last executing test programs: 9.038455884s ago: executing program 3 (id=3125): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0xffffffffffffffff, &(0x7f0000000240)='/dev/vhost-net\x00', 0x4) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x6}, 0x20000000) read$auto(r0, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0x3, 0x6, 0x4) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) getsockopt$auto_SO_TXREHASH(r1, 0xffffff00, 0x4a, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0x6, 0x100000000000000, 0xfff, 0xf]}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) r3 = socket(0x2b, 0x1, 0x1) ioctl$auto(r3, 0x89a0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) 8.228247641s ago: executing program 3 (id=3128): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) socket(0x1d, 0x3, 0x1) getpeername$auto(0x3, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/47, 0x2f) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 7.265513787s ago: executing program 3 (id=3133): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) socket(0x1d, 0x3, 0x1) getpeername$auto(0x3, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/47, 0x2f) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 7.088622411s ago: executing program 2 (id=3134): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) socket(0x2, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xd, 0xc, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) execve$auto(&(0x7f0000000080)='\x00', &(0x7f00000001c0)=&(0x7f0000000180)='-\x00', &(0x7f00000002c0)=&(0x7f0000000200)='/dev/snd/midiC2D0\x00') mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 6.256914672s ago: executing program 3 (id=3137): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x3a) close$auto(r2) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x5, 0x6908, 0x80) r3 = open(0x0, 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/veth1_to_bond\x00', 0x2082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x801, 0x4f46, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) eventfd$auto(0xffff86c5) 5.439953859s ago: executing program 2 (id=3140): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000180)="976f29bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cda1b9fb125fbc752544c11d1640e59f86de019c613761b5d384219a3f53e519954888ce5cf54846c8e07", 0x7f) futex$auto(&(0x7f0000000080)=0x7, 0x69, 0x7, &(0x7f00000000c0)={0x100000001, 0x7fffffff}, &(0x7f0000000140)=0x7, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(r1, 0x0, 0x3) socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000f9dbdf250100000006000200000000000500070080000000080009000100000008000a000800000014001f00ffffff7f000000000000ffff000000001400200000000000000000000000ffff0000000006001b004e"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) socket(0x1e, 0x4, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyv3\x00', 0xc0a81, 0x0) ioctl$auto_TCFLSH2(r7, 0x5408, 0x0) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) 4.978088624s ago: executing program 0 (id=3142): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) socket(0x1d, 0x3, 0x1) getpeername$auto(0x3, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/47, 0x2f) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 4.91480389s ago: executing program 2 (id=3143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x5, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_O_TEI={0x8, 0x9, 0x5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x14) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') setsockopt$auto(r2, 0x1, 0xd, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x9) listen$auto(0x3, 0x81) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.649249867s ago: executing program 1 (id=3144): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) socket(0x1d, 0x3, 0x1) getpeername$auto(0x3, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/47, 0x2f) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 3.962799224s ago: executing program 0 (id=3145): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) socket(0x1d, 0x3, 0x1) getpeername$auto(0x3, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/47, 0x2f) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 3.748289431s ago: executing program 2 (id=3146): socket(0xa, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, 0x0, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/video42/power/control\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) write$auto(0x3, 0x0, 0xffd8) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) 3.649868056s ago: executing program 1 (id=3147): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) socket(0x1d, 0x3, 0x1) getpeername$auto(0x3, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/47, 0x2f) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 3.041451257s ago: executing program 0 (id=3148): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(r0, 0x0, 0x4) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x6}, 0x20000000) read$auto(r1, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0x3, 0x6, 0x4) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) getsockopt$auto_SO_TXREHASH(r2, 0xffffff00, 0x4a, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0x6, 0x100000000000000, 0xfff, 0xf]}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto(r4, 0x89a0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) 2.816871696s ago: executing program 0 (id=3149): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) socket(0x2, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xd, 0xc, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) execve$auto(&(0x7f0000000080)='\x00', &(0x7f00000001c0)=&(0x7f0000000180)='-\x00', &(0x7f00000002c0)=&(0x7f0000000200)='/dev/snd/midiC2D0\x00') mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 2.753516586s ago: executing program 1 (id=3150): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x63c1, 0x7ff) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) read$auto(r0, 0x0, 0x800) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x202041, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sysfs$auto(0x2, 0x1a, 0x0) mmap$auto(0xfffffffffffffffc, 0x400005, 0xdf, 0xf01b, r1, 0x8000) select$auto(0x80000001, 0x0, 0x0, &(0x7f0000000200)={[0x5, 0x7000000, 0xfff, 0x9, 0x0, 0x800000000e0, 0x2f84, 0x80, 0x6, 0x4, 0x4, 0x7, 0x8, 0x7, 0x40, 0x1]}, &(0x7f0000000000)={0xb, 0x3}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop7/queue/max_integrity_segments\x00', 0x244e82, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r2, 0x0, 0x2) write$auto(0x3, 0x0, 0xfdef) r3 = socket(0x11, 0x3, 0x0) setsockopt$auto(r3, 0x29, 0x2, 0x0, 0x2) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r4, 0x0, 0x10005, 0x830) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) 2.51598357s ago: executing program 1 (id=3151): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(0x0, 0x8001) mount$auto(0x0, 0x0, 0x0, 0x3, 0x0) unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) write$auto(r1, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xee\x0f_o\xc0\xee?\xce\xa3\x04\x95Hq\xf4\x00\x00\x00\x00\x00\x00\x006\xe0\xb1d)X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x80000000000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0xf0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, 0x0, 0x0) ioctl$auto_NS_GET_PID_IN_PIDNS(r0, 0x8004b708, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r5) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) 2.234908284s ago: executing program 3 (id=3152): r0 = syz_open_procfs$namespace(0x0, 0x0) fcntl$auto(r0, 0x402, 0xffffffffffffffff) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) getpid() r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x8c80, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000100)=""/237, 0xed) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sysfs$auto(0x2, 0xf, 0x0) r3 = fsopen$auto(0x0, 0x7) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_DEBUG(0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x2140, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0) r5 = epoll_create$auto(0x8) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r4, 0x454f, 0x5f, 0x0, 0x0, r4, 0x80000001}, 0x6d4) 2.020682665s ago: executing program 0 (id=3153): socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/video1\x00') prctl$auto(0x23, 0x4000000000000001, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x4, 0x2, 0x1, 0x2) r0 = socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x24, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x1, 0x0, 0x2, 0xd}, 0xacc}, 0x3, 0x10000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) setfsuid$auto(0xee00) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0xffd8) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) acct$auto(&(0x7f0000000000)='/proc/self/net/rpc/use-gss-proxy\x00') read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x40, 0x0) acct$auto(&(0x7f0000000200)='/d\x00VhW\xf9sf\f\x80\x9d!%\x0e\xd335\x9c\xd3\xe6*F\x10\x1d\x06og88!&\xf4\xe6\xda&bp\xd2(\x12/\r\xc2\"\x06\x111-{\xef\xfbI\xa23\xc6\xa6\xee\xe9\x11C\xf2:\x9c\xc6\xe9\xac\xc5\xca\xf8\xc8jH\x9fr\x9b\xf8F4\xa4\xd2\xc8o\xd4\xe6\xf7\x02\xff\x83\xaft\xbd\xa9\x14dr\xc7\xf5\axY\xe4x\xac\xd8\xad9\xd2\x17\xf4q\xd13\x02\xec\x95\x86\xbb\x00\xed\x8b\xcce?(v\x9cG\xbb\xeaw\xf3\x8d\xe0\xac\x9f`\xb2\x03\xc2Q\xde\x10\xa6\x11\x02\x00\x85c\x92p\xc4Q\xad4\x95u\x9d\xa3\x98\xf0\xecB\xa6\xc5\x88gya\xb5\xbaT\x97\x86A\xdfj\xcd;A<\x91\x10\x9dU\xbf\xf2\x93t\x80\xc3\xfb\xb2&\x13\x8c\xf3SF\xd1\x8b1D)gk\xb9\xcb\x8f\x01v-\x95\x06^\x10`\xe4\xc9\xd2\xa1\"\x88\x1e\x9a\xa6\xec\xff~ZkJ\'\x84FC\xa9\x01J\x8f\xcd\x80<*\xf5\\F\x84<\xf2\xb0$Q\xb2\xa4Y|\x83p?\tL\xe4\x10\x85jGBQ\x1f\x90\x1f\x0es\xbf\xc3\xf8d2\xd5\x01\"{&\xd6G\xf9\xccI[\x00$\x04\xc2\xde;\xdf\xd4\xae\x0fo\xc6\xe8\x87\xff]\xdf\x04AEy\x1f\xb6\xf1+XQ\xc2j\x86\xc6\x0ed\x7f{\n\xed95==O3AQ\xc8\xb7\xe0\x16pg\x00\x00\x00\x00\x00\x00\x00\x00\x00') close_range$auto(0x2, 0x8, 0x0) 1.301773063s ago: executing program 3 (id=3154): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x200, 0x0) read$auto_proc_mem_operations_base(r0, &(0x7f0000000200)=""/81, 0x51) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x5, 0x0) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0xfff}, 0x3) acct$auto(&(0x7f0000000180)=':.\xf8}/\x00') io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) mbind$auto(0x0, 0x108000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) 1.300101063s ago: executing program 0 (id=3162): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x470000000, 0xd, 0x4000000000000df, 0x109b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000040)={0x5, 0x8, 0x80000001, 0x1000, 0x4, 0x2}, 0x8001, 0x0, 0x7) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x8009) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000140), 0x84000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x2, 0x4}) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x10000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) 877.492651ms ago: executing program 1 (id=3155): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0xffffffffffffffff, &(0x7f0000000240)='/dev/vhost-net\x00', 0x4) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x6}, 0x20000000) read$auto(r0, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0x3, 0x6, 0x4) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) getsockopt$auto_SO_TXREHASH(r1, 0xffffff00, 0x4a, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0x6, 0x100000000000000, 0xfff, 0xf]}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) r3 = socket(0x2b, 0x1, 0x1) ioctl$auto(r3, 0x89a0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) 853.194134ms ago: executing program 2 (id=3156): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(r0, &(0x7f0000000240)='/dev/vhost-net\x00', 0x4) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x6}, 0x20000000) read$auto(r1, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0x3, 0x6, 0x4) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) getsockopt$auto_SO_TXREHASH(r2, 0xffffff00, 0x4a, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0x6, 0x100000000000000, 0xfff, 0xf]}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto(r4, 0x89a0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) 159.273342ms ago: executing program 1 (id=3157): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(r0, 0x0, 0x4) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x6}, 0x20000000) read$auto(r1, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0x3, 0x6, 0x4) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) getsockopt$auto_SO_TXREHASH(r2, 0xffffff00, 0x4a, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0x6, 0x100000000000000, 0xfff, 0xf]}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto(r4, 0x89a0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) 0s ago: executing program 2 (id=3158): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x26, 0x5, 0x8c68) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) futex_waitv$auto(&(0x7f0000000040)={0x9, 0x1, 0xc}, 0x7ff, 0x8, &(0x7f00000000c0)={0x4, 0x10}, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr0\x00', 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0) read$auto(r4, 0x0, 0xb4d3) unshare$auto(0x40000080) setsockopt$auto(r0, 0xd0, 0x800000e4, 0x0, 0x569) kernel console output (not intermixed with test programs): 0][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 249.512039][ T8365] netlink: 354 bytes leftover after parsing attributes in process `syz.3.479'. [ 249.670644][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 249.701334][ T8367] netlink: 354 bytes leftover after parsing attributes in process `syz.3.480'. [ 250.267741][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.484'. [ 253.858022][ T8439] Invalid ELF header magic: != ELF [ 254.239508][ T8431] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.245631][ T8431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.255778][ T8431] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.262156][ T8431] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.655904][ T30] audit: type=1800 audit(1771849540.308:4): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.497" name="dbroot" dev="configfs" ino=21200 res=0 errno=0 [ 254.817200][ T8458] Invalid ELF header magic: != ELF [ 255.834709][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.856859][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.309637][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.317065][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 256.317152][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 256.329502][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 258.737069][ T8514] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 259.644507][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.508'. [ 259.689158][ T8526] Invalid ELF header magic: != ELF [ 260.267842][ T8532] bond0: invalid ARP target specified [ 260.286680][ T8532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.511'. [ 260.340442][ T8533] FAULT_INJECTION: forcing a failure. [ 260.340442][ T8533] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 260.390163][ T8533] CPU: 1 UID: 0 PID: 8533 Comm: syz.1.511 Tainted: G U L syzkaller #0 PREEMPT(full) [ 260.390211][ T8533] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 260.390220][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.390245][ T8533] Call Trace: [ 260.390255][ T8533] [ 260.390270][ T8533] dump_stack_lvl+0x100/0x190 [ 260.390318][ T8533] should_fail_ex.cold+0x5/0xa [ 260.390343][ T8533] ? prepare_alloc_pages+0x16d/0x5f0 [ 260.390375][ T8533] should_fail_alloc_page+0xeb/0x140 [ 260.390407][ T8533] prepare_alloc_pages+0x1f0/0x5f0 [ 260.390445][ T8533] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 260.390494][ T8533] ? __lock_acquire+0x4a5/0x2630 [ 260.390543][ T8533] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 260.390587][ T8533] ? do_raw_spin_lock+0x128/0x260 [ 260.390625][ T8533] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 260.390662][ T8533] ? find_held_lock+0x2b/0x80 [ 260.390694][ T8533] ? __lock_acquire+0x4a5/0x2630 [ 260.390725][ T8533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 260.390769][ T8533] ? policy_nodemask+0xed/0x4f0 [ 260.390795][ T8533] alloc_pages_mpol+0x1fb/0x550 [ 260.390821][ T8533] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 260.390845][ T8533] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 260.390881][ T8533] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 260.390923][ T8533] folio_alloc_mpol_noprof+0x36/0x340 [ 