last executing test programs: 8.26271741s ago: executing program 3 (id=2116): r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r0, &(0x7f0000000040)="a5cac73806f9a7", 0x7) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) getsid$auto(0x0) select$auto(0x80, &(0x7f0000000500)={[0x7f, 0x1, 0x7, 0x2, 0x5, 0x5, 0xc82, 0x0, 0x3, 0x5, 0x6, 0x4, 0x5, 0x64af, 0x0, 0x4]}, &(0x7f0000000580)={[0x7f, 0x3, 0xd9, 0x6, 0x8001, 0x101, 0x9, 0x400, 0x4, 0x101, 0x7, 0x7, 0x4, 0x7, 0x101, 0x4f3e]}, &(0x7f0000000600)={[0x5, 0x400, 0x2, 0xa7, 0xa6, 0xb1, 0xffffffffffffffff, 0x100, 0x800, 0x1000, 0x4000000100000001, 0x2, 0x5, 0x7f, 0x0, 0x164a]}, &(0x7f0000000280)={0x1, 0xfb1}) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x8, 0x4, 0x4, 0xb9, 0x8, 0xc, 0xffffffffffffffff, 0x2, 0x7ff}, 0x6f4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x1, 0x7ff) ptrace$auto(0x9, r1, 0x177, 0x6) ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)="f9c6db73364934578d51601d132b20dd82ae0781f6cb18c55fb7ed811a498af961a2ba35abcb2a9e90cb1318a4e844fa36d450dd94feeb082f1df20f92ccf13a81a57128c3747e32049e83c577e1acbc77ae0592cdbc051382debcaa0dc8ed6a464e67d65d0fe51909b6301747549e056844706522e452069bc58cceba3c6f41643ea20806562e91ca8a2cc01217c98f9dbad36dd49ba0ac6b5eac96f27ca3511f2ead40050e4c") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r2, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x205ac, &(0x7f0000000100)={0x0, 0x7}, 0x5, 0x0, 0x5, 0x4}, 0x20000005}, 0x5, 0xcae) getrandom$auto(0x0, 0x6000000, 0x3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = socket(0x29, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r3, 0x89f0, 0x24) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.4879592s ago: executing program 3 (id=2120): mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) mmap$auto(0x0, 0x20007, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-touch3\x00', 0x0, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x107e42, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r1, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) close_range$auto(0xffffffffffffffff, r0, 0x9) socket(0x10, 0x2, 0x4) r3 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1ffcc}, 0x1, 0x0, 0x0, 0x6b6}, 0x7}, 0x3, 0xff) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) 5.731257267s ago: executing program 0 (id=2130): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x2, 0xdd, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0xa, 0x801, 0x84) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b4b", 0xfdef) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x20000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) (async, rerun: 64) setsockopt$auto(r0, 0x10000000084, 0x77, 0x0, 0x2) (async, rerun: 64) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) 5.297712301s ago: executing program 0 (id=2131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) r2 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000040)=@link_update={r0, @new_prog_fd=r0, 0xa, @old_map_fd=r0}, 0x8) r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), r0) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0xae}]}, 0x1c}}, 0x20004000) r7 = socket(0x1d, 0x4, 0x1) write$auto_evm_xattr_ops_evm_secfs(r2, &(0x7f0000000200)="7dbc96bb1ab9d40ab44ea75dd5e081fb90716ca9940e845229f9b94476c9e77d46509f91633ee7c80788f5af4f31b255349b7d71e010ea1acba36e88137f89c81c0961b02bc8e0c3fdaf219ec617cdf3bbef7bb295bee97582b136ab6260694041d3dfa642a4d8", 0x67) mmap$auto(0xfffffffffffffffe, 0x0, 0x2, 0x8000000000000010, r0, 0xff) statmount$auto(&(0x7f0000000280)={0x8001, @raw=0xc, 0x9, 0x200, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x8000000000000000, 0xfffffc00, 0x7, 0x9, 0x4, 0x3, 0x1ff, 0x7, 0x2, 0x7f, 0x7, 0x8, 0x2, 0x3, 0x0, 0xc7, 0x3, 0x4, 0xb, 0x1, 0x63, 0xffffff3d, 0x886, 0x10, 0x139a8b33, 0x4260, 0x7, 0x4, 0xc09, [0x9, 0xb, 0x0, 0xd, 0x7, 0xba, 0x10, 0x6, 0x6, 0x7, 0x3, 0x4, 0xffffffffffffffff, 0x2, 0x9, 0x0, 0x8, 0x6, 0x90, 0x5, 0x9, 0x3, 0x74e9, 0x3342, 0x9, 0x7, 0x0, 0x8, 0x1, 0x5, 0x3, 0x0, 0x5, 0x1, 0x1, 0x5, 0x2, 0x4, 0x7, 0x3ff, 0x9, 0x8, 0x5], "48a697eb60346cc1c2cead0838430f350afea647e4a0e2b5d8358f712d7d9a027685f12b8a22099511db7b0f7885ebb9b3ae04f41e5eefb1f018232966488d6b5226aa619e78546a4b24548356a1d1c2a01e07288a6a94c3e36d43d8d92c69af3c8a2797e0fface674c3240cb889c22fd402987dc5e662ba0474ca36c8edcc41796cbabb3c6c4f023b89e46238f9d72216aa3c587fa7e481a99d7950f0a873910b66be491edb0c7377548dd01cfe9d3405595f2ad37cd0fe97ddfff4a76673bc0ccaebed7ed121dcd34e6f0422eb9404d4d2faad6fd5f450231671c9cf20dc3c76a305df854d"}, 0x6, 0x80000001) r8 = getsockopt$auto(r0, 0x8, 0x0, &(0x7f00000005c0)='-}{\x00', &(0x7f0000000600)=0x8) r9 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000680), r3) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r9, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000007c0), r7) sendmsg$auto_NL80211_CMD_START_AP(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r10, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x26}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x16, 0x115, "d056e36849e294d5c35013c75105e6a4ec0b"}, @NL80211_ATTR_MESH_CONFIG={0x18, 0x23, 0x0, 0x1, [@typed={0x14, 0x11a, 0x0, 0x0, @ipv6=@mcast1}]}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r11 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ttyz2\x00', 0x20000, 0x0) io_cancel$auto(0x3ff, &(0x7f0000000940)={0x5, 0x0, 0x8, 0x6, 0x8, r11, 0x6, 0xb88, 0x9, 0x0, 0x1, r5}, &(0x7f0000000980)={0x8, 0x200, 0x100, 0x3}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a00)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a40)={'pim6reg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'dvmrp0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r13, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xbc, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x100}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000800}, 0x20044004) r17 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000c40), r7) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r17, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0xb, 0x2, 'dummy0\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000d40)={0x10, [0x6, 0x1], [{0x4bd37c7b, 0x9, 0x1}, {0x8001, 0x6, 0x1}, {0x6, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x8, 0x1, 0x1}, {0x3, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0xff, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x40, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x8001, 0x1, 0x1, 0x1}, {0xfffffff8, 0x6, 0x1, 0x1, 0x1}], 0xff, 0x0, 0xffffffff, 0x200, 0x0, 0xfa, 0x5, "f2d11d46b892a78188990934221b1845e7da0fdf987d390bc8a9ee913303f6686d0e91c3fb6e2cf4a5d53ac644d77f24117732cfae53f1d78a3e4a2b131c0a68"}) rt_sigtimedwait$auto(&(0x7f0000000e40)={0xe3c7}, &(0x7f0000000e80)={@_si_pad}, &(0x7f0000000f00)={0x9d, 0x2}, 0x8) sendmmsg$auto(r12, &(0x7f0000001140)={{&(0x7f0000000f40)="a6e72a7e2cbd006c26771c35f8c7c1106ec05c430386c3efa46405bcdefd6e8af56c28257df869171ebc9371d8992020c7acce76a647c370918a8b5d7bb05ee7b71dfbf82673d86184bd017e2e9dc6e326539d29cd75f21bd7d9fe768c490b06684371ae9996609643ac2aaa98b8cf8946af3ca471249d529b466f83d0cfcc74ae17f623a44bc2d0e7373023aee53a06e617e9a3778d12660d77245a6c734e5affe532894b1415a9cc0545d6b09261c7f5837689993871b41d1c522c47", 0x10, &(0x7f0000001040)={&(0x7f0000001000)="3ab324f0d907a71e496004490b7c8b932cfc8a0f", 0x8}, 0x0, &(0x7f0000001080)="c6d5caa85c437be3220756f4118f475ecd2b4af4960f3e2e2da233b76573bb33d4198a9323aee1c4e518a49b7903a5c574ad9362d285a065e869b6877a52e1b43caa309b585a506af86669bb52aa58363d10c03882fb888dcce93e36c9fc5d203deb517734e82ca218be4a0fc3180ef2fb055911ca47102aa152a7a404916375d6c1445c58dce935d0f07cd5", 0x5, 0xa3e}, 0x2}, 0xfffffffe, 0x5) r18 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000011c0), r3) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r18, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @remote}]}, 0x28}}, 0x4d000) r19 = semctl$auto(0xe, 0x8, 0x8, 0x4) r20 = wait4$auto(0x0, &(0x7f00000012c0)=0x2, 0x6d, &(0x7f0000001300)={{0xa, 0x7ff}, {0x8, 0x1}, 0x4, 0x3, 0xfff, 0x5, 0x0, 0x0, 0x6, 0x1, 0xeb8, 0xfffffffffffffff8, 0x8, 0x17, 0x9, 0xfdc}) kcmp$auto(r19, r20, 0x0, r3, r4) 5.252741038s ago: executing program 3 (id=2132): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x50d803, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000180)={"e27999d6ab1ca487ebf63e98bd70edfac98dddad3c9a020432d15c18a086c055", 0x1147, 0x6, 0xffffffff, 0x9, 0x6, r1}) prctl$auto(0x3e, 0x100005, r2, 0x4, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000000)) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';') r5 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0xc0086202, r5) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x40000080) 5.066430678s ago: executing program 1 (id=2133): r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/environ\x00', 0x8400, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x7ffffffd, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x14000004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000340)='%]{\fZ', 0xffffffff) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0x18) getdents$auto(r4, 0x0, 0xa2b0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) read$auto_proc_environ_operations_base(r0, &(0x7f0000002280)=""/169, 0xa9) 4.359402103s ago: executing program 0 (id=2135): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r4, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f0000000000)="1404000000000000a5") 3.949509697s ago: executing program 1 (id=2137): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getresgid$auto(&(0x7f0000000080)=0x4, 0x0, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) (async) getsockopt$auto_SO_RXQ_OVFL(r0, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r2) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00V', @ANYRES16=r3, @ANYBLOB="010329bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x101, 0x15) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty36\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x80) (async) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000000)='\n') (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000c26f5689148563de95aac0eb60d5147ba513615aeb409d26dee254cecc55cbc0e52ee589d56aee13c4c252826b5c628a5a8305f0b5594d928c462614239e3257ba038eaaf3e100496c27b37467072c316c9d6693d06fd8", @ANYRES16=r7, @ANYBLOB="010000800400fadbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="05002d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x140000e4) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TT_LAST_TTVN={0x5, 0x12, 0x5}, @BATADV_ATTR_TPMETER_COOKIE={0x0, 0xd, 0x2}, @BATADV_ATTR_HARD_ADDRESS, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff040}, @BATADV_ATTR_BANDWIDTH_UP={0xffffffb5, 0x1b, 0x5}]}, 0x1e}, 0x1, 0x0, 0x0, 0x397ee8cf9374e002}, 0x34040005) madvise$auto(0x0, 0x200007, 0x8) (async) read$auto(0x3, 0x0, 0x8080) (async) unshare$auto(0x40000080) (async) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.621376665s ago: executing program 0 (id=2138): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x6}, 0xc, 0xffffffffffffffff, 0x7, 0x8) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async) r1 = socket(0x1a, 0x3, 0x6) r2 = io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) (rerun: 32) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x4891) (async) close_range$auto(0x2, 0xa, 0x0) (async) setsockopt$auto_SO_RCVTIMEO_NEW(r1, 0x1ff, 0x42, &(0x7f0000000040)=']J\x00', 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x24000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r3) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400553c5660338cb7dc8ceb00", @ANYRES16=r5, @ANYBLOB="010026bd7020f8dbdf250100000002000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="0800070000010000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB='\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) (async, rerun: 64) sendmsg$auto_IPVS_CMD_GET_DEST(r3, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000074e8d75d84c0e9ef31bb356aa243d521b74bbd868e352f6f84e3c623a0fbc8213bf9eb1877190e73fea334649cf0dc6a30625d04d76dfdd953f3ecdd8a8c33e8", @ANYRES16=r4, @ANYBLOB="ffa727bd7000fedbdf250800000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.211623634s ago: executing program 1 (id=2139): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x13bdc0, 0x0) sendmmsg$auto(r0, &(0x7f0000000440)={{&(0x7f0000000140)="4756ba2f9d24a58f26e0c19980f2ffe1651a2123e9fcb06a1ec8e126dba87ea9e3cca0a66aeff7839a49f930de864d03e89c88d73879c1ff6e05e7a2be1983ce72d2d40017abdcebd24463416af05008f7cfc4acbde49e781b0c7dc90cecb2bd2a2ce72c7a179d07af25066a19345cfa78f30853a54c22ce3c265bc18713dd737598a4cb199ae65c3cfd601db84641125c2251a02f93f94bfc7cb2f0da2e1622480ebdd17adbea8a9785d2281660dd9ba87f7994417a1841b93eb0e300053f032b85b91cecdeb46b7d39d2", 0x2, &(0x7f0000000400)={&(0x7f00000002c0)="a336188dce017d5b024d2bda778edf41c9514b4dc7ee576f863b77bb13270356de59c299fade9cd7b552b41f3ad1bdbcdea7711d29715d0ad9eb56da612e7059c9042b932fc658f6c553ccfec93b87d12c8b6d0fc18af4f51ef473775470c3770f550d4258875ad920414132e6983eccd65e408c298cd972e0cd2dab583c0e0458a326cb453dfe0dc907c51c5fdc0e7dea7b648f5cadb98a1d4eef9aca44bf67f903f7298f3908d088ac301641fdd2a054bfc1e2ba7423aeeee5108f323cd0fb55aa233c5c5000c7d411baa85398a4605e5e88040e187286d5af877aac9274c2", 0xd}, 0x8, &(0x7f00000004c0)="9f78a69d864f0d3ed682a35a3ee40d3bb6b49245c0c604f9359bf3a139b3f76aaaaad49f65df0fa35925650c3f323373797164e77b810e0e358a76ff3b6f5406a7182c", 0x0, 0x7}, 0x5}, 0x7, 0x5) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000540)="c051bf5cc56c0769de020511d11301870e0fa1b44232c562c29f225c511d", 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0xb}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0xd) eventfd$auto(0x3) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xc2781, 0x0) unshare$auto(0x40000080) r5 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r5, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') rename$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r6, 0x0, 0x62d2) ioctl$auto(r4, 0xc040563d, r3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS0\x00', 0x121000, 0x0) ioctl$auto(0x3, 0x540b, 0x1) mmap$auto(0xe0, 0x80, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto_SO_PRIORITY(0xffffffffffffffff, 0xfffffff3, 0xc, &(0x7f0000000000)='\\(\x00', &(0x7f0000000040)=0x1) r7 = prctl$auto(0x3d, 0xffffffffffffffff, 0x0, 0x5, 0x100007) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r7, 0x7cb, 0x0) madvise$auto(0x0, 0x200007, 0x19) 2.051510162s ago: executing program 3 (id=2140): mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) mmap$auto(0x0, 0x20007, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-touch3\x00', 0x0, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x107e42, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r1, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) close_range$auto(0xffffffffffffffff, r0, 0x9) socket(0x10, 0x2, 0x4) r3 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1ffcc}, 0x1, 0x0, 0x0, 0x6b6}, 0x7}, 0x3, 0xff) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) 1.955004432s ago: executing program 2 (id=2141): socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) r0 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101201, 0x0) (async) mprotect$auto(0x200000000000, 0x806124, 0x8) (async) write$auto_ctl_device_fops_user(r0, &(0x7f0000000300)="0afcdf8eb0d50f1dbabf32062d9b3656d7691f92d3a6925d82b8fff1c24df86c272395d09d23aeaad0db6d154e2e41a384b81c367840632b70a433ed3debb564a91d165ebd91e9fa7b564fe5044878a78648bd53b59992bb6177b85bc34f7ffa2bcf61d2f52b1e4f", 0x68) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pnp0/00:03/id\x00', 0x0, 0x0) readv$auto(r4, &(0x7f0000000100)={&(0x7f0000000380)="f07a08510e13c7cff74c8b589200dc602c3b5a10c81fd3c225315daa757b74561ce76b77224b83e90c3ee77651862adebee273b1d88270885412db938c8456e3c5fcf91e40ce6305b4c3f3291f8973303d2094961aa1008854ed0b6d73e1c1f4fdc0cc0a3763104beeaafb09c0606322c57d3a60b4574282f7d932785035555242bcd261148c26b8e6a7b3fef20ef24dc84ee16819a8c0dd9f9763854e95abe3be84000000000000000000", 0xd20}, 0x6) (async) timer_create$auto(0x803, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) epoll_create$auto(0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r5 = io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40d1}, 0x0) (async) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000140)="eecbb005dda0fc31fbe14370ec60005d0ebcabe00c83e6aec6ab4dc97c8f5705028f00eacc5685e92015eab1ae35e6abf9999adeba648864bcc59787a8b981f925c46a44b13748154b81addb5a6364a6c092a2a0eab60ea641b766acc548e23e15e4602692990da8e6c7d92a6b30ee04b1b4bc46abe4c9dd1a23a62ef7250e8d8e56b0b7ec7c", 0xffffffff}, 0x7, 0x0) r7 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r7, 0x9, 0x820e, 0x8b, 0x0, 0x18) (async) ioctl$auto_VHOST_SET_VRING_KICK2(r5, 0x4008af20, &(0x7f0000000040)={0x5, r2}) 1.66404779s ago: executing program 2 (id=2142): socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) uname$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "551e7285"}, 0x6, 0x3, 0xff) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) dup3$auto(0x8000000000000001, 0x5, 0x800080000) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff5c, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) setsockopt$auto(0x3, 0x10000000084, 0x1f, 0x0, 0x3ff) 1.414130611s ago: executing program 0 (id=2143): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000400), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setresuid$auto(0x0, 0x0, 0x0) msgctl$auto_MSG_STAT(0xff, 0xb, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x6, 0x3, 0x8, 0x7a99}, 0x0, &(0x7f0000000040)=0x4, 0xfffffffffffffffc, 0x0, 0x5, 0x5, 0x70, 0x8, 0x6, 0x400, @inferred, @raw=0x6}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x3}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x4, 0x4008) 1.358543156s ago: executing program 2 (id=2144): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008019}, 0x28000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) r4 = socket(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1, r4, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000}, 0x24040041) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) fanotify_init$auto(0x5, 0x800) pipe2$auto(0x0, 0x80) r7 = socket(0x2, 0x1, 0x0) setsockopt$auto(r7, 0x6, 0x9, 0x0, 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)="4b01e307b46156dba910d8beeb38e4c4df4184eebe738303da4633f03c0134f403ba3d356c57eb7a87668a2911e3f48fc02f58b5443162b43a72f58fcb4535aa9690189e7eeea0e6f407e07fb538dc0bb26e28a8431d4ff33c719bef0b89ee2a02f0e83aa508e0be684fa9c4adeb06000000635a748ba35a861a4f1b9266e337c28312f42e367b0c2e88ce67023f42fc630a211f47171a5ebc4bb6b69f31f57f2d6785ec067e96f82dca5712557d1d880e9c3e98b14a14bed9452ff70c703ca8f6bf2513a4dc1a29ec61a379f73b000000006100000000") close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008019}, 0x28000) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) (async) socket(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00'}) (async) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1, r4, @relative_id=0x13, 