last executing test programs: 1m56.524985992s ago: executing program 0 (id=1062): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x6, 0x52, 0x0, &(0x7f0000000080)=0x3) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xee) getdents$auto(r0, &(0x7f0000000140)={0x8, 0x7, 0x3, "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"}, 0x6) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000017c0)=ANY=[@ANYRES64, @ANYRES8=0x0, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x24040071}, 0x4000004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m56.070230238s ago: executing program 0 (id=1066): mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7fb) shmctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000280)={{0x5, 0xee00, 0xee00, 0x85, 0x20, 0xfff, 0x400}, 0x6c, 0x5, 0x8, 0x7f, @inferred=0xffffffffffffffff, @raw=0xe, 0x8, 0x0, &(0x7f00000000c0)="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", &(0x7f00000001c0)="9f82e828292fdc514e9f80fc072a4b264f934beeacf7918358ed597e210272401f5646331d749143cfe57740a28ee0b2743158e5e6a9d2dfbdb126973d8add3c69b64a4f9ef777a49d1c406450cae799913a00aaed561b1f2f4af3ceb8b510cc6a0409c70d52f58e97465e6ed667e0e0f8dc7ffba7e5309577967b9f466ab5a7dec848"}) shmctl$auto_SHM_STAT(0x120, 0xd, &(0x7f0000000480)={{0x6, 0xee00, 0xee01, 0x3, 0x9, 0x8001, 0x30cb}, 0xb, 0xc, 0x4, 0x353f, @raw=0x7f, @inferred=0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)="045b6d2b362aa0a9945770879d6dcece97ff87f2561a5444c57b20d8af961e1c203573968d6b80e5bbaa06d26a453e599161db992e4f18e7b3b6f93bad43d923dca083ab6353e49a9bb9c6fe94398a61569e990e8ee7c213e88e903e7eaaade6c00eb5a57bb7bc91c6f8348bc8812ceb12f498b0cb7bf59124f0", &(0x7f0000000400)="e615a0ab6f36e777bc9a21c91b3b8f7aa899acffb92a2da75f79c06e59748fb9dca1c84a204598ca41e296223e6ef5a7f1e780434fbe2f640200bf30c05b48d6b397c0a6818c96f7c48cd270c0017577f165894838bf2b66dfc326c59bfc67916df75673c9f8d4"}) stat$auto(&(0x7f0000000040)='X))\x00', &(0x7f0000000500)={0x8000000000000000, 0x3, 0x0, 0xa, r0, r1, 0x0, 0x6, 0x5, 0x0, 0x3, 0x7ff, 0x1f1, 0x1, 0x6, 0x80000000, 0x2}) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7ff) 1m55.67253868s ago: executing program 0 (id=1069): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) poll$auto(&(0x7f0000000480)={0xffffffffffffffff, 0xffff, 0x29}, 0x3, 0x7) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) r0 = socket(0x2c, 0xa, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/cpu/events/branch-instructions\x00', 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd10/hctx0/tags_bitmap\x00', 0x143000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000040)=""/60, 0x3c) close_range$auto(0x2, 0x8, 0x3) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x400284, 0x0) unshare$auto(0x40000080) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_RESPONSE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x201, 0xc000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r6, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto(r5, 0x89f0, r5) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) 1m53.465342998s ago: executing program 0 (id=1078): r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/edac_core/parameters/edac_mc_poll_msec\x00', 0x60301, 0x0) write$auto(r2, &(0x7f0000000080)='\x03W\x96l\x15\x00', 0x9e93) 1m53.339104671s ago: executing program 0 (id=1079): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) socket(0x8, 0x800, 0x3a) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SETSYNCRO(0xffffffffffffffff, 0x5015, &(0x7f0000000180)) shutdown$auto(0x200000003, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x1, 0x900000000000000, 0x1d9, 0x40eb5, 0x401, 0x0) socket(0x2, 0x801, 0x6) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) mmap$auto(0xfffffffffffffffd, 0x7, 0x8, 0xc59, 0xfffffffffffffffa, 0xffffffffffffffbe) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r3 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmmsg$auto(r0, 0x0, 0x1, 0x20000009) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)) 1m49.434809111s ago: executing program 0 (id=1085): r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) socket(0xa, 0x6, 0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x222080, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/sda/hctx0/busy\x00', 0x169100, 0x0) pread64$auto(r3, 0x0, 0x1000f42d, 0x100) fallocate$auto(r0, 0x4, 0x8000000000000000, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r4, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) socket(0x2, 0x1, 0x106) (async) r5 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_BINDTOIFINDEX(r5, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', &(0x7f00000000c0)=0x8) (async) getsockopt$auto_SO_BINDTOIFINDEX(r5, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', &(0x7f00000000c0)=0x8) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x2, 0x0, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) (async) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f00000002c0)={{@inferred, 0x8, 0x4, 0xa5, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @iec958={"ed78011d89df1c5fad1aa88746fb4959f289063a6526945f", "115dbed3da2cc73e547229a9de73f12a10e62eff4549808eddf2f2929b8efb37a1eb4678eb5adb46effbbff8cc1f4f30f62003474a9160532edbad9bc760c7307a58290982dcf19c5ccd39b94a77808fe03a25136ae2f02cc667fab7b1682197ec0aa59e63503c76aa5c11838685dc8a04e10e9edfa887bb5c9a2c2e3f2d67aedf1ce98932b05ea7060ec2eebcadbf5315bfbc", 0x0, "d3b527ab"}, "4570dcfd140074f863485585c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae94925d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f00000002c0)={{@inferred, 0x8, 0x4, 0xa5, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @iec958={"ed78011d89df1c5fad1aa88746fb4959f289063a6526945f", "115dbed3da2cc73e547229a9de73f12a10e62eff4549808eddf2f2929b8efb37a1eb4678eb5adb46effbbff8cc1f4f30f62003474a9160532edbad9bc760c7307a58290982dcf19c5ccd39b94a77808fe03a25136ae2f02cc667fab7b1682197ec0aa59e63503c76aa5c11838685dc8a04e10e9edfa887bb5c9a2c2e3f2d67aedf1ce98932b05ea7060ec2eebcadbf5315bfbc", 0x0, "d3b527ab"}, "4570dcfd140074f863485585c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae94925d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 1m34.264651821s ago: executing program 32 (id=1085): r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) socket(0xa, 0x6, 0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x222080, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/sda/hctx0/busy\x00', 0x169100, 0x0) pread64$auto(r3, 0x0, 0x1000f42d, 0x100) fallocate$auto(r0, 0x4, 0x8000000000000000, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r4, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) socket(0x2, 0x1, 0x106) (async) r5 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_BINDTOIFINDEX(r5, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', &(0x7f00000000c0)=0x8) (async) getsockopt$auto_SO_BINDTOIFINDEX(r5, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', &(0x7f00000000c0)=0x8) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x2, 0x0, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) (async) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f00000002c0)={{@inferred, 0x8, 0x4, 0xa5, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @iec958={"ed78011d89df1c5fad1aa88746fb4959f289063a6526945f", "115dbed3da2cc73e547229a9de73f12a10e62eff4549808eddf2f2929b8efb37a1eb4678eb5adb46effbbff8cc1f4f30f62003474a9160532edbad9bc760c7307a58290982dcf19c5ccd39b94a77808fe03a25136ae2f02cc667fab7b1682197ec0aa59e63503c76aa5c11838685dc8a04e10e9edfa887bb5c9a2c2e3f2d67aedf1ce98932b05ea7060ec2eebcadbf5315bfbc", 0x0, "d3b527ab"}, "4570dcfd140074f863485585c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae94925d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f00000002c0)={{@inferred, 0x8, 0x4, 0xa5, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @iec958={"ed78011d89df1c5fad1aa88746fb4959f289063a6526945f", "115dbed3da2cc73e547229a9de73f12a10e62eff4549808eddf2f2929b8efb37a1eb4678eb5adb46effbbff8cc1f4f30f62003474a9160532edbad9bc760c7307a58290982dcf19c5ccd39b94a77808fe03a25136ae2f02cc667fab7b1682197ec0aa59e63503c76aa5c11838685dc8a04e10e9edfa887bb5c9a2c2e3f2d67aedf1ce98932b05ea7060ec2eebcadbf5315bfbc", 0x0, "d3b527ab"}, "4570dcfd140074f863485585c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae94925d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 14.244132833s ago: executing program 4 (id=1292): bpf$auto(0x5, 0x0, 0x8) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2, 0x6, 0xeb1, 0xffffffffffffffff, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/event1\x00', 0x26c103, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0580, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0xe1, 0x2, 0x6}]}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) keyctl$auto(0x200000000000020, 0x0, 0x5, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000100)=@bpf_attr_5={@target_fd=r0, r0, 0x7, 0x2, r0, @relative_fd=r0, 0x7b63}, 0xc) remap_file_pages$auto(0x10001, 0x5, 0x2, 0x40000000000, 0xfa5d) socket(0x10, 0x2, 0xc) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) r3 = socket(0x11, 0x3, 0x9) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x11\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0x9) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x35}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0xffffffffffffffff, 0x81) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 11.868700474s ago: executing program 2 (id=1298): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) shmctl$auto_SHM_LOCK(0x400, 0xb, &(0x7f0000000380)={{0x3ff, 0xee00, 0xee00, 0x4c38, 0x3, 0x6, 0x4}, 0x4, 0x6, 0x5, 0x8001, @raw=0xfe49, @inferred, 0x3ff, 0x0, &(0x7f00000001c0)="d6e78bf62a8a0bc465fe00a360653153e562b86002bd8be85e0c8d5a1c93334fcc9d6821b8045bfb5b0fd224778a833e3c8d076583214588e92f2527dae0f0cbf1f8a0dbe68a873a4360d854029a0ad3f11d433e60358ad54cf45b331d7c2bb076e28fdc2e81b5311ff4ad1ff912e39d3bf0cbf6bf2fa77aa3dfe29f3093c9f123751357e029c88c96d27fb227575c232815e18ab1511dc775d4819f033ef0c81b9f0d87ee1ec71a4c4ff9c4d3808dcb2d8139b245191389454664013a7216", &(0x7f0000000280)="a673e16a0d9b9d813f02f28528ae07f77e0af2b6ef377ea19a4c6166378b511c30701e0ae1b13a3da839242402fcbe0083d65c1d46c048f246a9212adcce45c1ea1aa91fdebf5d1a92e36d5ff1924c85592364701701eb17e736042e6ac75c1107ecbcb01f40a2bcf9e605fae95aedf225db4f4078b84db7f0cf005fbe46340f995637f04ebfd5cc8bd4de7db325fb0a6ec3d6d1faeeaf50610c31ab01e03ed2c3c1363b836121e4c599daf2587139f071006771d07b28d6b236ed2049cd16999aa610cd6a751f45d3900d4d31644f76e312d26e734fa4e181887fb79a369f27c39341a0c0a7eb8ac2911e94ae1bfa73227dd554cf"}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000016c0)={0x36c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x85}, @NL802154_ATTR_WPAN_PHY_CAPS={0x33f, 0x18, 0x0, 0x1, [@typed={0x8, 0xeb, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x6b, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x7b, 0x155, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @u32=0xa37}, @typed={0x16, 0xca, 0x0, 0x0, @str='/dev/input/mouse0\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x6b}, @nested={0x4, 0x101}, @generic="af8eabed84b8550797ca5a56bd216755ca0a4ecee43abd2871b258b9b76ad8d42a4cc6394f7aa857795f34281e717e344468ce2eb9d662c88be73e13813ef90d50a01242b5ccba"]}, @typed={0x8, 0xa9, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x11a}, @nested={0x1c, 0xb7, 0x0, 0x1, [@nested={0x4, 0x20}, @nested={0x4, 0xc2}, @typed={0xc, 0xb4, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x45}]}, @generic="f74a44186517d590686d3a4d398273caa85ed99e23408001f7996189bfb789e661b5e7025385b2700d437c4251a7be20978b0daf4e72ef1b387ada663e0efed583fdee7758a430dd207d85361009f76c30badd7c05383f39ce2f8c21efe5c00880a9e141032d94e89a670320f23744657bf30c31e5c14a225da6b9b913131cd6c98937b2763264ff45e4e5cfe87c450be5ac2099c35158bda65baf0c275cc23a37ec3a619c9ab8f8d225d27064c060170e62fdcdef68ac2401d86f5881fddd23ea856edc5b7ce8622633a4e88d4120681283aae17d9341e212c7cb89ca68c9cb329516ffaf49be1bf87cab799514e291666ae86f27097deb39", @generic="598597b43772b0f8c9445e33950ac53ef9026e8d1a51d57ce3429c8c8e111d5e1a2438784994d84226b54b722a74ed5d9207bc278b63c564608bb0382427014e2bdd7c1ecd66c518eb0bac9e04ecd463f3f3904fa16234570a023e80bd3e37ce007bb87bf1bd1da85c43c670e480804f104555ddd9bb53b485054e4938916dc024d41e7282f8ec9a0820a388b4bbe371adb642240a5217d1494b797fcbd6300cd515d8e5642c164ccf55cefafc", @generic="17e112f720351533523afa5ef1aec6919b1169fc0916a5b1b261460b3358f8219f2efb21fd3ec2cafc1406cc4b8bd8c9af4b51d7b1fe73b90e01c173c685073dd24d95ba7577c86f39ff960bb9957f527b8b54e2b4e18b18d9097c518b214e9663bcae70ae2831dc778bc8bc1113376119286dfca3a762d84c1cb8ae00a538d78261a4a4dfc819d56962d6250add00ed889ae57a996ee093a7edf88c7151734660d9cb5b40e8dc44be0a45093f069a2cb792c0bea73937765c8cb4d3be67e2f4b5fe90a73b0df83bdb028e21217fab8bc521f8ca707679299afc500d4115cd8209"]}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x10}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x40}]}, 0x36c}, 0x1, 0x0, 0x0, 0x1000}, 0x8844) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000200)=""/8, 0x8) fanotify_init$auto(0x5, 0x0) io_uring_setup$auto(0xf00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80402, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x801, 0x84) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend\x00', 0x8102, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x100000002) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0xffff, 0x4, 0xd, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9u\x00', 0x185400, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x200, 0xd7e, 0x1, 0x948b, 0x3, 0x95b45a07, 0x8000000000000003, 0xe05, 0x8000000000008001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x800, 0x4]}, 0x0) fcntl$auto(0x3, 0x4, 0xa553) 10.791762158s ago: executing program 4 (id=1299): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x3807) r1 = setfsuid$auto(0xee01) setresuid$auto(0x0, r1, 0x0) prctl$auto(0x1b, 0x6, 0x0, 0x0, 0x0) landlock_restrict_self$auto(r0, 0x10001) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) ppoll$auto(&(0x7f0000000040)={r2, 0x9, 0x5}, 0x9, 0x0, 0x0, 0x8) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040055}, 0x8004) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) listmount$auto(&(0x7f0000000080)={0x3, @raw=0xf6, 0x4, 0x9, 0x10001}, &(0x7f00000000c0)=0x8000000000000001, 0xa, 0xffffffff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) 10.132283902s ago: executing program 2 (id=1301): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/hugetlb.1GB.rsvd.usage_in_bytes\x00', 0xe0244, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/28, 0x1c) (async) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) sysfs$auto(0x2, 0x0, 0x0) (async) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) (async) socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c) connect$auto(0x3, 0x0, 0x54) (async) memfd_create$auto(0x0, 0xe) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) open(0x0, 0x22240, 0x154) (async) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) 9.300923285s ago: executing program 2 (id=1303): select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80045530, 0x38) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0xc) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r0, 0xffffff41, 0xffffffffffffffff) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x8742, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x7) write$auto(r1, 0x0, 0xe) 8.981951153s ago: executing program 4 (id=1305): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) r1 = fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioctl$auto_BLKDISCARD(r1, 0x1277, 0x0) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) 8.813537346s ago: executing program 1 (id=1306): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3b) r1 = getsockopt$auto(r0, 0x29, 0x16, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00@'], 0x1044}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r4, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) r10 = gettid() kill$auto(r10, 0x11) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f00000005c0)={0x570, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY={0xde, 0x50, 0x0, 0x1, [@generic="770c1bbe11e464e8a98615add102d30adef3fdd43234dc558d865871fc082807d7", @generic="7393d551ad6c51", @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x85, 0x0, 0x0, @pid=r10}, @generic="49d84b3a407cc912d6baf92dc455d934046f6baaf49052177de72edd6590b8652209dbcf360c38eb19a8ac8ed4add258c6ffac30f8d5caf51326203866ad691a9be5434177b6e9d6dd65e9060a517eb98a1141cd68e6918c8c67cd783d6de40d5feb99423790227302ef9fe3f9f5b413fd3b8231f2e5ad46729f7e95cd08e4dad1708883e72df97aef2521339b10ac2b6f6e42496591"]}, @NL80211_ATTR_IE_PROBE_RESP={0x46c, 0x7f, "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"}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6ddb}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x570}, 0x1, 0x0, 0x0, 0x4000}, 0x840) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd26, 0x65dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) 8.43957947s ago: executing program 1 (id=1307): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/bNumEndpoints\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x2841, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, 0x0) fcntl$auto_F_GET_SEALS(r1, 0x40a, 0x100000000) munmap$auto(0x1, 0x9) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) io_uring_register$auto_IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000000), 0x8) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x3000000, 0x2}) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) 8.315478264s ago: executing program 2 (id=1308): bpf$auto(0x5, &(0x7f0000001100)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x7, 0x4, 0xffffffffffffffff, @relative_id=0x8, 0x5}, 0x8) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2, 0x6, 0xeb1, 0xffffffffffffffff, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/event1\x00', 0x26c103, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0580, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0xe1, 0x2, 0x6}]}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) keyctl$auto(0x200000000000020, 0x0, 0x5, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000100)=@bpf_attr_5={@target_fd=r0, r0, 0x7, 0x2, r0, @relative_fd=r0, 0x7b63}, 0xc) remap_file_pages$auto(0x10001, 0x5, 0x2, 0x40000000000, 0xfa5d) socket(0x10, 0x2, 0xc) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) r3 = socket(0x11, 0x3, 0x9) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x11\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0x9) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x35}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0xffffffffffffffff, 0x81) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 7.465705779s ago: executing program 3 (id=1309): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) socket(0x8, 0x800, 0x3a) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SETSYNCRO(0xffffffffffffffff, 0x5015, &(0x7f0000000180)) shutdown$auto(0x200000003, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x1, 0x900000000000000, 0x1d9, 0x40eb5, 0x401, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) mmap$auto(0xfffffffffffffffd, 0x7, 0x8, 0xc59, 0xfffffffffffffffa, 0xffffffffffffffbe) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) socketpair$auto(0x1, 0x5, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r3 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmmsg$auto(r0, 0x0, 0x1, 0x20000009) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)) 6.871904131s ago: executing program 1 (id=1310): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000028000) r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) setsockopt$auto_SO_BUSY_POLL(r0, 0x7, 0x2e, &(0x7f00000000c0)='\x00', 0x6) add_key$auto_KEY_SPEC_GROUP_KEYRING(&(0x7f0000001240)='.)