last executing test programs: 7m45.861671364s ago: executing program 3 (id=239): mmap$auto(0x0, 0xb460, 0x3, 0x1000012, 0xffffffffffffffff, 0x3) getpid() mmap$auto(0x0, 0x4, 0x4000000000df, 0x14, 0xffffffffffffffff, 0x300000000003) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) epoll_create$auto(0x2) r0 = epoll_create$auto(0x2) epoll_pwait2$auto(r0, 0x0, 0x200008, &(0x7f0000002780)={0x10000000000, 0x6}, 0x0, 0x8) sysfs$auto(0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x3) socket(0x25, 0x6, 0x80000000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x20803, 0x0) clone$auto(0x2, 0x20aa2890, 0x0, 0x0, 0xfffffffffffffe00) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) eventfd$auto(0x8c) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8002) lsm_get_self_attr$auto(0x4, &(0x7f0000000280)={0x7ff, 0xf, 0x7}, 0x0, 0x80000000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) 7m44.612373005s ago: executing program 3 (id=242): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'\x00\xc9\n\xbf\xb9\x12\xfa\x00\x00\xcfk', 0xb7f) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r1 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/psample/latency_max\x00', 0x100, 0x0) fsetxattr$auto(r1, &(0x7f0000000080)='[)X-\xf6\x00', &(0x7f00000000c0)="ac5e7e6530cb499c950875473feaad8b3bf363570764a7cbd039d1777e691ab4305a44abc2089914c9f5fe3cd7c219be39d3365ceb3e11b3ffeb344820390df2", 0x7, 0x8) 7m43.731961168s ago: executing program 3 (id=247): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x7, 0xfffffffffffffffb, 0x4000000000de, 0x78, r1, 0x300000000004) r3 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r3, 0x65, 0x6, 0xffffffffffffffff, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00W\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xe80, 0x3) sendfile$auto(r4, r4, 0x0, 0x3) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x1, 0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xb, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x3624239c, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) 7m39.860067095s ago: executing program 3 (id=262): mmap$auto(0x4, 0x40000e, 0x2, 0x13, 0xffffffffffffffff, 0x7e) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x802}, 0x3, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) get_robust_list$auto(0x0, 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x400c40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x3ff) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xacd6}, 0x3) mmap$auto(0x0, 0x2020009, 0x2, 0x2000000000012, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x3, 0x5, 0x7, 0x0) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, r1, 0x8000000008003) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) socket(0x28, 0x1, 0x0) socket(0x23, 0x5, 0x84) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) listen$auto(0x3, 0x81) accept$auto(r3, 0x0, 0x0) 7m39.191303765s ago: executing program 3 (id=266): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0xc008af12, r0) 7m39.015921842s ago: executing program 3 (id=267): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r2, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x31c, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r3, 0xc1086201, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getsockopt$auto_SO_TXREHASH(r0, 0x1, 0x4a, &(0x7f0000000040)='\x00', &(0x7f0000000080)=0x2) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) wait4$auto(0x0, 0x0, 0x4, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8008) mount_setattr$auto(r4, 0x0, 0x1000, 0x0, 0x7) 7m23.116231743s ago: executing program 32 (id=267): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r2, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x31c, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r3, 0xc1086201, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getsockopt$auto_SO_TXREHASH(r0, 0x1, 0x4a, &(0x7f0000000040)='\x00', &(0x7f0000000080)=0x2) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) wait4$auto(0x0, 0x0, 0x4, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8008) mount_setattr$auto(r4, 0x0, 0x1000, 0x0, 0x7) 9.010499507s ago: executing program 0 (id=2096): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c120002", @ANYRES16=r2, @ANYBLOB="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"], 0x122c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x636c00, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r4, 0x9, 0x8, 0x4) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x8901, 0x0) poll$auto(&(0x7f0000000240)={r0, 0x3, 0x9}, 0x3, 0x8) 5.868703235s ago: executing program 0 (id=2109): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, 0x0, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x161342, 0x1a3) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0xa69, 0x0, 0x4) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x17, 0x3, 0x0) (async) socket(0xf, 0x3, 0x73) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.8/usb25/25-0:1.0/usb25-port2/over_current_count\x00', 0x2e08c1, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) (async) write$auto(r5, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) (async) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r7, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0) 4.306877613s ago: executing program 1 (id=2112): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x10000009, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x5], {0xd, 0x3, 0x6, 0x0, 0x4, 0x1000, 0x3fdc, 0x2, 0x5}, {0x2, 0x4aa, 0x54ed, 0xfffffff8, 0x101, 0x6, 0x7, 0xa, 0xb}}) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) (async) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x189400, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/servers\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/99, 0x63) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x28) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r5 = open(0x0, 0x22040, 0x75) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7f000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040840}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x20004884) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="01032dbd7000fbdbd9251500000004000e00281313bb4a2e88e1d827668f9f788551a00600e9a377238175e2b8de04528da9a14e0f3db4ee88223ba31af84be9792f94f381f2386bda85d9265ac6c1d0fb9e3246b1de4eb99f8f66d84a7914f9ece04b504a78aa30ed4a9cd1de300d61b09baa88445778a6b439127a186986760400bbf95612b34ab79b2821d5bb21ef1d4f12969df6346e7ccf603e6a0e9662d211d970bd71d69b1dde59259c4e0a60af8ae4074a460b70c47956a5edb43df4a8efd975e3ec4bafc1b8af61e7b4aedf03c4abf2568c2c112bd4e61076"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) (async, rerun: 64) lstat$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x5, 0xc4, 0x100000000, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0x3, 0x800, 0x7658, 0x7, 0xd, 0x1, 0x401, 0x4, 0x1, 0x4800000000}) (async, rerun: 64) r10 = waitid$auto_P_ALL(0x0, 0x7, &(0x7f0000000540)={@siginfo_0_0={0xcb0, 0x3, 0x0, @_sigfault={&(0x7f0000000440)="0633b447a9e3e24be9adffe24b2bc986e786063f4918d27ceb8ad495cec54c9ff6020a4aeceef498e6ebc3b58be4a53524a7dbb250f33e4c6d38437895479e66f10ed90e251d4803779c0931afa8ee7d840c4297ff6b92d1a9eb9b883293a2c8282daae7832527753664315c80a4298752cc283a19f21bc2242dbe3542afa9aa3d8ec07b5d4a2428ecc34d920f4187b6ef19840f283baae8520378a579ba4ae0883a8120012006c38833981bdcad938caad90c1101edaa7c856d49b6918beae9bb52", @_trapno=0x2}}}, 0x2, &(0x7f00000005c0)={{0xfffffffffffffffc, 0x10}, {0x7, 0x1}, 0x800, 0x100000001, 0x18, 0x7, 0xa74f, 0x9, 0x80, 0x2, 0x4, 0x10, 0x8, 0x4, 0xffffffffffffff80, 0x400}) sendmsg$auto_NL80211_CMD_GET_MPP(r5, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000002600)=ANY=[@ANYBLOB="68130000", @ANYRES16=r8, @ANYBLOB="000326bd7000fbdbdf256b0000009d118480841e6e5cd31b7274685a8e3ddf6f4f1499f49b85e07889cf398a717447f50b61fec714850f940e7571fce2440769bacea9abf11ccbe348b98a238039252a849fa6cfcdb1e9588c7c5adc7b9ad1b7e781bb35be590c09b8f49983fdf25348751f9896fbd9a837923596ded74b2a9cf19146464ed830cdaffd83a23a6e7960a5ab03cb4fefcd64df523827fdfa92effd7b8308005c00", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="b0003280a400ba000206d35bc2759f646096d8988bf6bccfeb20f5cdad40ab23290c18d00349bc6a8640ce6a2117a7e2142fff65577690af0d9188b23ccfe4db7aa9ae3c7161c4f00f8a770b0862bf3571dc0ccacba7655229ce2e99b52afa9330ebd1a6f23bf9ec9855d3211ef9a76d261dbd7c14d60b8a95630dfb4da6f4f8d7685afbc82a54463e3406d56a3d2c554f9ae00dd316258ef3d559e8800b94feb88f8c8fe5f6564108003000", @ANYRES32=r6, @ANYBLOB="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"/471], 0x1368}, 0x1, 0x0, 0x0, 0x94}, 0x4840) 4.200293463s ago: executing program 0 (id=2114): read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000040)=""/124, 0x7c) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f00000000c0)=@token_create={0x1ff}, 0x9) (async) r0 = bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f00000000c0)=@token_create={0x1ff}, 0x9) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "088e169f962df4191758136d"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xc2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0xc0) 3.99333606s ago: executing program 0 (id=2116): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01002dbd0900fedbdf"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c120002", @ANYRES16=r2, @ANYBLOB="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"], 0x122c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x636c00, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r4, 0x9, 0x8, 0x4) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0xfffffffd, &(0x7f0000000080)={0x0, 0x1}, 0xa, 0x0, 0x4, 0x401}, 0xed7138c}, 0xfffffffd, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) poll$auto(&(0x7f0000000240)={r0, 0x3, 0x9}, 0x3, 0x8) 3.973651365s ago: executing program 4 (id=2117): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) read$auto(r0, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x6, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0x381, 0x6, 0x8001, 0x800010, 0x6, 0x10001, 0xefe, 0xfffffffa, 0x5, 0x8001, 0x62f, 0x101, 0x4, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x9, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0x4, 0x2, 0x1000, 0x9, 0x3, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x5, 0x4, 0x80, 0x6ed, 0x0, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x4, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78e, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x4, 0x5, 0xfffff43e, 0x0, 0x4f000, 0xfe, 0x5, 0x7, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xf2, 0x0, 0x7fffffff, 0x7f77, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x0, 0x5, 0x1000, 0x1, 0x7, 0x400, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x4008004) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000380)={0x101045100, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x200204, 0x15) mmap$auto(0x1, 0x2, 0x3, 0x12, r0, 0x7) ustat$auto(0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) capget$auto(0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80800, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) prctl$auto(0x23, 0x7, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x111442, 0x0) fdatasync$auto(r0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 3.85206845s ago: executing program 1 (id=2118): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2d7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc5}, 0x400, 0x0, 0x1, 0xe}, 0x7}, 0x1, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x400003, 0x0) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x5, 0x2) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket(0x3, 0x2, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c5a4909ab7e79491c86f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x1, 0x1, 0x5be, 0x800, 0x5, 0x4, 0x2, 0xffff, 0xb, 0xffffffff, 0x5, 0xff, 0xf688, 0xb, 0x8, 0xfff, 0x0, 0x7, 0x2, 0x2, 0x4, 0xd8a, 0x3, 0x2, 0x6af, 0xb, 0x7ffffdfc, 0x7fffffffffffffff, 0x738, 0x6, 0x9, 0x78, 0x8, 0x9, 0xcb, 0x40000000403, 0xe75, 0x1, 0xffffffff7fffffff, 0x9, 0x4, 0x0, 0x8, 0x3, 0xffff, 0x1, 0xc, 0xe4, 0x7, 0x4, 0x100000001, 0x951, 0xe0000000000002, 0x6, 0x9, 0x0, 0x100000000000006, 0x4000000000000003, 0xb, 0x82c1, 0xfff, 0x0, 0x4000000000c1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc19ba1ad1e6542790700000044b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a65fe9300"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0xa0c40, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x80000007, 0x400b, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) exit$auto(0x1003) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x28080, 0x0) io_uring_setup$auto(0x86, 0x0) 3.337413665s ago: executing program 4 (id=2120): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) newfstatat$auto(0xffffffffffffffff, &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x784a) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000540), r1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8001) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ustat$auto(0x7, &(0x7f00000000c0)={0x3, 0x4, "45be1f034285", "9daebb1d24ae"}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) r3 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/thread-self/gid_map\x00', 0x40000, 0x0) pread64$auto(r3, &(0x7f0000001b40)='{\x00', 0x6c1c, 0x5) r4 = socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto_SO_BSDCOMPAT(r4, 0x0, 0xe, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x9) r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r6 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) ppoll$auto(&(0x7f0000000100)={r2, 0x3f5, 0x5}, 0x1, 0x0, 0x0, 0x8) r7 = ioctl$auto_SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000040)=0xa) sendmmsg$auto(r6, &(0x7f00000004c0)={{&(0x7f0000000180)="035dd69641e9f3a0c57ed12c80815912cb498a6f51682ad3849d1d601d152423e9e6acf23e373dbd110ac508ca413a839e674e1e4d65bd1fc56a073e4e106307852bb728c3cb9138283d9617e1f2e8c58ead582635fb6b70363d0160eb71230d7a09300a61c8c29d275fa608119ff44366679141d61d2e47f621ad7f7712676f859e8e394eb73acebc950592cb1368766b6a8ca365b2818750b3a640266eee9dd75b207fe615e714e541cc872a8de99c2a943eb3e1c999270a7930ea8c537616cdade10433cd5f", 0x6, &(0x7f0000000280)={&(0x7f0000000300)="eb3455537f2015ca8bf98735ea277dcb2de441f416e1fda5e7f258c02eed3600633481fdf5c552334cd7bc75972c9c1e73448562f7981957beac339d7dec53d889044dfdd953c4426651f89382998864069e78a010a725f6a602c78972d52606b333ab284b24156aca5721f2eae0313a5e8214ecf531e5d12c09ec50edc58d4b1c9cf3121722bfba0d4f0b481173c8ae8a2f54f6c915e0d8ebe39c294b125c00c02c2f26e91d6e57dbe72060e64b4754ed22f1c09ae62a6768f4", 0xc}, 0xf24, &(0x7f00000003c0)="a52179727cf6cb6acbd18c02dcdbd9182f65360bb7a28a415a7edb09f0801e430e4032b766a6c822f4eb5954e4d1b83244abe2b4f5b08c29cbc09e27aa164875850d8b9b9a90a90a13b6ab0c42f23c0260b34cd9a53b849109650e80a2a5040c4e43b5aa59f2c9988a8d4350d287a9e7fda0fb01b95fad142883120aa6249d7ccc37e0037f747f26b3091afd0123a00ff13012499df51baa9767b1461b8a94a8c972d0c422b9e176578173fcba76fb0b2899ceb9aa06f3ab14425ce02e7db43dc93cf5b907554f7a738a5401155f808c2037c893ccda7ad4bac347323fb35c8900fd4660367f", 0x8, 0x1}, 0x2}, 0x8, 0x80) socket(0x2c, 0x1, 0xffffffff) read$auto_proc_timens_offsets_operations_base(r7, &(0x7f0000000500)=""/62, 0x3e) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, 0x0) write$auto(r0, &(0x7f0000000400)='3\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x9b\xcf\x1a@4\x1d>\x9b\xb8\xe7\t\x88\xe0\x85\x97\x1a\a-T\xf8\xcfHx|j\xa0\n\xc7q\x93\x8e\bOp\xd8\x05\x94\xb77\x8d.\xb3t\xbd\x15\xfdR\xfd3\xa0\xe4\xecz8\x1a\xa1V8\xa4\xe3O\xc8w|\xd4\x7f\xea\xa2X\x86\xa0\xec\xd7\x91\xb1B\xcdd9\x1a[\x96\xf7=\x9aU\xeb\r\xb5\x8e\x8b\xaeq\xa12\xc9\\\xb2\xd5\xfd\xf5\xfb\x88R\xa7\xb5\xfd\xe3\xf9\x10\xf2f\xe7\t}\xe61\xcb\x14\x88\xa2\x0f\xfa\xb5T%\xc6 \\\xa3\xa1\x10@y\xbd\x16\xe1\xdfh\xee\xde\xaa\xa2U\xd7\xf4\xa8\xd6\xc1\xe0X\x8f{m\'(\xfb\xab\x8bXW\x9a>Hl\x9d\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/N\xc6\f\xef\xda\xaay\xf8fm\f\xabH\x9f\f\xd1\xc2fZ8\xcd\xb61\xcd\xd8\xcc|p:7\x15\xb2\xcb\xf5\x13\xcc\xb6\x97\x18=[\x8a\x92f\xb8&\x959-\n\xccWw\xe2\x9cK\f\x0e\xdb\xc3\xc08&\xd6\xa2(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\\\x14\xd2\xb2O\xc5\xbb\xfe5\xb9\x00\xa4:[\xdf?