260.390956][ T8533] shmem_alloc_folio+0x135/0x160 [ 260.391013][ T8533] shmem_alloc_and_add_folio+0x371/0xd40 [ 260.391061][ T8533] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 260.391103][ T8533] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 260.391143][ T8533] shmem_get_folio_gfp+0x6ab/0x1900 [ 260.391189][ T8533] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 260.391227][ T8533] ? filemap_map_pages+0xe69/0x2020 [ 260.391266][ T8533] shmem_fault+0x1f9/0xa20 [ 260.391300][ T8533] ? __lock_acquire+0x4a5/0x2630 [ 260.391322][ T8533] ? __pfx_shmem_fault+0x10/0x10 [ 260.391345][ T8533] ? __pfx_filemap_map_pages+0x10/0x10 [ 260.391370][ T8533] __do_fault+0x10d/0x550 [ 260.391393][ T8533] do_fault+0xaf9/0x1950 [ 260.391420][ T8533] __handle_mm_fault+0x180f/0x2b60 [ 260.391456][ T8533] ? mt_find+0x45e/0x8e0 [ 260.391488][ T8533] ? __pfx___handle_mm_fault+0x10/0x10 [ 260.391520][ T8533] ? __pfx_mt_find+0x10/0x10 [ 260.391551][ T8533] ? find_vma+0xbf/0x140 [ 260.391572][ T8533] ? __pfx_find_vma+0x10/0x10 [ 260.391596][ T8533] handle_mm_fault+0x36d/0xa20 [ 260.391617][ T8533] do_user_addr_fault+0x74c/0x12f0 [ 260.391646][ T8533] exc_page_fault+0x6f/0xd0 [ 260.391662][ T8533] asm_exc_page_fault+0x26/0x30 [ 260.391676][ T8533] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 260.391697][ T8533] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 260.391711][ T8533] RSP: 0018:ffffc900061e7d30 EFLAGS: 00050206 [ 260.391732][ T8533] RAX: 0000000000000001 RBX: 0000000000001fe4 RCX: 0000000000003b84 [ 260.391744][ T8533] RDX: 0000000000000001 RSI: 0000000000006000 RDI: ffffc900061d407c [ 260.391754][ T8533] RBP: 0000000000007ba0 R08: 0000000000000001 R09: fffff52000c3af7f [ 260.391762][ T8533] R10: ffffc900061d7bff R11: 0000000000000000 R12: 0000000000000000 [ 260.391772][ T8533] R13: ffffc900061d0060 R14: 0000000000007ba0 R15: ffffc900061d0060 [ 260.391791][ T8533] _copy_from_user+0x98/0xd0 [ 260.391815][ T8533] bpf_prog_create_from_user+0x109/0x2f0 [ 260.391835][ T8533] ? __pfx_seccomp_check_filter+0x10/0x10 [ 260.391854][ T8533] do_seccomp+0x7f7/0x2740 [ 260.391878][ T8533] ? __pfx_do_seccomp+0x10/0x10 [ 260.391896][ T8533] ? __x64_sys_openat+0x12d/0x210 [ 260.391916][ T8533] ? xfd_validate_state+0x129/0x190 [ 260.391943][ T8533] do_syscall_64+0x106/0xf80 [ 260.391957][ T8533] ? clear_bhb_loop+0x40/0x90 [ 260.391974][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.391997][ T8533] RIP: 0033:0x7fdd96f9c629 [ 260.392010][ T8533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.392023][ T8533] RSP: 002b:00007fdd97ea9028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 260.392037][ T8533] RAX: ffffffffffffffda RBX: 00007fdd97216090 RCX: 00007fdd96f9c629 [ 260.392047][ T8533] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 260.392055][ T8533] RBP: 00007fdd97032b39 R08: 0000000000000000 R09: 0000000000000000 [ 260.392064][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.392073][ T8533] R13: 00007fdd97216128 R14: 00007fdd97216090 R15: 00007ffec432e2a8 [ 260.392095][ T8533] [ 261.029405][ T8528] usb usb24: usbfs: process 8528 (syz.3.510) did not claim interface 0 before use [ 261.441029][ T8550] Invalid ELF header magic: != ELF [ 264.333181][ T30] audit: type=1807 audit(1771849549.983:5): UNKNOWN=тяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяяятяя [ 264.338702][ T30] audit: type=1802 audit(1771849549.993:6): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.518" res=0 errno=0 [ 264.781515][ T8575] ima: policy update failed [ 264.843543][ T30] audit: type=1802 audit(1771849550.483:7): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.518" res=0 errno=0 [ 265.213796][ T8598] Invalid ELF header magic: != ELF [ 265.680453][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 266.292384][ T8613] nbd: must specify at least one socket [ 267.313007][ T8622] bond0: option slaves: interface -Вф does not exist! [ 268.306987][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 268.346685][ T8639] netlink: 354 bytes leftover after parsing attributes in process `syz.3.531'. [ 268.364932][ T8635] Invalid ELF header magic: != ELF [ 271.446824][ T8674] Invalid ELF header magic: != ELF [ 272.544546][ T8678] bond0: option slaves: interface -Вф does not exist! [ 275.278487][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 275.288613][ T8713] netlink: 354 bytes leftover after parsing attributes in process `syz.2.545'. [ 275.535097][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 275.570107][ T8721] netlink: 354 bytes leftover after parsing attributes in process `syz.3.549'. [ 277.000923][ T8725] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.023951][ T8725] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.065689][ T8725] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.080499][ T8725] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.378727][ T8750] nbd: must specify at least one socket [ 277.392175][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'. [ 277.435863][ T8749] netlink: 354 bytes leftover after parsing attributes in process `syz.1.554'. [ 277.581168][ T8750] FAULT_INJECTION: forcing a failure. [ 277.581168][ T8750] name failslab, interval 1, probability 0, space 0, times 0 [ 277.710494][ T8750] CPU: 1 UID: 0 PID: 8750 Comm: syz.3.552 Tainted: G U L syzkaller #0 PREEMPT(full) [ 277.710544][ T8750] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 277.710555][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.710575][ T8750] Call Trace: [ 277.710583][ T8750] [ 277.710594][ T8750] dump_stack_lvl+0x100/0x190 [ 277.710643][ T8750] should_fail_ex.cold+0x5/0xa [ 277.710676][ T8750] should_failslab+0xc2/0x120 [ 277.710704][ T8750] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 277.710746][ T8750] ? __alloc_skb+0x140/0x710 [ 277.710781][ T8750] __alloc_skb+0x140/0x710 [ 277.710807][ T8750] ? __alloc_skb+0x5b7/0x710 [ 277.710833][ T8750] ? __pfx___alloc_skb+0x10/0x10 [ 277.710859][ T8750] ? rtnl_prop_list_size+0x144/0x2c0 [ 277.710891][ T8750] ? if_nlmsg_size+0x4a4/0xb30 [ 277.710927][ T8750] rtmsg_ifinfo_build_skb+0x81/0x260 [ 277.710968][ T8750] unregister_netdevice_many_notify+0x12b6/0x2580 [ 277.711020][ T8750] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 277.711075][ T8750] unregister_netdevice_queue+0x30b/0x3c0 [ 277.711112][ T8750] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 277.711147][ T8750] ? __pfx_locks_remove_file+0x10/0x10 [ 277.711194][ T8750] ppp_release+0x211/0x230 [ 277.711222][ T8750] ? __pfx_ppp_release+0x10/0x10 [ 277.711247][ T8750] __fput+0x3ff/0xb40 [ 277.711288][ T8750] task_work_run+0x150/0x240 [ 277.711329][ T8750] ? __pfx_task_work_run+0x10/0x10 [ 277.711378][ T8750] exit_to_user_mode_loop+0x100/0x4a0 [ 277.711418][ T8750] do_syscall_64+0x668/0xf80 [ 277.711448][ T8750] ? clear_bhb_loop+0x40/0x90 [ 277.711483][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.711512][ T8750] RIP: 0033:0x7faff539c629 [ 277.711537][ T8750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.711564][ T8750] RSP: 002b:00007faff6257028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 277.711590][ T8750] RAX: 0000000000000000 RBX: 00007faff5616090 RCX: 00007faff539c629 [ 277.711608][ T8750] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 277.711624][ T8750] RBP: 00007faff5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 277.711642][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.711657][ T8750] R13: 00007faff5616128 R14: 00007faff5616090 R15: 00007ffd5e27e1a8 [ 277.711696][ T8750] [ 278.640669][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 279.120905][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.127015][ T5821] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.133079][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 279.425845][ T8773] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 280.123255][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 280.142481][ T8794] netlink: 354 bytes leftover after parsing attributes in process `syz.2.564'. [ 280.715179][ T8793] Invalid ELF header magic: != ELF [ 283.367352][ T8829] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 284.262283][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 284.292181][ T8848] netlink: 'syz.1.574': attribute type 1 has an invalid length. [ 284.351887][ T8848] netlink: 51505 bytes leftover after parsing attributes in process `syz.1.574'. [ 289.641521][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'. [ 289.650822][ T8926] ipvlan1: entered promiscuous mode [ 289.656694][ T8926] ipvlan1: entered allmulticast mode [ 289.664288][ T8926] veth0_vlan: entered allmulticast mode [ 289.982387][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 290.008356][ T8941] netlink: 354 bytes leftover after parsing attributes in process `syz.2.595'. [ 291.225986][ T8957] syz.0.601 uses obsolete (PF_INET,SOCK_PACKET) [ 292.382534][ T8969] FAULT_INJECTION: forcing a failure. [ 292.382534][ T8969] name failslab, interval 1, probability 0, space 0, times 0 [ 292.582263][ T8969] CPU: 1 UID: 0 PID: 8969 Comm: syz.0.602 Tainted: G U L syzkaller #0 PREEMPT(full) [ 292.582314][ T8969] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 292.582325][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.582341][ T8969] Call Trace: [ 292.582349][ T8969] [ 292.582360][ T8969] dump_stack_lvl+0x100/0x190 [ 292.582408][ T8969] should_fail_ex.cold+0x5/0xa [ 292.582439][ T8969] should_failslab+0xc2/0x120 [ 292.582465][ T8969] __kmalloc_cache_noprof+0x7a/0x6f0 [ 292.582499][ T8969] ? percpu_ref_init+0xec/0x3f0 [ 292.582539][ T8969] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 292.582582][ T8969] percpu_ref_init+0xec/0x3f0 [ 292.582614][ T8969] ? __init_waitqueue_head+0xca/0x150 [ 292.582669][ T8969] ioctx_alloc+0x3ee/0x21d0 [ 292.582710][ T8969] ? find_held_lock+0x2b/0x80 [ 292.582737][ T8969] ? __pfx_ioctx_alloc+0x10/0x10 [ 292.582776][ T8969] __x64_sys_io_setup+0xc9/0x220 [ 292.582807][ T8969] do_syscall_64+0x106/0xf80 [ 292.582837][ T8969] ? clear_bhb_loop+0x40/0x90 [ 292.582872][ T8969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.582901][ T8969] RIP: 0033:0x7fa8a239c629 [ 292.582924][ T8969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.582949][ T8969] RSP: 002b:00007fa8a05d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 292.582976][ T8969] RAX: ffffffffffffffda RBX: 00007fa8a2616180 RCX: 00007fa8a239c629 [ 292.582995][ T8969] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 292.583011][ T8969] RBP: 00007fa8a2432b39 R08: 0000000000000000 R09: 0000000000000000 [ 292.583028][ T8969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.583044][ T8969] R13: 00007fa8a2616218 R14: 00007fa8a2616180 R15: 00007ffd38151248 [ 292.583081][ T8969] [ 293.259900][ T8987] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 295.712825][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 295.722450][ T9018] netlink: 354 bytes leftover after parsing attributes in process `syz.3.610'. [ 299.721846][ T5833] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 299.729421][ T5833] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 300.718514][ T9091] FAULT_INJECTION: forcing a failure. [ 300.718514][ T9091] name failslab, interval 1, probability 0, space 0, times 0 [ 300.896891][ T9091] CPU: 0 UID: 0 PID: 9091 Comm: syz.2.620 Tainted: G U L syzkaller #0 PREEMPT(full) [ 300.896942][ T9091] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 300.896953][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.896970][ T9091] Call Trace: [ 300.896979][ T9091] [ 300.896990][ T9091] dump_stack_lvl+0x100/0x190 [ 300.897039][ T9091] should_fail_ex.cold+0x5/0xa [ 300.897073][ T9091] ? __seq_open_private+0x22/0xd0 [ 300.897111][ T9091] should_failslab+0xc2/0x120 [ 300.897139][ T9091] __kmalloc_noprof+0xe0/0x850 [ 300.897186][ T9091] ? __pfx_stats_fop_open+0x10/0x10 [ 300.897213][ T9091] __seq_open_private+0x22/0xd0 [ 300.897253][ T9091] sc_common_open+0x6b/0x200 [ 300.897282][ T9091] full_proxy_open_regular+0x1b6/0x370 [ 300.897322][ T9091] do_dentry_open+0x6d8/0x1660 [ 300.897366][ T9091] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 300.897415][ T9091] vfs_open+0x82/0x3f0 [ 300.897454][ T9091] path_openat+0x208c/0x31a0 [ 300.897494][ T9091] ? __pfx_path_openat+0x10/0x10 [ 300.897533][ T9091] do_file_open+0x20e/0x430 [ 300.897563][ T9091] ? __pfx_do_file_open+0x10/0x10 [ 300.897616][ T9091] ? alloc_fd+0x476/0x790 [ 300.897663][ T9091] ? do_getname+0x191/0x390 [ 300.897698][ T9091] do_sys_openat2+0x10d/0x1e0 [ 300.897741][ T9091] ? __pfx_do_sys_openat2+0x10/0x10 [ 300.897787][ T9091] ? __fget_files+0x21f/0x3d0 [ 300.897839][ T9091] __x64_sys_openat+0x12d/0x210 [ 300.897875][ T9091] ? __pfx___x64_sys_openat+0x10/0x10 [ 300.897935][ T9091] do_syscall_64+0x106/0xf80 [ 300.897967][ T9091] ? clear_bhb_loop+0x40/0x90 [ 300.898001][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.898030][ T9091] RIP: 0033:0x7fd55a59c629 [ 300.898056][ T9091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.898082][ T9091] RSP: 002b:00007fd55b3c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 300.898109][ T9091] RAX: ffffffffffffffda RBX: 00007fd55a816090 RCX: 00007fd55a59c629 [ 300.898128][ T9091] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 300.898147][ T9091] RBP: 00007fd55a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 300.898164][ T9091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.898181][ T9091] R13: 00007fd55a816128 R14: 00007fd55a816090 R15: 00007ffd7f29d0b8 [ 300.898218][ T9091] [ 302.914810][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 306.563257][ T9180] FAULT_INJECTION: forcing a failure. [ 306.563257][ T9180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.583835][ T9180] CPU: 0 UID: 0 PID: 9180 Comm: syz.1.637 Tainted: G U L syzkaller #0 PREEMPT(full) [ 306.583879][ T9180] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 306.583888][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.583902][ T9180] Call Trace: [ 306.583910][ T9180] [ 306.583919][ T9180] dump_stack_lvl+0x100/0x190 [ 306.583966][ T9180] should_fail_ex.cold+0x5/0xa [ 306.583991][ T9180] ? prepare_alloc_pages+0x16d/0x5f0 [ 306.584023][ T9180] should_fail_alloc_page+0xeb/0x140 [ 306.584049][ T9180] prepare_alloc_pages+0x1f0/0x5f0 [ 306.584082][ T9180] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 306.584122][ T9180] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 306.584151][ T9180] ? lockdep_hardirqs_on+0x78/0x100 [ 306.584204][ T9180] ? find_held_lock+0x2b/0x80 [ 306.584230][ T9180] ? is_bpf_text_address+0x8a/0x1a0 [ 306.584273][ T9180] ? is_bpf_text_address+0x8a/0x1a0 [ 306.584318][ T9180] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 306.584360][ T9180] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 306.584394][ T9180] ? kernel_text_address+0x8d/0x100 [ 306.584435][ T9180] ? __kernel_text_address+0xd/0x30 [ 306.584475][ T9180] ? unwind_get_return_address+0x59/0xa0 [ 306.584518][ T9180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.584564][ T9180] ? policy_nodemask+0xed/0x4f0 [ 306.584595][ T9180] alloc_pages_mpol+0x1fb/0x550 [ 306.584624][ T9180] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 306.584661][ T9180] alloc_pages_noprof+0x131/0x390 [ 306.584692][ T9180] __pud_alloc+0x3b/0x760 [ 306.584726][ T9180] __handle_mm_fault+0x134c/0x2b60 [ 306.584765][ T9180] ? mt_find+0x45e/0x8e0 [ 306.584798][ T9180] ? __pfx___handle_mm_fault+0x10/0x10 [ 306.584828][ T9180] ? __pfx_mt_find+0x10/0x10 [ 306.584889][ T9180] handle_mm_fault+0x36d/0xa20 [ 306.584930][ T9180] __get_user_pages+0xf9c/0x34d0 [ 306.584970][ T9180] ? __pfx___get_user_pages+0x10/0x10 [ 306.585005][ T9180] get_user_pages_remote+0x3d2/0xb10 [ 306.585037][ T9180] ? __pfx_get_user_pages_remote+0x10/0x10 [ 306.585075][ T9180] get_arg_page+0xf4/0x310 [ 306.585109][ T9180] ? __pfx_get_arg_page+0x10/0x10 [ 306.585151][ T9180] copy_string_kernel+0x17d/0x500 [ 306.585194][ T9180] ? alloc_bprm+0x420/0x710 [ 306.585231][ T9180] do_execveat_common.isra.0+0x2e6/0x580 [ 306.585275][ T9180] __x64_sys_execve+0x93/0xd0 [ 306.585313][ T9180] do_syscall_64+0x106/0xf80 [ 306.585340][ T9180] ? clear_bhb_loop+0x40/0x90 [ 306.585370][ T9180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.585395][ T9180] RIP: 0033:0x7fdd96f9c629 [ 306.585417][ T9180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.585442][ T9180] RSP: 002b:00007fdd97ea9028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 306.585466][ T9180] RAX: ffffffffffffffda RBX: 00007fdd97216090 RCX: 00007fdd96f9c629 [ 306.585482][ T9180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 306.585497][ T9180] RBP: 00007fdd97032b39 R08: 