0xe600}, 0xf) (async) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000}, 0x24040041) (async) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) fanotify_init$auto(0x5, 0x800) (async) pipe2$auto(0x0, 0x80) (async) socket(0x2, 0x1, 0x0) (async) setsockopt$auto(r7, 0x6, 0x9, 0x0, 0x7fffffff) (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)="4b01e307b46156dba910d8beeb38e4c4df4184eebe738303da4633f03c0134f403ba3d356c57eb7a87668a2911e3f48fc02f58b5443162b43a72f58fcb4535aa9690189e7eeea0e6f407e07fb538dc0bb26e28a8431d4ff33c719bef0b89ee2a02f0e83aa508e0be684fa9c4adeb06000000635a748ba35a861a4f1b9266e337c28312f42e367b0c2e88ce67023f42fc630a211f47171a5ebc4bb6b69f31f57f2d6785ec067e96f82dca5712557d1d880e9c3e98b14a14bed9452ff70c703ca8f6bf2513a4dc1a29ec61a379f73b000000006100000000") (async) close_range$auto(0x2, 0x8000, 0x0) (async) 1.295989022s ago: executing program 1 (id=2145): mmap$auto(0x1, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x1) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) mmap$auto(0xc, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) sysfs$auto(0x2, 0x23, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x6) eventfd$auto(0x0) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_map_fd, 0x80, @old_map_fd=r0}, 0xa3) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) write$auto(r2, 0x0, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_REMOVE(0x1, 0x4, 0x67) r3 = socket(0x29, 0x2, 0x0) setsockopt$auto(r3, 0x119, 0xfffffffe, 0x0, 0x8) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r4 = io_uring_setup$auto(0x59, 0x0) io_uring_enter$auto(r4, 0x9, 0x820e, 0x6, 0x0, 0x18) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) 1.0870515s ago: executing program 2 (id=2146): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) sysfs$auto(0x2, 0x23, 0x0) open(0x0, 0x22040, 0x75) utimes$auto(0x0, 0x0) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) mprotect$auto(0x0, 0x8000000000000001, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x5, 0x25, 0x4909b6f5, 0x401, 0x7, 0x3, 0x9, 0x6, 0x3, 0x4, 0x2, 0xb4, 0x9, 0x208, 0x10003, 0x80, 0x80000000003, 0x80, 0xa, 0x22000, 0x5, 0x7, 0x84, 0x0, 0x9, 0xfffbffff, 0x0, 0x0, [0x17f2, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e4, 0x1f, 0x0, 0x2, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x7fff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}, 0x3, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r1, r3, 0x4, 0x302f, r2, @relative_id=0x13, 0x4}, 0xf) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0x91) stat$auto(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x8, 0x401, 0x8, 0xfffffffd, 0xffffffffffffffff, 0xee01, 0x0, 0x7, 0x5, 0x7, 0x7fffffff, 0x6, 0x6, 0x1ff, 0x1, 0x25, 0x2}) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r3, &(0x7f00000012c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000000480)=ANY=[@ANYBLOB="d80d0000", @ANYRES16=0x0, @ANYBLOB="010025bd7000090000009500000023027d800c00358004009d800400af8004006d003ce7434d1cc8cef9c23abbecd18ecdf6fe5abe54b5b948d999508ccea0ac2ed9ec3c86ff286d0f422db826b1ded6bd1ef389b095c8da0ca1f43e1ba5008e760446cf9412247d4ae350e59fe9da08f77aec879714c3f3dd21e76f710f3503fb9dae9954c0ad2a2b189a4c5303000000aa733d4c04895fdf9184944d3d8b3fff3ea2ea082fa086bb8743613d2862bc6bd697f2c5c0005980df9bcb44f780cc8d7b5f2361b43e34566029d0113da71cbfcf75f7bc3168c56772a2c8aa34af6a802e670b37b188d63eb61bfe3022527bddc65f8903936d028028d4c051a3ce4118907557aa460c8039c5e6e909edded71ddf8dad38ab5344b29f0823b78c02510b7de43e98c5cbf949687591ff4e73ad8c87faa1d4a210fb510c4254bc6d2c9907da42da7563a4a954e8c006f8dbbb9cd1358e93865b6015d01dde214516a4443ec2dc7ab16fd54ab80400418008009300", @ANYRES32=r5, @ANYBLOB="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"], 0xdd8}, 0x1, 0x0, 0x0, 0x4000400}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) setfsuid$auto(0xee00) getpid() 1.024127379s ago: executing program 1 (id=2147): socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r1}, 0x18) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) write$auto(0x3, 0x0, 0x5c8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) shutdown$auto(0x200000003, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x9}, 0x8) 764.288114ms ago: executing program 1 (id=2148): unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) write$auto(r0, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x1) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0) unshare$auto(0x40000080) times$auto(0x0) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x1000, 0x4) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub0/sw_params\x00', 0xa0500, 0x0) pread64$auto(r3, &(0x7f0000000300)='/sys/devices/LNXSYSTM:0\x04\x00\x00\x00XS\x95?\x9c \x0e\xadNP0A\xf5\xa5\xb2%\x04\xd5bxn\x9cW`\"03:00/d\x01\x00\x00\x00e:1a/sun\x00\n\x95\xec5\x01\xf9\x89Z<\x1e\x8b\x81\xa4\x82\r?\xeb\x9bG?(\xf6\xebH\xc4\x8db\xaaH\xef\xcaG\xc3\x8bW\v~\xb3(Tp\xce+\xfc\xba\xff`>\xf6\xb0\b\xf6\xd532\xfc\x8e\xb9\x1b\xb1 \xbb\xa1\xba\xc1\x05\x87\xe3c\xb3\b[\xb4\xc0r\xd2\b\xe7\x17\xfd`$s\xaf0d\xba\xb4\x05\x82\xe5\xe7\x12,%\x90=\xa6\xaex\x06\xb8Bu\x01\xec\x12\x9cZ6\xf9\xa5\xca@,\xc9G\xa2\xa21\x02p+\xca\xc6\xcd\xa2\x98\x12a\x80\xc3\xc8\xbdWp\xd6<\x88\x19\x14\xbfI\x94\x90\x94\x7fW\x06\x8e&q\xd4\xa0kNvY\"X1]\xf5\x10\xd4\xed\xcf\x17\xc0Gk\xfdXR\xde\x81Ze\xbe+\t6v\xa5\xf3J\x19\xd2\x88PT*\xcc\x06G\xe6\x15\xd5\xb6\xe4bf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x9, 0x2020009, 0x3, 0x7fffffff, 0xfffffffffffffffa, 0x0) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) acct$auto(&(0x7f00000000c0)='/dev/vhost-vsock\x00') 289.767345ms ago: executing program 2 (id=2150): r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x420000, 0x0) read$auto_tracing_fops_trace(r0, &(0x7f0000001580)=""/4101, 0x1005) 217.922314ms ago: executing program 0 (id=2151): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c58f40897678538b120ffe000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdb, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) socket(0x29, 0xa, 0xaa) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) 87.774164ms ago: executing program 3 (id=2152): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = gettid() shmctl$auto_SHM_INFO(0xd6a, 0xe, &(0x7f0000000600)={{0x8, 0x0, 0x0, 0x6, 0x8, 0x8, 0x4}, 0xfff, 0x48d, 0x9, 0x6, @inferred=r0, @raw=0x8001, 0x3, 0x0, &(0x7f0000000400), 0x0}) prctl$auto(0x3e, 0x1, r0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x8000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) sysfs$auto(0x2, 0x1f, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r1, 0x3b8a, 0x38) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044010}, 0x40850) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x6) getsockopt$auto_SO_RCVLOWAT(r2, 0xf, 0x12, &(0x7f0000000000)='\\:)[\x00', &(0x7f0000000180)=0x2) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x4, 0x9) mmap$auto(0x2, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x80000, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x1, 0x0) writev$auto(r3, &(0x7f00000000c0)={&(0x7f0000000040)='@', 0x1292}, 0x2) 0s ago: executing program 2 (id=2153): socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x26, 0x5, 0x8c68) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) futex_waitv$auto(0x0, 0x7ff, 0x8, &(0x7f00000000c0)={0x1000000004, 0x10}, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x9) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r4, 0x6, 0x0) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0) unshare$auto(0x40000080) setsockopt$auto(r1, 0xd0, 0x800000e4, 0x0, 0x569) kernel console output (not intermixed with test programs): syz.2.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.112424][T11747] Tainted: [L]=SOFTLOCKUP [ 349.112428][T11747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.112437][T11747] Call Trace: [ 349.112442][T11747] [ 349.112448][T11747] dump_stack_lvl+0x100/0x190 [ 349.112486][T11747] should_fail_ex.cold+0x5/0xa [ 349.112502][T11747] get_futex_key+0x1d2/0x1620 [ 349.112521][T11747] ? __pfx_get_futex_key+0x10/0x10 [ 349.112535][T11747] ? lock_acquire+0x1cf/0x380 [ 349.112557][T11747] futex_wake+0xea/0x530 [ 349.112578][T11747] ? __pfx_futex_wake+0x10/0x10 [ 349.112597][T11747] ? exit_mm_release+0x19/0x30 [ 349.112618][T11747] do_futex+0x32b/0x350 [ 349.112635][T11747] ? __pfx_do_futex+0x10/0x10 [ 349.112650][T11747] ? __might_fault+0xc5/0x140 [ 349.112673][T11747] mm_release+0x24a/0x2f0 [ 349.112687][T11747] do_exit+0x704/0x2b60 [ 349.112707][T11747] ? __pfx_do_exit+0x10/0x10 [ 349.112723][T11747] ? do_raw_spin_lock+0x128/0x260 [ 349.112741][T11747] ? find_held_lock+0x2b/0x80 [ 349.112753][T11747] ? get_signal+0x7e0/0x21e0 [ 349.112769][T11747] do_group_exit+0xd5/0x2a0 [ 349.112787][T11747] get_signal+0x1ec7/0x21e0 [ 349.112807][T11747] ? __pfx_get_signal+0x10/0x10 [ 349.112822][T11747] ? do_futex+0x192/0x350 [ 349.112840][T11747] arch_do_signal_or_restart+0x91/0x770 [ 349.112858][T11747] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 349.112879][T11747] ? __pfx___x64_sys_futex+0x10/0x10 [ 349.112900][T11747] exit_to_user_mode_loop+0x86/0x4a0 [ 349.112918][T11747] do_syscall_64+0x668/0xf80 [ 349.112937][T11747] ? clear_bhb_loop+0x40/0x90 [ 349.112954][T11747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.112968][T11747] RIP: 0033:0x7f553ab9c799 [ 349.112980][T11747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.112993][T11747] RSP: 002b:00007f553baae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 349.113007][T11747] RAX: fffffffffffffe00 RBX: 00007f553ae15fa8 RCX: 00007f553ab9c799 [ 349.113016][T11747] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f553ae15fa8 [ 349.113024][T11747] RBP: 00007f553ae15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 349.113032][T11747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.113040][T11747] R13: 00007f553ae16038 R14: 00007fff2b2e35e0 R15: 00007fff2b2e36c8 [ 349.113057][T11747] [ 350.812589][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 350.917728][T11792] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1294'. [ 352.186503][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'. [ 352.247585][T11814] openvswitch: HfR: Dropping previously announced user features [ 352.297138][T11811] i: entered promiscuous mode [ 352.882365][T11826] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1303'. [ 352.935201][T11828] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1303'. [ 355.412551][T11884] netlink: 29 bytes leftover after parsing attributes in process `syz.3.1318'. [ 355.453548][T11885] netlink: 29 bytes leftover after parsing attributes in process `syz.3.1318'. [ 355.523259][ T7119] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 355.523599][ T7119] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 358.169044][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 358.175597][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 360.325348][T11980] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input13 [ 361.645858][T11999] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1343'. [ 362.306785][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 362.503193][T12011] HfR: entered promiscuous mode [ 364.497898][T12074] FAULT_INJECTION: forcing a failure. [ 364.497898][T12074] name fail_futex, interval 1, probability 0, space 0, times 0 [ 364.536103][T12074] CPU: 0 UID: 0 PID: 12074 Comm: syz.3.1359 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.536127][T12074] Tainted: [L]=SOFTLOCKUP [ 364.536132][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.536147][T12074] Call Trace: [ 364.536221][T12074] [ 364.536226][T12074] dump_stack_lvl+0x100/0x190 [ 364.536358][T12074] should_fail_ex.cold+0x5/0xa [ 364.536387][T12074] get_futex_key+0x295/0x1620 [ 364.536421][T12074] ? __pfx_get_futex_key+0x10/0x10 [ 364.536435][T12074] ? lock_acquire+0x1cf/0x380 [ 364.536466][T12074] futex_wake+0xea/0x530 [ 364.536487][T12074] ? __pfx_futex_wake+0x10/0x10 [ 364.536506][T12074] ? exit_mm_release+0x19/0x30 [ 364.536533][T12074] do_futex+0x32b/0x350 [ 364.536550][T12074] ? __pfx_do_futex+0x10/0x10 [ 364.536565][T12074] ? __might_fault+0xc5/0x140 [ 364.536599][T12074] mm_release+0x24a/0x2f0 [ 364.536613][T12074] do_exit+0x704/0x2b60 [ 364.536633][T12074] ? __pfx_do_exit+0x10/0x10 [ 364.536649][T12074] ? do_raw_spin_lock+0x128/0x260 [ 364.536667][T12074] ? find_held_lock+0x2b/0x80 [ 364.536678][T12074] ? get_signal+0x7e0/0x21e0 [ 364.536697][T12074] do_group_exit+0xd5/0x2a0 [ 364.536716][T12074] get_signal+0x1ec7/0x21e0 [ 364.536743][T12074] ? __pfx_get_signal+0x10/0x10 [ 364.536758][T12074] ? do_futex+0x192/0x350 [ 364.536776][T12074] arch_do_signal_or_restart+0x91/0x770 [ 364.536803][T12074] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 364.536824][T12074] ? __pfx___x64_sys_futex+0x10/0x10 [ 364.536847][T12074] exit_to_user_mode_loop+0x86/0x4a0 [ 364.536870][T12074] do_syscall_64+0x668/0xf80 [ 364.536942][T12074] ? clear_bhb_loop+0x40/0x90 [ 364.536965][T12074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.536979][T12074] RIP: 0033:0x7f7fb659c799 [ 364.536992][T12074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.537005][T12074] RSP: 002b:00007f7fb75430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 364.537050][T12074] RAX: fffffffffffffe00 RBX: 00007f7fb6815fa8 RCX: 00007f7fb659c799 [ 364.537059][T12074] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7fb6815fa8 [ 364.537067][T12074] RBP: 00007f7fb6815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 364.537075][T12074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.537082][T12074] R13: 00007f7fb6816038 R14: 00007fff4b8d1850 R15: 00007fff4b8d1938 [ 364.537101][T12074] [ 365.088359][T12081] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1362'. [ 366.415097][T12118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1372'. [ 367.328409][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d648800: rx timeout, send abort [ 367.336930][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d648800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 367.929790][T12162] netlink: 290 bytes leftover after parsing attributes in process `syz.2.1381'. [ 368.407100][T12183] FAULT_INJECTION: forcing a failure. [ 368.407100][T12183] name failslab, interval 1, probability 0, space 0, times 0 [ 368.573335][T12183] CPU: 0 UID: 0 PID: 12183 Comm: syz.2.1382 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.573362][T12183] Tainted: [L]=SOFTLOCKUP [ 368.573367][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.573376][T12183] Call Trace: [ 368.573382][T12183] [ 368.573389][T12183] dump_stack_lvl+0x100/0x190 [ 368.573415][T12183] should_fail_ex.cold+0x5/0xa [ 368.573433][T12183] should_failslab+0xc2/0x120 [ 368.573480][T12183] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 368.573501][T12183] ? alloc_empty_file+0x55/0x1c0 [ 368.573523][T12183] ? __pfx_stack_trace_save+0x10/0x10 [ 368.573540][T12183] alloc_empty_file+0x55/0x1c0 [ 368.573557][T12183] path_openat+0xe8/0x31a0 [ 368.573571][T12183] ? kasan_save_stack+0x3f/0x50 [ 368.573590][T12183] ? kasan_save_stack+0x30/0x50 [ 368.573619][T12183] ? kasan_save_track+0x14/0x30 [ 368.573639][T12183] ? __kasan_slab_alloc+0x89/0x90 [ 368.573652][T12183] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 368.573672][T12183] ? do_getname+0x35/0x390 [ 368.573688][T12183] ? do_sys_openat2+0xc5/0x1e0 [ 368.573710][T12183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.573727][T12183] ? __pfx_path_openat+0x10/0x10 [ 368.573748][T12183] do_file_open+0x20e/0x430 [ 368.573764][T12183] ? __pfx_do_file_open+0x10/0x10 [ 368.573790][T12183] ? alloc_fd+0x476/0x790 [ 368.573812][T12183] ? do_getname+0x191/0x390 [ 368.573830][T12183] do_sys_openat2+0x10d/0x1e0 [ 368.573848][T12183] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.573872][T12183] __x64_sys_openat+0x12d/0x210 [ 368.573890][T12183] ? __pfx___x64_sys_openat+0x10/0x10 [ 368.573915][T12183] do_syscall_64+0x106/0xf80 [ 368.573934][T12183] ? clear_bhb_loop+0x40/0x90 [ 368.573951][T12183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.573966][T12183] RIP: 0033:0x7f553ab9c799 [ 368.573979][T12183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.573992][T12183] RSP: 002b:00007f553ba6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.574006][T12183] RAX: ffffffffffffffda RBX: 00007f553ae16180 RCX: 00007f553ab9c799 [ 368.574016][T12183] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 368.574026][T12183] RBP: 00007f553ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 368.574034][T12183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.574043][T12183] R13: 00007f553ae16218 R14: 00007f553ae16180 R15: 00007fff2b2e36c8 [ 368.574061][T12183] [ 369.485195][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 371.832201][T12264] FAULT_INJECTION: forcing a failure. [ 371.832201][T12264] name failslab, interval 1, probability 0, space 0, times 0 [ 371.893849][T12264] CPU: 0 UID: 0 PID: 12264 Comm: syz.2.1402 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.893876][T12264] Tainted: [L]=SOFTLOCKUP [ 371.893882][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.893899][T12264] Call Trace: [ 371.893905][T12264] [ 371.893911][T12264] dump_stack_lvl+0x100/0x190 [ 371.893939][T12264] should_fail_ex.cold+0x5/0xa [ 371.893956][T12264] should_failslab+0xc2/0x120 [ 371.893971][T12264] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 371.893991][T12264] ? ptlock_alloc+0x1f/0x70 [ 371.894013][T12264] ptlock_alloc+0x1f/0x70 [ 371.894031][T12264] pte_alloc_one+0x82/0x3d0 [ 371.894047][T12264] __pte_alloc+0x6d/0x3e0 [ 371.894061][T12264] ? __pfx___pte_alloc+0x10/0x10 [ 371.894075][T12264] ? find_held_lock+0x2b/0x80 [ 371.894088][T12264] ? find_held_lock+0x2b/0x80 [ 371.894100][T12264] ? walk_to_pmd+0x302/0x4c0 [ 371.894117][T12264] get_locked_pte+0xa1/0xc0 [ 371.894134][T12264] insert_page+0xcc/0x220 [ 371.894150][T12264] ? __pfx_insert_page+0x10/0x10 [ 371.894165][T12264] ? __pfx_down_read_trylock+0x10/0x10 [ 371.894189][T12264] vm_insert_page+0x2c0/0x400 [ 371.894208][T12264] kcov_mmap+0xca/0x130 [ 371.894259][T12264] __mmap_region+0x1443/0x29e0 [ 371.894284][T12264] ? __pfx___mmap_region+0x10/0x10 [ 371.894307][T12264] ? ima_match_policy+0x8c4/0x2350 [ 371.894432][T12264] ? find_held_lock+0x2b/0x80 [ 371.894446][T12264] ? process_measurement+0x4c8/0x2350 [ 371.894466][T12264] ? process_measurement+0x4c8/0x2350 [ 371.894495][T12264] ? process_measurement+0x1f4/0x2350 [ 371.894547][T12264] mmap_region+0x30a/0x3e0 [ 371.894571][T12264] do_mmap+0xc63/0x12f0 [ 371.894589][T12264] ? __pfx_do_mmap+0x10/0x10 [ 371.894605][T12264] ? __pfx_down_write_killable+0x10/0x10 [ 371.894678][T12264] vm_mmap_pgoff+0x29e/0x470 [ 371.894703][T12264] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 371.894718][T12264] ? __fget_files+0x215/0x3d0 [ 371.894734][T12264] ? __fget_files+0x21f/0x3d0 [ 371.894754][T12264] ksys_mmap_pgoff+0x3c8/0x650 [ 371.894769][T12264] ? __x64_sys_futex+0x34f/0x4d0 [ 371.894786][T12264] ? __x64_sys_futex+0x358/0x4d0 [ 