\xd9\x889\xcf\x9a\xc6\xd4_FwN\x9a\xefKYd\xc2f\xd8\x1d\v\x94*d\x93v7\x02\xc9\x87q\xa9\xeb\xfa\x9e\xcd\xd8T\x89\xd5\x94l\x94:\x0f\ta\xcat\xd7}\x02\xcdBw0J\xe5{4\xffG,u\xb0\xd8\x18\xe6\x10m\x9c\x14\xaa\xf7\x81\x95\x9auQ\xb6u^\x0e\x92Tw\xff\xd2k\x06\xe4p\x85\xd5\x8f\x9cH\x97\xb2\x17-2\xd1\xad\x05\x93SL\xcc\xf1c\x19\xe5X\xcf!;~?l\xe3\xf4m\xb7\xcf\x9d\xe4\x89\x1c\xa2\xbf\x90\xebu\x05\aG\xc2\xdcA\x99\xc5s`\xf1a\xd4\v\xca\xdb\t\xb0\xdd\x88\x8a4\x87\xe22\x84`\xf7', 0x100000a3d8) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) read$auto(0x4, 0x0, 0x80) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 2.601118908s ago: executing program 2 (id=2124): r0 = socket(0x23, 0x2, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) pread64$auto(r1, 0x0, 0x4, 0xc9) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/phonet\x00', 0x600, 0x0) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000002540), r0) pread64$auto(r2, 0x0, 0x200000000003, 0x2f4a3a23) 2.517311683s ago: executing program 1 (id=2125): mmap$auto(0x2, 0x20009, 0xdb, 0xeb1, 0x401, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2d7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x7ff) r2 = socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) mmap$auto(0x1ff, 0x20009, 0x10e2, 0xeb1, r0, 0x7ffd) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(r2, 0x0, 0xfffffffd, 0x0, 0xa) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0xb}, 0x6, 0x0, 0x2, 0x3}, 0xd}, 0x260, 0xffffffff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x50df9683, &(0x7f00000002c0)={0x0, 0xc5}, 0x400, 0x0, 0x1, 0xe}, 0x7}, 0x1, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x5, 0x2) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket(0x3, 0x2, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c5a4909ab7e79491c86f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x3, 0x1, 0x5be, 0x800, 0x5, 0x5, 0x6, 0xffff, 0x475, 0xffffffff, 0x5, 0xff, 0xf688, 0xb, 0x8, 0xfff, 0x0, 0x7, 0x2, 0x2, 0x4, 0xd8a, 0x3, 0x2, 0x6af, 0xb, 0x7ffffdfc, 0x7fffffffffffffff, 0x738, 0x6, 0x7, 0x78, 0x8, 0x9, 0xcb, 0x40000000403, 0xe75, 0x1, 0x100000000, 0x9, 0x4, 0x0, 0x8, 0x5, 0xffff, 0x1, 0xc, 0xe4, 0x7, 0x4, 0x100000001, 0x94f, 0xe0000000000002, 0x6, 0x1, 0x0, 0x100000000000006, 0x4000000000008006, 0xb, 0x82c1, 0xfff, 0x0, 0x4000000000c1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc19ba1ad1e6542790700000044b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a65fe9300"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc141, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0xa0c40, 0x0) r4 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x80000007, 0x400b, r4, [], {0x6, 0x401, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) 2.442951262s ago: executing program 0 (id=2126): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x8009b72, 0x2, 0x9000) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x1a3b02, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r0) wait4$auto(0x0, 0x0, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mount_setattr$auto(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0xe9f) 2.389300555s ago: executing program 2 (id=2127): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x0) getsockopt$auto(r0, 0x6, 0x3, &(0x7f00000002c0)='$\xfe\x88\xc8\x91\x8bo\xc6#\x00\x00\x00\xfd\xb1\x00\xdb\xc0\x80\xd6\xdb>f\x8c\xf7\xb6G\xe0\xb0Z\x89\xf7i\xb8\xb0,\x86\x00\x9c~\xca\xcdi\xa6\x91R\x7f\x00B\x93H9\x19\xb4x\xe6\xb7\xd3\xe4\x00\x00\x00T@\xf0\x8b\xd4XE\x17\xaa\b', &(0x7f0000000180)=0xad) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 2.027573236s ago: executing program 4 (id=2128): socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x2008, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) statmount$auto(&(0x7f0000000000)={0x7e, @raw=0x400, 0x80000024, 0x7fff, 0x4}, 0x0, 0x7ffffffff001, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0xa, 0x0) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) 1.706963574s ago: executing program 0 (id=2129): ppoll$auto(&(0x7f0000000200)={0xffffffffffffffff, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x8) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x40044) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) setitimer$auto(0x1, &(0x7f0000000000)={{0x14cd, 0x2000000000000081}, {0x3, 0xb}}, 0x0) r1 = socket(0x18, 0x800, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100, @rand_addr=0x4}, 0x3a) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.491635635s ago: executing program 1 (id=2130): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2d7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x40008000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x28000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) getgroups$auto(0xe, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe841, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x400003, 0x0) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x5, 0x2) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket(0x3, 0x2, 0x0) 1.396034551s ago: executing program 2 (id=2131): futex$auto(&(0x7f0000000080)=0x1, 0x8, 0x3d, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0x13, 0x405, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(0x3, 0x80004508, 0x10000000000402) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/014/001\x00', 0x8000, 0x0) r0 = socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x8a30, 0x5, 0x14, 0x944, 0x2, 0x3, 0x40004, 0x4, 0x9, 0x400005, 0x4000fff, 0xa000007, 0x8001, 0x80, 0x5, 0x3, 0x4, 0x7, 0x101, 0x309, 0x8, 0xfffffffc, 0x7fffffff, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x100000009, 0x6, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x800000000002, 0x9, 0x0, 0x8, 0x0, 0x0, 0xe, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x45e0]}, 0x1fb, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) connect$auto(r0, &(0x7f0000000400)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, 0x1}, 0x9) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x10bb41, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x80000) write$auto(0x3, 0x0, 0xfdef) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfde9}, 0x2, 0x0, 0x7, 0xa505}, 0x801}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x88000) read$auto_ext4_dir_operations_ext4(0xffffffffffffffff, &(0x7f00000003c0)=""/19, 0x13) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080d3}, 0x4c004) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000340), 0x8100, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r2, 0x7005, 0x0) readv$auto(r2, &(0x7f00000004c0)={0x0, 0x4}, 0x5) 1.322714516s ago: executing program 4 (id=2132): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2d7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc5}, 0x400, 0x0, 0x1, 0xe}, 0x7}, 0x1, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x400003, 0x0) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x5, 0x2) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket(0x3, 0x2, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c5a4909ab7e79491c86f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x1, 0x1, 0x5be, 0x800, 0x5, 0x4, 0x2, 0xffff, 0xb, 0xffffffff, 0x5, 0xff, 0xf688, 0xb, 0x8, 0xfff, 0x0, 0x7, 0x2, 0x2, 0x4, 0xd8a, 0x3, 0x2, 0x6af, 0xb, 0x7ffffdfc, 0x7fffffffffffffff, 0x738, 0x6, 0x9, 0x78, 0x8, 0x9, 0xcb, 0x40000000403, 0xe75, 0x1, 0xffffffff7fffffff, 0x9, 0x4, 0x0, 0x8, 0x3, 0xffff, 0x1, 0xc, 0xe4, 0x7, 0x4, 0x100000001, 0x951, 0xe0000000000002, 0x6, 0x9, 0x0, 0x100000000000006, 0x4000000000000003, 0xb, 0x82c1, 0xfff, 0x0, 0x4000000000c1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc19ba1ad1e6542790700000044b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a65fe9300"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0xa0c40, 0x0) io_uring_setup$auto(0x59, 0x0) exit$auto(0x1003) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x28080, 0x0) io_uring_setup$auto(0x86, 0x0) 1.002511233s ago: executing program 2 (id=2133): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) 837.889182ms ago: executing program 2 (id=2134): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 735.620693ms ago: executing program 2 (id=2135): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01002dbd0900fedbdf"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c120002", @ANYRES16=r2, @ANYBLOB="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"], 0x122c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x636c00, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r4, 0x9, 0x8, 0x4) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0xfffffffd, &(0x7f0000000080)={0x0, 0x1}, 0xa, 0x0, 0x4, 0x401}, 0xed7138c}, 0xfffffffd, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) poll$auto(&(0x7f0000000240)={r0, 0x3, 0x9}, 0x3, 0x8) 508.26418ms ago: executing program 1 (id=2136): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r2 = socket(0x2, 0x5, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, 0x6a) listen$auto(0x3, 0x81) (async) read$auto(r2, 0x0, 0x7) (async) close_range$auto(0x2, r2, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x55) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x80000000, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x40000080) (async) epoll_create1$auto(0x0) listen$auto(0x3, 0x81) (async) close_range$auto(0x2, 0xa, 0x0) (async) mremap$auto(0x7fffffffffffffff, 0x3, 0x6, 0x2, 0x7f) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{0x48c, 0x0, 0xa}]}) 0s ago: executing program 1 (id=2137): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r1, 0x0, r1, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy13/reset\x00', 0x2481, 0x0) pwrite64$auto(r2, 0x0, 0x3, 0x4200000000000005) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r3, r3, 0x0) read$auto_vhost_net_fops_net(r3, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) semctl$auto(0x1, 0x2, 0x2, 0xf00) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) write$auto(r4, 0x0, 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) mmap$auto(0x0, 0x40009, 0xdf, 0x10, r3, 0x28000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) kernel console output (not intermixed with test programs): 10/0x10 [ 377.520992][T11463] status_show+0xa0/0x120 [ 377.521011][T11463] ? __pfx_status_show+0x10/0x10 [ 377.521034][T11463] dev_attr_show+0x52/0xa0 [ 377.521056][T11463] ? __pfx_dev_attr_show+0x10/0x10 [ 377.521077][T11463] sysfs_kf_seq_show+0x217/0x3a0 [ 377.521098][T11463] seq_read_iter+0x32f/0x1270 [ 377.521127][T11463] kernfs_fop_read_iter+0x46c/0x610 [ 377.521142][T11463] ? rw_verify_area+0xce/0x6d0 [ 377.521164][T11463] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 377.521187][T11463] vfs_read+0x825/0xb30 [ 377.521211][T11463] ? __pfx_vfs_read+0x10/0x10 [ 377.521246][T11463] ksys_read+0x12a/0x250 [ 377.521266][T11463] ? __pfx_ksys_read+0x10/0x10 [ 377.521292][T11463] do_syscall_64+0x106/0xf80 [ 377.521308][T11463] ? clear_bhb_loop+0x40/0x90 [ 377.521326][T11463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.521341][T11463] RIP: 0033:0x7f0832b9c629 [ 377.521355][T11463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.521369][T11463] RSP: 002b:00007f0833a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.521384][T11463] RAX: ffffffffffffffda RBX: 00007f0832e15fa0 RCX: 00007f0832b9c629 [ 377.521394][T11463] RDX: 000000000000007f RSI: 0000200000000240 RDI: 0000000000000005 [ 377.521403][T11463] RBP: 00007f0832c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 377.521412][T11463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.521421][T11463] R13: 00007f0832e16038 R14: 00007f0832e15fa0 R15: 00007ffe56f85278 [ 377.521442][T11463] [ 378.624008][T11485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1195'. [ 378.683948][T11485] dummy0: entered promiscuous mode [ 378.706323][T11485] dummy0: entered allmulticast mode [ 378.829565][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.836028][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.152411][T11510] ptp ptp0: only physical clock in use now [ 381.404422][T11535] FAULT_INJECTION: forcing a failure. [ 381.404422][T11535] name failslab, interval 1, probability 0, space 0, times 0 [ 381.495065][T11535] CPU: 0 UID: 0 PID: 11535 Comm: syz.1.1208 Tainted: G U L syzkaller #0 PREEMPT(full) [ 381.495095][T11535] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 381.495101][T11535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.495110][T11535] Call Trace: [ 381.495115][T11535] [ 381.495122][T11535] dump_stack_lvl+0x100/0x190 [ 381.495150][T11535] should_fail_ex.cold+0x5/0xa [ 381.495167][T11535] should_failslab+0xc2/0x120 [ 381.495190][T11535] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 381.495212][T11535] ? alloc_inode+0x183/0x250 [ 381.495228][T11535] ? stashed_dentry_get+0x10a/0x2c0 [ 381.495242][T11535] ? stashed_dentry_get+0x10a/0x2c0 [ 381.495259][T11535] alloc_inode+0x183/0x250 [ 381.495276][T11535] path_from_stashed+0x25b/0x750 [ 381.495293][T11535] pidfs_alloc_file+0xf8/0x290 [ 381.495314][T11535] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 381.495339][T11535] pidfd_prepare+0x123/0x200 [ 381.495357][T11535] __x64_sys_pidfd_open+0x105/0x1a0 [ 381.495376][T11535] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 381.495400][T11535] do_syscall_64+0x106/0xf80 [ 381.495415][T11535] ? clear_bhb_loop+0x40/0x90 [ 381.495433][T11535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.495448][T11535] RIP: 0033:0x7f11a279c629 [ 381.495461][T11535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.495476][T11535] RSP: 002b:00007f11a3710028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 381.495490][T11535] RAX: ffffffffffffffda RBX: 00007f11a2a15fa0 RCX: 00007f11a279c629 [ 381.495500][T11535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 381.495508][T11535] RBP: 00007f11a2832b39 R08: 0000000000000000 R09: 0000000000000000 [ 381.495516][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.495525][T11535] R13: 00007f11a2a16038 R14: 00007f11a2a15fa0 R15: 00007ffd0c83bce8 [ 381.495544][T11535] [ 384.120352][T11586] FAULT_INJECTION: forcing a failure. [ 384.120352][T11586] name failslab, interval 1, probability 0, space 0, times 0 [ 384.180629][T11586] CPU: 0 UID: 0 PID: 11586 Comm: syz.0.1219 Tainted: G U L syzkaller #0 PREEMPT(full) [ 384.180658][T11586] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 384.180663][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.180673][T11586] Call Trace: [ 384.180679][T11586] [ 384.180685][T11586] dump_stack_lvl+0x100/0x190 [ 384.180713][T11586] should_fail_ex.cold+0x5/0xa [ 384.180730][T11586] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 384.180747][T11586] should_failslab+0xc2/0x120 [ 384.180777][T11586] __kmalloc_noprof+0xe0/0x850 [ 384.180798][T11586] ? acpi_os_signal_semaphore+0x11e/0x1a0 [ 384.180848][T11586] acpi_ns_get_normalized_pathname+0x95/0x250 [ 384.180868][T11586] acpi_ns_evaluate+0x24d/0x1670 [ 384.180889][T11586] acpi_evaluate_object+0x420/0xe00 [ 384.180908][T11586] ? kasan_save_stack+0x30/0x50 [ 384.180929][T11586] ? kasan_save_track+0x14/0x30 [ 384.180952][T11586] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 384.180977][T11586] acpi_evaluate_integer+0xdf/0x220 [ 384.180994][T11586] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 384.181019][T11586] ? __pfx_status_show+0x10/0x10 [ 384.181037][T11586] status_show+0xa0/0x120 [ 384.181055][T11586] ? __pfx_status_show+0x10/0x10 [ 384.181079][T11586] dev_attr_show+0x52/0xa0 [ 384.181101][T11586] ? __pfx_dev_attr_show+0x10/0x10 [ 384.181121][T11586] sysfs_kf_seq_show+0x217/0x3a0 [ 384.181143][T11586] seq_read_iter+0x32f/0x1270 [ 384.181173][T11586] kernfs_fop_read_iter+0x46c/0x610 [ 384.181188][T11586] ? rw_verify_area+0xce/0x6d0 [ 384.181207][T11586] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 384.181222][T11586] vfs_read+0x825/0xb30 [ 384.181245][T11586] ? __pfx_vfs_read+0x10/0x10 [ 384.181278][T11586] ksys_read+0x12a/0x250 [ 384.181298][T11586] ? __pfx_ksys_read+0x10/0x10 [ 384.181324][T11586] do_syscall_64+0x106/0xf80 [ 384.181339][T11586] ? clear_bhb_loop+0x40/0x90 [ 384.181358][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.181373][T11586] RIP: 0033:0x7f596059c629 [ 384.181387][T11586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.181401][T11586] RSP: 002b:00007f596148c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 384.181415][T11586] RAX: ffffffffffffffda RBX: 00007f5960815fa0 RCX: 00007f596059c629 [ 384.181427][T11586] RDX: 000000000000007f RSI: 0000200000000240 RDI: 0000000000000005 [ 384.181436][T11586] RBP: 00007f5960632b39 R08: 0000000000000000 R09: 0000000000000000 [ 384.181445][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.181454][T11586] R13: 00007f5960816038 R14: 00007f5960815fa0 R15: 00007ffd8726f098 [ 384.181475][T11586] [ 384.181484][T11586] ACPI Error: [ 385.022361][T11594] ptp ptp0: only physical clock in use now [ 385.176843][T11586] Could not allocate 15 bytes (20251212/nsnames-308) [ 387.115113][T11635] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1231'. [ 387.174840][T11635] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1231'. [ 388.332438][T11658] FAULT_INJECTION: forcing a failure. [ 388.332438][T11658] name failslab, interval 1, probability 0, space 0, times 0 [ 388.408683][T11658] CPU: 0 UID: 0 PID: 11658 Comm: syz.1.1236 Tainted: G U L syzkaller #0 PREEMPT(full) [ 388.408714][T11658] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 388.408720][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.408730][T11658] Call Trace: [ 388.408735][T11658] [ 388.408741][T11658] dump_stack_lvl+0x100/0x190 [ 388.408769][T11658] should_fail_ex.cold+0x5/0xa [ 388.408788][T11658] should_failslab+0xc2/0x120 [ 388.408812][T11658] __kmalloc_cache_noprof+0x7a/0x6f0 [ 388.408830][T11658] ? acpi_ds_create_walk_state+0x95/0x300 [ 388.408856][T11658] acpi_ds_create_walk_state+0x95/0x300 [ 388.408880][T11658] acpi_ps_execute_method+0x2c1/0xe90 [ 388.408908][T11658] acpi_ns_evaluate+0x640/0x1670 [ 388.408928][T11658] acpi_evaluate_object+0x420/0xe00 [ 388.408946][T11658] ? kasan_save_stack+0x30/0x50 [ 388.408966][T11658] ? kasan_save_track+0x14/0x30 [ 388.408989][T11658] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 388.409014][T11658] acpi_evaluate_integer+0xdf/0x220 [ 388.409031][T11658] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 388.409056][T11658] ? __pfx_status_show+0x10/0x10 [ 388.409074][T11658] status_show+0xa0/0x120 [ 388.409093][T11658] ? __pfx_status_show+0x10/0x10 [ 388.409116][T11658] dev_attr_show+0x52/0xa0 [ 388.409138][T11658] ? __pfx_dev_attr_show+0x10/0x10 [ 388.409158][T11658] sysfs_kf_seq_show+0x217/0x3a0 [ 388.409179][T11658] seq_read_iter+0x32f/0x1270 [ 388.409229][T11658] kernfs_fop_read_iter+0x46c/0x610 [ 388.409245][T11658] ? rw_verify_area+0xce/0x6d0 [ 388.409264][T11658] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 388.409284][T11658] vfs_read+0x825/0xb30 [ 388.409315][T11658] ? __pfx_vfs_read+0x10/0x10 [ 388.409349][T11658] ksys_read+0x12a/0x250 [ 388.409371][T11658] ? __pfx_ksys_read+0x10/0x10 [ 388.409398][T11658] do_syscall_64+0x106/0xf80 [ 388.409414][T11658] ? clear_bhb_loop+0x40/0x90 [ 388.409433][T11658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.409448][T11658] RIP: 0033:0x7f11a279c629 [ 388.409462][T11658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.409477][T11658] RSP: 002b:00007f11a3710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.409492][T11658] RAX: ffffffffffffffda RBX: 00007f11a2a15fa0 RCX: 00007f11a279c629 [ 388.409502][T11658] RDX: 000000000000007f RSI: 0000200000000240 RDI: 0000000000000005 [ 388.409512][T11658] RBP: 00007f11a2832b39 R08: 0000000000000000 R09: 0000000000000000 [ 388.409521][T11658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.409530][T11658] R13: 00007f11a2a16038 R14: 00007f11a2a15fa0 R15: 00007ffd0c83bce8 [ 388.409550][T11658] [ 388.962988][T11672] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1239'. [ 390.300014][T11694] zswap: compressor not available [ 392.123251][T11726] input: f as /devices/virtual/input/input20 [ 392.571750][T11747] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1254'. [ 392.620504][T11731] ptp ptp0: only physical clock in use now [ 393.400548][T11763] FAULT_INJECTION: forcing a failure. [ 393.400548][T11763] name failslab, interval 1, probability 0, space 0, times 0 [ 393.438681][T11763] CPU: 0 UID: 0 PID: 11763 Comm: syz.2.1258 Tainted: G U L syzkaller #0 PREEMPT(full) [ 393.438709][T11763] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 393.438714][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.438723][T11763] Call Trace: [ 393.438729][T11763] [ 393.438734][T11763] dump_stack_lvl+0x100/0x190 [ 393.438760][T11763] should_fail_ex.cold+0x5/0xa [ 393.438776][T11763] ? tomoyo_realpath_from_path+0xb6/0x690 [ 393.438792][T11763] should_failslab+0xc2/0x120 [ 393.438815][T11763] __kmalloc_noprof+0xe0/0x850 [ 393.438839][T11763] tomoyo_realpath_from_path+0xb6/0x690 [ 393.438860][T11763] tomoyo_path_number_perm+0x23c/0x580 [ 393.438884][T11763] ? tomoyo_path_number_perm+0x22e/0x580 [ 393.438906][T11763] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 393.438946][T11763] ? find_held_lock+0x2b/0x80 [ 393.438968][T11763] ? __fget_files+0x215/0x3d0 [ 393.438988][T11763] ? hook_file_ioctl_common+0x146/0x410 [ 393.439014][T11763] ? __fget_files+0x21f/0x3d0 [ 393.439038][T11763] security_file_ioctl+0xd3/0x230 [ 393.439061][T11763] __x64_sys_ioctl+0xb7/0x210 [ 393.439082][T11763] do_syscall_64+0x106/0xf80 [ 393.439098][T11763] ? clear_bhb_loop+0x40/0x90 [ 393.439116][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.439131][T11763] RIP: 0033:0x7f12fcf9c629 [ 393.439144][T11763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.439158][T11763] RSP: 002b:00007f12fdd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.439173][T11763] RAX: ffffffffffffffda RBX: 00007f12fd215fa0 RCX: 00007f12fcf9c629 [ 393.439183][T11763] RDX: 0000000000000000 RSI: 0000000040189206 RDI: 0000000000000003 [ 393.439191][T11763] RBP: 00007f12fdd97090 R08: 0000000000000000 R09: 0000000000000000 [ 393.439200][T11763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.439208][T11763] R13: 00007f12fd216038 R14: 00007f12fd215fa0 R15: 00007ffc0566b378 [ 393.439227][T11763] [ 393.439234][T11763] ERROR: Out of memory at tomoyo_realpath_from_path. [ 394.717520][T11788] cgroup: fork rejected by pids controller in /syz0 [ 395.263928][T11779] Process accounting resumed [ 395.639885][T11980] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1266'. [ 396.473846][T11992] FAULT_INJECTION: forcing a failure. [ 396.473846][T11992] name failslab, interval 1, probability 0, space 0, times 0 [ 396.529263][T11992] CPU: 0 UID: 0 PID: 11992 Comm: syz.2.1271 Tainted: G U L syzkaller #0 PREEMPT(full) [ 396.529291][T11992] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 396.529296][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.529305][T11992] Call Trace: [ 396.529310][T11992] [ 396.529317][T11992] dump_stack_lvl+0x100/0x190 [ 396.529342][T11992] should_fail_ex.cold+0x5/0xa [ 396.529359][T11992] ? tomoyo_encode2+0xfb/0x3c0 [ 396.529373][T11992] should_failslab+0xc2/0x120 [ 396.529406][T11992] __kmalloc_noprof+0xe0/0x850 [ 396.529425][T11992] ? d_absolute_path+0x136/0x1b0 [ 396.529447][T11992] tomoyo_encode2+0xfb/0x3c0 [ 396.529464][T11992] tomoyo_encode+0x29/0x50 [ 396.529477][T11992] tomoyo_realpath_from_path+0x18c/0x690 [ 396.529496][T11992] tomoyo_path_number_perm+0x23c/0x580 [ 396.529517][T11992] ? tomoyo_path_number_perm+0x22e/0x580 [ 396.529539][T11992] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 396.529579][T11992] ? find_held_lock+0x2b/0x80 [ 396.529602][T11992] ? __fget_files+0x215/0x3d0 [ 396.529622][T11992] ? hook_file_ioctl_common+0x146/0x410 [ 396.529648][T11992] ? __fget_files+0x21f/0x3d0 [ 396.529672][T11992] security_file_ioctl+0xd3/0x230 [ 396.529695][T11992] __x64_sys_ioctl+0xb7/0x210 [ 396.529716][T11992] do_syscall_64+0x106/0xf80 [ 396.529731][T11992] ? clear_bhb_loop+0x40/0x90 [ 396.529750][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.529765][T11992] RIP: 0033:0x7f12fcf9c629 [ 396.529777][T11992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.529791][T11992] RSP: 002b:00007f12fdd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.529805][T11992] RAX: ffffffffffffffda RBX: 00007f12fd215fa0 RCX: 00007f12fcf9c629 [ 396.529814][T11992] RDX: 0000000000000000 RSI: 0000000040189206 RDI: 0000000000000003 [ 396.529823][T11992] RBP: 00007f12fdd97090 R08: 0000000000000000 R09: 0000000000000000 [ 396.529832][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.529840][T11992] R13: 00007f12fd216038 R14: 00007f12fd215fa0 R15: 00007ffc0566b378 [ 396.529859][T11992] [ 396.529872][T11992] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.216141][T12004] netlink: 266 bytes leftover after parsing attributes in process `syz.1.1273'. [ 397.237849][T12004] IPv6: NLM_F_CREATE should be specified when creating new route [ 397.852569][T12017] blktrace: Concurrent blktraces are not allowed on loop2 [ 398.639573][T12030] FAULT_INJECTION: forcing a failure. [ 398.639573][T12030] name fail_futex, interval 1, probability 0, space 0, times 0 [ 398.733015][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.2.1279 Tainted: G U L syzkaller #0 PREEMPT(full) [ 398.733045][T12030] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 398.733051][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.733060][T12030] Call Trace: [ 398.733065][T12030] [ 398.733071][T12030] dump_stack_lvl+0x100/0x190 [ 398.733098][T12030] should_fail_ex.cold+0x5/0xa [ 398.733116][T12030] get_futex_key+0x1d2/0x1620 [ 398.733135][T12030] ? __pfx_get_futex_key+0x10/0x10 [ 398.733154][T12030] ? shmem_file_read_iter+0x6b2/0xbc0 [ 398.733178][T12030] futex_wake+0xea/0x530 [ 398.733199][T12030] ? __pfx_shmem_file_read_iter+0x10/0x10 [ 398.733226][T12030] ? __pfx_futex_wake+0x10/0x10 [ 398.733246][T12030] ? rw_verify_area+0xce/0x6d0 [ 398.733265][T12030] ? ksys_read+0x190/0x250 [ 398.733284][T12030] ? ksys_read+0x190/0x250 [ 398.733307][T12030] do_futex+0x32b/0x350 [ 398.733331][T12030] ? __pfx_do_futex+0x10/0x10 [ 398.733355][T12030] __x64_sys_futex+0x34f/0x4d0 [ 398.733374][T12030] ? fput+0x79/0x100 [ 398.733388][T12030] ? __pfx___x64_sys_futex+0x10/0x10 [ 398.733409][T12030] ? ksys_read+0x1ac/0x250 [ 398.733428][T12030] ? __pfx_ksys_read+0x10/0x10 [ 398.733453][T12030] do_syscall_64+0x106/0xf80 [ 398.733469][T12030] ? clear_bhb_loop+0x40/0x90 [ 398.733489][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.733506][T12030] RIP: 0033:0x7f12fcf9c629 [ 398.733519][T12030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.733533][T12030] RSP: 002b:00007f12fdd970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 398.733547][T12030] RAX: ffffffffffffffda RBX: 00007f12fd215fa8 RCX: 00007f12fcf9c629 [ 398.733557][T12030] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f12fd215fac [ 398.733566][T12030] RBP: 00007f12fd215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 398.733575][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.733583][T12030] R13: 00007f12fd216038 R14: 00007ffc0566b290 R15: 00007ffc0566b378 [ 398.733603][T12030] [ 399.984047][T12052] FAULT_INJECTION: forcing a failure. [ 399.984047][T12052] name failslab, interval 1, probability 0, space 0, times 0 [ 400.038069][T12052] CPU: 0 UID: 0 PID: 12052 Comm: syz.1.1291 Tainted: G U L syzkaller #0 PREEMPT(full) [ 400.038096][T12052] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 400.038102][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.038111][T12052] Call Trace: [ 400.038116][T12052] [ 400.038122][T12052] dump_stack_lvl+0x100/0x190 [ 400.038148][T12052] should_fail_ex.cold+0x5/0xa [ 400.038165][T12052] ? tomoyo_realpath_from_path+0xb6/0x690 [ 400.038180][T12052] should_failslab+0xc2/0x120 [ 400.038204][T12052] __kmalloc_noprof+0xe0/0x850 [ 400.038228][T12052] tomoyo_realpath_from_path+0xb6/0x690 [ 400.038247][T12052] tomoyo_path_number_perm+0x23c/0x580 [ 400.038268][T12052] ? tomoyo_path_number_perm+0x22e/0x580 [ 400.038290][T12052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 400.038330][T12052] ? find_held_lock+0x2b/0x80 [ 400.038352][T12052] ? __fget_files+0x215/0x3d0 [ 400.038373][T12052] ? hook_file_ioctl_common+0x146/0x410 [ 400.038398][T12052] ? __fget_files+0x21f/0x3d0 [ 400.038422][T12052] security_file_ioctl+0xd3/0x230 [ 400.038445][T12052] __x64_sys_ioctl+0xb7/0x210 [ 400.038466][T12052] do_syscall_64+0x106/0xf80 [ 400.038481][T12052] ? clear_bhb_loop+0x40/0x90 [ 400.038500][T12052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.038515][T12052] RIP: 0033:0x7f11a279c629 [ 400.038528][T12052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.038542][T12052] RSP: 002b:00007f11a3710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.038557][T12052] RAX: ffffffffffffffda RBX: 00007f11a2a15fa0 RCX: 00007f11a279c629 [ 400.038567][T12052] RDX: 0000000000000000 RSI: 000000004048aecb RDI: 0000000000000004 [ 400.038575][T12052] RBP: 00007f11a3710090 R08: 0000000000000000 R09: 0000000000000000 [ 400.038584][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.038592][T12052] R13: 00007f11a2a16038 R14: 00007f11a2a15fa0 R15: 00007ffd0c83bce8 [ 400.038611][T12052] [ 400.038617][T12052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 402.030080][T12084] FAULT_INJECTION: forcing a failure. [ 402.030080][T12084] name fail_futex, interval 1, probability 0, space 0, times 0 [ 402.085300][T12084] CPU: 0 UID: 0 PID: 12084 Comm: syz.1.1290 Tainted: G U L syzkaller #0 PREEMPT(full) [ 402.085331][T12084] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 402.085337][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.085346][T12084] Call Trace: [ 402.085351][T12084] [ 402.085357][T12084] dump_stack_lvl+0x100/0x190 [ 402.085393][T12084] should_fail_ex.cold+0x5/0xa [ 402.085411][T12084] get_futex_key+0x1d2/0x1620 [ 402.085438][T12084] ? __pfx_get_futex_key+0x10/0x10 [ 402.085458][T12084] ? shmem_file_read_iter+0x6b2/0xbc0 [ 402.085483][T12084] futex_wake+0xea/0x530 [ 402.085504][T12084] ? __pfx_shmem_file_read_iter+0x10/0x10 [ 402.085526][T12084] ? __pfx_futex_wake+0x10/0x10 [ 402.085547][T12084] ? rw_verify_area+0xce/0x6d0 [ 402.085567][T12084] ? ksys_read+0x190/0x250 [ 402.085586][T12084] ? ksys_read+0x190/0x250 [ 402.085609][T12084] do_futex+0x32b/0x350 [ 402.085627][T12084] ? __pfx_do_futex+0x10/0x10 [ 402.085649][T12084] __x64_sys_futex+0x34f/0x4d0 [ 402.085668][T12084] ? fput+0x79/0x100 [ 402.085682][T12084] ? __pfx___x64_sys_futex+0x10/0x10 [ 402.085700][T12084] ? ksys_read+0x1ac/0x250 [ 402.085719][T12084] ? __pfx_ksys_read+0x10/0x10 [ 402.085744][T12084] do_syscall_64+0x106/0xf80 [ 402.085760][T12084] ? clear_bhb_loop+0x40/0x90 [ 402.085778][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.085792][T12084] RIP: 0033:0x7f11a279c629 [ 402.085806][T12084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.085821][T12084] RSP: 002b:00007f11a37100e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 402.085835][T12084] RAX: ffffffffffffffda RBX: 00007f11a2a15fa8 RCX: 00007f11a279c629 [ 402.085845][T12084] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f11a2a15fac [ 402.085854][T12084] RBP: 00007f11a2a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 402.085863][T12084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.085871][T12084] R13: 00007f11a2a16038 R14: 00007ffd0c83bc00 R15: 00007ffd0c83bce8 [ 402.085890][T12084] [ 402.408707][T12081] FAULT_INJECTION: forcing a failure. [ 402.408707][T12081] name failslab, interval 1, probability 0, space 0, times 0 [ 402.421425][T12081] CPU: 0 UID: 0 PID: 12081 Comm: syz.0.1289 Tainted: G U L syzkaller #0 PREEMPT(full) [ 402.421451][T12081] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 402.421456][T12081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.421465][T12081] Call Trace: [ 402.421471][T12081] [ 402.421477][T12081] dump_stack_lvl+0x100/0x190 [ 402.421503][T12081] should_fail_ex.cold+0x5/0xa [ 402.421519][T12081] ? iovec_from_user+0x108/0x140 [ 402.421541][T12081] should_failslab+0xc2/0x120 [ 402.421564][T12081] __kmalloc_noprof+0xe0/0x850 [ 402.421588][T12081] iovec_from_user+0x108/0x140 [ 402.421612][T12081] process_vm_rw+0x1e5/0x2d0 [ 402.421635][T12081] ? __pfx_process_vm_rw+0x10/0x10 [ 402.421660][T12081] ? ksys_write+0x190/0x250 [ 402.421697][T12081] ? ksys_write+0x1ac/0x250 [ 402.421717][T12081] ? __pfx_ksys_write+0x10/0x10 [ 402.421740][T12081] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 402.421761][T12081] ? do_syscall_64+0x95/0xf80 [ 402.421777][T12081] ? lockdep_hardirqs_on+0x78/0x100 [ 402.421793][T12081] do_syscall_64+0x106/0xf80 [ 402.421807][T12081] ? clear_bhb_loop+0x40/0x90 [ 402.421825][T12081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.421840][T12081] RIP: 0033:0x7f596059c629 [ 402.421854][T12081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.421868][T12081] RSP: 002b:00007f596148c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 402.421882][T12081] RAX: ffffffffffffffda RBX: 00007f5960815fa0 RCX: 00007f596059c629 [ 402.421891][T12081] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 000000000000055c [ 402.421900][T12081] RBP: 00007f596148c090 R08: 000000000000000a R09: 0000000000000000 [ 402.421909][T12081] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 402.421918][T12081] R13: 00007f5960816038 R14: 00007f5960815fa0 R15: 00007ffd8726f098 [ 402.421936][T12081] [ 403.460789][T12104] FAULT_INJECTION: forcing a failure. [ 403.460789][T12104] name failslab, interval 1, probability 0, space 0, times 0 [ 403.553395][T12104] CPU: 0 UID: 0 PID: 12104 Comm: syz.4.1296 Tainted: G U L syzkaller #0 PREEMPT(full) [ 403.553428][T12104] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 403.553433][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.553442][T12104] Call Trace: [ 403.553447][T12104] [ 403.553453][T12104] dump_stack_lvl+0x100/0x190 [ 403.553479][T12104] should_fail_ex.cold+0x5/0xa [ 403.553496][T12104] ? tomoyo_encode2+0xfb/0x3c0 [ 403.553509][T12104] should_failslab+0xc2/0x120 [ 403.553532][T12104] __kmalloc_noprof+0xe0/0x850 [ 403.553556][T12104] tomoyo_encode2+0xfb/0x3c0 [ 403.553573][T12104] tomoyo_encode+0x29/0x50 [ 403.553593][T12104] tomoyo_realpath_from_path+0x18c/0x690 [ 403.553613][T12104] tomoyo_path_number_perm+0x23c/0x580 [ 403.553634][T12104] ? tomoyo_path_number_perm+0x22e/0x580 [ 403.553656][T12104] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 403.553696][T12104] ? find_held_lock+0x2b/0x80 [ 403.553718][T12104] ? __fget_files+0x215/0x3d0 [ 403.553738][T12104] ? hook_file_ioctl_common+0x146/0x410 [ 403.553764][T12104] ? __fget_files+0x21f/0x3d0 [ 403.553788][T12104] security_file_ioctl+0xd3/0x230 [ 403.553811][T12104] __x64_sys_ioctl+0xb7/0x210 [ 403.553832][T12104] do_syscall_64+0x106/0xf80 [ 403.553847][T12104] ? clear_bhb_loop+0x40/0x90 [ 403.553865][T12104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.553880][T12104] RIP: 0033:0x7f0832b9c629 [ 403.553893][T12104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.553907][T12104] RSP: 002b:00007f0833a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.553921][T12104] RAX: ffffffffffffffda RBX: 00007f0832e15fa0 RCX: 00007f0832b9c629 [ 403.553931][T12104] RDX: 0000000000000000 RSI: 000000004048aecb RDI: 0000000000000004 [ 403.553939][T12104] RBP: 00007f0833a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 403.553947][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.553955][T12104] R13: 00007f0832e16038 R14: 00007f0832e15fa0 R15: 00007ffe56f85278 [ 403.553975][T12104] [ 404.593622][T12104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 405.090952][T12135] FAULT_INJECTION: forcing a failure. [ 405.090952][T12135] name failslab, interval 1, probability 0, space 0, times 0 [ 405.145212][T12135] CPU: 0 UID: 0 PID: 12135 Comm: syz.0.1303 Tainted: G U L syzkaller #0 PREEMPT(full) [ 405.145239][T12135] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 405.145245][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.145254][T12135] Call Trace: [ 405.145260][T12135] [ 405.145266][T12135] dump_stack_lvl+0x100/0x190 [ 405.145292][T12135] should_fail_ex.cold+0x5/0xa [ 405.145308][T12135] should_failslab+0xc2/0x120 [ 405.145333][T12135] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 405.145352][T12135] ? taskstats_exit+0x650/0xbd0 [ 405.145378][T12135] taskstats_exit+0x650/0xbd0 [ 405.145399][T12135] ? __pfx_acct_update_integrals+0x10/0x10 [ 405.145429][T12135] ? __pfx_taskstats_exit+0x10/0x10 [ 405.145452][T12135] ? rcu_read_lock_any_held+0x6a/0xa0 [ 405.145475][T12135] ? exit_signals+0x395/0xaf0 [ 405.145491][T12135] do_exit+0x5ca/0x2aa0 [ 405.145512][T12135] ? __pfx_do_exit+0x10/0x10 [ 405.145529][T12135] ? do_raw_spin_lock+0x128/0x260 [ 405.145550][T12135] ? find_held_lock+0x2b/0x80 [ 405.145571][T12135] ? get_signal+0x7e0/0x21e0 [ 405.145587][T12135] do_group_exit+0xd5/0x2a0 [ 405.145606][T12135] get_signal+0x1ec7/0x21e0 [ 405.145625][T12135] ? ksys_read+0x190/0x250 [ 405.145646][T12135] ? __pfx_get_signal+0x10/0x10 [ 405.145661][T12135] ? do_futex+0x192/0x350 [ 405.145681][T12135] arch_do_signal_or_restart+0x91/0x770 [ 405.145699][T12135] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 405.145722][T12135] ? __pfx___x64_sys_futex+0x10/0x10 [ 405.145738][T12135] ? ksys_read+0x1ac/0x250 [ 405.145762][T12135] exit_to_user_mode_loop+0x86/0x4a0 [ 405.145785][T12135] do_syscall_64+0x668/0xf80 [ 405.145800][T12135] ? clear_bhb_loop+0x40/0x90 [ 405.145818][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.145833][T12135] RIP: 0033:0x7f596059c629 [ 405.145847][T12135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.145861][T12135] RSP: 002b:00007f596148c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 405.145875][T12135] RAX: fffffffffffffe00 RBX: 00007f5960815fa8 RCX: 00007f596059c629 [ 405.145885][T12135] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5960815fa8 [ 405.145893][T12135] RBP: 00007f5960815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 405.145902][T12135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.145910][T12135] R13: 00007f5960816038 R14: 00007ffd8726efb0 R15: 00007ffd8726f098 [ 405.145929][T12135] [ 407.096466][T12172] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 413.218740][T12261] zswap: compressor not available [ 413.322028][T12274] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1329'. [ 416.348353][T12323] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 417.090674][T12342] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1342'. [ 417.990820][T12355] sd 0:0:1:0: PR command failed: 1026 [ 418.006453][T12355] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 418.065525][T12355] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 421.294475][T12419] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1359'. [ 422.553264][T12442] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1364'. [ 425.721395][T12497] FAULT_INJECTION: forcing a failure. [ 425.721395][T12497] name failslab, interval 1, probability 0, space 0, times 0 [ 425.774987][T12497] CPU: 0 UID: 0 PID: 12497 Comm: syz.0.1377 Tainted: G U L syzkaller #0 PREEMPT(full) [ 425.775015][T12497] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 425.775020][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.775029][T12497] Call Trace: [ 425.775035][T12497] [ 425.775041][T12497] dump_stack_lvl+0x100/0x190 [ 425.775067][T12497] should_fail_ex.cold+0x5/0xa [ 425.775084][T12497] should_failslab+0xc2/0x120 [ 425.775108][T12497] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 425.775128][T12497] ? vm_area_alloc+0x1f/0x160 [ 425.775144][T12497] ? vma_merge_new_range+0x38b/0xa30 [ 425.775162][T12497] ? __sanitizer_cov_trace_const_cmp8+0x20/0x20 [ 425.775189][T12497] vm_area_alloc+0x1f/0x160 [ 425.775206][T12497] __mmap_region+0x10cc/0x29e0 [ 425.775228][T12497] ? __pfx___mmap_region+0x10/0x10 [ 425.775278][T12497] ? lockdep_hardirqs_on+0x78/0x100 [ 425.775294][T12497] ? finish_task_switch.isra.0+0x205/0xb80 [ 425.775310][T12497] ? rcu_is_watching+0x12/0xc0 [ 