last executing test programs: 12.210902018s ago: executing program 2 (id=792): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)='-7', 0xfffffc49) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x121582, 0x0) fsmount$auto(r2, 0x4, 0x2) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff, 0xfffffffffffffffb}, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0x200, &(0x7f0000000740)={&(0x7f0000000700), 0xf}, 0x400, 0x0, 0xe, 0x466d}, 0x6) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000002080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002040)={&(0x7f00000020c0)={0x151c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x12a7, 0x6e, 0x0, 0x1, [@typed={0x8, 0x169, 0x0, 0x0, @uid=0xee01}, @nested={0x2d, 0x4f, 0x0, 0x1, [@generic="0ee823346cf821bb6aa3b1b4a3c97e711d3be9c406eafeaa7d3e07b78874139b8661c9cf1d", @nested={0x4, 0x7d}]}, @generic="9f5d908f8d6190dcc73f9b3b9020814384f90b297501b2bf863ded74525316647526fc2235572811dec4d439e4938da1ef844288dd8a055bd949a9c9480cbdae8bf6ae2465870c3706ef3934ad1dc216328ee574913be3c5da85", @nested={0xc2, 0x102, 0x0, 0x1, [@generic="ddb4d3647833fa260e388e1915d9f1a01ad30a125df990024d0698f7b3fa49ec01a99d73da14e3ca2c6df3a2003d8c6c4d9e973a29b7008752e1a878039cba01296d57d4f6f5c9cc7984833c3543b97347575c01e543abba1c2e28b3ff74ee4149f220770d32290f8ef57c93ec9192a212c3af0c5d8d5200d9ce35d593507d8e9699f812766f657ad180b11a08d1578993b4587b29fc0efc1e38f9fd40a12616cf5d70c7a5d037673698e81dc435d7968fc51a1489ee11b3ed3bdd887178"]}, @nested={0x79, 0x90, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @u32}, @generic="c70e1dab1540f7a273f17eb38685fa4522694c88218458e5bbfb58e72d05332546ae19c953df1441f45eee831561608773add61004a7f95c79071853d43a0d84c00718374eb5aecf7d8776a02382fecd8dcb98b51168d5d380ece6f3a833353d7a2ceef61b", @nested={0x4, 0x27}, @nested={0x4, 0x6e}]}, @generic="2b88dc205c86ba823fcee65791aa0c10cbc4dd47857a97a67b7f315251167dc9737e446ed61ef44636b001fe8433ec4ef16937822b40efe6769947853b934d1d814428004a5c73be8a1ac186d75b74945e0b96b0ee6904d8e43a54eb87485f83cbc6136d39327701af8cbb8a09932138f7b66e2b86908f1ef9", @generic="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", @nested={0x44, 0x64, 0x0, 0x1, [@generic="87a30cb97c98582834eb34b250d670574925d5792f3054e4683434042b5b85468550e9f23c701b775759ec0cff1fb8d4da7080f5cf9a3b2c4ff27002", @nested={0x4, 0xeb}]}, @nested={0x111, 0x3f, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x8, 0x32, 0x0, 0x0, @str='(,]\x00'}, @generic="4924ef42934dba0fd6610700c5597b8369c7271001adc6897b06e8cb5f8a09c6e7eee365f98176161c200ec2488d9b7b0b9810343d60d428f67738e22e3d69f4bdced072da3492eaa3d5af00bc9fad787b63be00a65c4727b33f056c0d59c7a7ca8a3a049d53baaacc91e536a368d7d334048bb32ddae59529d7a6473e9bae057567a7496cd3f0818f9b168840e027e16c8ec64e1c478d431128a71a1b2ed5bc8bb5bdfdafb1c9457d27b55ea043486fd7024f495506e24361d194a94af35b902e07c4184facbc7d68eae45d3a19ce6d196b6dd801f173a0b671d8f33082eb654611dff658fadc4421ef0402db0df77dd52b79aff5e3d85f99", @generic, @typed={0x4, 0x1a}, @nested={0x4, 0x44}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, "10112cf7e6a9887b170f"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x2d, 0xbd, "803e22b76af2559e0967bd4bbc3239ad07992c712f4345d577a843049ea119393a42af28597e9170c9"}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_MLO_TTLM_ULINK={0x82, 0x149, "310c61dce5095f7dda50691fe4e9a441d47458036484a2d02f7a1b14935260973794e688e9005860b0bc063cbf7f32c854f2ff6496b1236472760bb0ed024863b3e6bb26b787027ca071fa5fe3846562d9cc6d8d79c07ced14c72b10b5df502a77baf513f408a0d46254c90e7a266cec7f034bc4456c44a7062d60a29be5"}, @NL80211_ATTR_PMKID={0xc5, 0x55, "7a60f58f6142931a3e99af94d20111b06d62bf99fadbe172ba469b6249eaeeee65904eb86c0823811262f65e6b37e7928c7b1649a0a43d1ef75feca1fb171e0a2d947ad0c07bbbddbddc1c4df053eb44ea31b9ffe00e1668fa5eb130f04d0edd25f2069f0d9d8929c787b78325fd5815d1caedbd60c77e53d8cf749ac0468565c9572ff4430f74e85a43a565c27a7b39df3553b484bd94caf07993ee342f05860a299cf17cecf784fe78b09bb1060100f357d95951235dbcae9773634a3f574675"}, @NL80211_ATTR_BSSID={0xbe, 0xf5, "2ca0f2042470aa6390513136f86078d0941a331c699f65d998433cf1d85055800ef157474ad4d35403fb52c9761565e5729cde4034962b010b555952b2b98af00e27d6f52576eab1a468c24f5c375b8895dfb8e61c4f881b1f59eadf75b1d03a3f15c66e3d5d14ba074da6a5e871a42142ed3a887f26c6b52cc631d57c20c6393a4a4699ec8dd4a39b9ac375464cbe9946cb092182e295293dcf45cbc0b85c5124212d6a322b21e4ceba022a7cd8ebdb3b1e6a5341f13d25152b"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x151c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x24004880) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac2afb36", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008890}, 0x4000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tee$auto(r2, r5, 0x0, 0x5) r6 = prctl$auto_PR_SET_MM_ENV_END(0x40, 0xb, 0x0, 0x6, 0xb) r7 = fcntl$auto_F_UNLCK(r6, 0x5c5, 0x2) write$auto_hwsim_fops_rx_rssi_(r7, &(0x7f0000000000), 0x0) 12.020791279s ago: executing program 0 (id=794): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) migrate_pages$auto(0x0, 