 143.825929][ T6702] blk_rq_map_user_iov+0xa1e/0x14c0 [ 143.825974][ T6702] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 143.826013][ T6702] ? trace_contention_end+0x140/0x180 [ 143.826052][ T6702] ? __mutex_lock+0x26a/0x1b90 [ 143.826088][ T6702] ? rcu_is_watching+0x12/0xc0 [ 143.826130][ T6702] ? find_held_lock+0x2b/0x80 [ 143.826163][ T6702] ? sg_common_write.isra.0+0xe26/0x1b90 [ 143.826205][ T6702] ? sg_common_write.isra.0+0xe26/0x1b90 [ 143.826245][ T6702] ? import_ubuf+0x1b6/0x220 [ 143.826294][ T6702] blk_rq_map_user_io+0x1ff/0x230 [ 143.826331][ T6702] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 143.826364][ T6702] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.826427][ T6702] sg_common_write.isra.0+0xf74/0x1b90 [ 143.826487][ T6702] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 143.826545][ T6702] sg_write+0x7eb/0xdb0 [ 143.826590][ T6702] ? __pfx_sg_write+0x10/0x10 [ 143.826666][ T6702] ? apparmor_file_permission+0x13f/0x1c0 [ 143.826715][ T6702] ? bpf_lsm_file_permission+0x9/0x10 [ 143.826760][ T6702] ? security_file_permission+0x76/0x210 [ 143.826792][ T6702] ? rw_verify_area+0xce/0x6d0 [ 143.826836][ T6702] ? __pfx_sg_write+0x10/0x10 [ 143.826873][ T6702] vfs_writev+0x5ea/0xe10 [ 143.826927][ T6702] ? __pfx_vfs_writev+0x10/0x10 [ 143.826973][ T6702] ? find_held_lock+0x2b/0x80 [ 143.827023][ T6702] ? __fget_files+0x21f/0x3d0 [ 143.827062][ T6702] ? do_writev+0x13e/0x340 [ 143.827104][ T6702] do_writev+0x13e/0x340 [ 143.827148][ T6702] ? __pfx_do_writev+0x10/0x10 [ 143.827201][ T6702] do_syscall_64+0x106/0xf80 [ 143.827235][ T6702] ? clear_bhb_loop+0x40/0x90 [ 143.827272][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.827302][ T6702] RIP: 0033:0x7fd7fcb9c799 [ 143.827325][ T6702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.827351][ T6702] RSP: 002b:00007fd7fdab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 143.827379][ T6702] RAX: ffffffffffffffda RBX: 00007fd7fce15fa0 RCX: 00007fd7fcb9c799 [ 143.827406][ T6702] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 143.827423][ T6702] RBP: 00007fd7fdab2090 R08: 0000000000000000 R09: 0000000000000000 [ 143.827439][ T6702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.827455][ T6702] R13: 00007fd7fce16038 R14: 00007fd7fce15fa0 R15: 00007ffd33f96e28 [ 143.827494][ T6702] [ 144.462779][ T6709] FAULT_INJECTION: forcing a failure. [ 144.462779][ T6709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.527450][ T6709] CPU: 1 UID: 0 PID: 6709 Comm: syz.3.216 Not tainted syzkaller #0 PREEMPT(full) [ 144.527495][ T6709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.527513][ T6709] Call Trace: [ 144.527523][ T6709] [ 144.527535][ T6709] dump_stack_lvl+0x100/0x190 [ 144.527585][ T6709] should_fail_ex.cold+0x5/0xa [ 144.527622][ T6709] _copy_from_user+0x2e/0xd0 [ 144.527653][ T6709] __do_sys_capset+0x1ec/0x460 [ 144.527684][ T6709] ? __pfx___do_sys_capset+0x10/0x10 [ 144.527717][ T6709] ? __x64_sys_futex+0x358/0x4d0 [ 144.527757][ T6709] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 144.527792][ T6709] ? xfd_validate_state+0x129/0x190 [ 144.527850][ T6709] do_syscall_64+0x106/0xf80 [ 144.527886][ T6709] ? clear_bhb_loop+0x40/0x90 [ 144.527924][ T6709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.527955][ T6709] RIP: 0033:0x7f847f99c799 [ 144.527981][ T6709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.528010][ T6709] RSP: 002b:00007f847dbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 144.528042][ T6709] RAX: ffffffffffffffda RBX: 00007f847fc15fa0 RCX: 00007f847f99c799 [ 144.528062][ T6709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 144.528081][ T6709] RBP: 00007f847fa32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 144.528098][ T6709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.528113][ T6709] R13: 00007f847fc16038 R14: 00007f847fc15fa0 R15: 00007fff8034bc68 [ 144.528152][ T6709] [ 144.736892][ T6717] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.595529][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 146.813031][ T6735] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.819658][ T6735] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.867828][ T6735] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.905920][ T6752] FAULT_INJECTION: forcing a failure. [ 146.905920][ T6752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.942100][ T6735] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.950865][ T6735] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.956935][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(full) [ 146.956971][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 146.956986][ T6752] Call Trace: [ 146.956995][ T6752] [ 146.957005][ T6752] dump_stack_lvl+0x100/0x190 [ 146.957048][ T6752] should_fail_ex.cold+0x5/0xa [ 146.957082][ T6752] _copy_from_user+0x2e/0xd0 [ 146.957113][ T6752] sg_write+0x2af/0xdb0 [ 146.957160][ T6752] ? __pfx_sg_write+0x10/0x10 [ 146.957231][ T6752] ? apparmor_file_permission+0x13f/0x1c0 [ 146.957276][ T6752] ? bpf_lsm_file_permission+0x9/0x10 [ 146.957316][ T6752] ? security_file_permission+0x76/0x210 [ 146.957345][ T6752] ? iov_iter_advance+0xac/0x6d0 [ 146.957387][ T6752] ? rw_verify_area+0xce/0x6d0 [ 146.957442][ T6752] ? __pfx_sg_write+0x10/0x10 [ 146.957478][ T6752] vfs_writev+0x5ea/0xe10 [ 146.957529][ T6752] ? __pfx_vfs_writev+0x10/0x10 [ 146.957574][ T6752] ? find_held_lock+0x2b/0x80 [ 146.957640][ T6752] ? __fget_files+0x21f/0x3d0 [ 146.957678][ T6752] ? do_writev+0x13e/0x340 [ 146.957719][ T6752] do_writev+0x13e/0x340 [ 146.957762][ T6752] ? __pfx_do_writev+0x10/0x10 [ 146.957820][ T6752] do_syscall_64+0x106/0xf80 [ 146.957850][ T6752] ? clear_bhb_loop+0x40/0x90 [ 146.957885][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.957915][ T6752] RIP: 0033:0x7f355e19c799 [ 146.957938][ T6752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.957964][ T6752] RSP: 002b:00007f355f026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 146.957991][ T6752] RAX: ffffffffffffffda RBX: 00007f355e415fa0 RCX: 00007f355e19c799 [ 146.958009][ T6752] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 146.958025][ T6752] RBP: 00007f355f026090 R08: 0000000000000000 R09: 0000000000000000 [ 146.958042][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.958057][ T6752] R13: 00007f355e416038 R14: 00007f355e415fa0 R15: 00007ffef36906c8 [ 146.958095][ T6752] [ 147.176859][ T6735] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.206663][ T6735] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.212972][ T6735] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.240359][ T6735] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.287158][ T6735] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.316261][ T6735] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.316351][ T6735] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.361324][ T6735] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.435908][ T6746] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.436135][ T6746] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.436313][ T6746] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.436509][ T6746] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.096877][ T30] audit: type=1326 audit(2147483651.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.2.226" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7fcb9c799 code=0x0 [ 148.244036][ T6769] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 148.778263][ T6782] raw_sendmsg: syz.1.234 forgot to set AF_INET. Fix it! [ 149.038482][ T6784] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 149.219989][ T6797] FAULT_INJECTION: forcing a failure. [ 149.219989][ T6797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.264812][ T6797] CPU: 1 UID: 0 PID: 6797 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) [ 149.264837][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.264847][ T6797] Call Trace: [ 149.264853][ T6797] [ 149.264860][ T6797] dump_stack_lvl+0x100/0x190 [ 149.264891][ T6797] should_fail_ex.cold+0x5/0xa [ 149.264912][ T6797] _copy_to_user+0x32/0xd0 [ 149.264931][ T6797] simple_read_from_buffer+0xcb/0x170 [ 149.264960][ T6797] proc_fail_nth_read+0x1af/0x230 [ 149.264982][ T6797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.265004][ T6797] ? rw_verify_area+0xce/0x6d0 [ 149.265029][ T6797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.265049][ T6797] vfs_read+0x1e4/0xb30 [ 149.265079][ T6797] ? __pfx_vfs_read+0x10/0x10 [ 149.265106][ T6797] ? __fget_files+0x215/0x3d0 [ 149.265127][ T6797] ? __fget_files+0x21f/0x3d0 [ 149.265148][ T6797] ksys_read+0x12a/0x250 [ 149.265175][ T6797] ? __pfx_ksys_read+0x10/0x10 [ 149.265208][ T6797] do_syscall_64+0x106/0xf80 [ 149.265230][ T6797] ? clear_bhb_loop+0x40/0x90 [ 149.265251][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.265270][ T6797] RIP: 0033:0x7f91bc15cfce [ 149.265285][ T6797] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.265314][ T6797] RSP: 002b:00007f91bd111fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.265341][ T6797] RAX: ffffffffffffffda RBX: 00007f91bd1126c0 RCX: 00007f91bc15cfce [ 149.265359][ T6797] RDX: 000000000000000f RSI: 00007f91bd1120a0 RDI: 0000000000000004 [ 149.265386][ T6797] RBP: 00007f91bd112090 R08: 0000000000000000 R09: 0000000000000000 [ 149.265403][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.265419][ T6797] R13: 00007f91bc416038 R14: 00007f91bc415fa0 R15: 00007fff2f09a2f8 [ 149.265467][ T6797] [ 149.465837][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.472863][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.479087][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.485496][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.765952][ T6805] FAULT_INJECTION: forcing a failure. [ 149.765952][ T6805] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 149.796030][ T6805] CPU: 0 UID: 0 PID: 6805 Comm: syz.3.240 Not tainted syzkaller #0 PREEMPT(full) [ 149.796074][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.796092][ T6805] Call Trace: [ 149.796102][ T6805] [ 149.796114][ T6805] dump_stack_lvl+0x100/0x190 [ 149.796168][ T6805] should_fail_ex.cold+0x5/0xa [ 149.796197][ T6805] ? prepare_alloc_pages+0x16d/0x5f0 [ 149.796238][ T6805] should_fail_alloc_page+0xeb/0x140 [ 149.796273][ T6805] prepare_alloc_pages+0x1f0/0x5f0 [ 149.796316][ T6805] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 149.796374][ T6805] ? mas_next_slot+0x1003/0x18b0 [ 149.796437][ T6805] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 149.796481][ T6805] ? validate_mm+0x261/0x4e0 [ 149.796531][ T6805] ? mas_prev_slot+0x67b/0x1c10 [ 149.796591][ T6805] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.796645][ T6805] ? policy_nodemask+0xed/0x4f0 [ 149.796680][ T6805] alloc_pages_mpol+0x1fb/0x550 [ 149.796715][ T6805] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 149.796760][ T6805] alloc_pages_noprof+0x131/0x390 [ 149.796796][ T6805] __pmd_alloc+0x3b/0x9c0 [ 149.796836][ T6805] __handle_mm_fault+0xa99/0x2b60 [ 149.796885][ T6805] ? mt_find+0x45e/0x8e0 [ 149.796926][ T6805] ? __pfx___handle_mm_fault+0x10/0x10 [ 149.796964][ T6805] ? __pfx_mt_find+0x10/0x10 [ 149.797039][ T6805] handle_mm_fault+0x36d/0xa20 [ 149.797091][ T6805] __get_user_pages+0xf9c/0x34d0 [ 149.797141][ T6805] ? __pfx___get_user_pages+0x10/0x10 [ 149.797189][ T6805] populate_vma_page_range+0x267/0x3f0 [ 149.797229][ T6805] ? __pfx_populate_vma_page_range+0x10/0x10 [ 149.797264][ T6805] ? __pfx_find_vma_intersection+0x10/0x10 [ 149.797299][ T6805] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 149.797350][ T6805] __mm_populate+0x107/0x3a0 [ 149.797388][ T6805] ? __pfx___mm_populate+0x10/0x10 [ 149.797436][ T6805] ? up_write+0x290/0x4f0 [ 149.797485][ T6805] do_mlock+0x3f0/0x7f0 [ 149.797534][ T6805] ? __pfx_do_mlock+0x10/0x10 [ 149.797576][ T6805] ? __x64_sys_futex+0x34f/0x4d0 [ 149.797614][ T6805] ? __x64_sys_futex+0x358/0x4d0 [ 149.797657][ T6805] ? xfd_validate_state+0x129/0x190 [ 149.797715][ T6805] __x64_sys_mlock+0x59/0x80 [ 149.797760][ T6805] do_syscall_64+0x106/0xf80 [ 149.797795][ T6805] ? clear_bhb_loop+0x40/0x90 [ 149.797835][ T6805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.797865][ T6805] RIP: 0033:0x7f847f99c799 [ 149.797891][ T6805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.797920][ T6805] RSP: 002b:00007f847dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 149.797950][ T6805] RAX: ffffffffffffffda RBX: 00007f847fc15fa0 RCX: 00007f847f99c799 [ 149.797969][ T6805] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112 [ 149.797987][ T6805] RBP: 00007f847fa32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 149.798005][ T6805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.798022][ T6805] R13: 00007f847fc16038 R14: 00007f847fc15fa0 R15: 00007fff8034bc68 [ 149.798063][ T6805] [ 