},]+o)@}/^p,/\x00', 0x0, 0x0, 0x3, 0xfffffffffffffffa) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) pwritev$auto(r0, &(0x7f0000000240)={&(0x7f0000000100)="af4217d69ab9264b43c60fc41751322be14f1fe0840211f7a2b4e542519c916f2d062cc4ee563653ebc17e4cb98c194c6b06fba8c512bbb04983796ffdce9c62913f3879326a8064a6cc428b3e883f4ed439fb57123324ae54964a08d5430df4bb7c0ac3b168e5de70d8c096a77bc7b0d5c4c2e0f5c714176cda5ee23a13400fac4a6bdf3e97bd2d5e37d517a87c0ad4104e99e26442d976bc31f177ec5fd255ed88ff9a48ce1470ebba1eb11ca6b4dc4c833d42ecd4df400b55e9763e9f1bcec81d82e4a16a0dc2e0375d3c0f1d741f7b2e5e5d51405e081f0dd792ed8c6004e63f74792ef46d072cbe43fb4ed977680d73f4dacef5bdec61e2", 0x8}, 0x61, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) statx$auto(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200, 0x636, &(0x7f0000000340)={0x9, 0xc5, 0x9, 0x2, 0xee01, 0xee01, 0x7, 0x1, 0x6, 0x2, 0x7fff, 0x9, {0x6, 0x7}, {0x3}, {0x401, 0xfffffff8}, {0xffffffffffff0000, 0x83}, 0x9, 0xab5, 0x1, 0x9, 0x7, 0x47f, 0x11e, 0x0, 0x5, 0x58, 0x80000001, 0x7, [0x12000000000, 0xfffffffffffff5a7, 0x10, 0x1, 0x5, 0x7, 0x8000000000000000, 0x4, 0x5]}) shmctl$auto_SHM_STAT_ANY(0x7f, 0xf, &(0x7f0000000540)={{0x897, 0xee00, 0xee00, 0x80, 0xda8}, 0x2000000, 0x7fffffff, 0x9, 0x10000, @raw=0x6, @inferred=0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000440)="0165f186e271999a3ae4b4b954afe078b01527f52c0650ff7092cd5ee0a8e2d13121403cb5a138390f040060cbcd92613b421cf0007662832dbf01aa81ba8559f989313f3b1209d522742b4c0700d98e1b4dcec7ea66d37bd67f88049ab5e77468ffe86982e0066b8f6ee97157822cb14d9aaeaa8fca79d009c713e00f0069826b1ea928a8488faf3883ec1cc677fc067501ce50dfbf", &(0x7f0000000500)}) lstat$auto(&(0x7f00000002c0)='./file0\x00', &(0x7f00000005c0)={0x0, 0xd, 0x6, 0x9, r2, r3, 0x0, 0x6, 0x9, 0x6, 0x3, 0x6fc, 0x100000001, 0x8001, 0x0, 0x5, 0x5}) read$auto_proc_setgroups_operations_base(0xffffffffffffffff, &(0x7f0000000680)=""/85, 0x55) r4 = epoll_create$auto(0x8800001) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) epoll_ctl$auto(r4, 0x1, r1, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_macvtap/ioam6_id_wide\x00', 0x161002, 0x0) read$auto(r6, 0x0, 0x1ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='][.\x1f![%\x00', 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r7 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwritev$auto(r7, 0x0, 0x4, 0xcee, 0x18a) unshare$auto(0x40000080) 5.46500034s ago: executing program 4 (id=1311): mmap$auto(0x0, 0xfffffffffffffff9, 0x4000000000df, 0x1e, 0x6, 0x6) (async) mmap$auto(0x0, 0xfffffffffffffff9, 0x4000000000df, 0x1e, 0x6, 0x6) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x60800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) (async) ioctl$auto(r2, 0x4b47, 0x1) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180)={0xcf68, 0x27, 0x6, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x1f, 0x7f, 0x0, 0x1, 0x1, 0xfffffffffffffff9, 0xffffffffffff7fff, 0x1000}, 0x8) (async) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180)={0xcf68, 0x27, 0x6, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x1f, 0x7f, 0x0, 0x1, 0x1, 0xfffffffffffffff9, 0xffffffffffff7fff, 0x1000}, 0x8) msgctl$auto(0x4, 0x10000, &(0x7f00000002c0)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x1, 0x4}, &(0x7f0000000240)=0x9, &(0x7f0000000280), 0x25, 0x553, 0x9, 0xf41, 0x2, 0xffff, 0x6, 0x3, @raw=0xe, @raw=0x59}) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) (async) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) socket(0xa, 0x3, 0x73) mmap$auto(0x9, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x7, 0x0, 0x401) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) keyctl$auto(0x3, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) socket(0x10, 0x3, 0x9) (async) r3 = socket(0x10, 0x3, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x5f}, 0x1, 0x0, 0x0, 0x400400d4}, 0x40) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) (async) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x2) (async) socket(0x10, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 4.942252408s ago: executing program 3 (id=1312): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x40c202, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) io_uring_setup$auto(0x4, 0x0) (async) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = fanotify_init$auto(0x65, 0x2) io_uring_register$auto_IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000)="2d83c43beb69321dbee4f664cea9c62dc2fc0faf7ff07c95bb7697592cb0d16ca625054c1dba24f4d2361219b26a951492dae9b12a6944f22ca792aba48c76f1b030482f2fc86d637dc61837f689da1c34132f63706dc12ca7c54ec0176d5ae0c97c94dcb139f92458e808023623e26bbedd05131bbb94de46987ee06e4cf9eab798a82263c5129dde9dadb7f2a3ee471276361405fdbb126d4d3140f923e7166aff1b842d9d2a0fd876d0419471041b58e22a04b29d033a00884a86de1fba695794f54a1a913bae4e7fe9a39a5b9681f5a43fb19998c478d9f0ba6f51e74cd489f13e5ebc7ae430", 0x9) (async) pipe$auto(0x0) (async) dup2$auto(0x5, 0x4) (async) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) 4.699974084s ago: executing program 4 (id=1313): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) socket(0x8, 0x800, 0x3a) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SETSYNCRO(0xffffffffffffffff, 0x5015, &(0x7f0000000180)) shutdown$auto(0x200000003, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socket(0x2, 0x801, 0x6) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) mmap$auto(0xfffffffffffffffd, 0x7, 0x8, 0xc59, 0xfffffffffffffffa, 0xffffffffffffffbe) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) socketpair$auto(0x1, 0x5, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r3 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmmsg$auto(r0, 0x0, 0x1, 0x20000009) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)) 4.382408666s ago: executing program 2 (id=1314): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xeb) fallocate$auto(r1, 0x1, 0x820, 0x7fff) listen$auto(0x3, 0x83) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r3 = accept$auto(0xffffffffffffffff, &(0x7f0000000040)=@xdp={0x2c, 0xa, r2, 0x26}, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6erspan0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000129bd7000fcdbdf250500000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800110051c8b03e7236b0b8a41f88a1f052efd65a85ad246cf9555c0ca9c3fb5574dac0a396f526f1c7bc710b6557ba0de60c239a63cc1f6cc925ffec4fcd2f0386fa5242af37f014fe87ac023806830b9cce84bc63c713b373e3c432e712e75a8622ccfb7bece99a84236dc89118a89a17444235be8902e629870696d1901e53a13b4f8c85c9168c8356eb2a1a109e08d23cf217f89801cd743e9a5e0ea682", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x90) read$auto_ptdump_fops_(0xffffffffffffffff, &(0x7f0000000000)=""/210, 0xd2) unshare$auto(0x40000080) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r9 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/xfs/xqm\x00', 0x101001, 0x0) pread64$auto(r9, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim7/ports/2/udp_ports_table0\x00', 0x20000, 0x0) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r8, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x8, 0xf8, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795e56f01adc6944105d7bf5c917ab81c899a21ee50a5ef56db545f7c"}}}, 0x20f5, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x101901, 0x0) 3.711991306s ago: executing program 3 (id=1315): r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f00000002c0)=""/190, 0xbe) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x4000, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event\x00', 0x121040, 0x0) write$auto(0x1, 0x0, 0x80000000) write$auto(0x1, 0x0, 0x7ffbfffc) munmap$auto(0x8000, 0xffffffff) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) fgetxattr$auto(r2, 0x0, 0x0, 0x8000000000000001) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)=@query={@target_ifindex, 0xe, 0xa6ad, 0x6, 0xca4b, @prog_cnt=0x3, 0x0, 0x4, 0x1, 0x644f, 0x2}, 0x122) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/hwsim/dfs_simulate_radar\x00', 0x108747, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000bda4453f24dea4b408", @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf2502000000040002000800010005000000"], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000001f40)='/sys/kernel/tracing/tracing_cpumask\x00', 0x2002, 0x0) 2.596847683s ago: executing program 1 (id=1316): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="00732d0781277bed3f6f3057cdb0d3c080814aaef9d39ca4305c70c9b554f8df92cfba4bbcc28419b22220cc23132459641e9672586360275586fc847b7c678fa08c25fff6439ed17b3529266b3ceaa99fdbc42005506078769e587dbdb046661488f0768602d7bcd1894773cd7d45da540e81109b043915f1dda52de589aa73981ac91adb3a9654e228d0f44692fe0866b2fb2887b0f08309f578e4a376cabab81276bc177fdc07f0ee89ec0505d61620800c1924ec355194e877e7d7e3ba7991c4deda2fac052425b0528d1f352dfae16526a5eec784", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00<\x00@\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/devices\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000053c0), 0x41, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x89b0, &(0x7f0000000080)={'bond0\x00'}) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(0x6, 0x107, 0x18, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x400000f2, 0x400, 0xfffffffffffffffc}]}) 2.027047549s ago: executing program 3 (id=1317): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x15, 0x5, 0x0) setreuid$auto(0x3, 0x7) ioctl$auto_FITHAW(r2, 0xc0045878, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130026bdd94a1ccb9bd45e7c000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x400408d4) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x5, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto(0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240088d4}, 0x2400c884) r6 = socket(0x10, 0x2, 0x0) fremovexattr$auto(r6, &(0x7f0000000040)='/proc/self/oom_score_adj\x00') r7 = socket(0xa, 0x1, 0x84) setsockopt$auto(r7, 0x0, 0x60, 0x0, 0x6f7250c4) 1.935275571s ago: executing program 1 (id=1318): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5429, 0x0) setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3) mincore$auto(0x1000, 0xfffffffffffffffe, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x3, 0x5, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) setsockopt$auto(r3, 0x6, 0x22, 0x0, 0x6) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0xd26f, 0xfffffffffffffffe) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf25210000000400440008000b010a0000000600ed00faff00000800570000000000450059000200000005003e0014000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40000) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) ioctl$auto_SNDCTL_DSP_SETSYNCRO(r2, 0x5015, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x6, 0x3, 0x10000, 0x4000009b72, r3, 0x8004) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0xd8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x7c, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.49154391s ago: executing program 3 (id=1319): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x44) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open$dir(&(0x7f0000000080)='./file1\x00', 0x10000, 0xc0) mmap$auto(0x0, 0x400008, 0xdf, 0x20000000009b72, 0x2, 0x240000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x80502, 0x0) socket(0x2, 0x2, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r1, 0x0, 0x3, 0xe9) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x400000000000, 0x0) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb4, 0xffffffffffffffff, 0x26c) mmap$auto(0x0, 0x4, 0x4000000000df, 0x14, 0x401, 0x300000000000) socket(0xa, 0x2, 0x3b) sysfs$auto(0x2, 0x24, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x3) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xd, 0x2007d48, 0x948b, 0x4, 0x0, 0x4b, 0x3, 0x0, 0x80000005, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0xc) 1.416038275s ago: executing program 2 (id=1320): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) socket(0x8, 0x800, 0x3a) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SETSYNCRO(0xffffffffffffffff, 0x5015, &(0x7f0000000180)) shutdown$auto(0x200000003, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x1, 0x900000000000000, 0x1d9, 0x40eb5, 0x401, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) mmap$auto(0xfffffffffffffffd, 0x7, 0x8, 0xc59, 0xfffffffffffffffa, 0xffffffffffffffbe) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) socketpair$auto(0x1, 0x5, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r3 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmmsg$auto(r0, 0x0, 0x1, 0x20000009) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)) 1.400396372s ago: executing program 4 (id=1321): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) ioctl$auto(0x3, 0x80005520, 0x7f) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = fanotify_init$auto(0x6c2500, 0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000850) ioctl$auto_USB_RAW_IOCTL_EP_DISABLE(r0, 0x40045506, &(0x7f0000000000)) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0xe, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0xfbe8, 0x4) munlock$auto(0xffff, 0x1) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x183480, 0x0) ioctl$auto_EVIOCGREP(r2, 0x80084503, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39) 92.211229ms ago: executing program 3 (id=1322): bpf$auto(0x5, &(0x7f0000001100)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x7, 0x4, 0xffffffffffffffff, @relative_id=0x8, 0x5}, 0x8) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2, 0x6, 0xeb1, 0xffffffffffffffff, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/event1\x00', 0x26c103, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0580, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0xe1, 0x2, 0x6}]}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) keyctl$auto(0x200000000000020, 0x0, 0x5, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000100)=@bpf_attr_5={@target_fd=r0, r0, 0x7, 0x2, r0, @relative_fd=r0, 0x7b63}, 0xc) remap_file_pages$auto(0x10001, 0x5, 0x2, 0x40000000000, 0xfa5d) socket(0x10, 0x2, 0xc) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) r3 = socket(0x11, 0x3, 0x9) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x11\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0x9) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x35}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0xffffffffffffffff, 0x81) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 0s ago: executing program 1 (id=1323): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyz4\x00', 0x408040, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyb0\x00', 0x10100, 0x0) r1 = accept$auto(r0, &(0x7f00000002c0)=@phonet={0x23, 0x57, 0x28, 0x8}, &(0x7f0000000300)=0x2) r2 = ioctl$auto_TIOCGPTPEER(r1, 0x5441, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r0) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0xc}, @typed={0x5, 0x103, 0x0, 0x0, @str='\x00'}]}, @TIPC_NLA_PUBL={0x20, 0x3, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @fd=r0}, @nested={0x14, 0xe0, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xd2, 0x0, 0x0, @str=']![\x00'}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88c0}, 0x8010) prctl$auto_PR_MCE_KILL(0x21, 0x3, 0x10001, 0x7ff, 0x0) swapon$auto(0x0, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x7b16, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) pipe2$auto(&(0x7f0000000200)=r5, 0x6) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\x13\x00', 0xfdef) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r6, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) kernel console output (not intermixed with test programs): alloc_pages_mpol+0x10/0x10 [ 239.089265][ T7804] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 239.089307][ T7804] folio_alloc_mpol_noprof+0x36/0x260 [ 239.089354][ T7804] shmem_alloc_folio+0x135/0x160 [ 239.089407][ T7804] shmem_alloc_and_add_folio+0x371/0xd40 [ 239.089476][ T7804] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 239.089536][ T7804] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 239.089605][ T7804] shmem_get_folio_gfp+0x6ab/0x1900 [ 239.089672][ T7804] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 239.089732][ T7804] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 239.089769][ T7804] ? lockdep_hardirqs_on+0x78/0x100 [ 239.089853][ T7804] shmem_fault+0x1f9/0xa20 [ 239.089911][ T7804] ? __lock_acquire+0x4a5/0x2630 [ 239.089946][ T7804] ? __pfx_shmem_fault+0x10/0x10 [ 239.090004][ T7804] ? __up_read+0x2c1/0x6e0 [ 239.090065][ T7804] ? __pfx_filemap_map_pages+0x10/0x10 [ 239.090121][ T7804] __do_fault+0x10b/0x440 [ 239.090155][ T7804] ? find_held_lock+0x2b/0x80 [ 239.090202][ T7804] do_fault+0x2db/0x1750 [ 239.090251][ T7804] __handle_mm_fault+0x187d/0x2a00 [ 239.090308][ T7804] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 239.090352][ T7804] ? __pfx___handle_mm_fault+0x10/0x10 [ 239.090405][ T7804] ? pte_offset_map_lock+0x174/0x320 [ 239.090443][ T7804] ? find_held_lock+0x2b/0x80 [ 239.090498][ T7804] ? follow_page_pte+0x4d0/0x13f0 [ 239.090548][ T7804] handle_mm_fault+0x36d/0xa20 [ 239.090608][ T7804] __get_user_pages+0x1178/0x32a0 [ 239.090661][ T7804] ? down_read_killable+0x307/0x4b0 [ 239.090699][ T7804] ? __pfx___get_user_pages+0x10/0x10 [ 239.090754][ T7804] faultin_page_range+0x1f1/0x9e0 [ 239.090809][ T7804] madvise_do_behavior+0x354/0x510 [ 239.090860][ T7804] ? __pfx_madvise_do_behavior+0x10/0x10 [ 239.090930][ T7804] do_madvise+0x195/0x240 [ 239.090974][ T7804] ? __pfx_do_madvise+0x10/0x10 [ 239.091019][ T7804] ? do_futex+0x192/0x350 [ 239.091071][ T7804] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 239.091138][ T7804] __x64_sys_madvise+0xa9/0x110 [ 239.091183][ T7804] ? lockdep_hardirqs_on+0x78/0x100 [ 239.091232][ T7804] do_syscall_64+0x10b/0xf80 [ 239.091299][ T7804] ? clear_bhb_loop+0x40/0x90 [ 239.091341][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.091377][ T7804] RIP: 0033:0x7ff9d199c819 [ 239.091405][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.091438][ T7804] RSP: 002b:00007ff9d290f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 239.091471][ T7804] RAX: ffffffffffffffda RBX: 00007ff9d1c15fa0 RCX: 00007ff9d199c819 [ 239.091492][ T7804] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 239.091513][ T7804] RBP: 00007ff9d1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 239.091533][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.091553][ T7804] R13: 00007ff9d1c16038 R14: 00007ff9d1c15fa0 R15: 00007ffec263b9d8 [ 239.091596][ T7804] [ 239.801165][ T5845] usb usb40-port5: attempt power cycle [ 240.412891][ T5845] usb usb40-port5: unable to enumerate USB device [ 240.705987][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.398'. [ 242.207075][ T7865] openvswitch: netlink: IP tunnel attribute has 159 unknown bytes. [ 243.233310][ T7894] futex_wake_op: syz.3.414 tries to shift op by -2048; fix this program [ 244.086791][ T7914] random: crng reseeded on system resumption [ 245.050503][ T7939] openvswitch: netlink: IP tunnel attribute has 159 unknown bytes. [ 245.674530][ T7951] futex_wake_op: syz.1.431 tries to shift op by -2048; fix this program [ 247.822667][ T7984] FAULT_INJECTION: forcing a failure. [ 247.822667][ T7984] name failslab, interval 1, probability 0, space 0, times 0 [ 247.870129][ T7984] CPU: 1 UID: 0 PID: 7984 Comm: syz.3.440 Not tainted syzkaller #0 PREEMPT(full) [ 247.870172][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.870190][ T7984] Call Trace: [ 247.870200][ T7984] [ 247.870212][ T7984] dump_stack_lvl+0x100/0x190 [ 247.870252][ T7984] should_fail_ex.cold+0x5/0xa [ 247.870294][ T7984] ? iovec_from_user+0x8d/0x140 [ 247.870343][ T7984] should_failslab+0xc2/0x120 [ 247.870388][ T7984] __kmalloc_noprof+0xe0/0x850 [ 247.870448][ T7984] iovec_from_user+0x8d/0x140 [ 247.870503][ T7984] __import_iovec+0x81/0x640 [ 247.870562][ T7984] import_iovec+0x82/0xb0 [ 247.870617][ T7984] vfs_readv+0x19e/0x8d0 [ 247.870660][ T7984] ? __pfx_vfs_readv+0x10/0x10 [ 247.870694][ T7984] ? find_held_lock+0x2b/0x80 [ 247.870761][ T7984] ? __fget_files+0x21f/0x3d0 [ 247.870808][ T7984] ? do_preadv+0x1ac/0x270 [ 247.870838][ T7984] do_preadv+0x1ac/0x270 [ 247.870871][ T7984] ? __pfx_do_preadv+0x10/0x10 [ 247.870906][ T7984] ? rcu_is_watching+0x12/0xc0 [ 247.870949][ T7984] do_syscall_64+0x10b/0xf80 [ 247.870999][ T7984] ? clear_bhb_loop+0x40/0x90 [ 247.871039][ T7984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.871073][ T7984] RIP: 0033:0x7ff9d199c819 [ 247.871099][ T7984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.871130][ T7984] RSP: 002b:00007ff9d28cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 