371.894804][T12264] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 371.894819][T12264] ? xfd_validate_state+0x129/0x190 [ 371.894842][T12264] __x64_sys_mmap+0x125/0x190 [ 371.894864][T12264] do_syscall_64+0x106/0xf80 [ 371.894882][T12264] ? clear_bhb_loop+0x40/0x90 [ 371.894908][T12264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.894924][T12264] RIP: 0033:0x7f553ab9c799 [ 371.894937][T12264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.894951][T12264] RSP: 002b:00007f553baae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 371.894967][T12264] RAX: ffffffffffffffda RBX: 00007f553ae15fa0 RCX: 00007f553ab9c799 [ 371.894977][T12264] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000009000 [ 371.894985][T12264] RBP: 00007f553ac32c99 R08: 00000000000000dd R09: 0000000000000000 [ 371.894994][T12264] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 371.895003][T12264] R13: 00007f553ae16038 R14: 00007f553ae15fa0 R15: 00007fff2b2e36c8 [ 371.895022][T12264] [ 375.459010][T12328] sp0: Synchronizing with TNC [ 377.841204][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d2fb400: rx timeout, send abort [ 377.849636][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d2fb400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 378.682843][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.690191][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.980658][T12410] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1439'. [ 379.010061][ T7119] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 380.799377][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a901800: rx timeout, send abort [ 380.808082][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a901800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 383.011300][T12483] zswap: compressor not available [ 384.563020][T12519] vivid-007: ================= START STATUS ================= [ 384.595789][T12519] vivid-007: Enable Output Cropping: true [ 384.620383][T12519] vivid-007: Enable Output Composing: true [ 384.652060][T12519] vivid-007: Enable Output Scaler: true [ 384.672825][T12519] vivid-007: Tx RGB Quantization Range: Automatic [ 384.695535][T12519] vivid-007: Transmit Mode: HDMI [ 384.712379][T12519] vivid-007: Hotplug Present: 0x00000000 [ 384.732168][T12519] vivid-007: RxSense Present: 0x00000000 [ 384.752218][T12519] vivid-007: EDID Present: 0x00000000 [ 384.770320][T12519] vivid-007: ================== END STATUS ================== [ 384.845068][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d627400: rx timeout, send abort [ 384.854849][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d627400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 385.121209][T12536] zram: Added device: zram2 [ 385.154162][T12533] FAULT_INJECTION: forcing a failure. [ 385.154162][T12533] name failslab, interval 1, probability 0, space 0, times 0 [ 385.195076][T12533] CPU: 0 UID: 0 PID: 12533 Comm: syz.0.1469 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.195102][T12533] Tainted: [L]=SOFTLOCKUP [ 385.195108][T12533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.195117][T12533] Call Trace: [ 385.195122][T12533] [ 385.195128][T12533] dump_stack_lvl+0x100/0x190 [ 385.195156][T12533] should_fail_ex.cold+0x5/0xa [ 385.195174][T12533] should_failslab+0xc2/0x120 [ 385.195190][T12533] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 385.195211][T12533] ? ptlock_alloc+0x1f/0x70 [ 385.195232][T12533] ? __pfx_filemap_map_pages+0x10/0x10 [ 385.195281][T12533] ptlock_alloc+0x1f/0x70 [ 385.195300][T12533] pte_alloc_one+0x82/0x3d0 [ 385.195324][T12533] __do_fault+0x359/0x550 [ 385.195340][T12533] ? __pfx_filemap_map_pages+0x10/0x10 [ 385.195360][T12533] do_fault+0x2db/0x1990 [ 385.195375][T12533] ? __pmd_alloc+0x3fb/0x950 [ 385.195393][T12533] __handle_mm_fault+0x180f/0x2b60 [ 385.195415][T12533] ? mt_find+0x45e/0x8e0 [ 385.195501][T12533] ? __pfx___handle_mm_fault+0x10/0x10 [ 385.195519][T12533] ? __pfx_mt_find+0x10/0x10 [ 385.195550][T12533] ? find_vma+0xbf/0x140 [ 385.195564][T12533] ? __pfx_find_vma+0x10/0x10 [ 385.195580][T12533] handle_mm_fault+0x36d/0xa20 [ 385.195603][T12533] do_user_addr_fault+0x74c/0x12f0 [ 385.195629][T12533] exc_page_fault+0x6f/0xd0 [ 385.195649][T12533] asm_exc_page_fault+0x26/0x30 [ 385.195663][T12533] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 385.195679][T12533] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 385.195694][T12533] RSP: 0018:ffffc9000465fdf8 EFLAGS: 00050246 [ 385.195707][T12533] RAX: 0000000200000001 RBX: 0000000000000008 RCX: 0000000000000008 [ 385.195715][T12533] RDX: 0000000000000001 RSI: ffffc9000465fe60 RDI: 0000000000000000 [ 385.195724][T12533] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff520008cbfcc [ 385.195732][T12533] R10: ffffc9000465fe67 R11: 0000000000000000 R12: ffffc9000465fe60 [ 385.195741][T12533] R13: 0000000000000008 R14: 00007ffffffff000 R15: 0000000000000000 [ 385.195759][T12533] _copy_to_user+0xa4/0xd0 [ 385.195833][T12533] do_pipe2+0x168/0x1e0 [ 385.195849][T12533] ? __pfx_do_pipe2+0x10/0x10 [ 385.195871][T12533] __x64_sys_pipe+0x33/0x50 [ 385.195885][T12533] do_syscall_64+0x106/0xf80 [ 385.195904][T12533] ? clear_bhb_loop+0x40/0x90 [ 385.195920][T12533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.195935][T12533] RIP: 0033:0x7f628059c799 [ 385.195948][T12533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.195961][T12533] RSP: 002b:00007f628149e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 385.195974][T12533] RAX: ffffffffffffffda RBX: 00007f6280815fa0 RCX: 00007f628059c799 [ 385.195983][T12533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.195991][T12533] RBP: 00007f6280632c99 R08: 0000000000000000 R09: 0000000000000000 [ 385.195999][T12533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.196008][T12533] R13: 00007f6280816038 R14: 00007f6280815fa0 R15: 00007ffd8fb92378 [ 385.196027][T12533] [ 386.139483][T12538] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1470'. [ 386.898986][T12574] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 387.076557][T12579] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1476'. [ 388.902372][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803559d000: rx timeout, send abort [ 388.911034][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803559d000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 389.429491][T12606] Invalid ELF header magic: != ELF [ 391.353732][T12645] FAULT_INJECTION: forcing a failure. [ 391.353732][T12645] name failslab, interval 1, probability 0, space 0, times 0 [ 391.433629][T12645] CPU: 0 UID: 0 PID: 12645 Comm: syz.2.1496 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.433657][T12645] Tainted: [L]=SOFTLOCKUP [ 391.433662][T12645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.433671][T12645] Call Trace: [ 391.433676][T12645] [ 391.433682][T12645] dump_stack_lvl+0x100/0x190 [ 391.433710][T12645] should_fail_ex.cold+0x5/0xa [ 391.433727][T12645] should_failslab+0xc2/0x120 [ 391.433743][T12645] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 391.433764][T12645] ? __d_alloc+0x34/0xa80 [ 391.433782][T12645] __d_alloc+0x34/0xa80 [ 391.433796][T12645] ? new_inode+0x15a/0x1c0 [ 391.433816][T12645] d_alloc_pseudo+0x1c/0xc0 [ 391.433835][T12645] alloc_file_pseudo+0xcf/0x230 [ 391.433854][T12645] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 391.433873][T12645] ? hugetlbfs_get_inode+0x36e/0x750 [ 391.433929][T12645] hugetlb_file_setup+0x2a8/0x5b0 [ 391.433947][T12645] ksys_mmap_pgoff+0x232/0x650 [ 391.433964][T12645] ? __x64_sys_futex+0x358/0x4d0 [ 391.433983][T12645] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 391.433998][T12645] ? xfd_validate_state+0x129/0x190 [ 391.434021][T12645] __x64_sys_mmap+0x125/0x190 [ 391.434043][T12645] do_syscall_64+0x106/0xf80 [ 391.434062][T12645] ? clear_bhb_loop+0x40/0x90 [ 391.434079][T12645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.434093][T12645] RIP: 0033:0x7f553ab9c799 [ 391.434107][T12645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.434121][T12645] RSP: 002b:00007f553baae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 391.434135][T12645] RAX: ffffffffffffffda RBX: 00007f553ae15fa0 RCX: 00007f553ab9c799 [ 391.434144][T12645] RDX: 0000000000000009 RSI: 0000000000000004 RDI: 0000000000000000 [ 391.434153][T12645] RBP: 00007f553ac32c99 R08: 0000000000000005 R09: 0000300000000000 [ 391.434162][T12645] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 391.434170][T12645] R13: 00007f553ae16038 R14: 00007f553ae15fa0 R15: 00007fff2b2e36c8 [ 391.434189][T12645] [ 391.989153][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 392.326640][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a4a4000: rx timeout, send abort [ 392.335607][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a4a4000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 393.556475][T12693] NFSD: Failed to start, no listeners configured. [ 394.056435][T12706] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1515'. [ 394.325954][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805da59000: rx timeout, send abort [ 394.334578][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805da59000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 394.962116][T12730] ptrace attach of "./syz-executor exec"[5835] was attempted by ""[12730] [ 395.837502][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 396.465125][T12762] FAULT_INJECTION: forcing a failure. [ 396.465125][T12762] name failslab, interval 1, probability 0, space 0, times 0 [ 396.545305][T12762] CPU: 0 UID: 0 PID: 12762 Comm: syz.0.1532 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.545331][T12762] Tainted: [L]=SOFTLOCKUP [ 396.545336][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.545345][T12762] Call Trace: [ 396.545351][T12762] [ 396.545357][T12762] dump_stack_lvl+0x100/0x190 [ 396.545383][T12762] should_fail_ex.cold+0x5/0xa [ 396.545400][T12762] should_failslab+0xc2/0x120 [ 396.545416][T12762] __kmalloc_cache_noprof+0x7a/0x6f0 [ 396.545434][T12762] ? kstrdup_quotable_cmdline+0x52/0x210 [ 396.545452][T12762] ? get_cmdline+0x86/0x360 [ 396.545470][T12762] kstrdup_quotable_cmdline+0x52/0x210 [ 396.545492][T12762] __report_access+0x77/0x230 [ 396.545585][T12762] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.545606][T12762] task_work_run+0x150/0x240 [ 396.545627][T12762] ? __pfx_task_work_run+0x10/0x10 [ 396.545647][T12762] ? xfd_validate_state+0x129/0x190 [ 396.545670][T12762] exit_to_user_mode_loop+0x100/0x4a0 [ 396.545690][T12762] do_syscall_64+0x668/0xf80 [ 396.545709][T12762] ? clear_bhb_loop+0x40/0x90 [ 396.545726][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.545740][T12762] RIP: 0033:0x7f628059c799 [ 396.545753][T12762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.545767][T12762] RSP: 002b:00007f628149e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 396.545781][T12762] RAX: ffffffffffffffff RBX: 00007f6280815fa0 RCX: 00007f628059c799 [ 396.545790][T12762] RDX: 0000000000000012 RSI: 0000200000002980 RDI: 0000000000000001 [ 396.545799][T12762] RBP: 00007f6280632c99 R08: 0000000000000004 R09: 0000000000000000 [ 396.545807][T12762] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 396.545816][T12762] R13: 00007f6280816038 R14: 00007f6280815fa0 R15: 00007ffd8fb92378 [ 396.545835][T12762] [ 396.545844][T12762] ptrace attach of "./syz-executor exec"[5825] was attempted by "(null)"[12762] [ 397.124859][T12774] can: request_module (can-proto-0) failed. [ 397.479900][T12802] FAULT_INJECTION: forcing a failure. [ 397.479900][T12802] name failslab, interval 1, probability 0, space 0, times 0 [ 397.584215][T12802] CPU: 0 UID: 0 PID: 12802 Comm: syz.3.1541 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.584240][T12802] Tainted: [L]=SOFTLOCKUP [ 397.584245][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.584254][T12802] Call Trace: [ 397.584259][T12802] [ 397.584265][T12802] dump_stack_lvl+0x100/0x190 [ 397.584290][T12802] should_fail_ex.cold+0x5/0xa [ 397.584306][T12802] ? iovec_from_user+0x8d/0x140 [ 397.584322][T12802] should_failslab+0xc2/0x120 [ 397.584337][T12802] __kmalloc_noprof+0xe0/0x850 [ 397.584360][T12802] iovec_from_user+0x8d/0x140 [ 397.584377][T12802] process_vm_rw+0x1e5/0x2d0 [ 397.584399][T12802] ? __pfx_process_vm_rw+0x10/0x10 [ 397.584423][T12802] ? ksys_write+0x190/0x250 [ 397.584451][T12802] ? ksys_write+0x1ac/0x250 [ 397.584462][T12802] ? __pfx_ksys_write+0x10/0x10 [ 397.584476][T12802] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 397.584497][T12802] ? do_syscall_64+0x95/0xf80 [ 397.584515][T12802] ? lockdep_hardirqs_on+0x78/0x100 [ 397.584533][T12802] do_syscall_64+0x106/0xf80 [ 397.584550][T12802] ? clear_bhb_loop+0x40/0x90 [ 397.584567][T12802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.584581][T12802] RIP: 0033:0x7f7fb659c799 [ 397.584593][T12802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.584606][T12802] RSP: 002b:00007f7fb7543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 397.584619][T12802] RAX: ffffffffffffffda RBX: 00007f7fb6815fa0 RCX: 00007f7fb659c799 [ 397.584628][T12802] RDX: 0000040000000001 RSI: 0000200000000080 RDI: 000000000000058f [ 397.584637][T12802] RBP: 00007f7fb7543090 R08: 000000000000000a R09: 0000000000000000 [ 397.584645][T12802] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 397.584653][T12802] R13: 00007f7fb6816038 R14: 00007f7fb6815fa0 R15: 00007fff4b8d1938 [ 397.584670][T12802] [ 398.626605][T12817] tc_dump_action: action bad kind [ 399.400728][ T7119] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 399.578037][T12839] cgroup: fork rejected by pids controller in /syz3 [ 400.012951][T12970] random: crng reseeded on system resumption [ 400.150653][T12970] hub 1-0:1.0: USB hub found [ 400.199061][T12970] hub 1-0:1.0: 1 port detected [ 400.366920][T12975] FAULT_INJECTION: forcing a failure. [ 400.366920][T12975] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 400.440479][T12975] CPU: 0 UID: 0 PID: 12975 Comm: syz.0.1555 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.440505][T12975] Tainted: [L]=SOFTLOCKUP [ 400.440511][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.440520][T12975] Call Trace: [ 400.440535][T12975] [ 400.440541][T12975] dump_stack_lvl+0x100/0x190 [ 400.440575][T12975] should_fail_ex.cold+0x5/0xa [ 400.440590][T12975] ? prepare_alloc_pages+0x16d/0x5f0 [ 400.440608][T12975] should_fail_alloc_page+0xeb/0x140 [ 400.440625][T12975] prepare_alloc_pages+0x1f0/0x5f0 [ 400.440644][T12975] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 400.440668][T12975] ? lock_acquire+0x1cf/0x380 [ 400.440689][T12975] ? rcu_is_watching+0x12/0xc0 [ 400.440710][T12975] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 400.440731][T12975] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 400.440762][T12975] ? rcu_read_unlock+0x17/0x60 [ 400.440778][T12975] ? rcu_read_unlock+0x17/0x60 [ 400.440797][T12975] ? __folio_mod_stat+0x1ce/0x250 [ 400.440820][T12975] ? split_huge_pmd_locked+0x3ba/0x3b50 [ 400.440839][T12975] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 400.440863][T12975] ? policy_nodemask+0xed/0x4f0 [ 400.440879][T12975] alloc_pages_mpol+0x1fb/0x550 [ 400.440895][T12975] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 400.440915][T12975] alloc_pages_noprof+0x131/0x390 [ 400.440930][T12975] pte_alloc_one+0x1c/0x3d0 [ 400.440946][T12975] __pte_alloc+0x6d/0x3e0 [ 400.440960][T12975] ? __pfx___pte_alloc+0x10/0x10 [ 400.440975][T12975] ? _raw_spin_unlock+0x28/0x50 [ 400.440992][T12975] ? __pmd_alloc+0x3fb/0x950 [ 400.441010][T12975] move_page_tables+0x257e/0x4500 [ 400.441031][T12975] ? __pfx_copy_vma+0x10/0x10 [ 400.441057][T12975] ? __pfx_move_page_tables+0x10/0x10 [ 400.441086][T12975] ? finish_task_switch.isra.0+0x200/0xb80 [ 400.441104][T12975] copy_vma_and_data+0x25c/0x7c0 [ 400.441126][T12975] ? __pfx_copy_vma_and_data+0x10/0x10 [ 400.441153][T12975] ? __vma_start_write+0x17f/0x280 [ 400.441171][T12975] ? __pfx___vma_start_write+0x10/0x10 [ 400.441194][T12975] move_vma+0x51b/0x1890 [ 400.441216][T12975] ? __pfx_move_vma+0x10/0x10 [ 400.441237][T12975] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 400.441254][T12975] ? cap_mmap_addr+0x4b/0x120 [ 400.441274][T12975] ? bpf_lsm_mmap_addr+0x9/0x30 [ 400.441287][T12975] ? security_mmap_addr+0x71/0x1e0 [ 400.441376][T12975] ? __get_unmapped_area+0x255/0x3e0 [ 400.441394][T12975] ? vrm_set_new_addr+0x204/0x290 [ 400.441415][T12975] mremap_to+0x1b7/0x450 [ 400.441437][T12975] do_mremap+0xb76/0x2130 [ 400.441465][T12975] ? __pfx_do_mremap+0x10/0x10 [ 400.441489][T12975] ? ksys_write+0x190/0x250 [ 400.441507][T12975] __do_sys_mremap+0x126/0x170 [ 400.441526][T12975] ? __pfx___do_sys_mremap+0x10/0x10 [ 400.441551][T12975] ? __x64_sys_futex+0x34f/0x4d0 [ 400.441588][T12975] do_syscall_64+0x106/0xf80 [ 400.441608][T12975] ? clear_bhb_loop+0x40/0x90 [ 400.441626][T12975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.441641][T12975] RIP: 0033:0x7f628059c799 [ 400.441654][T12975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.441669][T12975] RSP: 002b:00007f628149e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 400.441683][T12975] RAX: ffffffffffffffda RBX: 00007f6280815fa0 RCX: 00007f628059c799 [ 400.441693][T12975] RDX: 0000000000000013 RSI: 0000000000000004 RDI: 0000200000000000 [ 400.441702][T12975] RBP: 00007f6280632c99 R08: 0000000100000000 R09: 0000000000000000 [ 400.441711][T12975] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 400.441720][T12975] R13: 00007f6280816038 R14: 00007f6280815fa0 R15: 00007ffd8fb92378 [ 400.441740][T12975] [ 406.261686][T13005] can: request_module (can-proto-0) failed. [ 407.068907][T13032] FAULT_INJECTION: forcing a failure. [ 407.068907][T13032] name failslab, interval 1, probability 0, space 0, times 0 [ 407.233406][T13032] CPU: 0 UID: 0 PID: 13032 Comm: syz.3.1571 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.233433][T13032] Tainted: [L]=SOFTLOCKUP [ 407.233438][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.233448][T13032] Call Trace: [ 407.233453][T13032] [ 407.233459][T13032] dump_stack_lvl+0x100/0x190 [ 407.233486][T13032] should_fail_ex.cold+0x5/0xa [ 407.233503][T13032] should_failslab+0xc2/0x120 [ 407.233518][T13032] __kmalloc_cache_noprof+0x7a/0x6f0 [ 407.233537][T13032] ? kstrdup_quotable_cmdline+0x52/0x210 [ 407.233556][T13032] ? get_cmdline+0x86/0x360 [ 407.233574][T13032] kstrdup_quotable_cmdline+0x52/0x210 [ 407.233603][T13032] __report_access+0x77/0x230 [ 407.233620][T13032] ? _raw_spin_unlock_irq+0x23/0x50 [ 407.233641][T13032] task_work_run+0x150/0x240 [ 407.233661][T13032] ? __pfx_task_work_run+0x10/0x10 [ 407.233681][T13032] ? xfd_validate_state+0x129/0x190 [ 407.233705][T13032] exit_to_user_mode_loop+0x100/0x4a0 [ 407.233725][T13032] do_syscall_64+0x668/0xf80 [ 407.233743][T13032] ? clear_bhb_loop+0x40/0x90 [ 407.233760][T13032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.233775][T13032] RIP: 0033:0x7f7fb659c799 [ 407.233787][T13032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.233801][T13032] RSP: 002b:00007f7fb7543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 407.233815][T13032] RAX: ffffffffffffffff RBX: 00007f7fb6815fa0 RCX: 00007f7fb659c799 [ 407.233825][T13032] RDX: 0000000000000012 RSI: 0000200000002980 RDI: 0000000000000001 [ 407.233833][T13032] RBP: 00007f7fb6632c99 R08: 0000000000000004 R09: 0000000000000000 [ 407.233842][T13032] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 407.233851][T13032] R13: 00007f7fb6816038 R14: 00007f7fb6815fa0 R15: 00007fff4b8d1938 [ 407.233870][T13032] [ 407.233878][T13032] ptrace attach of "./syz-executor exec"[5829] was attempted by "(null)"[13032] [ 408.119794][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077026c00: rx timeout, send abort [ 408.128567][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888077026c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 408.600143][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 409.622010][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1581'. [ 410.449913][T13096] nfs: Unknown parameter '£m?