151.545437][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.545494][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.551509][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.557604][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.625552][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.631762][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.631783][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.637818][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.708343][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.845906][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.857680][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.866466][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.898616][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.908725][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.401986][ T1310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.627014][ T1310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.824915][ T1310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.051525][ T1310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.695986][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.702362][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.861438][ T9570] chnl_net:caif_netlink_parms(): no params data found [ 194.939413][ T1310] bridge_slave_1: left allmulticast mode [ 194.962953][ T1310] bridge_slave_1: left promiscuous mode [ 194.985398][ T5835] Bluetooth: hci2: command tx timeout [ 194.992718][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.102652][ T1310] bridge_slave_0: left allmulticast mode [ 195.139946][ T1310] bridge_slave_0: left promiscuous mode [ 195.148802][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.189601][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.252963][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.317286][ T1310] bond0 (unregistering): Released all slaves [ 197.072353][ T5835] Bluetooth: hci2: command tx timeout [ 197.311719][ T1310] hsr_slave_0: left promiscuous mode [ 197.386906][ T1310] hsr_slave_1: left promiscuous mode [ 197.415985][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.423655][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.521914][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.550576][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.678609][ T1310] veth1_macvtap: left promiscuous mode [ 197.684501][ T1310] veth0_macvtap: left promiscuous mode [ 197.744506][ T1310] veth1_vlan: left promiscuous mode [ 197.755673][ T1310] veth0_vlan: left promiscuous mode [ 199.162249][ T5835] Bluetooth: hci2: command tx timeout [ 199.859456][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 200.046133][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 200.885109][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.938696][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.951214][ T9570] bridge_slave_0: entered allmulticast mode [ 200.963679][ T9570] bridge_slave_0: entered promiscuous mode [ 201.021876][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.040684][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.053781][ T9570] bridge_slave_1: entered allmulticast mode [ 201.062644][ T9570] bridge_slave_1: entered promiscuous mode [ 201.234144][ T5835] Bluetooth: hci2: command tx timeout [ 201.306619][ T9570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.416908][ T9570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.738665][ T9570] team0: Port device team_slave_0 added [ 201.792310][ T9570] team0: Port device team_slave_1 added [ 201.981036][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.006811][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.092185][ T9570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.275787][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.282808][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.384577][ T9570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.693551][ T9570] hsr_slave_0: entered promiscuous mode [ 202.730576][ T9570] hsr_slave_1: entered promiscuous mode [ 202.778296][ T9570] debugfs: 'hsr0' already exists in 'hsr' [ 202.784195][ T9570] Cannot create hsr debugfs directory [ 204.978517][ T9570] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.033990][ T9570] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.135056][ T9570] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.237753][ T9570] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 205.798248][ T9570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.902006][ T9570] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.002940][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.010335][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.120304][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.127534][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.190209][ T9570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.463706][ T9570] veth0_vlan: entered promiscuous mode [ 207.518081][ T9570] veth1_vlan: entered promiscuous mode [ 207.674213][ T9570] veth0_macvtap: entered promiscuous mode [ 207.767412][ T9570] veth1_macvtap: entered promiscuous mode [ 207.870709][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.941698][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.095841][ T3550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.164092][ T3550] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.195831][ T3550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.262844][ T3550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.636803][ T6204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.644677][ T6204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.943706][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.976768][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.445079][T10211] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 210.020320][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.050806][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.063407][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.092625][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.116794][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.456711][ T5824] bridge0: port 3(syz_tun) entered disabled state [ 210.571070][ T5824] syz_tun (unregistering): left allmulticast mode [ 210.635445][ T5824] syz_tun (unregistering): left promiscuous mode [ 210.643001][ T5824] bridge0: port 3(syz_tun) entered disabled state [ 211.298015][ T6204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.670494][ T6204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.791767][T10270] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2847'. [ 212.071741][ T6204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.188235][ T51] Bluetooth: hci4: command tx timeout [ 212.532950][ T6204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.418406][T10231] chnl_net:caif_netlink_parms(): no params data found [ 214.219531][ T6204] bridge_slave_1: left allmulticast mode [ 214.226353][ T6204] bridge_slave_1: left promiscuous mode [ 214.232329][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.276517][ T51] Bluetooth: hci4: command tx timeout [ 214.326768][ T6204] bridge_slave_0: left allmulticast mode [ 214.335395][ T6204] bridge_slave_0: left promiscuous mode [ 214.342443][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.574255][ T6204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.659069][ T6204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.712366][ T6204] bond0 (unregistering): Released all slaves [ 216.061840][ T6204] Â: left promiscuous mode [ 216.202691][T10231] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.230198][T10231] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.271187][T10231] bridge_slave_0: entered allmulticast mode [ 216.315368][T10231] bridge_slave_0: entered promiscuous mode [ 216.346414][ T51] Bluetooth: hci4: command tx timeout [ 216.366675][T10231] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.429778][T10231] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.455157][T10231] bridge_slave_1: entered allmulticast mode [ 216.508073][T10231] bridge_slave_1: entered promiscuous mode [ 217.003263][T10231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.074886][T10231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.475667][ T6204] hsr_slave_0: left promiscuous mode [ 217.512124][ T6204] hsr_slave_1: left promiscuous mode [ 217.526699][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.534438][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.598114][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.615383][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.681517][ T6204] veth1_macvtap: left promiscuous mode [ 217.696984][ T6204] veth0_macvtap: left promiscuous mode [ 217.702920][ T6204] veth1_vlan: left promiscuous mode [ 217.738231][ T6204] veth0_vlan: left promiscuous mode [ 217.812114][T10458] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 218.428415][ T51] Bluetooth: hci4: command tx timeout [ 218.953804][ T6204] team0 (unregistering): Port device team_slave_1 removed [ 219.182924][ T6204] team0 (unregistering): Port device team_slave_0 removed [ 219.763600][ T6204] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 219.947194][T10231] team0: Port device team_slave_0 added [ 219.981161][T10231] team0: Port device team_slave_1 added [ 220.279782][T10231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.304175][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.412348][T10231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.487927][T10231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.511446][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.614186][T10231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.266823][T10231] hsr_slave_0: entered promiscuous mode [ 221.274151][T10231] hsr_slave_1: entered promiscuous mode [ 222.959846][T10617] process 'syz.1.3073' launched ':,' with NULL argv: empty string added [ 224.182395][T10231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.340363][T10231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.477967][T10231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.552665][T10231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.956788][T10231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.043342][T10231] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.099160][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.106503][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.169359][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.176622][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.256367][T10231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.742620][T10231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.897787][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.904334][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.966844][T10231] veth0_vlan: entered promiscuous mode [ 226.008293][T10231] veth1_vlan: entered promiscuous mode [ 226.194840][T10231] veth0_macvtap: entered promiscuous mode [ 226.220094][T10231] veth1_macvtap: entered promiscuous mode [ 226.327471][T10231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.362105][T10231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.426334][ T6204] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.459281][ T6204] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.506645][ T6204] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.528998][ T6204] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.885524][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.893664][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.972668][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 227.147803][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.163005][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.823234][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.833923][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.855597][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.875979][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.888376][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.114551][ T5823] bridge0: port 3(syz_tun) entered disabled state [ 228.167687][ T5823] syz_tun (unregistering): left allmulticast mode [ 228.194639][ T5823] syz_tun (unregistering): left promiscuous mode [ 228.213390][ T5823] bridge0: port 3(syz_tun) entered disabled state [ 228.948276][T10784] chnl_net:caif_netlink_parms(): no params data found [ 229.840397][T10784] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.855504][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.880870][T10784] bridge_slave_0: entered allmulticast mode [ 229.923720][T10784] bridge_slave_0: entered promiscuous mode [ 229.945370][ T5835] Bluetooth: hci0: command tx timeout [ 230.118362][T10784] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.146327][T10784] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.153634][T10784] bridge_slave_1: entered allmulticast mode [ 230.212467][T10784] bridge_slave_1: entered promiscuous mode [ 230.439315][T10784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.453260][T10784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.509568][T10784] team0: Port device team_slave_0 added [ 230.538983][T10784] team0: Port device team_slave_1 added [ 