0x8, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40440, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\\', @ANYRES16=r2, @ANYBLOB="010029bd7000f7dbdf2503000000180001801400020073797a5f74756e00000000000000000005000300b30000000500020000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0xc840) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmmsg$auto(r0, 0x0, 0x100009a9, 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x480, 0x1b2) sendfile$auto(r1, 0x3, 0x0, 0xfffffdef) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0xfffffffe) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) 10.923161127s ago: executing program 1 (id=795): r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001040), r0) shmctl$auto_IPC_STAT(0x80000001, 0x2, &(0x7f0000001240)={{0x5fbdc4f7, 0x0, 0xee00, 0xc, 0x4, 0x8, 0x2}, 0x6, 0x6, 0x2, 0x8000000000000000, @inferred, @inferred, 0x4, 0x0, &(0x7f0000001080)="2a71dca6972ebf531527ebd67822783c2e0a994057f5c7d1a5f12a495abfdc92252ed8e627c9ca2911929b2ee255d8b1f1667261686eecf310a6afadf2866f9946397b197fed7763c6cb16940f3d84035c3c52b5082f2e0ef2a7f8bf46962ff575315bfe7a63aca59acdf2b9841e6c9345bd5679ce7fd9da2c5c3f104a6aa717ed2e547b8f8514b9847c3adaff34d99b9faa666950a31a8885f0cc77bb59970b7570dfa4d9a0f2cb1d0b3116fef78785c5a0e26ac26ea28f6069e61a3f64e28c68795289d1c13cfcf2c7b32c1e283c3d37cc13b9767f8aaf", &(0x7f0000001180)="b811f6e790d437fc82e4aaff2c64bdabfdbea1ff9e7a26d80ae5a442bc624ff20d0baa75d746e7fba7c3bdcdc61c0571aa5fbb34638d082edc6ef64dea9dd304ff1d4ea7c5265cbde37d2ded8581493a10e9c9bb321c726385899372339c9503ae75469d128b997fa0ad1eaf2079ef53517634106972b72529af376ba70ed04ec7908e55b96688b3fa863523928efedf220c7623355fb1d1cae3074d08c156508b686dbba3"}) (async) shmctl$auto_IPC_STAT(0x80000001, 0x2, &(0x7f0000001240)={{0x5fbdc4f7, 0x0, 0xee00, 0xc, 0x4, 0x8, 0x2}, 0x6, 0x6, 0x2, 0x8000000000000000, @inferred, @inferred, 0x4, 0x0, &(0x7f0000001080)="2a71dca6972ebf531527ebd67822783c2e0a994057f5c7d1a5f12a495abfdc92252ed8e627c9ca2911929b2ee255d8b1f1667261686eecf310a6afadf2866f9946397b197fed7763c6cb16940f3d84035c3c52b5082f2e0ef2a7f8bf46962ff575315bfe7a63aca59acdf2b9841e6c9345bd5679ce7fd9da2c5c3f104a6aa717ed2e547b8f8514b9847c3adaff34d99b9faa666950a31a8885f0cc77bb59970b7570dfa4d9a0f2cb1d0b3116fef78785c5a0e26ac26ea28f6069e61a3f64e28c68795289d1c13cfcf2c7b32c1e283c3d37cc13b9767f8aaf", &(0x7f0000001180)="b811f6e790d437fc82e4aaff2c64bdabfdbea1ff9e7a26d80ae5a442bc624ff20d0baa75d746e7fba7c3bdcdc61c0571aa5fbb34638d082edc6ef64dea9dd304ff1d4ea7c5265cbde37d2ded8581493a10e9c9bb321c726385899372339c9503ae75469d128b997fa0ad1eaf2079ef53517634106972b72529af376ba70ed04ec7908e55b96688b3fa863523928efedf220c7623355fb1d1cae3074d08c156508b686dbba3"}) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000001740)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001700)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc440000", @ANYRES16=r1, @ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) r2 = io_uring_setup$auto(0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(r3, 0x2, r2, 0x0) (async) epoll_ctl$auto(r3, 0x2, r2, 0x0) socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0xf4, 0x7, 0x28000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket(0x11, 0x80003, 0x300) (async) r4 = socket(0x11, 0x80003, 0x300) sendmmsg$auto(r4, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x5e8}, 0x7, 0x0, 0x5, 0x1060}, 0xe}, 0x5, 0x1) (async) sendmmsg$auto(r4, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x5e8}, 0x7, 0x0, 0x5, 0x1060}, 0xe}, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) (async) r6 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r0, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r6, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) io_uring_enter$auto(r5, 0xd, 0x5f3, 0x203, 0x0, 0x2) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6b) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) 9.721712031s ago: executing program 2 (id=797): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, 0x0, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) semget$auto(0x1000, 0x3, 0x4) r3 = socket(0x2, 0x80002, 0x73) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, &(0x7f0000000100)="69da2ad4", 0x4) bind$auto(r3, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x6b) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) open(0x0, 0x22240, 0x154) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x5, 0x5, 0x1007181, 0x8a0d, 0x8, 0xfffffffffffffffb, 0x7ff, 0x89, 0x26, 0x4, 0x200000080001, 0x20384, 0xfffffffffffffff4, 0x8, 0x4, 0x20000030, 0x0, 0x2b8, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x800, 0x3b232dd1, 0x0, 0x0, 0x0, 0x200000000000008, 0x0, 0x6, 0x0, 0x8000000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x9, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000100)=0x296) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x2282, 0x0) ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000000)=0x9) 9.498977995s ago: executing program 0 (id=798): close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000100)=""/92, 0x5c) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0xeb66) connect$auto(0x3, 0x0, 0x51) write$auto(r2, 0x0, 0x800000006) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000180)="dd06d1") sendfile$auto(0x3, r1, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xc048aeca, 