¥ŒÁLH>®ï½¢^Ñe„°àko}* ' [ 410.530190][T13096] FAULT_INJECTION: forcing a failure. [ 410.530190][T13096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.648241][T13096] CPU: 0 UID: 0 PID: 13096 Comm: syz.0.1585 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.648266][T13096] Tainted: [L]=SOFTLOCKUP [ 410.648271][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.648279][T13096] Call Trace: [ 410.648284][T13096] [ 410.648290][T13096] dump_stack_lvl+0x100/0x190 [ 410.648315][T13096] should_fail_ex.cold+0x5/0xa [ 410.648332][T13096] strncpy_from_user+0x3b/0x2d0 [ 410.648354][T13096] do_getname+0x78/0x390 [ 410.648373][T13096] do_sys_openat2+0xc5/0x1e0 [ 410.648391][T13096] ? __pfx_do_sys_openat2+0x10/0x10 [ 410.648414][T13096] __x64_sys_openat+0x12d/0x210 [ 410.648432][T13096] ? __pfx___x64_sys_openat+0x10/0x10 [ 410.648459][T13096] do_syscall_64+0x106/0xf80 [ 410.648485][T13096] ? clear_bhb_loop+0x40/0x90 [ 410.648502][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.648516][T13096] RIP: 0033:0x7f628059c799 [ 410.648528][T13096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.648541][T13096] RSP: 002b:00007f628149e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 410.648555][T13096] RAX: ffffffffffffffda RBX: 00007f6280815fa0 RCX: 00007f628059c799 [ 410.648564][T13096] RDX: 0000000000000100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 410.648572][T13096] RBP: 00007f6280632c99 R08: 0000000000000000 R09: 0000000000000000 [ 410.648580][T13096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.648588][T13096] R13: 00007f6280816038 R14: 00007f6280815fa0 R15: 00007ffd8fb92378 [ 410.648606][T13096] [ 410.874462][T13105] random: crng reseeded on system resumption [ 410.922212][T13105] hub 1-0:1.0: USB hub found [ 411.003478][T13105] hub 1-0:1.0: 1 port detected [ 411.181616][T13117] FAULT_INJECTION: forcing a failure. [ 411.181616][T13117] name failslab, interval 1, probability 0, space 0, times 0 [ 411.255298][T13117] CPU: 0 UID: 0 PID: 13117 Comm: syz.3.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.255324][T13117] Tainted: [L]=SOFTLOCKUP [ 411.255330][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.255339][T13117] Call Trace: [ 411.255344][T13117] [ 411.255350][T13117] dump_stack_lvl+0x100/0x190 [ 411.255378][T13117] should_fail_ex.cold+0x5/0xa [ 411.255395][T13117] should_failslab+0xc2/0x120 [ 411.255410][T13117] __kmalloc_cache_noprof+0x7a/0x6f0 [ 411.255429][T13117] ? drm_file_alloc+0x74/0xb40 [ 411.255523][T13117] drm_file_alloc+0x74/0xb40 [ 411.255544][T13117] drm_open_helper+0x1fc/0x540 [ 411.255565][T13117] drm_open+0x1a0/0x3e0 [ 411.255582][T13117] ? __pfx_drm_open+0x10/0x10 [ 411.255599][T13117] drm_stub_open+0x20f/0x380 [ 411.255639][T13117] ? __pfx_drm_stub_open+0x10/0x10 [ 411.255656][T13117] chrdev_open+0x234/0x6a0 [ 411.255671][T13117] ? __pfx_apparmor_file_open+0x10/0x10 [ 411.255741][T13117] ? __pfx_chrdev_open+0x10/0x10 [ 411.255757][T13117] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 411.255776][T13117] do_dentry_open+0x6d8/0x1660 [ 411.255791][T13117] ? __pfx_chrdev_open+0x10/0x10 [ 411.255809][T13117] vfs_open+0x82/0x3f0 [ 411.255829][T13117] path_openat+0x208c/0x31a0 [ 411.255849][T13117] ? __pfx_path_openat+0x10/0x10 [ 411.255870][T13117] do_file_open+0x20e/0x430 [ 411.255885][T13117] ? __pfx_do_file_open+0x10/0x10 [ 411.255912][T13117] ? alloc_fd+0x476/0x790 [ 411.255927][T13117] ? do_getname+0x191/0x390 [ 411.255946][T13117] do_sys_openat2+0x10d/0x1e0 [ 411.255964][T13117] ? __pfx_do_sys_openat2+0x10/0x10 [ 411.255983][T13117] ? __fget_files+0x21f/0x3d0 [ 411.256014][T13117] __x64_sys_openat+0x12d/0x210 [ 411.256033][T13117] ? __pfx___x64_sys_openat+0x10/0x10 [ 411.256059][T13117] do_syscall_64+0x106/0xf80 [ 411.256079][T13117] ? clear_bhb_loop+0x40/0x90 [ 411.256096][T13117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.256111][T13117] RIP: 0033:0x7f7fb659c799 [ 411.256125][T13117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.256139][T13117] RSP: 002b:00007f7fb7543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 411.256153][T13117] RAX: ffffffffffffffda RBX: 00007f7fb6815fa0 RCX: 00007f7fb659c799 [ 411.256163][T13117] RDX: 0000000000129800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 411.256172][T13117] RBP: 00007f7fb6632c99 R08: 0000000000000000 R09: 0000000000000000 [ 411.256181][T13117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.256189][T13117] R13: 00007f7fb6816038 R14: 00007f7fb6815fa0 R15: 00007fff4b8d1938 [ 411.256208][T13117] “ÇIãjníüú¡9»_UÏ´îVQ8Àñj@:Un M½×%U¬x[ 413.430620][T13177] random: crng reseeded on system resumption [ 413.662901][T13186] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1607'. [ 413.867912][T13193] zram: Can't change algorithm for initialized device [ 414.071650][T13194] zswap: compressor  not available [ 414.120096][T13214] Invalid ELF header magic: != ELF [ 414.286607][T13200] zswap: compressor  not available [ 414.443800][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 414.644469][T13220] HfR: entered promiscuous mode [ 416.893978][T13284] FAULT_INJECTION: forcing a failure. [ 416.893978][T13284] name failslab, interval 1, probability 0, space 0, times 0 [ 416.999432][T13284] CPU: 0 UID: 0 PID: 13284 Comm: syz.3.1629 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.999458][T13284] Tainted: [L]=SOFTLOCKUP [ 416.999464][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 416.999473][T13284] Call Trace: [ 416.999478][T13284] [ 416.999485][T13284] dump_stack_lvl+0x100/0x190 [ 416.999513][T13284] should_fail_ex.cold+0x5/0xa [ 416.999531][T13284] should_failslab+0xc2/0x120 [ 416.999546][T13284] __kmalloc_cache_noprof+0x7a/0x6f0 [ 416.999564][T13284] ? snd_timer_instance_new+0x47/0x2e0 [ 416.999658][T13284] snd_timer_instance_new+0x47/0x2e0 [ 416.999675][T13284] snd_seq_timer_open+0x1d4/0x600 [ 416.999744][T13284] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 416.999770][T13284] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 416.999789][T13284] ? lockdep_hardirqs_on+0x78/0x100 [ 416.999808][T13284] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 416.999828][T13284] queue_use+0xdc/0x1f0 [ 416.999844][T13284] snd_seq_queue_alloc+0x2e5/0x590 [ 416.999864][T13284] snd_seq_ioctl_create_queue+0xa9/0x370 [ 416.999911][T13284] call_seq_client_ctl+0xa3/0x130 [ 416.999934][T13284] snd_seq_kernel_client_ctl+0x77/0xd0 [ 416.999958][T13284] alloc_seq_queue+0xdb/0x180 [ 416.999992][T13284] ? __pfx_alloc_seq_queue+0x10/0x10 [ 417.000017][T13284] ? mark_held_locks+0x40/0x70 [ 417.000034][T13284] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.000051][T13284] ? lockdep_hardirqs_on+0x78/0x100 [ 417.000071][T13284] snd_seq_oss_open+0x2b2/0xa10 [ 417.000089][T13284] odev_open+0x79/0xc0 [ 417.000101][T13284] ? __pfx_odev_open+0x10/0x10 [ 417.000113][T13284] soundcore_open+0x2e3/0x5a0 [ 417.000152][T13284] ? __pfx_soundcore_open+0x10/0x10 [ 417.000166][T13284] chrdev_open+0x234/0x6a0 [ 417.000181][T13284] ? __pfx_apparmor_file_open+0x10/0x10 [ 417.000204][T13284] ? __pfx_chrdev_open+0x10/0x10 [ 417.000219][T13284] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 417.000238][T13284] do_dentry_open+0x6d8/0x1660 [ 417.000251][T13284] ? __pfx_chrdev_open+0x10/0x10 [ 417.000270][T13284] vfs_open+0x82/0x3f0 [ 417.000290][T13284] path_openat+0x208c/0x31a0 [ 417.000311][T13284] ? __pfx_path_openat+0x10/0x10 [ 417.000332][T13284] do_file_open+0x20e/0x430 [ 417.000348][T13284] ? __pfx_do_file_open+0x10/0x10 [ 417.000375][T13284] ? alloc_fd+0x476/0x790 [ 417.000391][T13284] ? do_getname+0x191/0x390 [ 417.000410][T13284] do_sys_openat2+0x10d/0x1e0 [ 417.000435][T13284] ? __pfx_do_sys_openat2+0x10/0x10 [ 417.000455][T13284] ? __fget_files+0x21f/0x3d0 [ 417.000473][T13284] __x64_sys_openat+0x12d/0x210 [ 417.000492][T13284] ? __pfx___x64_sys_openat+0x10/0x10 [ 417.000518][T13284] do_syscall_64+0x106/0xf80 [ 417.000536][T13284] ? clear_bhb_loop+0x40/0x90 [ 417.000553][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.000568][T13284] RIP: 0033:0x7f7fb659c799 [ 417.000581][T13284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.000595][T13284] RSP: 002b:00007f7fb7522028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 417.000610][T13284] RAX: ffffffffffffffda RBX: 00007f7fb6816090 RCX: 00007f7fb659c799 [ 417.000619][T13284] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 417.000628][T13284] RBP: 00007f7fb6632c99 R08: 0000000000000000 R09: 0000000000000000 [ 417.000637][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.000646][T13284] R13: 00007f7fb6816128 R14: 00007f7fb6816090 R15: 00007fff4b8d1938 [ 417.000666][T13284] [ 419.116702][T13308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1634'. [ 419.396862][T13311] program syz.2.1635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.456131][T13286] kexec: Could not allocate control_code_buffer [ 420.904974][T13340] cougar: G6 mapped to space [ 425.187498][ T29] audit: type=1800 audit(4294969564.151:13): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1661" name="features" dev="configfs" ino=48435 res=0 errno=0 [ 425.771679][T13433] block nbd7: not configured, cannot reconfigure [ 426.285699][T13446] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 800000007 [ 427.920389][T13484] usb usb13: check_ctrlrecip: process 13484 (syz.3.1678) requesting ep 01 but needs 81 [ 427.948510][T13484] usb usb13: usbfs: process 13484 (syz.3.1678) did not claim interface 0 before use [ 427.988018][T13484] FAULT_INJECTION: forcing a failure. [ 427.988018][T13484] name failslab, interval 1, probability 0, space 0, times 0 [ 428.071877][T13484] CPU: 0 UID: 0 PID: 13484 Comm: syz.3.1678 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.071905][T13484] Tainted: [L]=SOFTLOCKUP [ 428.071910][T13484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.071919][T13484] Call Trace: [ 428.071925][T13484] [ 428.071931][T13484] dump_stack_lvl+0x100/0x190 [ 428.071958][T13484] should_fail_ex.cold+0x5/0xa [ 428.071976][T13484] should_failslab+0xc2/0x120 [ 428.071991][T13484] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 428.072012][T13484] ? alloc_empty_file+0x55/0x1c0 [ 428.072033][T13484] alloc_empty_file+0x55/0x1c0 [ 428.072051][T13484] alloc_file_pseudo+0x13a/0x230 [ 428.072069][T13484] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 428.072087][T13484] ? alloc_fd+0x476/0x790 [ 428.072103][T13484] sock_alloc_file+0x50/0x210 [ 428.072187][T13484] __sys_socket+0x1c0/0x260 [ 428.072211][T13484] ? __pfx___sys_socket+0x10/0x10 [ 428.072232][T13484] __x64_sys_socket+0x72/0xb0 [ 428.072247][T13484] ? lockdep_hardirqs_on+0x78/0x100 [ 428.072269][T13484] do_syscall_64+0x106/0xf80 [ 428.072287][T13484] ? clear_bhb_loop+0x40/0x90 [ 428.072305][T13484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.072321][T13484] RIP: 0033:0x7f7fb659c799 [ 428.072334][T13484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.072348][T13484] RSP: 002b:00007f7fb7543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 428.072362][T13484] RAX: ffffffffffffffda RBX: 00007f7fb6815fa0 RCX: 00007f7fb659c799 [ 428.072372][T13484] RDX: 000000000000003a RSI: 0000000000000003 RDI: 000000000000000a [ 428.072380][T13484] RBP: 00007f7fb6632c99 R08: 0000000000000000 R09: 0000000000000000 [ 428.072389][T13484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.072398][T13484] R13: 00007f7fb6816038 R14: 00007f7fb6815fa0 R15: 00007fff4b8d1938 [ 428.072421][T13484] [ 429.062638][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cc23800: rx timeout, send abort [ 429.071140][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cc23800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 431.141306][T13524] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1688'. [ 431.420009][T13529] usb usb13: check_ctrlrecip: process 13529 (syz.2.1690) requesting ep 01 but needs 81 [ 431.459687][T13529] usb usb13: usbfs: process 13529 (syz.2.1690) did not claim interface 0 before use [ 431.521890][T13535] FAULT_INJECTION: forcing a failure. [ 431.521890][T13535] name failslab, interval 1, probability 0, space 0, times 0 [ 431.652613][T13535] CPU: 0 UID: 0 PID: 13535 Comm: syz.2.1690 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.652640][T13535] Tainted: [L]=SOFTLOCKUP [ 431.652646][T13535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.652655][T13535] Call Trace: [ 431.652661][T13535] [ 431.652667][T13535] dump_stack_lvl+0x100/0x190 [ 431.652694][T13535] should_fail_ex.cold+0x5/0xa [ 431.652712][T13535] should_failslab+0xc2/0x120 [ 431.652727][T13535] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 431.652748][T13535] ? __d_alloc+0x34/0xa80 [ 431.652764][T13535] ? raw_hash_sk+0x29f/0x5d0 [ 431.652861][T13535] ? raw_hash_sk+0x29f/0x5d0 [ 431.652879][T13535] __d_alloc+0x34/0xa80 [ 431.652897][T13535] d_alloc_pseudo+0x1c/0xc0 [ 431.652918][T13535] alloc_file_pseudo+0xcf/0x230 [ 431.652936][T13535] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 431.652954][T13535] ? alloc_fd+0x476/0x790 [ 431.652970][T13535] sock_alloc_file+0x50/0x210 [ 431.652992][T13535] __sys_socket+0x1c0/0x260 [ 431.653007][T13535] ? __pfx___sys_socket+0x10/0x10 [ 431.653027][T13535] __x64_sys_socket+0x72/0xb0 [ 431.653042][T13535] ? lockdep_hardirqs_on+0x78/0x100 [ 431.653062][T13535] do_syscall_64+0x106/0xf80 [ 431.653080][T13535] ? clear_bhb_loop+0x40/0x90 [ 431.653097][T13535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.653112][T13535] RIP: 0033:0x7f553ab9c799 [ 431.653125][T13535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.653139][T13535] RSP: 002b:00007f553ba8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 431.653153][T13535] RAX: ffffffffffffffda RBX: 00007f553ae16090 RCX: 00007f553ab9c799 [ 431.653163][T13535] RDX: 000000000000003a RSI: 0000000000000003 RDI: 000000000000000a [ 431.653172][T13535] RBP: 00007f553ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 431.653181][T13535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.653189][T13535] R13: 00007f553ae16128 R14: 00007f553ae16090 R15: 00007fff2b2e36c8 [ 431.653208][T13535] [ 432.271486][T13558] futex_wake_op: syz.2.1698 tries to shift op by -2048; fix this program [ 432.780981][T13566] FAULT_INJECTION: forcing a failure. [ 432.780981][T13566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.870022][T13566] CPU: 0 UID: 0 PID: 13566 Comm: syz.2.1700 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.870047][T13566] Tainted: [L]=SOFTLOCKUP [ 432.870052][T13566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.870060][T13566] Call Trace: [ 432.870065][T13566] [ 432.870070][T13566] dump_stack_lvl+0x100/0x190 [ 432.870096][T13566] should_fail_ex.cold+0x5/0xa [ 432.870109][T13566] ? prepare_alloc_pages+0x16d/0x5f0 [ 432.870127][T13566] should_fail_alloc_page+0xeb/0x140 [ 432.870142][T13566] prepare_alloc_pages+0x1f0/0x5f0 [ 432.870160][T13566] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 432.870183][T13566] ? rcu_is_watching+0x12/0xc0 [ 432.870203][T13566] ? trace_mm_page_alloc+0x17a/0x1d0 [ 432.870219][T13566] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 432.870241][T13566] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 432.870261][T13566] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 432.870280][T13566] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 432.870297][T13566] ? stack_depot_save_flags+0x479/0x9d0 [ 432.870317][T13566] ? kasan_save_stack+0x3f/0x50 [ 432.870337][T13566] ? kasan_save_track+0x14/0x30 [ 432.870356][T13566] ? __kasan_slab_free+0x5f/0x80 [ 432.870367][T13566] ? kmem_cache_free+0x124/0x6a0 [ 432.870383][T13566] ? alloc_vmap_area+0x213f/0x2bd0 [ 432.870396][T13566] ? __get_vm_area_node+0x1ca/0x330 [ 432.870410][T13566] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 432.870425][T13566] ? __vmalloc_node_noprof+0xad/0xf0 [ 432.870440][T13566] ? __snd_dma_alloc_pages+0xd2/0x150 [ 432.870542][T13566] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 432.870561][T13566] ? do_alloc_pages+0x113/0x250 [ 432.870579][T13566] ? snd_pcm_oss_sync+0x265/0x840 [ 432.870594][T13566] ? snd_pcm_oss_release+0x238/0x300 [ 432.870612][T13566] alloc_pages_bulk_noprof+0x782/0x1490 [ 432.870630][T13566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.870652][T13566] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 432.870679][T13566] ? alloc_pages_noprof+0x233/0x390 [ 432.870695][T13566] __kasan_populate_vmalloc+0xf0/0x210 [ 432.870719][T13566] alloc_vmap_area+0x95d/0x2bd0 [ 432.870741][T13566] ? __pfx_alloc_vmap_area+0x10/0x10 [ 432.870766][T13566] __get_vm_area_node+0x1ca/0x330 [ 432.870785][T13566] __vmalloc_node_range_noprof+0x213/0x1530 [ 432.870802][T13566] ? __snd_dma_alloc_pages+0xd2/0x150 [ 432.870823][T13566] ? lock_acquire+0x1cf/0x380 [ 432.870841][T13566] ? __snd_dma_alloc_pages+0xd2/0x150 [ 432.870863][T13566] ? trace_contention_end+0x140/0x180 [ 432.870881][T13566] ? __mutex_lock+0x26a/0x1b90 [ 432.870899][T13566] ? do_group_exit+0xd5/0x2a0 [ 432.870916][T13566] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 432.870933][T13566] ? do_alloc_pages+0xd1/0x250 [ 432.870948][T13566] ? do_alloc_pages+0xd1/0x250 [ 432.870967][T13566] ? __mutex_unlock_slowpath+0x15c/0x790 [ 432.870992][T13566] ? __snd_dma_alloc_pages+0xd2/0x150 [ 432.871012][T13566] __vmalloc_node_noprof+0xad/0xf0 [ 432.871028][T13566] ? __snd_dma_alloc_pages+0xd2/0x150 [ 432.871050][T13566] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 432.871070][T13566] __snd_dma_alloc_pages+0xd2/0x150 [ 432.871091][T13566] snd_dma_alloc_dir_pages+0x151/0x240 [ 432.871113][T13566] do_alloc_pages+0x113/0x250 [ 432.871133][T13566] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 432.871154][T13566] snd_pcm_hw_params+0x1729/0x1cb0 [ 432.871176][T13566] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 432.871194][T13566] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 432.871212][T13566] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 432.871231][T13566] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 432.871250][T13566] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 