247.871160][ T7984] RAX: ffffffffffffffda RBX: 00007ff9d1c16180 RCX: 00007ff9d199c819 [ 247.871182][ T7984] RDX: 0000000000000081 RSI: 0000200000000180 RDI: 0000000000000004 [ 247.871201][ T7984] RBP: 00007ff9d28cd090 R08: 0000000000000e6c R09: 0000000000000000 [ 247.871221][ T7984] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 247.871240][ T7984] R13: 00007ff9d1c16218 R14: 00007ff9d1c16180 R15: 00007ffec263b9d8 [ 247.871285][ T7984] [ 248.770515][ T5910] usb usb40-port5: attempt power cycle [ 249.352147][ T5910] usb usb40-port5: unable to enumerate USB device [ 249.538193][ T8006] futex_wake_op: syz.0.445 tries to shift op by -2048; fix this program [ 249.941474][ T8009] openvswitch: netlink: IP tunnel attribute has 159 unknown bytes. [ 252.010322][ T8039] futex_wake_op: syz.0.455 tries to shift op by -2048; fix this program [ 253.283965][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 256.108372][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.115943][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.062890][ T8124] futex_wake_op: syz.0.473 tries to shift op by -2048; fix this program [ 259.289693][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 259.456549][ T8169] delete_channel: no stack [ 259.811538][ T8175] futex_wake_op: syz.2.486 tries to shift op by -2048; fix this program [ 260.709216][ T8194] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[8194] [ 262.080875][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 262.919191][ T8219] futex_wake_op: syz.2.497 tries to shift op by -2048; fix this program [ 265.073040][ T8250] futex_wake_op: syz.0.505 tries to shift op by -2048; fix this program [ 265.518111][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 267.992049][ T29] audit: type=1800 audit(1776939293.900:7): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.516" name="members" dev="configfs" ino=20409 res=0 errno=0 [ 268.112193][ T8302] netlink: 334 bytes leftover after parsing attributes in process `syz.2.516'. [ 268.959972][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 270.636151][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 271.297933][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 271.869072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 273.910680][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 274.490438][ T5910] usb usb40-port5: attempt power cycle [ 275.074413][ T5910] usb usb40-port5: unable to enumerate USB device [ 275.671254][ T8396] netlink: 346 bytes leftover after parsing attributes in process `syz.1.542'. [ 276.708037][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 277.385671][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 278.894254][ T8434] FAULT_INJECTION: forcing a failure. [ 278.894254][ T8434] name failslab, interval 1, probability 0, space 0, times 0 [ 278.946692][ T8434] CPU: 1 UID: 0 PID: 8434 Comm: syz.0.554 Not tainted syzkaller #0 PREEMPT(full) [ 278.946737][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.946756][ T8434] Call Trace: [ 278.946767][ T8434] [ 278.946779][ T8434] dump_stack_lvl+0x100/0x190 [ 278.946823][ T8434] should_fail_ex.cold+0x5/0xa [ 278.946866][ T8434] should_failslab+0xc2/0x120 [ 278.946905][ T8434] __kmalloc_cache_noprof+0x7a/0x6f0 [ 278.946955][ T8434] ? ima_d_path+0xc9/0x260 [ 278.947003][ T8434] ? xattr_resolve_name+0x27d/0x3f0 [ 278.947049][ T8434] ima_d_path+0xc9/0x260 [ 278.947100][ T8434] ? __pfx_ima_d_path+0x10/0x10 [ 278.947158][ T8434] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 278.947210][ T8434] process_measurement+0x1b25/0x2350 [ 278.947269][ T8434] ? stack_trace_save+0x8e/0xc0 [ 278.947317][ T8434] ? __pfx_process_measurement+0x10/0x10 [ 278.947367][ T8434] ? __lock_acquire+0x4a5/0x2630 [ 278.947399][ T8434] ? __kasan_slab_alloc+0x89/0x90 [ 278.947444][ T8434] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 278.947500][ T8434] ? init_file+0x95/0x480 [ 278.947544][ T8434] ? alloc_empty_file+0x79/0x1c0 [ 278.947592][ T8434] ? alloc_file_pseudo+0x13a/0x230 [ 278.947639][ T8434] ? ksys_mmap_pgoff+0x242/0x610 [ 278.947681][ T8434] ? __x64_sys_mmap+0x125/0x190 [ 278.947717][ T8434] ? do_syscall_64+0x10b/0xf80 [ 278.947809][ T8434] ? __pfx_aa_file_perm+0x10/0x10 [ 278.947860][ T8434] ima_file_mmap+0x1c4/0x1f0 [ 278.947909][ T8434] ? __pfx_ima_file_mmap+0x10/0x10 [ 278.947968][ T8434] security_mmap_file+0x278/0x9b0 [ 278.948005][ T8434] vm_mmap_pgoff+0xec/0x470 [ 278.948052][ T8434] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 278.948093][ T8434] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 278.948147][ T8434] ? hugetlbfs_get_inode+0x3f5/0x700 [ 278.948208][ T8434] ksys_mmap_pgoff+0x285/0x610 [ 278.948254][ T8434] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 278.948295][ T8434] ? xfd_validate_state+0x129/0x190 [ 278.948328][ T8434] ? ksys_write+0x1ac/0x250 [ 278.948374][ T8434] __x64_sys_mmap+0x125/0x190 [ 278.948415][ T8434] do_syscall_64+0x10b/0xf80 [ 278.948475][ T8434] ? clear_bhb_loop+0x40/0x90 [ 278.948518][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.948553][ T8434] RIP: 0033:0x7fc818b9c819 [ 278.948581][ T8434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.948613][ T8434] RSP: 002b:00007fc819abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 278.948645][ T8434] RAX: ffffffffffffffda RBX: 00007fc818e15fa0 RCX: 00007fc818b9c819 [ 278.948668][ T8434] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 278.948688][ T8434] RBP: 00007fc818c32c91 R08: 0000000000000401 R09: 0000300000000000 [ 278.948710][ T8434] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000000 [ 278.948730][ T8434] R13: 00007fc818e16038 R14: 00007fc818e15fa0 R15: 00007ffc3fe60038 [ 278.948773][ T8434] [ 281.892344][ T8457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 281.933849][ T8457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 281.940313][ T8457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.946560][ T8457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 281.958259][ T8457] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 283.257126][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 283.629102][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 284.022199][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 284.028577][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 284.037065][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 284.924597][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'. [ 285.146234][ T8506] team0: Port device team_slave_0 removed [ 285.365137][ T8517] openvswitch: netlink: IP tunnel attribute has 159 unknown bytes. [ 286.099324][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 286.202894][ T808] usb usb40-port5: attempt power cycle [ 286.790409][ T808] usb usb40-port5: unable to enumerate USB device [ 287.455192][ T8547] futex_wake_op: syz.2.580 tries to shift op by -2048; fix this program [ 289.560795][ T5932] usb usb40-port5: attempt power cycle [ 289.578308][ T8571] openvswitch: netlink: IP tunnel attribute has 159 unknown bytes. [ 290.152986][ T5932] usb usb40-port5: unable to enumerate USB device [ 291.983466][ T8596] futex_wake_op: syz.1.594 tries to shift op by -2048; fix this program [ 294.671203][ T8631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.601'. [ 294.889307][ T8631] team0: Port device team_slave_0 removed [ 295.940679][ T807] usb usb40-port5: attempt power cycle [ 296.520510][ T807] usb usb40-port5: unable to enumerate USB device [ 296.833204][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.609'. [ 302.401176][ T24] usb usb40-port5: attempt power cycle [ 303.006478][ T24] usb usb40-port5: unable to enumerate USB device [ 306.922145][ T5933] usb usb40-port5: attempt power cycle [ 307.428037][ T8813] openvswitch: netlink: IP tunnel attribute has 159 unknown bytes. [ 307.510350][ T5933] usb usb40-port5: unable to enumerate USB device [ 307.674727][ T8818] FAULT_INJECTION: forcing a failure. [ 307.674727][ T8818] name failslab, interval 1, probability 0, space 0, times 0 [ 307.706876][ T8818] CPU: 0 UID: 0 PID: 8818 Comm: syz.2.644 Not tainted syzkaller #0 PREEMPT(full) [ 307.706925][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.706945][ T8818] Call Trace: [ 307.706957][ T8818] [ 307.706970][ T8818] dump_stack_lvl+0x100/0x190 [ 307.707016][ T8818] should_fail_ex.cold+0x5/0xa [ 307.707071][ T8818] ? ima_alloc_init_template+0x19d/0x6d0 [ 307.707132][ T8818] should_failslab+0xc2/0x120 [ 307.707175][ T8818] __kmalloc_noprof+0xe0/0x850 [ 307.707234][ T8818] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 307.707300][ T8818] ima_alloc_init_template+0x19d/0x6d0 [ 307.707357][ T8818] ? take_dentry_name_snapshot+0x310/0x7c0 [ 307.707421][ T8818] ima_store_measurement+0x1e3/0x5b0 [ 307.707480][ T8818] ? __pfx_ima_store_measurement+0x10/0x10 [ 307.707551][ T8818] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 307.707604][ T8818] process_measurement+0x19cc/0x2350 [ 307.707666][ T8818] ? stack_trace_save+0x8e/0xc0 [ 307.707717][ T8818] ? __pfx_process_measurement+0x10/0x10 [ 307.707770][ T8818] ? __lock_acquire+0x4a5/0x2630 [ 307.707804][ T8818] ? __kasan_slab_alloc+0x89/0x90 [ 307.707841][ T8818] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 307.707900][ T8818] ? init_file+0x95/0x480 [ 307.707945][ T8818] ? alloc_empty_file+0x79/0x1c0 [ 307.707994][ T8818] ? alloc_file_pseudo+0x13a/0x230 [ 307.708046][ T8818] ? ksys_mmap_pgoff+0x242/0x610 [ 307.708097][ T8818] ? __x64_sys_mmap+0x125/0x190 [ 307.708133][ T8818] ? do_syscall_64+0x10b/0xf80 [ 307.708229][ T8818] ? __pfx_aa_file_perm+0x10/0x10 [ 307.708281][ T8818] ima_file_mmap+0x1c4/0x1f0 [ 307.708330][ T8818] ? __pfx_ima_file_mmap+0x10/0x10 [ 307.708385][ T8818] security_mmap_file+0x278/0x9b0 [ 307.708424][ T8818] vm_mmap_pgoff+0xec/0x470 [ 307.708474][ T8818] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 307.708514][ T8818] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 307.708570][ T8818] ? hugetlbfs_get_inode+0x3f5/0x700 [ 307.708634][ T8818] ksys_mmap_pgoff+0x285/0x610 [ 307.708681][ T8818] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 307.708723][ T8818] ? xfd_validate_state+0x129/0x190 [ 307.708758][ T8818] ? ksys_write+0x1ac/0x250 [ 307.708805][ T8818] __x64_sys_mmap+0x125/0x190 [ 307.708850][ T8818] do_syscall_64+0x10b/0xf80 [ 307.708903][ T8818] ? clear_bhb_loop+0x40/0x90 [ 307.708945][ T8818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.708981][ T8818] RIP: 0033:0x7fb33879c819 [ 307.709011][ T8818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.709044][ T8818] RSP: 002b:00007fb3395f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 307.709090][ T8818] RAX: ffffffffffffffda RBX: 00007fb338a15fa0 RCX: 00007fb33879c819 [ 307.709115][ T8818] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 307.709136][ T8818] RBP: 00007fb338832c91 R08: 0000000000000401 R09: 0000300000000000 [ 307.709158][ T8818] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000000 [ 307.709179][ T8818] R13: 00007fb338a16038 R14: 00007fb338a15fa0 R15: 00007ffe0e40c428 [ 307.709224][ T8818] [ 308.041842][ T8816] FAULT_INJECTION: forcing a failure. [ 308.041842][ T8816] name failslab, interval 1, probability 0, space 0, times 0 [ 308.055202][ T8816] CPU: 0 UID: 0 PID: 8816 Comm: syz.0.639 Not tainted syzkaller #0 PREEMPT(full) [ 308.055257][ T8816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.055279][ T8816] Call Trace: [ 308.055290][ T8816] [ 308.055303][ T8816] dump_stack_lvl+0x100/0x190 [ 308.055348][ T8816] should_fail_ex.cold+0x5/0xa [ 308.055394][ T8816] should_failslab+0xc2/0x120 [ 308.055434][ T8816] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 308.055492][ T8816] ? proc_alloc_inode+0x25/0x200 [ 308.055536][ T8816] ? __pfx_proc_alloc_inode+0x10/0x10 [ 308.055573][ T8816] proc_alloc_inode+0x25/0x200 [ 308.055608][ T8816] alloc_inode+0x68/0x250 [ 308.055663][ T8816] new_inode+0x22/0x1c0 [ 308.055723][ T8816] proc_pid_make_inode+0x22/0x160 [ 308.055765][ T8816] proc_pident_instantiate+0x85/0x310 [ 308.055810][ T8816] proc_pident_lookup+0x1e3/0x270 [ 308.055859][ T8816] __lookup_slow+0x251/0x460 [ 308.055912][ T8816] ? __pfx___lookup_slow+0x10/0x10 [ 308.055998][ T8816] lookup_slow+0x50/0x70 [ 308.056053][ T8816] link_path_walk+0x1377/0x1cc0 [ 308.056105][ T8816] path_openat+0x1be/0x31a0 [ 308.056157][ T8816] ? kasan_save_stack+0x3f/0x50 [ 308.056188][ T8816] ? kasan_save_stack+0x30/0x50 [ 308.056218][ T8816] ? kasan_save_track+0x14/0x30 [ 308.056259][ T8816] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 308.056323][ T8816] ? __pfx_path_openat+0x10/0x10 [ 308.056380][ T8816] do_file_open+0x20e/0x430 [ 308.056425][ T8816] ? __pfx_do_file_open+0x10/0x10 [ 308.056482][ T8816] ? __pfx_kfree_link+0x10/0x10 [ 308.056528][ T8816] ? alloc_fd+0x476/0x790 [ 308.056570][ T8816] ? do_getname+0x191/0x390 [ 308.056622][ T8816] do_sys_openat2+0x10d/0x1e0 [ 308.056675][ T8816] ? __pfx_do_sys_openat2+0x10/0x10 [ 308.056740][ T8816] __x64_sys_openat+0x12d/0x210 [ 308.056793][ T8816] ? __pfx___x64_sys_openat+0x10/0x10 [ 308.056851][ T8816] ? rcu_is_watching+0x12/0xc0 [ 308.056898][ T8816] do_syscall_64+0x10b/0xf80 [ 308.056950][ T8816] ? clear_bhb_loop+0x40/0x90 [ 308.056991][ T8816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.057026][ T8816] RIP: 0033:0x7fc818b5d04e [ 308.057055][ T8816] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.057088][ T8816] RSP: 002b:00007fc819abaec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 308.057121][ T8816] RAX: ffffffffffffffda RBX: 00007fc819abb6c0 RCX: 00007fc818b5d04e [ 308.057143][ T8816] RDX: 0000000000000002 RSI: 00007fc819abaf90 RDI: ffffffffffffff9c [ 308.057163][ T8816] RBP: 00007fc818c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 308.057184][ T8816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.057204][ T8816] R13: 00007fc818e16038 R14: 00007fc818e15fa0 R15: 00007ffc3fe60038 [ 308.057258][ T8816] [ 308.191133][ T29] audit: type=1804 audit(1776939334.110:8): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.644" name="anon_hugepage" dev="hugetlbfs" ino=24824 res=0 errno=0 [ 308.875310][ T8826] futex_wake_op: syz.0.647 tries to shift op by -2048; fix this program [ 310.357755][ T8846] random: crng reseeded on system resumption [ 312.357348][ T8869] FAULT_INJECTION: forcing a failure. [ 312.357348][ T8869] name failslab, interval 1, probability 0, space 0, times 0 [ 312.393992][ T8869] CPU: 0 UID: 0 PID: 8869 Comm: syz.0.659 Not tainted syzkaller #0 PREEMPT(full) [ 312.394034][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.394052][ T8869] Call Trace: [ 312.394062][ T8869] [ 312.394074][ T8869] dump_stack_lvl+0x100/0x190 [ 312.394115][ T8869] should_fail_ex.cold+0x5/0xa [ 312.394156][ T8869] ? tomoyo_realpath_from_path+0xb6/0x690 [ 312.394193][ T8869] should_failslab+0xc2/0x120 [ 312.394230][ T8869] __kmalloc_noprof+0xe0/0x850 [ 312.394280][ T8869] ? kfree+0x1dd/0x6c0 [ 312.394332][ T8869] tomoyo_realpath_from_path+0xb6/0x690 [ 312.394380][ T8869] tomoyo_path_number_perm+0x23c/0x580 [ 312.394431][ T8869] ? tomoyo_path_number_perm+0x22e/0x580 [ 312.394487][ T8869] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 312.394597][ T8869] ? find_held_lock+0x2b/0x80 [ 312.394648][ T8869] ? __fget_files+0x215/0x3d0 [ 312.394684][ T8869] ? hook_file_ioctl_common+0x149/0x410 [ 312.394736][ T8869] ? __fget_files+0x215/0x3d0 [ 312.394779][ T8869] ? __fget_files+0x21f/0x3d0 [ 312.394828][ T8869] security_file_ioctl+0xd3/0x230 [ 312.394881][ T8869] __x64_sys_ioctl+0xb7/0x210 [ 312.394916][ T8869] do_syscall_64+0x10b/0xf80 [ 312.394964][ T8869] ? clear_bhb_loop+0x40/0x90 [ 312.395003][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.395035][ T8869] RIP: 0033:0x7fc818b9c819 [ 312.395061][ T8869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.395091][ T8869] RSP: 002b:00007fc819a9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.395121][ T8869] RAX: ffffffffffffffda RBX: 00007fc818e16090 RCX: 00007fc818b9c819 [ 312.395146][ T8869] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000003 [ 312.395164][ T8869] RBP: 00007fc819a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 312.395183][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.395201][ T8869] R13: 00007fc818e16128 R14: 00007fc818e16090 R15: 00007ffc3fe60038 [ 312.395244][ T8869] [ 312.396793][ T8869] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.629087][ T5933] usb usb40-port5: attempt power cycle [ 312.866008][ T8874] FAULT_INJECTION: forcing a failure. [ 312.866008][ T8874] name failslab, interval 1, probability 0, space 0, times 0 [ 312.879297][ T8874] CPU: 0 UID: 0 PID: 8874 Comm: syz.0.660 Not tainted syzkaller #0 PREEMPT(full) [ 312.879342][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.879361][ T8874] Call Trace: [ 312.879373][ T8874] [ 312.879385][ T8874] dump_stack_lvl+0x100/0x190 [ 312.879428][ T8874] should_fail_ex.cold+0x5/0xa [ 312.879473][ T8874] ? ima_alloc_init_template+0x19d/0x6d0 [ 312.879530][ T8874] should_failslab+0xc2/0x120 [ 312.879570][ T8874] __kmalloc_noprof+0xe0/0x850 [ 312.879625][ T8874] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 312.879687][ T8874] ima_alloc_init_template+0x19d/0x6d0 [ 312.879740][ T8874] ? take_dentry_name_snapshot+0x310/0x7c0 [ 312.879810][ T8874] ima_store_measurement+0x1e3/0x5b0 [ 312.879867][ T8874] ? __pfx_ima_store_measurement+0x10/0x10 [ 312.879937][ T8874] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 312.879986][ T8874] process_measurement+0x19cc/0x2350 [ 312.880042][ T8874] ? find_held_lock+0x2b/0x80 [ 312.880086][ T8874] ? __pfx_process_measurement+0x10/0x10 [ 312.880135][ T8874] ? __lock_acquire+0x4a5/0x2630 [ 312.880166][ T8874] ? __kasan_slab_alloc+0x89/0x90 [ 312.880200][ T8874] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 312.880253][ T8874] ? init_file+0x95/0x480 [ 312.880294][ T8874] ? alloc_empty_file+0x79/0x1c0 [ 312.880338][ T8874] ? alloc_file_pseudo+0x13a/0x230 [ 312.880386][ T8874] ? ksys_mmap_pgoff+0x242/0x610 [ 312.880424][ T8874] ? __x64_sys_mmap+0x125/0x190 [ 312.880457][ T8874] ? do_syscall_64+0x10b/0xf80 [ 312.880549][ T8874] ? __pfx_aa_file_perm+0x10/0x10 [ 312.880604][ T8874] ima_file_mmap+0x1c4/0x1f0 [ 312.880646][ T8874] ? __pfx_ima_file_mmap+0x10/0x10 [ 312.880697][ T8874] security_mmap_file+0x278/0x9b0 [ 312.880730][ T8874] vm_mmap_pgoff+0xec/0x470 [ 312.880783][ T8874] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 312.880820][ T8874] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 312.880867][ T8874] ? hugetlbfs_get_inode+0x3f5/0x700 [ 312.880921][ T8874] ksys_mmap_pgoff+0x285/0x610 [ 312.880960][ T8874] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 312.880994][ T8874] ? xfd_validate_state+0x129/0x190 [ 312.881023][ T8874] ? ksys_write+0x1ac/0x250 [ 312.881062][ T8874] __x64_sys_mmap+0x125/0x190 [ 312.881098][ T8874] do_syscall_64+0x10b/0xf80 [ 312.881142][ T8874] ? clear_bhb_loop+0x40/0x90 [ 312.881179][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.881209][ T8874] RIP: 0033:0x7fc818b9c819 [ 312.881235][ T8874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.881264][ T8874] RSP: 002b:00007fc819abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 312.881295][ T8874] RAX: ffffffffffffffda RBX: 00007fc818e15fa0 RCX: 00007fc818b9c819 [ 312.881317][ T8874] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000016 [ 312.881339][ T8874] RBP: 00007fc818c32c91 R08: 0000000000000401 R09: 0000300000000000 [ 312.881360][ T8874] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000000 [ 312.881380][ T8874] R13: 00007fc818e16038 R14: 00007fc818e15fa0 R15: 00007ffc3fe60038 [ 312.881425][ T8874] [ 312.882010][ T29] audit: type=1804 audit(1776939338.800:9): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.660" name="anon_hugepage" dev="hugetlbfs" ino=25008 res=0 errno=0 [ 313.376459][ T8881] FAULT_INJECTION: forcing a failure. [ 313.376459][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 313.393602][ T8881] CPU: 0 UID: 0 PID: 8881 Comm: syz.3.661 Not tainted syzkaller #0 PREEMPT(full) [ 313.393644][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.393663][ T8881] Call Trace: [ 313.393674][ T8881] [ 313.393686][ T8881] dump_stack_lvl+0x100/0x190 [ 313.393734][ T8881] should_fail_ex.cold+0x5/0xa [ 313.393776][ T8881] should_failslab+0xc2/0x120 [ 313.393815][ T8881] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 313.393869][ T8881] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 313.393927][ T8881] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 313.393970][ T8881] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 313.394014][ T8881] alloc_inode+0x68/0x250 [ 313.394064][ T8881] new_inode+0x22/0x1c0 [ 313.394117][ T8881] hugetlbfs_get_inode+0x39a/0x700 [ 313.394159][ T8881] ? do_raw_spin_unlock+0x145/0x1e0 [ 313.394204][ T8881] hugetlb_file_setup+0x15b/0x5b0 [ 313.394256][ T8881] ksys_mmap_pgoff+0x242/0x610 [ 313.394301][ T8881] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 313.394350][ T8881] __x64_sys_mmap+0x125/0x190 [ 313.394390][ T8881] do_syscall_64+0x10b/0xf80 [ 313.394439][ T8881] ? clear_bhb_loop+0x40/0x90 [ 313.394477][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.394509][ T8881] RIP: 0033:0x7ff9d199c819 [ 313.394536][ T8881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.394565][ T8881] RSP: 002b:00007ff9d290f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 313.394595][ T8881] RAX: ffffffffffffffda RBX: 00007ff9d1c15fa0 RCX: 00007ff9d199c819 [ 313.394615][ T8881] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 313.394634][ T8881] RBP: 00007ff9d290f090 R08: 0000000000000401 R09: 0000300000000000 [ 313.394653][ T8881] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000001 [ 313.394671][ T8881] R13: 00007ff9d1c16038 R14: 00007ff9d1c15fa0 R15: 00007ffec263b9d8 [ 313.394713][ T8881] [ 313.607360][ T5933] usb usb40-port5: unable to enumerate USB device [ 313.788633][ T8887] futex_wake_op: syz.2.663 tries to shift op by -2048; fix this program [ 316.309947][ T24] usb usb40-port5: attempt power cycle [ 316.896179][ T24] usb usb40-port5: unable to enumerate USB device [ 317.242705][ T8932] block2mtd: illegal erase size [ 317.297568][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 317.545545][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.552212][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.735577][ T8940] ======================================================= [ 317.735577][ T8940] WARNING: The mand mount option has been deprecated and [ 317.735577][ T8940] and is ignored by this kernel. Remove the mand [ 317.735577][ T8940] option from the mount to silence this warning. [ 317.735577][ T8940] ======================================================= [ 317.853781][ T8938] mkiss: ax0: crc mode is auto. [ 319.463255][ T8969] FAULT_INJECTION: forcing a failure. [ 319.463255][ T8969] name failslab, interval 1, probability 0, space 0, times 0 [ 319.476353][ T8969] CPU: 0 UID: 0 PID: 8969 Comm: syz.1.688 Not tainted syzkaller #0 PREEMPT(full) [ 319.476399][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.476420][ T8969] Call Trace: [ 319.476432][ T8969] [ 319.476444][ T8969] dump_stack_lvl+0x100/0x190 [ 319.476489][ T8969] should_fail_ex.cold+0x5/0xa [ 319.476535][ T8969] should_failslab+0xc2/0x120 [ 319.476575][ T8969] __kmalloc_cache_noprof+0x7a/0x6f0 [ 319.476626][ T8969] ? ima_d_path+0xc9/0x260 [ 319.476675][ T8969] ? xattr_resolve_name+0x27d/0x3f0 [ 319.476720][ T8969] ima_d_path+0xc9/0x260 [ 319.476773][ T8969] ? __pfx_ima_d_path+0x10/0x10 [ 319.476831][ T8969] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 319.476885][ T8969] process_measurement+0x1b25/0x2350 [ 319.476950][ T8969] ? stack_trace_save+0x8e/0xc0 [ 319.477000][ T8969] ? __pfx_process_measurement+0x10/0x10 [ 319.477051][ T8969] ? __lock_acquire+0x4a5/0x2630 [ 319.477082][ T8969] ? __kasan_slab_alloc+0x89/0x90 [ 319.477117][ T8969] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 319.477172][ T8969] ? init_file+0x95/0x480 [ 319.477224][ T8969] ? alloc_empty_file+0x79/0x1c0 [ 319.477272][ T8969] ? alloc_file_pseudo+0x13a/0x230 [ 319.477323][ T8969] ? ksys_mmap_pgoff+0x242/0x610 [ 319.477361][ T8969] ? __x64_sys_mmap+0x125/0x190 [ 319.477396][ T8969] ? do_syscall_64+0x10b/0xf80 [ 319.477488][ T8969] ? __pfx_aa_file_perm+0x10/0x10 [ 319.477544][ T8969] ima_file_mmap+0x1c4/0x1f0 [ 319.477593][ T8969] ? __pfx_ima_file_mmap+0x10/0x10 [ 319.477652][ T8969] security_mmap_file+0x278/0x9b0 [ 319.477691][ T8969] vm_mmap_pgoff+0xec/0x470 [ 319.477740][ T8969] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 319.477780][ T8969] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 319.477833][ T8969] ? hugetlbfs_get_inode+0x3f5/0x700 [ 319.477897][ T8969] ksys_mmap_pgoff+0x285/0x610 [ 319.477945][ T8969] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 319.477986][ T8969] ? xfd_validate_state+0x129/0x190 [ 319.478022][ T8969] ? ksys_write+0x1ac/0x250 [ 319.478066][ T8969] __x64_sys_mmap+0x125/0x190 [ 319.478107][ T8969] do_syscall_64+0x10b/0xf80 [ 319.478159][ T8969] ? clear_bhb_loop+0x40/0x90 [ 319.478203][ T8969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.478247][ T8969] RIP: 0033:0x7f8c7d99c819 [ 319.478273][ T8969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.478305][ T8969] RSP: 002b:00007f8c7e911028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 319.478336][ T8969] RAX: ffffffffffffffda RBX: 00007f8c7dc15fa0 RCX: 00007f8c7d99c819 [ 319.478356][ T8969] RDX: 00004000000000df RSI: 0000000000008016 RDI: 0000000000000004 [ 319.478377][ T8969] RBP: 00007f8c7da32c91 R08: 0000000000000401 R09: 0000300000000000 [ 319.478397][ T8969] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000000 [ 319.478417][ T8969] R13: 00007f8c7dc16038 R14: 00007f8c7dc15fa0 R15: 00007fff5a3847a8 [ 319.478459][ T8969] [ 319.820705][ T24] usb usb40-port5: attempt power cycle [ 320.263822][ T8975] FAULT_INJECTION: forcing a failure. [ 320.263822][ T8975] name failslab, interval 1, probability 0, space 0, times 0 [ 320.276944][ T8975] CPU: 0 UID: 0 PID: 8975 Comm: syz.3.690 Not tainted syzkaller #0 PREEMPT(full) [ 320.276982][ T8975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.276997][ T8975] Call Trace: [ 320.277007][ T8975] [ 320.277016][ T8975] dump_stack_lvl+0x100/0x190 [ 320.277049][ T8975] should_fail_ex.cold+0x5/0xa [ 320.277081][ T8975] should_failslab+0xc2/0x120 [ 320.277111][ T8975] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 320.277155][ T8975] ? __d_alloc+0x34/0xa40 [ 320.277195][ T8975] __d_alloc+0x34/0xa40 [ 320.277232][ T8975] d_alloc_pseudo+0x1c/0xc0 [ 320.277255][ T8975] alloc_file_pseudo+0xcf/0x230 [ 320.277294][ T8975] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 320.277332][ T8975] ? hugetlbfs_get_inode+0x3f5/0x700 [ 320.277366][ T8975] ? __fget_files+0x215/0x3d0 [ 320.277400][ T8975] hugetlb_file_setup+0x2a8/0x5b0 [ 320.277443][ T8975] ksys_mmap_pgoff+0x242/0x610 [ 320.277479][ T8975] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 320.277508][ T8975] ? fput+0x79/0x100 [ 320.277542][ T8975] ? ksys_write+0x1ac/0x250 [ 320.277571][ T8975] ? __pfx_ksys_write+0x10/0x10 [ 320.277605][ T8975] __x64_sys_mmap+0x125/0x190 [ 320.277639][ T8975] do_syscall_64+0x10b/0xf80 [ 320.277682][ T8975] ? clear_bhb_loop+0x40/0x90 [ 320.277718][ T8975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.277747][ T8975] RIP: 0033:0x7ff9d199c819 [ 320.277771][ T8975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.277795][ T8975] RSP: 002b:00007ff9d290f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 320.277820][ T8975] RAX: ffffffffffffffda RBX: 00007ff9d1c15fa0 RCX: 00007ff9d199c819 [ 320.277837][ T8975] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 320.277851][ T8975] RBP: 00007ff9d290f090 R08: 0000000000000401 R09: 0000300000000000 [ 320.277867][ T8975] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000001 [ 320.277883][ T8975] R13: 00007ff9d1c16038 R14: 00007ff9d1c15fa0 R15: 00007ffec263b9d8 [ 320.277929][ T8975] [ 320.443669][ T24] usb usb40-port5: unable to enumerate USB device [ 321.185697][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 321.815674][ T9005] ubi0: attaching mtd0 [ 321.845811][ T9005] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 321.898330][ T9005] eraseblock attaching information dump: [ 321.924653][ T9005] ec 1 [ 321.933714][ T9005] pnum 0 [ 321.946545][ T9005] lnum 0 [ 321.958050][ T9005] scrub 0 [ 321.976241][ T9005] sqnum 1 [ 321.986995][ T9005] Volume identifier header dump: [ 322.007826][ T9005] magic 55424921 [ 322.024903][ T9005] version 1 [ 322.042124][ T9005] vol_type 1 [ 322.050344][ T9005] copy_flag 0 [ 322.082435][ T9005] compat 5 [ 322.107960][ T9005] vol_id 2147479551 [ 322.129704][ T9005] lnum 0 [ 322.155230][ T9005] data_size 0 [ 322.188398][ T9005] used_ebs 0 [ 322.199288][ T9005] data_pad 0 [ 322.204882][ T9005] sqnum 1 [ 322.212920][ T9005] hdr_crc 65b3bd2d [ 322.223936][ T9005] Volume identifier header hexdump: [ 322.458037][ T9005] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 324.442191][ T24] usb usb40-port5: attempt power cycle [ 325.030428][ T24] usb usb40-port5: unable to enumerate USB device [ 327.630544][ T9078] futex_wake_op: syz.2.714 tries to shift op by -2048; fix this program [ 329.887914][ T9109] FAULT_INJECTION: forcing a failure. [ 329.887914][ T9109] name failslab, interval 1, probability 0, space 0, times 0 [ 329.920727][ T9109] CPU: 1 UID: 0 PID: 9109 Comm: syz.1.718 Not tainted syzkaller #0 PREEMPT(full) [ 329.920768][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.920787][ T9109] Call Trace: [ 329.920797][ T9109] [ 329.920808][ T9109] dump_stack_lvl+0x100/0x190 [ 329.920846][ T9109] should_fail_ex.cold+0x5/0xa [ 329.920888][ T9109] should_failslab+0xc2/0x120 [ 329.920925][ T9109] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 329.920977][ T9109] ? security_file_alloc+0x34/0x2c0 [ 329.921008][ T9109] ? trace_kmem_cache_alloc+0xd5/0x100 [ 329.921053][ T9109] security_file_alloc+0x34/0x2c0 [ 329.921092][ T9109] init_file+0x95/0x480 [ 329.921137][ T9109] alloc_empty_file+0x79/0x1c0 [ 329.921186][ T9109] alloc_file_pseudo+0x13a/0x230 [ 329.921237][ T9109] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 329.921287][ T9109] ? hugetlbfs_get_inode+0x3f5/0x700 [ 329.921331][ T9109] ? __fget_files+0x215/0x3d0 [ 329.921373][ T9109] hugetlb_file_setup+0x2a8/0x5b0 [ 329.921425][ T9109] ksys_mmap_pgoff+0x242/0x610 [ 329.921473][ T9109] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 329.921509][ T9109] ? fput+0x79/0x100 [ 329.921551][ T9109] ? ksys_write+0x1ac/0x250 [ 329.921586][ T9109] ? __pfx_ksys_write+0x10/0x10 [ 329.921627][ T9109] __x64_sys_mmap+0x125/0x190 [ 329.921668][ T9109] do_syscall_64+0x10b/0xf80 [ 329.921717][ T9109] ? clear_bhb_loop+0x40/0x90 [ 329.921757][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.921790][ T9109] RIP: 0033:0x7f8c7d99c819 [ 329.921817][ T9109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.921847][ T9109] RSP: 002b:00007f8c7e911028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 329.921877][ T9109] RAX: ffffffffffffffda RBX: 00007f8c7dc15fa0 RCX: 00007f8c7d99c819 [ 329.921898][ T9109] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 329.921918][ T9109] RBP: 00007f8c7e911090 R08: 0000000000000401 R09: 0000300000000000 [ 329.921938][ T9109] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000001 [ 329.921958][ T9109] R13: 00007f8c7dc16038 R14: 00007f8c7dc15fa0 R15: 00007fff5a3847a8 [ 329.922000][ T9109] [ 331.761610][ T24] usb usb40-port5: attempt power cycle [ 332.347888][ T24] usb usb40-port5: unable to enumerate USB device [ 332.552014][ T9146] futex_wake_op: syz.1.732 tries to shift op by -2048; fix this program [ 333.693371][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 334.035115][ T9171] FAULT_INJECTION: forcing a failure. [ 334.035115][ T9171] name failslab, interval 1, probability 0, space 0, times 0 [ 334.108571][ T9171] CPU: 0 UID: 0 PID: 9171 Comm: syz.0.739 Not tainted syzkaller #0 PREEMPT(full) [ 334.108615][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.108635][ T9171] Call Trace: [ 334.108645][ T9171] [ 334.108657][ T9171] dump_stack_lvl+0x100/0x190 [ 334.108704][ T9171] should_fail_ex.cold+0x5/0xa [ 334.108756][ T9171] should_failslab+0xc2/0x120 [ 334.108795][ T9171] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 334.108847][ T9171] ? ima_inode_get+0x11f/0x580 [ 334.108901][ T9171] ima_inode_get+0x11f/0x580 [ 334.108947][ T9171] process_measurement+0x1213/0x2350 [ 334.108999][ T9171] ? stack_depot_save_flags+0x27/0x9d0 [ 334.109036][ T9171] ? stack_trace_save+0x8e/0xc0 [ 334.109080][ T9171] ? __pfx_process_measurement+0x10/0x10 [ 334.109123][ T9171] ? __lock_acquire+0x4a5/0x2630 [ 334.109150][ T9171] ? __kasan_slab_alloc+0x89/0x90 [ 334.109177][ T9171] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 334.109220][ T9171] ? init_file+0x95/0x480 [ 334.109255][ T9171] ? alloc_empty_file+0x79/0x1c0 [ 334.109292][ T9171] ? alloc_file_pseudo+0x13a/0x230 [ 334.109331][ T9171] ? ksys_mmap_pgoff+0x242/0x610 [ 334.109360][ T9171] ? __x64_sys_mmap+0x125/0x190 [ 334.109388][ T9171] ? do_syscall_64+0x10b/0xf80 [ 334.109466][ T9171] ? __pfx_aa_file_perm+0x10/0x10 [ 334.109509][ T9171] ima_file_mmap+0x1c4/0x1f0 [ 334.109547][ T9171] ? __pfx_ima_file_mmap+0x10/0x10 [ 334.109593][ T9171] security_mmap_file+0x278/0x9b0 [ 334.109623][ T9171] vm_mmap_pgoff+0xec/0x470 [ 334.109660][ T9171] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 334.109692][ T9171] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 334.109734][ T9171] ? hugetlbfs_get_inode+0x3f5/0x700 [ 334.109778][ T9171] ? __fget_files+0x215/0x3d0 [ 334.109818][ T9171] ksys_mmap_pgoff+0x285/0x610 [ 334.109853][ T9171] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 334.109884][ T9171] ? fput+0x79/0x100 [ 334.109919][ T9171] ? ksys_write+0x1ac/0x250 [ 334.109949][ T9171] ? __pfx_ksys_write+0x10/0x10 [ 334.109982][ T9171] __x64_sys_mmap+0x125/0x190 [ 334.110016][ T9171] do_syscall_64+0x10b/0xf80 [ 334.110057][ T9171] ? clear_bhb_loop+0x40/0x90 [ 334.110092][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.110125][ T9171] RIP: 0033:0x7fc818b9c819 [ 334.110147][ T9171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.110175][ T9171] RSP: 002b:00007fc819abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 334.110200][ T9171] RAX: ffffffffffffffda RBX: 00007fc818e15fa0 RCX: 00007fc818b9c819 [ 334.110218][ T9171] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 334.110234][ T9171] RBP: 00007fc819abb090 R08: 0000000000000401 R09: 0000300000000000 [ 334.110252][ T9171] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000001 [ 334.110268][ T9171] R13: 00007fc818e16038 R14: 00007fc818e15fa0 R15: 00007ffc3fe60038 [ 334.110303][ T9171] [ 334.828453][ T9181] bond0: Unable to set down delay as MII monitoring is disabled [ 334.880252][ T9183] ubi0: attaching mtd0 [ 334.901408][ T9183] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 334.927913][ T9183] eraseblock attaching information dump: [ 334.945574][ T9183] ec 1 [ 334.957731][ T9183] pnum 0 [ 334.967134][ T9183] lnum 0 [ 334.977294][ T9183] scrub 0 [ 334.990859][ T9183] sqnum 1 [ 335.019796][ T9183] Volume identifier header dump: [ 335.059921][ T9183] magic 55424921 [ 335.086744][ T9183] version 1 [ 335.102735][ T9183] vol_type 1 [ 335.122593][ T9183] copy_flag 0 [ 335.133177][ T9183] compat 5 [ 335.142452][ T9183] vol_id 2147479551 [ 335.158548][ T9183] lnum 0 [ 335.173753][ T9183] data_size 0 [ 335.181094][ T9183] used_ebs 0 [ 335.187869][ T9183] data_pad 0 [ 335.198462][ T9183] sqnum 1 [ 335.220992][ T9183] hdr_crc 65b3bd2d [ 335.237714][ T9183] Volume identifier header hexdump: [ 335.400756][ T9183] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 335.770727][ T808] usb usb40-port5: attempt power cycle [ 336.080681][ T9206] FAULT_INJECTION: forcing a failure. [ 336.080681][ T9206] name fail_futex, interval 1, probability 0, space 0, times 1 [ 336.094077][ T9206] CPU: 0 UID: 0 PID: 9206 Comm: syz.3.747 Not tainted syzkaller #0 PREEMPT(full) [ 336.094123][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.094145][ T9206] Call Trace: [ 336.094155][ T9206] [ 336.094167][ T9206] dump_stack_lvl+0x100/0x190 [ 336.094210][ T9206] should_fail_ex.cold+0x5/0xa [ 336.094255][ T9206] get_futex_key+0x1d2/0x1510 [ 336.094295][ T9206] ? __pfx_get_futex_key+0x10/0x10 [ 336.094330][ T9206] ? do_mmap+0x93f/0x12f0 [ 336.094371][ T9206] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 336.094424][ T9206] futex_wake+0xea/0x530 [ 336.094472][ T9206] ? __pfx_futex_wake+0x10/0x10 [ 336.094535][ T9206] do_futex+0x32b/0x350 [ 336.094572][ T9206] ? __pfx_do_futex+0x10/0x10 [ 336.094613][ T9206] ? fput+0x79/0x100 [ 336.094662][ T9206] __x64_sys_futex+0x34f/0x4d0 [ 336.094702][ T9206] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 336.094744][ T9206] ? __pfx___x64_sys_futex+0x10/0x10 [ 336.094780][ T9206] ? ksys_write+0x1ac/0x250 [ 336.094825][ T9206] ? rcu_is_watching+0x12/0xc0 [ 336.094883][ T9206] do_syscall_64+0x10b/0xf80 [ 336.094937][ T9206] ? clear_bhb_loop+0x40/0x90 [ 336.094978][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.095011][ T9206] RIP: 0033:0x7ff9d199c819 [ 336.095039][ T9206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.095074][ T9206] RSP: 002b:00007ff9d290f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 336.095108][ T9206] RAX: ffffffffffffffda RBX: 00007ff9d1c15fa8 RCX: 00007ff9d199c819 [ 336.095130][ T9206] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff9d1c15fac [ 336.095152][ T9206] RBP: 00007ff9d1c15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 336.095173][ T9206] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 336.095199][ T9206] R13: 00007ff9d1c16038 R14: 00007ffec263b8f0 R15: 00007ffec263b9d8 [ 336.095244][ T9206] [ 336.563197][ T808] usb usb40-port5: unable to enumerate USB device [ 337.295424][ T9215] zswap: compressor not available [ 337.778805][ T9231] ima: policy update failed [ 337.817765][ T29] audit: type=1802 audit(1776939363.730:10): pid=9231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.751" res=0 errno=0 [ 340.270006][ T9260] futex_wake_op: syz.3.756 tries to shift op by -2048; fix this program [ 343.057247][ T9298] FAULT_INJECTION: forcing a failure. [ 343.057247][ T9298] name failslab, interval 1, probability 0, space 0, times 0 [ 343.095660][ T9298] CPU: 1 UID: 0 PID: 9298 Comm: syz.0.765 Not tainted syzkaller #0 PREEMPT(full) [ 343.095708][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.095730][ T9298] Call Trace: [ 343.095741][ T9298] [ 343.095754][ T9298] dump_stack_lvl+0x100/0x190 [ 343.095799][ T9298] should_fail_ex.cold+0x5/0xa [ 343.095843][ T9298] ? ima_alloc_init_template+0x19d/0x6d0 [ 343.095901][ T9298] should_failslab+0xc2/0x120 [ 343.095941][ T9298] __kmalloc_noprof+0xe0/0x850 [ 343.095996][ T9298] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 343.096059][ T9298] ima_alloc_init_template+0x19d/0x6d0 [ 343.096112][ T9298] ? take_dentry_name_snapshot+0x310/0x7c0 [ 343.096173][ T9298] ima_store_measurement+0x1e3/0x5b0 [ 343.096237][ T9298] ? __pfx_ima_store_measurement+0x10/0x10 [ 343.096311][ T9298] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 343.096363][ T9298] process_measurement+0x19cc/0x2350 [ 343.096422][ T9298] ? stack_trace_save+0x8e/0xc0 [ 343.096469][ T9298] ? __pfx_process_measurement+0x10/0x10 [ 343.096517][ T9298] ? __lock_acquire+0x4a5/0x2630 [ 343.096549][ T9298] ? __kasan_slab_alloc+0x89/0x90 [ 343.096583][ T9298] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 343.096638][ T9298] ? init_file+0x95/0x480 [ 343.096682][ T9298] ? alloc_empty_file+0x79/0x1c0 [ 343.096728][ T9298] ? alloc_file_pseudo+0x13a/0x230 [ 343.096776][ T9298] ? ksys_mmap_pgoff+0x242/0x610 [ 343.096814][ T9298] ? __x64_sys_mmap+0x125/0x190 [ 343.096848][ T9298] ? do_syscall_64+0x10b/0xf80 [ 343.096939][ T9298] ? __pfx_aa_file_perm+0x10/0x10 [ 343.096990][ T9298] ima_file_mmap+0x1c4/0x1f0 [ 343.097036][ T9298] ? __pfx_ima_file_mmap+0x10/0x10 [ 343.097091][ T9298] security_mmap_file+0x278/0x9b0 [ 343.097128][ T9298] vm_mmap_pgoff+0xec/0x470 [ 343.097176][ T9298] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 343.097226][ T9298] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 343.097277][ T9298] ? hugetlbfs_get_inode+0x3f5/0x700 [ 343.097343][ T9298] ksys_mmap_pgoff+0x285/0x610 [ 343.097385][ T9298] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 343.097426][ T9298] ? xfd_validate_state+0x129/0x190 [ 343.097459][ T9298] ? ksys_write+0x1ac/0x250 [ 343.097504][ T9298] __x64_sys_mmap+0x125/0x190 [ 