0x0) modify_ldt$auto(0x11, 0x0, 0x10) read$auto(0x3, 0x0, 0x80) 8.167291045s ago: executing program 1 (id=799): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x60580, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6a9c1, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0x7, &(0x7f0000000100)={@siginfo_0_0={0x4, 0x401, 0x5, @_sigfault={&(0x7f0000000000)="47855a7dca27db634926085db0403b6581cae234c2c570a7f41bed9ecf357cd9e0104f02d59a5750eb34bfb085a98a080668a92901a40e5b6ec66c7b6ac927f0dc6c72b9a2f4b3910be4d7854dc1989cac80", @_addr_pkey={"16994afc2c370f82", 0xd}}}}, 0x1) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x5, 0x0) (async) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55) (async) io_uring_setup$auto(0x1, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x60580, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6a9c1, 0x0) (async) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) (async) unshare$auto(0x40000080) (async) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0x7, &(0x7f0000000100)={@siginfo_0_0={0x4, 0x401, 0x5, @_sigfault={&(0x7f0000000000)="47855a7dca27db634926085db0403b6581cae234c2c570a7f41bed9ecf357cd9e0104f02d59a5750eb34bfb085a98a080668a92901a40e5b6ec66c7b6ac927f0dc6c72b9a2f4b3910be4d7854dc1989cac80", @_addr_pkey={"16994afc2c370f82", 0xd}}}}, 0x1) (async) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) (async) 7.923481466s ago: executing program 3 (id=800): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/driver_override\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0x1e0240, 0x0) read$auto(r1, 0x0, 0x85) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) r2 = socket(0xa, 0xa, 0x3) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x30, 0x0, 0x8f) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) setrlimit$auto(0x1000000007, 0x0) fsopen$auto(&(0x7f00000001c0)='nfsd\x00', 0x1) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/geneve0/drop_unicast_in_l2_multicast\x00', 0xc1e13b61f74943c7, 0x0) sendfile$auto(r3, r3, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x21, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x101, 0x1, 0x0, 0x1, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000006400)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r5, 0x0, 0xfffffdef) mseal$auto(0x0, 0x7dda, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(r4, &(0x7f000000ac80)='\x00', 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/rx-12/rps_flow_cnt\x00', 0xc0082, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) sendfile$auto(r6, r6, 0x0, 0x1) 7.9154787s ago: executing program 0 (id=801): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram7\x00', 0x48203, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x8) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x402, 0x0) r3 = prctl$auto(0x7, 0x71, 0x0, 0xffffffffffffff8c, 0x4) fcntl$auto_F_ADD_SEALS(r3, 0x409, 0x7fff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r1) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x840) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x420001, 0x0) setsockopt$auto_SO_BSDCOMPAT(r5, 0xfe6, 0xe, &(0x7f00000000c0)='vcan0\x00', 0xe) close_range$auto(0x2, 0x8, 0x0) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x8) 5.826881922s ago: executing program 2 (id=802): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0xe4a, 0x4, 0x14) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x100000c, 0x8000000000df, 0x9b70, r0, 0x7fff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x440, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x1}, 0x9) mmap$auto(0x0, 0x3, 0x1000000000001, 0x11, r1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) r3 = socket$nl_generic(0x11, 0x3, 0x10) bpf$auto(0x9, &(0x7f0000000a40)=@prog_bind_map={r3, r2, 0x2f}, 0x121) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kexec_load$auto(0x0, 0x2, 0x0, 0x1000000000004) setfsgid$auto(0x0) r6 = socket(0xa, 0x801, 0x400081) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, 0x0, 0x501, 0x70bd2b, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) msgctl$auto_MSG_STAT_ANY(0xa23, 0xd, &(0x7f0000000180)={{0x0, 0xee00, 0x0, 0xb7, 0x5, 0xffff, 0x4}, 0x0, 0x0, 0x3, 0x1, 0x1, 0x3, 0xc, 0x2, 0x6, 0x2, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) r8 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r8, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="00020000", @ANYRES8=r4, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="0600980001010000"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x200408d4) ioctl$auto_SW_SYNC_GET_DEADLINE(r0, 0xc0105702, &(0x7f0000000080)={0x5, 0x0, r5}) 5.649021357s ago: executing program 0 (id=803): r0 = socket(0x1d, 0x3, 0x1) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) clone$auto(0x2, 0xb, 0x0, 0x0, 0x2000000000001) ioperm$auto(0x7, 0x6, 0x80) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x10800) pwrite64$auto(0xc8, &(0x7f00000000c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06s\x1cJ\x99\x06\x00^:\x00!