432.871275][T13566] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 432.871305][T13566] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 432.871322][T13566] snd_pcm_oss_sync+0x265/0x840 [ 432.871340][T13566] snd_pcm_oss_release+0x238/0x300 [ 432.871355][T13566] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 432.871370][T13566] __fput+0x3ff/0xb40 [ 432.871390][T13566] task_work_run+0x150/0x240 [ 432.871410][T13566] ? __pfx_task_work_run+0x10/0x10 [ 432.871429][T13566] ? do_raw_spin_unlock+0x145/0x1e0 [ 432.871451][T13566] do_exit+0x8b8/0x2b60 [ 432.871471][T13566] ? __pfx_do_exit+0x10/0x10 [ 432.871487][T13566] ? do_raw_spin_lock+0x128/0x260 [ 432.871505][T13566] ? find_held_lock+0x2b/0x80 [ 432.871517][T13566] ? get_signal+0x7e0/0x21e0 [ 432.871533][T13566] do_group_exit+0xd5/0x2a0 [ 432.871551][T13566] get_signal+0x1ec7/0x21e0 [ 432.871572][T13566] ? __pfx_get_signal+0x10/0x10 [ 432.871587][T13566] ? do_futex+0x192/0x350 [ 432.871606][T13566] arch_do_signal_or_restart+0x91/0x770 [ 432.871624][T13566] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 432.871646][T13566] ? __pfx___x64_sys_futex+0x10/0x10 [ 432.871662][T13566] ? ksys_write+0x1ac/0x250 [ 432.871677][T13566] exit_to_user_mode_loop+0x86/0x4a0 [ 432.871697][T13566] do_syscall_64+0x668/0xf80 [ 432.871714][T13566] ? clear_bhb_loop+0x40/0x90 [ 432.871731][T13566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.871750][T13566] RIP: 0033:0x7f553ab9c799 [ 432.871762][T13566] Code: Unable to access opcode bytes at 0x7f553ab9c76f. [ 432.871768][T13566] RSP: 002b:00007f553baae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 432.871782][T13566] RAX: 0000000000000001 RBX: 00007f553ae15fa8 RCX: 00007f553ab9c799 [ 432.871790][T13566] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f553ae15fac [ 432.871798][T13566] RBP: 00007f553ae15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 432.871806][T13566] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 432.871814][T13566] R13: 00007f553ae16038 R14: 00007fff2b2e35e0 R15: 00007fff2b2e36c8 [ 432.871832][T13566] [ 432.872161][T13566] syz.2.1700: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 433.917631][T13566] CPU: 0 UID: 0 PID: 13566 Comm: syz.2.1700 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.917654][T13566] Tainted: [L]=SOFTLOCKUP [ 433.917659][T13566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.917667][T13566] Call Trace: [ 433.917672][T13566] [ 433.917677][T13566] dump_stack_lvl+0x100/0x190 [ 433.917703][T13566] warn_alloc.cold+0x95/0x1c1 [ 433.917747][T13566] ? __pfx_warn_alloc+0x10/0x10 [ 433.917771][T13566] ? lockdep_hardirqs_on+0x78/0x100 [ 433.917793][T13566] ? __get_vm_area_node+0x2c5/0x330 [ 433.917812][T13566] ? __get_vm_area_node+0x208/0x330 [ 433.917831][T13566] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 433.917850][T13566] ? lock_acquire+0x1cf/0x380 [ 433.917869][T13566] ? __snd_dma_alloc_pages+0xd2/0x150 [ 433.917901][T13566] ? trace_contention_end+0x140/0x180 [ 433.917920][T13566] ? __mutex_lock+0x26a/0x1b90 [ 433.917937][T13566] ? do_group_exit+0xd5/0x2a0 [ 433.917954][T13566] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 433.917971][T13566] ? do_alloc_pages+0xd1/0x250 [ 433.917986][T13566] ? do_alloc_pages+0xd1/0x250 [ 433.918005][T13566] ? __mutex_unlock_slowpath+0x15c/0x790 [ 433.918026][T13566] ? __snd_dma_alloc_pages+0xd2/0x150 [ 433.918045][T13566] __vmalloc_node_noprof+0xad/0xf0 [ 433.918061][T13566] ? __snd_dma_alloc_pages+0xd2/0x150 [ 433.918089][T13566] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 433.918108][T13566] __snd_dma_alloc_pages+0xd2/0x150 [ 433.918129][T13566] snd_dma_alloc_dir_pages+0x151/0x240 [ 433.918151][T13566] do_alloc_pages+0x113/0x250 [ 433.918171][T13566] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 433.918192][T13566] snd_pcm_hw_params+0x1729/0x1cb0 [ 433.918214][T13566] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 433.918232][T13566] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 433.918251][T13566] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 433.918270][T13566] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 433.918289][T13566] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 433.918313][T13566] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 433.918343][T13566] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 433.918360][T13566] snd_pcm_oss_sync+0x265/0x840 [ 433.918379][T13566] snd_pcm_oss_release+0x238/0x300 [ 433.918394][T13566] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 433.918409][T13566] __fput+0x3ff/0xb40 [ 433.918430][T13566] task_work_run+0x150/0x240 [ 433.918449][T13566] ? __pfx_task_work_run+0x10/0x10 [ 433.918468][T13566] ? do_raw_spin_unlock+0x145/0x1e0 [ 433.918490][T13566] do_exit+0x8b8/0x2b60 [ 433.918510][T13566] ? __pfx_do_exit+0x10/0x10 [ 433.918526][T13566] ? do_raw_spin_lock+0x128/0x260 [ 433.918544][T13566] ? find_held_lock+0x2b/0x80 [ 433.918556][T13566] ? get_signal+0x7e0/0x21e0 [ 433.918572][T13566] do_group_exit+0xd5/0x2a0 [ 433.918591][T13566] get_signal+0x1ec7/0x21e0 [ 433.918611][T13566] ? __pfx_get_signal+0x10/0x10 [ 433.918626][T13566] ? do_futex+0x192/0x350 [ 433.918645][T13566] arch_do_signal_or_restart+0x91/0x770 [ 433.918663][T13566] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 433.918685][T13566] ? __pfx___x64_sys_futex+0x10/0x10 [ 433.918701][T13566] ? ksys_write+0x1ac/0x250 [ 433.918717][T13566] exit_to_user_mode_loop+0x86/0x4a0 [ 433.918736][T13566] do_syscall_64+0x668/0xf80 [ 433.918754][T13566] ? clear_bhb_loop+0x40/0x90 [ 433.918770][T13566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.918784][T13566] RIP: 0033:0x7f553ab9c799 [ 433.918796][T13566] Code: Unable to access opcode bytes at 0x7f553ab9c76f. [ 433.918802][T13566] RSP: 002b:00007f553baae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 433.918815][T13566] RAX: 0000000000000001 RBX: 00007f553ae15fa8 RCX: 00007f553ab9c799 [ 433.918824][T13566] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f553ae15fac [ 433.918832][T13566] RBP: 00007f553ae15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 433.918840][T13566] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 433.918848][T13566] R13: 00007f553ae16038 R14: 00007fff2b2e35e0 R15: 00007fff2b2e36c8 [ 433.918866][T13566] [ 433.918879][T13566] Mem-Info: [ 434.455684][T13566] active_anon:7072 inactive_anon:6188 isolated_anon:39 [ 434.455684][T13566] active_file:31192 inactive_file:40597 isolated_file:0 [ 434.455684][T13566] unevictable:768 dirty:1082 writeback:0 [ 434.455684][T13566] slab_reclaimable:12486 slab_unreclaimable:92846 [ 434.455684][T13566] mapped:25884 shmem:1392 pagetables:1317 [ 434.455684][T13566] sec_pagetables:0 bounce:0 [ 434.455684][T13566] kernel_misc_reclaimable:0 [ 434.455684][T13566] free:1283745 free_pcp:28611 free_cma:0 [ 434.538304][T13566] Node 0 active_anon:28288kB inactive_anon:26912kB active_file:124568kB inactive_file:162384kB unevictable:1536kB isolated(anon):156kB isolated(file):0kB mapped:103536kB dirty:4324kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:20480kB kernel_stack:12800kB pagetables:5220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 434.575235][T13566] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 434.607683][T13566] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.726169][T13566] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 434.732394][T13566] Node 0 DMA32 free:1178952kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28288kB inactive_anon:24656kB active_file:124568kB inactive_file:162384kB unevictable:1536kB writepending:4324kB zspages:204kB present:3129332kB managed:2537384kB mlocked:0kB bounce:0kB free_pcp:112808kB local_pcp:112808kB free_cma:0kB [ 434.844949][T13566] lowmem_reserve[]: 0 0 1 1 1 [ 434.849682][T13566] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.888589][T13566] lowmem_reserve[]: 0 0 0 0 0 [ 434.893471][T13566] Node 1 Normal free:3940664kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:4kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2256kB local_pcp:2256kB free_cma:0kB [ 434.929488][T13566] lowmem_reserve[]: 0 0 0 0 0 [ 434.958509][T13566] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 434.983543][T13566] Node 0 DMA32: 5418*4kB (UME) 2620*8kB (UME) 2304*16kB (UM) 1468*32kB (UM) 957*64kB (UME) 664*128kB (UME) 494*256kB (UME) 175*512kB (UME) 96*1024kB (UM) 15*2048kB (UM) 136*4096kB (UM) = 1174856kB [ 435.008829][T13566] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 435.021151][T13566] Node 1 Normal: 6*4kB (UM) 4*8kB (UM) 4*16kB (UM) 12*32kB (UM) 11*64kB (UM) 9*128kB (UM) 8*256kB (UM) 2*512kB (M) 3*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3940664kB [ 435.041296][T13566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.051246][T13566] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 435.064840][T13566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.074577][T13566] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 435.084298][T13566] 73208 total pagecache pages [ 435.089328][T13566] 18 pages in swap cache [ 435.093699][T13566] Free swap = 124828kB [ 435.099532][T13566] Total swap = 124996kB [ 435.103755][T13566] 2097051 pages RAM [ 435.120882][T13566] 0 pages HighMem/MovableOnly [ 435.127966][T13566] 430825 pages reserved [ 435.132302][T13566] 0 pages cma reserved [ 435.231742][T13619] netlink: 266 bytes leftover after parsing attributes in process `syz.2.1717'. [ 435.241132][T13619] IPv6: NLM_F_CREATE should be specified when creating new route [ 435.510535][T13631] FAULT_INJECTION: forcing a failure. [ 435.510535][T13631] name failslab, interval 1, probability 0, space 0, times 0 [ 435.572283][T13631] CPU: 0 UID: 0 PID: 13631 Comm: syz.3.1720 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.572310][T13631] Tainted: [L]=SOFTLOCKUP [ 435.572316][T13631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.572325][T13631] Call Trace: [ 435.572331][T13631] [ 435.572337][T13631] dump_stack_lvl+0x100/0x190 [ 435.572363][T13631] should_fail_ex.cold+0x5/0xa [ 435.572381][T13631] should_failslab+0xc2/0x120 [ 435.572397][T13631] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 435.572418][T13631] ? security_file_alloc+0x34/0x2c0 [ 435.572435][T13631] ? trace_kmem_cache_alloc+0xf3/0x120 [ 435.572453][T13631] security_file_alloc+0x34/0x2c0 [ 435.572470][T13631] init_file+0x95/0x480 [ 435.572487][T13631] alloc_empty_file+0x73/0x1c0 [ 435.572505][T13631] alloc_file_clone+0x5f/0x110 [ 435.572523][T13631] create_pipe_files+0x40e/0x970 [ 435.572539][T13631] do_pipe2+0xbd/0x1e0 [ 435.572553][T13631] ? __pfx_do_pipe2+0x10/0x10 [ 435.572574][T13631] __x64_sys_pipe+0x33/0x50 [ 435.572588][T13631] do_syscall_64+0x106/0xf80 [ 435.572607][T13631] ? clear_bhb_loop+0x40/0x90 [ 435.572624][T13631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.572638][T13631] RIP: 0033:0x7f7fb659c799 [ 435.572650][T13631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.572664][T13631] RSP: 002b:00007f7fb7543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 435.572679][T13631] RAX: ffffffffffffffda RBX: 00007f7fb6815fa0 RCX: 00007f7fb659c799 [ 435.572688][T13631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.572696][T13631] RBP: 00007f7fb6632c99 R08: 0000000000000000 R09: 0000000000000000 [ 435.572704][T13631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.572712][T13631] R13: 00007f7fb6816038 R14: 00007f7fb6815fa0 R15: 00007fff4b8d1938 [ 435.572730][T13631] [ 436.424455][T13650] zswap: compressor G not available [ 436.663108][T13669] block2mtd: illegal erase size [ 436.760596][T13669] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input17 [ 436.813600][T13676] bridge0: port 4(ipvlan0) entered blocking state [ 436.851578][T13676] bridge0: port 4(ipvlan0) entered disabled state [ 436.905579][T13676] ipvlan0: entered allmulticast mode [ 436.944967][T13676] veth0_vlan: entered allmulticast mode [ 436.980925][T13676] ipvlan0: left allmulticast mode [ 437.014701][T13676] veth0_vlan: left allmulticast mode [ 437.056466][T13680] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1732'. [ 437.520191][T13695] FAULT_INJECTION: forcing a failure. [ 437.520191][T13695] name failslab, interval 1, probability 0, space 0, times 0 [ 437.588910][T13695] CPU: 0 UID: 0 PID: 13695 Comm: syz.0.1736 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.588934][T13695] Tainted: [L]=SOFTLOCKUP [ 437.588939][T13695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.588947][T13695] Call Trace: [ 437.588952][T13695] [ 437.588958][T13695] dump_stack_lvl+0x100/0x190 [ 437.588984][T13695] should_fail_ex.cold+0x5/0xa [ 437.589000][T13695] should_failslab+0xc2/0x120 [ 437.589015][T13695] __kmalloc_cache_noprof+0x7a/0x6f0 [ 437.589032][T13695] ? do_getname+0x238/0x390 [ 437.589060][T13695] ? strncpy_from_user+0x19d/0x2d0 [ 437.589078][T13695] do_getname+0x238/0x390 [ 437.589096][T13695] do_sys_openat2+0xc5/0x1e0 [ 437.589113][T13695] ? __pfx_do_sys_openat2+0x10/0x10 [ 437.589131][T13695] ? __fget_files+0x21f/0x3d0 [ 437.589148][T13695] __x64_sys_open+0xfe/0x1d0 [ 437.589164][T13695] ? __pfx___x64_sys_open+0x10/0x10 [ 437.589180][T13695] ? ksys_write+0x1ac/0x250 [ 437.589199][T13695] do_syscall_64+0x106/0xf80 [ 437.589217][T13695] ? clear_bhb_loop+0x40/0x90 [ 437.589234][T13695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.589248][T13695] RIP: 0033:0x7f628059c799 [ 437.589260][T13695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.589274][T13695] RSP: 002b:00007f628149e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 437.589287][T13695] RAX: ffffffffffffffda RBX: 00007f6280815fa0 RCX: 00007f628059c799 [ 437.589296][T13695] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000001380 [ 437.589304][T13695] RBP: 00007f628149e090 R08: 0000000000000000 R09: 0000000000000000 [ 437.589312][T13695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.589320][T13695] R13: 00007f6280816038 R14: 00007f6280815fa0 R15: 00007ffd8fb92378 [ 437.589338][T13695] [ 438.778301][T13708] FAULT_INJECTION: forcing a failure. [ 438.778301][T13708] name failslab, interval 1, probability 0, space 0, times 0 [ 438.797836][T13710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'. [ 438.829040][T13708] CPU: 0 UID: 0 PID: 13708 Comm: syz.2.1741 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.829066][T13708] Tainted: [L]=SOFTLOCKUP [ 438.829072][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.829081][T13708] Call Trace: [ 438.829087][T13708] [ 438.829092][T13708] dump_stack_lvl+0x100/0x190 [ 438.829120][T13708] should_fail_ex.cold+0x5/0xa [ 438.829137][T13708] should_failslab+0xc2/0x120 [ 438.829153][T13708] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 438.829174][T13708] ? shmem_alloc_inode+0x25/0x50 [ 438.829192][T13708] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 438.829208][T13708] shmem_alloc_inode+0x25/0x50 [ 438.829223][T13708] alloc_inode+0x68/0x250 [ 438.829242][T13708] new_inode+0x22/0x1c0 [ 438.829261][T13708] shmem_get_inode+0x212/0x1040 [ 438.829280][T13708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.829295][T13708] ? __pfx_shmem_get_inode+0x10/0x10 [ 438.829315][T13708] ? __lock_acquire+0x4a5/0x2630 [ 438.829336][T13708] __shmem_file_setup+0x184/0x490 [ 438.829355][T13708] ? __pfx___shmem_file_setup+0x10/0x10 [ 438.829374][T13708] ? do_raw_spin_lock+0x128/0x260 [ 438.829393][T13708] ? find_held_lock+0x2b/0x80 [ 438.829405][T13708] ? alloc_fd+0x476/0x790 [ 438.829417][T13708] ? alloc_fd+0x476/0x790 [ 438.829432][T13708] memfd_alloc_file+0x247/0x620 [ 438.829451][T13708] ? _raw_spin_unlock+0x28/0x50 [ 438.829469][T13708] ? __pfx_memfd_alloc_file+0x10/0x10 [ 438.829492][T13708] __do_sys_memfd_create+0x236/0x3d0 [ 438.829512][T13708] do_syscall_64+0x106/0xf80 [ 438.829532][T13708] ? clear_bhb_loop+0x40/0x90 [ 438.829548][T13708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.829563][T13708] RIP: 0033:0x7f553ab9c799 [ 438.829576][T13708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.829591][T13708] RSP: 002b:00007f553baae028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 438.829605][T13708] RAX: ffffffffffffffda RBX: 00007f553ae15fa0 RCX: 00007f553ab9c799 [ 438.829615][T13708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.829623][T13708] RBP: 00007f553ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 438.829631][T13708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.829639][T13708] R13: 00007f553ae16038 R14: 00007f553ae15fa0 R15: 00007fff2b2e36c8 [ 438.829657][T13708] [ 438.833085][T13710] i: entered promiscuous mode [ 439.385879][T13716] openvswitch: HfR: Dropping previously announced user features [ 439.859048][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076177c00: rx timeout, send abort [ 439.867619][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076177c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 440.129098][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.138682][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.148415][T13715] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 440.158802][T13715] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.173387][T13715] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.191243][T13715] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 441.300496][T13781] FAULT_INJECTION: forcing a failure. [ 441.300496][T13781] name failslab, interval 1, probability 0, space 0, times 0 [ 441.313475][T13781] CPU: 0 UID: 0 PID: 13781 Comm: syz.2.1761 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.313499][T13781] Tainted: [L]=SOFTLOCKUP [ 441.313505][T13781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.313514][T13781] Call Trace: [ 441.313519][T13781] [ 441.313526][T13781] dump_stack_lvl+0x100/0x190 [ 441.313553][T13781] should_fail_ex.cold+0x5/0xa [ 441.313571][T13781] should_failslab+0xc2/0x120 [ 441.313587][T13781] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 441.313607][T13781] ? __anon_vma_prepare+0xae/0x5e0 [ 441.313631][T13781] __anon_vma_prepare+0xae/0x5e0 [ 441.313649][T13781] ? do_raw_spin_lock+0x128/0x260 [ 441.313671][T13781] __vmf_anon_prepare+0x11f/0x250 [ 441.313688][T13781] do_huge_pmd_anonymous_page+0x15c/0x1c40 [ 441.313711][T13781] ? __pmd_alloc+0x3fb/0x950 [ 441.313728][T13781] __handle_mm_fault+0x1e9e/0x2b60 [ 441.313750][T13781] ? mt_find+0x45e/0x8e0 [ 441.313772][T13781] ? __pfx___handle_mm_fault+0x10/0x10 [ 441.313789][T13781] ? __pfx_mt_find+0x10/0x10 [ 441.313823][T13781] handle_mm_fault+0x36d/0xa20 [ 441.313845][T13781] __get_user_pages+0xf9c/0x34d0 [ 441.313869][T13781] ? __pfx___get_user_pages+0x10/0x10 [ 441.313890][T13781] populate_vma_page_range+0x267/0x3f0 [ 441.313909][T13781] ? __pfx_populate_vma_page_range+0x10/0x10 [ 441.313925][T13781] ? __pfx_find_vma_intersection+0x10/0x10 [ 441.313941][T13781] ? do_mmap+0x93f/0x12f0 [ 441.313958][T13781] __mm_populate+0x107/0x3a0 [ 441.313975][T13781] ? __pfx___mm_populate+0x10/0x10 [ 441.313992][T13781] ? up_write+0x290/0x4f0 [ 441.314014][T13781] vm_mmap_pgoff+0x37f/0x470 [ 441.314032][T13781] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 