0000000000000000 R09: 0000000000000000 [ 306.585512][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.585527][ T9180] R13: 00007fdd97216128 R14: 00007fdd97216090 R15: 00007ffec432e2a8 [ 306.585560][ T9180] [ 307.261940][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 312.701906][ T9257] FAULT_INJECTION: forcing a failure. [ 312.701906][ T9257] name failslab, interval 1, probability 0, space 0, times 0 [ 312.775358][ T9257] CPU: 0 UID: 0 PID: 9257 Comm: syz.3.649 Tainted: G U L syzkaller #0 PREEMPT(full) [ 312.775404][ T9257] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 312.775413][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.775427][ T9257] Call Trace: [ 312.775436][ T9257] [ 312.775447][ T9257] dump_stack_lvl+0x100/0x190 [ 312.775493][ T9257] should_fail_ex.cold+0x5/0xa [ 312.775525][ T9257] ? memcg_list_lru_alloc+0x4ec/0x740 [ 312.775563][ T9257] should_failslab+0xc2/0x120 [ 312.775599][ T9257] __kmalloc_noprof+0xe0/0x850 [ 312.775645][ T9257] memcg_list_lru_alloc+0x4ec/0x740 [ 312.775696][ T9257] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 312.775734][ T9257] ? rcu_read_unlock+0x17/0x60 [ 312.775771][ T9257] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 312.775815][ T9257] __memcg_slab_post_alloc_hook+0x12f/0x9a0 [ 312.775853][ T9257] ? kasan_save_track+0x14/0x30 [ 312.775896][ T9257] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 312.775936][ T9257] ? alloc_inode+0x183/0x250 [ 312.775971][ T9257] ? ioctx_alloc+0x427/0x21d0 [ 312.776004][ T9257] alloc_inode+0x183/0x250 [ 312.776038][ T9257] alloc_anon_inode+0x2a/0x3e0 [ 312.776085][ T9257] ioctx_alloc+0x4dc/0x21d0 [ 312.776130][ T9257] ? find_held_lock+0x2b/0x80 [ 312.776158][ T9257] ? __pfx_ioctx_alloc+0x10/0x10 [ 312.776196][ T9257] __x64_sys_io_setup+0xc9/0x220 [ 312.776228][ T9257] do_syscall_64+0x106/0xf80 [ 312.776259][ T9257] ? clear_bhb_loop+0x40/0x90 [ 312.776295][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.776322][ T9257] RIP: 0033:0x7faff539c629 [ 312.776346][ T9257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.776374][ T9257] RSP: 002b:00007faff61f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 312.776401][ T9257] RAX: ffffffffffffffda RBX: 00007faff5616360 RCX: 00007faff539c629 [ 312.776420][ T9257] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 312.776436][ T9257] RBP: 00007faff5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 312.776453][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.776469][ T9257] R13: 00007faff56163f8 R14: 00007faff5616360 R15: 00007ffd5e27e1a8 [ 312.776501][ T9257] [ 315.539146][ T5821] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 316.007134][ T9291] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 317.304555][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.311098][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.105484][ T9378] Invalid ELF header magic: != ELF [ 321.001032][ T9391] FAULT_INJECTION: forcing a failure. [ 321.001032][ T9391] name failslab, interval 1, probability 0, space 0, times 0 [ 321.206770][ T9391] CPU: 0 UID: 0 PID: 9391 Comm: syz.2.667 Tainted: G U L syzkaller #0 PREEMPT(full) [ 321.206820][ T9391] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 321.206831][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.206848][ T9391] Call Trace: [ 321.206857][ T9391] [ 321.206867][ T9391] dump_stack_lvl+0x100/0x190 [ 321.206912][ T9391] should_fail_ex.cold+0x5/0xa [ 321.206945][ T9391] should_failslab+0xc2/0x120 [ 321.206973][ T9391] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 321.207015][ T9391] ? __d_alloc+0x34/0xa80 [ 321.207044][ T9391] ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300 [ 321.207087][ T9391] __d_alloc+0x34/0xa80 [ 321.207113][ T9391] ? inode_set_ctime_current+0x283/0x8a0 [ 321.207147][ T9391] d_alloc_pseudo+0x1c/0xc0 [ 321.207184][ T9391] alloc_file_pseudo+0xcf/0x230 [ 321.207219][ T9391] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 321.207264][ T9391] ioctx_alloc+0x5d9/0x21d0 [ 321.207305][ T9391] ? find_held_lock+0x2b/0x80 [ 321.207333][ T9391] ? __pfx_ioctx_alloc+0x10/0x10 [ 321.207372][ T9391] __x64_sys_io_setup+0xc9/0x220 [ 321.207404][ T9391] do_syscall_64+0x106/0xf80 [ 321.207434][ T9391] ? clear_bhb_loop+0x40/0x90 [ 321.207479][ T9391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.207508][ T9391] RIP: 0033:0x7fd55a59c629 [ 321.207532][ T9391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.207560][ T9391] RSP: 002b:00007fd557ff2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 321.207587][ T9391] RAX: ffffffffffffffda RBX: 00007fd55a816360 RCX: 00007fd55a59c629 [ 321.207607][ T9391] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 321.207624][ T9391] RBP: 00007fd55a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 321.207641][ T9391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.207657][ T9391] R13: 00007fd55a8163f8 R14: 00007fd55a816360 R15: 00007ffd7f29d0b8 [ 321.207694][ T9391] [ 322.769236][ T9401] nvme_fcloop: unknown parameter or missing value '7' [ 322.943984][ T9399] FAULT_INJECTION: forcing a failure. [ 322.943984][ T9399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.967597][ T9399] CPU: 1 UID: 0 PID: 9399 Comm: syz.0.669 Tainted: G U L syzkaller #0 PREEMPT(full) [ 322.967647][ T9399] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 322.967658][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.967674][ T9399] Call Trace: [ 322.967682][ T9399] [ 322.967693][ T9399] dump_stack_lvl+0x100/0x190 [ 322.967743][ T9399] should_fail_ex.cold+0x5/0xa [ 322.967772][ T9399] ? prepare_alloc_pages+0x16d/0x5f0 [ 322.967807][ T9399] should_fail_alloc_page+0xeb/0x140 [ 322.967838][ T9399] prepare_alloc_pages+0x1f0/0x5f0 [ 322.967875][ T9399] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 322.967922][ T9399] ? mark_held_locks+0x40/0x70 [ 322.967956][ T9399] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 322.967986][ T9399] ? lockdep_hardirqs_on+0x78/0x100 [ 322.968016][ T9399] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 322.968044][ T9399] ? stack_depot_save_flags+0x479/0x9d0 [ 322.968095][ T9399] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 322.968136][ T9399] ? kasan_save_stack+0x3f/0x50 [ 322.968173][ T9399] ? kasan_save_stack+0x30/0x50 [ 322.968212][ T9399] ? __kasan_slab_alloc+0x89/0x90 [ 322.968253][ T9399] ? __pmd_alloc+0xbf/0x9c0 [ 322.968281][ T9399] ? walk_pgd_range+0x896/0x1eb0 [ 322.968319][ T9399] ? __walk_page_range+0x163/0x820 [ 322.968357][ T9399] ? walk_page_range_mm_unsafe+0x563/0xa10 [ 322.968397][ T9399] ? madvise_guard_install+0x2f9/0x7c0 [ 322.968433][ T9399] ? madvise_vma_behavior+0x11f1/0x3050 [ 322.968463][ T9399] ? madvise_walk_vmas+0x2fe/0xa90 [ 322.968492][ T9399] ? madvise_do_behavior+0x1ea/0x510 [ 322.968521][ T9399] ? do_madvise+0x195/0x240 [ 322.968565][ T9399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.968613][ T9399] ? policy_nodemask+0xed/0x4f0 [ 322.968644][ T9399] alloc_pages_mpol+0x1fb/0x550 [ 322.968673][ T9399] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 322.968712][ T9399] alloc_pages_noprof+0x131/0x390 [ 322.968742][ T9399] pte_alloc_one+0x1e/0x3e0 [ 322.968775][ T9399] __pte_alloc+0x6d/0x3f0 [ 322.968800][ T9399] ? __pfx___pte_alloc+0x10/0x10 [ 322.968827][ T9399] ? _raw_spin_unlock+0x28/0x50 [ 322.968870][ T9399] ? __pmd_alloc+0x6aa/0x9c0 [ 322.968903][ T9399] walk_pgd_range+0xb83/0x1eb0 [ 322.968949][ T9399] ? __pfx_guard_install_set_pte+0x10/0x10 [ 322.968977][ T9399] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 322.969008][ T9399] ? __pfx_guard_install_set_pte+0x10/0x10 [ 322.969041][ T9399] ? __pfx_guard_install_set_pte+0x10/0x10 [ 322.969070][ T9399] ? __pfx_guard_install_set_pte+0x10/0x10 [ 322.969101][ T9399] ? __pfx_walk_pgd_range+0x10/0x10 [ 322.969152][ T9399] __walk_page_range+0x163/0x820 [ 322.969196][ T9399] ? find_vma+0xbf/0x140 [ 322.969237][ T9399] ? __pfx_find_vma+0x10/0x10 [ 322.969283][ T9399] ? walk_page_test+0x78/0x180 [ 322.969325][ T9399] walk_page_range_mm_unsafe+0x563/0xa10 [ 322.969373][ T9399] ? __pfx_walk_page_range_mm_unsafe+0x10/0x10 [ 322.969434][ T9399] ? __anon_vma_prepare+0x2e2/0x5e0 [ 322.969475][ T9399] madvise_guard_install+0x2f9/0x7c0 [ 322.969515][ T9399] ? __pfx_madvise_guard_install+0x10/0x10 [ 322.969550][ T9399] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 322.969577][ T9399] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 322.969604][ T9399] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 322.969638][ T9399] ? __pfx_guard_install_set_pte+0x10/0x10 [ 322.969677][ T9399] madvise_vma_behavior+0x11f1/0x3050 [ 322.969714][ T9399] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 322.969745][ T9399] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 322.969783][ T9399] ? mas_prev+0x9b/0xf0 [ 322.969814][ T9399] ? __pfx_mas_prev+0x10/0x10 [ 322.969857][ T9399] ? find_vma_prev+0xd8/0x150 [ 322.969883][ T9399] ? lock_vma_under_rcu+0x1f9/0x590 [ 322.969917][ T9399] ? __pfx_find_vma_prev+0x10/0x10 [ 322.969955][ T9399] ? find_held_lock+0x2b/0x80 [ 322.969980][ T9399] ? madvise_do_behavior+0x1ea/0x510 [ 322.970009][ T9399] ? madvise_do_behavior+0x1ea/0x510 [ 322.970047][ T9399] madvise_walk_vmas+0x2fe/0xa90 [ 322.970084][ T9399] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 322.970118][ T9399] ? find_held_lock+0x2b/0x80 [ 322.970149][ T9399] madvise_do_behavior+0x1ea/0x510 [ 322.970183][ T9399] ? __pfx_madvise_do_behavior+0x10/0x10 [ 322.970213][ T9399] ? futex_wait+0x125/0x380 [ 322.970266][ T9399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.970317][ T9399] do_madvise+0x195/0x240 [ 322.970346][ T9399] ? __pfx_do_madvise+0x10/0x10 [ 322.970376][ T9399] ? do_futex+0x192/0x350 [ 322.970453][ T9399] __x64_sys_madvise+0xa9/0x110 [ 322.970484][ T9399] ? lockdep_hardirqs_on+0x78/0x100 [ 322.970515][ T9399] do_syscall_64+0x106/0xf80 [ 322.970546][ T9399] ? clear_bhb_loop+0x40/0x90 [ 322.970581][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.970610][ T9399] RIP: 0033:0x7fa8a239c629 [ 322.970635][ T9399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.970662][ T9399] RSP: 002b:00007fa8a318e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 322.970690][ T9399] RAX: ffffffffffffffda RBX: 00007fa8a2615fa0 RCX: 00007fa8a239c629 [ 322.970709][ T9399] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 322.970726][ T9399] RBP: 00007fa8a2432b39 R08: 0000000000000000 R09: 0000000000000000 [ 322.970743][ T9399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.970759][ T9399] R13: 00007fa8a2616038 R14: 00007fa8a2615fa0 R15: 00007ffd38151248 [ 322.970798][ T9399] [ 329.086693][ T9502] FAULT_INJECTION: forcing a failure. [ 329.086693][ T9502] name failslab, interval 1, probability 0, space 0, times 0 [ 329.117391][ T9502] CPU: 0 UID: 0 PID: 9502 Comm: syz.1.682 Tainted: G U L syzkaller #0 PREEMPT(full) [ 329.117436][ T9502] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 329.117446][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.117461][ T9502] Call Trace: [ 329.117470][ T9502] [ 329.117480][ T9502] dump_stack_lvl+0x100/0x190 [ 329.117510][ T9502] should_fail_ex.cold+0x5/0xa [ 329.117528][ T9502] ? memcg_list_lru_alloc+0x4ec/0x740 [ 329.117549][ T9502] should_failslab+0xc2/0x120 [ 329.117563][ T9502] __kmalloc_noprof+0xe0/0x850 [ 329.117595][ T9502] memcg_list_lru_alloc+0x4ec/0x740 [ 329.117621][ T9502] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 329.117641][ T9502] ? rcu_read_unlock+0x17/0x60 [ 329.117661][ T9502] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 329.117683][ T9502] __memcg_slab_post_alloc_hook+0x12f/0x9a0 [ 329.117703][ T9502] ? kasan_save_track+0x14/0x30 [ 329.117725][ T9502] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 329.117746][ T9502] ? alloc_inode+0x183/0x250 [ 329.117763][ T9502] ? ioctx_alloc+0x427/0x21d0 [ 329.117780][ T9502] alloc_inode+0x183/0x250 [ 329.117797][ T9502] alloc_anon_inode+0x2a/0x3e0 [ 329.117820][ T9502] ioctx_alloc+0x4dc/0x21d0 [ 329.117841][ T9502] ? find_held_lock+0x2b/0x80 [ 329.117855][ T9502] ? __pfx_ioctx_alloc+0x10/0x10 [ 329.117875][ T9502] __x64_sys_io_setup+0xc9/0x220 [ 329.117891][ T9502] do_syscall_64+0x106/0xf80 [ 329.117906][ T9502] ? clear_bhb_loop+0x40/0x90 [ 329.117924][ T9502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.117939][ T9502] RIP: 0033:0x7fdd96f9c629 [ 329.117952][ T9502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.117966][ T9502] RSP: 002b:00007fdd97e67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 329.117980][ T9502] RAX: ffffffffffffffda RBX: 00007fdd97216270 RCX: 00007fdd96f9c629 [ 329.117989][ T9502] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 329.117998][ T9502] RBP: 00007fdd97032b39 R08: 0000000000000000 R09: 0000000000000000 [ 329.118006][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.118015][ T9502] R13: 00007fdd97216308 R14: 00007fdd97216270 R15: 00007ffec432e2a8 [ 329.118035][ T9502] [ 332.162722][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 336.720844][ T9621] Invalid ELF header magic: != ELF [ 337.738754][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 337.966341][ T30] audit: type=1800 audit(1771849623.576:8): pid=9643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.711" name="dbroot" dev="configfs" ino=26734 res=0 errno=0 [ 337.990910][ T9643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.711'. [ 338.186192][ T9643] team0: Port device team_slave_1 removed [ 338.885872][ T9671] FAULT_INJECTION: forcing a failure. [ 338.885872][ T9671] name failslab, interval 1, probability 0, space 0, times 0 [ 338.900158][ T9671] CPU: 1 UID: 0 PID: 9671 Comm: syz.3.717 Tainted: G U L syzkaller #0 PREEMPT(full) [ 338.900206][ T9671] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 338.900218][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.900235][ T9671] Call Trace: [ 338.900244][ T9671] [ 338.900255][ T9671] dump_stack_lvl+0x100/0x190 [ 338.900304][ T9671] should_fail_ex.cold+0x5/0xa [ 338.900339][ T9671] should_failslab+0xc2/0x120 [ 338.900368][ T9671] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 338.900412][ T9671] ? vidtv_psi_desc_clone+0x3aa/0x5d0 [ 338.900465][ T9671] kmemdup_noprof+0x29/0x60 [ 338.900507][ T9671] vidtv_psi_desc_clone+0x3aa/0x5d0 [ 338.900567][ T9671] vidtv_channel_si_init+0x12ef/0x18d0 [ 338.900615][ T9671] vidtv_mux_init+0x526/0xbf0 [ 338.900656][ T9671] vidtv_start_feed+0x33e/0x4c0 [ 338.900696][ T9671] ? __pfx_vidtv_start_feed+0x10/0x10 [ 338.900739][ T9671] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 338.900790][ T9671] ? mark_held_locks+0x40/0x70 [ 338.900832][ T9671] ? __pfx_vidtv_start_feed+0x10/0x10 [ 338.900872][ T9671] dmx_ts_feed_start_filtering+0xf6/0x220 [ 338.900922][ T9671] dvb_dmxdev_start_feed+0x273/0x3f0 [ 338.900965][ T9671] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 338.901010][ T9671] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 338.901053][ T9671] dvb_demux_do_ioctl+0xe64/0x1200 [ 338.901106][ T9671] dvb_usercopy+0x167/0x340 [ 338.901140][ T9671] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 338.901183][ T9671] ? __pfx_dvb_usercopy+0x10/0x10 [ 338.901234][ T9671] ? __fget_files+0x21f/0x3d0 [ 338.901285][ T9671] dvb_demux_ioctl+0x29/0x40 [ 338.901319][ T9671] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 338.901357][ T9671] __x64_sys_ioctl+0x18e/0x210 [ 338.901399][ T9671] do_syscall_64+0x106/0xf80 [ 338.901429][ T9671] ? clear_bhb_loop+0x40/0x90 [ 338.901465][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.901495][ T9671] RIP: 0033:0x7faff539c629 [ 338.901519][ T9671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.901553][ T9671] RSP: 002b:00007faff6278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.901581][ T9671] RAX: ffffffffffffffda RBX: 00007faff5615fa0 RCX: 00007faff539c629 [ 338.901600][ T9671] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 338.901617][ T9671] RBP: 00007faff5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 338.901634][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.901650][ T9671] R13: 00007faff5616038 R14: 00007faff5615fa0 R15: 00007ffd5e27e1a8 [ 338.901691][ T9671] [ 339.793905][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.718'. [ 339.805235][ T9679] netlink: 354 bytes leftover after parsing attributes in process `syz.3.718'. [ 340.155026][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 340.388291][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 340.398702][ T9692] netlink: 354 bytes leftover after parsing attributes in process `syz.2.722'. [ 341.148631][ T9703] Invalid ELF header magic: != ELF [ 343.736993][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 343.772963][ T9747] netlink: 354 bytes leftover after parsing attributes in process `syz.2.732'. [ 346.395550][ T9813] input: jJЗё-ђ¶љ9г%vш“ыJ86Ц‘ as /devices/virtual/input/input9 [ 347.047555][ T9825] Invalid ELF header magic: != ELF [ 347.747468][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 347.999327][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 348.069827][ T9841] netlink: 354 bytes leftover after parsing attributes in process `syz.2.743'. [ 350.731874][ T9884] Invalid ELF header magic: != ELF [ 360.447287][T10089] netlink: 4128 bytes leftover after parsing attributes in process `syz.3.785'. [ 363.746651][T10186] FAULT_INJECTION: forcing a failure. [ 363.746651][T10186] name failslab, interval 1, probability 0, space 0, times 0 [ 363.775756][T10186] CPU: 1 UID: 0 PID: 10186 Comm: syz.2.794 Tainted: G U L syzkaller #0 PREEMPT(full) [ 363.775785][T10186] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 363.775791][T10186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.775801][T10186] Call Trace: [ 363.775807][T10186] [ 363.775814][T10186] dump_stack_lvl+0x100/0x190 [ 363.775842][T10186] should_fail_ex.cold+0x5/0xa [ 363.775861][T10186] should_failslab+0xc2/0x120 [ 363.775875][T10186] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 363.775903][T10186] ? alloc_inode+0x183/0x250 [ 363.775921][T10186] ? stashed_dentry_get+0x10a/0x2c0 [ 363.775936][T10186] ? stashed_dentry_get+0x10a/0x2c0 [ 363.775953][T10186] alloc_inode+0x183/0x250 [ 363.775972][T10186] path_from_stashed+0x25b/0x750 [ 363.775991][T10186] pidfs_alloc_file+0xf8/0x290 [ 363.776012][T10186] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 363.776038][T10186] pidfd_prepare+0x123/0x200 [ 363.776056][T10186] __x64_sys_pidfd_open+0x105/0x1a0 [ 363.776076][T10186] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 363.776103][T10186] do_syscall_64+0x106/0xf80 [ 363.776120][T10186] ? clear_bhb_loop+0x40/0x90 [ 363.776137][T10186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.776156][T10186] RIP: 0033:0x7fd55a59c629 [ 363.776170][T10186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.776184][T10186] RSP: 002b:00007fd55b3e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 363.776198][T10186] RAX: ffffffffffffffda RBX: 00007fd55a815fa0 RCX: 00007fd55a59c629 [ 363.776208][T10186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 363.776216][T10186] RBP: 00007fd55a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 363.776224][T10186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.776232][T10186] R13: 00007fd55a816038 R14: 00007fd55a815fa0 R15: 00007ffd7f29d0b8 [ 363.776252][T10186] [ 363.903315][T10189] ======================================================= [ 363.903315][T10189] WARNING: The mand mount option has been deprecated and [ 363.903315][T10189] and is ignored by this kernel. Remove the mand [ 363.903315][T10189] option from the mount to silence this warning. [ 363.903315][T10189] ======================================================= [ 365.345713][T10189] kexec: Could not allocate control_code_buffer [ 365.571176][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 365.615147][T10223] netlink: 354 bytes leftover after parsing attributes in process `syz.2.801'. [ 367.146302][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 367.168895][T10261] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 367.185955][T10261] netlink: 5 bytes leftover after parsing attributes in process `syz.2.804'. [ 375.255489][ T5821] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 378.775169][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.783572][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.452893][T10643] FAULT_INJECTION: forcing a failure. [ 386.452893][T10643] name failslab, interval 1, probability 0, space 0, times 0 [ 386.503480][T10643] CPU: 1 UID: 0 PID: 10643 Comm: syz.2.865 Tainted: G U L syzkaller #0 PREEMPT(full) [ 386.503532][T10643] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 386.503544][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.503560][T10643] Call Trace: [ 386.503570][T10643] [ 386.503581][T10643] dump_stack_lvl+0x100/0x190 [ 386.503640][T10643] should_fail_ex.cold+0x5/0xa [ 386.503674][T10643] ? tomoyo_encode2+0xfb/0x3c0 [ 386.503703][T10643] should_failslab+0xc2/0x120 [ 386.503731][T10643] __kmalloc_noprof+0xe0/0x850 [ 386.503769][T10643] ? d_absolute_path+0x136/0x1b0 [ 386.503812][T10643] tomoyo_encode2+0xfb/0x3c0 [ 386.503848][T10643] tomoyo_encode+0x29/0x50 [ 386.503874][T10643] tomoyo_realpath_from_path+0x18c/0x690 [ 386.503913][T10643] tomoyo_path_number_perm+0x23c/0x580 [ 386.503954][T10643] ? tomoyo_path_number_perm+0x22e/0x580 [ 386.503998][T10643] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 386.504079][T10643] ? find_held_lock+0x2b/0x80 [ 386.504105][T10643] ? current_check_access_path+0x281/0x460 [ 386.504155][T10643] ? __pfx_current_check_access_path+0x10/0x10 [ 386.504204][T10643] ? d_alloc_parallel+0x864/0x14e0 [ 386.504249][T10643] tomoyo_path_mknod+0x164/0x190 [ 386.504284][T10643] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 386.504317][T10643] ? find_held_lock+0x2b/0x80 [ 386.504344][T10643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 386.504396][T10643] security_path_mknod+0x161/0x300 [ 386.504434][T10643] may_o_create+0x30/0x3a0 [ 386.504469][T10643] lookup_open.isra.0+0xa0d/0x11b0 [ 386.504511][T10643] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 386.504553][T10643] ? __pfx___might_resched+0x10/0x10 [ 386.504587][T10643] ? mnt_get_write_access+0x52/0x2f0 [ 386.504637][T10643] ? __pfx_down_write+0x10/0x10 [ 386.504668][T10643] ? mnt_get_write_access+0x1e9/0x2f0 [ 386.504694][T10643] path_openat+0x2291/0x31a0 [ 386.504712][T10643] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 386.504730][T10643] ? __pfx_path_openat+0x10/0x10 [ 386.504751][T10643] do_file_open+0x20e/0x430 [ 386.504766][T10643] ? __pfx_do_file_open+0x10/0x10 [ 386.504793][T10643] ? _raw_spin_unlock+0x28/0x50 [ 386.504816][T10643] ? alloc_fd+0x476/0x790 [ 386.504844][T10643] do_sys_openat2+0x10d/0x1e0 [ 386.504865][T10643] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.504883][T10643] ? do_raw_spin_lock+0x128/0x260 [ 386.504908][T10643] __x64_sys_open+0xfe/0x1d0 [ 386.504925][T10643] ? __pfx___x64_sys_open+0x10/0x10 [ 386.504950][T10643] do_syscall_64+0x106/0xf80 [ 386.504965][T10643] ? clear_bhb_loop+0x40/0x90 [ 386.504982][T10643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.504997][T10643] RIP: 0033:0x7fd55a59c629 [ 386.505010][T10643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.505023][T10643] RSP: 002b:00007fd55b39f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 386.505038][T10643] RAX: ffffffffffffffda RBX: 00007fd55a816180 RCX: 00007fd55a59c629 [ 386.505047][T10643] RDX: 0000000000000055 RSI: 0000000000022240 RDI: 0000000000000000 [ 386.505055][T10643] RBP: 00007fd55a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 386.505063][T10643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.505071][T10643] R13: 00007fd55a816218 R14: 00007fd55a816180 R15: 00007ffd7f29d0b8 [ 386.505091][T10643] [ 387.175492][T10643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 390.097138][T10693] FAULT_INJECTION: forcing a failure. [ 390.097138][T10693] name failslab, interval 1, probability 0, space 0, times 0 [ 390.126360][T10693] CPU: 1 UID: 0 PID: 10693 Comm: syz.1.877 Tainted: G U L syzkaller #0 PREEMPT(full) [ 390.126410][T10693] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 390.126421][T10693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.126437][T10693] Call Trace: [ 390.126447][T10693] [ 390.126459][T10693] dump_stack_lvl+0x100/0x190 [ 390.126511][T10693] should_fail_ex.cold+0x5/0xa [ 390.126546][T10693] should_failslab+0xc2/0x120 [ 390.126574][T10693] __kmalloc_cache_noprof+0x7a/0x6f0 [ 390.126610][T10693] ? trace_pid_list_alloc+0x232/0x480 [ 390.126659][T10693] trace_pid_list_alloc+0x232/0x480 [ 390.126706][T10693] trace_pid_write+0x110/0x460 [ 390.126750][T10693] ? __pfx_trace_pid_write+0x10/0x10 [ 390.126816][T10693] event_pid_write.isra.0+0x1e4/0x800 [ 390.126864][T10693] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 390.126920][T10693] vfs_write+0x2aa/0x1070 [ 390.126963][T10693] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 390.127012][T10693] ? __pfx_vfs_write+0x10/0x10 [ 390.127075][T10693] ? __fget_files+0x215/0x3d0 [ 390.127125][T10693] ? __fget_files+0x21f/0x3d0 [ 390.127187][T10693] ksys_write+0x12a/0x250 [ 390.127230][T10693] ? __pfx_ksys_write+0x10/0x10 [ 390.127270][T10693] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 390.127308][T10693] ? syscall_user_dispatch+0x76/0x130 [ 390.127352][T10693] do_syscall_64+0x106/0xf80 [ 390.127382][T10693] ? clear_bhb_loop+0x40/0x90 [ 390.127417][T10693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.127445][T10693] RIP: 0033:0x7fdd96f9c629 [ 390.127470][T10693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.127496][T10693] RSP: 002b:00007fdd97eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 390.127524][T10693] RAX: ffffffffffffffda RBX: 00007fdd97215fa0 RCX: 00007fdd96f9c629 [ 390.127543][T10693] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 390.127560][T10693] RBP: 00007fdd97032b39 R08: 0000000000000000 R09: 0000000000000000 [ 390.127577][T10693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.127593][T10693] R13: 00007fdd97216038 R14: 00007fdd97215fa0 R15: 00007ffec432e2a8 [ 390.127632][T10693] [ 390.890971][T10696] bridge0: port 3(team0) entered blocking state [ 390.957062][ T30] audit: type=1800 audit(1771849676.540:9): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.879" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 391.002360][T10696] bridge0: port 3(team0) entered disabled state [ 391.027112][T10696] team0: entered allmulticast mode [ 391.036910][T10696] team_slave_0: entered allmulticast mode [ 391.101864][T10696] team0: entered promiscuous mode [ 391.135283][T10696] team_slave_0: entered promiscuous mode [ 391.174872][T10696] bridge0: port 3(team0) entered blocking state [ 391.181251][T10696] bridge0: port 3(team0) entered forwarding state [ 399.236352][T10855] misc userio: Invalid payload size [ 400.174387][T10859] hub 1-0:1.0: USB hub found [ 400.193711][T10859] hub 1-0:1.0: 1 port detected [ 407.701174][T11044] Invalid ELF header magic: != ELF [ 407.877302][T11041] futex_wake_op: syz.1.940 tries to shift op by -2048; fix this program [ 407.891475][T11041] futex_wake_op: syz.1.940 tries to shift op by -2048; fix this program [ 412.834603][T11105] zswap: compressor ы not available [ 417.392221][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 417.403396][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 420.420942][T11272] Invalid ELF header magic: != ELF [ 421.062561][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 421.134345][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 430.126167][T11450] binder: 11448:11450 ioctl c018620c 0 returned -1 [ 431.256372][T11483] syz.2.1013(11483): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 436.213618][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 436.244615][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 436.942534][ T30] audit: type=1800 audit(1771849722.507:10): pid=11595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1033" name="lu_gp_id" dev="configfs" ino=32089 res=0 errno=0 [ 436.952672][T11595] kstrtoul() returned -22 for lu_gp_id [ 437.036232][T11593] zswap: compressor not available [ 437.221885][T11606] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 437.229977][T11606] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1034'. [ 438.664067][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 438.678849][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 440.247878][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.254961][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.706622][ T30] audit: type=1804 audit(1771849726.275:11): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1047" name="/newroot/261/file0" dev="tmpfs" ino=1425 res=1 errno=0 [ 440.770905][ T30] audit: type=1804 audit(1771849726.295:12): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1047" name="/newroot/261/file0" dev="tmpfs" ino=1425 res=1 errno=0 [ 441.149625][T11692] Invalid ELF header magic: != ELF [ 442.534531][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 442.544820][T11724] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1055'. [ 444.765153][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 444.794907][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 447.955416][T11815] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1069'. [ 448.007046][T11814] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1069'. [ 450.447210][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 450.457706][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 452.677691][T11907] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 453.910321][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1087'. [ 453.952478][T11929] ipvlan1: entered promiscuous mode [ 453.957702][T11929] ipvlan1: entered allmulticast mode [ 453.978278][T11929] veth0_vlan: entered allmulticast mode [ 456.707793][T11986] FAULT_INJECTION: forcing a failure. [ 456.707793][T11986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 456.859757][T11986] CPU: 1 UID: 0 PID: 11986 Comm: syz.3.1096 Tainted: G U L syzkaller #0 PREEMPT(full) [ 456.859802][T11986] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 456.859811][T11986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.859825][T11986] Call Trace: [ 456.859834][T11986] [ 456.859844][T11986] dump_stack_lvl+0x100/0x190 [ 456.859890][T11986] should_fail_ex.cold+0x5/0xa [ 456.859916][T11986] ? prepare_alloc_pages+0x16d/0x5f0 [ 456.859948][T11986] should_fail_alloc_page+0xeb/0x140 [ 456.859976][T11986] prepare_alloc_pages+0x1f0/0x5f0 [ 456.860022][T11986] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 456.860105][T11986] ? find_held_lock+0x2b/0x80 [ 456.860132][T11986] ? is_bpf_text_address+0x8a/0x1a0 [ 456.860181][T11986] ? is_bpf_text_address+0x8a/0x1a0 [ 456.860224][T11986] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 456.860265][T11986] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.860299][T11986] ? kernel_text_address+0x8d/0x100 [ 456.860338][T11986] ? __kernel_text_address+0xd/0x30 [ 456.860377][T11986] ? unwind_get_return_address+0x59/0xa0 [ 456.860419][T11986] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 456.860466][T11986] ? policy_nodemask+0xed/0x4f0 [ 456.860496][T11986] alloc_pages_mpol+0x1fb/0x550 [ 456.860524][T11986] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 456.860562][T11986] alloc_pages_noprof+0x131/0x390 [ 456.860591][T11986] __pud_alloc+0x3b/0x760 [ 456.860624][T11986] __handle_mm_fault+0x134c/0x2b60 [ 456.860666][T11986] ? mt_find+0x45e/0x8e0 [ 456.860700][T11986] ? __pfx___handle_mm_fault+0x10/0x10 [ 456.860732][T11986] ? __pfx_mt_find+0x10/0x10 [ 456.860793][T11986] handle_mm_fault+0x36d/0xa20 [ 456.860836][T11986] __get_user_pages+0xf9c/0x34d0 [ 456.860879][T11986] ? __pfx___get_user_pages+0x10/0x10 [ 456.860918][T11986] get_user_pages_remote+0x3d2/0xb10 [ 456.860955][T11986] ? __pfx_get_user_pages_remote+0x10/0x10 [ 456.860998][T11986] get_arg_page+0xf4/0x310 [ 456.861036][T11986] ? __pfx_get_arg_page+0x10/0x10 [ 456.861082][T11986] copy_string_kernel+0x17d/0x500 [ 456.861122][T11986] ? alloc_bprm+0x420/0x710 [ 456.861171][T11986] do_execveat_common.isra.0+0x2e6/0x580 [ 456.861218][T11986] __x64_sys_execve+0x93/0xd0 [ 456.861256][T11986] do_syscall_64+0x106/0xf80 [ 456.861285][T11986] ? clear_bhb_loop+0x40/0x90 [ 456.861320][T11986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.861348][T11986] RIP: 0033:0x7faff539c629 [ 456.861371][T11986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.861397][T11986] RSP: 002b:00007faff6257028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 456.861423][T11986] RAX: ffffffffffffffda RBX: 00007faff5616090 RCX: 00007faff539c629 [ 456.861447][T11986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 456.861464][T11986] RBP: 00007faff5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 456.861481][T11986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.861497][T11986] R13: 00007faff5616128 R14: 00007faff5616090 R15: 00007ffd5e27e1a8 [ 456.861534][T11986] [ 458.555309][T11994] kexec: Could not allocate control_code_buffer [ 459.211695][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 459.231821][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 461.499541][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 