425.775354][T12497] ? rcu_is_watching+0x12/0xc0 [ 425.775374][T12497] ? cap_capable+0x107/0x460 [ 425.775397][T12497] mmap_region+0x180/0x3e0 [ 425.775420][T12497] do_mmap+0xc63/0x12f0 [ 425.775438][T12497] ? __pfx_do_mmap+0x10/0x10 [ 425.775452][T12497] ? __pfx_down_write_killable+0x10/0x10 [ 425.775474][T12497] vm_mmap_pgoff+0x29e/0x470 [ 425.775493][T12497] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 425.775509][T12497] ? do_futex+0x192/0x350 [ 425.775527][T12497] ? __pfx_do_futex+0x10/0x10 [ 425.775544][T12497] ? snd_pcm_oss_ioctl+0x2b6/0x3720 [ 425.775569][T12497] ksys_mmap_pgoff+0xe1/0x650 [ 425.775592][T12497] ? __x64_sys_futex+0x34f/0x4d0 [ 425.775609][T12497] ? __x64_sys_futex+0x358/0x4d0 [ 425.775627][T12497] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 425.775650][T12497] ? xfd_validate_state+0x129/0x190 [ 425.775674][T12497] __x64_sys_mmap+0x125/0x190 [ 425.775697][T12497] do_syscall_64+0x106/0xf80 [ 425.775712][T12497] ? clear_bhb_loop+0x40/0x90 [ 425.775735][T12497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.775751][T12497] RIP: 0033:0x7f596059c629 [ 425.775764][T12497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.775778][T12497] RSP: 002b:00007f596148c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 425.775792][T12497] RAX: ffffffffffffffda RBX: 00007f5960815fa0 RCX: 00007f596059c629 [ 425.775802][T12497] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 425.775810][T12497] RBP: 00007f5960632b39 R08: 0000000000000401 R09: 0000000000008000 [ 425.775819][T12497] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 425.775828][T12497] R13: 00007f5960816038 R14: 00007f5960815fa0 R15: 00007ffd8726f098 [ 425.775847][T12497] [ 426.138986][T12484] Process accounting paused [ 428.069842][T12537] FAULT_INJECTION: forcing a failure. [ 428.069842][T12537] name failslab, interval 1, probability 0, space 0, times 0 [ 428.120891][T12537] CPU: 0 UID: 0 PID: 12537 Comm: syz.4.1386 Tainted: G U L syzkaller #0 PREEMPT(full) [ 428.120927][T12537] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 428.120933][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.120942][T12537] Call Trace: [ 428.120947][T12537] [ 428.120954][T12537] dump_stack_lvl+0x100/0x190 [ 428.120980][T12537] should_fail_ex.cold+0x5/0xa [ 428.120998][T12537] should_failslab+0xc2/0x120 [ 428.121021][T12537] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 428.121042][T12537] ? vm_area_dup+0x27/0x8e0 [ 428.121058][T12537] ? __pfx___up_read+0x10/0x10 [ 428.121078][T12537] ? validate_mm+0x261/0x4e0 [ 428.121098][T12537] vm_area_dup+0x27/0x8e0 [ 428.121117][T12537] __split_vma+0x18c/0xd90 [ 428.121137][T12537] ? __pfx___split_vma+0x10/0x10 [ 428.121159][T12537] ? vms_complete_munmap_vmas+0xaac/0xdd0 [ 428.121177][T12537] ? percpu_counter_add_batch+0xb9/0x230 [ 428.121199][T12537] ? __mt_destroy+0xa6/0x390 [ 428.121217][T12537] vms_gather_munmap_vmas+0x1c6/0x1500 [ 428.121241][T12537] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 428.121265][T12537] ? __pfx_validate_mm+0x10/0x10 [ 428.121287][T12537] do_vmi_align_munmap+0x287/0x5f0 [ 428.121310][T12537] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 428.121357][T12537] do_vmi_munmap+0x1f8/0x3e0 [ 428.121379][T12537] __vm_munmap+0x196/0x390 [ 428.121400][T12537] ? __pfx___vm_munmap+0x10/0x10 [ 428.121432][T12537] __x64_sys_munmap+0x59/0x80 [ 428.121447][T12537] do_syscall_64+0x106/0xf80 [ 428.121462][T12537] ? clear_bhb_loop+0x40/0x90 [ 428.121486][T12537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.121501][T12537] RIP: 0033:0x7f0832b9c457 [ 428.121515][T12537] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.121530][T12537] RSP: 002b:00007f0833a38d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 428.121544][T12537] RAX: ffffffffffffffda RBX: 00007f082c000000 RCX: 00007f0832b9c457 [ 428.121554][T12537] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00007f0830000000 [ 428.121563][T12537] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 428.121572][T12537] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 428.121581][T12537] R13: 0000000000001000 R14: 00007f0830000000 R15: 0000000003400000 [ 428.121601][T12537] [ 429.641488][T12567] zswap: compressor not available [ 429.683856][T12569] zswap: compressor not available [ 433.597921][T12671] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1412'. [ 434.332447][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1419'. [ 434.382538][T12689] openvswitch: netlink: Flow key attr not present in new flow. [ 436.969989][T12746] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 436.969989][T12746] [ 437.429900][T12758] FAULT_INJECTION: forcing a failure. [ 437.429900][T12758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.529006][T12758] CPU: 0 UID: 0 PID: 12758 Comm: syz.0.1435 Tainted: G U L syzkaller #0 PREEMPT(full) [ 437.529034][T12758] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 437.529040][T12758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.529049][T12758] Call Trace: [ 437.529054][T12758] [ 437.529060][T12758] dump_stack_lvl+0x100/0x190 [ 437.529086][T12758] should_fail_ex.cold+0x5/0xa [ 437.529103][T12758] _copy_from_user+0x2e/0xd0 [ 437.529126][T12758] copy_msghdr_from_user+0x9f/0x4f0 [ 437.529148][T12758] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 437.529172][T12758] ? __pfx__kstrtoull+0x10/0x10 [ 437.529192][T12758] ___sys_sendmsg+0x106/0x1e0 [ 437.529213][T12758] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.529241][T12758] ? find_held_lock+0x2b/0x80 [ 437.529276][T12758] __sys_sendmmsg+0x205/0x430 [ 437.529294][T12758] ? __pfx___sys_sendmmsg+0x10/0x10 [ 437.529315][T12758] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 437.529340][T12758] ? fput+0x79/0x100 [ 437.529355][T12758] ? ksys_write+0x1ac/0x250 [ 437.529375][T12758] ? __pfx_ksys_write+0x10/0x10 [ 437.529399][T12758] __x64_sys_sendmmsg+0x9c/0x100 [ 437.529414][T12758] ? lockdep_hardirqs_on+0x78/0x100 [ 437.529429][T12758] do_syscall_64+0x106/0xf80 [ 437.529444][T12758] ? clear_bhb_loop+0x40/0x90 [ 437.529467][T12758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.529489][T12758] RIP: 0033:0x7f596059c629 [ 437.529501][T12758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.529515][T12758] RSP: 002b:00007f596144a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 437.529530][T12758] RAX: ffffffffffffffda RBX: 00007f5960816180 RCX: 00007f596059c629 [ 437.529539][T12758] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 437.529548][T12758] RBP: 00007f596144a090 R08: 0000000000000000 R09: 0000000000000000 [ 437.529556][T12758] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.529565][T12758] R13: 00007f5960816218 R14: 00007f5960816180 R15: 00007ffd8726f098 [ 437.529583][T12758] [ 439.952927][T12781] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1441'. [ 440.216062][T12783] openvswitch: netlink: Missing valid actions attribute. [ 440.296052][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.302912][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.198188][T12826] Invalid ELF header magic: != ELF [ 442.695062][T12845] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 442.736762][T12847] FAULT_INJECTION: forcing a failure. [ 442.736762][T12847] name failslab, interval 1, probability 0, space 0, times 0 [ 442.766218][T12847] CPU: 0 UID: 0 PID: 12847 Comm: syz.1.1456 Tainted: G U L syzkaller #0 PREEMPT(full) [ 442.766247][T12847] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 442.766253][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.766262][T12847] Call Trace: [ 442.766267][T12847] [ 442.766273][T12847] dump_stack_lvl+0x100/0x190 [ 442.766300][T12847] should_fail_ex.cold+0x5/0xa [ 442.766318][T12847] should_failslab+0xc2/0x120 [ 442.766342][T12847] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 442.766366][T12847] ? __alloc_skb+0x140/0x710 [ 442.766384][T12847] __alloc_skb+0x140/0x710 [ 442.766396][T12847] ? __alloc_skb+0x5b7/0x710 [ 442.766410][T12847] ? __pfx___alloc_skb+0x10/0x10 [ 442.766424][T12847] ? idr_get_next+0xec/0x150 [ 442.766440][T12847] ? __pfx_idr_get_next+0x10/0x10 [ 442.766457][T12847] ctrl_build_family_msg+0x36/0xa0 [ 442.766480][T12847] ctrl_getfamily+0x361/0x550 [ 442.766500][T12847] ? __pfx_ctrl_getfamily+0x10/0x10 [ 442.766521][T12847] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 442.766542][T12847] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 442.766566][T12847] genl_family_rcv_msg_doit+0x214/0x300 [ 442.766588][T12847] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 442.766607][T12847] ? genl_get_cmd+0x3ef/0x720 [ 442.766630][T12847] ? __dev_queue_xmit+0x7fd/0x4750 [ 442.766651][T12847] ? __radix_tree_lookup+0x217/0x2b0 [ 442.766676][T12847] genl_rcv_msg+0x560/0x800 [ 442.766698][T12847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.766717][T12847] ? __pfx_ctrl_getfamily+0x10/0x10 [ 442.766744][T12847] netlink_rcv_skb+0x159/0x420 [ 442.766761][T12847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.766790][T12847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.766817][T12847] ? netlink_deliver_tap+0x1ae/0xcc0 [ 442.766836][T12847] genl_rcv+0x28/0x40 [ 442.766853][T12847] netlink_unicast+0x5aa/0x870 [ 442.766874][T12847] ? __pfx_netlink_unicast+0x10/0x10 [ 442.766904][T12847] netlink_sendmsg+0x8b0/0xda0 [ 442.766924][T12847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.766944][T12847] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 442.766971][T12847] __sys_sendto+0x4aa/0x520 [ 442.766986][T12847] ? __pfx___sys_sendto+0x10/0x10 [ 442.767006][T12847] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 442.767029][T12847] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 442.767064][T12847] __x64_sys_sendto+0xe0/0x1c0 [ 442.767078][T12847] ? do_syscall_64+0x95/0xf80 [ 442.767093][T12847] ? lockdep_hardirqs_on+0x78/0x100 [ 442.767108][T12847] do_syscall_64+0x106/0xf80 [ 442.767123][T12847] ? clear_bhb_loop+0x40/0x90 [ 442.767141][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.767156][T12847] RIP: 0033:0x7f11a275cece [ 442.767170][T12847] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 442.767185][T12847] RSP: 002b:00007f11a370ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 442.767203][T12847] RAX: ffffffffffffffda RBX: 00007f11a37106c0 RCX: 00007f11a275cece [ 442.767213][T12847] RDX: 0000000000000020 RSI: 00007f11a370f000 RDI: 0000000000000007 [ 442.767221][T12847] RBP: 0000000000000000 R08: 00007f11a370ef04 R09: 000000000000000c [ 442.767230][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 442.767238][T12847] R13: 00007f11a370ef58 R14: 00007f11a370f000 R15: 0000000000000000 [ 442.767258][T12847] [ 446.169721][T12924] openvswitch: netlink: Missing valid actions attribute. [ 447.778444][T12965] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1483'. [ 447.866301][T12969] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1484'. [ 449.131636][T12990] Console: switching to colour frame buffer device 128x48 [ 452.726637][T13065] QAT: Stopping all acceleration devices. [ 454.359935][T13110] futex_wake_op: syz.0.1519 tries to shift op by -2048; fix this program [ 454.424437][T13110] futex_wake_op: syz.0.1519 tries to shift op by -2048; fix this program [ 454.484725][T13116] futex_wake_op: syz.0.1519 tries to shift op by -2048; fix this program [ 455.133215][T13126] zswap: compressor not available [ 455.268150][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1521'. [ 455.395870][T13123] bond0: (slave bond_slave_1): Releasing backup interface [ 455.463498][T13134] zswap: compressor not available [ 456.329366][T13164] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1527'. [ 456.947220][T13153] Process accounting resumed [ 458.052103][T13196] FAULT_INJECTION: forcing a failure. [ 458.052103][T13196] name failslab, interval 1, probability 0, space 0, times 0 [ 458.127406][T13196] CPU: 0 UID: 0 PID: 13196 Comm: syz.0.1534 Tainted: G U L syzkaller #0 PREEMPT(full) [ 458.127443][T13196] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 458.127449][T13196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.127458][T13196] Call Trace: [ 458.127468][T13196] [ 458.127474][T13196] dump_stack_lvl+0x100/0x190 [ 458.127512][T13196] should_fail_ex.cold+0x5/0xa [ 458.127530][T13196] ? tomoyo_encode2+0xfb/0x3c0 [ 458.127545][T13196] should_failslab+0xc2/0x120 [ 458.127569][T13196] __kmalloc_noprof+0xe0/0x850 [ 458.127590][T13196] ? rcu_is_watching+0x12/0xc0 [ 458.127615][T13196] tomoyo_encode2+0xfb/0x3c0 [ 458.127632][T13196] tomoyo_encode+0x29/0x50 [ 458.127645][T13196] tomoyo_realpath_from_path+0x18c/0x690 [ 458.127664][T13196] tomoyo_check_open_permission+0x2af/0x3c0 [ 458.127688][T13196] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 458.127709][T13196] ? ima_calc_file_hash+0x2ad/0x480 [ 458.127728][T13196] ? ima_file_check+0xcc/0x120 [ 458.127744][T13196] ? security_file_post_open+0xc4/0x210 [ 458.127781][T13196] ? lock_acquire+0x1cf/0x380 [ 458.127802][T13196] ? find_held_lock+0x2b/0x80 [ 458.127835][T13196] tomoyo_file_open+0x6b/0x90 [ 458.127853][T13196] security_file_open+0xb5/0x1e0 [ 458.127867][T13196] do_dentry_open+0x5aa/0x1660 [ 458.127896][T13196] vfs_open+0x82/0x3f0 [ 458.127914][T13196] dentry_open+0x71/0xd0 [ 458.127930][T13196] ima_calc_file_hash+0x2ad/0x480 [ 458.127951][T13196] ima_collect_measurement+0x887/0xa40 [ 458.127977][T13196] ? __pfx_ima_collect_measurement+0x10/0x10 [ 458.127997][T13196] ? lock_acquire+0x1cf/0x380 [ 458.128024][T13196] ? process_measurement+0x5ab/0x2350 [ 458.128041][T13196] ? is_bad_inode+0xd/0x40 [ 458.128060][T13196] ? xattr_resolve_name+0x27d/0x3f0 [ 458.128084][T13196] ? vfs_getxattr_alloc+0xec/0x350 [ 458.128109][T13196] ? ima_get_hash_algo+0x22d/0x400 [ 458.128125][T13196] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 458.128145][T13196] ? process_measurement+0xdfe/0x2350 [ 458.128162][T13196] process_measurement+0xdfe/0x2350 [ 458.128186][T13196] ? __pfx_process_measurement+0x10/0x10 [ 458.128229][T13196] ? mutex_init_lockep+0x110/0x150 [ 458.128248][T13196] ? seq_open+0x116/0x170 [ 458.128265][T13196] ? inode_to_bdi+0x9e/0x160 [ 458.128288][T13196] ima_file_check+0xcc/0x120 [ 458.128306][T13196] ? __pfx_ima_file_check+0x10/0x10 [ 458.128329][T13196] security_file_post_open+0xc4/0x210 [ 458.128351][T13196] path_openat+0x1418/0x31a0 [ 458.128380][T13196] ? __pfx_path_openat+0x10/0x10 [ 458.128409][T13196] do_file_open+0x20e/0x430 [ 458.128432][T13196] ? __pfx_do_file_open+0x10/0x10 [ 458.128476][T13196] ? alloc_fd+0x476/0x790 [ 458.128500][T13196] ? do_getname+0x191/0x390 [ 458.128518][T13196] do_sys_openat2+0x10d/0x1e0 [ 458.128536][T13196] ? __pfx_do_sys_openat2+0x10/0x10 [ 458.128560][T13196] __x64_sys_openat+0x12d/0x210 [ 458.128578][T13196] ? __pfx___x64_sys_openat+0x10/0x10 [ 458.128602][T13196] do_syscall_64+0x106/0xf80 [ 458.128618][T13196] ? clear_bhb_loop+0x40/0x90 [ 458.128636][T13196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.128652][T13196] RIP: 0033:0x7f596059c629 [ 458.128666][T13196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.128681][T13196] RSP: 002b:00007f596148c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 458.128696][T13196] RAX: ffffffffffffffda RBX: 00007f5960815fa0 RCX: 00007f596059c629 [ 458.128706][T13196] RDX: 0000000000020803 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 458.128716][T13196] RBP: 00007f5960632b39 R08: 0000000000000000 R09: 0000000000000000 [ 458.128725][T13196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.128735][T13196] R13: 00007f5960816038 R14: 00007f5960815fa0 R15: 00007ffd8726f098 [ 458.128754][T13196] [ 458.128777][T13196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 460.019433][T13236] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1543'. [ 460.844095][T13249] overlayfs: "check_copy_up" module option is obsolete [ 461.226991][T13256] zswap: compressor not available [ 461.405399][T13238] kexec: Could not allocate control_code_buffer [ 461.755154][T13274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1552'. [ 461.769557][T13276] FAULT_INJECTION: forcing a failure. [ 461.769557][T13276] name failslab, interval 1, probability 0, space 0, times 0 [ 461.908748][T13276] CPU: 0 UID: 0 PID: 13276 Comm: syz.2.1553 Tainted: G U L syzkaller #0 PREEMPT(full) [ 461.908776][T13276] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 461.908782][T13276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.908791][T13276] Call Trace: [ 461.908796][T13276] [ 461.908802][T13276] dump_stack_lvl+0x100/0x190 [ 461.908828][T13276] should_fail_ex.cold+0x5/0xa [ 461.908845][T13276] ? tomoyo_encode2+0xfb/0x3c0 [ 461.908858][T13276] should_failslab+0xc2/0x120 [ 461.908887][T13276] __kmalloc_noprof+0xe0/0x850 [ 461.908906][T13276] ? d_absolute_path+0x136/0x1b0 [ 461.908927][T13276] tomoyo_encode2+0xfb/0x3c0 [ 461.908944][T13276] tomoyo_encode+0x29/0x50 [ 461.908957][T13276] tomoyo_realpath_from_path+0x18c/0x690 [ 461.908976][T13276] tomoyo_check_open_permission+0x2af/0x3c0 [ 461.908999][T13276] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 461.909045][T13276] ? do_raw_spin_lock+0x128/0x260 [ 461.909068][T13276] ? path_get+0x61/0x80 [ 461.909084][T13276] tomoyo_file_open+0x6b/0x90 [ 461.909102][T13276] security_file_open+0xb5/0x1e0 [ 461.909116][T13276] do_dentry_open+0x5aa/0x1660 [ 461.909139][T13276] ? security_inode_permission+0xbf/0x250 [ 461.909164][T13276] vfs_open+0x82/0x3f0 [ 461.909183][T13276] path_openat+0x208c/0x31a0 [ 461.909211][T13276] ? __pfx_path_openat+0x10/0x10 [ 461.909241][T13276] do_file_open+0x20e/0x430 [ 461.909264][T13276] ? __pfx_do_file_open+0x10/0x10 [ 461.909301][T13276] ? alloc_fd+0x476/0x790 [ 461.909324][T13276] ? do_getname+0x191/0x390 [ 461.909342][T13276] do_sys_openat2+0x10d/0x1e0 [ 461.909359][T13276] ? __pfx_do_sys_openat2+0x10/0x10 [ 461.909383][T13276] __x64_sys_openat+0x12d/0x210 [ 461.909400][T13276] ? __pfx___x64_sys_openat+0x10/0x10 [ 461.909425][T13276] do_syscall_64+0x106/0xf80 [ 461.909440][T13276] ? clear_bhb_loop+0x40/0x90 [ 461.909458][T13276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.909473][T13276] RIP: 0033:0x7f12fcf9c629 [ 461.909485][T13276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.909500][T13276] RSP: 002b:00007f12fdd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 461.909514][T13276] RAX: ffffffffffffffda RBX: 00007f12fd215fa0 RCX: 00007f12fcf9c629 [ 461.909524][T13276] RDX: 0000000000000202 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 461.909533][T13276] RBP: 00007f12fd032b39 R08: 0000000000000000 R09: 0000000000000000 [ 461.909541][T13276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.909550][T13276] R13: 00007f12fd216038 R14: 00007f12fd215fa0 R15: 00007ffc0566b378 [ 461.909569][T13276] [ 461.909605][T13276] ERROR: Out of memory at