441.314048][T13781] ? do_futex+0x192/0x350 [ 441.314066][T13781] ? __pfx_do_futex+0x10/0x10 [ 441.314087][T13781] ksys_mmap_pgoff+0xe1/0x650 [ 441.314102][T13781] ? __x64_sys_futex+0x34f/0x4d0 [ 441.314118][T13781] ? __x64_sys_futex+0x358/0x4d0 [ 441.314136][T13781] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 441.314151][T13781] ? xfd_validate_state+0x129/0x190 [ 441.314174][T13781] __x64_sys_mmap+0x125/0x190 [ 441.314196][T13781] do_syscall_64+0x106/0xf80 [ 441.314225][T13781] ? clear_bhb_loop+0x40/0x90 [ 441.314243][T13781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.314258][T13781] RIP: 0033:0x7f553ab9c799 [ 441.314271][T13781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.314285][T13781] RSP: 002b:00007f553baae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 441.314299][T13781] RAX: ffffffffffffffda RBX: 00007f553ae15fa0 RCX: 00007f553ab9c799 [ 441.314309][T13781] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 441.314318][T13781] RBP: 00007f553ac32c99 R08: 0000000000000002 R09: 0000000000008000 [ 441.314326][T13781] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 441.314335][T13781] R13: 00007f553ae16038 R14: 00007f553ae15fa0 R15: 00007fff2b2e36c8 [ 441.314354][T13781] [ 441.610060][ T7119] Bluetooth: hci0: command 0x0c1a tx timeout [ 441.952281][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a4d0800: rx timeout, send abort [ 441.960836][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a4d0800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 442.181782][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 442.196155][ T7119] Bluetooth: hci3: command 0x0c1a tx timeout [ 442.202232][ T8651] Bluetooth: hci2: command 0x0c1a tx timeout [ 442.208766][ T8651] Bluetooth: hci1: command 0x0c1a tx timeout [ 442.228502][T13791] vivid-007: ================= START STATUS ================= [ 442.255492][T13791] vivid-007: Enable Output Cropping: true [ 442.274226][T13791] vivid-007: Enable Output Composing: true [ 442.312175][T13791] vivid-007: Enable Output Scaler: true [ 442.338587][T13791] vivid-007: Tx RGB Quantization Range: Automatic [ 442.363368][T13791] vivid-007: Transmit Mode: HDMI [ 442.381800][T13791] vivid-007: Hotplug Present: 0x00000000 [ 442.399928][T13791] vivid-007: RxSense Present: 0x00000000 [ 442.427338][T13791] vivid-007: EDID Present: 0x00000000 [ 442.457597][T13791] vivid-007: ================== END STATUS ================== [ 442.794155][T13819] FAULT_INJECTION: forcing a failure. [ 442.794155][T13819] name failslab, interval 1, probability 0, space 0, times 0 [ 442.847577][T13819] CPU: 0 UID: 0 PID: 13819 Comm: syz.2.1770 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.847602][T13819] Tainted: [L]=SOFTLOCKUP [ 442.847607][T13819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.847615][T13819] Call Trace: [ 442.847621][T13819] [ 442.847626][T13819] dump_stack_lvl+0x100/0x190 [ 442.847652][T13819] should_fail_ex.cold+0x5/0xa [ 442.847669][T13819] should_failslab+0xc2/0x120 [ 442.847684][T13819] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 442.847702][T13819] ? __proc_create+0x2cb/0x8c0 [ 442.847751][T13819] __proc_create+0x2cb/0x8c0 [ 442.847771][T13819] ? __pfx___proc_create+0x10/0x10 [ 442.847793][T13819] ? _raw_write_unlock+0x28/0x50 [ 442.847860][T13819] ? proc_register+0x559/0x8a0 [ 442.847875][T13819] proc_create_reg+0x75/0x170 [ 442.847889][T13819] ? __pfx_sctp_snmp_seq_show+0x10/0x10 [ 442.847944][T13819] proc_create_net_single+0x86/0x180 [ 442.847958][T13819] ? __pfx_proc_create_net_single+0x10/0x10 [ 442.847971][T13819] ? sctp_defaults_init+0x720/0xd90 [ 442.848032][T13819] sctp_proc_init+0xaa/0x270 [ 442.848049][T13819] ? __pfx_sctp_defaults_init+0x10/0x10 [ 442.848075][T13819] sctp_defaults_init+0x758/0xd90 [ 442.848094][T13819] ? __pfx_sctp_defaults_init+0x10/0x10 [ 442.848112][T13819] ops_init+0x1e2/0x5f0 [ 442.848184][T13819] setup_net+0x118/0x3a0 [ 442.848204][T13819] ? __pfx_setup_net+0x10/0x10 [ 442.848221][T13819] ? lockdep_init_map_type+0x5c/0x250 [ 442.848239][T13819] ? mutex_init_lockep+0x110/0x150 [ 442.848260][T13819] copy_net_ns+0x46f/0x7c0 [ 442.848274][T13819] create_new_namespaces+0x3ea/0xac0 [ 442.848293][T13819] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 442.848309][T13819] ksys_unshare+0x473/0xad0 [ 442.848327][T13819] ? __pfx_ksys_unshare+0x10/0x10 [ 442.848353][T13819] __x64_sys_unshare+0x31/0x40 [ 442.848368][T13819] do_syscall_64+0x106/0xf80 [ 442.848386][T13819] ? clear_bhb_loop+0x40/0x90 [ 442.848403][T13819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.848417][T13819] RIP: 0033:0x7f553ab9c799 [ 442.848429][T13819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.848442][T13819] RSP: 002b:00007f553baae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 442.848456][T13819] RAX: ffffffffffffffda RBX: 00007f553ae15fa0 RCX: 00007f553ab9c799 [ 442.848467][T13819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 442.848475][T13819] RBP: 00007f553ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 442.848483][T13819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.848491][T13819] R13: 00007f553ae16038 R14: 00007f553ae15fa0 R15: 00007fff2b2e36c8 [ 442.848509][T13819] [ 443.850559][T13844] futex_wake_op: syz.3.1775 tries to shift op by -2048; fix this program [ 443.869657][T13844] futex_wake_op: syz.3.1775 tries to shift op by -2048; fix this program [ 444.244292][T13858] netlink: 'syz.2.1779': attribute type 1 has an invalid length. [ 444.524700][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880269a1800: rx timeout, send abort getty: ttyS0: read error: Resource temporarily unavailable [ 444.917928][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ae14800: rx timeout, send abort [ 444.929748][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ae14800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 445.033009][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880269a1800: abort rx timeout. Force session deactivation [ 445.533739][T13866] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 445.541121][T13866] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 445.548415][T13866] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 445.555752][T13866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 446.755543][T13802] Bluetooth: hci0: command 0x0c1a tx timeout [ 447.428075][T13943] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1804'. [ 447.554969][T13802] Bluetooth: hci2: command 0x0c1a tx timeout [ 447.562581][ T7131] Bluetooth: hci1: command 0x0c1a tx timeout [ 447.634958][T13802] Bluetooth: hci3: command 0x0c1a tx timeout [ 447.752013][T13945] can: request_module (can-proto-0) failed. [ 448.371226][T13972] FAULT_INJECTION: forcing a failure. [ 448.371226][T13972] name failslab, interval 1, probability 0, space 0, times 0 [ 448.396727][T13974] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[13974] [ 448.442814][T13972] CPU: 0 UID: 0 PID: 13972 Comm: syz.0.1813 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.442840][T13972] Tainted: [L]=SOFTLOCKUP [ 448.442846][T13972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.442854][T13972] Call Trace: [ 448.442860][T13972] [ 448.442866][T13972] dump_stack_lvl+0x100/0x190 [ 448.442894][T13972] should_fail_ex.cold+0x5/0xa [ 448.442912][T13972] should_failslab+0xc2/0x120 [ 448.442927][T13972] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 448.442950][T13972] ? fib_notifier_ops_register+0x32/0x270 [ 448.443060][T13972] ? __debug_object_init+0x2de/0x3d0 [ 448.443086][T13972] kmemdup_noprof+0x29/0x60 [ 448.443108][T13972] fib_notifier_ops_register+0x32/0x270 [ 448.443132][T13972] fib4_notifier_init+0x4f/0xd0 [ 448.443189][T13972] fib_net_init+0xbf/0x3f0 [ 448.443230][T13972] ? is_module_address+0x69/0xf0 [ 448.443249][T13972] ? __pfx_fib_net_init+0x10/0x10 [ 448.443269][T13972] ? timer_init_key+0x150/0x340 [ 448.443288][T13972] ? devinet_init_net+0x56c/0x8d0 [ 448.443312][T13972] ? __pfx_fib_net_init+0x10/0x10 [ 448.443330][T13972] ops_init+0x1e2/0x5f0 [ 448.443352][T13972] setup_net+0x118/0x3a0 [ 448.443372][T13972] ? __pfx_setup_net+0x10/0x10 [ 448.443391][T13972] ? lockdep_init_map_type+0x5c/0x250 [ 448.443410][T13972] ? mutex_init_lockep+0x110/0x150 [ 448.443431][T13972] copy_net_ns+0x46f/0x7c0 [ 448.443446][T13972] create_new_namespaces+0x3ea/0xac0 [ 448.443465][T13972] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 448.443482][T13972] ksys_unshare+0x473/0xad0 [ 448.443501][T13972] ? __pfx_ksys_unshare+0x10/0x10 [ 448.443525][T13972] __x64_sys_unshare+0x31/0x40 [ 448.443541][T13972] do_syscall_64+0x106/0xf80 [ 448.443560][T13972] ? clear_bhb_loop+0x40/0x90 [ 448.443577][T13972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.443592][T13972] RIP: 0033:0x7f628059c799 [ 448.443605][T13972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.443620][T13972] RSP: 002b:00007f628149e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 448.443634][T13972] RAX: ffffffffffffffda RBX: 00007f6280815fa0 RCX: 00007f628059c799 [ 448.443644][T13972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 448.443652][T13972] RBP: 00007f6280632c99 R08: 0000000000000000 R09: 0000000000000000 [ 448.443661][T13972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.443670][T13972] R13: 00007f6280816038 R14: 00007f6280815fa0 R15: 00007ffd8fb92378 [ 448.443689][T13972] [ 451.103383][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b746400: rx timeout, send abort [ 451.173699][T14051] FAULT_INJECTION: forcing a failure. [ 451.173699][T14051] name failslab, interval 1, probability 0, space 0, times 0 [ 451.258025][T14051] CPU: 0 UID: 0 PID: 14051 Comm: syz.3.1833 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.258052][T14051] Tainted: [L]=SOFTLOCKUP [ 451.258057][T14051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.258066][T14051] Call Trace: [ 451.258072][T14051] [ 451.258078][T14051] dump_stack_lvl+0x100/0x190 [ 451.258105][T14051] should_fail_ex.cold+0x5/0xa [ 451.258123][T14051] should_failslab+0xc2/0x120 [ 451.258139][T14051] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 451.258160][T14051] ? __d_alloc+0x34/0xa80 [ 451.258179][T14051] __d_alloc+0x34/0xa80 [ 451.258197][T14051] d_alloc_pseudo+0x1c/0xc0 [ 451.258217][T14051] alloc_file_pseudo+0xcf/0x230 [ 451.258235][T14051] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 451.258258][T14051] __shmem_file_setup+0x221/0x490 [ 451.258277][T14051] ? __pfx___shmem_file_setup+0x10/0x10 [ 451.258299][T14051] ? vm_area_alloc+0x1f/0x160 [ 451.258319][T14051] shmem_zero_setup+0x96/0x1b0 [ 451.258341][T14051] __mmap_region+0x2198/0x29e0 [ 451.258364][T14051] ? __pfx___mmap_region+0x10/0x10 [ 451.258385][T14051] ? __lock_acquire+0x4a5/0x2630 [ 451.258405][T14051] ? set_next_entity+0x11e/0x9c0 [ 451.258427][T14051] ? __lock_acquire+0x4a5/0x2630 [ 451.258451][T14051] ? find_held_lock+0x2b/0x80 [ 451.258472][T14051] ? find_held_lock+0x2b/0x80 [ 451.258485][T14051] ? finish_task_switch.isra.0+0x200/0xb80 [ 451.258501][T14051] ? finish_task_switch.isra.0+0x200/0xb80 [ 451.258524][T14051] ? trace_sched_exit_tp+0x13a/0x180 [ 451.258543][T14051] ? __schedule+0x1000/0x6120 [ 451.258584][T14051] ? rcu_is_watching+0x12/0xc0 [ 451.258605][T14051] ? cap_capable+0x107/0x460 [ 451.258630][T14051] mmap_region+0x180/0x3e0 [ 451.258654][T14051] do_mmap+0xc63/0x12f0 [ 451.258673][T14051] ? __pfx_do_mmap+0x10/0x10 [ 451.258688][T14051] ? __pfx_down_write_killable+0x10/0x10 [ 451.258713][T14051] vm_mmap_pgoff+0x29e/0x470 [ 451.258732][T14051] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 451.258749][T14051] ? do_futex+0x192/0x350 [ 451.258767][T14051] ? __pfx_do_futex+0x10/0x10 [ 451.258788][T14051] ksys_mmap_pgoff+0xe1/0x650 [ 451.258803][T14051] ? __x64_sys_futex+0x34f/0x4d0 [ 451.258819][T14051] ? __x64_sys_futex+0x358/0x4d0 [ 451.258837][T14051] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 451.258852][T14051] ? xfd_validate_state+0x129/0x190 [ 451.258875][T14051] __x64_sys_mmap+0x125/0x190 [ 451.258898][T14051] do_syscall_64+0x106/0xf80 [ 451.258916][T14051] ? clear_bhb_loop+0x40/0x90 [ 451.258933][T14051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.258948][T14051] RIP: 0033:0x7f7fb659c799 [ 451.258961][T14051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.258975][T14051] RSP: 002b:00007f7fb7543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 451.258990][T14051] RAX: ffffffffffffffda RBX: 00007f7fb6815fa0 RCX: 00007f7fb659c799 [ 451.259001][T14051] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 451.259010][T14051] RBP: 00007f7fb6632c99 R08: ffffffffffffffff R09: 0000000000008000 [ 451.259019][T14051] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 451.259028][T14051] R13: 00007f7fb6816038 R14: 00007f7fb6815fa0 R15: 00007fff4b8d1938 [ 451.259047][T14051] [ 451.611648][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b746400: abort rx timeout. Force session deactivation [ 456.445647][T14156] sctp: [Deprecated]: syz.2.1856 (pid 14156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.445647][T14156] Use struct sctp_sack_info instead [ 456.688330][T14165] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1859'. [ 456.719962][T14165] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1859'. [ 457.363934][T14183] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1866'. [ 458.114145][T14215] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 458.121396][T14215] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 458.415949][T14228] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1877'. [ 458.555772][T14230] wlan1: mtu less than device minimum [ 458.718293][T14237] FAULT_INJECTION: forcing a failure. [ 458.718293][T14237] name failslab, interval 1, probability 0, space 0, times 0 [ 458.783645][T14237] CPU: 0 UID: 0 PID: 14237 Comm: syz.3.1880 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.783671][T14237] Tainted: [L]=SOFTLOCKUP [ 458.783677][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.783686][T14237] Call Trace: [ 458.783692][T14237] [ 458.783698][T14237] dump_stack_lvl+0x100/0x190 [ 458.783729][T14237] should_fail_ex.cold+0x5/0xa [ 458.783748][T14237] should_failslab+0xc2/0x120 [ 458.783765][T14237] __kmalloc_node_noprof+0xe6/0x850 [ 458.783786][T14237] ? qdisc_alloc+0xbb/0xb30 [ 458.783884][T14237] qdisc_alloc+0xbb/0xb30 [ 458.783905][T14237] qdisc_create_dflt+0x93/0x4c0 [ 458.783926][T14237] dev_activate+0x64f/0xce0 [ 458.783948][T14237] ? __pfx_dev_activate+0x10/0x10 [ 458.783969][T14237] ? __local_bh_enable_ip+0x9e/0x120 [ 458.783988][T14237] __dev_open+0x4f1/0x960 [ 458.784030][T14237] ? __pfx___dev_open+0x10/0x10 [ 458.784050][T14237] ? __local_bh_enable_ip+0x9e/0x120 [ 458.784068][T14237] __dev_change_flags+0x558/0x6f0 [ 458.784114][T14237] ? __pfx___dev_change_flags+0x10/0x10 [ 458.784139][T14237] netif_change_flags+0x8d/0x160 [ 458.784161][T14237] dev_change_flags+0xba/0x250 [ 458.784185][T14237] flags_store+0x187/0x1e0 [ 458.784229][T14237] ? __pfx_flags_store+0x10/0x10 [ 458.784249][T14237] ? find_held_lock+0x2b/0x80 [ 458.784263][T14237] ? sysfs_file_kobj+0xe4/0x290 [ 458.784282][T14237] ? sysfs_file_kobj+0xe4/0x290 [ 458.784301][T14237] ? __pfx_flags_store+0x10/0x10 [ 458.784317][T14237] dev_attr_store+0x58/0x80 [ 458.784335][T14237] ? __pfx_dev_attr_store+0x10/0x10 [ 458.784351][T14237] sysfs_kf_write+0xf2/0x150 [ 458.784369][T14237] kernfs_fop_write_iter+0x3e0/0x5f0 [ 458.784383][T14237] ? __pfx_sysfs_kf_write+0x10/0x10 [ 458.784403][T14237] vfs_write+0x6ac/0x1070 [ 458.784418][T14237] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 458.784435][T14237] ? __pfx_vfs_write+0x10/0x10 [ 458.784479][T14237] ksys_write+0x12a/0x250 [ 458.784493][T14237] ? __pfx_ksys_write+0x10/0x10 [ 458.784512][T14237] do_syscall_64+0x106/0xf80 [ 458.784537][T14237] ? clear_bhb_loop+0x40/0x90 [ 458.784556][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.784571][T14237] RIP: 0033:0x7f7fb659c799 [ 458.784584][T14237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.784601][T14237] RSP: 002b:00007f7fb7543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.784616][T14237] RAX: ffffffffffffffda RBX: 00007f7fb6815fa0 RCX: 00007f7fb659c799 [ 458.784627][T14237] RDX: 0000000000000081 RSI: 0000200000000140 RDI: 0000000000000002 [ 458.784636][T14237] RBP: 00007f7fb6632c99 R08: 0000000000000000 R09: 0000000000000000 [ 458.784645][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.784654][T14237] R13: 00007f7fb6816038 R14: 00007f7fb6815fa0 R15: 00007fff4b8d1938 [ 458.784676][T14237] [ 459.095890][T14237] rose7: default qdisc (pfifo_fast) fail, fallback to noqueue [ 459.522951][T13802] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 459.523047][T13802] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 459.542825][T13802] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 461.389682][T14323] FAULT_INJECTION: forcing a failure. [ 461.389682][T14323] name fail_futex, interval 1, probability 0, space 0, times 0 [ 461.485481][T14323] CPU: 0 UID: 0 PID: 14323 Comm: syz.2.1894 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.485509][T14323] Tainted: [L]=SOFTLOCKUP [ 461.485514][T14323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.485523][T14323] Call Trace: [ 461.485528][T14323] [ 461.485534][T14323] dump_stack_lvl+0x100/0x190 [ 461.485561][T14323] should_fail_ex.cold+0x5/0xa [ 461.485580][T14323] get_futex_key+0x1d2/0x1620 [ 461.485600][T14323] ? __pfx_get_futex_key+0x10/0x10 [ 461.485618][T14323] ? kasan_quarantine_put+0x104/0x240 [ 461.485638][T14323] ? lockdep_hardirqs_on+0x78/0x100 [ 461.485661][T14323] futex_wake+0xea/0x530 [ 461.485681][T14323] ? find_held_lock+0x2b/0x80 [ 461.485695][T14323] ? __pfx_futex_wake+0x10/0x10 [ 461.485719][T14323] ? ksys_write+0x190/0x250 [ 461.485731][T14323] ? ksys_write+0x190/0x250 [ 461.485747][T14323] do_futex+0x32b/0x350 [ 461.485765][T14323] ? __pfx_do_futex+0x10/0x10 [ 461.485788][T14323] __x64_sys_futex+0x34f/0x4d0 [ 461.485808][T14323] ? fput+0x79/0x100 [ 461.485823][T14323] ? __pfx___x64_sys_futex+0x10/0x10 [ 461.485840][T14323] ? ksys_write+0x1ac/0x250 [ 461.485853][T14323] ? __pfx_ksys_write+0x10/0x10 [ 461.485870][T14323] do_syscall_64+0x106/0xf80 [ 461.485889][T14323] ? clear_bhb_loop+0x40/0x90 [ 461.485905][T14323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.485920][T14323] RIP: 0033:0x7f553ab9c799 [ 461.485933][T14323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.485947][T14323] RSP: 002b:00007f553baae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 461.485960][T14323] RAX: ffffffffffffffda RBX: 00007f553ae15fa8 RCX: 00007f553ab9c799 [ 461.485969][T14323] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f553ae15fac [ 461.485978][T14323] RBP: 00007f553ae15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 461.485986][T14323] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000000 [ 461.485994][T14323] R13: 00007f553ae16038 R14: 00007fff2b2e35e0 R15: 00007fff2b2e36c8 [ 461.486013][T14323] [ 463.442058][T14386] random: crng reseeded on system resumption [ 464.924397][T14431] No such timeout policy "" [ 464.975564][T14431] netlink: Failed to