461.515188][T12076] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1111'. [ 461.897286][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 461.917429][T12083] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1113'. [ 463.588856][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 463.605144][T12123] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1120'. [ 464.719628][ T5821] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 464.732658][ T5821] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 465.702989][T12153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1124'. [ 465.712312][T12153] ipvlan1: entered promiscuous mode [ 465.717622][T12153] ipvlan1: entered allmulticast mode [ 465.722896][T12153] veth0_vlan: entered allmulticast mode [ 465.810593][T12157] FAULT_INJECTION: forcing a failure. [ 465.810593][T12157] name failslab, interval 1, probability 0, space 0, times 0 [ 465.840682][T12157] CPU: 0 UID: 0 PID: 12157 Comm: syz.3.1125 Tainted: G U L syzkaller #0 PREEMPT(full) [ 465.840722][T12157] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 465.840728][T12157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.840737][T12157] Call Trace: [ 465.840743][T12157] [ 465.840749][T12157] dump_stack_lvl+0x100/0x190 [ 465.840778][T12157] should_fail_ex.cold+0x5/0xa [ 465.840795][T12157] ? __seq_open_private+0x22/0xd0 [ 465.840814][T12157] should_failslab+0xc2/0x120 [ 465.840829][T12157] __kmalloc_noprof+0xe0/0x850 [ 465.840853][T12157] ? __pfx_stats_fop_open+0x10/0x10 [ 465.840867][T12157] __seq_open_private+0x22/0xd0 [ 465.840887][T12157] sc_common_open+0x6b/0x200 [ 465.840902][T12157] full_proxy_open_regular+0x1b6/0x370 [ 465.840923][T12157] do_dentry_open+0x6d8/0x1660 [ 465.840945][T12157] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 465.840969][T12157] vfs_open+0x82/0x3f0 [ 465.840988][T12157] path_openat+0x208c/0x31a0 [ 465.841009][T12157] ? __pfx_path_openat+0x10/0x10 [ 465.841029][T12157] do_file_open+0x20e/0x430 [ 465.841044][T12157] ? __pfx_do_file_open+0x10/0x10 [ 465.841072][T12157] ? alloc_fd+0x476/0x790 [ 465.841095][T12157] ? do_getname+0x191/0x390 [ 465.841113][T12157] do_sys_openat2+0x10d/0x1e0 [ 465.841130][T12157] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.841149][T12157] ? __fget_files+0x21f/0x3d0 [ 465.841174][T12157] __x64_sys_openat+0x12d/0x210 [ 465.841192][T12157] ? __pfx___x64_sys_openat+0x10/0x10 [ 465.841217][T12157] do_syscall_64+0x106/0xf80 [ 465.841232][T12157] ? clear_bhb_loop+0x40/0x90 [ 465.841250][T12157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.841344][T12157] RIP: 0033:0x7faff539c629 [ 465.841358][T12157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.841372][T12157] RSP: 002b:00007faff6257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.841387][T12157] RAX: ffffffffffffffda RBX: 00007faff5616090 RCX: 00007faff539c629 [ 465.841397][T12157] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 465.841407][T12157] RBP: 00007faff5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 465.841416][T12157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.841425][T12157] R13: 00007faff5616128 R14: 00007faff5616090 R15: 00007ffd5e27e1a8 [ 465.841445][T12157] [ 466.327518][T12165] FAULT_INJECTION: forcing a failure. [ 466.327518][T12165] name failslab, interval 1, probability 0, space 0, times 0 [ 466.390320][T12165] CPU: 1 UID: 0 PID: 12165 Comm: syz.2.1135 Tainted: G U L syzkaller #0 PREEMPT(full) [ 466.390371][T12165] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 466.390382][T12165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.390399][T12165] Call Trace: [ 466.390408][T12165] [ 466.390419][T12165] dump_stack_lvl+0x100/0x190 [ 466.390468][T12165] should_fail_ex.cold+0x5/0xa [ 466.390500][T12165] ? lsm_blob_alloc+0x68/0x90 [ 466.390531][T12165] should_failslab+0xc2/0x120 [ 466.390557][T12165] __kmalloc_noprof+0xe0/0x850 [ 466.390596][T12165] ? trace_kmem_cache_alloc+0xf3/0x120 [ 466.390633][T12165] lsm_blob_alloc+0x68/0x90 [ 466.390667][T12165] security_sk_alloc+0x2d/0x290 [ 466.390708][T12165] sk_prot_alloc+0x1d1/0x2a0 [ 466.390747][T12165] sk_alloc+0x36/0xe80 [ 466.390777][T12165] unix_create1+0xa6/0x700 [ 466.390817][T12165] unix_create+0x145/0x270 [ 466.390854][T12165] __sock_create+0x339/0x860 [ 466.390902][T12165] __sys_socketpair+0x261/0x5b0 [ 466.390947][T12165] ? __pfx___sys_socketpair+0x10/0x10 [ 466.390991][T12165] ? xfd_validate_state+0x129/0x190 [ 466.391040][T12165] __x64_sys_socketpair+0x96/0x100 [ 466.391080][T12165] ? lockdep_hardirqs_on+0x78/0x100 [ 466.391109][T12165] do_syscall_64+0x106/0xf80 [ 466.391136][T12165] ? clear_bhb_loop+0x40/0x90 [ 466.391171][T12165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.391201][T12165] RIP: 0033:0x7fd55a59c629 [ 466.391235][T12165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.391265][T12165] RSP: 002b:00007fd55b3e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 466.391294][T12165] RAX: ffffffffffffffda RBX: 00007fd55a815fa0 RCX: 00007fd55a59c629 [ 466.391314][T12165] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 466.391331][T12165] RBP: 00007fd55a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 466.391348][T12165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.391364][T12165] R13: 00007fd55a816038 R14: 00007fd55a815fa0 R15: 00007ffd7f29d0b8 [ 466.391400][T12165] [ 470.724675][T12227] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 470.821107][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 470.904222][T12231] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1138'. [ 474.291862][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 481.601083][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 485.042813][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 485.412491][ T30] audit: type=1800 audit(1771849770.953:13): pid=12502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1185" name="dbroot" dev="configfs" ino=34270 res=0 errno=0 [ 485.455241][T12502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 485.510582][T12502] team_slave_1 (unregistering): left promiscuous mode [ 485.531554][T12502] team_slave_1 (unregistering): left allmulticast mode [ 485.690929][T12502] team0: Port device team_slave_1 removed [ 487.949449][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 489.495872][T12585] scsi_dev_info_list_add_str: bad dev info string 'с' '' '' [ 489.793519][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 489.860412][T12591] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1199'. [ 490.278714][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'. [ 492.411854][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 492.991696][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 493.001494][T12653] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1211'. [ 493.293875][T12648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1209'. [ 493.313100][T12648] ipvlan1: entered promiscuous mode [ 493.322387][T12648] ipvlan1: entered allmulticast mode [ 493.332499][T12648] veth0_vlan: entered allmulticast mode [ 496.288897][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 496.518099][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 497.376740][ T5821] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 497.385885][ T5821] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 499.517566][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 501.718489][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.724997][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.693049][T12842] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 503.148592][T12850] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 504.053943][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'. [ 507.716747][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 510.784818][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 511.545811][ T5821] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 511.557076][ T5821] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 514.843592][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 516.041095][T13086] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 516.638580][T13089] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 519.346774][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'. [ 522.130861][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 522.373316][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 525.236823][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 527.120143][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'. [ 528.103800][T13298] capability: warning: `syz.2.1319' uses 32-bit capabilities (legacy support in use) [ 531.767221][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 533.057184][T13390] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 533.671911][T13392] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 534.937895][ T5821] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 534.946169][ T5821] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 536.371407][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 538.660262][T13480] netlink: 4128 bytes leftover after parsing attributes in process `syz.2.1351'. [ 539.831318][ T5833] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 539.838779][ T5833] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 540.904325][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 542.132028][T13558] netlink: 4128 bytes leftover after parsing attributes in process `syz.1.1365'. [ 542.821377][T13568] Invalid ELF header magic: != ELF [ 543.228447][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'. [ 545.043469][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 546.912282][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 550.454292][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1402'. [ 550.728973][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 553.680313][T13788] Invalid ELF header magic: != ELF [ 555.076799][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 556.558882][T13859] netlink: 4128 bytes leftover after parsing attributes in process `syz.0.1423'. [ 556.984889][T13867] Invalid ELF header magic: != ELF [ 558.299173][T13903] input: jJЗё-ђ¶љ9г%vш“ыJ86Ц‘ as /devices/virtual/input/input18 [ 561.196000][T13945] netlink: 4128 bytes leftover after parsing attributes in process `syz.2.1437'. [ 562.770012][T13977] misc userio: Invalid payload size [ 563.187664][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.196321][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.760397][T13997] nvme_fcloop: unknown parameter or missing value '7' [ 565.991633][T14027] Invalid ELF header magic: != ELF [ 566.913005][T14042] hub 1-0:1.0: USB hub found [ 566.938571][T14042] hub 1-0:1.0: 1 port detected [ 567.927966][T14062] input: jJЗё-ђ¶љ9г%vш“ыJ86Ц‘ as /devices/virtual/input/input19 [ 568.002098][T14060] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078002200 pfn:0x78000 [ 568.016314][T14060] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 568.188704][T14060] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 568.211482][T14060] page_type: f8(unknown) [ 568.218089][T14060] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 568.261238][T14060] raw: ffff888078002200 0000000000000000 00000000f8000000 0000000000000000 [ 568.283837][T14060] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 568.330284][T14060] head: ffff888078002200 0000000000000000 00000000f8000000 0000000000000000 [ 568.367968][T14060] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 568.399136][T14060] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 568.495529][T14060] page dumped because: unmovable page [ 568.500995][T14060] page_owner tracks the page as allocated [ 568.508498][T14060] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x428c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_COMP), pid 14040, tgid 14039 (syz.1.1457), ts 566327048341, free_ts 473399315586 [ 568.575518][T14060] post_alloc_hook+0x153/0x170 [ 568.615646][T14060] get_page_from_freelist+0x111d/0x3140 [ 568.624801][T14060] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 568.655444][T14060] alloc_pages_mpol+0x1fb/0x550 [ 568.704540][T14060] ___kmalloc_large_node+0x104/0x150 [ 568.705022][T14071] FAULT_INJECTION: forcing a failure. [ 568.705022][T14071] name failslab, interval 1, probability 0, space 0, times 0 [ 568.725658][T14060] __kmalloc_large_node_noprof+0x1c/0x70 [ 568.741892][T14071] CPU: 0 UID: 0 PID: 14071 Comm: syz.3.1461 Tainted: G U L syzkaller #0 PREEMPT(full) [ 568.741942][T14071] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 568.741954][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.741971][T14071] Call Trace: [ 568.741981][T14071] [ 568.741992][T14071] dump_stack_lvl+0x100/0x190 [ 568.742041][T14071] should_fail_ex.cold+0x5/0xa [ 568.742076][T14071] should_failslab+0xc2/0x120 [ 568.742105][T14071] __kmalloc_cache_noprof+0x7a/0x6f0 [ 568.742139][T14071] ? trace_pid_list_alloc+0x232/0x480 [ 568.742190][T14071] trace_pid_list_alloc+0x232/0x480 [ 568.742238][T14071] trace_pid_write+0x110/0x460 [ 568.742281][T14071] ? __pfx_trace_pid_write+0x10/0x10 [ 568.742348][T14071] event_pid_write.isra.0+0x1e4/0x800 [ 568.742396][T14071] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 568.742453][T14071] vfs_write+0x2aa/0x1070 [ 568.742496][T14071] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 568.742592][T14071] ? __pfx_vfs_write+0x10/0x10 [ 568.742633][T14071] ? __fget_files+0x215/0x3d0 [ 568.742684][T14071] ? __fget_files+0x21f/0x3d0 [ 568.742738][T14071] ksys_write+0x12a/0x250 [ 568.742789][T14071] ? __pfx_ksys_write+0x10/0x10 [ 568.742831][T14071] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 568.742871][T14071] ? syscall_user_dispatch+0x76/0x130 [ 568.742917][T14071] do_syscall_64+0x106/0xf80 [ 568.742949][T14071] ? clear_bhb_loop+0x40/0x90 [ 568.742986][T14071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.743016][T14071] RIP: 0033:0x7faff539c629 [ 568.743041][T14071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.743070][T14071] RSP: 002b:00007faff6278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.743097][T14071] RAX: ffffffffffffffda RBX: 00007faff5615fa0 RCX: 00007faff539c629 [ 568.743116][T14071] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 568.743134][T14071] RBP: 00007faff5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 568.743151][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.743168][T14071] R13: 00007faff5616038 R14: 00007faff5615fa0 R15: 00007ffd5e27e1a8 [ 568.743207][T14071] [ 568.967881][T14060] __kvmalloc_node_noprof+0x66f/0xa00 [ 568.973332][T14060] unix_net_init+0xde/0x350 [ 568.977899][T14060] ops_init+0x1e2/0x5f0 [ 568.982081][T14060] setup_net+0x118/0x3a0 [ 568.986438][T14060] copy_net_ns+0x46f/0x7c0 [ 568.990891][T14060] create_new_namespaces+0x3ea/0xac0 [ 568.996944][T14060] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 569.002583][T14060] ksys_unshare+0x455/0xab0 [ 569.007103][T14060] __x64_sys_unshare+0x31/0x40 [ 569.011859][T14060] do_syscall_64+0x106/0xf80 [ 569.016459][T14060] page last free pid 12269 tgid 12268 stack trace: [ 569.022940][T14060] __free_frozen_pages+0x7e1/0x10d0 [ 569.028196][T14060] qlist_free_all+0x47/0xe0 [ 569.032697][T14060] kasan_quarantine_reduce+0x1a0/0x1f0 [ 569.038180][T14060] __kasan_slab_alloc+0x69/0x90 [ 569.043034][T14060] kmem_cache_alloc_noprof+0x241/0x6e0 [ 569.048554][T14060] vm_area_dup+0x27/0x8e0 [ 569.052877][T14060] dup_mmap+0x6f6/0x2180 [ 569.057125][T14060] copy_process+0x73d7/0x7a10 [ 569.061789][T14060] kernel_clone+0xfc/0x9a0 [ 569.066220][T14060] __do_sys_clone3+0x214/0x290 [ 569.070977][T14060] do_syscall_64+0x106/0xf80 [ 569.075556][T14060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.329391][T14064] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008 [ 569.368053][T14064] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 569.416004][T14064] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 569.465101][T14064] page_type: f5(slab) [ 569.480008][T14064] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 569.493463][T14064] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 569.531848][T14064] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 569.565995][T14064] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 569.574885][T14064] head: 00fff00000000003 ffffea0001e00201 00000000ffffffff 00000000ffffffff [ 569.584133][T14064] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 569.594770][T14064] page dumped because: unmovable page [ 569.600517][T14064] page_owner tracks the page as allocated [ 569.606973][T14064] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3475, tgid 