230.601452][T10784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.625431][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.656100][T10784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.684018][T10784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.705343][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.755591][T10784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.987511][T10784] hsr_slave_0: entered promiscuous mode [ 231.011410][T10784] hsr_slave_1: entered promiscuous mode [ 231.036383][T10784] debugfs: 'hsr0' already exists in 'hsr' [ 231.042364][T10784] Cannot create hsr debugfs directory [ 231.050335][T10846] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3166'. [ 231.125948][T10858] netlink: 'syz.2.3170': attribute type 4 has an invalid length. [ 231.710275][T10784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.964055][T10784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.035517][ T5835] Bluetooth: hci0: command tx timeout [ 232.207593][T10784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.377500][T10784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.609018][T10784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.634867][T10784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.646001][T10784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.660128][T10784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.810204][T10784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.857731][T10784] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.886928][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.894180][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.022965][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.030330][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.411227][T10784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.490646][T10784] veth0_vlan: entered promiscuous mode [ 233.507156][T10784] veth1_vlan: entered promiscuous mode [ 233.590138][T10784] veth0_macvtap: entered promiscuous mode [ 233.613868][T10784] veth1_macvtap: entered promiscuous mode [ 233.653176][T10784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.676647][T10784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.705217][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.717819][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.758395][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.782217][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.868089][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.881773][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.943743][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.954238][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.106735][ T5835] Bluetooth: hci0: command tx timeout [ 234.489184][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.500410][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.526887][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.538245][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.550878][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.886144][T10914] netlink: 'syz.1.3186': attribute type 4 has an invalid length. [ 235.913628][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.975007][T10911] chnl_net:caif_netlink_parms(): no params data found [ 236.104295][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.188950][ T51] Bluetooth: hci0: command tx timeout [ 236.357249][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.592050][ T51] Bluetooth: hci1: command tx timeout [ 236.637846][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.697563][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.715221][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.722730][T10911] bridge_slave_0: entered allmulticast mode [ 236.763749][T10911] bridge_slave_0: entered promiscuous mode [ 236.783281][T10911] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.807591][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.816079][T10911] bridge_slave_1: entered allmulticast mode [ 236.830774][T10911] bridge_slave_1: entered promiscuous mode [ 237.204606][T10911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.347262][T10911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.596848][T10911] team0: Port device team_slave_0 added [ 237.629107][T10911] team0: Port device team_slave_1 added [ 237.909706][ T13] bridge_slave_1: left allmulticast mode [ 237.922187][ T13] bridge_slave_1: left promiscuous mode [ 237.938787][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.090959][ T13] bridge_slave_0: left allmulticast mode [ 238.096845][ T13] bridge_slave_0: left promiscuous mode [ 238.115384][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.203926][ T13] bridge_slave_1: left allmulticast mode [ 238.233518][ T13] bridge_slave_1: left promiscuous mode [ 238.274578][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.365743][ T13] bridge_slave_0: left allmulticast mode [ 238.393193][ T13] bridge_slave_0: left promiscuous mode [ 238.435651][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.672011][ T51] Bluetooth: hci1: command tx timeout [ 238.895797][T10981] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 239.510659][T10995] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 239.619393][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.639023][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.679469][ T13] bond0 (unregistering): Released all slaves [ 239.957964][T11004] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 240.052061][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.071019][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.098169][ T13] bond0 (unregistering): Released all slaves [ 240.234418][ T13] Â: left promiscuous mode [ 240.251046][T10911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.259352][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.301179][T10911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.376586][T10911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.401773][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.453782][T10911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.753898][ T51] Bluetooth: hci1: command tx timeout [ 241.069399][T10911] hsr_slave_0: entered promiscuous mode [ 241.081701][T10911] hsr_slave_1: entered promiscuous mode [ 241.094424][T10911] debugfs: 'hsr0' already exists in 'hsr' [ 241.100725][T10911] Cannot create hsr debugfs directory [ 241.675517][ T13] hsr_slave_0: left promiscuous mode [ 241.691153][T11021] netlink: NAT attribute has 18 unknown bytes [ 241.700307][ T13] hsr_slave_1: left promiscuous mode [ 241.724990][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.744636][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.770071][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.809540][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.909089][ T13] hsr_slave_0: left promiscuous mode [ 241.915239][ T13] hsr_slave_1: left promiscuous mode [ 241.927243][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.934713][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.949855][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.957655][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.983922][ T13] veth1_macvtap: left promiscuous mode [ 241.989723][ T13] veth0_macvtap: left promiscuous mode [ 241.995926][ T13] veth1_vlan: left promiscuous mode [ 242.001328][ T13] veth0_vlan: left promiscuous mode [ 242.010030][ T13] veth1_macvtap: left promiscuous mode [ 242.015853][ T13] veth0_macvtap: left promiscuous mode [ 242.021484][ T13] veth1_vlan: left promiscuous mode [ 242.080085][ T13] veth0_vlan: left promiscuous mode [ 242.401497][T11033] zswap: compressor not available [ 242.825381][ T51] Bluetooth: hci1: command tx timeout [ 242.848639][ T13] team0 (unregistering): Port device team_slave_1 removed [ 242.899438][ T13] team0 (unregistering): Port device team_slave_0 removed [ 243.032142][ T13] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 243.279306][ T13] team0 (unregistering): Port device team_slave_1 removed [ 243.301244][ T13] team0 (unregistering): Port device team_slave_0 removed [ 244.957010][T11074] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3213'. [ 245.665348][T10911] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.716312][T10911] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.818794][T10911] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.885151][T10911] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.341840][T10911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.438992][T10911] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.502046][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.509340][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.531508][T11114] Invalid ELF header magic: != ELF [ 246.652279][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.659567][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.080444][T10911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.254503][T10911] veth0_vlan: entered promiscuous mode [ 248.322945][T10911] veth1_vlan: entered promiscuous mode [ 248.511175][T10911] veth0_macvtap: entered promiscuous mode [ 248.531936][T11157] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3223'. [ 248.562046][T10911] veth1_macvtap: entered promiscuous mode [ 248.802073][T11164] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 248.860539][T10911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.880435][T11161] zswap: compressor not available [ 248.979847][T10911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.051469][T11153] FAULT_INJECTION: forcing a failure. [ 249.051469][T11153] name failslab, interval 1, probability 0, space 0, times 0 [ 249.099193][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.135508][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.162776][T11153] CPU: 0 UID: 0 PID: 11153 Comm: syz.0.3222 Not tainted syzkaller #0 PREEMPT(full) [ 249.162830][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.162849][T11153] Call Trace: [ 249.162859][T11153] [ 249.162872][T11153] dump_stack_lvl+0x100/0x190 [ 249.162926][T11153] should_fail_ex.cold+0x5/0xa [ 249.162963][T11153] ? __register_sysctl_table+0xbe4/0x1650 [ 249.163013][T11153] should_failslab+0xc2/0x120 [ 249.163046][T11153] __kmalloc_noprof+0xe0/0x850 [ 249.163102][T11153] __register_sysctl_table+0xbe4/0x1650 [ 249.163160][T11153] ? __pfx___register_sysctl_table+0x10/0x10 [ 249.163208][T11153] ? is_module_address+0x69/0xf0 [ 249.163245][T11153] ? register_net_sysctl_sz+0x222/0x430 [ 249.163289][T11153] ? __asan_memcpy+0x3c/0x60 [ 249.163337][T11153] sctp_sysctl_net_register+0x15e/0x200 [ 249.163379][T11153] ? __pfx_sctp_defaults_init+0x10/0x10 [ 249.163417][T11153] sctp_defaults_init+0x6d2/0xd90 [ 249.163456][T11153] ? __pfx_sctp_defaults_init+0x10/0x10 [ 249.163494][T11153] ops_init+0x1e2/0x5f0 [ 249.163539][T11153] setup_net+0x118/0x3a0 [ 249.163579][T11153] ? __pfx_setup_net+0x10/0x10 [ 249.163613][T11153] ? lockdep_init_map_type+0x5c/0x250 [ 249.163655][T11153] ? mutex_init_lockep+0x110/0x150 [ 249.163704][T11153] copy_net_ns+0x46f/0x7c0 [ 249.163752][T11153] create_new_namespaces+0x3ea/0xac0 [ 249.163803][T11153] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 249.163842][T11153] ksys_unshare+0x473/0xad0 [ 249.163881][T11153] ? __pfx_ksys_unshare+0x10/0x10 [ 249.163934][T11153] __x64_sys_unshare+0x31/0x40 [ 249.163972][T11153] do_syscall_64+0x106/0xf80 [ 249.164008][T11153] ? clear_bhb_loop+0x40/0x90 [ 249.164045][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.164077][T11153] RIP: 0033:0x7ff0acd9c799 [ 249.164104][T11153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.164133][T11153] RSP: 002b:00007ff0add13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 249.164164][T11153] RAX: ffffffffffffffda RBX: 00007ff0ad015fa0 RCX: 00007ff0acd9c799 [ 249.164184][T11153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 249.164203][T11153] RBP: 00007ff0ace32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 249.164227][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.164245][T11153] R13: 00007ff0ad016038 R14: 00007ff0ad015fa0 R15: 00007ffe2bdb4f58 [ 249.164286][T11153] [ 249.164299][T11153] sysctl could not get directory: /net/sctp -12 [ 249.521829][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.534611][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.065006][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.111969][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.307186][ T6203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.335393][ T6203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.563310][ T30] audit: type=1804 audit(2147483753.750:7): pid=11153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3222" name="/newroot/11/file0" dev="tmpfs" ino=78 res=1 errno=0 [ 250.861476][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3189'. [ 251.657596][T11238] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 253.563468][T11300] netlink: 'syz.2.3244': attribute type 1 has an invalid length. [ 253.604338][T11281] FAULT_INJECTION: forcing a failure. [ 253.604338][T11281] name failslab, interval 1, probability 0, space 0, times 0 [ 253.666521][T11281] CPU: 1 UID: 0 PID: 11281 Comm: syz.1.3240 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.666555][T11281] Tainted: [L]=SOFTLOCKUP [ 