tomoyo_realpath_from_path. [ 463.845916][T13314] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 463.852099][T13314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 463.865022][T13314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 463.891924][T13314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 464.613452][T13335] FAULT_INJECTION: forcing a failure. [ 464.613452][T13335] name failslab, interval 1, probability 0, space 0, times 0 [ 464.712865][T13335] CPU: 0 UID: 0 PID: 13335 Comm: syz.2.1565 Tainted: G U L syzkaller #0 PREEMPT(full) [ 464.712893][T13335] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 464.712900][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.712910][T13335] Call Trace: [ 464.712915][T13335] [ 464.712921][T13335] dump_stack_lvl+0x100/0x190 [ 464.712948][T13335] should_fail_ex.cold+0x5/0xa [ 464.712966][T13335] should_failslab+0xc2/0x120 [ 464.712989][T13335] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 464.713018][T13335] ? cache_create_net+0x2b/0x220 [ 464.713036][T13335] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 464.713053][T13335] kmemdup_noprof+0x29/0x60 [ 464.713076][T13335] cache_create_net+0x2b/0x220 [ 464.713092][T13335] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 464.713107][T13335] gss_svc_init_net+0x69/0x640 [ 464.713121][T13335] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 464.713139][T13335] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 464.713153][T13335] ops_init+0x1e2/0x5f0 [ 464.713172][T13335] setup_net+0x118/0x3a0 [ 464.713189][T13335] ? __pfx_setup_net+0x10/0x10 [ 464.713204][T13335] ? lockdep_init_map_type+0x5c/0x250 [ 464.713223][T13335] ? mutex_init_lockep+0x110/0x150 [ 464.713245][T13335] copy_net_ns+0x46f/0x7c0 [ 464.713265][T13335] create_new_namespaces+0x3ea/0xac0 [ 464.713284][T13335] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 464.713301][T13335] ksys_unshare+0x455/0xab0 [ 464.713319][T13335] ? __pfx_ksys_unshare+0x10/0x10 [ 464.713344][T13335] __x64_sys_unshare+0x31/0x40 [ 464.713369][T13335] do_syscall_64+0x106/0xf80 [ 464.713385][T13335] ? clear_bhb_loop+0x40/0x90 [ 464.713405][T13335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.713421][T13335] RIP: 0033:0x7f12fcf9c629 [ 464.713435][T13335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.713449][T13335] RSP: 002b:00007f12fdd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 464.713464][T13335] RAX: ffffffffffffffda RBX: 00007f12fd215fa0 RCX: 00007f12fcf9c629 [ 464.713473][T13335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 464.713481][T13335] RBP: 00007f12fd032b39 R08: 0000000000000000 R09: 0000000000000000 [ 464.713490][T13335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.713498][T13335] R13: 00007f12fd216038 R14: 00007f12fd215fa0 R15: 00007ffc0566b378 [ 464.713518][T13335] [ 465.908355][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout [ 465.914496][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 465.920750][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 465.927133][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 466.612920][T13365] Console: switching to colour VGA+ 80x25 [ 466.774403][T13373] FAULT_INJECTION: forcing a failure. [ 466.774403][T13373] name failslab, interval 1, probability 0, space 0, times 0 [ 466.824139][T13373] CPU: 0 UID: 0 PID: 13373 Comm: syz.1.1573 Tainted: G U L syzkaller #0 PREEMPT(full) [ 466.824167][T13373] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 466.824172][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.824186][T13373] Call Trace: [ 466.824192][T13373] [ 466.824198][T13373] dump_stack_lvl+0x100/0x190 [ 466.824224][T13373] should_fail_ex.cold+0x5/0xa [ 466.824240][T13373] ? lsm_blob_alloc+0x68/0x90 [ 466.824255][T13373] should_failslab+0xc2/0x120 [ 466.824279][T13373] __kmalloc_noprof+0xe0/0x850 [ 466.824298][T13373] ? trace_kmalloc+0x101/0x130 [ 466.824314][T13373] lsm_blob_alloc+0x68/0x90 [ 466.824330][T13373] security_sk_alloc+0x2d/0x290 [ 466.824350][T13373] sk_prot_alloc+0x12a/0x2a0 [ 466.824370][T13373] sk_alloc+0x36/0xe80 [ 466.824385][T13373] __netlink_create+0x5e/0x2c0 [ 466.824408][T13373] ? __wake_up+0x3f/0x60 [ 466.824424][T13373] netlink_create+0x293/0x610 [ 466.824439][T13373] ? __pfx_genl_bind+0x10/0x10 [ 466.824456][T13373] ? __pfx_genl_unbind+0x10/0x10 [ 466.824476][T13373] ? __pfx_genl_release+0x10/0x10 [ 466.824497][T13373] __sock_create+0x339/0x860 [ 466.824520][T13373] __sys_socket+0x14d/0x260 [ 466.824545][T13373] ? __pfx___sys_socket+0x10/0x10 [ 466.824571][T13373] __x64_sys_socket+0x72/0xb0 [ 466.824590][T13373] ? lockdep_hardirqs_on+0x78/0x100 [ 466.824606][T13373] do_syscall_64+0x106/0xf80 [ 466.824621][T13373] ? clear_bhb_loop+0x40/0x90 [ 466.824639][T13373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.824654][T13373] RIP: 0033:0x7f11a279c629 [ 466.824670][T13373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.824684][T13373] RSP: 002b:00007f11a36ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 466.824699][T13373] RAX: ffffffffffffffda RBX: 00007f11a2a16090 RCX: 00007f11a279c629 [ 466.824708][T13373] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 466.824717][T13373] RBP: 00007f11a2832b39 R08: 0000000000000000 R09: 0000000000000000 [ 466.824725][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.824734][T13373] R13: 00007f11a2a16128 R14: 00007f11a2a16090 R15: 00007ffd0c83bce8 [ 466.824753][T13373] [ 467.749225][T13382] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1575'. [ 469.328173][T13421] serio: Serial port ttyS2 [ 470.192311][T13445] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[13445] [ 470.273651][T13442] futex_wake_op: syz.4.1591 tries to shift op by -2048; fix this program [ 470.301300][T13442] 0xf400000000000000-0xf500000000000006 : "" [ 470.329388][T13442] mtd: partition "" is out of reach -- disabled [ 470.377124][T13442] ftl_cs: FTL header not found. [ 470.758351][T13458] program syz.4.1594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.405266][T13481] FAULT_INJECTION: forcing a failure. [ 471.405266][T13481] name failslab, interval 1, probability 0, space 0, times 0 [ 471.405306][T13481] CPU: 0 UID: 0 PID: 13481 Comm: syz.4.1602 Tainted: G U L syzkaller #0 PREEMPT(full) [ 471.405328][T13481] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 471.405334][T13481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.405344][T13481] Call Trace: [ 471.405349][T13481] [ 471.405355][T13481] dump_stack_lvl+0x100/0x190 [ 471.405381][T13481] should_fail_ex.cold+0x5/0xa [ 471.405398][T13481] ? tomoyo_encode2+0xfb/0x3c0 [ 471.405412][T13481] should_failslab+0xc2/0x120 [ 471.405436][T13481] __kmalloc_noprof+0xe0/0x850 [ 471.405455][T13481] ? d_absolute_path+0x136/0x1b0 [ 471.405476][T13481] tomoyo_encode2+0xfb/0x3c0 [ 471.405493][T13481] tomoyo_encode+0x29/0x50 [ 471.405506][T13481] tomoyo_realpath_from_path+0x18c/0x690 [ 471.405525][T13481] tomoyo_path_number_perm+0x23c/0x580 [ 471.405546][T13481] ? tomoyo_path_number_perm+0x22e/0x580 [ 471.405568][T13481] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 471.405608][T13481] ? find_held_lock+0x2b/0x80 [ 471.405639][T13481] ? __fget_files+0x215/0x3d0 [ 471.405659][T13481] ? hook_file_ioctl_common+0x146/0x410 [ 471.405685][T13481] ? __fget_files+0x21f/0x3d0 [ 471.405709][T13481] security_file_ioctl+0xd3/0x230 [ 471.405731][T13481] __x64_sys_ioctl+0xb7/0x210 [ 471.405752][T13481] do_syscall_64+0x106/0xf80 [ 471.405768][T13481] ? clear_bhb_loop+0x40/0x90 [ 471.405786][T13481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.405800][T13481] RIP: 0033:0x7f0832b9c629 [ 471.405813][T13481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.405827][T13481] RSP: 002b:00007f0833a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.405842][T13481] RAX: ffffffffffffffda RBX: 00007f0832e15fa0 RCX: 00007f0832b9c629 [ 471.405852][T13481] RDX: 0000200000000000 RSI: 00000000c0386105 RDI: 0000000000000003 [ 471.405860][T13481] RBP: 00007f0833a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 471.405869][T13481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.405877][T13481] R13: 00007f0832e16038 R14: 00007f0832e15fa0 R15: 00007ffe56f85278 [ 471.405896][T13481] [ 471.405908][T13481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 473.477877][T13523] FAULT_INJECTION: forcing a failure. [ 473.477877][T13523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.558963][T13523] CPU: 0 UID: 0 PID: 13523 Comm: syz.4.1612 Tainted: G U L syzkaller #0 PREEMPT(full) [ 473.558990][T13523] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 473.558995][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.559004][T13523] Call Trace: [ 473.559009][T13523] [ 473.559015][T13523] dump_stack_lvl+0x100/0x190 [ 473.559041][T13523] should_fail_ex.cold+0x5/0xa [ 473.559058][T13523] _copy_from_user+0x2e/0xd0 [ 473.559081][T13523] cec_ioctl+0xccd/0x29b0 [ 473.559100][T13523] ? __pfx_cec_ioctl+0x10/0x10 [ 473.559114][T13523] ? tomoyo_path_number_perm+0x188/0x580 [ 473.559137][T13523] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 473.559163][T13523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 473.559188][T13523] ? do_vfs_ioctl+0x226/0x13e0 [ 473.559208][T13523] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 473.559231][T13523] ? find_held_lock+0x2b/0x80 [ 473.559253][T13523] ? __fget_files+0x215/0x3d0 [ 473.559274][T13523] ? hook_file_ioctl_common+0x146/0x410 [ 473.559299][T13523] ? __fget_files+0x21f/0x3d0 [ 473.559321][T13523] ? __pfx_cec_ioctl+0x10/0x10 [ 473.559344][T13523] __x64_sys_ioctl+0x18e/0x210 [ 473.559364][T13523] do_syscall_64+0x106/0xf80 [ 473.559380][T13523] ? clear_bhb_loop+0x40/0x90 [ 473.559398][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.559412][T13523] RIP: 0033:0x7f0832b9c629 [ 473.559425][T13523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.559439][T13523] RSP: 002b:00007f0833a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.559454][T13523] RAX: ffffffffffffffda RBX: 00007f0832e15fa0 RCX: 00007f0832b9c629 [ 473.559464][T13523] RDX: 0000200000000000 RSI: 00000000c0386105 RDI: 0000000000000003 [ 473.559472][T13523] RBP: 00007f0833a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 473.559480][T13523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.559489][T13523] R13: 00007f0832e16038 R14: 00007f0832e15fa0 R15: 00007ffe56f85278 [ 473.559507][T13523] [ 474.503198][T13545] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1616'. [ 477.347098][T13591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 477.367190][T13591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 477.400598][T13591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 477.440226][T13591] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 478.076597][T13627] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1634'. [ 478.952834][T13358] Bluetooth: hci0: command 0x0c1a tx timeout [ 479.434460][T13358] Bluetooth: hci3: command 0x0c1a tx timeout [ 479.441194][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 479.512064][T13358] Bluetooth: hci4: command 0x0c1a tx timeout [ 480.810524][T13663] ovs_: entered promiscuous mode [ 481.495273][T13668] netlink: 266 bytes leftover after parsing attributes in process `syz.0.1645'. [ 481.522620][T13668] IPv6: NLM_F_CREATE should be specified when creating new route [ 482.044166][T13681] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1648'. [ 482.307338][T13684] zswap: compressor not available [ 482.624806][T13682] Console: switching to colour frame buffer device 128x48 [ 482.657572][T13698] FAULT_INJECTION: forcing a failure. [ 482.657572][T13698] name failslab, interval 1, probability 0, space 0, times 0 [ 482.657604][T13698] CPU: 0 UID: 0 PID: 13698 Comm: syz.1.1650 Tainted: G U L syzkaller #0 PREEMPT(full) [ 482.657627][T13698] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 482.657632][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.657641][T13698] Call Trace: [ 482.657646][T13698] [ 482.657652][T13698] dump_stack_lvl+0x100/0x190 [ 482.657677][T13698] should_fail_ex.cold+0x5/0xa [ 482.657695][T13698] should_failslab+0xc2/0x120 [ 482.657719][T13698] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 482.657739][T13698] ? skb_clone+0x190/0x400 [ 482.657759][T13698] skb_clone+0x190/0x400 [ 482.657774][T13698] netlink_deliver_tap+0xaed/0xcc0 [ 482.657795][T13698] netlink_unicast+0x650/0x870 [ 482.657815][T13698] ? __pfx_netlink_unicast+0x10/0x10 [ 482.657840][T13698] netlink_sendmsg+0x8b0/0xda0 [ 482.657859][T13698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.657879][T13698] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 482.657901][T13698] __sys_sendto+0x4aa/0x520 [ 482.657916][T13698] ? __pfx___sys_sendto+0x10/0x10 [ 482.657935][T13698] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 482.657958][T13698] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 482.657993][T13698] __x64_sys_sendto+0xe0/0x1c0 [ 482.658007][T13698] ? do_syscall_64+0x95/0xf80 [ 482.658023][T13698] ? lockdep_hardirqs_on+0x78/0x100 [ 482.658038][T13698] do_syscall_64+0x106/0xf80 [ 482.658052][T13698] ? clear_bhb_loop+0x40/0x90 [ 482.658070][T13698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.658085][T13698] RIP: 0033:0x7f11a275cece [ 482.658097][T13698] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 482.658111][T13698] RSP: 002b:00007f11a36ede88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 482.658126][T13698] RAX: ffffffffffffffda RBX: 00007f11a36ef6c0 RCX: 00007f11a275cece [ 482.658136][T13698] RDX: 0000000000000020 RSI: 00007f11a36ee000 RDI: 000000000000000c [ 482.658144][T13698] RBP: 0000000000000000 R08: 00007f11a36edf04 R09: 000000000000000c [ 482.658152][T13698] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 482.658160][T13698] R13: 00007f11a36edf58 R14: 00007f11a36ee000 R15: 0000000000000000 [ 482.658179][T13698] [ 485.417687][T13737] futex_wake_op: syz.1.1658 tries to shift op by -2048; fix this program [ 485.475449][T13737] futex_wake_op: syz.1.1658 tries to shift op by -2048; fix this program [ 485.543745][T13738] 0x000000000001-0x000000020000 : "" [ 485.585228][T13738] ftl_cs: FTL header corrupt! [ 485.934368][T13747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1661'. [ 486.540374][T13763] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1663'. [ 487.145004][T13781] Process accounting paused [ 487.412473][T13784] FAULT_INJECTION: forcing a failure. [ 487.412473][T13784] name failslab, interval 1, probability 0, space 0, times 0 [ 487.559947][T13784] CPU: 0 UID: 0 PID: 13784 Comm: syz.2.1668 Tainted: G U L syzkaller #0 PREEMPT(full) [ 487.559978][T13784] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 487.559984][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.559993][T13784] Call Trace: [ 487.559999][T13784] [ 487.560006][T13784] dump_stack_lvl+0x100/0x190 [ 487.560032][T13784] should_fail_ex.cold+0x5/0xa [ 487.560050][T13784] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 487.560067][T13784] should_failslab+0xc2/0x120 [ 487.560091][T13784] __kmalloc_noprof+0xe0/0x850 [ 487.560111][T13784] ? acpi_os_signal_semaphore+0x11e/0x1a0 [ 487.560138][T13784] acpi_ns_get_normalized_pathname+0x95/0x250 [ 487.560156][T13784] acpi_ns_evaluate+0x24d/0x1670 [ 487.560180][T13784] acpi_evaluate_object+0x420/0xe00 [ 487.560198][T13784] ? kasan_save_stack+0x30/0x50 [ 487.560218][T13784] ? kasan_save_track+0x14/0x30 [ 487.560242][T13784] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 487.560267][T13784] acpi_evaluate_integer+0xdf/0x220 [ 487.560284][T13784] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 487.560309][T13784] ? __pfx_status_show+0x10/0x10 [ 487.560328][T13784] status_show+0xa0/0x120 [ 487.560346][T13784] ? __pfx_status_show+0x10/0x10 [ 487.560370][T13784] dev_attr_show+0x52/0xa0 [ 487.560391][T13784] ? __pfx_dev_attr_show+0x10/0x10 [ 487.560412][T13784] sysfs_kf_seq_show+0x217/0x3a0 [ 487.560434][T13784] seq_read_iter+0x32f/0x1270 [ 487.560463][T13784] kernfs_fop_read_iter+0x46c/0x610 [ 487.560478][T13784] ? rw_verify_area+0xce/0x6d0 [ 487.560496][T13784] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 487.560513][T13784] vfs_read+0x825/0xb30 [ 487.560536][T13784] ? __pfx_vfs_read+0x10/0x10 [ 487.560570][T13784] ksys_read+0x12a/0x250 [ 487.560590][T13784] ? __pfx_ksys_read+0x10/0x10 [ 487.560616][T13784] do_syscall_64+0x106/0xf80 [ 487.560631][T13784] ? clear_bhb_loop+0x40/0x90 [ 487.560649][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.560664][T13784] RIP: 0033:0x7f12fcf9c629 [ 487.560678][T13784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.560692][T13784] RSP: 002b:00007f12fdd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 487.560707][T13784] RAX: ffffffffffffffda RBX: 00007f12fd215fa0 RCX: 00007f12fcf9c629 [ 487.560718][T13784] RDX: 000000000000007f RSI: 0000200000000240 RDI: 0000000000000006 [ 487.560726][T13784] RBP: 00007f12fd032b39 R08: 0000000000000000 R09: 0000000000000000 [ 487.560735][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.560744][T13784] R13: 00007f12fd216038 R14: 00007f12fd215fa0 R15: 00007ffc0566b378 [ 487.560765][T13784] [ 488.051583][T13784] ACPI Error: Could not allocate 15 bytes (20251212/nsnames-308) [ 488.334219][T13787] futex_wake_op: syz.4.1669 tries to shift op by -2048; fix this program [ 489.260518][T13824] FAULT_INJECTION: forcing a failure. [ 489.260518][T13824] name failslab, interval 1, probability 0, space 0, times 0 [ 489.358659][T13824] CPU: 0 UID: 0 PID: 13824 Comm: syz.2.1679 Tainted: G U L syzkaller #0 PREEMPT(full) [ 489.358688][T13824] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 489.358693][T13824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.358702][T13824] Call Trace: [ 489.358707][T13824] [ 489.358713][T13824] dump_stack_lvl+0x100/0x190 [ 489.358739][T13824] should_fail_ex.cold+0x5/0xa [ 489.358756][T13824] ? tomoyo_realpath_from_path+0xb6/0x690 [ 489.358771][T13824] should_failslab+0xc2/0x120 [ 489.358795][T13824] __kmalloc_noprof+0xe0/0x850 [ 489.358820][T13824] tomoyo_realpath_from_path+0xb6/0x690 [ 489.358840][T13824] tomoyo_path_number_perm+0x23c/0x580 [ 489.358860][T13824] ? tomoyo_path_number_perm+0x22e/0x580 [ 489.358882][T13824] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 489.358923][T13824] ? find_held_lock+0x2b/0x80 [ 489.358944][T13824] ? __fget_files+0x215/0x3d0 [ 489.358965][T13824] ? hook_file_ioctl_common+0x146/0x410 [ 489.358990][T13824] ? __fget_files+0x21f/0x3d0 [ 489.359014][T13824] security_file_ioctl+0xd3/0x230 [ 489.359036][T13824] __x64_sys_ioctl+0xb7/0x210 [ 489.359058][T13824] do_syscall_64+0x106/0xf80 [ 489.359073][T13824] ? clear_bhb_loop+0x40/0x90 [ 489.359092][T13824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.359107][T13824] RIP: 0033:0x7f12fcf9c629 [ 