3475 (kworker/u8:10), ts 225884512204, free_ts 223878568301 [ 569.633249][T14064] post_alloc_hook+0x153/0x170 [ 569.643376][T14064] get_page_from_freelist+0x111d/0x3140 [ 569.649447][T14064] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 569.655548][T14064] alloc_pages_mpol+0x1fb/0x550 [ 569.661640][T14064] new_slab+0x43a/0x6d0 [ 569.666393][T14064] ___slab_alloc+0x2a0/0x850 [ 569.671040][T14064] __kmalloc_node_track_caller_noprof+0x45c/0x850 [ 569.678074][T14064] kmalloc_reserve+0xe8/0x350 [ 569.682802][T14064] __alloc_skb+0x185/0x710 [ 569.687788][T14064] nsim_dev_trap_report_work+0x2af/0xd10 [ 569.693549][T14064] process_one_work+0x9d7/0x1920 [ 569.699137][T14064] worker_thread+0x5da/0xe40 [ 569.703966][T14064] kthread+0x370/0x450 [ 569.708542][T14064] ret_from_fork+0x754/0xd80 [ 569.714554][T14064] ret_from_fork_asm+0x1a/0x30 [ 569.719807][T14064] page last free pid 7945 tgid 7937 stack trace: [ 569.726652][T14064] __free_frozen_pages+0x7e1/0x10d0 [ 569.731907][T14064] qlist_free_all+0x47/0xe0 [ 569.737059][T14064] kasan_quarantine_reduce+0x1a0/0x1f0 [ 569.742574][T14064] __kasan_slab_alloc+0x69/0x90 [ 569.748041][T14064] __kmalloc_noprof+0x2b9/0x850 [ 569.752950][T14064] iter_file_splice_write+0x1d8/0x10a0 [ 569.761639][T14064] direct_splice_actor+0x192/0x6c0 [ 569.767106][T14064] splice_direct_to_actor+0x345/0xa30 [ 569.772667][T14064] do_splice_direct+0x174/0x240 [ 569.777998][T14064] do_sendfile+0xadc/0xe20 [ 569.782461][T14064] __x64_sys_sendfile64+0x1d8/0x220 [ 569.788179][T14064] do_syscall_64+0x106/0xf80 [ 569.792821][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.094636][T14091] blktrace: Concurrent blktraces are not allowed on loop2 [ 572.408143][T14121] netlink: 4128 bytes leftover after parsing attributes in process `syz.2.1470'. [ 574.239192][ T797] usb usb40-port2: attempt power cycle [ 574.862389][ T797] usb usb40-port2: unable to enumerate USB device [ 577.861371][T14234] Invalid ELF header magic: != ELF [ 579.638154][T14277] Invalid ELF header magic: != ELF [ 580.063650][ T797] usb usb40-port2: attempt power cycle [ 580.677644][ T797] usb usb40-port2: unable to enumerate USB device [ 582.495971][T14322] binder: 14321:14322 ioctl c018620c 0 returned -1 [ 584.130807][T14358] Invalid ELF header magic: != ELF [ 586.632850][T14428] sg_write: data in/out 50331612/1048664 bytes for SCSI command 0x0-- guessing data in; [ 586.632850][T14428] program syz.1.1512 not setting count and/or reply_len properly [ 587.276549][T14439] scsi_dev_info_list_add_str: bad dev info string 'с' '' '' [ 588.587522][T14457] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 588.616062][T14457] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1519'. [ 590.882129][T14501] input: jJЗё-ђ¶љ9г%vш“ыJ86Ц‘ as /devices/virtual/input/input20 [ 595.598087][T14557] binder: 14556:14557 ioctl c018620c 0 returned -1 [ 602.440584][T14718] nvme_fcloop: unknown parameter or missing value '7' [ 604.044683][T14743] nvme_fcloop: unknown parameter or missing value '7' [ 605.918013][T14782] misc userio: Invalid payload size [ 609.514974][T14847] misc userio: Invalid payload size [ 613.380922][T14934] Invalid ELF header magic: != ELF [ 617.458141][T15011] misc userio: Invalid payload size [ 617.507769][T15017] Invalid ELF header magic: != ELF [ 618.388398][T15031] nvme_fcloop: unknown parameter or missing value '7' [ 619.054835][ T30] audit: type=1800 audit(1771849904.536:14): pid=15046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1634" name="dbroot" dev="configfs" ino=43215 res=0 errno=0 [ 619.078855][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1634'. [ 619.242864][T15055] nvme_fcloop: unknown parameter or missing value '7' [ 621.957122][T15095] nvme_fcloop: unknown parameter or missing value '7' [ 624.658689][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.666526][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.621911][T15193] Invalid ELF header magic: != ELF [ 628.736614][T15234] nvme_fcloop: unknown parameter or missing value '7' [ 630.013159][ T30] audit: type=1800 audit(1771849915.480:15): pid=15250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1670" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 633.020645][T15309] nvme_fcloop: unknown parameter or missing value '7' [ 633.394262][T15325] Invalid ELF header magic: != ELF [ 636.503878][ T30] audit: type=1800 audit(1771849921.967:16): pid=15371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1696" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 639.467314][T15430] nvme_fcloop: unknown parameter or missing value '7' [ 648.119178][T15588] nvme_fcloop: unknown parameter or missing value '7' [ 654.918531][T15708] nvme_fcloop: unknown parameter or missing value '7' [ 659.203821][T15793] nvme_fcloop: unknown parameter or missing value '7' [ 678.109915][T16186] FAULT_INJECTION: forcing a failure. [ 678.109915][T16186] name failslab, interval 1, probability 0, space 0, times 0 [ 678.150357][T16186] CPU: 1 UID: 0 PID: 16186 Comm: syz.3.1832 Tainted: G U L syzkaller #0 PREEMPT(full) [ 678.150405][T16186] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 678.150416][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.150434][T16186] Call Trace: [ 678.150445][T16186] [ 678.150455][T16186] dump_stack_lvl+0x100/0x190 [ 678.150506][T16186] should_fail_ex.cold+0x5/0xa [ 678.150541][T16186] ? lsm_blob_alloc+0x68/0x90 [ 678.150598][T16186] should_failslab+0xc2/0x120 [ 678.150628][T16186] __kmalloc_noprof+0xe0/0x850 [ 678.150669][T16186] ? trace_kmem_cache_alloc+0xf3/0x120 [ 678.150704][T16186] lsm_blob_alloc+0x68/0x90 [ 678.150736][T16186] security_sk_alloc+0x2d/0x290 [ 678.150776][T16186] sk_prot_alloc+0x1d1/0x2a0 [ 678.150818][T16186] sk_alloc+0x36/0xe80 [ 678.150848][T16186] unix_create1+0xa6/0x700 [ 678.150901][T16186] unix_create+0x145/0x270 [ 678.150940][T16186] __sock_create+0x339/0x860 [ 678.150988][T16186] __sys_socketpair+0x261/0x5b0 [ 678.151033][T16186] ? __pfx___sys_socketpair+0x10/0x10 [ 678.151077][T16186] ? xfd_validate_state+0x129/0x190 [ 678.151126][T16186] __x64_sys_socketpair+0x96/0x100 [ 678.151169][T16186] ? lockdep_hardirqs_on+0x78/0x100 [ 678.151200][T16186] do_syscall_64+0x106/0xf80 [ 678.151231][T16186] ? clear_bhb_loop+0x40/0x90 [ 678.151266][T16186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.151303][T16186] RIP: 0033:0x7faff539c629 [ 678.151329][T16186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.151357][T16186] RSP: 002b:00007faff6257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 678.151386][T16186] RAX: ffffffffffffffda RBX: 00007faff5616090 RCX: 00007faff539c629 [ 678.151406][T16186] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 678.151425][T16186] RBP: 00007faff5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 678.151443][T16186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.151460][T16186] R13: 00007faff5616128 R14: 00007faff5616090 R15: 00007ffd5e27e1a8 [ 678.151498][T16186] [ 680.689969][T16225] nvme_fcloop: unknown parameter or missing value '7' [ 685.039131][T16325] Invalid ELF header magic: != ELF [ 685.056369][T16334] nvme_fcloop: unknown parameter or missing value '7' [ 686.129505][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.138917][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.625385][T16385] nvme_fcloop: unknown parameter or missing value '7' [ 690.026981][T16451] nvme_fcloop: unknown parameter or missing value '7' [ 695.411854][T16566] nvme_fcloop: unknown parameter or missing value '7' [ 708.473013][T16837] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 715.913000][T16992] Invalid ELF header magic: != ELF [ 719.918338][T17082] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 734.339094][T17398] nvme_fcloop: unknown parameter or missing value '7' [ 747.603049][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.610721][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.048317][T17832] nvme_fcloop: unknown parameter or missing value '7' [ 765.328216][T18094] nvme_fcloop: unknown parameter or missing value '7' [ 769.633637][T18151] kexec: Could not allocate control_code_buffer [ 773.838083][T18296] nvme_fcloop: unknown parameter or missing value '7' [ 774.073045][T18242] kexec: Could not allocate control_code_buffer [ 779.044266][T18354] kexec: Could not allocate control_code_buffer [ 781.893891][T18448] nvme_fcloop: unknown parameter or missing value '7' [ 782.695195][T18445] kexec: Could not allocate control_code_buffer [ 791.788600][T18692] vivid-007: ================= START STATUS ================= [ 791.824428][T18692] vivid-007: Enable Output Cropping: true [ 791.860798][T18692] vivid-007: Enable Output Composing: true [ 791.966969][T18692] vivid-007: Enable Output Scaler: true [ 791.983853][T18654] kexec: Could not allocate control_code_buffer [ 791.997464][T18692] vivid-007: Tx RGB Quantization Range: Automatic [ 792.077431][T18692] vivid-007: Transmit Mode: HDMI [ 792.117940][T18692] vivid-007: Hotplug Present: 0x00000000 [ 792.231909][T18692] vivid-007: RxSense Present: 0x00000000 [ 792.270397][T18692] vivid-007: EDID Present: 0x00000000 [ 792.297408][T18692] vivid-007: ================== END STATUS ================== [ 795.019606][T18766] nvme_fcloop: unknown parameter or missing value '7' [ 795.717680][T18755] kexec: Could not allocate control_code_buffer [ 795.748717][T18771] nvme_fcloop: unknown parameter or missing value '7' [ 798.811918][T18847] input: jJЗё-ђ¶љ9г%vш“ыJ86Ц‘ as /devices/virtual/input/input23 [ 803.845651][T18953] nvme_fcloop: unknown parameter or missing value '7' [ 806.933881][T19019] nvme_fcloop: unknown parameter or missing value '7' [ 807.869151][T19046] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2399'. [ 807.928408][T19046] FAULT_INJECTION: forcing a failure. [ 807.928408][T19046] name failslab, interval 1, probability 0, space 0, times 0 [ 807.928475][T19046] CPU: 0 UID: 0 PID: 19046 Comm: syz.1.2399 Tainted: G U L syzkaller #0 PREEMPT(full) [ 807.928521][T19046] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 807.928533][T19046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 807.928550][T19046] Call Trace: [ 807.928560][T19046] [ 807.928570][T19046] dump_stack_lvl+0x100/0x190 [ 807.928621][T19046] should_fail_ex.cold+0x5/0xa [ 807.928656][T19046] should_failslab+0xc2/0x120 [ 807.928685][T19046] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 807.928738][T19046] ? kvasprintf_const+0x66/0x1a0 [ 807.928792][T19046] kvasprintf+0xbc/0x150 [ 807.928836][T19046] ? __pfx_kvasprintf+0x10/0x10 [ 807.928884][T19046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 807.928930][T19046] ? lockdep_init_map_type+0x5c/0x250 [ 807.928975][T19046] kvasprintf_const+0x66/0x1a0 [ 807.929022][T19046] kobject_set_name_vargs+0x5a/0x140 [ 807.929063][T19046] device_create_groups_vargs+0x1b1/0x270 [ 807.929115][T19046] device_create+0xed/0x130 [ 807.929162][T19046] ? __pfx_device_create+0x10/0x10 [ 807.929209][T19046] ? is_console_locked+0x9/0x20 [ 807.929241][T19046] ? con_is_visible+0x65/0x150 [ 807.929283][T19046] ? csi_J+0x57e/0xad0 [ 807.929320][T19046] vcs_make_sysfs+0x32/0x80 [ 807.929364][T19046] vc_allocate+0x539/0x880 [ 807.929396][T19046] ? __pfx_vc_allocate+0x10/0x10 [ 807.929439][T19046] con_install+0xa1/0x620 [ 807.929472][T19046] ? __pfx_con_install+0x10/0x10 [ 807.929511][T19046] ? __pfx_con_install+0x10/0x10 [ 807.929544][T19046] tty_init_dev.part.0+0x9e/0x470 [ 807.929585][T19046] tty_open+0xa63/0xfa0 [ 807.929626][T19046] ? __pfx_tty_open+0x10/0x10 [ 807.929659][T19046] ? chrdev_open+0x589/0x6a0 [ 807.929685][T19046] ? chrdev_open+0x589/0x6a0 [ 807.929717][T19046] ? __pfx_tty_open+0x10/0x10 [ 807.929759][T19046] chrdev_open+0x234/0x6a0 [ 807.929787][T19046] ? __pfx_chrdev_open+0x10/0x10 [ 807.929817][T19046] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 807.929873][T19046] do_dentry_open+0x6d8/0x1660 [ 807.929918][T19046] ? __pfx_chrdev_open+0x10/0x10 [ 807.929954][T19046] vfs_open+0x82/0x3f0 [ 807.929990][T19046] path_openat+0x208c/0x31a0 [ 807.930031][T19046] ? __pfx_path_openat+0x10/0x10 [ 807.930073][T19046] do_file_open+0x20e/0x430 [ 807.930103][T19046] ? __pfx_do_file_open+0x10/0x10 [ 807.930159][T19046] ? alloc_fd+0x476/0x790 [ 807.930208][T19046] ? do_getname+0x191/0x390 [ 807.930245][T19046] do_sys_openat2+0x10d/0x1e0 [ 807.930280][T19046] ? __pfx_do_sys_openat2+0x10/0x10 [ 807.930330][T19046] __x64_sys_openat+0x12d/0x210 [ 807.930367][T19046] ? __pfx___x64_sys_openat+0x10/0x10 [ 807.930417][T19046] do_syscall_64+0x106/0xf80 [ 807.930448][T19046] ? clear_bhb_loop+0x40/0x90 [ 807.930483][T19046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.930512][T19046] RIP: 0033:0x7fdd96f9c629 [ 807.930537][T19046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.930566][T19046] RSP: 002b:00007fdd97eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 807.930593][T19046] RAX: ffffffffffffffda RBX: 00007fdd97215fa0 RCX: 00007fdd96f9c629 [ 807.930613][T19046] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 807.930632][T19046] RBP: 00007fdd97032b39 R08: 0000000000000000 R09: 0000000000000000 [ 807.930650][T19046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.930667][T19046] R13: 00007fdd97216038 R14: 00007fdd97215fa0 R15: 00007ffec432e2a8 [ 807.930707][T19046] [ 809.076141][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.076204][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.653725][T19070] nvme_fcloop: unknown parameter or missing value '7' [ 812.182735][T19125] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 812.271997][T19125] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 812.949793][T19125] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 815.947307][T19233] nvme_fcloop: unknown parameter or missing value '7' [ 818.702077][T19305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2450'. [ 825.860361][T19475] futex_wake_op: syz.2.2484 tries to shift op by -2048; fix this program [ 825.899485][T19475] futex_wake_op: syz.2.2484 tries to shift op by -2048; fix this program [ 825.932377][T19476] 0x000000000001-0x000000020000 : "" [ 826.018587][T19476] ftl_cs: FTL header corrupt! [ 826.054827][T19475] misc userio: No port type given on /dev/userio [ 826.412506][T19475] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 826.886675][T19474] : Can't lookup blockdev [ 827.326218][T19500] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 828.582289][T19533] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 828.814514][T19535] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 829.440134][T19540] binder: 19539:19540 ioctl c018620c 0 returned -1 [ 830.348083][T19562] nvme_fcloop: unknown parameter or missing value '7' [ 832.205385][T19599] bridge0: port 4(gretap0) entered blocking state [ 832.258721][T19599] bridge0: port 4(gretap0) entered disabled state [ 832.314960][T19599] gretap0: entered allmulticast mode [ 832.381075][T19599] gretap0: entered promiscuous mode [ 832.392865][T19599] FAULT_INJECTION: forcing a failure. [ 832.392865][T19599] name failslab, interval 1, probability 0, space 0, times 0 [ 832.406795][T19599] CPU: 0 UID: 0 PID: 19599 Comm: syz.3.2509 Tainted: G U L syzkaller #0 PREEMPT(full) [ 832.406842][T19599] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 832.406853][T19599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 832.406871][T19599] Call Trace: [ 832.406879][T19599] [ 832.406889][T19599] dump_stack_lvl+0x100/0x190 [ 832.406939][T19599] should_fail_ex.cold+0x5/0xa [ 832.406971][T19599] should_failslab+0xc2/0x120 [ 832.406999][T19599] __kvmalloc_node_noprof+0xfa/0xa00 [ 832.407040][T19599] ? bucket_table_alloc.isra.0+0x88/0x460 [ 832.407089][T19599] bucket_table_alloc.isra.0+0x88/0x460 [ 832.407132][T19599] rhashtable_init_noprof+0x43b/0x7d0 [ 832.407176][T19599] nbp_vlan_init+0x254/0x500 [ 832.407212][T19599] ? __pfx_nbp_vlan_init+0x10/0x10 [ 832.407264][T19599] ? __local_bh_enable_ip+0x9e/0x120 [ 832.407295][T19599] ? lockdep_hardirqs_on+0x78/0x100 [ 832.407326][T19599] ? br_fdb_add_local+0x43/0x60 [ 832.407364][T19599] ? __local_bh_enable_ip+0x9e/0x120 [ 832.407399][T19599] br_add_if+0xf79/0x1b40 [ 832.407427][T19599] ? veth_get_iflink+0x213/0x2c0 [ 832.407464][T19599] add_del_if+0x114/0x160 [ 832.407495][T19599] br_dev_siocdevprivate+0x8ac/0x1650 [ 832.407530][T19599] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 832.407577][T19599] ? lock_acquire+0x1cf/0x380 [ 832.407625][T19599] ? netdev_name_node_lookup+0x107/0x150 [ 832.407669][T19599] ? __mutex_lock+0x26a/0x1b90 [ 832.407707][T19599] dev_ifsioc+0xc1e/0x1e90 [ 832.407739][T19599] ? __pfx_dev_ifsioc+0x10/0x10 [ 832.407765][T19599] ? __pfx___mutex_lock+0x10/0x10 [ 