343.097546][ T9298] do_syscall_64+0x10b/0xf80 [ 343.097594][ T9298] ? clear_bhb_loop+0x40/0x90 [ 343.097630][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.097660][ T9298] RIP: 0033:0x7fc818b9c819 [ 343.097687][ T9298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.097720][ T9298] RSP: 002b:00007fc819abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 343.097750][ T9298] RAX: ffffffffffffffda RBX: 00007fc818e15fa0 RCX: 00007fc818b9c819 [ 343.097772][ T9298] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 343.097791][ T9298] RBP: 00007fc818c32c91 R08: 0000000000000401 R09: 0000300000002000 [ 343.097810][ T9298] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000000 [ 343.097831][ T9298] R13: 00007fc818e16038 R14: 00007fc818e15fa0 R15: 00007ffc3fe60038 [ 343.097874][ T9298] [ 343.423205][ T29] audit: type=1804 audit(1776939369.330:11): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.765" name="anon_hugepage" dev="hugetlbfs" ino=27996 res=0 errno=0 [ 344.001013][ T9310] futex_wake_op: syz.0.766 tries to shift op by -2048; fix this program [ 345.053051][ T9317] futex_wake_op: syz.0.767 tries to shift op by -2048; fix this program [ 345.637384][ T9321] FAULT_INJECTION: forcing a failure. [ 345.637384][ T9321] name failslab, interval 1, probability 0, space 0, times 0 [ 345.701408][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.2.768 Not tainted syzkaller #0 PREEMPT(full) [ 345.701450][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.701469][ T9321] Call Trace: [ 345.701480][ T9321] [ 345.701492][ T9321] dump_stack_lvl+0x100/0x190 [ 345.701534][ T9321] should_fail_ex.cold+0x5/0xa [ 345.701576][ T9321] should_failslab+0xc2/0x120 [ 345.701614][ T9321] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 345.701647][ T9321] ? ima_collect_measurement+0x531/0xb30 [ 345.701703][ T9321] krealloc_node_align_noprof+0x30f/0x3e0 [ 345.701739][ T9321] ima_collect_measurement+0x531/0xb30 [ 345.701793][ T9321] ? __pfx_ima_collect_measurement+0x10/0x10 [ 345.701865][ T9321] ? process_measurement+0x5ab/0x2350 [ 345.701910][ T9321] ? is_bad_inode+0xd/0x40 [ 345.701942][ T9321] ? xattr_resolve_name+0x27d/0x3f0 [ 345.701985][ T9321] ? vfs_getxattr_alloc+0xec/0x350 [ 345.702040][ T9321] ? ima_get_hash_algo+0x22d/0x400 [ 345.702079][ T9321] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 345.702127][ T9321] ? process_measurement+0xdfe/0x2350 [ 345.702169][ T9321] process_measurement+0xdfe/0x2350 [ 345.702224][ T9321] ? stack_trace_save+0x8e/0xc0 [ 345.702269][ T9321] ? __pfx_process_measurement+0x10/0x10 [ 345.702311][ T9321] ? __lock_acquire+0x4a5/0x2630 [ 345.702341][ T9321] ? __kasan_slab_alloc+0x89/0x90 [ 345.702371][ T9321] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 345.702420][ T9321] ? init_file+0x95/0x480 [ 345.702459][ T9321] ? alloc_empty_file+0x79/0x1c0 [ 345.702504][ T9321] ? alloc_file_pseudo+0x13a/0x230 [ 345.702556][ T9321] ? ksys_mmap_pgoff+0x242/0x610 [ 345.702593][ T9321] ? __x64_sys_mmap+0x125/0x190 [ 345.702626][ T9321] ? do_syscall_64+0x10b/0xf80 [ 345.702715][ T9321] ? __pfx_aa_file_perm+0x10/0x10 [ 345.702766][ T9321] ima_file_mmap+0x1c4/0x1f0 [ 345.702812][ T9321] ? __pfx_ima_file_mmap+0x10/0x10 [ 345.702868][ T9321] security_mmap_file+0x278/0x9b0 [ 345.702903][ T9321] vm_mmap_pgoff+0xec/0x470 [ 345.702951][ T9321] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 345.702990][ T9321] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 345.703049][ T9321] ? hugetlbfs_get_inode+0x3f5/0x700 [ 345.703095][ T9321] ? __fget_files+0x215/0x3d0 [ 345.703142][ T9321] ksys_mmap_pgoff+0x285/0x610 [ 345.703185][ T9321] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 345.703222][ T9321] ? fput+0x79/0x100 [ 345.703266][ T9321] ? ksys_write+0x1ac/0x250 [ 345.703301][ T9321] ? __pfx_ksys_write+0x10/0x10 [ 345.703342][ T9321] __x64_sys_mmap+0x125/0x190 [ 345.703384][ T9321] do_syscall_64+0x10b/0xf80 [ 345.703441][ T9321] ? clear_bhb_loop+0x40/0x90 [ 345.703482][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.703517][ T9321] RIP: 0033:0x7fb33879c819 [ 345.703543][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.703574][ T9321] RSP: 002b:00007fb3395f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 345.703605][ T9321] RAX: ffffffffffffffda RBX: 00007fb338a15fa0 RCX: 00007fb33879c819 [ 345.703624][ T9321] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 345.703645][ T9321] RBP: 00007fb3395f5090 R08: 0000000000000401 R09: 0000300000000000 [ 345.703667][ T9321] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000002 [ 345.703687][ T9321] R13: 00007fb338a16038 R14: 00007fb338a15fa0 R15: 00007ffe0e40c428 [ 345.703732][ T9321] [ 346.237403][ T29] audit: type=1800 audit(1776939372.130:12): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.768" name="anon_hugepage" dev="hugetlbfs" ino=28017 res=0 errno=0 [ 347.815420][ T9353] sd 0:0:1:0: PR command failed: 1026 [ 347.853504][ T9353] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 347.883548][ T9353] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 348.372312][ T9365] FAULT_INJECTION: forcing a failure. [ 348.372312][ T9365] name failslab, interval 1, probability 0, space 0, times 0 [ 348.418589][ T9365] CPU: 0 UID: 0 PID: 9365 Comm: syz.3.781 Not tainted syzkaller #0 PREEMPT(full) [ 348.418632][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 348.418653][ T9365] Call Trace: [ 348.418663][ T9365] [ 348.418674][ T9365] dump_stack_lvl+0x100/0x190 [ 348.418716][ T9365] should_fail_ex.cold+0x5/0xa [ 348.418758][ T9365] should_failslab+0xc2/0x120 [ 348.418794][ T9365] __kmalloc_cache_noprof+0x7a/0x6f0 [ 348.418841][ T9365] ? ima_d_path+0xc9/0x260 [ 348.418891][ T9365] ? xattr_resolve_name+0x27d/0x3f0 [ 348.418933][ T9365] ima_d_path+0xc9/0x260 [ 348.418980][ T9365] ? __pfx_ima_d_path+0x10/0x10 [ 348.419035][ T9365] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 348.419086][ T9365] process_measurement+0x1b25/0x2350 [ 348.419141][ T9365] ? stack_trace_save+0x8e/0xc0 [ 348.419186][ T9365] ? __pfx_process_measurement+0x10/0x10 [ 348.419232][ T9365] ? __lock_acquire+0x4a5/0x2630 [ 348.419263][ T9365] ? __kasan_slab_alloc+0x89/0x90 [ 348.419295][ T9365] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 348.419347][ T9365] ? init_file+0x95/0x480 [ 348.419387][ T9365] ? alloc_empty_file+0x79/0x1c0 [ 348.419432][ T9365] ? alloc_file_pseudo+0x13a/0x230 [ 348.419478][ T9365] ? ksys_mmap_pgoff+0x242/0x610 [ 348.419518][ T9365] ? __x64_sys_mmap+0x125/0x190 [ 348.419542][ T9365] ? do_syscall_64+0x10b/0xf80 [ 348.419609][ T9365] ? __pfx_aa_file_perm+0x10/0x10 [ 348.419644][ T9365] ima_file_mmap+0x1c4/0x1f0 [ 348.419677][ T9365] ? __pfx_ima_file_mmap+0x10/0x10 [ 348.419715][ T9365] security_mmap_file+0x278/0x9b0 [ 348.419740][ T9365] vm_mmap_pgoff+0xec/0x470 [ 348.419774][ T9365] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 348.419803][ T9365] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 348.419839][ T9365] ? hugetlbfs_get_inode+0x3f5/0x700 [ 348.419871][ T9365] ? __fget_files+0x215/0x3d0 [ 348.419904][ T9365] ksys_mmap_pgoff+0x285/0x610 [ 348.419935][ T9365] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 348.419961][ T9365] ? fput+0x79/0x100 [ 348.419991][ T9365] ? ksys_write+0x1ac/0x250 [ 348.420016][ T9365] ? __pfx_ksys_write+0x10/0x10 [ 348.420045][ T9365] __x64_sys_mmap+0x125/0x190 [ 348.420072][ T9365] do_syscall_64+0x10b/0xf80 [ 348.420107][ T9365] ? clear_bhb_loop+0x40/0x90 [ 348.420136][ T9365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.420159][ T9365] RIP: 0033:0x7ff9d199c819 [ 348.420179][ T9365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.420202][ T9365] RSP: 002b:00007ff9d290f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 348.420225][ T9365] RAX: ffffffffffffffda RBX: 00007ff9d1c15fa0 RCX: 00007ff9d199c819 [ 348.420241][ T9365] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 348.420255][ T9365] RBP: 00007ff9d290f090 R08: 0000000000000401 R09: 0000300000000000 [ 348.420269][ T9365] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000002 [ 348.420283][ T9365] R13: 00007ff9d1c16038 R14: 00007ff9d1c15fa0 R15: 00007ffec263b9d8 [ 348.420313][ T9365] [ 349.356451][ T9369] bridge0: port 3(veth1_macvtap) entered blocking state [ 349.408711][ T9369] bridge0: port 3(veth1_macvtap) entered disabled state [ 349.438834][ T9369] veth1_macvtap: entered allmulticast mode [ 349.466752][ T9369] veth1_macvtap: left allmulticast mode [ 349.768716][ T9380] netlink: 342 bytes leftover after parsing attributes in process `syz.0.784'. [ 351.743200][ T9404] futex_wake_op: syz.3.791 tries to shift op by -2048; fix this program [ 353.016752][ T9415] netlink: 'syz.2.790': attribute type 11 has an invalid length. [ 353.103369][ T9415] FAULT_INJECTION: forcing a failure. [ 353.103369][ T9415] name fail_futex, interval 1, probability 0, space 0, times 0 [ 353.163820][ T9415] CPU: 0 UID: 0 PID: 9415 Comm: syz.2.790 Not tainted syzkaller #0 PREEMPT(full) [ 353.163870][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.163891][ T9415] Call Trace: [ 353.163902][ T9415] [ 353.163915][ T9415] dump_stack_lvl+0x100/0x190 [ 353.163961][ T9415] should_fail_ex.cold+0x5/0xa [ 353.164006][ T9415] get_futex_key+0x1d2/0x1510 [ 353.164046][ T9415] ? __pfx_get_futex_key+0x10/0x10 [ 353.164104][ T9415] futex_wait_setup+0x83/0x510 [ 353.164163][ T9415] __futex_wait+0x19f/0x300 [ 353.164212][ T9415] ? __pfx___futex_wait+0x10/0x10 [ 353.164266][ T9415] ? __pfx_futex_wake_mark+0x10/0x10 [ 353.164318][ T9415] ? futex_hash+0x2ad/0x370 [ 353.164353][ T9415] ? futex_hash+0x141/0x370 [ 353.164391][ T9415] futex_wait+0xe6/0x370 [ 353.164437][ T9415] ? __pfx_futex_wait+0x10/0x10 [ 353.164494][ T9415] ? do_vfs_ioctl+0x226/0x13e0 [ 353.164531][ T9415] do_futex+0x1ef/0x350 [ 353.164569][ T9415] ? __pfx_do_futex+0x10/0x10 [ 353.164607][ T9415] ? find_held_lock+0x2b/0x80 [ 353.164659][ T9415] __x64_sys_futex+0x34f/0x4d0 [ 353.164699][ T9415] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.164747][ T9415] ? __pfx___x64_sys_futex+0x10/0x10 [ 353.164786][ T9415] ? pipe_ioctl+0x226/0x2c0 [ 353.164827][ T9415] ? rcu_is_watching+0x12/0xc0 [ 353.164873][ T9415] do_syscall_64+0x10b/0xf80 [ 353.164927][ T9415] ? clear_bhb_loop+0x40/0x90 [ 353.164970][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.165006][ T9415] RIP: 0033:0x7fb33879c819 [ 353.165035][ T9415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.165069][ T9415] RSP: 002b:00007fb3395f50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 353.165114][ T9415] RAX: ffffffffffffffda RBX: 00007fb338a15fa8 RCX: 00007fb33879c819 [ 353.165138][ T9415] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb338a15fa8 [ 353.165158][ T9415] RBP: 00007fb338a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 353.165182][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.165202][ T9415] R13: 00007fb338a16038 R14: 00007ffe0e40c340 R15: 00007ffe0e40c428 [ 353.165246][ T9415] [ 355.252819][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 355.625744][ T9467] FAULT_INJECTION: forcing a failure. [ 355.625744][ T9467] name failslab, interval 1, probability 0, space 0, times 0 [ 355.659582][ T9467] CPU: 0 UID: 0 PID: 9467 Comm: syz.3.807 Not tainted syzkaller #0 PREEMPT(full) [ 355.659630][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.659651][ T9467] Call Trace: [ 355.659662][ T9467] [ 355.659676][ T9467] dump_stack_lvl+0x100/0x190 [ 355.659720][ T9467] should_fail_ex.cold+0x5/0xa [ 355.659766][ T9467] should_failslab+0xc2/0x120 [ 355.659808][ T9467] __kmalloc_cache_noprof+0x7a/0x6f0 [ 355.659879][ T9467] ? ima_d_path+0xc9/0x260 [ 355.659930][ T9467] ? xattr_resolve_name+0x27d/0x3f0 [ 355.659978][ T9467] ima_d_path+0xc9/0x260 [ 355.660030][ T9467] ? __pfx_ima_d_path+0x10/0x10 [ 355.660089][ T9467] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 355.660150][ T9467] process_measurement+0x1b25/0x2350 [ 355.660210][ T9467] ? stack_trace_save+0x8e/0xc0 [ 355.660260][ T9467] ? __pfx_process_measurement+0x10/0x10 [ 355.660310][ T9467] ? __lock_acquire+0x4a5/0x2630 [ 355.660343][ T9467] ? __kasan_slab_alloc+0x89/0x90 [ 355.660378][ T9467] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 355.660433][ T9467] ? init_file+0x95/0x480 [ 355.660476][ T9467] ? alloc_empty_file+0x79/0x1c0 [ 355.660523][ T9467] ? alloc_file_pseudo+0x13a/0x230 [ 355.660573][ T9467] ? ksys_mmap_pgoff+0x242/0x610 [ 355.660611][ T9467] ? __x64_sys_mmap+0x125/0x190 [ 355.660647][ T9467] ? do_syscall_64+0x10b/0xf80 [ 355.660738][ T9467] ? __pfx_aa_file_perm+0x10/0x10 [ 355.660793][ T9467] ima_file_mmap+0x1c4/0x1f0 [ 355.660841][ T9467] ? __pfx_ima_file_mmap+0x10/0x10 [ 355.660900][ T9467] security_mmap_file+0x278/0x9b0 [ 355.660937][ T9467] vm_mmap_pgoff+0xec/0x470 [ 355.660986][ T9467] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 355.661027][ T9467] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 355.661082][ T9467] ? hugetlbfs_get_inode+0x3f5/0x700 [ 355.661152][ T9467] ksys_mmap_pgoff+0x285/0x610 [ 355.661199][ T9467] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 355.661246][ T9467] ? xfd_validate_state+0x129/0x190 [ 355.661282][ T9467] ? ksys_write+0x1ac/0x250 [ 355.661327][ T9467] __x64_sys_mmap+0x125/0x190 [ 355.661370][ T9467] do_syscall_64+0x10b/0xf80 [ 355.661421][ T9467] ? clear_bhb_loop+0x40/0x90 [ 355.661464][ T9467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.661501][ T9467] RIP: 0033:0x7ff9d199c819 [ 355.661530][ T9467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.661565][ T9467] RSP: 002b:00007ff9d290f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 355.661598][ T9467] RAX: ffffffffffffffda RBX: 00007ff9d1c15fa0 RCX: 00007ff9d199c819 [ 355.661622][ T9467] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 355.661643][ T9467] RBP: 00007ff9d1a32c91 R08: 0000000000000401 R09: 0000300000000000 [ 355.661665][ T9467] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000000 [ 355.661686][ T9467] R13: 00007ff9d1c16038 R14: 00007ff9d1c15fa0 R15: 00007ffec263b9d8 [ 355.661730][ T9467] [ 356.941926][ T9484] FAULT_INJECTION: forcing a failure. [ 356.941926][ T9484] name fail_futex, interval 1, probability 0, space 0, times 0 [ 356.973752][ T9484] CPU: 1 UID: 0 PID: 9484 Comm: syz.1.811 Not tainted syzkaller #0 PREEMPT(full) [ 356.973807][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 356.973827][ T9484] Call Trace: [ 356.973837][ T9484] [ 356.973850][ T9484] dump_stack_lvl+0x100/0x190 [ 356.973895][ T9484] should_fail_ex.cold+0x5/0xa [ 356.973940][ T9484] get_futex_key+0x1d2/0x1510 [ 356.973980][ T9484] ? __pfx_get_futex_key+0x10/0x10 [ 356.974022][ T9484] ? do_mmap+0x93f/0x12f0 [ 356.974064][ T9484] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 356.974115][ T9484] futex_wake+0xea/0x530 [ 356.974166][ T9484] ? __pfx_futex_wake+0x10/0x10 [ 356.974229][ T9484] do_futex+0x32b/0x350 [ 356.974265][ T9484] ? __pfx_do_futex+0x10/0x10 [ 356.974304][ T9484] ? fput+0x79/0x100 [ 356.974353][ T9484] __x64_sys_futex+0x34f/0x4d0 [ 356.974389][ T9484] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 356.974427][ T9484] ? __pfx___x64_sys_futex+0x10/0x10 [ 356.974463][ T9484] ? ksys_write+0x1ac/0x250 [ 356.974504][ T9484] ? rcu_is_watching+0x12/0xc0 [ 356.974552][ T9484] do_syscall_64+0x10b/0xf80 [ 356.974606][ T9484] ? clear_bhb_loop+0x40/0x90 [ 356.974649][ T9484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.974685][ T9484] RIP: 0033:0x7f8c7d99c819 [ 356.974714][ T9484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.974748][ T9484] RSP: 002b:00007f8c7e9110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 356.974781][ T9484] RAX: ffffffffffffffda RBX: 00007f8c7dc15fa8 RCX: 00007f8c7d99c819 [ 356.974804][ T9484] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8c7dc15fac [ 356.974826][ T9484] RBP: 00007f8c7dc15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 356.974847][ T9484] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 356.974868][ T9484] R13: 00007f8c7dc16038 R14: 00007fff5a3846c0 R15: 00007fff5a3847a8 [ 356.974913][ T9484] [ 357.744723][ T29] audit: type=1804 audit(1776939383.658:13): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.815" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=29 res=1 errno=0 [ 360.445518][ T9533] random: crng reseeded on system resumption [ 360.884582][ T9549] udc dummy_udc.0: soft-connect without a gadget driver [ 362.156717][ T9563] FAULT_INJECTION: forcing a failure. [ 362.156717][ T9563] name fail_futex, interval 1, probability 0, space 0, times 0 [ 362.208796][ T9563] CPU: 1 UID: 0 PID: 9563 Comm: syz.0.830 Not tainted syzkaller #0 PREEMPT(full) [ 362.208844][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 362.208866][ T9563] Call Trace: [ 362.208882][ T9563] [ 362.208893][ T9563] dump_stack_lvl+0x100/0x190 [ 362.208936][ T9563] should_fail_ex.cold+0x5/0xa [ 362.208978][ T9563] get_futex_key+0x1d2/0x1510 [ 362.209017][ T9563] ? __pfx_get_futex_key+0x10/0x10 [ 362.209050][ T9563] ? do_anonymous_page+0x9cc/0x2050 [ 362.209114][ T9563] futex_wake+0xea/0x530 [ 362.209156][ T9563] ? __handle_mm_fault+0x4ef/0x2a00 [ 362.209210][ T9563] ? __pfx_futex_wake+0x10/0x10 [ 362.209253][ T9563] ? __lock_acquire+0x4a5/0x2630 [ 362.209287][ T9563] ? __pfx___handle_mm_fault+0x10/0x10 [ 362.209339][ T9563] ? __pfx_css_rstat_updated+0x10/0x10 [ 362.209413][ T9563] do_futex+0x32b/0x350 [ 362.209450][ T9563] ? __pfx_do_futex+0x10/0x10 [ 362.209484][ T9563] ? find_held_lock+0x2b/0x80 [ 362.209528][ T9563] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 362.209569][ T9563] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 362.209617][ T9563] __x64_sys_futex+0x34f/0x4d0 [ 362.209663][ T9563] ? __pfx___x64_sys_futex+0x10/0x10 [ 362.209705][ T9563] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 362.209761][ T9563] ? syscall_user_dispatch+0x76/0x130 [ 362.209805][ T9563] do_syscall_64+0x10b/0xf80 [ 362.209859][ T9563] ? clear_bhb_loop+0x40/0x90 [ 362.209903][ T9563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.209938][ T9563] RIP: 0033:0x7fc818b9c819 [ 362.209966][ T9563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.210000][ T9563] RSP: 002b:00007fc819a9a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 362.210033][ T9563] RAX: ffffffffffffffda RBX: 00007fc818e16098 RCX: 00007fc818b9c819 [ 362.210056][ T9563] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc818e1609c [ 362.210078][ T9563] RBP: 00007fc818e16090 R08: 0000000000000001 R09: 0000000000000000 [ 362.210099][ T9563] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 362.210120][ T9563] R13: 00007fc818e16128 R14: 00007ffc3fe5ff50 R15: 00007ffc3fe60038 [ 362.210164][ T9563] [ 362.571423][ T9563] zram: Added device: zram1 [ 363.149547][ T9577] futex_wake_op: syz.1.833 tries to shift op by -2048; fix this program [ 366.019203][ T9629] FAULT_INJECTION: forcing a failure. [ 366.019203][ T9629] name failslab, interval 1, probability 0, space 0, times 0 [ 366.053138][ T9629] CPU: 1 UID: 0 PID: 9629 Comm: syz.1.845 Not tainted syzkaller #0 PREEMPT(full) [ 366.053186][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.053206][ T9629] Call Trace: [ 366.053218][ T9629] [ 366.053240][ T9629] dump_stack_lvl+0x100/0x190 [ 366.053287][ T9629] should_fail_ex.cold+0x5/0xa [ 366.053331][ T9629] ? ima_alloc_init_template+0x19d/0x6d0 [ 366.053384][ T9629] should_failslab+0xc2/0x120 [ 366.053422][ T9629] __kmalloc_noprof+0xe0/0x850 [ 366.053476][ T9629] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 366.053539][ T9629] ima_alloc_init_template+0x19d/0x6d0 [ 366.053593][ T9629] ? take_dentry_name_snapshot+0x310/0x7c0 [ 366.053660][ T9629] ima_store_measurement+0x1e3/0x5b0 [ 366.053716][ T9629] ? __pfx_ima_store_measurement+0x10/0x10 [ 366.053786][ T9629] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 366.053839][ T9629] process_measurement+0x19cc/0x2350 [ 366.053900][ T9629] ? stack_trace_save+0x8e/0xc0 [ 366.053955][ T9629] ? __pfx_process_measurement+0x10/0x10 [ 366.054004][ T9629] ? __lock_acquire+0x4a5/0x2630 [ 366.054036][ T9629] ? __kasan_slab_alloc+0x89/0x90 [ 366.054071][ T9629] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 366.054127][ T9629] ? init_file+0x95/0x480 [ 366.054172][ T9629] ? alloc_empty_file+0x79/0x1c0 [ 366.054219][ T9629] ? alloc_file_pseudo+0x13a/0x230 [ 366.054277][ T9629] ? ksys_mmap_pgoff+0x242/0x610 [ 