489.359119][T13824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.359133][T13824] RSP: 002b:00007f12fdd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.359148][T13824] RAX: ffffffffffffffda RBX: 00007f12fd215fa0 RCX: 00007f12fcf9c629 [ 489.359158][T13824] RDX: 0000200000000000 RSI: 00000000c0386105 RDI: 0000000000000003 [ 489.359166][T13824] RBP: 00007f12fdd97090 R08: 0000000000000000 R09: 0000000000000000 [ 489.359175][T13824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.359184][T13824] R13: 00007f12fd216038 R14: 00007f12fd215fa0 R15: 00007ffc0566b378 [ 489.359203][T13824] [ 489.359210][T13824] ERROR: Out of memory at tomoyo_realpath_from_path. [ 489.852276][T13829] FAULT_INJECTION: forcing a failure. [ 489.852276][T13829] name failslab, interval 1, probability 0, space 0, times 0 [ 489.878887][T13829] CPU: 0 UID: 0 PID: 13829 Comm: syz.0.1681 Tainted: G U L syzkaller #0 PREEMPT(full) [ 489.878916][T13829] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 489.878922][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.878931][T13829] Call Trace: [ 489.878937][T13829] [ 489.878943][T13829] dump_stack_lvl+0x100/0x190 [ 489.878969][T13829] should_fail_ex.cold+0x5/0xa [ 489.878987][T13829] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 489.879007][T13829] should_failslab+0xc2/0x120 [ 489.879031][T13829] __kmalloc_noprof+0xe0/0x850 [ 489.879051][T13829] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 489.879076][T13829] acpi_ns_get_normalized_pathname+0x95/0x250 [ 489.879095][T13829] acpi_ex_start_trace_method+0x30/0x4f0 [ 489.879114][T13829] acpi_ds_begin_method_execution+0x60/0xc20 [ 489.879132][T13829] ? down_timeout+0x6b/0x90 [ 489.879149][T13829] ? acpi_tb_check_dsdt_header+0x324/0x3f0 [ 489.879170][T13829] acpi_ps_execute_method+0xb1/0xe90 [ 489.879193][T13829] ? acpi_ut_acquire_mutex+0x2d7/0x500 [ 489.879214][T13829] acpi_ns_evaluate+0x640/0x1670 [ 489.879234][T13829] acpi_evaluate_object+0x420/0xe00 [ 489.879253][T13829] ? kasan_save_stack+0x30/0x50 [ 489.879272][T13829] ? kasan_save_track+0x14/0x30 [ 489.879295][T13829] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 489.879321][T13829] acpi_evaluate_integer+0xdf/0x220 [ 489.879337][T13829] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 489.879362][T13829] ? __pfx_status_show+0x10/0x10 [ 489.879380][T13829] status_show+0xa0/0x120 [ 489.879399][T13829] ? __pfx_status_show+0x10/0x10 [ 489.879423][T13829] dev_attr_show+0x52/0xa0 [ 489.879445][T13829] ? __pfx_dev_attr_show+0x10/0x10 [ 489.879466][T13829] sysfs_kf_seq_show+0x217/0x3a0 [ 489.879486][T13829] seq_read_iter+0x32f/0x1270 [ 489.879516][T13829] kernfs_fop_read_iter+0x46c/0x610 [ 489.879531][T13829] ? rw_verify_area+0xce/0x6d0 [ 489.879549][T13829] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 489.879565][T13829] vfs_read+0x825/0xb30 [ 489.879596][T13829] ? __pfx_vfs_read+0x10/0x10 [ 489.879630][T13829] ksys_read+0x12a/0x250 [ 489.879651][T13829] ? __pfx_ksys_read+0x10/0x10 [ 489.879678][T13829] do_syscall_64+0x106/0xf80 [ 489.879695][T13829] ? clear_bhb_loop+0x40/0x90 [ 489.879713][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.879728][T13829] RIP: 0033:0x7f596059c629 [ 489.879742][T13829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.879757][T13829] RSP: 002b:00007f596148c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.879772][T13829] RAX: ffffffffffffffda RBX: 00007f5960815fa0 RCX: 00007f596059c629 [ 489.879782][T13829] RDX: 000000000000007f RSI: 0000200000000240 RDI: 0000000000000006 [ 489.879791][T13829] RBP: 00007f5960632b39 R08: 0000000000000000 R09: 0000000000000000 [ 489.879800][T13829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.879809][T13829] R13: 00007f5960816038 R14: 00007f5960815fa0 R15: 00007ffd8726f098 [ 489.879830][T13829] [ 489.880971][T13829] ACPI Error: Could not allocate 15 bytes (20251212/nsnames-308) [ 493.765993][T13896] futex_wake_op: syz.2.1699 tries to shift op by -2048; fix this program [ 493.922157][T13896] futex_wake_op: syz.2.1699 tries to shift op by -2048; fix this program [ 494.883737][T13915] forcing mempool usage for bvec_alloc+0x197/0x210 [ 495.813802][T13934] random: crng reseeded on system resumption [ 498.202092][T13970] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1714'. [ 498.458329][T13972] serio: Serial port ttyS0 [ 500.279661][T13985] kexec: Could not allocate control_code_buffer [ 500.532476][T13980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 500.559823][T14006] FAULT_INJECTION: forcing a failure. [ 500.559823][T14006] name failslab, interval 1, probability 0, space 0, times 0 [ 500.575948][T13980] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 500.596542][T13980] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 500.606752][T14006] CPU: 0 UID: 0 PID: 14006 Comm: syz.1.1721 Tainted: G U L syzkaller #0 PREEMPT(full) [ 500.606780][T14006] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 500.606787][T14006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.606797][T14006] Call Trace: [ 500.606802][T14006] [ 500.606809][T14006] dump_stack_lvl+0x100/0x190 [ 500.606836][T14006] should_fail_ex.cold+0x5/0xa [ 500.606855][T14006] ? __register_sysctl_table+0xac/0x1650 [ 500.606875][T14006] should_failslab+0xc2/0x120 [ 500.606900][T14006] __kmalloc_noprof+0xe0/0x850 [ 500.606924][T14006] __register_sysctl_table+0xac/0x1650 [ 500.606945][T14006] ? is_module_address+0x5f/0xf0 [ 500.606968][T14006] ? __pfx___register_sysctl_table+0x10/0x10 [ 500.606990][T14006] ? is_module_address+0x69/0xf0 [ 500.607006][T14006] ? register_net_sysctl_sz+0x222/0x430 [ 500.607026][T14006] ? __asan_memcpy+0x3c/0x60 [ 500.607046][T14006] devinet_init_net+0x369/0x8d0 [ 500.607066][T14006] ? __pfx_devinet_init_net+0x10/0x10 [ 500.607084][T14006] ops_init+0x1e2/0x5f0 [ 500.607103][T14006] setup_net+0x118/0x3a0 [ 500.607121][T14006] ? __pfx_setup_net+0x10/0x10 [ 500.607136][T14006] ? lockdep_init_map_type+0x5c/0x250 [ 500.607155][T14006] ? mutex_init_lockep+0x110/0x150 [ 500.607177][T14006] copy_net_ns+0x46f/0x7c0 [ 500.607196][T14006] create_new_namespaces+0x3ea/0xac0 [ 500.607215][T14006] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 500.607232][T14006] ksys_unshare+0x455/0xab0 [ 500.607251][T14006] ? __pfx_ksys_unshare+0x10/0x10 [ 500.607275][T14006] __x64_sys_unshare+0x31/0x40 [ 500.607292][T14006] do_syscall_64+0x106/0xf80 [ 500.607307][T14006] ? clear_bhb_loop+0x40/0x90 [ 500.607325][T14006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.607344][T14006] RIP: 0033:0x7f11a279c629 [ 500.607357][T14006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.607373][T14006] RSP: 002b:00007f11a36ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 500.607388][T14006] RAX: ffffffffffffffda RBX: 00007f11a2a16090 RCX: 00007f11a279c629 [ 500.607398][T14006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 500.607407][T14006] RBP: 00007f11a2832b39 R08: 0000000000000000 R09: 0000000000000000 [ 500.607416][T14006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.607425][T14006] R13: 00007f11a2a16128 R14: 00007f11a2a16090 R15: 00007ffd0c83bce8 [ 500.607446][T14006] [ 500.856798][T13980] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 500.908048][T13358] Bluetooth: hci0: command 0x0c1a tx timeout [ 501.279384][T14008] zswap: compressor not available [ 501.646755][T14017] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 501.768777][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.775253][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.863899][T14026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1725'. [ 501.909715][T14026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.940929][T14026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.086790][T14026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.141805][T14026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.281892][T14022] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 502.643075][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 502.649169][T13358] Bluetooth: hci1: command 0x0c1a tx timeout [ 502.968227][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 503.850496][T14067] FAULT_INJECTION: forcing a failure. [ 503.850496][T14067] name failslab, interval 1, probability 0, space 0, times 0 [ 503.921958][T14067] CPU: 0 UID: 0 PID: 14067 Comm: syz.0.1734 Tainted: G U L syzkaller #0 PREEMPT(full) [ 503.921987][T14067] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 503.921993][T14067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.922002][T14067] Call Trace: [ 503.922007][T14067] [ 503.922013][T14067] dump_stack_lvl+0x100/0x190 [ 503.922039][T14067] should_fail_ex.cold+0x5/0xa [ 503.922056][T14067] ? tomoyo_encode2+0xfb/0x3c0 [ 503.922070][T14067] should_failslab+0xc2/0x120 [ 503.922093][T14067] __kmalloc_noprof+0xe0/0x850 [ 503.922112][T14067] ? d_absolute_path+0x136/0x1b0 [ 503.922134][T14067] tomoyo_encode2+0xfb/0x3c0 [ 503.922151][T14067] tomoyo_encode+0x29/0x50 [ 503.922164][T14067] tomoyo_realpath_from_path+0x18c/0x690 [ 503.922183][T14067] tomoyo_path_number_perm+0x23c/0x580 [ 503.922204][T14067] ? tomoyo_path_number_perm+0x22e/0x580 [ 503.922226][T14067] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 503.922266][T14067] ? find_held_lock+0x2b/0x80 [ 503.922295][T14067] ? __fget_files+0x215/0x3d0 [ 503.922315][T14067] ? hook_file_ioctl_common+0x146/0x410 [ 503.922341][T14067] ? __fget_files+0x21f/0x3d0 [ 503.922364][T14067] security_file_ioctl+0xd3/0x230 [ 503.922386][T14067] __x64_sys_ioctl+0xb7/0x210 [ 503.922408][T14067] do_syscall_64+0x106/0xf80 [ 503.922423][T14067] ? clear_bhb_loop+0x40/0x90 [ 503.922441][T14067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.922456][T14067] RIP: 0033:0x7f596059c629 [ 503.922469][T14067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.922483][T14067] RSP: 002b:00007f596148c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.922497][T14067] RAX: ffffffffffffffda RBX: 00007f5960815fa0 RCX: 00007f596059c629 [ 503.922507][T14067] RDX: 0000200000000000 RSI: 00000000c0386105 RDI: 0000000000000003 [ 503.922516][T14067] RBP: 00007f596148c090 R08: 0000000000000000 R09: 0000000000000000 [ 503.922524][T14067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.922532][T14067] R13: 00007f5960816038 R14: 00007f5960815fa0 R15: 00007ffd8726f098 [ 503.922552][T14067] [ 503.922567][T14067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 504.746277][T14080] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1736'. [ 505.943560][ T5833] Bluetooth: hci4: unexpected event 0x2f length: 435 > 260 [ 505.943587][ T5833] Bluetooth: hci4: Malformed Event: 0x2f [ 506.041423][T14104] mkiss: ax0: crc mode is auto. [ 509.308208][T14194] FAULT_INJECTION: forcing a failure. [ 509.308208][T14194] name failslab, interval 1, probability 0, space 0, times 0 [ 509.387496][T14194] CPU: 0 UID: 0 PID: 14194 Comm: syz.1.1758 Tainted: G U L syzkaller #0 PREEMPT(full) [ 509.387526][T14194] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 509.387532][T14194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.387541][T14194] Call Trace: [ 509.387546][T14194] [ 509.387553][T14194] dump_stack_lvl+0x100/0x190 [ 509.387579][T14194] should_fail_ex.cold+0x5/0xa [ 509.387603][T14194] should_failslab+0xc2/0x120 [ 509.387628][T14194] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 509.387649][T14194] ? __d_alloc+0x34/0xa80 [ 509.387667][T14194] __d_alloc+0x34/0xa80 [ 509.387683][T14194] d_alloc_pseudo+0x1c/0xc0 [ 509.387702][T14194] alloc_file_pseudo+0xcf/0x230 [ 509.387720][T14194] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 509.387742][T14194] __shmem_file_setup+0x221/0x490 [ 509.387764][T14194] ? __pfx___shmem_file_setup+0x10/0x10 [ 509.387786][T14194] ? vm_area_alloc+0x1f/0x160 [ 509.387806][T14194] shmem_zero_setup+0x96/0x1b0 [ 509.387828][T14194] __mmap_region+0x2198/0x29e0 [ 509.387850][T14194] ? __pfx___mmap_region+0x10/0x10 [ 509.387874][T14194] ? set_next_entity+0x11b/0x9c0 [ 509.387897][T14194] ? __lock_acquire+0x4a5/0x2630 [ 509.387914][T14194] ? update_cfs_rq_load_avg+0x51/0x550 [ 509.387937][T14194] ? find_held_lock+0x2b/0x80 [ 509.387958][T14194] ? finish_task_switch.isra.0+0x200/0xb80 [ 509.387973][T14194] ? finish_task_switch.isra.0+0x200/0xb80 [ 509.387994][T14194] ? trace_sched_exit_tp+0x13a/0x180 [ 509.388010][T14194] ? __schedule+0x1000/0x60e0 [ 509.388049][T14194] ? rcu_is_watching+0x12/0xc0 [ 509.388069][T14194] ? cap_capable+0x107/0x460 [ 509.388091][T14194] mmap_region+0x180/0x3e0 [ 509.388114][T14194] do_mmap+0xc63/0x12f0 [ 509.388132][T14194] ? __pfx_do_mmap+0x10/0x10 [ 509.388147][T14194] ? __pfx_down_write_killable+0x10/0x10 [ 509.388169][T14194] vm_mmap_pgoff+0x29e/0x470 [ 509.388187][T14194] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 509.388202][T14194] ? do_futex+0x192/0x350 [ 509.388221][T14194] ? __pfx_do_futex+0x10/0x10 [ 509.388241][T14194] ksys_mmap_pgoff+0xe1/0x650 [ 509.388264][T14194] ? __x64_sys_futex+0x34f/0x4d0 [ 509.388280][T14194] ? __x64_sys_futex+0x358/0x4d0 [ 509.388298][T14194] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 509.388320][T14194] ? xfd_validate_state+0x129/0x190 [ 509.388344][T14194] __x64_sys_mmap+0x125/0x190 [ 509.388367][T14194] do_syscall_64+0x106/0xf80 [ 509.388381][T14194] ? clear_bhb_loop+0x40/0x90 [ 509.388399][T14194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.388414][T14194] RIP: 0033:0x7f11a279c629 [ 509.388428][T14194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.388442][T14194] RSP: 002b:00007f11a3710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 509.388457][T14194] RAX: ffffffffffffffda RBX: 00007f11a2a15fa0 RCX: 00007f11a279c629 [ 509.388467][T14194] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000 [ 509.388475][T14194] RBP: 00007f11a2832b39 R08: 0000000000000401 R09: 0000000000008000 [ 509.388484][T14194] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 509.388493][T14194] R13: 00007f11a2a16038 R14: 00007f11a2a15fa0 R15: 00007ffd0c83bce8 [ 509.388513][T14194] [ 510.673597][T14222] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1762'. [ 511.345028][T14245] input: jJǸ-9%vJ865hǙn?aԙ/k [ 511.345028][T14245] lxx b6Yh$X as /devices/virtual/input/input25 [ 513.426476][ T5833] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 514.009160][T14302] random: crng reseeded on system resumption [ 514.126722][T14302] hub 1-0:1.0: USB hub found [ 514.145209][T14302] hub 1-0:1.0: 1 port detected [ 515.272347][T14324] Invalid ELF header magic: != ELF [ 515.451071][T14324] MTRR 0 not used [ 515.920232][T14338] program syz.4.1784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.568276][T14352] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1786'. [ 518.183500][T14369] Process accounting resumed [ 518.451003][T14386] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 518.469611][T14386] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 518.710665][T14389] zswap: compressor 3PZvvĀ3 ֨@QA xmr>σ not available [ 518.868721][T14392] zswap: compressor query not available [ 519.823337][T14416] nbd: must specify at least one socket [ 520.632379][T14431] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1807'. [ 521.499568][T14444] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b1091a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 521.515226][T14444] Call Trace: [ 521.518497][T14444] [ 521.521447][T14444] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 521.528138][T14444] ? __pfx_debug_object_deactivate+0x10/0x10 [ 521.534142][T14444] mce_cpu_restart+0xd5/0x1f0 [ 521.538828][T14444] ? __pfx_mce_cpu_restart+0x10/0x10 [ 521.544106][T14444] smp_call_function_many_cond+0x11fc/0x1500 [ 521.550390][T14444] ? __pfx_mce_cpu_restart+0x10/0x10 [ 521.555666][T14444] ? mark_held_locks+0x40/0x70 [ 521.560432][T14444] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 521.566231][T14444] ? lockdep_hardirqs_on+0x78/0x100 [ 521.571443][T14444] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 521.577249][T14444] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 521.583588][T14444] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 521.589598][T14444] ? __timer_delete_sync+0x151/0x1c0 [ 521.594884][T14444] ? __pfx_mce_cpu_restart+0x10/0x10 [ 521.600255][T14444] on_each_cpu_cond_mask+0x40/0x90 [ 521.605358][T14444] set_bank+0x240/0x3a0 [ 521.609516][T14444] ? __pfx_set_bank+0x10/0x10 [ 521.614185][T14444] ? find_held_lock+0x2b/0x80 [ 521.618854][T14444] ? sysfs_file_kobj+0xe4/0x290 [ 521.623690][T14444] ? sysfs_file_kobj+0xe4/0x290 [ 521.628529][T14444] ? __pfx_set_bank+0x10/0x10 [ 521.633194][T14444] dev_attr_store+0x58/0x80 [ 521.637863][T14444] ? __pfx_dev_attr_store+0x10/0x10 [ 521.643058][T14444] sysfs_kf_write+0xf2/0x150 [ 521.647665][T14444] kernfs_fop_write_iter+0x3e0/0x5f0 [ 521.653002][T14444] ? __pfx_sysfs_kf_write+0x10/0x10 [ 521.658198][T14444] vfs_write+0x6ac/0x1070 [ 521.662548][T14444] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 521.668369][T14444] ? __pfx_vfs_write+0x10/0x10 [ 521.673207][T14444] ? do_futex+0x192/0x350 [ 521.677533][T14444] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.682727][T14444] ? __x64_sys_futex+0x34f/0x4d0 [ 521.687743][T14444] ? __x64_sys_futex+0x358/0x4d0 [ 521.692674][T14444] ksys_write+0x12a/0x250 [ 521.697000][T14444] ? __pfx_ksys_write+0x10/0x10 [ 521.701844][T14444] do_syscall_64+0x106/0xf80 [ 521.706418][T14444] ? clear_bhb_loop+0x40/0x90 [ 521.711084][T14444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.716960][T14444] RIP: 0033:0x7f12fcf9c629 [ 521.721382][T14444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.740982][T14444] RSP: 002b:00007f12fdd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.749403][T14444] RAX: ffffffffffffffda RBX: 00007f12fd215fa0 RCX: 00007f12fcf9c629 [ 521.757377][T14444] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000002 [ 521.765343][T14444] RBP: 00007f12fd032b39 R08: 0000000000000000 R09: 0000000000000000 [ 521.773294][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.781334][T14444] R13: 00007f12fd216038 R14: 00007f12fd215fa0 R15: 00007ffc0566b378 [ 521.789301][T14444] [ 521.817463][T14446] syz.0.1813 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 524.242983][T14499] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1826'. [ 524.705646][T14503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1827'. [ 524.754691][T14503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.819772][T14503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.915367][T14503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.986851][T14503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.503870][T14520] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 528.188880][T14571] FAULT_INJECTION: forcing a failure. [ 528.188880][T14571] name failslab, interval 1, probability 0, space 