832.407811][T19599] ? dev_load+0x8e/0x240 [ 832.407834][T19599] ? dev_load+0x8e/0x240 [ 832.407869][T19599] dev_ioctl+0x70e/0x1070 [ 832.407900][T19599] sock_ioctl+0x494/0x6b0 [ 832.407943][T19599] ? __pfx_sock_ioctl+0x10/0x10 [ 832.407980][T19599] ? hook_file_ioctl_common+0x146/0x410 [ 832.408032][T19599] ? __fget_files+0x21f/0x3d0 [ 832.408079][T19599] ? __pfx_sock_ioctl+0x10/0x10 [ 832.408123][T19599] __x64_sys_ioctl+0x18e/0x210 [ 832.408164][T19599] do_syscall_64+0x106/0xf80 [ 832.408194][T19599] ? clear_bhb_loop+0x40/0x90 [ 832.408238][T19599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.408268][T19599] RIP: 0033:0x7faff539c629 [ 832.408293][T19599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.408321][T19599] RSP: 002b:00007faff6236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.408348][T19599] RAX: ffffffffffffffda RBX: 00007faff5616180 RCX: 00007faff539c629 [ 832.408367][T19599] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 832.408384][T19599] RBP: 00007faff5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 832.408402][T19599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.408419][T19599] R13: 00007faff5616218 R14: 00007faff5616180 R15: 00007ffd5e27e1a8 [ 832.408458][T19599] [ 832.411622][T19599] bridge0: port 4(gretap0) entered blocking state [ 832.703968][T19599] bridge0: port 4(gretap0) entered forwarding state [ 833.333460][T19614] nvme_fcloop: unknown parameter or missing value '7' [ 836.356418][ T29] usb usb40-port2: attempt power cycle [ 836.945664][ T29] usb usb40-port2: unable to enumerate USB device [ 838.979935][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 843.410472][T19838] input: jJЗё-ђ¶љ9г%vш“ыJ86Ц‘ as /devices/virtual/input/input30 [ 845.816976][T19886] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 846.295272][T19889] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 849.396454][T19981] bridge0: port 4(gretap0) entered blocking state [ 849.434314][T19981] bridge0: port 4(gretap0) entered disabled state [ 849.496520][T19981] gretap0: entered allmulticast mode [ 849.561172][T19981] gretap0: entered promiscuous mode [ 849.631104][T19981] bridge0: port 4(gretap0) entered blocking state [ 849.637635][T19981] bridge0: port 4(gretap0) entered forwarding state [ 852.490206][T20037] bridge0: port 3(gretap0) entered blocking state [ 852.497650][T20037] bridge0: port 3(gretap0) entered disabled state [ 852.505504][T20037] gretap0: entered allmulticast mode [ 852.517833][T20037] gretap0: entered promiscuous mode [ 852.524742][T20037] FAULT_INJECTION: forcing a failure. [ 852.524742][T20037] name failslab, interval 1, probability 0, space 0, times 0 [ 852.538693][T20037] CPU: 1 UID: 0 PID: 20037 Comm: syz.2.2604 Tainted: G U L syzkaller #0 PREEMPT(full) [ 852.538743][T20037] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 852.538754][T20037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 852.538772][T20037] Call Trace: [ 852.538781][T20037] [ 852.538791][T20037] dump_stack_lvl+0x100/0x190 [ 852.538839][T20037] should_fail_ex.cold+0x5/0xa [ 852.538872][T20037] should_failslab+0xc2/0x120 [ 852.538901][T20037] __kmalloc_cache_noprof+0x7a/0x6f0 [ 852.538934][T20037] ? vlan_vid_add+0x514/0x730 [ 852.538972][T20037] vlan_vid_add+0x514/0x730 [ 852.539009][T20037] __vlan_add+0x266f/0x2dd0 [ 852.539076][T20037] ? __pfx___vlan_add+0x10/0x10 [ 852.539134][T20037] nbp_vlan_add+0x258/0x3e0 [ 852.539182][T20037] nbp_vlan_init+0x373/0x500 [ 852.539208][T20037] ? __pfx_nbp_vlan_init+0x10/0x10 [ 852.539262][T20037] ? br_fdb_add_local+0x43/0x60 [ 852.539301][T20037] ? __local_bh_enable_ip+0xff/0x120 [ 852.539337][T20037] br_add_if+0xf79/0x1b40 [ 852.539364][T20037] ? veth_get_iflink+0x213/0x2c0 [ 852.539404][T20037] add_del_if+0x114/0x160 [ 852.539434][T20037] br_dev_siocdevprivate+0x8ac/0x1650 [ 852.539462][T20037] ? __lock_acquire+0x4a5/0x2630 [ 852.539497][T20037] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 852.539541][T20037] ? do_raw_spin_lock+0x128/0x260 [ 852.539588][T20037] ? mark_held_locks+0x40/0x70 [ 852.539627][T20037] ? netdev_name_node_lookup+0x107/0x150 [ 852.539666][T20037] ? __mutex_lock+0x26a/0x1b90 [ 852.539702][T20037] dev_ifsioc+0xc1e/0x1e90 [ 852.539732][T20037] ? __pfx_dev_ifsioc+0x10/0x10 [ 852.539753][T20037] ? __pfx___mutex_lock+0x10/0x10 [ 852.539792][T20037] ? dev_load+0x8e/0x240 [ 852.539816][T20037] ? dev_load+0x8e/0x240 [ 852.539850][T20037] dev_ioctl+0x70e/0x1070 [ 852.539881][T20037] sock_ioctl+0x494/0x6b0 [ 852.539921][T20037] ? __pfx_sock_ioctl+0x10/0x10 [ 852.539959][T20037] ? hook_file_ioctl_common+0x146/0x410 [ 852.540010][T20037] ? __fget_files+0x21f/0x3d0 [ 852.540066][T20037] ? __pfx_sock_ioctl+0x10/0x10 [ 852.540108][T20037] __x64_sys_ioctl+0x18e/0x210 [ 852.540150][T20037] do_syscall_64+0x106/0xf80 [ 852.540179][T20037] ? clear_bhb_loop+0x40/0x90 [ 852.540215][T20037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.540243][T20037] RIP: 0033:0x7fd55a59c629 [ 852.540268][T20037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.540295][T20037] RSP: 002b:00007fd55b39f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.540321][T20037] RAX: ffffffffffffffda RBX: 00007fd55a816180 RCX: 00007fd55a59c629 [ 852.540341][T20037] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 852.540360][T20037] RBP: 00007fd55a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 852.540377][T20037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.540393][T20037] R13: 00007fd55a816218 R14: 00007fd55a816180 R15: 00007ffd7f29d0b8 [ 852.540432][T20037] [ 852.950550][T20037] gretap0: failed to initialize vlan filtering on this port [ 853.171960][T20037] gretap0: left allmulticast mode [ 855.427841][ T30] audit: type=1800 audit(4294967340.691:17): pid=20100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2619" name="dbroot" dev="configfs" ino=57646 res=0 errno=0 [ 858.403783][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 858.499360][T20158] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 858.818387][T20171] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 859.479742][T20158] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 862.164870][T20238] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 866.367189][T20312] nvme_fcloop: unknown parameter or missing value '7' [ 868.458180][T20371] bridge0: port 4(gretap0) entered blocking state [ 868.465068][T20371] bridge0: port 4(gretap0) entered disabled state [ 868.471803][T20371] gretap0: entered allmulticast mode [ 868.479282][T20371] gretap0: entered promiscuous mode [ 868.485265][T20371] bridge0: port 4(gretap0) entered blocking state [ 868.491867][T20371] bridge0: port 4(gretap0) entered forwarding state [ 869.830725][T20383] binder: 20382:20383 ioctl c018620c 0 returned -1 [ 870.492097][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.501674][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.828734][T20471] nvme_fcloop: unknown parameter or missing value '7' [ 874.274267][ T30] audit: type=1400 audit(4294967359.531:18): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=20487 comm="syz.1.2699" [ 875.709758][T20519] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 875.792849][T20520] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 879.331515][T20589] input: jJЗё-ђ¶љ9г%vш“ыJ86Ц‘ as /devices/virtual/input/input39 [ 881.112376][ T1098] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:8: bg 2: bad block bitmap checksum [ 881.308129][ T1098] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1 with max blocks 1 with error 74 [ 881.362796][ T1098] EXT4-fs (sda1): This should not happen!! Data will be lost [ 881.362796][ T1098] [ 882.569615][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'. [ 882.589049][T20648] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2734'. [ 886.931708][T20746] FAULT_INJECTION: forcing a failure. [ 886.931708][T20746] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 886.964466][T20746] CPU: 0 UID: 0 PID: 20746 Comm: syz.2.2753 Tainted: G U L syzkaller #0 PREEMPT(full) [ 886.964516][T20746] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 886.964527][T20746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 886.964543][T20746] Call Trace: [ 886.964548][T20746] [ 886.964554][T20746] dump_stack_lvl+0x100/0x190 [ 886.964581][T20746] should_fail_ex.cold+0x5/0xa [ 886.964599][T20746] _copy_from_user+0x2e/0xd0 [ 886.964623][T20746] copy_mount_options+0x76/0x190 [ 886.964644][T20746] __x64_sys_mount+0x1ab/0x310 [ 886.964661][T20746] ? __pfx___x64_sys_mount+0x10/0x10 [ 886.964682][T20746] do_syscall_64+0x106/0xf80 [ 886.964697][T20746] ? clear_bhb_loop+0x40/0x90 [ 886.964714][T20746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.964729][T20746] RIP: 0033:0x7fd55a59c629 [ 886.964742][T20746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.964756][T20746] RSP: 002b:00007fd55b3c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 886.964771][T20746] RAX: ffffffffffffffda RBX: 00007fd55a816090 RCX: 00007fd55a59c629 [ 886.964781][T20746] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 886.964790][T20746] RBP: 00007fd55a632b39 R08: 0000200000000280 R09: 0000000000000000 [ 886.964798][T20746] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 886.964807][T20746] R13: 00007fd55a816128 R14: 00007fd55a816090 R15: 00007ffd7f29d0b8 [ 886.964826][T20746] [ 888.708769][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 889.450898][T20786] kvm: kvm [20785]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 889.632554][T20791] input: jJЗё-ђ¶љ9г%vш“ыJ86Ц‘ as /devices/virtual/input/input40 [ 890.232895][T20795] nvme_fcloop: unknown parameter or missing value 'l' [ 890.555564][T20806] nvme_fcloop: unknown parameter or missing value '7' [ 891.565509][ T30] audit: type=1800 audit(4294967376.839:19): pid=20826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2772" name="dbroot" dev="configfs" ino=60262 res=0 errno=0 [ 892.964677][T20857] input: jJЗё-ђ¶љ9г%vш“ыJ86Ц‘ as /devices/virtual/input/input41 [ 893.441884][T20861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2782'. [ 900.440620][T21007] misc userio: Invalid payload size [ 902.801483][T21064] kvm: kvm [21063]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 905.589232][T21129] kvm: kvm [21128]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 906.066514][T21139] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.0.2839: Error -117 reading block bitmap for 2 [ 906.253962][T21139] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.0.2839: bg 1: bad block bitmap checksum [ 906.334114][T21139] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6685: Filesystem failed CRC [ 907.739512][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 912.787579][T21268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2867'. [ 912.805559][T21268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.826948][T21268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.839656][T21268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.847238][T21268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.060701][ T30] audit: type=1800 audit(4294967399.351:20): pid=21300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2873" name="dbroot" dev="configfs" ino=62207 res=0 errno=0 [ 915.460569][T21335] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2883'. [ 918.358332][ T30] audit: type=1800 audit(4294967403.653:21): pid=21390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2894" name="dbroot" dev="configfs" ino=61333 res=0 errno=0 [ 921.284624][T21461] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 921.822519][T21464] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 921.937905][T21461] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 922.506296][T21485] nvme_fcloop: unknown parameter or missing value '7' [ 922.638534][T21496] ima: policy update failed [ 922.690886][ T30] audit: type=1807 audit(4294967407.935:22): UNKNOWN=0"ы]$|Л1jл0B|d™№эУ‰Oџ¬+цЧ/ЙйxФуИхWУ¦–У^ёґgq%HМ€rкOЋ res=0 [ 922.721546][ T30] audit: type=1802 audit(4294967407.935:23): pid=21496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2918" res=0 errno=0 [ 922.848895][ T30] audit: type=1802 audit(4294967407.945:24): pid=21496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2918" res=0 errno=0 [ 922.988595][T21503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'. [ 923.198728][T21503] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2922'. [ 924.792931][T21544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2933'. [ 926.359475][T21569] nvme_fcloop: unknown parameter or missing value '7' [ 927.568427][T21596] nvme_fcloop: unknown parameter or missing value '7' [ 928.182938][T21606] ERROR: Out of memory at tomoyo_memory_ok. [ 928.693407][T21618] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 929.808097][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 929.918371][T21647] nvme_fcloop: unknown parameter or missing value '7' [ 931.890787][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.897160][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.470106][T21705] nvme_fcloop: unknown parameter or missing value '7' [ 933.750091][T21738] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2978'. [ 936.200758][T21766] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 936.295363][T21769] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 937.045520][T21791] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2989'. [ 937.130758][T21793] FAULT_INJECTION: forcing a failure. [ 937.130758][T21793] name failslab, interval 1, probability 0, space 0, times 0 [ 937.182588][T21793] CPU: 0 UID: 0 PID: 21793 Comm: syz.1.2990 Tainted: G U L syzkaller #0 PREEMPT(full) [ 937.182617][T21793] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 937.182623][T21793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 937.182632][T21793] Call Trace: [ 937.182638][T21793] [ 937.182645][T21793] dump_stack_lvl+0x100/0x190 [ 937.182672][T21793] should_fail_ex.cold+0x5/0xa [ 937.182690][T21793] should_failslab+0xc2/0x120 [ 937.182706][T21793] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 937.182727][T21793] ? __alloc_skb+0x140/0x710 [ 937.182746][T21793] __alloc_skb+0x140/0x710 [ 937.182761][T21793] ? __pfx___alloc_skb+0x10/0x10 [ 937.182777][T21793] ? skb_page_frag_refill+0x2fc/0x5b0 [ 937.182800][T21793] tcp_stream_alloc_skb+0x34/0x660 [ 937.182823][T21793] tcp_sendmsg_locked+0x133b/0x45f0 [ 937.182854][T21793] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 937.182876][T21793] ? do_raw_spin_lock+0x128/0x260 [ 937.182897][T21793] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 937.182921][T21793] ? __local_bh_enable_ip+0x9e/0x120 [ 937.182939][T21793] tcp_sendmsg+0x2e/0x50 [ 937.182965][T21793] ? __pfx_tcp_sendmsg+0x10/0x10 [ 937.182986][T21793] inet_sendmsg+0xb9/0x140 [ 937.183007][T21793] sock_write_iter+0x509/0x610 [ 937.183028][T21793] ? __pfx_sock_write_iter+0x10/0x10 [ 937.183054][T21793] ? bpf_lsm_file_permission+0x9/0x10 [ 937.183075][T21793] ? security_file_permission+0x76/0x210 [ 937.183099][T21793] ? rw_verify_area+0xce/0x6d0 [ 937.183120][T21793] vfs_write+0x6ac/0x1070 [ 937.183141][T21793] ? __pfx_sock_write_iter+0x10/0x10 [ 937.183162][T21793] ? __pfx_vfs_write+0x10/0x10 [ 937.183182][T21793] ? find_held_lock+0x2b/0x80 [ 937.183210][T21793] ksys_write+0x1f8/0x250 [ 937.183231][T21793] ? __pfx_ksys_write+0x10/0x10 [ 937.183257][T21793] do_syscall_64+0x106/0xf80 [ 937.183273][T21793] ? clear_bhb_loop+0x40/0x90 [ 937.183290][T21793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.183305][T21793] RIP: 0033:0x7fdd96f9c629 [ 937.183320][T21793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.183334][T21793] RSP: 002b:00007fdd97eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 937.183349][T21793] RAX: ffffffffffffffda RBX: 00007fdd97215fa0 RCX: 00007fdd96f9c629 [ 937.183359][T21793] RDX: 000000000000fdf3 RSI: 0000000000000000 RDI: 0000000000000003 [ 937.183367][T21793] RBP: 00007fdd97032b39 R08: 0000000000000000 R09: 0000000000000000 [ 937.183376][T21793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.183384][T21793] R13: 00007fdd97216038 R14: 00007fdd97215fa0 R15: 00007ffec432e2a8 [ 937.183405][T21793] [ 937.190003][T21766] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 937.951854][T21802] nvme_fcloop: unknown parameter or missing value '7' [ 938.911001][T21820] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 938.942767][T21824] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 938.953485][T21820] File: /dev/nullb0 PID: 21820 Comm: syz.1.2996 [ 942.710279][T21891] binder: 21890:21891 ioctl c018620c 0 returned -1 [ 944.152519][T21909] nvme_fcloop: unknown parameter or