366.054316][ T9629] ? __x64_sys_mmap+0x125/0x190 [ 366.054352][ T9629] ? do_syscall_64+0x10b/0xf80 [ 366.054446][ T9629] ? __pfx_aa_file_perm+0x10/0x10 [ 366.054497][ T9629] ima_file_mmap+0x1c4/0x1f0 [ 366.054545][ T9629] ? __pfx_ima_file_mmap+0x10/0x10 [ 366.054601][ T9629] security_mmap_file+0x278/0x9b0 [ 366.054636][ T9629] vm_mmap_pgoff+0xec/0x470 [ 366.054685][ T9629] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 366.054725][ T9629] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 366.054778][ T9629] ? hugetlbfs_get_inode+0x3f5/0x700 [ 366.054839][ T9629] ksys_mmap_pgoff+0x285/0x610 [ 366.054881][ T9629] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 366.054921][ T9629] ? xfd_validate_state+0x129/0x190 [ 366.054954][ T9629] ? ksys_write+0x1ac/0x250 [ 366.054995][ T9629] __x64_sys_mmap+0x125/0x190 [ 366.055032][ T9629] do_syscall_64+0x10b/0xf80 [ 366.055084][ T9629] ? clear_bhb_loop+0x40/0x90 [ 366.055129][ T9629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.055163][ T9629] RIP: 0033:0x7f8c7d99c819 [ 366.055192][ T9629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.055225][ T9629] RSP: 002b:00007f8c7e8f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 366.055266][ T9629] RAX: ffffffffffffffda RBX: 00007f8c7dc16090 RCX: 00007f8c7d99c819 [ 366.055287][ T9629] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 366.055308][ T9629] RBP: 00007f8c7da32c91 R08: 0000000000000401 R09: 0000300000000000 [ 366.055330][ T9629] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000000 [ 366.055350][ T9629] R13: 00007f8c7dc16128 R14: 00007f8c7dc16090 R15: 00007fff5a3847a8 [ 366.055393][ T9629] [ 366.365146][ T29] audit: type=1804 audit(1776939392.278:14): pid=9629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.845" name="anon_hugepage" dev="hugetlbfs" ino=29139 res=0 errno=0 [ 366.920022][ T9641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.848'. [ 366.951226][ T9642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.848'. [ 367.422124][ T29] audit: type=1800 audit(1776939393.338:15): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.851" name="dummy_udc" dev="gadgetfs" ino=6087 res=0 errno=0 [ 368.155391][ T9658] FAULT_INJECTION: forcing a failure. [ 368.155391][ T9658] name failslab, interval 1, probability 0, space 0, times 0 [ 368.173128][ T9658] CPU: 1 UID: 0 PID: 9658 Comm: syz.2.854 Not tainted syzkaller #0 PREEMPT(full) [ 368.173286][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 368.173308][ T9658] Call Trace: [ 368.173322][ T9658] [ 368.173336][ T9658] dump_stack_lvl+0x100/0x190 [ 368.173385][ T9658] should_fail_ex.cold+0x5/0xa [ 368.173429][ T9658] ? ima_alloc_init_template+0x19d/0x6d0 [ 368.173480][ T9658] should_failslab+0xc2/0x120 [ 368.173522][ T9658] __kmalloc_noprof+0xe0/0x850 [ 368.173578][ T9658] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 368.173642][ T9658] ima_alloc_init_template+0x19d/0x6d0 [ 368.173696][ T9658] ? take_dentry_name_snapshot+0x310/0x7c0 [ 368.173758][ T9658] ima_store_measurement+0x1e3/0x5b0 [ 368.173815][ T9658] ? __pfx_ima_store_measurement+0x10/0x10 [ 368.173883][ T9658] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 368.173935][ T9658] process_measurement+0x19cc/0x2350 [ 368.173997][ T9658] ? stack_trace_save+0x8e/0xc0 [ 368.174048][ T9658] ? __pfx_process_measurement+0x10/0x10 [ 368.174115][ T9658] ? __lock_acquire+0x4a5/0x2630 [ 368.174148][ T9658] ? __kasan_slab_alloc+0x89/0x90 [ 368.174184][ T9658] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 368.174241][ T9658] ? init_file+0x95/0x480 [ 368.174286][ T9658] ? alloc_empty_file+0x79/0x1c0 [ 368.174335][ T9658] ? alloc_file_pseudo+0x13a/0x230 [ 368.174386][ T9658] ? ksys_mmap_pgoff+0x242/0x610 [ 368.174425][ T9658] ? __x64_sys_mmap+0x125/0x190 [ 368.174462][ T9658] ? do_syscall_64+0x10b/0xf80 [ 368.174554][ T9658] ? __pfx_aa_file_perm+0x10/0x10 [ 368.174609][ T9658] ima_file_mmap+0x1c4/0x1f0 [ 368.174658][ T9658] ? __pfx_ima_file_mmap+0x10/0x10 [ 368.174717][ T9658] security_mmap_file+0x278/0x9b0 [ 368.174755][ T9658] vm_mmap_pgoff+0xec/0x470 [ 368.174805][ T9658] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 368.174846][ T9658] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 368.174901][ T9658] ? hugetlbfs_get_inode+0x3f5/0x700 [ 368.174964][ T9658] ksys_mmap_pgoff+0x285/0x610 [ 368.175011][ T9658] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 368.175052][ T9658] ? xfd_validate_state+0x129/0x190 [ 368.175086][ T9658] ? ksys_write+0x1ac/0x250 [ 368.175156][ T9658] __x64_sys_mmap+0x125/0x190 [ 368.175199][ T9658] do_syscall_64+0x10b/0xf80 [ 368.175251][ T9658] ? clear_bhb_loop+0x40/0x90 [ 368.175295][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.175332][ T9658] RIP: 0033:0x7fb33879c819 [ 368.175362][ T9658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.175398][ T9658] RSP: 002b:00007fb3395f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 368.175432][ T9658] RAX: ffffffffffffffda RBX: 00007fb338a15fa0 RCX: 00007fb33879c819 [ 368.175455][ T9658] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 368.175477][ T9658] RBP: 00007fb338832c91 R08: 0000000000000401 R09: 0000300007000000 [ 368.175499][ T9658] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000000 [ 368.175520][ T9658] R13: 00007fb338a16038 R14: 00007fb338a15fa0 R15: 00007ffe0e40c428 [ 368.175565][ T9658] [ 368.562391][ T29] audit: type=1804 audit(1776939394.468:16): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.854" name="anon_hugepage" dev="hugetlbfs" ino=30334 res=0 errno=0 [ 371.974871][ T9693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.309618][ T9693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.579651][ T9693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.806120][ T9693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.557911][ T9737] bridge0: port 3(gretap0) entered blocking state [ 374.571832][ T9737] bridge0: port 3(gretap0) entered disabled state [ 374.612753][ T9737] gretap0: entered allmulticast mode [ 374.743813][ T9737] gretap0: entered promiscuous mode [ 374.759732][ T9737] bridge0: port 3(gretap0) entered blocking state [ 374.767839][ T9737] bridge0: port 3(gretap0) entered forwarding state [ 375.480382][ T9761] FAULT_INJECTION: forcing a failure. [ 375.480382][ T9761] name failslab, interval 1, probability 0, space 0, times 0 [ 375.514536][ T9761] CPU: 0 UID: 0 PID: 9761 Comm: syz.2.879 Not tainted syzkaller #0 PREEMPT(full) [ 375.514582][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.514603][ T9761] Call Trace: [ 375.514615][ T9761] [ 375.514628][ T9761] dump_stack_lvl+0x100/0x190 [ 375.514671][ T9761] should_fail_ex.cold+0x5/0xa [ 375.514715][ T9761] ? ima_alloc_init_template+0xb6/0x6d0 [ 375.514767][ T9761] should_failslab+0xc2/0x120 [ 375.514808][ T9761] __kmalloc_noprof+0xe0/0x850 [ 375.514863][ T9761] ? find_held_lock+0x2b/0x80 [ 375.514908][ T9761] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 375.514972][ T9761] ima_alloc_init_template+0xb6/0x6d0 [ 375.515025][ T9761] ? take_dentry_name_snapshot+0x310/0x7c0 [ 375.515092][ T9761] ima_store_measurement+0x1e3/0x5b0 [ 375.515150][ T9761] ? __pfx_ima_store_measurement+0x10/0x10 [ 375.515229][ T9761] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 375.515283][ T9761] process_measurement+0x19cc/0x2350 [ 375.515344][ T9761] ? stack_trace_save+0x8e/0xc0 [ 375.515393][ T9761] ? __pfx_process_measurement+0x10/0x10 [ 375.515444][ T9761] ? __lock_acquire+0x4a5/0x2630 [ 375.515476][ T9761] ? __kasan_slab_alloc+0x89/0x90 [ 375.515511][ T9761] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 375.515567][ T9761] ? init_file+0x95/0x480 [ 375.515612][ T9761] ? alloc_empty_file+0x79/0x1c0 [ 375.515660][ T9761] ? alloc_file_pseudo+0x13a/0x230 [ 375.515710][ T9761] ? ksys_mmap_pgoff+0x242/0x610 [ 375.515749][ T9761] ? __x64_sys_mmap+0x125/0x190 [ 375.515791][ T9761] ? do_syscall_64+0x10b/0xf80 [ 375.515884][ T9761] ? __pfx_aa_file_perm+0x10/0x10 [ 375.515938][ T9761] ima_file_mmap+0x1c4/0x1f0 [ 375.515987][ T9761] ? __pfx_ima_file_mmap+0x10/0x10 [ 375.516045][ T9761] security_mmap_file+0x278/0x9b0 [ 375.516083][ T9761] vm_mmap_pgoff+0xec/0x470 [ 375.516131][ T9761] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 375.516180][ T9761] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 375.516235][ T9761] ? hugetlbfs_get_inode+0x3f5/0x700 [ 375.516297][ T9761] ksys_mmap_pgoff+0x285/0x610 [ 375.516344][ T9761] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 375.516385][ T9761] ? xfd_validate_state+0x129/0x190 [ 375.516420][ T9761] ? ksys_write+0x1ac/0x250 [ 375.516466][ T9761] __x64_sys_mmap+0x125/0x190 [ 375.516508][ T9761] do_syscall_64+0x10b/0xf80 [ 375.516561][ T9761] ? clear_bhb_loop+0x40/0x90 [ 375.516604][ T9761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.516640][ T9761] RIP: 0033:0x7fb33879c819 [ 375.516669][ T9761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.516704][ T9761] RSP: 002b:00007fb3395f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 375.516738][ T9761] RAX: ffffffffffffffda RBX: 00007fb338a15fa0 RCX: 00007fb33879c819 [ 375.516760][ T9761] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 375.516781][ T9761] RBP: 00007fb338832c91 R08: 0000000000000401 R09: 0000300000000000 [ 375.516802][ T9761] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000000 [ 375.516823][ T9761] R13: 00007fb338a16038 R14: 00007fb338a15fa0 R15: 00007ffe0e40c428 [ 375.516868][ T9761] [ 375.518764][ T29] audit: type=1804 audit(1776939401.428:17): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.879" name="anon_hugepage" dev="hugetlbfs" ino=30760 res=0 errno=0 [ 379.001493][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.007919][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.864265][ T9803] ptp ptp0: only physical clock in use now [ 379.888063][ T9802] ptp ptp0: only physical clock in use now [ 380.224536][ T9805] FAULT_INJECTION: forcing a failure. [ 380.224536][ T9805] name fail_futex, interval 1, probability 0, space 0, times 0 [ 380.259905][ T9805] CPU: 1 UID: 0 PID: 9805 Comm: syz.1.888 Not tainted syzkaller #0 PREEMPT(full) [ 380.259955][ T9805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.259977][ T9805] Call Trace: [ 380.259989][ T9805] [ 380.260003][ T9805] dump_stack_lvl+0x100/0x190 [ 380.260047][ T9805] should_fail_ex.cold+0x5/0xa [ 380.260092][ T9805] get_futex_key+0x1d2/0x1510 [ 380.260132][ T9805] ? __pfx_get_futex_key+0x10/0x10 [ 380.260162][ T9805] ? __lru_add_drain_all+0x441/0x650 [ 380.260208][ T9805] ? invalidate_bdev+0x92/0xb0 [ 380.260262][ T9805] futex_wake+0xea/0x530 [ 380.260309][ T9805] ? __pfx_futex_wake+0x10/0x10 [ 380.260362][ T9805] ? do_vfs_ioctl+0x226/0x13e0 [ 380.260399][ T9805] do_futex+0x32b/0x350 [ 380.260437][ T9805] ? __pfx_do_futex+0x10/0x10 [ 380.260476][ T9805] ? find_held_lock+0x2b/0x80 [ 380.260532][ T9805] __x64_sys_futex+0x34f/0x4d0 [ 380.260575][ T9805] ? __pfx___x64_sys_futex+0x10/0x10 [ 380.260620][ T9805] ? rcu_is_watching+0x12/0xc0 [ 380.260667][ T9805] do_syscall_64+0x10b/0xf80 [ 380.260719][ T9805] ? clear_bhb_loop+0x40/0x90 [ 380.260762][ T9805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.260804][ T9805] RIP: 0033:0x7f8c7d99c819 [ 380.260833][ T9805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.260868][ T9805] RSP: 002b:00007f8c7e9110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 380.260901][ T9805] RAX: ffffffffffffffda RBX: 00007f8c7dc15fa8 RCX: 00007f8c7d99c819 [ 380.260925][ T9805] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8c7dc15fac [ 380.260946][ T9805] RBP: 00007f8c7dc15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 380.260966][ T9805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.260986][ T9805] R13: 00007f8c7dc16038 R14: 00007fff5a3846c0 R15: 00007fff5a3847a8 [ 380.261027][ T9805] [ 380.760569][ T9821] process 'syz.1.891' launched ':,' with NULL argv: empty string added [ 381.821545][ T9839] zswap: compressor -2 not available [ 381.969150][ T9848] FAULT_INJECTION: forcing a failure. [ 381.969150][ T9848] name failslab, interval 1, probability 0, space 0, times 0 [ 382.003196][ T9848] CPU: 0 UID: 0 PID: 9848 Comm: syz.3.896 Not tainted syzkaller #0 PREEMPT(full) [ 382.003231][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.003247][ T9848] Call Trace: [ 382.003255][ T9848] [ 382.003264][ T9848] dump_stack_lvl+0x100/0x190 [ 382.003295][ T9848] should_fail_ex.cold+0x5/0xa [ 382.003328][ T9848] should_failslab+0xc2/0x120 [ 382.003357][ T9848] __kmalloc_cache_noprof+0x7a/0x6f0 [ 382.003393][ T9848] ? ima_d_path+0xc9/0x260 [ 382.003429][ T9848] ? xattr_resolve_name+0x27d/0x3f0 [ 382.003462][ T9848] ima_d_path+0xc9/0x260 [ 382.003499][ T9848] ? __pfx_ima_d_path+0x10/0x10 [ 382.003540][ T9848] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 382.003577][ T9848] process_measurement+0x1b25/0x2350 [ 382.003618][ T9848] ? stack_trace_save+0x8e/0xc0 [ 382.003653][ T9848] ? __pfx_process_measurement+0x10/0x10 [ 382.003688][ T9848] ? __lock_acquire+0x4a5/0x2630 [ 382.003713][ T9848] ? __kasan_slab_alloc+0x89/0x90 [ 382.003737][ T9848] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 382.003777][ T9848] ? init_file+0x95/0x480 [ 382.003808][ T9848] ? alloc_empty_file+0x79/0x1c0 [ 382.003843][ T9848] ? alloc_file_pseudo+0x13a/0x230 [ 382.003878][ T9848] ? ksys_mmap_pgoff+0x242/0x610 [ 382.003905][ T9848] ? __x64_sys_mmap+0x125/0x190 [ 382.003932][ T9848] ? do_syscall_64+0x10b/0xf80 [ 382.004008][ T9848] ? __pfx_aa_file_perm+0x10/0x10 [ 382.004046][ T9848] ima_file_mmap+0x1c4/0x1f0 [ 382.004081][ T9848] ? __pfx_ima_file_mmap+0x10/0x10 [ 382.004122][ T9848] security_mmap_file+0x278/0x9b0 [ 382.004148][ T9848] vm_mmap_pgoff+0xec/0x470 [ 382.004182][ T9848] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 382.004212][ T9848] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 382.004250][ T9848] ? hugetlbfs_get_inode+0x3f5/0x700 [ 382.004294][ T9848] ksys_mmap_pgoff+0x285/0x610 [ 382.004326][ T9848] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 382.004356][ T9848] ? xfd_validate_state+0x129/0x190 [ 382.004380][ T9848] ? ksys_write+0x1ac/0x250 [ 382.004412][ T9848] __x64_sys_mmap+0x125/0x190 [ 382.004442][ T9848] do_syscall_64+0x10b/0xf80 [ 382.004479][ T9848] ? clear_bhb_loop+0x40/0x90 [ 382.004509][ T9848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.004565][ T9848] RIP: 0033:0x7ff9d199c819 [ 382.004595][ T9848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.004620][ T9848] RSP: 002b:00007ff9d290f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 382.004644][ T9848] RAX: ffffffffffffffda RBX: 00007ff9d1c15fa0 RCX: 00007ff9d199c819 [ 382.004660][ T9848] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 382.004675][ T9848] RBP: 00007ff9d1a32c91 R08: 0000000000000401 R09: 0000300000000000 [ 382.004691][ T9848] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000000 [ 382.004707][ T9848] R13: 00007ff9d1c16038 R14: 00007ff9d1c15fa0 R15: 00007ffec263b9d8 [ 382.004739][ T9848] [ 383.583710][ T9872] FAULT_INJECTION: forcing a failure. [ 383.583710][ T9872] name failslab, interval 1, probability 0, space 0, times 0 [ 383.640930][ T9872] CPU: 0 UID: 0 PID: 9872 Comm: syz.1.901 Not tainted syzkaller #0 PREEMPT(full) [ 383.640972][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 383.640991][ T9872] Call Trace: [ 383.641001][ T9872] [ 383.641013][ T9872] dump_stack_lvl+0x100/0x190 [ 383.641053][ T9872] should_fail_ex.cold+0x5/0xa [ 383.641094][ T9872] ? sk_prot_alloc+0x10b/0x2a0 [ 383.641134][ T9872] should_failslab+0xc2/0x120 [ 383.641172][ T9872] __kmalloc_noprof+0xe0/0x850 [ 383.641232][ T9872] sk_prot_alloc+0x10b/0x2a0 [ 383.641276][ T9872] sk_alloc+0x36/0xe80 [ 383.641309][ T9872] __netlink_create+0x5e/0x2c0 [ 383.641341][ T9872] ? __wake_up+0x3f/0x60 [ 383.641391][ T9872] netlink_create+0x298/0x610 [ 383.641427][ T9872] ? __pfx_genl_bind+0x10/0x10 [ 383.641471][ T9872] ? __pfx_genl_unbind+0x10/0x10 [ 383.641513][ T9872] ? __pfx_genl_release+0x10/0x10 [ 383.641563][ T9872] __sock_create+0x339/0x860 [ 383.641616][ T9872] __sys_socket+0x14d/0x260 [ 383.641660][ T9872] ? exc_page_fault+0x6f/0xd0 [ 383.641708][ T9872] ? __pfx___sys_socket+0x10/0x10 [ 383.641778][ T9872] __x64_sys_socket+0x72/0xb0 [ 383.641823][ T9872] ? lockdep_hardirqs_on+0x78/0x100 [ 383.641873][ T9872] do_syscall_64+0x10b/0xf80 [ 383.641921][ T9872] ? clear_bhb_loop+0x40/0x90 [ 383.641961][ T9872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.641996][ T9872] RIP: 0033:0x7f8c7d99e087 [ 383.642022][ T9872] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.642054][ T9872] RSP: 002b:00007f8c7e90ff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 383.642085][ T9872] RAX: ffffffffffffffda RBX: 00007f8c7dc15fa0 RCX: 00007f8c7d99e087 [ 383.642106][ T9872] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 383.642126][ T9872] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 383.642145][ T9872] R10: 0000200000000280 R11: 0000000000000286 R12: 0000000000000000 [ 383.642165][ T9872] R13: 00007f8c7dc16038 R14: 00007f8c7dc15fa0 R15: 00007fff5a3847a8 [ 383.642206][ T9872] [ 386.140929][ T9910] : Can't lookup blockdev [ 388.169292][ T9964] queue_state_write: unsupported operation '' [ 388.177061][ T9964] queue_state_write: use 'run', 'start' or 'kick' [ 388.467502][ T9973] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 390.028848][ T9981] kexec: Could not allocate control_code_buffer [ 390.544481][T10004] misc userio: Invalid payload size [ 391.833208][T10019] FAULT_INJECTION: forcing a failure. [ 391.833208][T10019] name failslab, interval 1, probability 0, space 0, times 0 [ 391.919625][T10019] CPU: 0 UID: 0 PID: 10019 Comm: syz.0.929 Not tainted syzkaller #0 PREEMPT(full) [ 391.919670][T10019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.919690][T10019] Call Trace: [ 391.919701][T10019] [ 391.919713][T10019] dump_stack_lvl+0x100/0x190 [ 391.919756][T10019] should_fail_ex.cold+0x5/0xa [ 391.919809][T10019] ? ima_alloc_init_template+0xb6/0x6d0 [ 391.919861][T10019] should_failslab+0xc2/0x120 [ 391.919901][T10019] __kmalloc_noprof+0xe0/0x850 [ 391.919955][T10019] ? find_held_lock+0x2b/0x80 [ 391.920000][T10019] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 391.920060][T10019] ima_alloc_init_template+0xb6/0x6d0 [ 391.920119][T10019] ? take_dentry_name_snapshot+0x310/0x7c0 [ 391.920182][T10019] ima_store_measurement+0x1e3/0x5b0 [ 391.920236][T10019] ? __pfx_ima_store_measurement+0x10/0x10 [ 391.920296][T10019] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 391.920337][T10019] process_measurement+0x19cc/0x2350 [ 391.920391][T10019] ? stack_trace_save+0x8e/0xc0 [ 391.920433][T10019] ? __pfx_process_measurement+0x10/0x10 [ 391.920474][T10019] ? __lock_acquire+0x4a5/0x2630 [ 391.920500][T10019] ? __kasan_slab_alloc+0x89/0x90 [ 391.920528][T10019] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 391.920572][T10019] ? init_file+0x95/0x480 [ 391.920607][T10019] ? alloc_empty_file+0x79/0x1c0 [ 391.920644][T10019] ? alloc_file_pseudo+0x13a/0x230 [ 391.920684][T10019] ? ksys_mmap_pgoff+0x242/0x610 [ 391.920715][T10019] ? __x64_sys_mmap+0x125/0x190 [ 391.920743][T10019] ? do_syscall_64+0x10b/0xf80 [ 391.920835][T10019] ? __pfx_aa_file_perm+0x10/0x10 [ 391.920880][T10019] ima_file_mmap+0x1c4/0x1f0 [ 391.920920][T10019] ? __pfx_ima_file_mmap+0x10/0x10 [ 391.920967][T10019] security_mmap_file+0x278/0x9b0 [ 391.920998][T10019] vm_mmap_pgoff+0xec/0x470 [ 391.921039][T10019] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 391.921072][T10019] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 391.921115][T10019] ? hugetlbfs_get_inode+0x3f5/0x700 [ 391.921166][T10019] ksys_mmap_pgoff+0x285/0x610 [ 391.921204][T10019] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 391.921237][T10019] ? xfd_validate_state+0x129/0x190 [ 391.921266][T10019] ? ksys_write+0x1ac/0x250 [ 391.921303][T10019] __x64_sys_mmap+0x125/0x190 [ 391.921337][T10019] do_syscall_64+0x10b/0xf80 [ 391.921380][T10019] ? clear_bhb_loop+0x40/0x90 [ 391.921419][T10019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.921455][T10019] RIP: 0033:0x7fc818b9c819 [ 391.921481][T10019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.921514][T10019] RSP: 002b:00007fc819a79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 391.921546][T10019] RAX: ffffffffffffffda RBX: 