associated timeout policy '' [ 465.056109][T14435] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 466.905411][T14454] page: refcount:7 mapcount:6 mapping:0000000000000000 index:0x7f35e8083 pfn:0x78000 [ 466.940862][T14454] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 467.026826][T14454] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 467.088306][T14454] raw: 00000007f35e8083 0000000000000000 0000000700000005 0000000000000000 [ 467.131332][T14454] page dumped because: unmovable page [ 467.219316][T14454] page_owner tracks the page as allocated [ 467.330229][T14454] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5821, tgid 5821 (syz-executor), ts 74594873029, free_ts 70569012171 [ 467.482387][T14454] post_alloc_hook+0x153/0x170 [ 467.516846][T13802] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 467.594828][T14454] get_page_from_freelist+0x111d/0x3140 [ 467.645236][T14454] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 467.782828][T14454] alloc_pages_mpol+0x1fb/0x550 [ 467.874198][T14454] alloc_pages_noprof+0x131/0x390 [ 467.916853][T14454] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 467.922785][T14454] vmalloc_user_noprof+0x9e/0xe0 [ 468.036172][T14454] kcov_ioctl+0x4c/0x720 [ 468.061471][T14454] __x64_sys_ioctl+0x18e/0x210 [ 468.091581][T14454] do_syscall_64+0x106/0xf80 [ 468.103736][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.154442][T14454] page last free pid 5814 tgid 5814 stack trace: [ 468.195131][T14454] free_unref_folios+0xaea/0x1790 [ 468.200381][T14454] folios_put_refs+0x53c/0x840 [ 468.224852][T14454] free_pages_and_swap_cache+0x242/0x480 [ 468.224934][T14454] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 468.224954][T14454] tlb_finish_mmu+0x1b0/0x810 [ 468.224972][T14454] unmap_region+0x2d9/0x3b0 [ 468.224991][T14454] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 468.225019][T14454] do_vmi_align_munmap+0x44f/0x5f0 [ 468.225039][T14454] do_vmi_munmap+0x1f8/0x3e0 [ 468.225057][T14454] __vm_munmap+0x196/0x390 [ 468.225078][T14454] __x64_sys_munmap+0x59/0x80 [ 468.225095][T14454] do_syscall_64+0x106/0xf80 [ 468.225115][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.260233][T14460] page: refcount:7 mapcount:6 mapping:0000000000000000 index:0x7f35e8083 pfn:0x78000 [ 468.260299][T14460] flags: 0xfff18000000210(dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 468.260322][T14460] raw: 00fff18000000210 0000000000000000 dead000000000122 0000000000000000 [ 468.260349][T14460] raw: 00000007f35e8083 0000000000000000 0000000700000005 0000000000000000 [ 468.260359][T14460] page dumped because: unmovable page [ 468.260367][T14460] page_owner tracks the page as allocated [ 468.260374][T14460] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5821, tgid 5821 (syz-executor), ts 74594873029, free_ts 70569012171 [ 468.260401][T14460] post_alloc_hook+0x153/0x170 [ 468.260423][T14460] get_page_from_freelist+0x111d/0x3140 [ 468.260444][T14460] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 468.260471][T14460] alloc_pages_mpol+0x1fb/0x550 [ 468.260486][T14460] alloc_pages_noprof+0x131/0x390 [ 468.260501][T14460] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 468.260519][T14460] vmalloc_user_noprof+0x9e/0xe0 [ 468.260537][T14460] kcov_ioctl+0x4c/0x720 [ 468.260550][T14460] __x64_sys_ioctl+0x18e/0x210 [ 468.260569][T14460] do_syscall_64+0x106/0xf80 [ 468.260589][T14460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.260605][T14460] page last free pid 5814 tgid 5814 stack trace: [ 468.260613][T14460] free_unref_folios+0xaea/0x1790 [ 468.260633][T14460] folios_put_refs+0x53c/0x840 [ 468.260652][T14460] free_pages_and_swap_cache+0x242/0x480 [ 468.260672][T14460] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 468.260690][T14460] tlb_finish_mmu+0x1b0/0x810 [ 468.260707][T14460] unmap_region+0x2d9/0x3b0 [ 468.260724][T14460] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 468.260743][T14460] do_vmi_align_munmap+0x44f/0x5f0 [ 468.260762][T14460] do_vmi_munmap+0x1f8/0x3e0 [ 468.260780][T14460] __vm_munmap+0x196/0x390 [ 468.260799][T14460] __x64_sys_munmap+0x59/0x80 [ 468.260814][T14460] do_syscall_64+0x106/0xf80 [ 468.260833][T14460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.481812][T14559] FAULT_INJECTION: forcing a failure. [ 471.481812][T14559] name fail_futex, interval 1, probability 0, space 0, times 0 [ 471.657932][T14559] CPU: 0 UID: 0 PID: 14559 Comm: syz.2.1943 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.657958][T14559] Tainted: [L]=SOFTLOCKUP [ 471.657964][T14559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.657974][T14559] Call Trace: [ 471.657979][T14559] [ 471.657984][T14559] dump_stack_lvl+0x100/0x190 [ 471.658011][T14559] should_fail_ex.cold+0x5/0xa [ 471.658028][T14559] get_futex_key+0x1d2/0x1620 [ 471.658048][T14559] ? __pfx_get_futex_key+0x10/0x10 [ 471.658078][T14559] futex_wake+0xea/0x530 [ 471.658101][T14559] ? __pfx_futex_wake+0x10/0x10 [ 471.658124][T14559] ? putname+0xb1/0x110 [ 471.658139][T14559] ? kmem_cache_free+0x124/0x6a0 [ 471.658161][T14559] do_futex+0x32b/0x350 [ 471.658179][T14559] ? __pfx_do_futex+0x10/0x10 [ 471.658196][T14559] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.658215][T14559] ? __fget_files+0x21f/0x3d0 [ 471.658231][T14559] __x64_sys_futex+0x34f/0x4d0 [ 471.658249][T14559] ? __x64_sys_openat+0x12d/0x210 [ 471.658268][T14559] ? __pfx___x64_sys_futex+0x10/0x10 [ 471.658292][T14559] do_syscall_64+0x106/0xf80 [ 471.658311][T14559] ? clear_bhb_loop+0x40/0x90 [ 471.658328][T14559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.658343][T14559] RIP: 0033:0x7f553ab9c799 [ 471.658356][T14559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.658370][T14559] RSP: 002b:00007f553ba8d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 471.658384][T14559] RAX: ffffffffffffffda RBX: 00007f553ae16098 RCX: 00007f553ab9c799 [ 471.658394][T14559] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f553ae1609c [ 471.658402][T14559] RBP: 00007f553ae16090 R08: 0000000000000000 R09: 0000000000000000 [ 471.658411][T14559] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 471.658419][T14559] R13: 00007f553ae16128 R14: 00007fff2b2e35e0 R15: 00007fff2b2e36c8 [ 471.658437][T14559] [ 474.010474][T14605] No such timeout policy "" [ 474.062507][T14605] netlink: Failed to associated timeout policy '' [ 474.105849][T14612] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 474.725188][T14622] random: crng reseeded on system resumption [ 476.276749][T14670] random: crng reseeded on system resumption [ 477.983289][T14715] page: refcount:7 mapcount:6 mapping:0000000000000000 index:0x7f35e8083 pfn:0x78000 [ 478.010845][T14717] aoe: could not set interface list: too many interfaces [ 478.025425][T14715] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 478.055457][T14715] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 478.086352][T14715] raw: 00000007f35e8083 0000000000000000 0000000700000005 0000000000000000 [ 478.142951][T14715] page dumped because: unmovable page [ 478.169055][T14715] page_owner tracks the page as allocated [ 478.213724][T14715] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5821, tgid 5821 (syz-executor), ts 74594873029, free_ts 70569012171 [ 478.291677][T14715] post_alloc_hook+0x153/0x170 [ 478.302973][T14715] get_page_from_freelist+0x111d/0x3140 [ 478.315338][T14715] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 478.328679][T14715] alloc_pages_mpol+0x1fb/0x550 [ 478.340143][T14715] alloc_pages_noprof+0x131/0x390 [ 478.351049][T14715] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 478.366634][T14715] vmalloc_user_noprof+0x9e/0xe0 [ 478.377410][T14715] kcov_ioctl+0x4c/0x720 [ 478.387309][T14715] __x64_sys_ioctl+0x18e/0x210 [ 478.397695][T14715] do_syscall_64+0x106/0xf80 [ 478.407784][T14715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.420395][T14715] page last free pid 5814 tgid 5814 stack trace: [ 478.435103][T14715] free_unref_folios+0xaea/0x1790 [ 478.453785][T14715] folios_put_refs+0x53c/0x840 [ 478.470705][T14715] free_pages_and_swap_cache+0x242/0x480 [ 478.489462][T14715] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 478.509076][T14715] tlb_finish_mmu+0x1b0/0x810 [ 478.529302][T14715] unmap_region+0x2d9/0x3b0 [ 478.544184][T14715] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 478.563063][T14715] do_vmi_align_munmap+0x44f/0x5f0 [ 478.603299][T14715] do_vmi_munmap+0x1f8/0x3e0 [ 478.623791][T14715] __vm_munmap+0x196/0x390 [ 478.639128][T14715] __x64_sys_munmap+0x59/0x80 [ 478.657971][T14715] do_syscall_64+0x106/0xf80 [ 478.676692][T14715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.808815][T14720] page: refcount:7 mapcount:6 mapping:0000000000000000 index:0x7f35e8083 pfn:0x78000 [ 478.934854][T14720] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 478.988515][T14720] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 479.045632][T14720] raw: 00000007f35e8083 0000000000000000 0000000700000005 0000000000000000 [ 479.086512][T14720] page dumped because: unmovable page [ 479.092420][T14720] page_owner tracks the page as allocated [ 479.167194][T14720] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5821, tgid 5821 (syz-executor), ts 74594873029, free_ts 70569012171 [ 479.232118][T14720] post_alloc_hook+0x153/0x170 [ 479.252125][T14720] get_page_from_freelist+0x111d/0x3140 [ 479.271155][T14720] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 479.289906][T14720] alloc_pages_mpol+0x1fb/0x550 [ 479.301975][T14720] alloc_pages_noprof+0x131/0x390 [ 479.313327][T14720] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 479.326680][T14720] vmalloc_user_noprof+0x9e/0xe0 [ 479.336777][T14720] kcov_ioctl+0x4c/0x720 [ 479.346877][T14720] __x64_sys_ioctl+0x18e/0x210 [ 479.359747][T14720] do_syscall_64+0x106/0xf80 [ 479.369843][T14720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.382783][T14720] page last free pid 5814 tgid 5814 stack trace: [ 479.396646][T14720] free_unref_folios+0xaea/0x1790 [ 479.407543][T14720] folios_put_refs+0x53c/0x840 [ 479.418089][T14720] free_pages_and_swap_cache+0x242/0x480 [ 479.430469][T14720] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 479.443487][T14720] tlb_finish_mmu+0x1b0/0x810 [ 479.454868][T14720] unmap_region+0x2d9/0x3b0 [ 479.464015][T14720] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 479.478470][T14720] do_vmi_align_munmap+0x44f/0x5f0 [ 479.489236][T14720] do_vmi_munmap+0x1f8/0x3e0 [ 479.499339][T14720] __vm_munmap+0x196/0x390 [ 479.509321][T14720] __x64_sys_munmap+0x59/0x80 [ 479.519172][T14720] do_syscall_64+0x106/0xf80 [ 479.529915][T14720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.273672][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'. [ 481.688478][T14793] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[14793] [ 484.937404][T14881] ptrace attach of "./syz-executor exec"[5829] was attempted by ""[14881] [ 486.165655][T14888] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2018'. [ 486.248494][T14888] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2018'. [ 488.856664][T14944] Invalid ELF header magic: != ELF [ 489.092397][T14947] FAULT_INJECTION: forcing a failure. [ 489.092397][T14947] name failslab, interval 1, probability 0, space 0, times 0 [ 489.174767][T14947] CPU: 0 UID: 0 PID: 14947 Comm: syz.0.2034 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.174794][T14947] Tainted: [L]=SOFTLOCKUP [ 489.174799][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.174808][T14947] Call Trace: [ 489.174814][T14947] [ 489.174824][T14947] dump_stack_lvl+0x100/0x190 [ 489.174851][T14947] should_fail_ex.cold+0x5/0xa [ 489.174869][T14947] ? ops_init+0x77/0x5f0 [ 489.174888][T14947] should_failslab+0xc2/0x120 [ 489.174904][T14947] __kmalloc_noprof+0xe0/0x850 [ 489.174931][T14947] ops_init+0x77/0x5f0 [ 489.174954][T14947] setup_net+0x118/0x3a0 [ 489.174974][T14947] ? __pfx_setup_net+0x10/0x10 [ 489.174994][T14947] ? lockdep_init_map_type+0x5c/0x250 [ 489.175013][T14947] ? mutex_init_lockep+0x110/0x150 [ 489.175035][T14947] copy_net_ns+0x46f/0x7c0 [ 489.175050][T14947] create_new_namespaces+0x3ea/0xac0 [ 489.175070][T14947] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 489.175087][T14947] ksys_unshare+0x473/0xad0 [ 489.175106][T14947] ? __pfx_ksys_unshare+0x10/0x10 [ 489.175130][T14947] __x64_sys_unshare+0x31/0x40 [ 489.175147][T14947] do_syscall_64+0x106/0xf80 [ 489.175166][T14947] ? clear_bhb_loop+0x40/0x90 [ 489.175183][T14947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.175198][T14947] RIP: 0033:0x7f628059c799 [ 489.175212][T14947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.175226][T14947] RSP: 002b:00007f628149e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 489.175240][T14947] RAX: ffffffffffffffda RBX: 00007f6280815fa0 RCX: 00007f628059c799 [ 489.175250][T14947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 489.175258][T14947] RBP: 00007f6280632c99 R08: 0000000000000000 R09: 0000000000000000 [ 489.175266][T14947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.175274][T14947] R13: 00007f6280816038 R14: 00007f6280815fa0 R15: 00007ffd8fb92378 [ 489.175293][T14947] [ 489.677915][T13802] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 489.877258][T14955] No such timeout policy "" [ 489.895358][T14955] netlink: Failed to associated timeout policy '' [ 491.074327][T14977] can: request_module (can-proto-0) failed. [ 491.622571][T15001] No such timeout policy "" [ 491.644169][T15001] netlink: Failed to associated timeout policy '' [ 491.731855][T15005] vivid-007: ================= START STATUS ================= [ 491.777289][T15005] vivid-007: Generate PTS: true [ 491.812142][T15005] vivid-007: Generate SCR: true [ 491.837545][T15005] tpg source WxH: 320x240 (Y'CbCr) [ 491.867822][T15005] tpg field: 1 [ 491.871229][T15005] tpg crop: (0,0)/320x240 [ 491.885520][T15014] usb usb3: usbfs: process 15014 (syz.0.2051) did not claim interface 0 before use [ 491.926904][T15005] tpg compose: (0,0)/320x240 [ 491.931526][T15005] tpg colorspace: 8 [ 491.985645][T15016] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2048'. [ 492.035604][T15005] tpg transfer function: 0/0 [ 492.062783][T15005] tpg Y'CbCr encoding: 0/0 [ 492.099334][T15005] tpg quantization: 0/0 [ 492.121931][T15005] tpg RGB range: 0/2 [ 492.149435][T15005] vivid-007: ================== END STATUS ================== [ 492.608380][T15047] No such timeout policy "" [ 492.613109][T15047] netlink: Failed to associated timeout policy '' [ 494.411659][T15111] random: crng reseeded on system resumption [ 494.463589][T15112] futex_wake_op: syz.0.2075 tries to shift op by -2048; fix this program [ 494.511943][T15112] 0x000000000001-0x000000020000 : "" [ 494.562084][T15112] ftl_cs: FTL header corrupt! [ 495.100287][T15131] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 495.130292][T15131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 495.186287][T15131] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 495.223955][T15131] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 497.154857][ T7131] Bluetooth: hci1: command 0x0c1a tx timeout [ 497.160951][ T7131] Bluetooth: hci0: command 0x0c1a tx timeout [ 497.235353][T13802] Bluetooth: hci2: command 0x0c1a tx timeout [ 497.241462][ T7131] Bluetooth: hci3: command 0x0c1a tx timeout [ 499.908922][T15247] NFSD: Failed to start, no listeners configured. [ 500.050955][T15253] usb usb3: usbfs: process 15253 (syz.2.2105) did not claim interface 0 before use [ 500.329167][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'. [ 500.756195][T15263] zswap: compressor not available [ 500.764042][T15277] FAULT_INJECTION: forcing a failure. [ 500.764042][T15277] name failslab, interval 1, probability 0, space 0, times 0 [ 500.764083][T15277] CPU: 0 UID: 0 PID: 15277 Comm: syz.0.2112 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.764102][T15277] Tainted: [L]=SOFTLOCKUP [ 500.764107][T15277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.764116][T15277] Call Trace: [ 500.764120][T15277] [ 500.764126][T15277] dump_stack_lvl+0x100/0x190 [ 500.764151][T15277] should_fail_ex.cold+0x5/0xa [ 500.764167][T15277] should_failslab+0xc2/0x120 [ 500.764182][T15277] __kmalloc_cache_noprof+0x7a/0x6f0 [ 500.764199][T15277] ? snd_seq_oss_open+0x54/0xa10 [ 500.764219][T15277] snd_seq_oss_open+0x54/0xa10 [ 500.764236][T15277] odev_open+0x79/0xc0 [ 500.764247][T15277] ? __pfx_odev_open+0x10/0x10 [ 500.764259][T15277] soundcore_open+0x2e3/0x5a0 [ 500.764274][T15277] ? __pfx_soundcore_open+0x10/0x10 [ 500.764287][T15277] chrdev_open+0x234/0x6a0 [ 500.764301][T15277] ? __pfx_apparmor_file_open+0x10/0x10 [ 500.764324][T15277] ? __pfx_chrdev_open+0x10/0x10 [ 500.764338][T15277] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 500.764357][T15277] do_dentry_open+0x6d8/0x1660 [ 500.764370][T15277] ? __pfx_chrdev_open+0x10/0x10 [ 500.764387][T15277] vfs_open+0x82/0x3f0 [ 500.764406][T15277] path_openat+0x208c/0x31a0 [ 500.764426][T15277] ? __pfx_path_openat+0x10/0x10 [ 500.764452][T15277] do_file_open+0x20e/0x430 [ 500.764468][T15277] ? __pfx_do_file_open+0x10/0x10 [ 500.764494][T15277] ? alloc_fd+0x476/0x790 [ 500.764509][T15277] ? do_getname+0x191/0x390 [ 500.764527][T15277] do_sys_openat2+0x10d/0x1e0 [ 500.764544][T15277] ? __pfx_do_sys_openat2+0x10/0x10 [ 500.764562][T15277] ? __fget_files+0x21f/0x3d0 [ 500.764578][T15277] __x64_sys_openat+0x12d/0x210 [ 500.764596][T15277] ? __pfx___x64_sys_openat+0x10/0x10 [ 500.764620][T15277] do_syscall_64+0x106/0xf80 [ 500.764638][T15277] ? clear_bhb_loop+0x40/0x90 [ 500.764654][T15277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.764668][T15277] RIP: 0033:0x7f628059c799 [ 500.764679][T15277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.764695][T15277] RSP: 002b:00007f628149e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 500.764709][T15277] RAX: ffffffffffffffda RBX: 00007f6280815fa0 RCX: 00007f628059c799 [ 500.764718][T15277] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 500.764726][T15277] RBP: 00007f6280632c99 R08: 0000000000000000 R09: 0000000000000000 [ 500.764735][T15277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.764742][T15277] R13: 00007f6280816038 R14: 00007f6280815fa0 R15: 00007ffd8fb92378 [ 500.764760][T15277] [ 501.702618][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 502.565048][T15314] netlink: 86 bytes leftover after parsing attributes in process `syz.0.2123'. [ 502.754245][T15319] FAULT_INJECTION: forcing a failure. [ 502.754245][T15319] name failslab, interval 1, probability 0, space 0, times 0 [ 502.839242][T15319] CPU: 0 UID: 0 PID: 15319 Comm: syz.2.2125 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.839269][T15319] Tainted: [L]=SOFTLOCKUP [ 502.839275][T15319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.839284][T15319] Call Trace: [ 502.839290][T15319] [ 502.839295][T15319] dump_stack_lvl+0x100/0x190 [ 502.839323][T15319] should_fail_ex.cold+0x5/0xa [ 502.839341][T15319] should_failslab+0xc2/0x120 [ 502.839357][T15319] __kmalloc_cache_noprof+0x7a/0x6f0 [ 502.839375][T15319] ? alloc_tty_struct+0x96/0x8c0 [ 