253.666561][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.666572][T11281] Call Trace: [ 253.666578][T11281] [ 253.666585][T11281] dump_stack_lvl+0x100/0x190 [ 253.666617][T11281] should_fail_ex.cold+0x5/0xa [ 253.666638][T11281] ? __register_sysctl_table+0xac/0x1650 [ 253.666667][T11281] should_failslab+0xc2/0x120 [ 253.666686][T11281] __kmalloc_noprof+0xe0/0x850 [ 253.666717][T11281] __register_sysctl_table+0xac/0x1650 [ 253.666745][T11281] ? is_module_address+0x5f/0xf0 [ 253.666782][T11281] ? __pfx___register_sysctl_table+0x10/0x10 [ 253.666811][T11281] ? is_module_address+0x69/0xf0 [ 253.666833][T11281] ? register_net_sysctl_sz+0x222/0x430 [ 253.666860][T11281] ? __asan_memcpy+0x3c/0x60 [ 253.666888][T11281] sctp_sysctl_net_register+0x15e/0x200 [ 253.666913][T11281] ? __pfx_sctp_defaults_init+0x10/0x10 [ 253.666935][T11281] sctp_defaults_init+0x6d2/0xd90 [ 253.666958][T11281] ? __pfx_sctp_defaults_init+0x10/0x10 [ 253.666980][T11281] ops_init+0x1e2/0x5f0 [ 253.667006][T11281] setup_net+0x118/0x3a0 [ 253.667029][T11281] ? __pfx_setup_net+0x10/0x10 [ 253.667050][T11281] ? lockdep_init_map_type+0x5c/0x250 [ 253.667074][T11281] ? mutex_init_lockep+0x110/0x150 [ 253.667102][T11281] copy_net_ns+0x46f/0x7c0 [ 253.667129][T11281] create_new_namespaces+0x3ea/0xac0 [ 253.667153][T11281] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 253.667174][T11281] ksys_unshare+0x473/0xad0 [ 253.667198][T11281] ? __pfx_ksys_unshare+0x10/0x10 [ 253.667228][T11281] __x64_sys_unshare+0x31/0x40 [ 253.667250][T11281] do_syscall_64+0x106/0xf80 [ 253.667271][T11281] ? clear_bhb_loop+0x40/0x90 [ 253.667293][T11281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.667312][T11281] RIP: 0033:0x7fee55b9c799 [ 253.667327][T11281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.667345][T11281] RSP: 002b:00007fee56ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 253.667363][T11281] RAX: ffffffffffffffda RBX: 00007fee55e15fa0 RCX: 00007fee55b9c799 [ 253.667374][T11281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 253.667384][T11281] RBP: 00007fee55c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 253.667394][T11281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.667404][T11281] R13: 00007fee55e16038 R14: 00007fee55e15fa0 R15: 00007fff60790888 [ 253.667426][T11281] [ 254.031375][T11308] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 254.044936][T11308] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3245'. [ 255.176517][ T30] audit: type=1804 audit(2147483758.380:8): pid=11281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3240" name="/newroot/31/file0" dev="tmpfs" ino=185 res=1 errno=0 [ 256.112787][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.119412][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.578275][T11348] FAULT_INJECTION: forcing a failure. [ 256.578275][T11348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.639702][T11348] CPU: 1 UID: 0 PID: 11348 Comm: syz.0.3251 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.639735][T11348] Tainted: [L]=SOFTLOCKUP [ 256.639741][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.639752][T11348] Call Trace: [ 256.639758][T11348] [ 256.639766][T11348] dump_stack_lvl+0x100/0x190 [ 256.639798][T11348] should_fail_ex.cold+0x5/0xa [ 256.639824][T11348] ? prepare_alloc_pages+0x16d/0x5f0 [ 256.639848][T11348] should_fail_alloc_page+0xeb/0x140 [ 256.639869][T11348] prepare_alloc_pages+0x1f0/0x5f0 [ 256.639894][T11348] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 256.639923][T11348] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 256.639949][T11348] ? lockdep_hardirqs_on+0x78/0x100 [ 256.639971][T11348] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 256.639990][T11348] ? stack_depot_save_flags+0x479/0x9d0 [ 256.640015][T11348] ? kasan_save_stack+0x3f/0x50 [ 256.640042][T11348] ? kasan_save_stack+0x30/0x50 [ 256.640067][T11348] ? kasan_save_track+0x14/0x30 [ 256.640092][T11348] ? __kasan_slab_alloc+0x89/0x90 [ 256.640109][T11348] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 256.640136][T11348] ? get_locked_pte+0x25/0xc0 [ 256.640155][T11348] ? insert_page+0xcc/0x220 [ 256.640173][T11348] ? vm_insert_page+0x2c0/0x400 [ 256.640193][T11348] ? __mmap_region+0x1443/0x29e0 [ 256.640217][T11348] ? do_mmap+0xc63/0x12f0 [ 256.640235][T11348] ? vm_mmap_pgoff+0x29e/0x470 [ 256.640253][T11348] ? ksys_mmap_pgoff+0x3c8/0x650 [ 256.640270][T11348] ? __x64_sys_mmap+0x125/0x190 [ 256.640294][T11348] ? do_syscall_64+0x106/0xf80 [ 256.640314][T11348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.640343][T11348] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 256.640374][T11348] ? policy_nodemask+0xed/0x4f0 [ 256.640395][T11348] alloc_pages_mpol+0x1fb/0x550 [ 256.640415][T11348] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 256.640440][T11348] alloc_pages_noprof+0x131/0x390 [ 256.640460][T11348] pte_alloc_one+0x1e/0x3e0 [ 256.640481][T11348] __pte_alloc+0x6d/0x3f0 [ 256.640498][T11348] ? __pfx___pte_alloc+0x10/0x10 [ 256.640518][T11348] ? walk_to_pmd+0x302/0x4c0 [ 256.640540][T11348] get_locked_pte+0xa1/0xc0 [ 256.640562][T11348] insert_page+0xcc/0x220 [ 256.640583][T11348] ? __pfx_insert_page+0x10/0x10 [ 256.640603][T11348] ? __pfx_down_read_trylock+0x10/0x10 [ 256.640635][T11348] vm_insert_page+0x2c0/0x400 [ 256.640658][T11348] kcov_mmap+0xca/0x130 [ 256.640687][T11348] __mmap_region+0x1443/0x29e0 [ 256.640716][T11348] ? __pfx___mmap_region+0x10/0x10 [ 256.640744][T11348] ? find_held_lock+0x2b/0x80 [ 256.640760][T11348] ? ima_match_policy+0x8c4/0x2350 [ 256.640777][T11348] ? ima_match_policy+0x8c4/0x2350 [ 256.640813][T11348] ? sched_clock+0x38/0x60 [ 256.640841][T11348] ? find_held_lock+0x2b/0x80 [ 256.640857][T11348] ? process_measurement+0x4c8/0x2350 [ 256.640881][T11348] ? process_measurement+0x4c8/0x2350 [ 256.640913][T11348] ? process_measurement+0x1f4/0x2350 [ 256.640977][T11348] mmap_region+0x30a/0x3e0 [ 256.641008][T11348] do_mmap+0xc63/0x12f0 [ 256.641032][T11348] ? __pfx_do_mmap+0x10/0x10 [ 256.641053][T11348] ? __pfx_down_write_killable+0x10/0x10 [ 256.641099][T11348] vm_mmap_pgoff+0x29e/0x470 [ 256.641124][T11348] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 256.641143][T11348] ? __fget_files+0x215/0x3d0 [ 256.641165][T11348] ? __fget_files+0x21f/0x3d0 [ 256.641186][T11348] ksys_mmap_pgoff+0x3c8/0x650 [ 256.641205][T11348] ? __x64_sys_futex+0x34f/0x4d0 [ 256.641229][T11348] ? __x64_sys_futex+0x358/0x4d0 [ 256.641252][T11348] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 256.641271][T11348] ? xfd_validate_state+0x129/0x190 [ 256.641301][T11348] __x64_sys_mmap+0x125/0x190 [ 256.641330][T11348] do_syscall_64+0x106/0xf80 [ 256.641351][T11348] ? clear_bhb_loop+0x40/0x90 [ 256.641373][T11348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.641391][T11348] RIP: 0033:0x7ff0acd9c799 [ 256.641407][T11348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.641424][T11348] RSP: 002b:00007ff0add13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 256.641442][T11348] RAX: ffffffffffffffda RBX: 00007ff0ad015fa0 RCX: 00007ff0acd9c799 [ 256.641454][T11348] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000012000 [ 256.641464][T11348] RBP: 00007ff0ace32bd9 R08: 00000000000000dd R09: 0000000000000000 [ 256.641475][T11348] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 256.641485][T11348] R13: 00007ff0ad016038 R14: 00007ff0ad015fa0 R15: 00007ffe2bdb4f58 [ 256.641508][T11348] [ 256.641813][T11348] kcov: kcov: vm_insert_page() failed [ 258.812116][T11369] syz.3.3255 (11369) used greatest stack depth: 19672 bytes left [ 259.088821][T11392] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 259.269894][T11398] netlink: 'syz.0.3263': attribute type 1 has an invalid length. [ 259.321258][T11400] netlink: 'syz.1.3265': attribute type 29 has an invalid length. [ 259.329660][T11400] netlink: 'syz.1.3265': attribute type 30 has an invalid length. [ 259.337777][T11400] netlink: 'syz.1.3265': attribute type 31 has an invalid length. [ 259.350691][T11400] netlink: 'syz.1.3265': attribute type 32 has an invalid length. [ 259.373344][T11400] netlink: 'syz.1.3265': attribute type 33 has an invalid length. [ 259.434398][T11400] netlink: 'syz.1.3265': attribute type 35 has an invalid length. [ 259.465569][T11400] netlink: 'syz.1.3265': attribute type 37 has an invalid length. [ 259.489565][T11400] netlink: 18 bytes leftover after parsing attributes in process `syz.1.3265'. [ 259.905028][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3267'. [ 262.555564][T11458] binder: 11457:11458 ioctl c00c620f 200000000040 returned -22 [ 263.578946][T11474] block nbd0: NBD_DISCONNECT [ 265.680517][T11494] FAULT_INJECTION: forcing a failure. [ 265.680517][T11494] name failslab, interval 1, probability 0, space 0, times 0 [ 265.715411][T11494] CPU: 0 UID: 0 PID: 11494 Comm: syz.2.3287 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.715467][T11494] Tainted: [L]=SOFTLOCKUP [ 265.715477][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.715492][T11494] Call Trace: [ 265.715503][T11494] [ 265.715513][T11494] dump_stack_lvl+0x100/0x190 [ 265.715560][T11494] should_fail_ex.cold+0x5/0xa [ 265.715595][T11494] ? lsm_blob_alloc+0x68/0x90 [ 265.715628][T11494] should_failslab+0xc2/0x120 [ 265.715659][T11494] __kmalloc_noprof+0xe0/0x850 [ 265.715702][T11494] ? trace_kmem_cache_alloc+0xf3/0x120 [ 265.715738][T11494] lsm_blob_alloc+0x68/0x90 [ 265.715773][T11494] security_prepare_creds+0x2d/0x290 [ 265.715808][T11494] prepare_creds+0x5d6/0x950 [ 265.715854][T11494] __sys_setresuid+0x458/0x1280 [ 265.715890][T11494] do_syscall_64+0x106/0xf80 [ 265.715924][T11494] ? clear_bhb_loop+0x40/0x90 [ 265.715961][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.715990][T11494] RIP: 0033:0x7fce3e19c799 [ 265.716014][T11494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.716041][T11494] RSP: 002b:00007fce3f0a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 265.716069][T11494] RAX: ffffffffffffffda RBX: 00007fce3e415fa0 RCX: 00007fce3e19c799 [ 265.716088][T11494] RDX: 0000000000008000 RSI: 0000000000000008 RDI: 0000000000000000 [ 265.716106][T11494] RBP: 00007fce3e232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 265.716123][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.716140][T11494] R13: 00007fce3e416038 R14: 00007fce3e415fa0 R15: 00007ffe4387d678 [ 265.716179][T11494] [ 266.099378][T11500] FAULT_INJECTION: forcing a failure. [ 266.099378][T11500] name failslab, interval 1, probability 0, space 0, times 0 [ 266.114933][T11500] CPU: 1 UID: 0 PID: 11500 Comm: syz.2.3288 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.114962][T11500] Tainted: [L]=SOFTLOCKUP [ 266.114968][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.114979][T11500] Call Trace: [ 266.114985][T11500] [ 266.114991][T11500] dump_stack_lvl+0x100/0x190 [ 266.115022][T11500] should_fail_ex.cold+0x5/0xa [ 266.115042][T11500] ? __register_sysctl_table+0xbe4/0x1650 [ 266.115070][T11500] should_failslab+0xc2/0x120 [ 266.115088][T11500] __kmalloc_noprof+0xe0/0x850 [ 266.115119][T11500] __register_sysctl_table+0xbe4/0x1650 [ 266.115152][T11500] ? __pfx___register_sysctl_table+0x10/0x10 [ 266.115180][T11500] ? is_module_address+0x69/0xf0 [ 266.115201][T11500] ? register_net_sysctl_sz+0x222/0x430 [ 266.115242][T11500] __devinet_sysctl_register+0x1b9/0x360 [ 266.115279][T11500] ? trace_kmalloc+0x101/0x130 [ 266.115309][T11500] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 266.115353][T11500] ? __asan_memcpy+0x3c/0x60 [ 266.115384][T11500] devinet_init_net+0x334/0x8d0 [ 266.115410][T11500] ? __pfx_devinet_init_net+0x10/0x10 [ 266.115436][T11500] ops_init+0x1e2/0x5f0 [ 266.115462][T11500] setup_net+0x118/0x3a0 [ 266.115485][T11500] ? __pfx_setup_net+0x10/0x10 [ 266.115506][T11500] ? lockdep_init_map_type+0x5c/0x250 [ 266.115529][T11500] ? mutex_init_lockep+0x110/0x150 [ 266.115556][T11500] copy_net_ns+0x46f/0x7c0 [ 266.115583][T11500] create_new_namespaces+0x3ea/0xac0 [ 266.115607][T11500] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 266.115627][T11500] ksys_unshare+0x473/0xad0 [ 266.115651][T11500] ? __pfx_ksys_unshare+0x10/0x10 [ 266.115688][T11500] __x64_sys_unshare+0x31/0x40 [ 266.115710][T11500] do_syscall_64+0x106/0xf80 [ 266.115730][T11500] ? clear_bhb_loop+0x40/0x90 [ 266.115751][T11500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.115769][T11500] RIP: 0033:0x7fce3e19c799 [ 266.115784][T11500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.115801][T11500] RSP: 002b:00007fce3f0a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 266.115819][T11500] RAX: ffffffffffffffda RBX: 00007fce3e415fa0 RCX: 00007fce3e19c799 [ 266.115830][T11500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 266.115841][T11500] RBP: 00007fce3e232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 266.115851][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.115860][T11500] R13: 00007fce3e416038 R14: 00007fce3e415fa0 R15: 00007ffe4387d678 [ 266.115883][T11500] [ 266.426206][T11500] sysctl could not get directory: /net/ipv4/conf/default -12 [ 267.285542][T11506] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3289'. [ 267.443075][T11518] FAULT_INJECTION: forcing a failure. [ 267.443075][T11518] name failslab, interval 1, probability 0, space 