00007fc818e16180 RCX: 00007fc818b9c819 [ 391.921574][T10019] RDX: 00004000000000df RSI: 0000000000008004 RDI: 0000000000000004 [ 391.921595][T10019] RBP: 00007fc818c32c91 R08: 0000000000000401 R09: 0000300000000000 [ 391.921615][T10019] R10: 0000000100040eb5 R11: 0000000000000246 R12: 0000000000000000 [ 391.921634][T10019] R13: 00007fc818e16218 R14: 00007fc818e16180 R15: 00007ffc3fe60038 [ 391.921678][T10019] [ 391.926162][ T29] audit: type=1804 audit(1843104520.450:18): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.929" name="anon_hugepage" dev="hugetlbfs" ino=31676 res=0 errno=0 [ 394.092119][T10041] FAULT_INJECTION: forcing a failure. [ 394.092119][T10041] name failslab, interval 1, probability 0, space 0, times 0 [ 394.129728][T10041] CPU: 0 UID: 0 PID: 10041 Comm: syz.1.934 Not tainted syzkaller #0 PREEMPT(full) [ 394.129774][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 394.129796][T10041] Call Trace: [ 394.129807][T10041] [ 394.129821][T10041] dump_stack_lvl+0x100/0x190 [ 394.129865][T10041] should_fail_ex.cold+0x5/0xa [ 394.129912][T10041] should_failslab+0xc2/0x120 [ 394.129952][T10041] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 394.130009][T10041] ? alloc_empty_file+0x5b/0x1c0 [ 394.130068][T10041] alloc_empty_file+0x5b/0x1c0 [ 394.130120][T10041] alloc_file_pseudo+0x13a/0x230 [ 394.130173][T10041] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 394.130223][T10041] ? alloc_fd+0x476/0x790 [ 394.130266][T10041] ? do_raw_spin_unlock+0x145/0x1e0 [ 394.130316][T10041] __anon_inode_getfile+0xe8/0x280 [ 394.130373][T10041] anon_inode_getfile_fmode+0x37/0xa0 [ 394.130426][T10041] __do_sys_fanotify_init+0xab8/0xe80 [ 394.130471][T10041] do_syscall_64+0x10b/0xf80 [ 394.130524][T10041] ? clear_bhb_loop+0x40/0x90 [ 394.130567][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.130616][T10041] RIP: 0033:0x7f8c7d99c819 [ 394.130646][T10041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.130680][T10041] RSP: 002b:00007f8c7e911028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 394.130713][T10041] RAX: ffffffffffffffda RBX: 00007f8c7dc15fa0 RCX: 00007f8c7d99c819 [ 394.130735][T10041] RDX: 0000000000000000 RSI: 0002010000000000 RDI: 0000000000000200 [ 394.130756][T10041] RBP: 00007f8c7da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 394.130778][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.130798][T10041] R13: 00007f8c7dc16038 R14: 00007f8c7dc15fa0 R15: 00007fff5a3847a8 [ 394.130847][T10041] [ 394.628320][T10053] FAULT_INJECTION: forcing a failure. [ 394.628320][T10053] name fail_futex, interval 1, probability 0, space 0, times 0 [ 394.704030][T10053] CPU: 1 UID: 0 PID: 10053 Comm: syz.0.938 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.704077][T10053] Tainted: [L]=SOFTLOCKUP [ 394.704088][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 394.704105][T10053] Call Trace: [ 394.704116][T10053] [ 394.704129][T10053] dump_stack_lvl+0x100/0x190 [ 394.704169][T10053] should_fail_ex.cold+0x5/0xa [ 394.704210][T10053] get_futex_key+0x1d2/0x1510 [ 394.704248][T10053] ? __pfx_get_futex_key+0x10/0x10 [ 394.704287][T10053] ? arch_get_unmapped_area_topdown+0x3e6/0x9b0 [ 394.704333][T10053] futex_wait_setup+0x83/0x510 [ 394.704388][T10053] __futex_wait+0x19f/0x300 [ 394.704436][T10053] ? __pfx___futex_wait+0x10/0x10 [ 394.704479][T10053] ? cap_capable+0x10b/0x440 [ 394.704527][T10053] ? __pfx_futex_wake_mark+0x10/0x10 [ 394.704575][T10053] ? futex_hash+0x2ad/0x370 [ 394.704609][T10053] ? futex_hash+0x141/0x370 [ 394.704647][T10053] futex_wait+0xe6/0x370 [ 394.704694][T10053] ? __pfx_futex_wait+0x10/0x10 [ 394.704762][T10053] do_futex+0x1ef/0x350 [ 394.704809][T10053] ? __pfx_do_futex+0x10/0x10 [ 394.704851][T10053] ? fput+0x79/0x100 [ 394.704902][T10053] __x64_sys_futex+0x34f/0x4d0 [ 394.704942][T10053] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 394.704984][T10053] ? __pfx___x64_sys_futex+0x10/0x10 [ 394.705020][T10053] ? ksys_write+0x1ac/0x250 [ 394.705063][T10053] ? rcu_is_watching+0x12/0xc0 [ 394.705110][T10053] do_syscall_64+0x10b/0xf80 [ 394.705163][T10053] ? clear_bhb_loop+0x40/0x90 [ 394.705205][T10053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.705240][T10053] RIP: 0033:0x7fc818b9c819 [ 394.705270][T10053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.705304][T10053] RSP: 002b:00007fc819abb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 394.705335][T10053] RAX: ffffffffffffffda RBX: 00007fc818e15fa8 RCX: 00007fc818b9c819 [ 394.705357][T10053] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc818e15fa8 [ 394.705376][T10053] RBP: 00007fc818e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 394.705401][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.705421][T10053] R13: 00007fc818e16038 R14: 00007ffc3fe5ff50 R15: 00007ffc3fe60038 [ 394.705464][T10053] [ 399.144298][T10131] warning: `syz.2.955' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 400.376774][ T29] audit: type=1804 audit(1843104528.900:19): pid=10140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.957" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=29 res=1 errno=0 [ 402.935444][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 403.000873][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 403.053470][T10181] sg_write: process 863 (syz.1.963) changed security contexts after opening file descriptor, this is not allowed. [ 405.219981][T10245] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[10245] [ 407.439057][T10268] kexec: Could not allocate control_code_buffer [ 407.584062][T10290] kafs: addr_prefs: Invalid Command [ 407.881045][T10282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.976954][T10282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 407.999990][T10282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 408.033516][T10282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 409.702355][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 410.019053][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 410.021000][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 410.099133][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 410.187480][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 414.853424][T10353] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 415.099602][ T5844] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 415.099648][ T5844] Bluetooth: hci3: unexpected subevent 0x06 length: 725 > 10 [ 416.712406][T10414] zswap: compressor û not available [ 417.151592][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 417.555441][T10433] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 418.633508][T10449] FAULT_INJECTION: forcing a failure. [ 418.633508][T10449] name failslab, interval 1, probability 0, space 0, times 0 [ 418.695606][T10449] CPU: 0 UID: 0 PID: 10449 Comm: syz.0.1030 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.695660][T10449] Tainted: [L]=SOFTLOCKUP [ 418.695672][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.695693][T10449] Call Trace: [ 418.695703][T10449] [ 418.695714][T10449] dump_stack_lvl+0x100/0x190 [ 418.695758][T10449] should_fail_ex.cold+0x5/0xa [ 418.695800][T10449] ? do_pagemap_scan+0x346/0xcd0 [ 418.695852][T10449] should_failslab+0xc2/0x120 [ 418.695891][T10449] __kmalloc_noprof+0xe0/0x850 [ 418.695953][T10449] do_pagemap_scan+0x346/0xcd0 [ 418.696014][T10449] ? __pfx_do_pagemap_scan+0x10/0x10 [ 418.696068][T10449] ? do_vfs_ioctl+0x226/0x13e0 [ 418.696100][T10449] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 418.696183][T10449] ? __fget_files+0x21f/0x3d0 [ 418.696230][T10449] do_pagemap_cmd+0x58/0x80 [ 418.696281][T10449] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 418.696335][T10449] __x64_sys_ioctl+0x18e/0x210 [ 418.696371][T10449] do_syscall_64+0x10b/0xf80 [ 418.696421][T10449] ? clear_bhb_loop+0x40/0x90 [ 418.696464][T10449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.696516][T10449] RIP: 0033:0x7fc818b9c819 [ 418.696540][T10449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.696568][T10449] RSP: 002b:00007fc819a9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.696596][T10449] RAX: ffffffffffffffda RBX: 00007fc818e16090 RCX: 00007fc818b9c819 [ 418.696615][T10449] RDX: 000020000000c380 RSI: 00000000c0606610 RDI: 0000000000000007 [ 418.696633][T10449] RBP: 00007fc819a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 418.696650][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.696666][T10449] R13: 00007fc818e16128 R14: 00007fc818e16090 R15: 00007ffc3fe60038 [ 418.696703][T10449] [ 419.702757][T10461] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1033'. [ 419.731056][T10461] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1033'. [ 420.083099][ T29] audit: type=1804 audit(1843104548.610:20): pid=10468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1035" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=29 res=1 errno=0 [ 420.128606][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 420.176239][ T29] audit: type=1804 audit(1843104548.670:21): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1034" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=29 res=1 errno=0 [ 421.237900][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1037'. [ 421.900997][T10489] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1038'. [ 423.293577][T10505] FAULT_INJECTION: forcing a failure. [ 423.293577][T10505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.368057][T10505] CPU: 0 UID: 0 PID: 10505 Comm: syz.0.1042 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.368143][T10505] Tainted: [L]=SOFTLOCKUP [ 423.368152][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.368166][T10505] Call Trace: [ 423.368175][T10505] [ 423.368184][T10505] dump_stack_lvl+0x100/0x190 [ 423.368214][T10505] should_fail_ex.cold+0x5/0xa [ 423.368245][T10505] _copy_to_user+0x32/0xd0 [ 423.368284][T10505] do_pagemap_scan+0x572/0xcd0 [ 423.368327][T10505] ? __pfx_do_pagemap_scan+0x10/0x10 [ 423.368367][T10505] ? do_vfs_ioctl+0x226/0x13e0 [ 423.368409][T10505] ? __fget_files+0x21f/0x3d0 [ 423.368442][T10505] do_pagemap_cmd+0x58/0x80 [ 423.368477][T10505] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 423.368515][T10505] __x64_sys_ioctl+0x18e/0x210 [ 423.368539][T10505] do_syscall_64+0x10b/0xf80 [ 423.368576][T10505] ? clear_bhb_loop+0x40/0x90 [ 423.368605][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.368630][T10505] RIP: 0033:0x7fc818b9c819 [ 423.368649][T10505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.368672][T10505] RSP: 002b:00007fc819a9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.368694][T10505] RAX: ffffffffffffffda RBX: 00007fc818e16090 RCX: 00007fc818b9c819 [ 423.368709][T10505] RDX: 000020000000c380 RSI: 00000000c0606610 RDI: 0000000000000007 [ 423.368723][T10505] RBP: 00007fc819a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 423.368737][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.368751][T10505] R13: 00007fc818e16128 R14: 00007fc818e16090 R15: 00007ffc3fe60038 [ 423.368780][T10505] [ 426.249613][T10545] random: crng reseeded on system resumption [ 432.804247][T10688] mkiss: ax0: crc mode is auto. [ 434.915867][T10711] futex_wake_op: syz.3.1081 tries to shift op by -2048; fix this program [ 434.984123][T10711] futex_wake_op: syz.3.1081 tries to shift op by -2048; fix this program [ 435.083382][T10714] 0x000000000001-0x000000020000 : "" [ 435.811704][T10714] ftl_cs: FTL header corrupt! [ 440.423953][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.437048][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.624305][T10845] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 451.925056][T10894] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 451.976540][T10894] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 452.035545][T10894] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 455.003306][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 455.034341][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 455.045919][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 455.056235][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 455.068167][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.254615][T10909] chnl_net:caif_netlink_parms(): no params data found [ 457.138998][ T5849] Bluetooth: hci4: command tx timeout [ 457.312045][T10909] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.348352][T10909] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.369295][T10909] bridge_slave_0: entered allmulticast mode [ 457.398776][T10909] bridge_slave_0: entered promiscuous mode [ 457.505281][T10909] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.528729][T10909] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.555737][T10909] bridge_slave_1: entered allmulticast mode [ 457.582164][T10909] bridge_slave_1: entered promiscuous mode [ 457.934829][T10909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.460793][T10909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.981721][T10909] team0: Port device team_slave_0 added [ 459.134801][T10909] team0: Port device team_slave_1 added [ 459.224746][T10948] ubi0: attaching mtd0 [ 459.228102][ T5849] Bluetooth: hci4: command tx timeout [ 459.344673][T10948] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 459.501060][T10948] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 459.580103][T10948] eraseblock attaching information dump: [ 459.588977][T10948] ec 1 [ 459.614215][T10948] pnum 0 [ 459.633402][T10948] lnum 0 [ 459.755997][T10948] scrub 0 [ 459.854699][T10948] sqnum 1 [ 459.865022][T10948] Volume identifier header dump: [ 459.873834][T10948] magic 55424921 [ 459.889187][T10948] version 1 [ 459.896530][T10948] vol_type 1 [ 459.907724][T10948] copy_flag 0 [ 459.917764][T10948] compat 5 [ 459.928249][T10948] vol_id 2147479551 [ 459.966478][T10948] lnum 0 [ 460.221128][T10948] data_size 0 [ 460.227136][T10909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.287335][T10948] used_ebs 0 [ 460.291117][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.318440][T10948] data_pad 0 [ 460.348173][T10909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.363428][T10909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.371145][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.412617][T10948] sqnum 1 [ 460.416337][T10948] hdr_crc 65b3bd2d [ 460.471797][T10948] Volume identifier header hexdump: [ 460.505769][T10909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.081260][T10948] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 461.299193][ T5849] Bluetooth: hci4: command tx timeout [ 461.826158][T10909] hsr_slave_0: entered promiscuous mode [ 461.859331][T10909] hsr_slave_1: entered promiscuous mode [ 461.878431][T10909] debugfs: 'hsr0' already exists in 'hsr' [ 461.904472][T10909] Cannot create hsr debugfs directory [ 462.659115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 463.379152][ T5849] Bluetooth: hci4: command tx timeout [ 464.039923][T10909] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.195112][T10909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.297839][T10909] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.346168][T10909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.403639][T10909] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.457581][T10909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.597936][T10909] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.658659][T10909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.544741][T10909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.667266][T10909] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.749913][ T9942] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.757315][ T9942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.885709][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.893036][ T9958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.184903][T10909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.070239][T11070] vhci_hcd vhci_hcd.2: invalid port number 16 [ 469.124228][T11070] vhci_hcd vhci_hcd.2: invalid port number 16 [ 469.802793][T10909] veth0_vlan: entered promiscuous mode [ 469.857617][T10909] veth1_vlan: entered promiscuous mode [ 470.096210][T10909] veth0_macvtap: entered promiscuous mode [ 470.137984][T10909] veth1_macvtap: entered promiscuous mode [ 470.202544][T10909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.255684][T10909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.349337][ T9947] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.407765][ T9947] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.460253][ T9947] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.491680][ T9947] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.812026][ T9942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.849884][ T9942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.084969][ T9957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.097459][ T9957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.677065][T11100] random: crng reseeded on system resumption [ 475.470102][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1159'. [ 475.838263][T11129] hsr_slave_1 (unregistering): left promiscuous mode [ 476.689819][T11161] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1165'. [ 479.274216][T11181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1168'. [ 480.413638][T11196] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 489.421990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 492.101294][T11294] mkiss: ax0: crc mode is auto. [ 492.251203][T11306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1193'. [ 492.439203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 498.537974][T11375] bridge0: port 3(ipvlan1) entered blocking state [ 498.538125][T11375] bridge0: port 3(ipvlan1) entered disabled state [ 498.538378][T11375] ipvlan1: entered allmulticast mode [ 498.538404][T11375] veth0_vlan: entered allmulticast mode [ 498.683225][T11375] ipvlan1: left allmulticast mode [ 498.683258][T11375] veth0_vlan: left allmulticast mode [ 499.299480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 501.487523][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 501.864042][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.873841][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.168936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 502.638925][T11432] futex_wake_op: syz.1.1219 tries to shift op by -2048; fix this program [ 502.711312][T11432] futex_wake_op: syz.1.1219 tries to shift op by -2048; fix this program [ 502.767906][T11435] 0x000000000001-0x000000020000 : "" [ 502.901004][T11435] ftl_cs: FTL header corrupt! [ 503.569258][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1219'. [ 505.244195][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1223'. [ 505.376406][T11423] kexec: Could not allocate control_code_buffer [ 508.790264][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 509.216450][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 509.306054][T11513] vivid-007: ================= START STATUS ================= [ 509.397404][T11513] vivid-007: Generate PTS: true [ 509.414203][T11513] vivid-007: Generate SCR: true [ 509.435521][T11513] tpg source WxH: 320x240 (Y'CbCr) [ 509.463535][T11513] tpg field: 1 [ 509.479358][T11513] tpg crop: (0,0)/320x240 [ 509.525661][T11513] tpg compose: (0,0)/320x240 [ 509.609100][T11513] tpg colorspace: 8 [ 509.655888][T11513] tpg transfer function: 0/0 [ 509.684845][T11513] tpg Y'CbCr encoding: 0/0 [ 509.716507][T11513] tpg quantization: 0/0 [ 509.754758][T11513] tpg RGB range: 0/2 [ 509.777960][T11513] vivid-007: ================== END STATUS ================== [ 510.812377][T11530] QAT: Device 250 not found [ 510.945936][T11530] QAT: Invalid ioctl 44609 [ 514.414778][ T29] audit: type=1800 audit(1843104642.930:22): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1248" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 514.435504][T11567] kAFS: Invalid Command on /proc/fs/afs/cells file [ 527.706733][T11723] netlink: 202 bytes leftover after parsing attributes in process `syz.4.1281'. [ 532.283816][T11799] FAULT_INJECTION: forcing a failure. [ 532.283816][T11799] name failslab, interval 1, probability 0, space 0, times 0 [ 532.337805][T11799] CPU: 