0, times 0 [ 528.263117][T14571] CPU: 0 UID: 0 PID: 14571 Comm: syz.0.1839 Tainted: G U L syzkaller #0 PREEMPT(full) [ 528.263145][T14571] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 528.263150][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.263180][T14571] Call Trace: [ 528.263186][T14571] [ 528.263194][T14571] dump_stack_lvl+0x100/0x190 [ 528.263221][T14571] should_fail_ex.cold+0x5/0xa [ 528.263238][T14571] should_failslab+0xc2/0x120 [ 528.263262][T14571] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 528.263285][T14571] ? create_new_namespaces+0x30/0xac0 [ 528.263300][T14571] ? rcu_is_watching+0x12/0xc0 [ 528.263322][T14571] create_new_namespaces+0x30/0xac0 [ 528.263336][T14571] ? bpf_lsm_capable+0x9/0x10 [ 528.263349][T14571] ? security_capable+0x80/0x260 [ 528.263370][T14571] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 528.263386][T14571] ksys_unshare+0x455/0xab0 [ 528.263404][T14571] ? __pfx_ksys_unshare+0x10/0x10 [ 528.263429][T14571] __x64_sys_unshare+0x31/0x40 [ 528.263446][T14571] do_syscall_64+0x106/0xf80 [ 528.263462][T14571] ? clear_bhb_loop+0x40/0x90 [ 528.263480][T14571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.263495][T14571] RIP: 0033:0x7f596059c629 [ 528.263509][T14571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.263523][T14571] RSP: 002b:00007f596146b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 528.263543][T14571] RAX: ffffffffffffffda RBX: 00007f5960816090 RCX: 00007f596059c629 [ 528.263553][T14571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 528.263561][T14571] RBP: 00007f5960632b39 R08: 0000000000000000 R09: 0000000000000000 [ 528.263570][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.263578][T14571] R13: 00007f5960816128 R14: 00007f5960816090 R15: 00007ffd8726f098 [ 528.263597][T14571] [ 528.578722][ T29] audit: type=1800 audit(1771715700.333:12): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1840" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 530.433393][ T5833] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 530.440997][ T5833] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 530.837921][T14611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1849'. [ 531.203411][ T29] audit: type=1804 audit(1771715702.951:13): pid=14615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1850" name="/newroot/457/file0" dev="tmpfs" ino=2396 res=1 errno=0 [ 531.290086][ T29] audit: type=1804 audit(1771715703.021:14): pid=14619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1850" name="/newroot/457/file0" dev="tmpfs" ino=2396 res=1 errno=0 [ 531.421469][ T5833] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 531.465753][T14624] netlink: zone id is out of range [ 531.571660][T14624] netlink: zone id is out of range [ 531.624205][T14624] netlink: zone id is out of range [ 531.684261][T14624] netlink: zone id is out of range [ 531.717367][T14624] netlink: zone id is out of range [ 531.746818][T14624] netlink: zone id is out of range [ 531.793238][T14624] netlink: zone id is out of range [ 531.826232][T14624] netlink: zone id is out of range [ 531.837900][T14624] netlink: zone id is out of range [ 531.868228][T14624] netlink: zone id is out of range [ 532.609158][ T29] audit: type=1800 audit(1771715704.361:15): pid=14642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1854" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 533.965367][T14667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1862'. [ 534.033431][T14667] unsupported nlmsg_type 40 [ 535.649202][T14701] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1868'. [ 536.405614][T14712] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1871'. [ 536.918989][ T29] audit: type=1800 audit(1771715708.659:16): pid=14718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1873" name="dbroot" dev="configfs" ino=56572 res=0 errno=0 [ 539.613689][ T29] audit: type=1807 audit(1771715711.347:17): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 539.647477][T14759] ima: policy update failed [ 539.699929][ T29] audit: type=1802 audit(1771715711.387:18): pid=14759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1882" res=0 errno=0 [ 539.790483][ T29] audit: type=1802 audit(1771715711.477:19): pid=14759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1882" res=0 errno=0 [ 540.653389][T14772] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1884'. [ 542.139652][T14810] mkiss: ax0: crc mode is auto. [ 542.198728][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 542.389701][T14823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1894'. [ 542.428225][T14823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.455131][T14823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.500003][T14823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.536419][T14823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.124106][T14836] tipc: Started in network mode [ 543.129217][T14836] tipc: Node identity ee00, cluster identity 4711 [ 543.188641][T14836] tipc: Node number set to 60928 [ 543.458711][T14848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1898'. [ 544.325745][T14874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1904'. [ 544.518580][T14872] zswap: compressor not available [ 544.598126][T14878] netlink: 'syz.4.1905': attribute type 1 has an invalid length. [ 547.086284][T14940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1916'. [ 547.515012][T14949] FAULT_INJECTION: forcing a failure. [ 547.515012][T14949] name failslab, interval 1, probability 0, space 0, times 0 [ 547.581558][T14949] CPU: 0 UID: 0 PID: 14949 Comm: syz.1.1919 Tainted: G U L syzkaller #0 PREEMPT(full) [ 547.581603][T14949] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 547.581613][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.581628][T14949] Call Trace: [ 547.581637][T14949] [ 547.581646][T14949] dump_stack_lvl+0x100/0x190 [ 547.581673][T14949] should_fail_ex.cold+0x5/0xa [ 547.581691][T14949] should_failslab+0xc2/0x120 [ 547.581714][T14949] __kmalloc_cache_noprof+0x7a/0x6f0 [ 547.581732][T14949] ? vb2_vmalloc_alloc+0xf9/0x410 [ 547.581752][T14949] ? trace_kmalloc+0x101/0x130 [ 547.581765][T14949] ? __kasan_kmalloc+0xaa/0xb0 [ 547.581788][T14949] vb2_vmalloc_alloc+0xf9/0x410 [ 547.581808][T14949] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 547.581830][T14949] __vb2_queue_alloc+0x8d5/0x1160 [ 547.581859][T14949] vb2_core_reqbufs+0x899/0xf30 [ 547.581883][T14949] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 547.581914][T14949] __vb2_init_fileio+0x32d/0x1000 [ 547.581934][T14949] ? vb2_fop_read+0xe5/0x520 [ 547.581952][T14949] ? __pfx___futex_wait+0x10/0x10 [ 547.581977][T14949] __vb2_perform_fileio+0x91e/0x1380 [ 547.582003][T14949] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 547.582030][T14949] vb2_fop_read+0x211/0x520 [ 547.582051][T14949] v4l2_read+0x229/0x2c0 [ 547.582069][T14949] ? __pfx_v4l2_read+0x10/0x10 [ 547.582094][T14949] vfs_read+0x1e4/0xb30 [ 547.582117][T14949] ? __pfx_vfs_read+0x10/0x10 [ 547.582136][T14949] ? find_held_lock+0x2b/0x80 [ 547.582158][T14949] ? __fget_files+0x215/0x3d0 [ 547.582178][T14949] ? __fget_files+0x215/0x3d0 [ 547.582202][T14949] ? __fget_files+0x21f/0x3d0 [ 547.582228][T14949] ksys_read+0x12a/0x250 [ 547.582248][T14949] ? __pfx_ksys_read+0x10/0x10 [ 547.582274][T14949] do_syscall_64+0x106/0xf80 [ 547.582290][T14949] ? clear_bhb_loop+0x40/0x90 [ 547.582308][T14949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.582323][T14949] RIP: 0033:0x7f11a279c629 [ 547.582335][T14949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.582350][T14949] RSP: 002b:00007f11a3710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.582365][T14949] RAX: ffffffffffffffda RBX: 00007f11a2a15fa0 RCX: 00007f11a279c629 [ 547.582374][T14949] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000003 [ 547.582383][T14949] RBP: 00007f11a2832b39 R08: 0000000000000000 R09: 0000000000000000 [ 547.582392][T14949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.582400][T14949] R13: 00007f11a2a16038 R14: 00007f11a2a15fa0 R15: 00007ffd0c83bce8 [ 547.582420][T14949] [ 548.537224][T14959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1921'. [ 548.616366][T14959] bond0: (slave bond_slave_1): Releasing backup interface [ 550.115200][T14913] Process accounting paused [ 550.954349][T14958] nvme_fabrics: missing parameter 'transport=%s' [ 551.029825][T14958] nvme_fabrics: missing parameter 'nqn=%s' [ 551.104454][T14963] nvme_fabrics: missing parameter 'transport=%s' [ 551.134324][T14963] nvme_fabrics: missing parameter 'nqn=%s' [ 553.820106][T15031] nvme_fabrics: missing parameter 'transport=%s' [ 553.885078][T15031] nvme_fabrics: missing parameter 'nqn=%s' [ 554.141873][T15043] nvme_fabrics: missing parameter 'transport=%s' [ 554.195848][T15043] nvme_fabrics: missing parameter 'nqn=%s' [ 554.407402][T15049] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 554.438491][T15054] perf: Dynamic interrupt throttling disabled, can hang your system! [ 554.532352][T15049] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 555.470502][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1943'. [ 557.866558][T15125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1954'. [ 557.897363][T15125] ipvlan0: entered promiscuous mode [ 557.926112][T15125] ipvlan0: entered allmulticast mode [ 558.050865][T15125] veth0_vlan: entered allmulticast mode [ 558.470786][T15134] Console: switching to colour VGA+ 80x25 [ 558.488107][T15133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1957'. [ 560.472867][T15172] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1964'. [ 562.364468][T15203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1969'. [ 562.446708][T15206] netlink: 41897 bytes leftover after parsing attributes in process `syz.0.1969'. [ 563.246631][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.252985][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.522335][T15218] Invalid ELF header magic: != ELF [ 565.802599][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 566.289001][T15249] FAULT_INJECTION: forcing a failure. [ 566.289001][T15249] name failslab, interval 1, probability 0, space 0, times 0 [ 566.511803][T15249] CPU: 0 UID: 0 PID: 15249 Comm: syz.0.1979 Tainted: G U L syzkaller #0 PREEMPT(full) [ 566.511831][T15249] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 566.511837][T15249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 566.511846][T15249] Call Trace: [ 566.511851][T15249] [ 566.511857][T15249] dump_stack_lvl+0x100/0x190 [ 566.511883][T15249] should_fail_ex.cold+0x5/0xa [ 566.511908][T15249] ? lsm_blob_alloc+0x68/0x90 [ 566.511924][T15249] should_failslab+0xc2/0x120 [ 566.511947][T15249] __kmalloc_noprof+0xe0/0x850 [ 566.511967][T15249] ? trace_kmem_cache_alloc+0xf3/0x120 [ 566.511983][T15249] lsm_blob_alloc+0x68/0x90 [ 566.511999][T15249] security_sk_alloc+0x2d/0x290 [ 566.512019][T15249] sk_prot_alloc+0x1d1/0x2a0 [ 566.512040][T15249] sk_alloc+0x36/0xe80 [ 566.512055][T15249] inet_create+0x3a0/0x1060 [ 566.512076][T15249] ? inet_create+0x94/0x1060 [ 566.512098][T15249] __sock_create+0x339/0x860 [ 566.512122][T15249] __sys_socket+0x14d/0x260 [ 566.512141][T15249] ? exc_page_fault+0x6f/0xd0 [ 566.512156][T15249] ? __pfx___sys_socket+0x10/0x10 [ 566.512179][T15249] ? do_user_addr_fault+0x8d6/0x12f0 [ 566.512204][T15249] __x64_sys_socket+0x72/0xb0 [ 566.512224][T15249] ? lockdep_hardirqs_on+0x78/0x100 [ 566.512239][T15249] do_syscall_64+0x106/0xf80 [ 566.512257][T15249] ? clear_bhb_loop+0x40/0x90 [ 566.512275][T15249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.512290][T15249] RIP: 0033:0x7f596059c629 [ 566.512303][T15249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.512318][T15249] RSP: 002b:00007f596144a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 566.512332][T15249] RAX: ffffffffffffffda RBX: 00007f5960816180 RCX: 00007f596059c629 [ 566.512342][T15249] RDX: 0000000000000000 RSI: 0000000000080802 RDI: 0000000000000002 [ 566.512350][T15249] RBP: 00007f5960632b39 R08: 0000000000000000 R09: 0000000000000000 [ 566.512358][T15249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.512366][T15249] R13: 00007f5960816218 R14: 00007f5960816180 R15: 00007ffd8726f098 [ 566.512384][T15249] [ 568.142327][T15278] nfs: Bad value for 'source' [ 568.517151][T15284] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1984'. [ 568.750073][T15294] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1988'. [ 571.080328][T15320] FAULT_INJECTION: forcing a failure. [ 571.080328][T15320] name failslab, interval 1, probability 0, space 0, times 0 [ 571.130474][T15320] CPU: 0 UID: 0 PID: 15320 Comm: syz.4.1995 Tainted: G U L syzkaller #0 PREEMPT(full) [ 571.130504][T15320] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 571.130510][T15320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 571.130519][T15320] Call Trace: [ 571.130525][T15320] [ 571.130532][T15320] dump_stack_lvl+0x100/0x190 [ 571.130560][T15320] should_fail_ex.cold+0x5/0xa [ 571.130579][T15320] should_failslab+0xc2/0x120 [ 571.130602][T15320] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 571.130622][T15320] ? vm_area_alloc+0x1f/0x160 [ 571.130646][T15320] ? vma_merge_new_range+0x38b/0xa30 [ 571.130673][T15320] vm_area_alloc+0x1f/0x160 [ 571.130692][T15320] __mmap_region+0x10cc/0x29e0 [ 571.130715][T15320] ? __pfx___mmap_region+0x10/0x10 [ 571.130735][T15320] ? __lock_acquire+0x4a5/0x2630 [ 571.130754][T15320] ? set_next_entity+0x11b/0x9c0 [ 571.130778][T15320] ? __lock_acquire+0x4a5/0x2630 [ 571.130795][T15320] ? find_held_lock+0x2b/0x80 [ 571.130824][T15320] ? find_held_lock+0x2b/0x80 [ 571.130845][T15320] ? finish_task_switch.isra.0+0x200/0xb80 [ 571.130860][T15320] ? finish_task_switch.isra.0+0x200/0xb80 [ 571.130882][T15320] ? trace_sched_exit_tp+0x13a/0x180 [ 571.130899][T15320] ? __schedule+0x1000/0x60e0 [ 571.130937][T15320] ? rcu_is_watching+0x12/0xc0 [ 571.130958][T15320] ? cap_capable+0x107/0x460 [ 571.130981][T15320] mmap_region+0x180/0x3e0 [ 571.131004][T15320] do_mmap+0xc63/0x12f0 [ 571.131022][T15320] ? __pfx_do_mmap+0x10/0x10 [ 571.131036][T15320] ? __pfx_down_write_killable+0x10/0x10 [ 571.131058][T15320] vm_mmap_pgoff+0x29e/0x470 [ 571.131077][T15320] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 571.131093][T15320] ? do_futex+0x192/0x350 [ 571.131110][T15320] ? __pfx_do_futex+0x10/0x10 [ 571.131131][T15320] ksys_mmap_pgoff+0xe1/0x650 [ 571.131155][T15320] ? __x64_sys_futex+0x34f/0x4d0 [ 571.131171][T15320] ? __x64_sys_futex+0x358/0x4d0 [ 571.131189][T15320] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 571.131212][T15320] ? xfd_validate_state+0x129/0x190 [ 571.131239][T15320] __x64_sys_mmap+0x125/0x190 [ 571.131261][T15320] do_syscall_64+0x106/0xf80 [ 571.131277][T15320] ? clear_bhb_loop+0x40/0x90 [ 571.131295][T15320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.131310][T15320] RIP: 0033:0x7f0832b9c629 [ 571.131325][T15320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.131339][T15320] RSP: 002b:00007f0833a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 571.131354][T15320] RAX: ffffffffffffffda RBX: 00007f0832e15fa0 RCX: 00007f0832b9c629 [ 571.131364][T15320] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 571.131373][T15320] RBP: 00007f0832c32b39 R08: 0000000000000002 R09: 0000000000008000 [ 571.131387][T15320] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 571.131396][T15320] R13: 00007f0832e16038 R14: 00007f0832e15fa0 R15: 00007ffe56f85278 [ 571.131417][T15320] [ 571.825388][T15339] FAULT_INJECTION: forcing a failure. [ 571.825388][T15339] name failslab, interval 1, probability 0, space 0, times 0 [ 571.998063][T15339] CPU: 0 UID: 0 PID: 15339 Comm: syz.4.1998 Tainted: G U L syzkaller #0 PREEMPT(full) [ 571.998092][T15339] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 571.998097][T15339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 571.998106][T15339] Call Trace: [ 571.998112][T15339] [ 571.998118][T15339] dump_stack_lvl+0x100/0x190 [ 571.998144][T15339] should_fail_ex.cold+0x5/0xa [ 571.998161][T15339] should_failslab+0xc2/0x120 [ 571.998185][T15339] __kvmalloc_node_noprof+0xfa/0xa00 [ 571.998206][T15339] ? io_alloc_cache_init+0x38/0x170 [ 571.998225][T15339] ? lockdep_set_lock_cmp_fn+0xe0/0xe0 [ 571.998263][T15339] io_alloc_cache_init+0x38/0x170 [ 571.998283][T15339] io_uring_setup.cold+0x409/0x1d09 [ 571.998307][T15339] ? __pfx_io_uring_setup+0x10/0x10 [ 571.998323][T15339] ? do_futex+0x192/0x350 [ 571.998347][T15339] ? __pfx_do_futex+0x10/0x10 [ 571.998363][T15339] ? __pfx_do_sys_openat2+0x10/0x10 [ 571.998390][T15339] ? xfd_validate_state+0x129/0x190 [ 571.998416][T15339] __x64_sys_io_uring_setup+0xc2/0x170 [ 571.998432][T15339] do_syscall_64+0x106/0xf80 [ 571.998448][T15339] ? clear_bhb_loop+0x40/0x90 [ 571.998466][T15339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.998481][T15339] RIP: 0033:0x7f0832b9c629 [ 571.998493][T15339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.998508][T15339] RSP: 002b:00007f08339b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 571.998522][T15339] RAX: ffffffffffffffda RBX: 00007f0832e16360 RCX: 00007f0832b9c629 [ 571.998532][T15339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 571.998540][T15339] RBP: 00007f0832c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 571.998548][T15339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.998556][T15339] R13: 00007f0832e163f8 R14: 00007f0832e16360 R15: 00007ffe56f85278 [ 571.998575][T15339] [ 572.832368][T15343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1994'. [ 573.455092][T15364] zswap: compressor query not available [ 573.631681][T15365] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 573.793400][T15365] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 574.790561][T15409] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2012'. [ 576.058639][T15432] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 576.099853][T15432] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 577.720324][T15469] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 2000000000000 [ 579.559977][T15495] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 579.638006][T15495] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 580.189242][T15493] Process accounting resumed [ 581.414795][T15542] __vm_enough_memory: pid: 15542, comm: syz.1.2043, bytes: 4398046511104 not enough memory for the allocation [ 582.524805][T15554] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 582.585452][T15554] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 582.791056][T15549] warning: `syz.1.2044' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 585.387787][T15597] FAULT_INJECTION: forcing a failure. [ 585.387787][T15597] name fail_futex, interval 1, probability 