0, times 0 [ 267.505509][T11518] CPU: 0 UID: 0 PID: 11518 Comm: syz.3.3292 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.505542][T11518] Tainted: [L]=SOFTLOCKUP [ 267.505548][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.505559][T11518] Call Trace: [ 267.505565][T11518] [ 267.505572][T11518] dump_stack_lvl+0x100/0x190 [ 267.505603][T11518] should_fail_ex.cold+0x5/0xa [ 267.505624][T11518] should_failslab+0xc2/0x120 [ 267.505644][T11518] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 267.505671][T11518] ? vm_area_dup+0x27/0x8e0 [ 267.505698][T11518] vm_area_dup+0x27/0x8e0 [ 267.505723][T11518] __split_vma+0x18c/0xd90 [ 267.505764][T11518] ? __pfx___split_vma+0x10/0x10 [ 267.505794][T11518] ? __pfx_mas_prev+0x10/0x10 [ 267.505824][T11518] vms_gather_munmap_vmas+0x39f/0x1500 [ 267.505850][T11518] ? find_held_lock+0x2b/0x80 [ 267.505872][T11518] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 267.505898][T11518] ? move_page_tables+0xe1d/0x4500 [ 267.505934][T11518] do_vmi_align_munmap+0x287/0x5f0 [ 267.505964][T11518] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 267.506021][T11518] do_vmi_munmap+0x1f8/0x3e0 [ 267.506049][T11518] move_vma+0xd99/0x1890 [ 267.506079][T11518] ? __pfx_move_vma+0x10/0x10 [ 267.506106][T11518] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 267.506135][T11518] ? vrm_set_new_addr+0x204/0x290 [ 267.506162][T11518] mremap_to+0x1b7/0x450 [ 267.506188][T11518] do_mremap+0xb76/0x2130 [ 267.506223][T11518] ? __pfx_do_mremap+0x10/0x10 [ 267.506253][T11518] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 267.506289][T11518] __do_sys_mremap+0x126/0x170 [ 267.506315][T11518] ? __pfx___do_sys_mremap+0x10/0x10 [ 267.506346][T11518] ? __x64_sys_futex+0x34f/0x4d0 [ 267.506383][T11518] do_syscall_64+0x106/0xf80 [ 267.506403][T11518] ? clear_bhb_loop+0x40/0x90 [ 267.506426][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.506445][T11518] RIP: 0033:0x7fc5ed99c799 [ 267.506461][T11518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.506478][T11518] RSP: 002b:00007fc5ee857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 267.506496][T11518] RAX: ffffffffffffffda RBX: 00007fc5edc16090 RCX: 00007fc5ed99c799 [ 267.506507][T11518] RDX: 0000000000000037 RSI: 0000000000000008 RDI: 0000200000001000 [ 267.506518][T11518] RBP: 00007fc5eda32bd9 R08: 000000110c230000 R09: 0000000000000000 [ 267.506529][T11518] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 267.506539][T11518] R13: 00007fc5edc16128 R14: 00007fc5edc16090 R15: 00007ffd45050148 [ 267.506562][T11518] [ 268.023638][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 268.635834][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 269.185501][T11545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3297'. [ 270.682572][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3304'. [ 271.242606][T11577] FAULT_INJECTION: forcing a failure. [ 271.242606][T11577] name fail_futex, interval 1, probability 0, space 0, times 1 [ 271.301224][T11577] CPU: 0 UID: 0 PID: 11577 Comm: syz.2.3307 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.301271][T11577] Tainted: [L]=SOFTLOCKUP [ 271.301281][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.301297][T11577] Call Trace: [ 271.301307][T11577] [ 271.301319][T11577] dump_stack_lvl+0x100/0x190 [ 271.301370][T11577] should_fail_ex.cold+0x5/0xa [ 271.301416][T11577] get_futex_key+0x295/0x1620 [ 271.301472][T11577] ? __pfx_get_futex_key+0x10/0x10 [ 271.301505][T11577] ? lock_acquire+0x1cf/0x380 [ 271.301555][T11577] futex_wake+0xea/0x530 [ 271.301603][T11577] ? __pfx_futex_wake+0x10/0x10 [ 271.301647][T11577] ? exit_mm_release+0x19/0x30 [ 271.301692][T11577] do_futex+0x32b/0x350 [ 271.301731][T11577] ? __pfx_do_futex+0x10/0x10 [ 271.301765][T11577] ? __might_fault+0xc5/0x140 [ 271.301818][T11577] mm_release+0x24a/0x2f0 [ 271.301849][T11577] do_exit+0x704/0x2b60 [ 271.301894][T11577] ? __pfx_do_exit+0x10/0x10 [ 271.301931][T11577] ? do_raw_spin_lock+0x128/0x260 [ 271.301978][T11577] ? find_held_lock+0x2b/0x80 [ 271.302006][T11577] ? get_signal+0x7e0/0x21e0 [ 271.302039][T11577] do_group_exit+0xd5/0x2a0 [ 271.302082][T11577] get_signal+0x1ec7/0x21e0 [ 271.302128][T11577] ? __pfx_get_signal+0x10/0x10 [ 271.302161][T11577] ? do_futex+0x192/0x350 [ 271.302204][T11577] arch_do_signal_or_restart+0x91/0x770 [ 271.302259][T11577] ? __x64_sys_close_range+0x3ce/0x5d0 [ 271.302292][T11577] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 271.302340][T11577] ? __pfx___x64_sys_futex+0x10/0x10 [ 271.302387][T11577] exit_to_user_mode_loop+0x86/0x4a0 [ 271.302438][T11577] do_syscall_64+0x668/0xf80 [ 271.302473][T11577] ? clear_bhb_loop+0x40/0x90 [ 271.302510][T11577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.302540][T11577] RIP: 0033:0x7fce3e19c799 [ 271.302565][T11577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.302592][T11577] RSP: 002b:00007fce3f0a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 271.302619][T11577] RAX: fffffffffffffe00 RBX: 00007fce3e415fa8 RCX: 00007fce3e19c799 [ 271.302637][T11577] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fce3e415fa8 [ 271.302653][T11577] RBP: 00007fce3e415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 271.302668][T11577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.302683][T11577] R13: 00007fce3e416038 R14: 00007ffe4387d590 R15: 00007ffe4387d678 [ 271.302718][T11577] [ 271.720509][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3309'. [ 272.644638][T11606] FAULT_INJECTION: forcing a failure. [ 272.644638][T11606] name failslab, interval 1, probability 0, space 0, times 0 [ 272.675759][T11606] CPU: 1 UID: 0 PID: 11606 Comm: syz.2.3315 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.675811][T11606] Tainted: [L]=SOFTLOCKUP [ 272.675823][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.675841][T11606] Call Trace: [ 272.675852][T11606] [ 272.675866][T11606] dump_stack_lvl+0x100/0x190 [ 272.675918][T11606] should_fail_ex.cold+0x5/0xa [ 272.675956][T11606] should_failslab+0xc2/0x120 [ 272.675991][T11606] __kmalloc_cache_noprof+0x7a/0x6f0 [ 272.676030][T11606] ? p9_client_create+0xaf/0xd40 [ 272.676078][T11606] p9_client_create+0xaf/0xd40 [ 272.676121][T11606] ? __pfx_p9_client_create+0x10/0x10 [ 272.676173][T11606] ? lockdep_init_map_type+0x5c/0x250 [ 272.676214][T11606] ? __raw_spin_lock_init+0x3a/0x110 [ 272.676264][T11606] v9fs_session_init+0x40/0xce0 [ 272.676303][T11606] ? kasan_save_track+0x14/0x30 [ 272.676362][T11606] v9fs_get_tree+0xb8/0xb50 [ 272.676403][T11606] ? rcu_is_watching+0x12/0xc0 [ 272.676449][T11606] ? __pfx_v9fs_get_tree+0x10/0x10 [ 272.676497][T11606] ? bpf_lsm_capable+0x9/0x10 [ 272.676528][T11606] ? security_capable+0x80/0x260 [ 272.676574][T11606] vfs_get_tree+0x92/0x320 [ 272.676619][T11606] vfs_cmd_create+0xd7/0x2a0 [ 272.676661][T11606] __do_sys_fsconfig+0x55a/0xcb0 [ 272.676714][T11606] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 272.676775][T11606] do_syscall_64+0x106/0xf80 [ 272.676812][T11606] ? clear_bhb_loop+0x40/0x90 [ 272.676852][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.676885][T11606] RIP: 0033:0x7fce3e19c799 [ 272.676912][T11606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.676943][T11606] RSP: 002b:00007fce3f082028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 272.676975][T11606] RAX: ffffffffffffffda RBX: 00007fce3e416090 RCX: 00007fce3e19c799 [ 272.676995][T11606] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 272.677013][T11606] RBP: 00007fce3e232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 272.677032][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.677050][T11606] R13: 00007fce3e416128 R14: 00007fce3e416090 R15: 00007ffe4387d678 [ 272.677092][T11606] [ 273.444941][T11616] FAULT_INJECTION: forcing a failure. [ 273.444941][T11616] name failslab, interval 1, probability 0, space 0, times 0 [ 273.459668][T11616] CPU: 0 UID: 0 PID: 11616 Comm: syz.2.3317 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.459720][T11616] Tainted: [L]=SOFTLOCKUP [ 273.459731][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.459750][T11616] Call Trace: [ 273.459760][T11616] [ 273.459772][T11616] dump_stack_lvl+0x100/0x190 [ 273.459824][T11616] should_fail_ex.cold+0x5/0xa [ 273.459862][T11616] should_failslab+0xc2/0x120 [ 273.459895][T11616] __kmalloc_cache_noprof+0x7a/0x6f0 [ 273.459936][T11616] ? alloc_mnt_ns+0xce/0x520 [ 273.459988][T11616] alloc_mnt_ns+0xce/0x520 [ 273.460037][T11616] copy_mnt_ns+0x220/0xc30 [ 273.460074][T11616] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 273.460120][T11616] ? create_new_namespaces+0x30/0xac0 [ 273.460154][T11616] ? rcu_is_watching+0x12/0xc0 [ 273.460206][T11616] create_new_namespaces+0xd3/0xac0 [ 273.460238][T11616] ? bpf_lsm_capable+0x9/0x10 [ 273.460270][T11616] ? security_capable+0x80/0x260 [ 273.460316][T11616] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 273.460353][T11616] ksys_unshare+0x473/0xad0 [ 273.460402][T11616] ? __pfx_ksys_unshare+0x10/0x10 [ 273.460456][T11616] __x64_sys_unshare+0x31/0x40 [ 273.460495][T11616] do_syscall_64+0x106/0xf80 [ 273.460533][T11616] ? clear_bhb_loop+0x40/0x90 [ 273.460573][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.460604][T11616] RIP: 0033:0x7fce3e19c799 [ 273.460631][T11616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.460660][T11616] RSP: 002b:00007fce3f0a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 273.460692][T11616] RAX: ffffffffffffffda RBX: 00007fce3e415fa0 RCX: 00007fce3e19c799 [ 273.460714][T11616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 273.460732][T11616] RBP: 00007fce3e232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 273.460751][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.460768][T11616] R13: 00007fce3e416038 R14: 00007fce3e415fa0 R15: 00007ffe4387d678 [ 273.460810][T11616] [ 273.895381][ T30] audit: type=1804 audit(2147483776.930:9): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3317" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 274.688453][T11620] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3319'. [ 275.681238][T11642] ucma_write: process 169 (syz.2.3322) changed security contexts after opening file descriptor, this is not allowed. [ 275.852679][T11646] binder: 11643:11646 ioctl c00c620f 200000000040 returned -22 [ 276.539830][T11655] netlink: 346 bytes leftover after parsing attributes in process `syz.1.3326'. [ 276.753032][T11666] hub 3-0:1.0: USB hub found [ 276.767133][T11666] hub 3-0:1.0: 1 port detected [ 276.814012][T11666] usb usb3: authorized to connect [ 277.046992][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 277.241195][T11684] syz.2.3330 uses obsolete (PF_INET,SOCK_PACKET) [ 278.710049][T11704] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 279.115550][T11716] binder: 11715:11716 ioctl c00c620f 200000000040 returned -22 [ 280.087307][T11724] FAULT_INJECTION: forcing a failure. [ 280.087307][T11724] name failslab, interval 1, probability 0, space 0, times 0 [ 280.117969][T11724] CPU: 1 UID: 0 PID: 11724 Comm: syz.3.3339 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.118015][T11724] Tainted: [L]=SOFTLOCKUP [ 280.118026][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.118043][T11724] Call Trace: [ 280.118053][T11724] [ 280.118064][T11724] dump_stack_lvl+0x100/0x190 [ 280.118114][T11724] should_fail_ex.cold+0x5/0xa [ 280.118146][T11724] ? copy_splice_read+0x1a3/0xb90 [ 280.118191][T11724] should_failslab+0xc2/0x120 [ 280.118223][T11724] __kmalloc_noprof+0xe0/0x850 [ 280.118275][T11724] copy_splice_read+0x1a3/0xb90 [ 280.118342][T11724] ? __pfx_copy_splice_read+0x10/0x10 [ 280.118394][T11724] ? look_up_lock_class+0x55/0x120 [ 280.118437][T11724] ? lockdep_init_map_type+0x5c/0x250 [ 280.118479][T11724] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 280.118528][T11724] ? __pfx_copy_splice_read+0x10/0x10 [ 280.118575][T11724] do_splice_read+0x285/0x370 [ 280.118626][T11724] splice_direct_to_actor+0x2a1/0xa30 [ 280.118659][T11724] ? __pfx_direct_splice_actor+0x10/0x10 [ 280.118710][T11724] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 280.118753][T11724] do_splice_direct+0x174/0x240 [ 280.118785][T11724] ? __pfx_do_splice_direct+0x10/0x10 [ 280.118815][T11724] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 280.118869][T11724] ? rw_verify_area+0xce/0x6d0 [ 280.118915][T11724] do_sendfile+0xadc/0xe20 [ 280.118967][T11724] ? __pfx_do_sendfile+0x10/0x10 [ 280.119012][T11724] ? __fget_files+0x21f/0x3d0 [ 280.119050][T11724] __x64_sys_sendfile64+0x1d8/0x220 [ 280.119082][T11724] ? ksys_write+0x1ac/0x250 [ 280.119110][T11724] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 280.119154][T11724] do_syscall_64+0x106/0xf80 [ 280.119189][T11724] ? clear_bhb_loop+0x40/0x90 [ 280.119226][T11724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.119257][T11724] RIP: 0033:0x7fc5ed99c799 [ 280.119281][T11724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.119309][T11724] RSP: 002b:00007fc5ee878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 280.119345][T11724] RAX: ffffffffffffffda RBX: 00007fc5edc15fa0 RCX: 00007fc5ed99c799 [ 280.119364][T11724] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 280.119380][T11724] RBP: 00007fc5ee878090 R08: 0000000000000000 R09: 0000000000000000 [ 280.119398][T11724] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 280.119415][T11724] R13: 00007fc5edc16038 R14: 00007fc5edc15fa0 R15: 00007ffd45050148 [ 280.119454][T11724] [ 282.427235][T11790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3351'. [ 282.682582][T11793] .