1 UID: 0 PID: 11799 Comm: syz.1.1294 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.337868][T11799] Tainted: [L]=SOFTLOCKUP [ 532.337879][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.337899][T11799] Call Trace: [ 532.337910][T11799] [ 532.337921][T11799] dump_stack_lvl+0x100/0x190 [ 532.337964][T11799] should_fail_ex.cold+0x5/0xa [ 532.338007][T11799] should_failslab+0xc2/0x120 [ 532.338045][T11799] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 532.338099][T11799] ? zswap_store+0xc6d/0x2e70 [ 532.338152][T11799] zswap_store+0xc6d/0x2e70 [ 532.338208][T11799] ? rmap_walk_anon+0x561/0x870 [ 532.338257][T11799] ? __pfx_zswap_store+0x10/0x10 [ 532.338303][T11799] ? find_held_lock+0x2b/0x80 [ 532.338345][T11799] ? folio_free_swap+0x60a/0x9f0 [ 532.338382][T11799] ? folio_free_swap+0x60a/0x9f0 [ 532.338427][T11799] ? folio_free_swap+0x3f/0x9f0 [ 532.338473][T11799] swap_writeout+0x47e/0x14f0 [ 532.338531][T11799] shrink_folio_list+0x51c5/0x60c0 [ 532.338616][T11799] ? __pfx_shrink_folio_list+0x10/0x10 [ 532.338661][T11799] ? __update_page_owner_handle+0x3c7/0x550 [ 532.338709][T11799] ? __lock_acquire+0x4a5/0x2630 [ 532.338739][T11799] ? find_held_lock+0x2b/0x80 [ 532.338786][T11799] ? __lock_acquire+0x4a5/0x2630 [ 532.338858][T11799] ? __lock_acquire+0x4a5/0x2630 [ 532.338887][T11799] ? css_rstat_updated+0x1ce/0x5a0 [ 532.338938][T11799] ? __pfx_css_rstat_updated+0x10/0x10 [ 532.338994][T11799] reclaim_folio_list+0xdc/0x5e0 [ 532.339048][T11799] ? __pfx_reclaim_folio_list+0x10/0x10 [ 532.339092][T11799] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 532.339162][T11799] ? lru_gen_update_size+0x431/0xe20 [ 532.339217][T11799] ? lru_gen_del_folio+0x382/0x5f0 [ 532.339266][T11799] reclaim_pages+0x428/0x5e0 [ 532.339321][T11799] ? __pfx_reclaim_pages+0x10/0x10 [ 532.339367][T11799] ? find_held_lock+0x2b/0x80 [ 532.339411][T11799] ? madvise_cold_or_pageout_pte_range+0xb49/0x2620 [ 532.339465][T11799] madvise_cold_or_pageout_pte_range+0x155c/0x2620 [ 532.339529][T11799] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 532.339578][T11799] ? __lock_acquire+0x4a5/0x2630 [ 532.339608][T11799] ? css_rstat_updated+0x1ce/0x5a0 [ 532.339660][T11799] ? __pfx_css_rstat_updated+0x10/0x10 [ 532.339712][T11799] ? register_lock_class+0x40/0x560 [ 532.339746][T11799] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 532.339791][T11799] walk_pgd_range+0xc1a/0x1dd0 [ 532.339839][T11799] ? rcu_read_unlock+0x17/0x60 [ 532.339897][T11799] ? __pfx_walk_pgd_range+0x10/0x10 [ 532.339932][T11799] ? folios_put_refs+0x716/0xa90 [ 532.339991][T11799] __walk_page_range+0x163/0x820 [ 532.340027][T11799] ? find_held_lock+0x2b/0x80 [ 532.340082][T11799] walk_page_range_vma_unsafe+0x209/0x8f0 [ 532.340122][T11799] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 532.340164][T11799] ? find_held_lock+0x2b/0x80 [ 532.340206][T11799] ? mlock_drain_local+0x254/0x4e0 [ 532.340259][T11799] ? mlock_drain_local+0x254/0x4e0 [ 532.340319][T11799] walk_page_range_vma+0x63/0x90 [ 532.340357][T11799] madvise_pageout+0x259/0x540 [ 532.340400][T11799] ? __pfx_madvise_pageout+0x10/0x10 [ 532.340462][T11799] ? find_held_lock+0x2b/0x80 [ 532.340503][T11799] ? mt_find+0x687/0x8e0 [ 532.340538][T11799] madvise_vma_behavior+0x4f7/0x2200 [ 532.340584][T11799] ? mt_find+0x45e/0x8e0 [ 532.340615][T11799] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 532.340660][T11799] ? __pfx_mt_find+0x10/0x10 [ 532.340699][T11799] ? find_vma_prev+0xd8/0x150 [ 532.340735][T11799] ? _kstrtoull+0x13c/0x1f0 [ 532.340782][T11799] ? find_vma+0xbf/0x140 [ 532.340823][T11799] ? __pfx_find_vma+0x10/0x10 [ 532.340870][T11799] madvise_walk_vmas+0x2fe/0xa90 [ 532.340922][T11799] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 532.340978][T11799] madvise_do_behavior+0x1ea/0x510 [ 532.341027][T11799] ? __pfx_madvise_do_behavior+0x10/0x10 [ 532.341073][T11799] ? down_read+0x13b/0x450 [ 532.341126][T11799] do_madvise+0x195/0x240 [ 532.341169][T11799] ? __pfx_do_madvise+0x10/0x10 [ 532.341209][T11799] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 532.341262][T11799] ? kernel_write+0x633/0x6c0 [ 532.341325][T11799] ? ksys_write+0x1ac/0x250 [ 532.341360][T11799] ? __pfx_ksys_write+0x10/0x10 [ 532.341402][T11799] __x64_sys_madvise+0xa9/0x110 [ 532.341444][T11799] ? lockdep_hardirqs_on+0x78/0x100 [ 532.341495][T11799] do_syscall_64+0x10b/0xf80 [ 532.341544][T11799] ? clear_bhb_loop+0x40/0x90 [ 532.341586][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.341620][T11799] RIP: 0033:0x7f8c7d99c819 [ 532.341646][T11799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.341680][T11799] RSP: 002b:00007f8c7e911028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 532.341712][T11799] RAX: ffffffffffffffda RBX: 00007f8c7dc15fa0 RCX: 00007f8c7d99c819 [ 532.341733][T11799] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 532.341753][T11799] RBP: 00007f8c7e911090 R08: 0000000000000000 R09: 0000000000000000 [ 532.341773][T11799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.341792][T11799] R13: 00007f8c7dc16038 R14: 00007f8c7dc15fa0 R15: 00007fff5a3847a8 [ 532.341841][T11799] [ 533.398930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 534.159471][T11813] FAULT_INJECTION: forcing a failure. [ 534.159471][T11813] name failslab, interval 1, probability 0, space 0, times 0 [ 534.225557][T11813] CPU: 0 UID: 0 PID: 11813 Comm: syz.3.1297 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.225613][T11813] Tainted: [L]=SOFTLOCKUP [ 534.225626][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.225647][T11813] Call Trace: [ 534.225658][T11813] [ 534.225671][T11813] dump_stack_lvl+0x100/0x190 [ 534.225725][T11813] should_fail_ex.cold+0x5/0xa [ 534.225768][T11813] ? security_inode_init_security+0x113/0x370 [ 534.225812][T11813] should_failslab+0xc2/0x120 [ 534.225853][T11813] __kmalloc_noprof+0xe0/0x850 [ 534.225917][T11813] security_inode_init_security+0x113/0x370 [ 534.225964][T11813] ? __pfx_shmem_initxattrs+0x10/0x10 [ 534.226010][T11813] ? __pfx_security_inode_init_security+0x10/0x10 [ 534.226061][T11813] ? make_vfsgid+0xf1/0x140 [ 534.226121][T11813] shmem_mknod+0x2ce/0x480 [ 534.226178][T11813] ? __pfx_shmem_mknod+0x10/0x10 [ 534.226237][T11813] vfs_create+0x301/0x6c0 [ 534.226297][T11813] filename_mknodat+0x2de/0x7f0 [ 534.226349][T11813] ? __pfx_filename_mknodat+0x10/0x10 [ 534.226394][T11813] ? strncpy_from_user+0x19d/0x2d0 [ 534.226454][T11813] ? do_getname+0x191/0x390 [ 534.226509][T11813] __x64_sys_mknod+0x8f/0xc0 [ 534.226556][T11813] do_syscall_64+0x10b/0xf80 [ 534.226610][T11813] ? clear_bhb_loop+0x40/0x90 [ 534.226653][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.226695][T11813] RIP: 0033:0x7ff9d199c819 [ 534.226724][T11813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.226758][T11813] RSP: 002b:00007ff9d28ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 534.226791][T11813] RAX: ffffffffffffffda RBX: 00007ff9d1c16090 RCX: 00007ff9d199c819 [ 534.226813][T11813] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000000 [ 534.226833][T11813] RBP: 00007ff9d1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 534.226853][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.226873][T11813] R13: 00007ff9d1c16128 R14: 00007ff9d1c16090 R15: 00007ffec263b9d8 [ 534.226917][T11813] [ 539.743925][T11903] FAULT_INJECTION: forcing a failure. [ 539.743925][T11903] name failslab, interval 1, probability 0, space 0, times 0 [ 539.807426][T11903] CPU: 0 UID: 0 PID: 11903 Comm: syz.1.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.807484][T11903] Tainted: [L]=SOFTLOCKUP [ 539.807498][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 539.807518][T11903] Call Trace: [ 539.807530][T11903] [ 539.807544][T11903] dump_stack_lvl+0x100/0x190 [ 539.807590][T11903] should_fail_ex.cold+0x5/0xa [ 539.807636][T11903] should_failslab+0xc2/0x120 [ 539.807677][T11903] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 539.807735][T11903] ? ptlock_alloc+0x1f/0x70 [ 539.807785][T11903] ? do_raw_spin_lock+0x128/0x260 [ 539.807831][T11903] ptlock_alloc+0x1f/0x70 [ 539.807881][T11903] pte_alloc_one+0x82/0x3d0 [ 539.807931][T11903] do_fault+0x86c/0x1750 [ 539.807972][T11903] ? __pmd_alloc+0x3fb/0x950 [ 539.808020][T11903] __handle_mm_fault+0x187d/0x2a00 [ 539.808081][T11903] ? mt_find+0x45e/0x8e0 [ 539.808115][T11903] ? __pfx___handle_mm_fault+0x10/0x10 [ 539.808165][T11903] ? __pfx_mt_find+0x10/0x10 [ 539.808222][T11903] ? find_vma+0xbf/0x140 [ 539.808259][T11903] ? __pfx_find_vma+0x10/0x10 [ 539.808306][T11903] handle_mm_fault+0x36d/0xa20 [ 539.808367][T11903] do_user_addr_fault+0x74c/0x12f0 [ 539.808424][T11903] ? trace_page_fault_kernel+0x7a/0x200 [ 539.808471][T11903] exc_page_fault+0x6f/0xd0 [ 539.808526][T11903] asm_exc_page_fault+0x26/0x30 [ 539.808560][T11903] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 539.808604][T11903] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 539.808639][T11903] RSP: 0018:ffffc90003cdfe38 EFLAGS: 00050202 [ 539.808668][T11903] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000c [ 539.808689][T11903] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003cdfe90 [ 539.808710][T11903] RBP: 000000000000000c R08: 0000000000000001 R09: fffff5200079bfd3 [ 539.808730][T11903] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 539.808751][T11903] R13: ffffc90003cdfe90 R14: 0000000000000001 R15: 0000000000000006 [ 539.808793][T11903] _copy_from_user+0x98/0xd0 [ 539.808844][T11903] __x64_sys_epoll_ctl+0x131/0x1e0 [ 539.808892][T11903] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 539.808941][T11903] ? rcu_is_watching+0x12/0xc0 [ 539.808987][T11903] do_syscall_64+0x10b/0xf80 [ 539.809041][T11903] ? clear_bhb_loop+0x40/0x90 [ 539.809072][T11903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.809098][T11903] RIP: 0033:0x7f8c7d99c819 [ 539.809118][T11903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.809143][T11903] RSP: 002b:00007f8c7e911028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 539.809167][T11903] RAX: ffffffffffffffda RBX: 00007f8c7dc15fa0 RCX: 00007f8c7d99c819 [ 539.809185][T11903] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 539.809200][T11903] RBP: 00007f8c7da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 539.809215][T11903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.809230][T11903] R13: 00007f8c7dc16038 R14: 00007f8c7dc15fa0 R15: 00007fff5a3847a8 [ 539.809262][T11903] [ 546.175505][T10738] ------------[ cut here ]------------ [ 546.181355][T10738] ODEBUG: free active (active state 0) object: ffff888026c71438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 546.194460][T10738] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.0.1085/10738 [ 546.206093][T10738] Modules linked in: [ 546.210882][T10738] CPU: 1 UID: 0 PID: 10738 Comm: syz.0.1085 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.222146][T10738] Tainted: [L]=SOFTLOCKUP [ 546.226683][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.236841][T10738] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 546.242750][T10738] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 52 d7 e6 0b 41 56 48 8b 14 dd 40 22 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c 62 dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 546.262734][T10738] RSP: 0000:ffffc90004be7708 EFLAGS: 00010246 [ 546.269075][T10738] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 546.277304][T10738] RDX: ffffffff8c1c2180 RSI: ffffffff8c1c1da0 RDI: ffffffff90e6f6e0 [ 546.285558][T10738] RBP: 0000000000000001 R08: ffff888026c71438 R09: ffffffff8bb2b680 [ 546.293881][T10738] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c1da0 [ 546.302993][T10738] R13: ffffffff8bb2b6c0 R14: ffffffff8a9f1160 R15: ffffc90004be7808 [ 546.311633][T10738] FS: 0000000000000000(0000) GS:ffff8881243e2000(0000) knlGS:0000000000000000 [ 546.320710][T10738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.327347][T10738] CR2: 0000200000001c80 CR3: 0000000038ee6000 CR4: 00000000003526f0 [ 546.335388][T10738] Call Trace: [ 546.338681][T10738] [ 546.341767][T10738] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 546.347325][T10738] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 546.353360][T10738] debug_check_no_obj_freed+0x4da/0x630 [ 546.359109][T10738] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 546.365251][T10738] ? __page_table_check_zero+0x333/0x410 [ 546.370965][T10738] ? __page_table_check_zero+0x333/0x410 [ 546.376712][T10738] ? __page_table_check_zero+0x338/0x410 [ 546.382633][T10738] __free_frozen_pages+0x3f5/0x1040 [ 546.388232][T10738] hci_release_dev+0x4ef/0x630 [ 546.393316][T10738] ? __pfx_hci_release_dev+0x10/0x10 [ 546.398670][T10738] ? device_release+0x97/0x270 [ 546.404591][T10738] ? rcu_is_watching+0x12/0xc0 [ 546.410257][T10738] ? device_release+0x97/0x270 [ 546.415176][T10738] bt_host_release+0x6a/0xb0 [ 546.420016][T10738] ? __pfx_bt_host_release+0x10/0x10 [ 546.425384][T10738] device_release+0xd2/0x270 [ 546.430094][T10738] kobject_put+0x1f7/0x640 [ 546.434586][T10738] put_device+0x1f/0x30 [ 546.438896][T10738] vhci_release+0x185/0x230 [ 546.443510][T10738] ? __pfx_vhci_release+0x10/0x10 [ 546.448702][T10738] __fput+0x3ff/0xb50 [ 546.452876][T10738] task_work_run+0x150/0x240 [ 546.457552][T10738] ? __pfx_task_work_run+0x10/0x10 [ 546.462885][T10738] do_exit+0x8d2/0x2a60 [ 546.467089][T10738] ? __pfx___might_resched+0x10/0x10 [ 546.472539][T10738] ? rcu_is_watching+0x12/0xc0 [ 546.477406][T10738] ? __pfx_do_exit+0x10/0x10 [ 546.482068][T10738] ? do_raw_spin_lock+0x128/0x260 [ 546.487373][T10738] ? find_held_lock+0x2b/0x80 [ 546.492301][T10738] ? get_signal+0x7e0/0x21e0 [ 546.496949][T10738] do_group_exit+0xd5/0x2a0 [ 546.501716][T10738] get_signal+0x1ec7/0x21e0 [ 546.507246][T10738] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 546.513965][T10738] ? __pfx_get_signal+0x10/0x10 [ 546.518954][T10738] arch_do_signal_or_restart+0x91/0x770 [ 546.524716][T10738] ? __pfx_kernel_move_pages+0x10/0x10 [ 546.530339][T10738] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 546.536571][T10738] ? rcu_is_watching+0x12/0xc0 [ 546.541463][T10738] exit_to_user_mode_loop+0x86/0x4a0 [ 546.546782][T10738] ? do_syscall_64+0x519/0xf80 [ 546.551639][T10738] do_syscall_64+0x6f2/0xf80 [ 546.556300][T10738] ? clear_bhb_loop+0x40/0x90 [ 546.561063][T10738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.566981][T10738] RIP: 0033:0x7fc818b9c819 [ 546.571592][T10738] Code: Unable to access opcode bytes at 0x7fc818b9c7ef. [ 546.578694][T10738] RSP: 002b:00007fc819a9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 546.587182][T10738] RAX: fffffffffffffff2 RBX: 00007fc818e16090 RCX: 00007fc818b9c819 [ 546.595440][T10738] RDX: 0000000000000000 RSI: 0040000000000001 RDI: 0000000000000000 [ 546.603650][T10738] RBP: 00007fc818c32c91 R08: 0000000000000000 R09: 8000000000000000 [ 546.609189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 546.614934][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.628568][T10738] R13: 00007fc818e16128 R14: 00007fc818e16090 R15: 00007ffc3fe60038 [ 546.636651][T10738] [ 546.639810][T10738] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 546.647156][T10738] CPU: 1 UID: 0 PID: 10738 Comm: syz.0.1085 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.658128][T10738] Tainted: [L]=SOFTLOCKUP [ 546.662468][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.672545][T10738] Call Trace: [ 546.675865][T10738] [ 546.678840][T10738] dump_stack_lvl+0x100/0x190 [ 546.683571][T10738] vpanic+0x552/0x970 [ 546.687574][T10738] ? __pfx_vpanic+0x10/0x10 [ 546.692118][T10738] panic+0xd1/0xe0 [ 546.695919][T10738] ? __pfx_panic+0x10/0x10 [ 546.700361][T10738] ? check_panic_on_warn+0x1f/0x90 [ 546.705510][T10738] check_panic_on_warn.cold+0x19/0x34 [ 546.710931][T10738] ? debug_print_object+0x18e/0x2a0 [ 546.716185][T10738] __warn.cold+0x191/0x328 [ 546.720627][T10738] __report_bug+0x296/0x3d0 [ 546.725181][T10738] ? debug_print_object+0x18e/0x2a0 [ 546.730404][T10738] ? __pfx___report_bug+0x10/0x10 [ 546.735466][T10738] ? __lock_acquire+0x4a5/0x2630 [ 546.740423][T10738] ? unwind_next_frame+0x3c8/0x2090 [ 546.745696][T10738] report_bug_entry+0xe1/0x290 [ 546.750494][T10738] ? debug_print_object+0x19b/0x2a0 [ 546.755738][T10738] handle_bug+0x1cd/0x2a0 [ 546.760091][T10738] exc_invalid_op+0x17/0x50 [ 546.764611][T10738] asm_exc_invalid_op+0x1a/0x20 [ 546.769505][T10738] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 546.775348][T10738] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 52 d7 e6 0b 41 56 48 8b 14 dd 40 22 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c 62 dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 546.794993][T10738] RSP: 0000:ffffc90004be7708 EFLAGS: 00010246 [ 546.801084][T10738] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 546.809090][T10738] RDX: ffffffff8c1c2180 RSI: ffffffff8c1c1da0 RDI: ffffffff90e6f6e0 [ 546.817081][T10738] RBP: 0000000000000001 R08: ffff888026c71438 R09: ffffffff8bb2b680 [ 546.825071][T10738] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c1da0 [ 546.833055][T10738] R13: ffffffff8bb2b6c0 R14: ffffffff8a9f1160 R15: ffffc90004be7808 [ 546.841042][T10738] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 546.846548][T10738] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 546.852041][T10738] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 546.858068][T10738] debug_check_no_obj_freed+0x4da/0x630 [ 546.863669][T10738] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 546.869793][T10738] ? __page_table_check_zero+0x333/0x410 [ 546.875478][T10738] ? __page_table_check_zero+0x333/0x410 [ 546.881694][T10738] ? __page_table_check_zero+0x338/0x410 [ 546.887372][T10738] __free_frozen_pages+0x3f5/0x1040 [ 546.892618][T10738] hci_release_dev+0x4ef/0x630 [ 546.897530][T10738] ? __pfx_hci_release_dev+0x10/0x10 [ 546.902943][T10738] ? device_release+0x97/0x270 [ 546.907739][T10738] ? rcu_is_watching+0x12/0xc0 [ 546.912535][T10738] ? device_release+0x97/0x270 [ 546.917337][T10738] bt_host_release+0x6a/0xb0 [ 546.921953][T10738] ? __pfx_bt_host_release+0x10/0x10 [ 546.927259][T10738] device_release+0xd2/0x270 [ 546.931910][T10738] kobject_put+0x1f7/0x640 [ 546.936426][T10738] put_device+0x1f/0x30 [ 546.940649][T10738] vhci_release+0x185/0x230 [ 546.945204][T10738] ? __pfx_vhci_release+0x10/0x10 [ 546.950276][T10738] __fput+0x3ff/0xb50 [ 546.954304][T10738] task_work_run+0x150/0x240 [ 546.958929][T10738] ? __pfx_task_work_run+0x10/0x10 [ 546.964085][T10738] do_exit+0x8d2/0x2a60 [ 546.968287][T10738] ? __pfx___might_resched+0x10/0x10 [ 546.973613][T10738] ? rcu_is_watching+0x12/0xc0 [ 546.978422][T10738] ? __pfx_do_exit+0x10/0x10 [ 546.983050][T10738] ? do_raw_spin_lock+0x128/0x260 [ 546.988102][T10738] ? find_held_lock+0x2b/0x80 [ 546.992904][T10738] ? get_signal+0x7e0/0x21e0 [ 546.997558][T10738] do_group_exit+0xd5/0x2a0 [ 547.002142][T10738] get_signal+0x1ec7/0x21e0 [ 547.006690][T10738] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 547.012548][T10738] ? __pfx_get_signal+0x10/0x10 [ 547.017467][T10738] arch_do_signal_or_restart+0x91/0x770 [ 547.023093][T10738] ? __pfx_kernel_move_pages+0x10/0x10 [ 547.028641][T10738] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 547.034933][T10738] ? rcu_is_watching+0x12/0xc0 [ 547.039731][T10738] exit_to_user_mode_loop+0x86/0x4a0 [ 547.045036][T10738] ? do_syscall_64+0x519/0xf80 [ 547.049924][T10738] do_syscall_64+0x6f2/0xf80 [ 547.054559][T10738] ? clear_bhb_loop+0x40/0x90 [ 547.059294][T10738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.065225][T10738] RIP: 0033:0x7fc818b9c819 [ 547.069655][T10738] Code: Unable to access opcode bytes at 0x7fc818b9c7ef. [ 547.076685][T10738] RSP: 002b:00007fc819a9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 547.085138][T10738] RAX: fffffffffffffff2 RBX: 00007fc818e16090 RCX: 00007fc818b9c819 [ 547.093157][T10738] RDX: 0000000000000000 RSI: 0040000000000001 RDI: 0000000000000000 [ 547.101245][T10738] RBP: 00007fc818c32c91 R08: 0000000000000000 R09: 8000000000000000 [ 547.109264][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.117260][T10738] R13: 00007fc818e16128 R14: 00007fc818e16090 R15: 00007ffc3fe60038 [ 547.125273][T10738] [ 547.129090][T10738] Kernel Offset: disabled [ 547.133442][T10738] Rebooting in 86400 seconds..