502.839481][T15319] alloc_tty_struct+0x96/0x8c0 [ 502.839504][T15319] ? __pfx_alloc_tty_struct+0x10/0x10 [ 502.839531][T15319] pty_common_install+0x1c7/0xb30 [ 502.839573][T15319] ? __pfx_pty_unix98_install+0x10/0x10 [ 502.839612][T15319] tty_init_dev.part.0+0x9e/0x470 [ 502.839636][T15319] tty_init_dev+0x60/0x80 [ 502.839658][T15319] ptmx_open+0x15e/0x3c0 [ 502.839675][T15319] ? __pfx_ptmx_open+0x10/0x10 [ 502.839692][T15319] chrdev_open+0x234/0x6a0 [ 502.839706][T15319] ? __pfx_apparmor_file_open+0x10/0x10 [ 502.839729][T15319] ? __pfx_chrdev_open+0x10/0x10 [ 502.839745][T15319] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 502.839764][T15319] do_dentry_open+0x6d8/0x1660 [ 502.839779][T15319] ? __pfx_chrdev_open+0x10/0x10 [ 502.839798][T15319] vfs_open+0x82/0x3f0 [ 502.839817][T15319] path_openat+0x208c/0x31a0 [ 502.839838][T15319] ? __pfx_path_openat+0x10/0x10 [ 502.839860][T15319] do_file_open+0x20e/0x430 [ 502.839875][T15319] ? __pfx_do_file_open+0x10/0x10 [ 502.839904][T15319] ? alloc_fd+0x476/0x790 [ 502.839919][T15319] ? do_getname+0x191/0x390 [ 502.839938][T15319] do_sys_openat2+0x10d/0x1e0 [ 502.839956][T15319] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.839975][T15319] ? __fget_files+0x21f/0x3d0 [ 502.839992][T15319] __x64_sys_openat+0x12d/0x210 [ 502.840011][T15319] ? __pfx___x64_sys_openat+0x10/0x10 [ 502.840036][T15319] do_syscall_64+0x106/0xf80 [ 502.840056][T15319] ? clear_bhb_loop+0x40/0x90 [ 502.840073][T15319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.840088][T15319] RIP: 0033:0x7f553ab9c799 [ 502.840101][T15319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.840116][T15319] RSP: 002b:00007f553baae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 502.840130][T15319] RAX: ffffffffffffffda RBX: 00007f553ae15fa0 RCX: 00007f553ab9c799 [ 502.840141][T15319] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 502.840150][T15319] RBP: 00007f553ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 502.840159][T15319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.840168][T15319] R13: 00007f553ae16038 R14: 00007f553ae15fa0 R15: 00007fff2b2e36c8 [ 502.840187][T15319] [ 503.644108][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880334bb000: rx timeout, send abort [ 503.652723][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880334bb000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 504.129724][T15340] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 504.135966][T15340] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 504.142028][T15340] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 504.176055][T15340] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 504.312405][T15345] page: refcount:6 mapcount:5 mapping:0000000000000000 index:0x7f35e8083 pfn:0x78000 [ 504.384998][T15345] flags: 0xfff18000000210(dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 504.424146][T15345] raw: 00fff18000000210 0000000000000000 dead000000000122 0000000000000000 [ 504.454877][T15345] raw: 00000007f35e8083 0000000000000000 0000000600000004 0000000000000000 [ 504.494971][T15345] page dumped because: unmovable page [ 504.510348][T15345] page_owner tracks the page as allocated [ 504.543574][T15345] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5821, tgid 5821 (syz-executor), ts 74594873029, free_ts 70569012171 [ 504.655951][T15345] post_alloc_hook+0x153/0x170 [ 504.679543][T15345] get_page_from_freelist+0x111d/0x3140 [ 504.704865][T15345] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 504.732626][T15345] alloc_pages_mpol+0x1fb/0x550 [ 504.764987][T15345] alloc_pages_noprof+0x131/0x390 [ 504.788513][T15345] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 504.807117][T15345] vmalloc_user_noprof+0x9e/0xe0 [ 504.823017][T15345] kcov_ioctl+0x4c/0x720 [ 504.834465][T15357] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2133'. [ 504.849528][T15345] __x64_sys_ioctl+0x18e/0x210 [ 504.860930][T15345] do_syscall_64+0x106/0xf80 [ 504.873009][T15345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.889987][T15345] page last free pid 5814 tgid 5814 stack trace: [ 504.910751][T15345] free_unref_folios+0xaea/0x1790 [ 504.927069][T15345] folios_put_refs+0x53c/0x840 [ 504.942111][T15345] free_pages_and_swap_cache+0x242/0x480 [ 504.964839][T15345] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 504.983189][T15345] tlb_finish_mmu+0x1b0/0x810 [ 505.000163][T15345] unmap_region+0x2d9/0x3b0 [ 505.014634][T15345] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 505.032853][T15345] do_vmi_align_munmap+0x44f/0x5f0 [ 505.049348][T15345] do_vmi_munmap+0x1f8/0x3e0 [ 505.067169][T15345] __vm_munmap+0x196/0x390 [ 505.081563][T15345] __x64_sys_munmap+0x59/0x80 [ 505.096491][T15345] do_syscall_64+0x106/0xf80 [ 505.111386][T15345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.089337][T15370] FAULT_INJECTION: forcing a failure. [ 506.089337][T15370] name failslab, interval 1, probability 0, space 0, times 0 [ 506.195136][T13802] Bluetooth: hci3: command 0x0c1a tx timeout [ 506.201183][ T7131] Bluetooth: hci2: command 0x0c1a tx timeout [ 506.208415][ T7119] Bluetooth: hci1: command 0x0c1a tx timeout [ 506.214867][ T7119] Bluetooth: hci0: command 0x0c1a tx timeout [ 506.319446][T15370] CPU: 0 UID: 0 PID: 15370 Comm: syz.2.2136 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.319473][T15370] Tainted: [L]=SOFTLOCKUP [ 506.319480][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.319489][T15370] Call Trace: [ 506.319494][T15370] [ 506.319500][T15370] dump_stack_lvl+0x100/0x190 [ 506.319527][T15370] should_fail_ex.cold+0x5/0xa [ 506.319546][T15370] should_failslab+0xc2/0x120 [ 506.319561][T15370] __kmalloc_cache_noprof+0x7a/0x6f0 [ 506.319580][T15370] ? vkms_plane_duplicate_state+0x87/0x130 [ 506.319677][T15370] vkms_plane_duplicate_state+0x87/0x130 [ 506.319694][T15370] drm_atomic_get_plane_state+0x279/0x760 [ 506.319760][T15370] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 506.319804][T15370] ? trace_contention_end+0x140/0x180 [ 506.319827][T15370] ? __mutex_lock+0x26a/0x1b90 [ 506.319848][T15370] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 506.319869][T15370] ? drm_master_internal_acquire+0x21/0x80 [ 506.319907][T15370] drm_client_modeset_commit_locked+0x14d/0x580 [ 506.319930][T15370] drm_client_modeset_commit+0x4f/0x80 [ 506.319958][T15370] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 506.320023][T15370] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 506.320045][T15370] drm_fbdev_client_restore+0x1b/0x30 [ 506.320082][T15370] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 506.320097][T15370] drm_client_dev_restore+0x205/0x2a0 [ 506.320122][T15370] drm_release+0x2c6/0x360 [ 506.320140][T15370] ? __pfx_drm_release+0x10/0x10 [ 506.320157][T15370] __fput+0x3ff/0xb40 [ 506.320178][T15370] task_work_run+0x150/0x240 [ 506.320199][T15370] ? __pfx_task_work_run+0x10/0x10 [ 506.320224][T15370] exit_to_user_mode_loop+0x100/0x4a0 [ 506.320245][T15370] do_syscall_64+0x668/0xf80 [ 506.320264][T15370] ? clear_bhb_loop+0x40/0x90 [ 506.320282][T15370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.320297][T15370] RIP: 0033:0x7f553ab9c799 [ 506.320310][T15370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.320325][T15370] RSP: 002b:00007f553baae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 506.320339][T15370] RAX: 0000000000000000 RBX: 00007f553ae15fa0 RCX: 00007f553ab9c799 [ 506.320349][T15370] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 506.320357][T15370] RBP: 00007f553ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 506.320367][T15370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.320375][T15370] R13: 00007f553ae16038 R14: 00007f553ae15fa0 R15: 00007fff2b2e36c8 [ 506.320396][T15370] [ 506.587375][T15368] program syz.0.2135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.018546][T15412] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2142'. [ 508.058264][T15412] ›: renamed from bond_slave_0 (while UP) [ 508.119015][T15412] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2142'. [ 509.067918][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e872000: rx timeout, send abort [ 509.076365][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e872000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 509.736634][T15457] bridge0: port 3(gretap0) entered blocking state [ 509.783362][T15463] FAULT_INJECTION: forcing a failure. [ 509.783362][T15463] name failslab, interval 1, probability 0, space 0, times 0 [ 509.818440][T15457] bridge0: port 3(gretap0) entered disabled state [ 509.894081][T15457] gretap0: entered allmulticast mode [ 509.910006][T15463] CPU: 0 UID: 0 PID: 15463 Comm: syz.2.2153 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.910031][T15463] Tainted: [L]=SOFTLOCKUP [ 509.910036][T15463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.910045][T15463] Call Trace: [ 509.910051][T15463] [ 509.910057][T15463] dump_stack_lvl+0x100/0x190 [ 509.910083][T15463] should_fail_ex.cold+0x5/0xa [ 509.910102][T15463] should_failslab+0xc2/0x120 [ 509.910117][T15463] __kmalloc_cache_noprof+0x7a/0x6f0 [ 509.910136][T15463] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 509.910244][T15463] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 509.910265][T15463] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 509.910285][T15463] vidtv_channel_si_init+0x1289/0x18d0 [ 509.910313][T15463] vidtv_mux_init+0x526/0xbf0 [ 509.910358][T15463] vidtv_start_feed+0x33e/0x4c0 [ 509.910374][T15463] ? __pfx_vidtv_start_feed+0x10/0x10 [ 509.910391][T15463] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 509.910411][T15463] ? mark_held_locks+0x40/0x70 [ 509.910433][T15463] ? __pfx_vidtv_start_feed+0x10/0x10 [ 509.910455][T15463] dmx_ts_feed_start_filtering+0xf6/0x220 [ 509.910501][T15463] dvb_dmxdev_start_feed+0x273/0x3f0 [ 509.910548][T15463] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 509.910566][T15463] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 509.910583][T15463] dvb_demux_do_ioctl+0xe64/0x1200 [ 509.910606][T15463] dvb_usercopy+0x167/0x340 [ 509.910627][T15463] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 509.910644][T15463] ? __pfx_dvb_usercopy+0x10/0x10 [ 509.910672][T15463] ? __fget_files+0x21f/0x3d0 [ 509.910690][T15463] dvb_demux_ioctl+0x29/0x40 [ 509.910703][T15463] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 509.910716][T15463] __x64_sys_ioctl+0x18e/0x210 [ 509.910738][T15463] do_syscall_64+0x106/0xf80 [ 509.910758][T15463] ? clear_bhb_loop+0x40/0x90 [ 509.910776][T15463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.910792][T15463] RIP: 0033:0x7f553ab9c799 [ 509.910806][T15463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.910820][T15463] RSP: 002b:00007f553baae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.910838][T15463] RAX: ffffffffffffffda RBX: 00007f553ae15fa0 RCX: 00007f553ab9c799 [ 509.910849][T15463] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 509.910857][T15463] RBP: 00007f553ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 509.910866][T15463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.910875][T15463] R13: 00007f553ae16038 R14: 00007f553ae15fa0 R15: 00007fff2b2e36c8 [ 509.910895][T15463] [ 510.173262][T15463] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 510.185329][T15463] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 510.193802][T15463] CPU: 0 UID: 0 PID: 15463 Comm: syz.2.2153 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.204735][T15463] Tainted: [L]=SOFTLOCKUP [ 510.209039][T15463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.219088][T15463] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 510.224983][T15463] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 2d a6 db f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 09 a6 db f9 4d 85 e4 [ 510.244587][T15463] RSP: 0018:ffffc90004fbfa10 EFLAGS: 00010247 [ 510.250696][T15463] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000d591000 [ 510.258756][T15463] RDX: 0000000000000000 RSI: ffffffff882c7233 RDI: 0000000000000005 [ 510.266826][T15463] RBP: ffff88802bd2a720 R08: 0000000000000000 R09: 4453534204050000 [ 510.275228][T15463] R10: 0000000000000005 R11: ffffffff81000130 R12: 0000000000000000 [ 510.283194][T15463] R13: ffff88807c6e4f00 R14: ffff8880226d4100 R15: ffff8880372efd40 [ 510.291156][T15463] FS: 00007f553baae6c0(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 510.300080][T15463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.306653][T15463] CR2: 00007f553ba6cd58 CR3: 00000000384a8000 CR4: 00000000003526f0 [ 510.314612][T15463] Call Trace: [ 510.317966][T15463] [ 510.320893][T15463] vidtv_channel_si_init+0x12fc/0x18d0 [ 510.326359][T15463] vidtv_mux_init+0x526/0xbf0 [ 510.331045][T15463] vidtv_start_feed+0x33e/0x4c0 [ 510.335881][T15463] ? __pfx_vidtv_start_feed+0x10/0x10 [ 510.341237][T15463] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 510.347856][T15463] ? mark_held_locks+0x40/0x70 [ 510.352607][T15463] ? __pfx_vidtv_start_feed+0x10/0x10 [ 510.357966][T15463] dmx_ts_feed_start_filtering+0xf6/0x220 [ 510.363712][T15463] dvb_dmxdev_start_feed+0x273/0x3f0 [ 510.369020][T15463] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 510.374484][T15463] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 510.379693][T15463] dvb_demux_do_ioctl+0xe64/0x1200 [ 510.384969][T15463] dvb_usercopy+0x167/0x340 [ 510.389460][T15463] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 510.394992][T15463] ? __pfx_dvb_usercopy+0x10/0x10 [ 510.400005][T15463] ? __fget_files+0x21f/0x3d0 [ 510.404661][T15463] dvb_demux_ioctl+0x29/0x40 [ 510.409229][T15463] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 510.414496][T15463] __x64_sys_ioctl+0x18e/0x210 [ 510.419334][T15463] do_syscall_64+0x106/0xf80 [ 510.423909][T15463] ? clear_bhb_loop+0x40/0x90 [ 510.428569][T15463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.434537][T15463] RIP: 0033:0x7f553ab9c799 [ 510.438930][T15463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.458715][T15463] RSP: 002b:00007f553baae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.467114][T15463] RAX: ffffffffffffffda RBX: 00007f553ae15fa0 RCX: 00007f553ab9c799 [ 510.475080][T15463] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 510.483134][T15463] RBP: 00007f553ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 510.491118][T15463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.499083][T15463] R13: 00007f553ae16038 R14: 00007f553ae15fa0 R15: 00007fff2b2e36c8 [ 510.507134][T15463] [ 510.510158][T15463] Modules linked in: [ 510.514669][T15463] ---[ end trace 0000000000000000 ]--- [ 510.527473][T15457] gretap0: entered promiscuous mode [ 510.546803][T15457] FAULT_INJECTION: forcing a failure. [ 510.546803][T15457] name failslab, interval 1, probability 0, space 0, times 0 [ 510.588328][T15457] CPU: 0 UID: 0 PID: 15457 Comm: syz.0.2151 Tainted: G D L syzkaller #0 PREEMPT(full) [ 510.588358][T15457] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 510.588364][T15457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.588373][T15457] Call Trace: [ 510.588378][T15457] [ 510.588384][T15457] dump_stack_lvl+0x100/0x190 [ 510.588409][T15457] should_fail_ex.cold+0x5/0xa [ 510.588423][T15457] ? __kmalloc_cache_noprof+0x53/0x6f0 [ 510.588442][T15457] should_failslab+0xc2/0x120 [ 510.588457][T15457] __kmalloc_cache_noprof+0x7a/0x6f0 [ 510.588481][T15457] ? vlan_vid_add+0x514/0x730 [ 510.588590][T15457] vlan_vid_add+0x514/0x730 [ 510.588611][T15457] __vlan_add+0x266f/0x2dd0 [ 510.588661][T15457] ? __pfx___vlan_add+0x10/0x10 [ 510.588680][T15457] nbp_vlan_add+0x258/0x3e0 [ 510.588697][T15457] nbp_vlan_init+0x373/0x500 [ 510.588714][T15457] ? __pfx_nbp_vlan_init+0x10/0x10 [ 510.588730][T15457] ? __pfx_br_fdb_add_local+0x10/0x10 [ 510.588767][T15457] ? trace_irq_enable.constprop.0+0x13c/0x180 [ 510.588788][T15457] ? br_fdb_add_local+0x43/0x60 [ 510.588803][T15457] ? br_fdb_add_local+0x43/0x60 [ 510.588816][T15457] ? __local_bh_enable_ip+0x9e/0x120 [ 510.588833][T15457] br_add_if+0xf79/0x1b40 [ 510.588849][T15457] ? __pfx_veth_set_rx_headroom+0x3/0x10 [ 510.588909][T15457] add_del_if+0x114/0x160 [ 510.588927][T15457] br_dev_siocdevprivate+0x8ac/0x1650 [ 510.588946][T15457] ? __lock_acquire+0x4a5/0x2630 [ 510.588964][T15457] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 510.588985][T15457] ? do_raw_spin_lock+0x128/0x260 [ 510.589006][T15457] ? mark_held_locks+0x40/0x70 [ 510.589023][T15457] ? netdev_name_node_lookup+0x107/0x150 [ 510.589066][T15457] ? __mutex_lock+0x26a/0x1b90 [ 510.589087][T15457] dev_ifsioc+0xc1e/0x1e90 [ 510.589107][T15457] ? __pfx_dev_ifsioc+0x10/0x10 [ 510.589123][T15457] ? __pfx___mutex_lock+0x10/0x10 [ 510.589145][T15457] ? dev_load+0x8e/0x240 [ 510.589159][T15457] ? dev_load+0x8e/0x240 [ 510.589176][T15457] dev_ioctl+0x70e/0x1070 [ 510.589193][T15457] sock_ioctl+0x494/0x6b0 [ 510.589208][T15457] ? __pfx_sock_ioctl+0x10/0x10 [ 510.589221][T15457] ? hook_file_ioctl_common+0x146/0x410 [ 510.589238][T15457] ? __fget_files+0x21f/0x3d0 [ 510.589252][T15457] ? __pfx_sock_ioctl+0x10/0x10 [ 510.589267][T15457] __x64_sys_ioctl+0x18e/0x210 [ 510.589295][T15457] do_syscall_64+0x106/0xf80 [ 510.589314][T15457] ? clear_bhb_loop+0x40/0x90 [ 510.589329][T15457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.589344][T15457] RIP: 0033:0x7f628059c799 [ 510.589357][T15457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.589371][T15457] RSP: 002b:00007f628145c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.589389][T15457] RAX: ffffffffffffffda RBX: 00007f6280816180 RCX: 00007f628059c799 [ 510.589398][T15457] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 510.589407][T15457] RBP: 00007f6280632c99 R08: 0000000000000000 R09: 0000000000000000 [ 510.589416][T15457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.589424][T15457] R13: 00007f6280816218 R14: 00007f6280816180 R15: 00007ffd8fb92378 [ 510.589437][T15457] [ 511.320998][T15463] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 511.334297][T15463] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 2d a6 db f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 09 a6 db f9 4d 85 e4 [ 511.385099][T15463] RSP: 0018:ffffc90004fbfa10 EFLAGS: 00010247 [ 511.391202][T15463] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000d591000 [ 511.410277][T15463] RDX: 0000000000000000 RSI: ffffffff882c7233 RDI: 0000000000000005 [ 511.443027][T15463] RBP: ffff88802bd2a720 R08: 0000000000000000 R09: 4453534204050000 [ 511.462262][T15463] R10: 0000000000000005 R11: ffffffff81000130 R12: 0000000000000000 [ 511.474853][T15463] R13: ffff88807c6e4f00 R14: ffff8880226d4100 R15: ffff8880372efd40 [ 511.493460][T15463] FS: 00007f553baae6c0(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 511.513901][T15463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.532503][T15463] CR2: 00007f7fb67eb4b8 CR3: 00000000384a8000 CR4: 00000000003526f0 [ 511.543910][T15463] Kernel panic - not syncing: Fatal exception [ 511.550046][T15463] Kernel Offset: disabled [ 511.554400][T15463] Rebooting in 86400 seconds..