0, space 0, times 0 [ 585.440529][T15597] CPU: 0 UID: 0 PID: 15597 Comm: syz.1.2056 Tainted: G U L syzkaller #0 PREEMPT(full) [ 585.440558][T15597] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 585.440564][T15597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.440572][T15597] Call Trace: [ 585.440578][T15597] [ 585.440583][T15597] dump_stack_lvl+0x100/0x190 [ 585.440613][T15597] should_fail_ex.cold+0x5/0xa [ 585.440631][T15597] get_futex_key+0x1d2/0x1620 [ 585.440652][T15597] ? __pfx_get_futex_key+0x10/0x10 [ 585.440668][T15597] ? stack_trace_save+0x8e/0xc0 [ 585.440696][T15597] futex_wait_setup+0x81/0x500 [ 585.440722][T15597] __futex_wait+0x19f/0x300 [ 585.440746][T15597] ? __pfx___futex_wait+0x10/0x10 [ 585.440770][T15597] ? __pfx_futex_wake_mark+0x10/0x10 [ 585.440793][T15597] ? futex_hash+0x2c5/0x380 [ 585.440814][T15597] futex_wait+0xed/0x380 [ 585.440835][T15597] ? __pfx_futex_wait+0x10/0x10 [ 585.440860][T15597] ? errseq_sample+0x51/0x70 [ 585.440881][T15597] ? file_init_path+0x48e/0x670 [ 585.440899][T15597] do_futex+0x1ef/0x350 [ 585.440917][T15597] ? __pfx_do_futex+0x10/0x10 [ 585.440934][T15597] ? fd_install+0x223/0x580 [ 585.440958][T15597] __x64_sys_futex+0x34f/0x4d0 [ 585.440977][T15597] ? __sys_socket+0xac/0x260 [ 585.440999][T15597] ? __pfx___x64_sys_futex+0x10/0x10 [ 585.441024][T15597] do_syscall_64+0x106/0xf80 [ 585.441040][T15597] ? clear_bhb_loop+0x40/0x90 [ 585.441058][T15597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.441073][T15597] RIP: 0033:0x7f11a279c629 [ 585.441093][T15597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.441109][T15597] RSP: 002b:00007f11a36ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 585.441124][T15597] RAX: ffffffffffffffda RBX: 00007f11a2a16098 RCX: 00007f11a279c629 [ 585.441135][T15597] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11a2a16098 [ 585.441144][T15597] RBP: 00007f11a2a16090 R08: 0000000000000000 R09: 0000000000000000 [ 585.441153][T15597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.441163][T15597] R13: 00007f11a2a16128 R14: 00007ffd0c83bc00 R15: 00007ffd0c83bce8 [ 585.441183][T15597] [ 587.921457][T15614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78808 [ 587.962304][T15614] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 588.022446][T15614] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 588.077531][T15614] page_type: f5(slab) [ 588.115719][T15614] raw: 00fff00000000040 ffff888140aaa500 dead000000000122 0000000000000000 [ 588.153781][T15614] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 588.203579][T15614] head: 00fff00000000040 ffff888140aaa500 dead000000000122 0000000000000000 [ 588.268078][T15614] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 588.330217][T15614] head: 00fff00000000001 ffffea0001e20201 00000000ffffffff 00000000ffffffff [ 588.384168][T15614] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 588.433993][T15614] page dumped because: unmovable page [ 588.457691][T15614] page_owner tracks the page as allocated [ 588.491407][T15614] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15519, tgid 15516 (syz.1.2039), ts 580488418015, free_ts 578235661025 [ 588.587650][T15614] post_alloc_hook+0x153/0x170 [ 588.610077][T15614] get_page_from_freelist+0x111d/0x3140 [ 588.637078][T15614] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 588.676640][T15614] new_slab+0xa6/0x6d0 [ 588.695852][T15614] refill_objects+0x26b/0x400 [ 588.726147][T15614] __pcs_replace_empty_main+0x19f/0x600 [ 588.748428][T15614] kmem_cache_alloc_node_noprof+0x569/0x6f0 [ 588.781868][T15614] __alloc_skb+0x140/0x710 [ 588.801853][T15614] tipc_buf_acquire+0x26/0xe0 [ 588.826843][T15614] tipc_msg_build+0x112/0x1100 [ 588.856498][T15614] __tipc_sendmsg+0xb68/0x1ae0 [ 588.879182][T15614] tipc_sendmsg+0x4f/0x70 [ 588.902243][T15614] ____sys_sendmsg+0xa54/0xc30 [ 588.919269][T15614] ___sys_sendmsg+0x190/0x1e0 [ 588.945712][T15614] __sys_sendmmsg+0x205/0x430 [ 589.007968][T15614] __x64_sys_sendmmsg+0x9c/0x100 [ 589.013114][T15614] page last free pid 15465 tgid 15465 stack trace: [ 589.053423][T15614] __free_frozen_pages+0x7e1/0x10d0 [ 589.065943][T15614] qlist_free_all+0x47/0xe0 [ 589.087481][T15614] kasan_quarantine_reduce+0x1a0/0x1f0 [ 589.092981][T15614] __kasan_slab_alloc+0x69/0x90 [ 589.135673][T15614] kmem_cache_alloc_noprof+0x241/0x6e0 [ 589.165804][T15614] alloc_buffer_head+0x21/0x140 [ 589.186283][T15614] folio_alloc_buffers+0x2a0/0x8f0 [ 589.202051][T15614] create_empty_buffers+0x3a/0x660 [ 589.222310][T15614] folio_create_buffers+0x13b/0x1a0 [ 589.238541][T15614] __block_write_begin_int+0x393/0x19c0 [ 589.244122][T15614] block_page_mkwrite+0x436/0x570 [ 589.295293][T15614] ext4_page_mkwrite+0xed9/0x1980 [ 589.313624][T15614] do_page_mkwrite+0x17a/0x440 [ 589.326363][T15614] do_fault+0x3d7/0x1950 [ 589.343666][T15614] __handle_mm_fault+0x180f/0x2b60 [ 589.356442][T15614] handle_mm_fault+0x36d/0xa20 [ 589.421482][T15656] ptp ptp0: only physical clock in use now [ 590.733709][ T29] audit: type=1326 audit(1771715762.452:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15674 comm="syz.0.2069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f596059c629 code=0x0 [ 592.931424][T15709] FAULT_INJECTION: forcing a failure. [ 592.931424][T15709] name failslab, interval 1, probability 0, space 0, times 0 [ 593.030527][T15709] CPU: 0 UID: 0 PID: 15709 Comm: syz.1.2076 Tainted: G U L syzkaller #0 PREEMPT(full) [ 593.030555][T15709] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 593.030561][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 593.030570][T15709] Call Trace: [ 593.030574][T15709] [ 593.030580][T15709] dump_stack_lvl+0x100/0x190 [ 593.030606][T15709] should_fail_ex.cold+0x5/0xa [ 593.030623][T15709] should_failslab+0xc2/0x120 [ 593.030646][T15709] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 593.030666][T15709] ? alloc_empty_file+0x55/0x1c0 [ 593.030682][T15709] ? __pfx_stack_trace_save+0x10/0x10 [ 593.030708][T15709] alloc_empty_file+0x55/0x1c0 [ 593.030724][T15709] path_openat+0xe8/0x31a0 [ 593.030746][T15709] ? kasan_save_stack+0x3f/0x50 [ 593.030766][T15709] ? kasan_save_stack+0x30/0x50 [ 593.030785][T15709] ? kasan_save_track+0x14/0x30 [ 593.030803][T15709] ? __kasan_slab_alloc+0x89/0x90 [ 593.030824][T15709] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 593.030843][T15709] ? do_getname+0x35/0x390 [ 593.030857][T15709] ? do_sys_openat2+0xc5/0x1e0 [ 593.030874][T15709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.030891][T15709] ? __pfx_path_openat+0x10/0x10 [ 593.030920][T15709] do_file_open+0x20e/0x430 [ 593.030944][T15709] ? __pfx_do_file_open+0x10/0x10 [ 593.030987][T15709] ? alloc_fd+0x476/0x790 [ 593.031012][T15709] ? do_getname+0x191/0x390 [ 593.031029][T15709] do_sys_openat2+0x10d/0x1e0 [ 593.031046][T15709] ? __pfx_do_sys_openat2+0x10/0x10 [ 593.031062][T15709] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 593.031082][T15709] ? __fget_files+0x21f/0x3d0 [ 593.031106][T15709] __x64_sys_openat+0x12d/0x210 [ 593.031123][T15709] ? __pfx___x64_sys_openat+0x10/0x10 [ 593.031139][T15709] ? ksys_write+0x1ac/0x250 [ 593.031166][T15709] do_syscall_64+0x106/0xf80 [ 593.031181][T15709] ? clear_bhb_loop+0x40/0x90 [ 593.031199][T15709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.031213][T15709] RIP: 0033:0x7f11a279c629 [ 593.031226][T15709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.031240][T15709] RSP: 002b:00007f11a3710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 593.031255][T15709] RAX: ffffffffffffffda RBX: 00007f11a2a15fa0 RCX: 00007f11a279c629 [ 593.031264][T15709] RDX: 0000000000042000 RSI: 0000200000001140 RDI: ffffffffffffff9c [ 593.031273][T15709] RBP: 00007f11a3710090 R08: 0000000000000000 R09: 0000000000000000 [ 593.031282][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.031290][T15709] R13: 00007f11a2a16038 R14: 00007f11a2a15fa0 R15: 00007ffd0c83bce8 [ 593.031309][T15709] [ 595.580993][T15743] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 595.684114][T15743] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 595.844804][T15753] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2085'. [ 596.516988][T15758] Invalid ELF header magic: != ELF [ 597.239938][T15771] vivid-001: ================= START STATUS ================= [ 597.278346][T15771] vivid-001: Enable Output Cropping: true [ 597.311556][T15771] vivid-001: Enable Output Composing: true [ 597.317477][T15771] vivid-001: Enable Output Scaler: true [ 597.382715][T15773] raw_sendmsg: syz.4.2090 forgot to set AF_INET. Fix it! [ 597.413220][T15771] vivid-001: Tx RGB Quantization Range: Automatic [ 597.419713][T15771] vivid-001: Transmit Mode: HDMI [ 597.513998][T15771] vivid-001: Hotplug Present: 0x00000000 [ 597.558865][T15771] vivid-001: RxSense Present: 0x00000000 [ 597.613558][T15771] vivid-001: EDID Present: 0x00000000 [ 597.667138][T15771] vivid-001: ================== END STATUS ================== [ 600.473116][T15832] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2105'. [ 602.054079][ T29] audit: type=1804 audit(1771715773.756:21): pid=15850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2109" name="/newroot/509/file0" dev="tmpfs" ino=2701 res=1 errno=0 [ 602.147530][T15850] FAULT_INJECTION: forcing a failure. [ 602.147530][T15850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.320531][T15850] CPU: 0 UID: 0 PID: 15850 Comm: syz.0.2109 Tainted: G U L syzkaller #0 PREEMPT(full) [ 602.320562][T15850] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 602.320567][T15850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 602.320576][T15850] Call Trace: [ 602.320581][T15850] [ 602.320588][T15850] dump_stack_lvl+0x100/0x190 [ 602.320614][T15850] should_fail_ex.cold+0x5/0xa [ 602.320631][T15850] _copy_from_user+0x2e/0xd0 [ 602.320654][T15850] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 602.320687][T15850] snd_rawmidi_write+0x2dc/0xc60 [ 602.320714][T15850] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 602.320736][T15850] ? common_file_perm+0x1ab/0x4f0 [ 602.320758][T15850] ? __pfx_default_wake_function+0x10/0x10 [ 602.320783][T15850] ? bpf_lsm_file_permission+0x9/0x10 [ 602.320804][T15850] ? security_file_permission+0x76/0x210 [ 602.320828][T15850] ? rw_verify_area+0xce/0x6d0 [ 602.320849][T15850] vfs_write+0x2aa/0x1070 [ 602.320875][T15850] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 602.320899][T15850] ? __pfx_vfs_write+0x10/0x10 [ 602.320919][T15850] ? find_held_lock+0x2b/0x80 [ 602.320941][T15850] ? __fget_files+0x215/0x3d0 [ 602.320961][T15850] ? __fget_files+0x215/0x3d0 [ 602.320985][T15850] ? __fget_files+0x21f/0x3d0 [ 602.321011][T15850] ksys_write+0x1f8/0x250 [ 602.321031][T15850] ? __pfx_ksys_write+0x10/0x10 [ 602.321057][T15850] do_syscall_64+0x106/0xf80 [ 602.321073][T15850] ? clear_bhb_loop+0x40/0x90 [ 602.321091][T15850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.321106][T15850] RIP: 0033:0x7f596059c629 [ 602.321121][T15850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.321135][T15850] RSP: 002b:00007f596146b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 602.321149][T15850] RAX: ffffffffffffffda RBX: 00007f5960816090 RCX: 00007f596059c629 [ 602.321159][T15850] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 000000000000000c [ 602.321167][T15850] RBP: 00007f5960632b39 R08: 0000000000000000 R09: 0000000000000000 [ 602.321176][T15850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.321184][T15850] R13: 00007f5960816128 R14: 00007f5960816090 R15: 00007ffd8726f098 [ 602.321203][T15850] [ 602.949508][T15857] zswap: compressor 3PZvvĀ3 ֨@QA xmr>σ not available [ 603.106890][T15859] zswap: compressor query not available [ 603.517914][T15868] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2112'. [ 604.390267][T15896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2119'. [ 605.835461][T15926] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 605.852652][T15926] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 606.352398][T15940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2131'. [ 607.770408][T15970] ------------[ cut here ]------------ [ 607.776088][T15970] !list_empty(&local->chanctx_list) [ 607.776105][T15970] WARNING: net/mac80211/pm.c:171 at __ieee80211_suspend+0x10b5/0x1310, CPU#0: syz.1.2137/15970 [ 607.791701][T15970] Modules linked in: [ 607.795780][T15970] CPU: 0 UID: 0 PID: 15970 Comm: syz.1.2137 Tainted: G U L syzkaller #0 PREEMPT(full) [ 607.807388][T15970] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 607.812565][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.823131][T15970] RIP: 0010:__ieee80211_suspend+0x10b5/0x1310 [ 607.829893][T15970] Code: 0f 0b 90 e9 64 f8 ff ff e8 e8 78 e3 f6 90 0f 0b 90 e9 0e f7 ff ff e8 da 78 e3 f6 90 0f 0b 90 e9 68 f6 ff ff e8 cc 78 e3 f6 90 <0f> 0b 90 e9 50 fc ff ff e8 be 78 e3 f6 48 8b 54 24 10 48 b8 00 00 [ 607.849661][T15970] RSP: 0018:ffffc90004957c30 EFLAGS: 00010283 [ 607.855765][T15970] RAX: 0000000000005f85 RBX: ffff88805dfc2b10 RCX: ffffc90005ae2000 [ 607.863727][T15970] RDX: 0000000000080000 RSI: ffffffff8b248234 RDI: ffff88801e343c80 [ 607.871739][T15970] RBP: ffff88805dfc0e80 R08: 0000000000000001 R09: 0000000000000000 [ 607.879923][T15970] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 607.887997][T15970] R13: ffffed100bbf81d9 R14: ffff88805dfc2910 R15: 0000000000000001 [ 607.896055][T15970] FS: 00007f11a37106c0(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 607.905596][T15970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.912354][T15970] CR2: 0000001b34ad2ff8 CR3: 00000000870d2000 CR4: 00000000003526f0 [ 607.920758][T15970] Call Trace: [ 607.924119][T15970] [ 607.927100][T15970] reset_write+0x7a/0x290 [ 607.931425][T15970] short_proxy_write+0x133/0x1a0 [ 607.936408][T15970] vfs_write+0x2aa/0x1070 [ 607.940731][T15970] ? __pfx_short_proxy_write+0x10/0x10 [ 607.946250][T15970] ? __pfx_vfs_write+0x10/0x10 [ 607.951006][T15970] ? find_held_lock+0x2b/0x80 [ 607.955720][T15970] ? __fget_files+0x215/0x3d0 [ 607.960389][T15970] ? __fget_files+0x215/0x3d0 [ 607.965060][T15970] ? __fget_files+0x21f/0x3d0 [ 607.969770][T15970] __x64_sys_pwrite64+0x1eb/0x250 [ 607.974788][T15970] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 607.980545][T15970] do_syscall_64+0x106/0xf80 [ 607.985124][T15970] ? clear_bhb_loop+0x40/0x90 [ 607.989840][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.995751][T15970] RIP: 0033:0x7f11a279c629 [ 608.000155][T15970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.020481][T15970] RSP: 002b:00007f11a3710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 608.029237][T15970] RAX: ffffffffffffffda RBX: 00007f11a2a15fa0 RCX: 00007f11a279c629 [ 608.037293][T15970] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000008 [ 608.045261][T15970] RBP: 00007f11a2832b39 R08: 0000000000000000 R09: 0000000000000000 [ 608.053321][T15970] R10: 4200000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 608.061625][T15970] R13: 00007f11a2a16038 R14: 00007f11a2a15fa0 R15: 00007ffd0c83bce8 [ 608.069669][T15970] [ 608.072706][T15970] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 608.079980][T15970] CPU: 0 UID: 0 PID: 15970 Comm: syz.1.2137 Tainted: G U L syzkaller #0 PREEMPT(full) [ 608.090906][T15970] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 608.096101][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 608.106147][T15970] Call Trace: [ 608.109428][T15970] [ 608.112341][T15970] dump_stack_lvl+0x100/0x190 [ 608.117012][T15970] vpanic+0x552/0x970 [ 608.120979][T15970] ? __pfx_vpanic+0x10/0x10 [ 608.125470][T15970] panic+0xd1/0xe0 [ 608.129209][T15970] ? __pfx_panic+0x10/0x10 [ 608.133641][T15970] check_panic_on_warn.cold+0x19/0x34 [ 608.139014][T15970] ? __ieee80211_suspend+0x10b5/0x1310 [ 608.144476][T15970] __warn.cold+0x191/0x348 [ 608.148879][T15970] __report_bug+0x296/0x3d0 [ 608.153372][T15970] ? __ieee80211_suspend+0x10b5/0x1310 [ 608.159277][T15970] ? __pfx___report_bug+0x10/0x10 [ 608.164305][T15970] ? dput.part.0+0xdd/0x570 [ 608.168799][T15970] ? dput+0x24/0x30 [ 608.172600][T15970] ? __debugfs_create_file+0x400/0x4f0 [ 608.178050][T15970] ? debugfs_create_file_short+0x41/0x60 [ 608.183673][T15970] ? __ieee80211_suspend+0x10b5/0x1310 [ 608.189135][T15970] report_bug+0xb2/0x220 [ 608.193382][T15970] ? __ieee80211_suspend+0x10b5/0x1310 [ 608.198839][T15970] handle_bug+0x166/0x2a0 [ 608.203165][T15970] exc_invalid_op+0x17/0x50 [ 608.207658][T15970] asm_exc_invalid_op+0x1a/0x20 [ 608.212496][T15970] RIP: 0010:__ieee80211_suspend+0x10b5/0x1310 [ 608.218551][T15970] Code: 0f 0b 90 e9 64 f8 ff ff e8 e8 78 e3 f6 90 0f 0b 90 e9 0e f7 ff ff e8 da 78 e3 f6 90 0f 0b 90 e9 68 f6 ff ff e8 cc 78 e3 f6 90 <0f> 0b 90 e9 50 fc ff ff e8 be 78 e3 f6 48 8b 54 24 10 48 b8 00 00 [ 608.238140][T15970] RSP: 0018:ffffc90004957c30 EFLAGS: 00010283 [ 608.244193][T15970] RAX: 0000000000005f85 RBX: ffff88805dfc2b10 RCX: ffffc90005ae2000 [ 608.252599][T15970] RDX: 0000000000080000 RSI: ffffffff8b248234 RDI: ffff88801e343c80 [ 608.260619][T15970] RBP: ffff88805dfc0e80 R08: 0000000000000001 R09: 0000000000000000 [ 608.268597][T15970] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 608.276559][T15970] R13: ffffed100bbf81d9 R14: ffff88805dfc2910 R15: 0000000000000001 [ 608.284519][T15970] ? __ieee80211_suspend+0x10b4/0x1310 [ 608.289979][T15970] reset_write+0x7a/0x290 [ 608.294302][T15970] short_proxy_write+0x133/0x1a0 [ 608.299234][T15970] vfs_write+0x2aa/0x1070 [ 608.303555][T15970] ? __pfx_short_proxy_write+0x10/0x10 [ 608.309007][T15970] ? __pfx_vfs_write+0x10/0x10 [ 608.313874][T15970] ? find_held_lock+0x2b/0x80 [ 608.318566][T15970] ? __fget_files+0x215/0x3d0 [ 608.323267][T15970] ? __fget_files+0x215/0x3d0 [ 608.327955][T15970] ? __fget_files+0x21f/0x3d0 [ 608.332757][T15970] __x64_sys_pwrite64+0x1eb/0x250 [ 608.337795][T15970] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 608.343355][T15970] do_syscall_64+0x106/0xf80 [ 608.347936][T15970] ? clear_bhb_loop+0x40/0x90 [ 608.352601][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.358476][T15970] RIP: 0033:0x7f11a279c629 [ 608.362876][T15970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.382488][T15970] RSP: 002b:00007f11a3710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 608.390895][T15970] RAX: ffffffffffffffda RBX: 00007f11a2a15fa0 RCX: 00007f11a279c629 [ 608.398865][T15970] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000008 [ 608.406835][T15970] RBP: 00007f11a2832b39 R08: 0000000000000000 R09: 0000000000000000 [ 608.414857][T15970] R10: 4200000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 608.422841][T15970] R13: 00007f11a2a16038 R14: 00007f11a2a15fa0 R15: 00007ffd0c83bce8 [ 608.430822][T15970] [ 608.433905][T15970] Kernel Offset: disabled [ 608.438250][T15970] Rebooting in 86400 seconds..