\r>\x94\x02\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x81) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) utime$auto(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/thread-self/ns/cgroup\x00', 0x800, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000080), 0x6b) listen$auto(0x3, 0x81) open_by_handle_at$auto(r3, &(0x7f0000005e00)={0x10, 0x3ffff, "ceaa24796e00"/16}, 0x80000001) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(r4, 0x0, 0x80000000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='A#XB', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000b8008001c"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0xfffffffc, &(0x7f0000000100)={&(0x7f0000000080), 0x200fbe}, 0x9, &(0x7f00000001c0), 0x1400000000, 0xa505}, 0x400800}, 0x4, 0x4008) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 5.581282081s ago: executing program 3 (id=804): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/sessionid\x00', 0x0, 0x0) readv$auto(r3, &(0x7f0000000240)={&(0x7f0000000200), 0x9}, 0x4) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) r5 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000240)="7122a0", 0x40000000001243}, 0x1, 0x0) getsockopt$auto(r5, 0xcb, 0x7d, 0x0, 0x0) sendto$auto(r1, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r4}, 0x36) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r8 = socket(0x2, 0x80002, 0x73) getsockopt$auto_SO_INCOMING_CPU(r8, 0x0, 0x31, &(0x7f0000000080)=']]\x00', &(0x7f00000000c0)=0x9) r9 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r5, r0, &(0x7f0000000280)=0x9, 0x24a) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r9, 0x301, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_SCOPE={0x4, 0x4, 0x10}, @NETDEV_A_QSTATS_IFINDEX={0x8}]}, 0x28}, 0x1, 0x1c00, 0x0, 0x80}, 0x8000) r11 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, r11, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r13, r12, 0x8, 0x1, 0xffffffffffffffff, @relative_id=0x8, 0xe600}, 0xf) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_DEV_GET(r14, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NETDEV_A_DEV_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r13}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r13}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040400) 5.155066266s ago: executing program 1 (id=805): r0 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x12100, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020209, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) unshare$auto(0x40000080) mmap$auto(0x10, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x6) unshare$auto(0x3) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) read$auto(r3, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) fcntl$auto(0x3, 0xfffffffd, 0x0) write$auto(0x3, 0x0, 0xfffffdf9) 4.588223545s ago: executing program 0 (id=806): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)='-7', 0xfffffc49) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x121582, 0x0) fsmount$auto(r2, 0x4, 0x2) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff, 0xfffffffffffffffb}, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0x200, &(0x7f0000000740)={&(0x7f0000000700), 0xf}, 0x400, 0x0, 0xe, 0x466d}, 0x6) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000002080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002040)={&(0x7f00000020c0)={0x151c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x12a7, 0x6e, 0x0, 0x1, [@typed={0x8, 0x169, 0x0, 0x0, @uid=0xee01}, @nested={0x2d, 0x4f, 0x0, 0x1, [@generic="0ee823346cf821bb6aa3b1b4a3c97e711d3be9c406eafeaa7d3e07b78874139b8661c9cf1d", @nested={0x4, 0x7d}]}, @generic="9f5d908f8d6190dcc73f9b3b9020814384f90b297501b2bf863ded74525316647526fc2235572811dec4d439e4938da1ef844288dd8a055bd949a9c9480cbdae8bf6ae2465870c3706ef3934ad1dc216328ee574913be3c5da85", @nested={0xc2, 0x102, 0x0, 0x1, [@generic="ddb4d3647833fa260e388e1915d9f1a01ad30a125df990024d0698f7b3fa49ec01a99d73da14e3ca2c6df3a2003d8c6c4d9e973a29b7008752e1a878039cba01296d57d4f6f5c9cc7984833c3543b97347575c01e543abba1c2e28b3ff74ee4149f220770d32290f8ef57c93ec9192a212c3af0c5d8d5200d9ce35d593507d8e9699f812766f657ad180b11a08d1578993b4587b29fc0efc1e38f9fd40a12616cf5d70c7a5d037673698e81dc435d7968fc51a1489ee11b3ed3bdd887178"]}, @nested={0x79, 0x90, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @u32}, @generic="c70e1dab1540f7a273f17eb38685fa4522694c88218458e5bbfb58e72d05332546ae19c953df1441f45eee831561608773add61004a7f95c79071853d43a0d84c00718374eb5aecf7d8776a02382fecd8dcb98b51168d5d380ece6f3a833353d7a2ceef61b", @nested={0x4, 0x27}, @nested={0x4, 0x6e}]}, @generic="2b88dc205c86ba823fcee65791aa0c10cbc4dd47857a97a67b7f315251167dc9737e446ed61ef44636b001fe8433ec4ef16937822b40efe6769947853b934d1d814428004a5c73be8a1ac186d75b74945e0b96b0ee6904d8e43a54eb87485f83cbc6136d39327701af8cbb8a09932138f7b66e2b86908f1ef9", @generic="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", @nested={0x44, 0x64, 0x0, 0x1, [@generic="87a30cb97c98582834eb34b250d670574925d5792f3054e4683434042b5b85468550e9f23c701b775759ec0cff1fb8d4da7080f5cf9a3b2c4ff27002", @nested={0x4, 0xeb}]}, @nested={0x111, 0x3f, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x8, 0x32, 0x0, 