missing value '7' [ 944.443626][T21874] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 946.769108][T21954] random: crng reseeded on system resumption [ 948.732141][T22014] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 949.080140][T22018] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 949.558165][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 951.507904][T22061] sd 0:0:1:0: PR command failed: 1026 [ 951.515967][T22061] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 951.545016][T22061] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 953.786345][T22096] FAULT_INJECTION: forcing a failure. [ 953.786345][T22096] name failslab, interval 1, probability 0, space 0, times 0 [ 953.881249][T22096] CPU: 1 UID: 0 PID: 22096 Comm: syz.2.3050 Tainted: G U L syzkaller #0 PREEMPT(full) [ 953.881309][T22096] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 953.881322][T22096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 953.881340][T22096] Call Trace: [ 953.881351][T22096] [ 953.881362][T22096] dump_stack_lvl+0x100/0x190 [ 953.881413][T22096] should_fail_ex.cold+0x5/0xa [ 953.881450][T22096] should_failslab+0xc2/0x120 [ 953.881478][T22096] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 953.881521][T22096] ? proc_alloc_inode+0x25/0x200 [ 953.881565][T22096] ? __pfx_proc_alloc_inode+0x10/0x10 [ 953.881607][T22096] proc_alloc_inode+0x25/0x200 [ 953.881646][T22096] alloc_inode+0x68/0x250 [ 953.881683][T22096] new_inode+0x22/0x1c0 [ 953.881722][T22096] proc_pid_make_inode+0x22/0x160 [ 953.881763][T22096] proc_pident_instantiate+0x85/0x310 [ 953.881807][T22096] proc_pident_lookup+0x1e3/0x270 [ 953.881855][T22096] lookup_open.isra.0+0x631/0x11b0 [ 953.881905][T22096] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 953.881953][T22096] ? __pfx___might_resched+0x10/0x10 [ 953.881994][T22096] ? mnt_get_write_access+0x52/0x2f0 [ 953.882038][T22096] ? __pfx_down_write+0x10/0x10 [ 953.882071][T22096] ? mnt_get_write_access+0x1e9/0x2f0 [ 953.882114][T22096] path_openat+0x2291/0x31a0 [ 953.882157][T22096] ? __pfx_path_openat+0x10/0x10 [ 953.882201][T22096] do_file_open+0x20e/0x430 [ 953.882233][T22096] ? __pfx_do_file_open+0x10/0x10 [ 953.882275][T22096] ? __pfx_kfree_link+0x10/0x10 [ 953.882332][T22096] ? alloc_fd+0x476/0x790 [ 953.882381][T22096] ? do_getname+0x191/0x390 [ 953.882420][T22096] do_sys_openat2+0x10d/0x1e0 [ 953.882457][T22096] ? __pfx_do_sys_openat2+0x10/0x10 [ 953.882496][T22096] ? __fget_files+0x21f/0x3d0 [ 953.882548][T22096] __x64_sys_openat+0x12d/0x210 [ 953.882586][T22096] ? __pfx___x64_sys_openat+0x10/0x10 [ 953.882638][T22096] do_syscall_64+0x106/0xf80 [ 953.882669][T22096] ? clear_bhb_loop+0x40/0x90 [ 953.882704][T22096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.882736][T22096] RIP: 0033:0x7fd55a59c629 [ 953.882761][T22096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.882789][T22096] RSP: 002b:00007fd55b39f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 953.882818][T22096] RAX: ffffffffffffffda RBX: 00007fd55a816180 RCX: 00007fd55a59c629 [ 953.882838][T22096] RDX: 0000000000000840 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 953.882858][T22096] RBP: 00007fd55a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 953.882876][T22096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.882893][T22096] R13: 00007fd55a816218 R14: 00007fd55a816180 R15: 00007ffd7f29d0b8 [ 953.882930][T22096] [ 954.675572][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 956.392340][T22137] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 956.926897][T22138] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 958.346392][ T5833] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 958.379978][T22176] netlink: set zone limit has 8 unknown bytes [ 958.399023][T22176] netlink: zone id is out of range [ 958.404434][T22176] netlink: zone id is out of range [ 958.409542][T22176] netlink: zone id is out of range [ 958.501164][T22176] netlink: zone id is out of range [ 958.591705][T22176] netlink: zone id is out of range [ 958.613302][T22176] netlink: zone id is out of range [ 958.685842][T22176] netlink: zone id is out of range [ 958.690978][T22176] netlink: zone id is out of range [ 958.733933][T22176] netlink: zone id is out of range [ 959.271116][T22189] FAULT_INJECTION: forcing a failure. [ 959.271116][T22189] name failslab, interval 1, probability 0, space 0, times 0 [ 959.540208][T22189] CPU: 1 UID: 0 PID: 22189 Comm: syz.2.3070 Tainted: G U L syzkaller #0 PREEMPT(full) [ 959.540237][T22189] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 959.540243][T22189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 959.540252][T22189] Call Trace: [ 959.540258][T22189] [ 959.540264][T22189] dump_stack_lvl+0x100/0x190 [ 959.540291][T22189] should_fail_ex.cold+0x5/0xa [ 959.540310][T22189] should_failslab+0xc2/0x120 [ 959.540325][T22189] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 959.540347][T22189] ? __d_alloc+0x34/0xa80 [ 959.540363][T22189] ? security_inode_alloc+0xcf/0x2c0 [ 959.540386][T22189] __d_alloc+0x34/0xa80 [ 959.540399][T22189] ? __ns_ref_active_get+0x9f/0x1b0 [ 959.540419][T22189] path_from_stashed+0x427/0x750 [ 959.540434][T22189] ? do_vfs_ioctl+0x226/0x13e0 [ 959.540455][T22189] open_namespace+0x93/0x1c0 [ 959.540470][T22189] ? __pfx_open_namespace+0x10/0x10 [ 959.540489][T22189] ns_ioctl+0x16e/0x1060 [ 959.540503][T22189] ? __pfx_ns_ioctl+0x10/0x10 [ 959.540516][T22189] ? __fget_files+0x21f/0x3d0 [ 959.540540][T22189] ? __pfx_ns_ioctl+0x10/0x10 [ 959.540554][T22189] __x64_sys_ioctl+0x18e/0x210 [ 959.540574][T22189] do_syscall_64+0x106/0xf80 [ 959.540590][T22189] ? clear_bhb_loop+0x40/0x90 [ 959.540608][T22189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.540623][T22189] RIP: 0033:0x7fd55a59c629 [ 959.540636][T22189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.540650][T22189] RSP: 002b:00007fd55b3e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.540665][T22189] RAX: ffffffffffffffda RBX: 00007fd55a815fa0 RCX: 00007fd55a59c629 [ 959.540675][T22189] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000006 [ 959.540683][T22189] RBP: 00007fd55a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 959.540692][T22189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.540700][T22189] R13: 00007fd55a816038 R14: 00007fd55a815fa0 R15: 00007ffd7f29d0b8 [ 959.540719][T22189] [ 964.125318][T22289] FAULT_INJECTION: forcing a failure. [ 964.125318][T22289] name fail_futex, interval 1, probability 0, space 0, times 1 [ 964.148507][T22289] CPU: 0 UID: 0 PID: 22289 Comm: syz.1.3090 Tainted: G U L syzkaller #0 PREEMPT(full) [ 964.148552][T22289] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 964.148562][T22289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 964.148577][T22289] Call Trace: [ 964.148585][T22289] [ 964.148595][T22289] dump_stack_lvl+0x100/0x190 [ 964.148640][T22289] should_fail_ex.cold+0x5/0xa [ 964.148672][T22289] get_futex_key+0x1d2/0x1620 [ 964.148708][T22289] ? __pfx_get_futex_key+0x10/0x10 [ 964.148742][T22289] ? do_raw_spin_lock+0x128/0x260 [ 964.148780][T22289] ? find_held_lock+0x2b/0x80 [ 964.148804][T22289] ? pcpu_alloc+0x241/0x350 [ 964.148841][T22289] futex_wait_setup+0x81/0x500 [ 964.148891][T22289] __futex_wait+0x19f/0x300 [ 964.148934][T22289] ? __pfx___futex_wait+0x10/0x10 [ 964.148980][T22289] ? __pfx_futex_wake_mark+0x10/0x10 [ 964.149026][T22289] ? __hrtimer_setup+0x178/0x280 [ 964.149065][T22289] ? ktime_add_safe+0x60/0x70 [ 964.149103][T22289] futex_wait+0xed/0x380 [ 964.149143][T22289] ? __pfx_futex_wait+0x10/0x10 [ 964.149181][T22289] ? __lock_acquire+0x4a5/0x2630 [ 964.149216][T22289] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 964.149264][T22289] do_futex+0x1ef/0x350 [ 964.149299][T22289] ? __pfx_do_futex+0x10/0x10 [ 964.149332][T22289] ? ktime_get+0x200/0x300 [ 964.149358][T22289] ? lockdep_hardirqs_on+0x78/0x100 [ 964.149389][T22289] ? read_tsc+0x9/0x20 [ 964.149423][T22289] __x64_sys_futex+0x34f/0x4d0 [ 964.149470][T22289] ? __pfx___x64_sys_futex+0x10/0x10 [ 964.149519][T22289] do_syscall_64+0x106/0xf80 [ 964.149548][T22289] ? clear_bhb_loop+0x40/0x90 [ 964.149583][T22289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.149611][T22289] RIP: 0033:0x7fdd96f9c629 [ 964.149633][T22289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.149659][T22289] RSP: 002b:00007ffec432e408 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 964.149686][T22289] RAX: ffffffffffffffda RBX: 00000000000eb3b5 RCX: 00007fdd96f9c629 [ 964.149705][T22289] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdd97215fac [ 964.149721][T22289] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 964.149737][T22289] R10: 00007ffec432e510 R11: 0000000000000246 R12: 00007ffec432e530 [ 964.149755][T22289] R13: 00007fdd97215fac R14: 00000000000eb3e7 R15: 00007ffec432e510 [ 964.149791][T22289] [ 964.753792][T22302] netlink: 93 bytes leftover after parsing attributes in process `syz.1.3090'. [ 964.786523][T22299] netlink: 93 bytes leftover after parsing attributes in process `syz.1.3090'. [ 965.141830][T22201] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 967.296202][T22308] kexec: Could not allocate control_code_buffer [ 970.556422][T22432] random: crng reseeded on system resumption [ 970.820143][T22430] zswap: compressor ы not available [ 976.295700][T22519] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 976.388279][T22519] File: /dev/nullb0 PID: 22519 Comm: syz.3.3137 [ 981.640267][T22634] FAULT_INJECTION: forcing a failure. [ 981.640267][T22634] name failslab, interval 1, probability 0, space 0, times 0 [ 981.672101][T22634] CPU: 1 UID: 0 PID: 22634 Comm: syz.2.3158 Tainted: G U L syzkaller #0 PREEMPT(full) [ 981.672149][T22634] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 981.672159][T22634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.672176][T22634] Call Trace: [ 981.672185][T22634] [ 981.672195][T22634] dump_stack_lvl+0x100/0x190 [ 981.672245][T22634] should_fail_ex.cold+0x5/0xa [ 981.672278][T22634] should_failslab+0xc2/0x120 [ 981.672306][T22634] __kmalloc_cache_noprof+0x7a/0x6f0 [ 981.672341][T22634] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 981.672388][T22634] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 981.672432][T22634] vidtv_mux_init+0x8a6/0xbf0 [ 981.672472][T22634] vidtv_start_feed+0x33e/0x4c0 [ 981.672515][T22634] ? __pfx_vidtv_start_feed+0x10/0x10 [ 981.672557][T22634] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 981.672616][T22634] ? mark_held_locks+0x40/0x70 [ 981.672660][T22634] ? __pfx_vidtv_start_feed+0x10/0x10 [ 981.672703][T22634] dmx_ts_feed_start_filtering+0xf6/0x220 [ 981.672754][T22634] dvb_dmxdev_start_feed+0x273/0x3f0 [ 981.672798][T22634] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 981.672842][T22634] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 981.672887][T22634] dvb_demux_do_ioctl+0xe64/0x1200 [ 981.672940][T22634] dvb_usercopy+0x167/0x340 [ 981.672974][T22634] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 981.673017][T22634] ? __pfx_dvb_usercopy+0x10/0x10 [ 981.673067][T22634] ? __fget_files+0x21f/0x3d0 [ 981.673125][T22634] dvb_demux_ioctl+0x29/0x40 [ 981.673162][T22634] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 981.673199][T22634] __x64_sys_ioctl+0x18e/0x210 [ 981.673242][T22634] do_syscall_64+0x106/0xf80 [ 981.673272][T22634] ? clear_bhb_loop+0x40/0x90 [ 981.673309][T22634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.673339][T22634] RIP: 0033:0x7fd55a59c629 [ 981.673366][T22634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.673403][T22634] RSP: 002b:00007fd55b3e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 981.673430][T22634] RAX: ffffffffffffffda RBX: 00007fd55a815fa0 RCX: 00007fd55a59c629 [ 981.673451][T22634] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 981.673468][T22634] RBP: 00007fd55a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 981.673486][T22634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.673503][T22634] R13: 00007fd55a816038 R14: 00007fd55a815fa0 R15: 00007ffd7f29d0b8 [ 981.673543][T22634] [ 981.673725][ T5926] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 981.933446][ T5926] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 981.941867][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: kworker/1:5 Tainted: G U L syzkaller #0 PREEMPT(full) [ 981.952821][ T5926] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 981.958008][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.968066][ T5926] Workqueue: events vidtv_mux_tick [ 981.973188][ T5926] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 981.979790][ T5926] Code: 3c c3 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 981.999403][ T5926] RSP: 0018:ffffc90004baf3f8 EFLAGS: 00010202 [ 982.005472][ T5926] RAX: 0000000000000002 RBX: ffffc90004baf678 RCX: 0000000000000002 [ 982.013441][ T5926] RDX: 0000000000000000 RSI: ffffffff882b3804 RDI: ffff88801eba9e40 [ 982.021410][ T5926] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 982.029380][ T5926] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004baf698 [ 982.037347][ T5926] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 982.045315][ T5926] FS: 0000000000000000(0000) GS:ffff888124451000(0000) knlGS:0000000000000000 [ 982.054249][ T5926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 982.060829][ T5926] CR2: 000000110d2f0483 CR3: 00000000421a6000 CR4: 00000000003526f0 [ 982.068797][ T5926] Call Trace: [ 982.072067][ T5926] [ 982.074997][ T5926] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 982.081345][ T5926] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 982.086897][ T5926] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 982.092969][ T5926] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 982.098696][ T5926] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 982.104776][ T5926] ? ret_from_fork_asm+0x1a/0x30 [ 982.109723][ T5926] ? __lock_acquire+0x4a5/0x2630 [ 982.114666][ T5926] ? trace_ignore_this_task+0xbc/0x100 [ 982.120147][ T5926] ? do_raw_spin_lock+0x128/0x260 [ 982.125191][ T5926] vidtv_mux_push_si+0x932/0xe80 [ 982.130136][ T5926] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 982.135606][ T5926] ? __pfx_vidtv_ts_pcr_write_into+0x10/0x10 [ 982.141682][ T5926] ? debug_object_activate+0x331/0x490 [ 982.147148][ T5926] ? do_raw_spin_unlock+0x145/0x1e0 [ 982.152361][ T5926] vidtv_mux_tick+0xe9b/0x1480 [ 982.157128][ T5926] ? __lock_acquire+0x4a5/0x2630 [ 982.162172][ T5926] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 982.167374][ T5926] ? __lock_acquire+0x4a5/0x2630 [ 982.172319][ T5926] ? debug_object_deactivate+0x2e4/0x3b0 [ 982.178045][ T5926] ? finish_task_switch.isra.0+0x200/0xb80 [ 982.184038][ T5926] ? rcu_is_watching+0x12/0xc0 [ 982.188817][ T5926] process_one_work+0x9d7/0x1920 [ 982.193773][ T5926] ? __pfx_process_one_work+0x10/0x10 [ 982.199246][ T5926] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 982.204450][ T5926] worker_thread+0x5da/0xe40 [ 982.209050][ T5926] ? __pfx_worker_thread+0x10/0x10 [ 982.214172][ T5926] ? kthread+0x13a/0x450 [ 982.218417][ T5926] ? __pfx_worker_thread+0x10/0x10 [ 982.223535][ T5926] kthread+0x370/0x450 [ 982.227615][ T5926] ? __pfx_kthread+0x10/0x10 [ 982.232210][ T5926] ret_from_fork+0x754/0xd80 [ 982.236810][ T5926] ? __pfx_ret_from_fork+0x10/0x10 [ 982.241930][ T5926] ? __switch_to+0x7b4/0x1120 [ 982.246610][ T5926] ? __pfx_kthread+0x10/0x10 [ 982.251469][ T5926] ret_from_fork_asm+0x1a/0x30 [ 982.256332][ T5926] [ 982.259344][ T5926] Modules linked in: [ 982.263497][ T5926] ---[ end trace 0000000000000000 ]--- [ 982.550512][ T5926] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 982.559985][ T5926] Code: 3c c3 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 982.651600][ T5926] RSP: 0018:ffffc90004baf3f8 EFLAGS: 00010202 [ 982.657819][ T5926] RAX: 0000000000000002 RBX: ffffc90004baf678 RCX: 0000000000000002 [ 982.665918][ T5926] RDX: 0000000000000000 RSI: ffffffff882b3804 RDI: ffff88801eba9e40 [ 982.674120][ T5926] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 982.682244][ T5926] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004baf698 [ 982.690399][ T5926] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 982.709632][ T5926] FS: 0000000000000000(0000) GS:ffff888124451000(0000) knlGS:0000000000000000 [ 982.768793][ T5926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 982.775589][ T5926] CR2: 0000001b308f4ff8 CR3: 0000000075f2c000 CR4: 00000000003526f0 [ 982.785786][ T5926] Kernel panic - not syncing: Fatal exception [ 982.792310][ T5926] Kernel Offset: disabled [ 982.796623][ T5926] Rebooting in 86400 seconds..