^: entered promiscuous mode [ 283.264854][T11804] zswap: compressor not available [ 284.133329][T11828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3367'. [ 284.559487][T11837] Invalid ELF header magic: != ELF [ 284.764926][T11846] FAULT_INJECTION: forcing a failure. [ 284.764926][T11846] name failslab, interval 1, probability 0, space 0, times 0 [ 284.810028][T11846] CPU: 1 UID: 0 PID: 11846 Comm: syz.3.3364 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.810083][T11846] Tainted: [L]=SOFTLOCKUP [ 284.810094][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.810113][T11846] Call Trace: [ 284.810124][T11846] [ 284.810136][T11846] dump_stack_lvl+0x100/0x190 [ 284.810190][T11846] should_fail_ex.cold+0x5/0xa [ 284.810227][T11846] should_failslab+0xc2/0x120 [ 284.810260][T11846] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 284.810307][T11846] ? security_file_alloc+0x34/0x2c0 [ 284.810338][T11846] ? trace_kmem_cache_alloc+0xf3/0x120 [ 284.810377][T11846] security_file_alloc+0x34/0x2c0 [ 284.810411][T11846] init_file+0x95/0x480 [ 284.810450][T11846] alloc_empty_file+0x73/0x1c0 [ 284.810500][T11846] path_openat+0xe8/0x31a0 [ 284.810530][T11846] ? kasan_save_stack+0x3f/0x50 [ 284.810573][T11846] ? kasan_save_stack+0x30/0x50 [ 284.810612][T11846] ? kasan_save_track+0x14/0x30 [ 284.810655][T11846] ? __kasan_slab_alloc+0x89/0x90 [ 284.810683][T11846] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 284.810727][T11846] ? do_getname+0x35/0x390 [ 284.810763][T11846] ? do_sys_openat2+0xc5/0x1e0 [ 284.810802][T11846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.810841][T11846] ? __pfx_path_openat+0x10/0x10 [ 284.810887][T11846] do_file_open+0x20e/0x430 [ 284.810923][T11846] ? __pfx_do_file_open+0x10/0x10 [ 284.810984][T11846] ? alloc_fd+0x476/0x790 [ 284.811019][T11846] ? do_getname+0x191/0x390 [ 284.811061][T11846] do_sys_openat2+0x10d/0x1e0 [ 284.811102][T11846] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.811159][T11846] __x64_sys_openat+0x12d/0x210 [ 284.811202][T11846] ? __pfx___x64_sys_openat+0x10/0x10 [ 284.811258][T11846] do_syscall_64+0x106/0xf80 [ 284.811295][T11846] ? clear_bhb_loop+0x40/0x90 [ 284.811334][T11846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.811366][T11846] RIP: 0033:0x7fc5ed99c799 [ 284.811392][T11846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.811423][T11846] RSP: 002b:00007fc5ee878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 284.811454][T11846] RAX: ffffffffffffffda RBX: 00007fc5edc15fa0 RCX: 00007fc5ed99c799 [ 284.811475][T11846] RDX: 0000000000212042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 284.811504][T11846] RBP: 00007fc5eda32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 284.811523][T11846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.811542][T11846] R13: 00007fc5edc16038 R14: 00007fc5edc15fa0 R15: 00007ffd45050148 [ 284.811583][T11846] [ 285.369782][T11853] Invalid ELF header magic: != ELF [ 285.730330][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 285.918166][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3370'. [ 288.720448][T11910] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 289.432994][T11930] FAULT_INJECTION: forcing a failure. [ 289.432994][T11930] name failslab, interval 1, probability 0, space 0, times 0 [ 289.448120][T11930] CPU: 1 UID: 0 PID: 11930 Comm: syz.0.3383 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.448165][T11930] Tainted: [L]=SOFTLOCKUP [ 289.448175][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.448191][T11930] Call Trace: [ 289.448198][T11930] [ 289.448208][T11930] dump_stack_lvl+0x100/0x190 [ 289.448263][T11930] should_fail_ex.cold+0x5/0xa [ 289.448296][T11930] should_failslab+0xc2/0x120 [ 289.448326][T11930] __kvmalloc_node_noprof+0xfa/0xa00 [ 289.448363][T11930] ? proc_sys_call_handler+0x2c7/0x5a0 [ 289.448403][T11930] ? proc_sys_call_handler+0x169/0x5a0 [ 289.448457][T11930] proc_sys_call_handler+0x2c7/0x5a0 [ 289.448502][T11930] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 289.448547][T11930] ? __kmalloc_noprof+0x320/0x850 [ 289.448591][T11930] copy_splice_read+0x4ba/0xb90 [ 289.448641][T11930] ? __pfx_copy_splice_read+0x10/0x10 [ 289.448685][T11930] ? look_up_lock_class+0x55/0x120 [ 289.448724][T11930] ? lockdep_init_map_type+0x5c/0x250 [ 289.448759][T11930] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 289.448806][T11930] ? __pfx_copy_splice_read+0x10/0x10 [ 289.448850][T11930] do_splice_read+0x285/0x370 [ 289.448898][T11930] splice_direct_to_actor+0x2a1/0xa30 [ 289.448932][T11930] ? __pfx_direct_splice_actor+0x10/0x10 [ 289.448985][T11930] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 289.449028][T11930] do_splice_direct+0x174/0x240 [ 289.449059][T11930] ? __pfx_do_splice_direct+0x10/0x10 [ 289.449089][T11930] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 289.449139][T11930] ? rw_verify_area+0xce/0x6d0 [ 289.449182][T11930] do_sendfile+0xadc/0xe20 [ 289.449232][T11930] ? __pfx_do_sendfile+0x10/0x10 [ 289.449287][T11930] ? __fget_files+0x21f/0x3d0 [ 289.449322][T11930] __x64_sys_sendfile64+0x1d8/0x220 [ 289.449352][T11930] ? ksys_write+0x1ac/0x250 [ 289.449376][T11930] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 289.449416][T11930] do_syscall_64+0x106/0xf80 [ 289.449448][T11930] ? clear_bhb_loop+0x40/0x90 [ 289.449482][T11930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.449510][T11930] RIP: 0033:0x7ff0acd9c799 [ 289.449535][T11930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.449561][T11930] RSP: 002b:00007ff0add13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 289.449590][T11930] RAX: ffffffffffffffda RBX: 00007ff0ad015fa0 RCX: 00007ff0acd9c799 [ 289.449609][T11930] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 289.449625][T11930] RBP: 00007ff0add13090 R08: 0000000000000000 R09: 0000000000000000 [ 289.449642][T11930] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 289.449658][T11930] R13: 00007ff0ad016038 R14: 00007ff0ad015fa0 R15: 00007ffe2bdb4f58 [ 289.449695][T11930] syzkaller syzkaller login: [ 290.302486][T11948] zswap: compressor û not available [ 290.842696][T11942] zswap: compressor not available [ 291.556868][T11984] FAULT_INJECTION: forcing a failure. [ 291.556868][T11984] name failslab, interval 1, probability 0, space 0, times 0 [ 291.586857][T11984] CPU: 1 UID: 0 PID: 11984 Comm: syz.3.3395 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.586903][T11984] Tainted: [L]=SOFTLOCKUP [ 291.586913][T11984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.586930][T11984] Call Trace: [ 291.586940][T11984] [ 291.586951][T11984] dump_stack_lvl+0x100/0x190 [ 291.587002][T11984] should_fail_ex.cold+0x5/0xa [ 291.587036][T11984] ? iter_file_splice_write+0x1d8/0x10a0 [ 291.587065][T11984] should_failslab+0xc2/0x120 [ 291.587097][T11984] __kmalloc_noprof+0xe0/0x850 [ 291.587149][T11984] iter_file_splice_write+0x1d8/0x10a0 [ 291.587179][T11984] ? lockdep_hardirqs_on+0x78/0x100 [ 291.587221][T11984] ? copy_splice_read+0x734/0xb90 [ 291.587263][T11984] ? kfree+0x1f6/0x6b0 [ 291.587310][T11984] ? __pfx_iter_file_splice_write+0x10/0x10 [ 291.587347][T11984] ? __lock_acquire+0x4a5/0x2630 [ 291.587390][T11984] ? __pfx_copy_splice_read+0x10/0x10 [ 291.587459][T11984] ? __pfx_iter_file_splice_write+0x10/0x10 [ 291.587494][T11984] direct_splice_actor+0x192/0x6c0 [ 291.587558][T11984] splice_direct_to_actor+0x345/0xa30 [ 291.587591][T11984] ? __pfx_direct_splice_actor+0x10/0x10 [ 291.587647][T11984] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 291.587691][T11984] do_splice_direct+0x174/0x240 [ 291.587723][T11984] ? __pfx_do_splice_direct+0x10/0x10 [ 291.587753][T11984] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 291.587808][T11984] ? rw_verify_area+0xce/0x6d0 [ 291.587855][T11984] do_sendfile+0xadc/0xe20 [ 291.587907][T11984] ? __pfx_do_sendfile+0x10/0x10 [ 291.587952][T11984] ? __fget_files+0x21f/0x3d0 [ 291.587992][T11984] __x64_sys_sendfile64+0x1d8/0x220 [ 291.588024][T11984] ? ksys_write+0x1ac/0x250 [ 291.588051][T11984] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 291.588099][T11984] do_syscall_64+0x106/0xf80 [ 291.588132][T11984] ? clear_bhb_loop+0x40/0x90 [ 291.588170][T11984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.588201][T11984] RIP: 0033:0x7fc5ed99c799 [ 291.588226][T11984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.588254][T11984] RSP: 002b:00007fc5ee878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 291.588282][T11984] RAX: ffffffffffffffda RBX: 00007fc5edc15fa0 RCX: 00007fc5ed99c799 [ 291.588302][T11984] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 291.588318][T11984] RBP: 00007fc5ee878090 R08: 0000000000000000 R09: 0000000000000000 [ 291.588335][T11984] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 291.588353][T11984] R13: 00007fc5edc16038 R14: 00007fc5edc15fa0 R15: 00007ffd45050148 [ 291.588392][T11984] syzkaller syzkaller login: [ 292.504962][T11993] Invalid ELF header magic: != ELF [ 293.736006][T12016] nvme_fcloop: unknown parameter or missing value '0' [ 294.935213][T12042] binder: 12041:12042 ioctl c0306201 0 returned -14 [ 297.418924][T12070] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3413'. [ 298.173852][T12083] openvswitch: netlink: Multiple metadata blocks provided [ 298.277289][T12084] FAULT_INJECTION: forcing a failure. [ 298.277289][T12084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.301530][T12084] CPU: 1 UID: 0 PID: 12084 Comm: syz.0.3417 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.301575][T12084] Tainted: [L]=SOFTLOCKUP [ 298.301584][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.301599][T12084] Call Trace: [ 298.301608][T12084] [ 298.301618][T12084] dump_stack_lvl+0x100/0x190 [ 298.301664][T12084] should_fail_ex.cold+0x5/0xa [ 298.301696][T12084] _copy_to_user+0x32/0xd0 [ 298.301726][T12084] simple_read_from_buffer+0xcb/0x170 [ 298.301777][T12084] proc_fail_nth_read+0x1af/0x230 [ 298.301810][T12084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.301844][T12084] ? rw_verify_area+0xce/0x6d0 [ 298.301880][T12084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.301912][T12084] vfs_read+0x1e4/0xb30 [ 298.301955][T12084] ? __pfx_vfs_read+0x10/0x10 [ 298.301993][T12084] ? __fget_files+0x215/0x3d0 [ 298.302042][T12084] ? __fget_files+0x21f/0x3d0 [ 298.302077][T12084] ksys_read+0x12a/0x250 [ 298.302115][T12084] ? __pfx_ksys_read+0x10/0x10 [ 298.302165][T12084] do_syscall_64+0x106/0xf80 [ 298.302196][T12084] ? clear_bhb_loop+0x40/0x90 [ 298.302230][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.302257][T12084] RIP: 0033:0x7ff0acd5cfce [ 298.302282][T12084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.302308][T12084] RSP: 002b:00007ff0add12fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.302335][T12084] RAX: ffffffffffffffda RBX: 00007ff0add136c0 RCX: 00007ff0acd5cfce [ 298.302352][T12084] RDX: 000000000000000f RSI: 00007ff0add130a0 RDI: 0000000000000004 [ 298.302369][T12084] RBP: 00007ff0add13090 R08: 0000000000000000 R09: 0000000000000000 [ 298.302385][T12084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.302401][T12084] R13: 00007ff0ad016038 R14: 00007ff0ad015fa0 R15: 00007ffe2bdb4f58 [ 298.302439][T12084] [ 299.790553][T12119] bond0: Unable to set down delay as MII monitoring is disabled [ 300.009443][T12121] binder: 12120:12121 ioctl c0306201 0 returned -14 [ 300.251217][T12127] netlink: 'syz.3.3426': attribute type 1 has an invalid length. [ 301.369713][T12139] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3437'. [ 301.425715][T12139] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3437'. [ 301.499259][T12142] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3429'. [ 301.866844][T12146] udc dummy_udc.0: soft-connect without a gadget driver [ 301.904672][T12146] random: crng reseeded on system resumption [ 302.152343][T12154] binder: 12153:12154 ioctl c00c620f 200000000040 returned -22 [ 302.933666][T12172] binder: 12171:12172 ioctl c00c620f 200000000040 returned -22 [ 304.318545][T12202] openvswitch: netlink: Multiple metadata blocks provided [ 305.672214][T12219] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3443'. [ 306.410061][T12224] binder: 12223:12224 ioctl c00c620f 200000000040 returned -22 [ 309.372458][T12265] binder: 12264:12265 ioctl c00c620f 200000000040 returned -22 [ 309.741162][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3458'. [ 310.133898][ T30] audit: type=1806 audit(2147483813.330:10): xattr="." res=0 [ 311.860461][T12315] binder: 12314:12315 ioctl c00c620f 200000000040 returned -22 [ 314.055189][T12361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3478'. [ 315.129959][T12376] vhci_hcd vhci_hcd.2: invalid port number 16 [ 315.137196][T12376] vhci_hcd vhci_hcd.2: invalid port number 16 [ 315.190979][T12379] binder: 12378:12379 ioctl c00c620f 200000000040 returned -22 [ 315.839789][T12402] can: request_module (can-proto-0) failed. [ 315.872554][T12402] FAULT_INJECTION: forcing a failure. [ 315.872554][T12402] name fail_futex, interval 1, probability 0, space 0, times 0 [ 315.980988][T12401] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3486'. [ 315.986694][T12402] CPU: 0 UID: 0 PID: 12402 Comm: syz.2.3486 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.986736][T12402] Tainted: [L]=SOFTLOCKUP [ 315.986745][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.986759][T12402] Call Trace: [ 315.986768][T12402] [ 315.986777][T12402] dump_stack_lvl+0x100/0x190 [ 315.986819][T12402] should_fail_ex.cold+0x5/0xa [ 315.986850][T12402] get_futex_key+0x1d2/0x1620 [ 315.986885][T12402] ? __pfx_get_futex_key+0x10/0x10 [ 315.986912][T12402] ? __sock_release+0x1fc/0x260 [ 315.986944][T12402] ? __sys_socket+0x14d/0x260 [ 315.986966][T12402] ? __x64_sys_socket+0x72/0xb0 [ 315.986989][T12402] ? do_syscall_64+0x106/0xf80 [ 315.987020][T12402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.987056][T12402] futex_wait_setup+0x83/0x510 [ 315.987103][T12402] __futex_wait+0x19f/0x300 [ 315.987143][T12402] ? __pfx___futex_wait+0x10/0x10 [ 315.987186][T12402] ? __pfx_futex_wake_mark+0x10/0x10 [ 315.987227][T12402] ? futex_hash+0x2c5/0x380 [ 315.987267][T12402] futex_wait+0xed/0x380 [ 315.987304][T12402] ? __pfx_futex_wait+0x10/0x10 [ 315.987359][T12402] do_futex+0x1ef/0x350 [ 315.987400][T12402] ? __pfx_do_futex+0x10/0x10 [ 315.987428][T12402] ? iput+0x3a/0x40 [ 315.987456][T12402] ? __sock_release+0x184/0x260 [ 315.987495][T12402] __x64_sys_futex+0x34f/0x4d0 [ 315.987529][T12402] ? __sys_socket+0xac/0x260 [ 315.987553][T12402] ? __pfx___x64_sys_futex+0x10/0x10 [ 315.987598][T12402] do_syscall_64+0x106/0xf80 [ 315.987627][T12402] ? clear_bhb_loop+0x40/0x90 [ 315.987658][T12402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.987684][T12402] RIP: 0033:0x7fce3e19c799 [ 315.987706][T12402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.987735][T12402] RSP: 002b:00007fce3f0610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 315.987760][T12402] RAX: ffffffffffffffda RBX: 00007fce3e416188 RCX: 00007fce3e19c799 [ 315.987777][T12402] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fce3e416188 [ 315.987792][T12402] RBP: 00007fce3e416180 R08: 0000000000000000 R09: 0000000000000000 [ 315.987807][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.987822][T12402] R13: 00007fce3e416218 R14: 00007ffe4387d590 R15: 00007ffe4387d678 [ 315.987856][T12402] [ 316.468187][T12425] futex_wake_op: syz.1.3490 tries to shift op by -2048; fix this program [ 316.867171][T12435] misc userio: Invalid payload size [ 317.417089][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'. [ 317.473593][T12448] binder: 12446:12448 ioctl c00c620f 200000000040 returned -22 [ 317.550024][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.556963][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.912872][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3496'. [ 319.639638][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 319.846573][T12489] [U] % [ 320.023081][T12494] netlink: 'syz.0.3506': attribute type 1 has an invalid length. [ 320.031198][T12494] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3506'. [ 320.044128][T12494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3506'. [ 320.053462][T12494] veth1_macvtap: entered allmulticast mode [ 320.290282][T12497] binder: 12496:12497 ioctl c00c620f 200000000040 returned -22 [ 321.021256][T12516] FAULT_INJECTION: forcing a failure. [ 321.021256][T12516] name failslab, interval 1, probability 0, space 0, times 0 [ 321.055915][T12516] CPU: 1 UID: 5 PID: 12516 Comm: syz.0.3512 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.055966][T12516] Tainted: [L]=SOFTLOCKUP [ 321.055977][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.055995][T12516] Call Trace: [ 321.056005][T12516] [ 321.056017][T12516] dump_stack_lvl+0x100/0x190 [ 321.056066][T12516] should_fail_ex.cold+0x5/0xa [ 321.056100][T12516] should_failslab+0xc2/0x120 [ 321.056133][T12516] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 321.056179][T12516] ? __kthread_create_on_node+0x186/0x3f0 [ 321.056222][T12516] kvasprintf+0xbc/0x150 [ 321.056254][T12516] ? __pfx_kvasprintf+0x10/0x10 [ 321.056309][T12516] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 321.056356][T12516] __kthread_create_on_node+0x186/0x3f0 [ 321.056392][T12516] ? __pfx___kthread_create_on_node+0x10/0x10 [ 321.056447][T12516] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 321.056495][T12516] kthread_create_on_node+0xc7/0x100 [ 321.056528][T12516] ? __pfx_kthread_create_on_node+0x10/0x10 [ 321.056564][T12516] ? lockdep_hardirqs_on+0x78/0x100 [ 321.056600][T12516] ? find_held_lock+0x2b/0x80 [ 321.056627][T12516] ? tomoyo_notify_gc+0xc6/0x480 [ 321.056663][T12516] tomoyo_notify_gc+0x102/0x480 [ 321.056690][T12516] ? ima_iint_find+0xe9/0x130 [ 321.056729][T12516] ? __pfx_tomoyo_release+0x10/0x10 [ 321.056763][T12516] tomoyo_release+0x31/0x40 [ 321.056801][T12516] __fput+0x3ff/0xb40 [ 321.056840][T12516] task_work_run+0x150/0x240 [ 321.056883][T12516] ? __pfx_task_work_run+0x10/0x10 [ 321.056931][T12516] exit_to_user_mode_loop+0x100/0x4a0 [ 321.056973][T12516] do_syscall_64+0x668/0xf80 [ 321.057008][T12516] ? clear_bhb_loop+0x40/0x90 [ 321.057045][T12516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.057072][T12516] RIP: 0033:0x7ff0acd9c799 [ 321.057098][T12516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.057126][T12516] RSP: 002b:00007ff0add13028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 321.057155][T12516] RAX: 0000000000000000 RBX: 00007ff0ad015fa0 RCX: 00007ff0acd9c799 [ 321.057174][T12516] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 321.057190][T12516] RBP: 00007ff0ace32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 321.057207][T12516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.057222][T12516] R13: 00007ff0ad016038 R14: 00007ff0ad015fa0 R15: 00007ffe2bdb4f58 [ 321.057259][T12516] [ 321.314941][ T5835] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6 [ 322.092358][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3517'. [ 323.444204][T12548] FAULT_INJECTION: forcing a failure. [ 323.444204][T12548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.459539][T12548] CPU: 0 UID: 0 PID: 12548 Comm: syz.0.3521 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.459570][T12548] Tainted: [L]=SOFTLOCKUP [ 323.459576][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.459586][T12548] Call Trace: [ 323.459593][T12548] [ 323.459601][T12548] dump_stack_lvl+0x100/0x190 [ 323.459635][T12548] should_fail_ex.cold+0x5/0xa [ 323.459658][T12548] _copy_to_user+0x32/0xd0 [ 323.459678][T12548] tomoyo_flush+0x161/0x520 [ 323.459704][T12548] tomoyo_print_number_union+0x110/0x3c0 [ 323.459729][T12548] tomoyo_print_entry+0x2ba9/0x4880 [ 323.459761][T12548] ? __pfx_tomoyo_print_entry+0x10/0x10 [ 323.459784][T12548] ? find_held_lock+0x2b/0x80 [ 323.459801][T12548] ? __might_fault+0xc5/0x140 [ 323.459826][T12548] ? __might_fault+0xc5/0x140 [ 323.459862][T12548] tomoyo_read_domain2+0xa3/0x380 [ 323.459888][T12548] tomoyo_read_domain+0x30e/0xe10 [ 323.459918][T12548] tomoyo_read_control+0x29c/0x540 [ 323.459944][T12548] ? __pfx_tomoyo_read+0x10/0x10 [ 323.459966][T12548] vfs_read+0x1e4/0xb30 [ 323.459997][T12548] ? __pfx_vfs_read+0x10/0x10 [ 323.460035][T12548] ? __fget_files+0x215/0x3d0 [ 323.460058][T12548] ? __fget_files+0x21f/0x3d0 [ 323.460082][T12548] ksys_read+0x12a/0x250 [ 323.460109][T12548] ? __pfx_ksys_read+0x10/0x10 [ 323.460144][T12548] do_syscall_64+0x106/0xf80 [ 323.460166][T12548] ? clear_bhb_loop+0x40/0x90 [ 323.460188][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.460208][T12548] RIP: 0033:0x7ff0acd9c799 [ 323.460223][T12548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.460242][T12548] RSP: 002b:00007ff0add13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.460261][T12548] RAX: ffffffffffffffda RBX: 00007ff0ad015fa0 RCX: 00007ff0acd9c799 [ 323.460275][T12548] RDX: 0000000100000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 323.460286][T12548] RBP: 00007ff0ace32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 323.460297][T12548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.460310][T12548] R13: 00007ff0ad016038 R14: 00007ff0ad015fa0 R15: 00007ffe2bdb4f58 [ 323.460334][T12548] [ 325.039455][T12562] binder: 12559:12562 ioctl c00c620f 200000000040 returned -22 [ 327.016118][T12590] FAULT_INJECTION: forcing a failure. [ 327.016118][T12590] name failslab, interval 1, probability 0, space 0, times 0 [ 327.033986][T12590] CPU: 0 UID: 0 PID: 12590 Comm: syz.1.3531 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.034048][T12590] Tainted: [L]=SOFTLOCKUP [ 327.034061][T12590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.034080][T12590] Call Trace: [ 327.034090][T12590] [ 327.034102][T12590] dump_stack_lvl+0x100/0x190 [ 327.034156][T12590] should_fail_ex.cold+0x5/0xa [ 327.034195][T12590] should_failslab+0xc2/0x120 [ 327.034228][T12590] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 327.034272][T12590] ? alloc_inode+0x183/0x250 [ 327.034313][T12590] ? find_inode_fast+0x1fa/0x910 [ 327.034359][T12590] alloc_inode+0x183/0x250 [ 327.034401][T12590] iget_locked+0x1d9/0x6d0 [ 327.034443][T12590] ? __pfx_iget_locked+0x10/0x10 [ 327.034482][T12590] ? kernfs_root+0xee/0x2a0 [ 327.034524][T12590] ? kernfs_root+0xee/0x2a0 [ 327.034575][T12590] kernfs_get_inode+0x46/0x470 [ 327.034620][T12590] kernfs_iop_lookup+0x1a7/0x2d0 [ 327.034669][T12590] __lookup_slow+0x251/0x460 [ 327.034711][T12590] ? __pfx___lookup_slow+0x10/0x10 [ 327.034774][T12590] ? __d_lookup+0x266/0x4a0 [ 327.034829][T12590] lookup_slow+0x50/0x70 [ 327.034870][T12590] link_path_walk+0x1377/0x1cc0 [ 327.034932][T12590] path_openat+0x1be/0x31a0 [ 327.034961][T12590] ? kasan_save_stack+0x3f/0x50 [ 327.035007][T12590] ? kasan_save_stack+0x30/0x50 [ 327.035059][T12590] ? kasan_save_track+0x14/0x30 [ 327.035106][T12590] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 327.035164][T12590] ? __pfx_path_openat+0x10/0x10 [ 327.035217][T12590] do_file_open+0x20e/0x430 [ 327.035250][T12590] ? __pfx_do_file_open+0x10/0x10 [ 327.035304][T12590] ? alloc_fd+0x476/0x790 [ 327.035334][T12590] ? do_getname+0x191/0x390 [ 327.035372][T12590] do_sys_openat2+0x10d/0x1e0 [ 327.035411][T12590] ? __pfx_do_sys_openat2+0x10/0x10 [ 327.035465][T12590] __x64_sys_openat+0x12d/0x210 [ 327.035507][T12590] ? __pfx___x64_sys_openat+0x10/0x10 [ 327.035561][T12590] do_syscall_64+0x106/0xf80 [ 327.035596][T12590] ? clear_bhb_loop+0x40/0x90 [ 327.035633][T12590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.035663][T12590] RIP: 0033:0x7fee55b9c799 [ 327.035690][T12590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.035719][T12590] RSP: 002b:00007fee56ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 327.035750][T12590] RAX: ffffffffffffffda RBX: 00007fee55e15fa0 RCX: 00007fee55b9c799 [ 327.035771][T12590] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 327.035788][T12590] RBP: 00007fee55c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 327.035806][T12590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.035824][T12590] R13: 00007fee55e16038 R14: 00007fee55e15fa0 R15: 00007fff60790888 [ 327.035867][T12590] [ 328.717675][T12620] binder: 12618:12620 ioctl c00c620f 200000000040 returned -22 [ 332.475920][T12679] futex_wake_op: syz.1.3544 tries to shift op by -2048; fix this program [ 332.514085][T12671] syz.0.3543 (12671): attempted to duplicate a private mapping with mremap. This is not supported. [ 332.535988][T12679] futex_wake_op: syz.1.3544 tries to shift op by -2048; fix this program [ 332.588905][T12679] 0x000000000001-0x000000020000 : "" [ 332.675883][T12679] ftl_cs: FTL header corrupt! [ 333.366749][T12697] binder: 12695:12697 ioctl c00c620f 200000000040 returned -22 [ 334.988869][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 336.382255][T12751] nbd: must specify a device to reconfigure [ 337.959982][T12768] binder: 12767:12768 ioctl c00c620f 200000000040 returned -22 [ 339.228341][T12788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3568'. [ 339.679053][T12799] random: crng reseeded on system resumption [ 339.771977][T12799] hub 1-0:1.0: USB hub found [ 339.794531][T12799] hub 1-0:1.0: 1 port detected [ 341.151020][T12814] openvswitch: netlink: IP tunnel dst address not specified [ 341.242783][T12814] FAULT_INJECTION: forcing a failure. [ 341.242783][T12814] name fail_futex, interval 1, probability 0, space 0, times 0 [ 341.345444][T12814] CPU: 1 UID: 0 PID: 12814 Comm: syz.3.3574 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.345479][T12814] Tainted: [L]=SOFTLOCKUP [ 341.345485][T12814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.345496][T12814] Call Trace: [ 341.345502][T12814] [ 341.345510][T12814] dump_stack_lvl+0x100/0x190 [ 341.345545][T12814] should_fail_ex.cold+0x5/0xa [ 341.345568][T12814] get_futex_key+0x1d2/0x1620 [ 341.345594][T12814] ? __pfx_get_futex_key+0x10/0x10 [ 341.345616][T12814] ? find_held_lock+0x2b/0x80 [ 341.345632][T12814] ? caif_connect_client+0x214/0x1050 [ 341.345654][T12814] ? caif_connect_client+0x214/0x1050 [ 341.345679][T12814] futex_wait_setup+0x83/0x510 [ 341.345712][T12814] __futex_wait+0x19f/0x300 [ 341.345741][T12814] ? __pfx___futex_wait+0x10/0x10 [ 341.345771][T12814] ? __pfx_futex_wake_mark+0x10/0x10 [ 341.345802][T12814] ? futex_hash+0x2c5/0x380 [ 341.345832][T12814] futex_wait+0xed/0x380 [ 341.345859][T12814] ? __pfx_futex_wait+0x10/0x10 [ 341.345890][T12814] ? __might_fault+0xc5/0x140 [ 341.345920][T12814] do_futex+0x1ef/0x350 [ 341.345943][T12814] ? __pfx_do_futex+0x10/0x10 [ 341.345967][T12814] ? __sys_connect+0xe4/0x170 [ 341.345989][T12814] __x64_sys_futex+0x34f/0x4d0 [ 341.346014][T12814] ? __pfx___x64_sys_futex+0x10/0x10 [ 341.346045][T12814] do_syscall_64+0x106/0xf80 [ 341.346074][T12814] ? clear_bhb_loop+0x40/0x90 [ 341.346097][T12814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.346115][T12814] RIP: 0033:0x7fc5ed99c799 [ 341.346133][T12814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.346151][T12814] RSP: 002b:00007fc5ee8780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 341.346169][T12814] RAX: ffffffffffffffda RBX: 00007fc5edc15fa8 RCX: 00007fc5ed99c799 [ 341.346181][T12814] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc5edc15fa8 [ 341.346193][T12814] RBP: 00007fc5edc15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 341.346203][T12814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.346214][T12814] R13: 00007fc5edc16038 R14: 00007ffd45050060 R15: 00007ffd45050148 [ 341.346236][T12814] [ 341.830461][T12817] NFSD: Failed to start, no listeners configured. [ 344.682618][T12849] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 346.936951][ T5835] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 348.765448][ T5835] Bluetooth: Frame is too long (len 122, expected len 4) [ 350.155483][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.165599][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.174532][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.195437][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.206209][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.351079][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 350.972194][T12912] chnl_net:caif_netlink_parms(): no params data found [ 351.358535][T12912] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.392190][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.410192][T12912] bridge_slave_0: entered allmulticast mode [ 351.434959][T12912] bridge_slave_0: entered promiscuous mode [ 351.453866][T12912] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.477811][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.485709][T12912] bridge_slave_1: entered allmulticast mode [ 351.493990][T12912] bridge_slave_1: entered promiscuous mode [ 351.644624][T12912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.668964][T12912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.853408][T12912] team0: Port device team_slave_0 added [ 351.864585][T12912] team0: Port device team_slave_1 added [ 352.097480][T12912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.104576][T12912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.168274][T12912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.198259][T12912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.215274][T12912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.266636][ T51] Bluetooth: hci3: command tx timeout [ 352.273887][T12912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.381292][T12912] hsr_slave_0: entered promiscuous mode [ 352.390546][T12912] hsr_slave_1: entered promiscuous mode [ 352.406522][T12912] debugfs: 'hsr0' already exists in 'hsr' [ 352.412313][T12912] Cannot create hsr debugfs directory [ 353.024610][T12932] zswap: compressor not available [ 353.286296][ T6200] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.454989][ T6200] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.626836][ T6200] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.716592][ T6200] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.742119][T12912] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.754700][T12912] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.783126][T12912] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.806817][T12912] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.992119][ T6200] bridge_slave_1: left allmulticast mode [ 354.004927][ T6200] bridge_slave_1: left promiscuous mode [ 354.013217][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.029337][ T6200] bridge_slave_0: left allmulticast mode [ 354.045986][ T6200] bridge_slave_0: left promiscuous mode [ 354.051865][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.345612][ T51] Bluetooth: hci3: command tx timeout [ 354.574006][ T6200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.615052][ T6200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.656680][ T6200] bond0 (unregistering): Released all slaves [ 354.827322][ T6200] .^: left promiscuous mode [ 354.854850][T12912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.894966][T12912] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.914691][T11775] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.921850][T11775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.974961][T11775] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.982891][T11775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.079823][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3609'. [ 355.817536][ T6200] hsr_slave_0: left promiscuous mode [ 355.840160][ T6200] hsr_slave_1: left promiscuous mode [ 355.859854][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.873607][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.886886][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.903498][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.941822][ T6200] veth1_macvtap: left promiscuous mode [ 355.955460][ T6200] veth0_macvtap: left promiscuous mode [ 355.968739][ T6200] veth1_vlan: left promiscuous mode [ 355.981057][ T6200] veth0_vlan: left promiscuous mode [ 356.427427][ T51] Bluetooth: hci3: command tx timeout [ 356.485354][T13002] ================================================================== [ 356.485368][T13002] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 356.485405][T13002] Write of size 8 at addr ffffc90004afb000 by task syz.3.3615/13002 [ 356.485421][T13002] [ 356.485432][T13002] CPU: 0 UID: 0 PID: 13002 Comm: syz.3.3615 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.485458][T13002] Tainted: [L]=SOFTLOCKUP [ 356.485465][T13002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.485476][T13002] Call Trace: [ 356.485483][T13002] [ 356.485490][T13002] dump_stack_lvl+0x100/0x190 [ 356.485516][T13002] print_report+0x156/0x4c9 [ 356.485540][T13002] ? _raw_spin_lock_irqsave+0x52/0x60 [ 356.485560][T13002] ? __virt_addr_valid+0x81/0x620 [ 356.485584][T13002] ? sys_fillrect+0x174a/0x1910 [ 356.485611][T13002] kasan_report+0xdf/0x1e0 [ 356.485629][T13002] ? sys_fillrect+0x174a/0x1910 [ 356.485652][T13002] sys_fillrect+0x174a/0x1910 [ 356.485677][T13002] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 356.485706][T13002] bit_clear+0x17d/0x220 [ 356.485722][T13002] ? __pfx_bit_clear+0x10/0x10 [ 356.485739][T13002] ? fb_get_color_depth+0x120/0x250 [ 356.485766][T13002] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 356.485798][T13002] __fbcon_clear+0x633/0x760 [ 356.485825][T13002] ? __pfx_bit_clear+0x10/0x10 [ 356.485843][T13002] fbcon_scroll+0x48b/0x650 [ 356.485870][T13002] con_scroll+0x464/0x690 [ 356.485892][T13002] do_con_write+0x6883/0x8540 [ 356.485922][T13002] ? __pfx_do_con_write+0x10/0x10 [ 356.485949][T13002] con_write+0x23/0xb0 [ 356.485970][T13002] n_tty_write+0x44f/0x12d0 [ 356.486000][T13002] ? __pfx_n_tty_write+0x10/0x10 [ 356.486025][T13002] ? trace_kmalloc+0x101/0x130 [ 356.486052][T13002] ? __pfx_woken_wake_function+0x10/0x10 [ 356.486080][T13002] ? rcu_is_watching+0x12/0xc0 [ 356.486107][T13002] ? file_tty_write.isra.0+0x694/0x890 [ 356.486129][T13002] ? kfree+0x2ec/0x6b0 [ 356.486151][T13002] ? __pfx_n_tty_write+0x10/0x10 [ 356.486178][T13002] file_tty_write.isra.0+0x4d2/0x890 [ 356.486202][T13002] redirected_tty_write+0xd4/0x120 [ 356.486225][T13002] vfs_write+0x6ac/0x1070 [ 356.486252][T13002] ? __pfx_redirected_tty_write+0x10/0x10 [ 356.486275][T13002] ? __pfx_vfs_write+0x10/0x10 [ 356.486301][T13002] ? find_held_lock+0x2b/0x80 [ 356.486322][T13002] ksys_write+0x12a/0x250 [ 356.486338][T13002] ? __pfx_ksys_write+0x10/0x10 [ 356.486355][T13002] do_syscall_64+0x106/0xf80 [ 356.486376][T13002] ? clear_bhb_loop+0x40/0x90 [ 356.486396][T13002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.486414][T13002] RIP: 0033:0x7fc5ed99c799 [ 356.486428][T13002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.486446][T13002] RSP: 002b:00007fc5ee857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.486465][T13002] RAX: ffffffffffffffda RBX: 00007fc5edc16090 RCX: 00007fc5ed99c799 [ 356.486477][T13002] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 356.486488][T13002] RBP: 00007fc5eda32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 356.486498][T13002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.486508][T13002] R13: 00007fc5edc16128 R14: 00007fc5edc16090 R15: 00007ffd45050148 [ 356.486525][T13002] [ 356.486537][T13002] [ 356.486542][T13002] The buggy address belongs to a 2-page vmalloc region starting at 0xffffc90004af9000 allocated at kcov_ioctl+0x4c/0x720 [ 356.486583][T13002] Memory state around the buggy address: [ 356.486593][T13002] ffffc90004afaf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.486606][T13002] ffffc90004afaf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.486619][T13002] >ffffc90004afb000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 356.486629][T13002] ^ [ 356.486638][T13002] ffffc90004afb080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 356.486655][T13002] ffffc90004afb100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 356.486665][T13002] ================================================================== [ 356.486676][T13002] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 356.486690][T13002] CPU: 0 UID: 0 PID: 13002 Comm: syz.3.3615 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.486714][T13002] Tainted: [L]=SOFTLOCKUP [ 356.486720][T13002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.486731][T13002] Call Trace: [ 356.486737][T13002] [ 356.486743][T13002] dump_stack_lvl+0x100/0x190 [ 356.486769][T13002] vpanic+0x552/0x970 [ 356.486787][T13002] ? __pfx_vpanic+0x10/0x10 [ 356.486805][T13002] ? __pfx_vprintk_emit+0x10/0x10 [ 356.486835][T13002] ? sys_fillrect+0x174a/0x1910 [ 356.486855][T13002] panic+0xd1/0xe0 [ 356.486871][T13002] ? __pfx_panic+0x10/0x10 [ 356.486890][T13002] ? sys_fillrect+0x174a/0x1910 [ 356.486913][T13002] check_panic_on_warn.cold+0x19/0x34 [ 356.486932][T13002] end_report.part.0+0x3a/0x90 [ 356.486956][T13002] kasan_report.cold+0xe/0x18 [ 356.486981][T13002] ? sys_fillrect+0x174a/0x1910 [ 356.487004][T13002] sys_fillrect+0x174a/0x1910 [ 356.487029][T13002] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 356.487063][T13002] bit_clear+0x17d/0x220 [ 356.487079][T13002] ? __pfx_bit_clear+0x10/0x10 [ 356.487102][T13002] ? fb_get_color_depth+0x120/0x250 [ 356.487134][T13002] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 356.487165][T13002] __fbcon_clear+0x633/0x760 [ 356.487199][T13002] ? __pfx_bit_clear+0x10/0x10 [ 356.487218][T13002] fbcon_scroll+0x48b/0x650 [ 356.487245][T13002] con_scroll+0x464/0x690 [ 356.487267][T13002] do_con_write+0x6883/0x8540 [ 356.487295][T13002] ? __pfx_do_con_write+0x10/0x10 [ 356.487321][T13002] con_write+0x23/0xb0 [ 356.487342][T13002] n_tty_write+0x44f/0x12d0 [ 356.487373][T13002] ? __pfx_n_tty_write+0x10/0x10 [ 356.487399][T13002] ? trace_kmalloc+0x101/0x130 [ 356.487418][T13002] ? __pfx_woken_wake_function+0x10/0x10 [ 356.487445][T13002] ? rcu_is_watching+0x12/0xc0 [ 356.487470][T13002] ? file_tty_write.isra.0+0x694/0x890 [ 356.487492][T13002] ? kfree+0x2ec/0x6b0 [ 356.487513][T13002] ? __pfx_n_tty_write+0x10/0x10 [ 356.487539][T13002] file_tty_write.isra.0+0x4d2/0x890 [ 356.487564][T13002] redirected_tty_write+0xd4/0x120 [ 356.487593][T13002] vfs_write+0x6ac/0x1070 [ 356.487621][T13002] ? __pfx_redirected_tty_write+0x10/0x10 [ 356.487649][T13002] ? __pfx_vfs_write+0x10/0x10 [ 356.487681][T13002] ? find_held_lock+0x2b/0x80 [ 356.487704][T13002] ksys_write+0x12a/0x250 [ 356.487720][T13002] ? __pfx_ksys_write+0x10/0x10 [ 356.487739][T13002] do_syscall_64+0x106/0xf80 [ 356.487759][T13002] ? clear_bhb_loop+0x40/0x90 [ 356.487779][T13002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.487801][T13002] RIP: 0033:0x7fc5ed99c799 [ 356.487814][T13002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.487833][T13002] RSP: 002b:00007fc5ee857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.487850][T13002] RAX: ffffffffffffffda RBX: 00007fc5edc16090 RCX: 00007fc5ed99c799 [ 356.487862][T13002] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 356.487873][T13002] RBP: 00007fc5eda32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 356.487884][T13002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.487894][T13002] R13: 00007fc5edc16128 R14: 00007fc5edc16090 R15: 00007ffd45050148 [ 356.487911][T13002] [ 356.488089][T13002] Kernel Offset: disabled