0x0, @str='(,]\x00'}, @generic="4924ef42934dba0fd6610700c5597b8369c7271001adc6897b06e8cb5f8a09c6e7eee365f98176161c200ec2488d9b7b0b9810343d60d428f67738e22e3d69f4bdced072da3492eaa3d5af00bc9fad787b63be00a65c4727b33f056c0d59c7a7ca8a3a049d53baaacc91e536a368d7d334048bb32ddae59529d7a6473e9bae057567a7496cd3f0818f9b168840e027e16c8ec64e1c478d431128a71a1b2ed5bc8bb5bdfdafb1c9457d27b55ea043486fd7024f495506e24361d194a94af35b902e07c4184facbc7d68eae45d3a19ce6d196b6dd801f173a0b671d8f33082eb654611dff658fadc4421ef0402db0df77dd52b79aff5e3d85f99", @generic, @typed={0x4, 0x1a}, @nested={0x4, 0x44}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, "10112cf7e6a9887b170f"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x2d, 0xbd, "803e22b76af2559e0967bd4bbc3239ad07992c712f4345d577a843049ea119393a42af28597e9170c9"}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_MLO_TTLM_ULINK={0x82, 0x149, "310c61dce5095f7dda50691fe4e9a441d47458036484a2d02f7a1b14935260973794e688e9005860b0bc063cbf7f32c854f2ff6496b1236472760bb0ed024863b3e6bb26b787027ca071fa5fe3846562d9cc6d8d79c07ced14c72b10b5df502a77baf513f408a0d46254c90e7a266cec7f034bc4456c44a7062d60a29be5"}, @NL80211_ATTR_PMKID={0xc5, 0x55, "7a60f58f6142931a3e99af94d20111b06d62bf99fadbe172ba469b6249eaeeee65904eb86c0823811262f65e6b37e7928c7b1649a0a43d1ef75feca1fb171e0a2d947ad0c07bbbddbddc1c4df053eb44ea31b9ffe00e1668fa5eb130f04d0edd25f2069f0d9d8929c787b78325fd5815d1caedbd60c77e53d8cf749ac0468565c9572ff4430f74e85a43a565c27a7b39df3553b484bd94caf07993ee342f05860a299cf17cecf784fe78b09bb1060100f357d95951235dbcae9773634a3f574675"}, @NL80211_ATTR_BSSID={0xbe, 0xf5, "2ca0f2042470aa6390513136f86078d0941a331c699f65d998433cf1d85055800ef157474ad4d35403fb52c9761565e5729cde4034962b010b555952b2b98af00e27d6f52576eab1a468c24f5c375b8895dfb8e61c4f881b1f59eadf75b1d03a3f15c66e3d5d14ba074da6a5e871a42142ed3a887f26c6b52cc631d57c20c6393a4a4699ec8dd4a39b9ac375464cbe9946cb092182e295293dcf45cbc0b85c5124212d6a322b21e4ceba022a7cd8ebdb3b1e6a5341f13d25152b"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x151c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x24004880) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac2afb36", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008890}, 0x4000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tee$auto(r2, r5, 0x0, 0x5) r6 = prctl$auto_PR_SET_MM_ENV_END(0x40, 0xb, 0x0, 0x6, 0xb) r7 = fcntl$auto_F_UNLCK(r6, 0x5c5, 0x2) write$auto_hwsim_fops_rx_rssi_(r7, &(0x7f0000000000), 0x0) 4.575674801s ago: executing program 3 (id=807): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x4, 0x4) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x5) mmap$auto(0x0, 0x810004, 0x400000000000000, 0x8000000008015, r0, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810007, 0xf4, 0x800000000a011, r1, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x9a28) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/stack\x00', 0x2400, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000200)=""/225, 0xe1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r4, 0x7439) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, r1, 0x8000) setresuid$auto(0x0, 0x8, 0x8000) mlockall$auto(0x7) 4.519491887s ago: executing program 2 (id=808): mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0xa, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0xffffffffffffffff, 0xffb, 0x15, r0, 0x8001) mlock$auto(0x7c88, 0x7fff) mlockall$auto(0x5) 4.089226806s ago: executing program 1 (id=809): mmap$auto(0x0, 0x2020005, 0x3, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cpu/0/cpuid\x00', 0xad80, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5 [ 114.283734][ T6006] dump_stack_lvl+0x100/0x190 [ 114.283781][ T6006] should_fail_ex.cold+0x5/0xa [ 114.283825][ T6006] should_failslab+0xc2/0x120 [ 114.283860][ T6006] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 114.283911][ T6006] ? vm_area_alloc+0x1f/0x160 [ 114.283944][ T6006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.283979][ T6006] vm_area_alloc+0x1f/0x160 [ 114.284012][ T6006] __mmap_region+0x104d/0x2dd0 [ 114.284052][ T6006] ? __pfx___mmap_region+0x10/0x10 [ 114.284086][ T6006] ? __lock_acquire+0x4a5/0x2630 [ 114.284136][ T6006] ? clockevents_program_event+0x23e/0x820 [ 114.284160][ T6006] ? clockevents_program_event+0x23e/0x820 [ 114.284188][ T6006] ? do_raw_spin_lock+0x128/0x260 [ 114.284238][ T6006] ? do_raw_spin_lock+0x128/0x260 [ 114.284261][ T6006] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 114.284293][ T6006] ? hrtimer_start_range_ns+0x860/0x1a50 [ 114.284319][ T6006] ? find_held_lock+0x2b/0x80 [ 114.284346][ T6006] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 114.284412][ T6006] mmap_region+0x35d/0x620 [ 114.284431][ T6006] ? rcu_is_watching+0x12/0xc0 [ 114.284455][ T6006] ? __pfx_mmap_region+0x10/0x10 [ 114.284477][ T6006] ? cap_mmap_addr+0x4b/0x120 [ 114.284497][ T6006] ? bpf_lsm_mmap_addr+0x9/0x30 [ 114.284515][ T6006] ? security_mmap_addr+0x71/0x1e0 [ 114.284561][ T6006] ? __get_unmapped_area+0x255/0x3e0 [ 114.284590][ T6006] do_mmap+0xc63/0x12f0 [ 114.284620][ T6006] ? __pfx_do_mmap+0x10/0x10 [ 114.284646][ T6006] ? __pfx_down_write_killable+0x10/0x10 [ 114.284686][ T6006] vm_mmap_pgoff+0x29e/0x470 [ 114.284717][ T6006] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 114.284745][ T6006] ? do_futex+0x192/0x350 [ 114.284777][ T6006] ? __pfx_do_futex+0x10/0x10 [ 114.284829][ T6006] ksys_mmap_pgoff+0xe4/0x610 [ 114.284882][ T6006] ? __x64_sys_futex+0x358/0x4d0 [ 114.284908][ T6006] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 114.284938][ T6006] ? xfd_validate_state+0x129/0x190 [ 114.284961][ T6006] ? ksys_write+0x1ac/0x250 [ 114.285038][ T6006] __x64_sys_mmap+0x125/0x190 [ 114.285076][ T6006] do_syscall_64+0x115/0x840 [ 114.285123][ T6006] ? clear_bhb_loop+0x40/0x90 [ 114.285164][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.285198][ T6006] RIP: 0033:0x7f04ac39ce59 [ 114.285225][ T6006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.285256][ T6006] RSP: 002b:00007f04ad2bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 114.285286][ T6006] RAX: ffffffffffffffda RBX: 00007f04ac615fa0 RCX: 00007f04ac39ce59 [ 114.285307][ T6006] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 114.285326][ T6006] RBP: 00007f04ac432d6f R08: fffffffffffffffa R09: 0000000000008000 [ 114.285346][ T6006] R10: 0800000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 114.285366][ T6006] R13: 00007f04ac616038 R14: 00007f04ac615fa0 R15: 00007ffea71db088 [ 114.285408][ T6006] [ 116.310027][ T6026] netlink: zone id is out of range [ 116.326426][ T6026] netlink: zone id is out of range [ 116.344543][ T6026] netlink: zone id is out of range [ 116.363818][ T6026] netlink: del zone limit has 4 unknown bytes [ 117.628836][ T6045] syz.3.51 (6045): /proc/6041/oom_adj is deprecated, please use /proc/6041/oom_score_adj instead. [ 117.736045][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.51'. [ 117.844943][ T6045] virt_wifi0: entered allmulticast mode [ 118.963285][ T6060] netlink: 342 bytes leftover after parsing attributes in process `syz.1.54'. [ 119.135590][ T6057] random: crng reseeded on system resumption [ 122.068393][ T6090] netlink: 'syz.2.59': attribute type 5 has an invalid length. [ 122.125318][ T6090] netlink: 4158 bytes leftover after parsing attributes in process `syz.2.59'. [ 122.824481][ T6089] bond0: no command found in slaves file - use +ifname or -ifname [ 124.942954][ T6136] openvswitch: netlink: Message has 4 unknown bytes. [ 124.974445][ T50] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 125.932347][ T6143] netlink: 350 bytes leftover after parsing attributes in process `syz.2.68'. [ 125.964569][ T6145] ======================================================= [ 125.964569][ T6145] WARNING: The mand mount option has been deprecated and [ 125.964569][ T6145] and is ignored by this kernel. Remove the mand [ 125.964569][ T6145] option from the mount to silence this warning. [ 125.964569][ T6145] ======================================================= [ 126.657902][ T6159] mmap: syz.1.69 (6159) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.275949][ T6189] loop6: detected capacity change from 0 to 8 [ 129.496213][ T6199] netlink: zone id is out of range [ 129.515605][ T6199] netlink: zone id is out of range [ 129.524116][ T6199] netlink: zone id is out of range [ 129.539798][ T6199] netlink: zone id is out of range [ 129.548531][ T6199] netlink: zone id is out of range [ 129.580647][ T6199] netlink: zone id is out of range [ 129.627971][ T6199] netlink: zone id is out of range [ 129.658248][ T6199] netlink: zone id is out of range [ 129.691615][ T6199] netlink: zone id is out of range [ 129.783182][ T6212] FAULT_INJECTION: forcing a failure. [ 129.783182][ T6212] name failslab, interval 1, probability 0, space 0, times 0 [ 129.809561][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT(full) [ 129.809599][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.809618][ T6212] Call Trace: [ 129.809627][ T6212] [ 129.809638][ T6212] dump_stack_lvl+0x100/0x190 [ 129.809708][ T6212] should_fail_ex.cold+0x5/0xa [ 129.809749][ T6212] should_failslab+0xc2/0x120 [ 129.809787][ T6212] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 129.809821][ T6212] ? __request_module+0x2e1/0x6c0 [ 129.809861][ T6212] kstrdup+0x51/0xe0 [ 129.809894][ T6212] __request_module+0x2e1/0x6c0 [ 129.809926][ T6212] ? __pfx___request_module+0x10/0x10 [ 129.810008][ T6212] xt_request_find_table_lock+0x9f/0xf0 [ 129.810075][ T6212] get_info+0x1a4/0x600 [ 129.810116][ T6212] ? __pfx_get_info+0x10/0x10 [ 129.810158][ T6212] ? lock_acquire+0x1b1/0x370 [ 129.810215][ T6212] ? rcu_is_watching+0x12/0xc0 [ 129.810255][ T6212] ? rcu_is_watching+0x12/0xc0 [ 129.810300][ T6212] ? bpf_lsm_capable+0x9/0x10 [ 129.810335][ T6212] ? security_capable+0x80/0x260 [ 129.810373][ T6212] do_arpt_get_ctl+0x168/0x900 [ 129.810415][ T6212] ? __pfx_do_arpt_get_ctl+0x10/0x10 [ 129.810471][ T6212] ? nf_sockopt_find.isra.0+0x222/0x290 [ 129.810526][ T6212] nf_getsockopt+0x7c/0xe0 [ 129.810581][ T6212] ip_getsockopt+0x192/0x1e0 [ 129.810616][ T6212] ? __pfx_ip_getsockopt+0x10/0x10 [ 129.810661][ T6212] tcp_getsockopt+0xa1/0x110 [ 129.810706][ T6212] smc_getsockopt+0x165/0x390 [ 129.810743][ T6212] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 129.810787][ T6212] ? __pfx_smc_getsockopt+0x10/0x10 [ 129.810822][ T6212] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 129.810876][ T6212] ? __pfx_smc_getsockopt+0x10/0x10 [ 129.810915][ T6212] do_sock_getsockopt+0x50a/0x6e0 [ 129.810956][ T6212] ? __lock_acquire+0x4a5/0x2630 [ 129.811025][ T6212] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 129.811086][ T6212] ? find_held_lock+0x2b/0x80 [ 129.811135][ T6212] ? __fget_files+0x21f/0x3d0 [ 129.811180][ T6212] __sys_getsockopt+0x133/0x1d0 [ 129.811220][ T6212] ? __x64_sys_getsockopt+0xbd/0x160 [ 129.811248][ T6212] __x64_sys_getsockopt+0xbd/0x160 [ 129.811276][ T6212] ? do_syscall_64+0x90/0x840 [ 129.811326][ T6212] ? lockdep_hardirqs_on+0x78/0x100 [ 129.811367][ T6212] do_syscall_64+0x115/0x840 [ 129.811426][ T6212] ? clear_bhb_loop+0x40/0x90 [ 129.811460][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.811490][ T6212] RIP: 0033:0x7f24d9b9ce59 [ 129.811522][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.811557][ T6212] RSP: 002b:00007f24daacc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 129.811589][ T6212] RAX: ffffffffffffffda RBX: 00007f24d9e16090 RCX: 00007f24d9b9ce59 [ 129.811609][ T6212] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000009 [ 129.811628][ T6212] RBP: 00007f24d9c32d6f R08: 00002000000000c0 R09: 0000000000000000 [ 129.811647][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.811665][ T6212] R13: 00007f24d9e16128 R14: 00007f24d9e16090 R15: 00007ffd530231f8 [ 129.811705][ T6212] [ 130.171322][ T50] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 130.958658][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 132.135353][ T6250] netlink: 342 bytes leftover after parsing attributes in process `syz.2.91'. [ 132.196591][ T6250] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 132.837433][ T6262] syz.3.93 (6262) used greatest stack depth: 17704 bytes left [ 132.925580][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932786][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.710778][ T6278] futex_wake_op: syz.1.96 tries to shift op by -2048; fix this program [ 133.739949][ T6278] 0x000000000001-0x000000020000 : "" [ 133.814542][ T6278] ftl_cs: FTL header corrupt! [ 134.285566][ T6289] FAULT_INJECTION: forcing a failure. [ 134.285566][ T6289] name failslab, interval 1, probability 0, space 0, times 0 [ 134.311387][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT(full) [ 134.311429][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.311447][ T6289] Call Trace: [ 134.311456][ T6289] [ 134.311468][ T6289] dump_stack_lvl+0x100/0x190 [ 134.311526][ T6289] should_fail_ex.cold+0x5/0xa [ 134.311565][ T6289] should_failslab+0xc2/0x120 [ 134.311602][ T6289] __kmalloc_cache_noprof+0x7a/0x6f0 [ 134.311654][ T6289] ? open_substream+0xec/0x9b0 [ 134.311700][ T6289] ? mark_held_locks+0x40/0x70 [ 134.311754][ T6289] open_substream+0xec/0x9b0 [ 134.311807][ T6289] rawmidi_open_priv+0x595/0x6f0 [ 134.311862][ T6289] snd_rawmidi_open+0x4c9/0xba0 [ 134.311919][ T6289] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 134.311972][ T6289] ? __pfx_default_wake_function+0x10/0x10 [ 134.312016][ T6289] ? kobject_get_unless_zero+0x156/0x200 [ 134.312072][ T6289] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 134.312121][ T6289] snd_open+0x201/0x450 [ 134.312181][ T6289] ? __pfx_snd_open+0x10/0x10 [ 134.312223][ T6289] chrdev_open+0x234/0x6a0 [ 134.312262][ T6289] ? __pfx_apparmor_file_open+0x10/0x10 [ 134.312298][ T6289] ? __pfx_chrdev_open+0x10/0x10 [ 134.312341][ T6289] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 134.312393][ T6289] do_dentry_open+0x6ab/0x14d0 [ 134.312433][ T6289] ? __pfx_chrdev_open+0x10/0x10 [ 134.312483][ T6289] vfs_open+0x82/0x3f0 [ 134.312533][ T6289] path_openat+0x208c/0x31a0 [ 134.312606][ T6289] ? __pfx_path_openat+0x10/0x10 [ 134.312674][ T6289] do_file_open+0x20e/0x430 [ 134.312719][ T6289] ? __pfx_do_file_open+0x10/0x10 [ 134.312790][ T6289] ? alloc_fd+0x476/0x790 [ 134.312836][ T6289] ? do_getname+0x191/0x390 [ 134.312888][ T6289] do_sys_openat2+0x10d/0x1e0 [ 134.312940][ T6289] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.313011][ T6289] __x64_sys_openat+0x12d/0x210 [ 134.313064][ T6289] ? __pfx___x64_sys_openat+0x10/0x10 [ 134.313113][ T6289] ? ksys_write+0x1ac/0x250 [ 134.313158][ T6289] ? rcu_is_watching+0x12/0xc0 [ 134.313201][ T6289] do_syscall_64+0x115/0x840 [ 134.313248][ T6289] ? clear_bhb_loop+0x40/0x90 [ 134.313290][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.313326][ T6289] RIP: 0033:0x7f24d9b9ce59 [ 134.313354][ T6289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.313386][ T6289] RSP: 002b:00007f24daaed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.313418][ T6289] RAX: ffffffffffffffda RBX: 00007f24d9e15fa0 RCX: 00007f24d9b9ce59 [ 134.313441][ T6289] RDX: 0000000000080102 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 134.313462][ T6289] RBP: 00007f24d9c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 134.313483][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.313501][ T6289] R13: 00007f24d9e16038 R14: 00007f24d9e15fa0 R15: 00007ffd530231f8 [ 134.313545][ T6289] [ 135.012404][ T6302] FAULT_INJECTION: forcing a failure. [ 135.012404][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 135.031040][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.1.102 Not tainted syzkaller #0 PREEMPT(full) [ 135.031091][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.031110][ T6302] Call Trace: [ 135.031120][ T6302] [ 135.031131][ T6302] dump_stack_lvl+0x100/0x190 [ 135.031192][ T6302] should_fail_ex.cold+0x5/0xa [ 135.031233][ T6302] should_failslab+0xc2/0x120 [ 135.031271][ T6302] __kmalloc_cache_noprof+0x7a/0x6f0 [ 135.031316][ T6302] ? kvm_dev_ioctl+0xa8d/0x1a50 [ 135.031366][ T6302] kvm_dev_ioctl+0xa8d/0x1a50 [ 135.031432][ T6302] ? find_held_lock+0x2b/0x80 [ 135.031472][ T6302] ? __fget_files+0x215/0x3d0 [ 135.031508][ T6302] ? hook_file_ioctl_common+0x149/0x410 [ 135.031552][ T6302] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 135.031602][ T6302] ? __fget_files+0x21f/0x3d0 [ 135.031647][ T6302] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 135.031695][ T6302] __x64_sys_ioctl+0x18e/0x210 [ 135.031731][ T6302] do_syscall_64+0x115/0x840 [ 135.031777][ T6302] ? clear_bhb_loop+0x40/0x90 [ 135.031817][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.031851][ T6302] RIP: 0033:0x7fb82f79ce59 [ 135.031878][ T6302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.031911][ T6302] RSP: 002b:00007fb83066d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.031943][ T6302] RAX: ffffffffffffffda RBX: 00007fb82fa15fa0 RCX: 00007fb82f79ce59 [ 135.031964][ T6302] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 135.031984][ T6302] RBP: 00007fb82f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 135.032004][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.032023][ T6302] R13: 00007fb82fa16038 R14: 00007fb82fa15fa0 R15: 00007ffe187d8c38 [ 135.032074][ T6302] [ 135.745437][ T6303] Process accounting paused [ 135.968459][ T6325] net_ratelimit: 196 callbacks suppressed [ 135.968485][ T6325] netlink: zone id is out of range [ 135.995872][ T6325] netlink: zone id is out of range [ 136.001155][ T6325] netlink: zone id is out of range [ 136.006570][ T6325] netlink: zone id is out of range [ 136.013688][ T6325] netlink: zone id is out of range [ 136.020783][ T6325] netlink: zone id is out of range [ 136.028011][ T6325] netlink: zone id is out of range [ 136.040859][ T6325] netlink: zone id is out of range [ 136.068611][ T6325] netlink: zone id is out of range [ 136.075002][ T6325] netlink: zone id is out of range [ 136.489939][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.109'. [ 137.239694][ T6357] futex_wake_op: syz.1.111 tries to shift op by -2048; fix this program [ 137.253912][ T6359] futex_wake_op: syz.1.111 tries to shift op by -2048; fix this program [ 137.345782][ T6347] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 137.655329][ T6367] syz.3.113 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.900652][ T6368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.114'. [ 139.311551][ T6401] hub 1-0:1.0: USB hub found [ 139.315530][ T6401] hub 1-0:1.0: 1 port detected [ 140.358984][ T6416] netlink: 342 bytes leftover after parsing attributes in process `syz.0.124'. [ 141.886537][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.127'. [ 141.987699][ T6447] net_ratelimit: 401 callbacks suppressed [ 141.987721][ T6447] netlink: zone id is out of range [ 142.036345][ T6447] netlink: zone id is out of range [ 142.100539][ T6447] netlink: zone id is out of range [ 142.144739][ T6447] netlink: zone id is out of range [ 142.165987][ T6447] netlink: zone id is out of range [ 142.231251][ T6447] netlink: zone id is out of range [ 142.293418][ T6447] netlink: zone id is out of range [ 142.323469][ T6447] netlink: zone id is out of range [ 142.341307][ T6447] netlink: zone id is out of range [ 142.358578][ T6447] netlink: zone id is out of range [ 143.204158][ T6464] netlink: 342 bytes leftover after parsing attributes in process `syz.3.133'. [ 145.400611][ T6522] random: crng reseeded on system resumption [ 145.617013][ T6529] vivid-011: ================= START STATUS ================= [ 145.637526][ T6529] vivid-011: Radio HW Seek Mode: Bounded [ 145.658643][ T6529] vivid-011: Radio Programmable HW Seek: false [ 145.696464][ T6529] vivid-011: RDS Rx I/O Mode: Block I/O [ 145.734640][ T6529] vivid-011: Generate RBDS Instead of RDS: false [ 145.782391][ T6535] FAULT_INJECTION: forcing a failure. [ 145.782391][ T6535] name failslab, interval 1, probability 0, space 0, times 0 [ 145.806894][ T6529] vivid-011: RDS Reception: true [ 145.833538][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.3.149 Not tainted syzkaller #0 PREEMPT(full) [ 145.833579][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.833597][ T6535] Call Trace: [ 145.833607][ T6535] [ 145.833619][ T6535] dump_stack_lvl+0x100/0x190 [ 145.833683][ T6535] should_fail_ex.cold+0x5/0xa [ 145.833735][ T6535] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 145.833789][ T6535] should_failslab+0xc2/0x120 [ 145.833825][ T6535] __kmalloc_noprof+0xe0/0x850 [ 145.833881][ T6535] kernfs_fop_write_iter+0x26a/0x5f0 [ 145.833929][ T6535] vfs_write+0x6ac/0x1070 [ 145.833975][ T6535] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 145.834018][ T6535] ? __pfx_vfs_write+0x10/0x10 [ 145.834072][ T6535] ksys_write+0x12a/0x250 [ 145.834104][ T6535] ? __pfx_ksys_write+0x10/0x10 [ 145.834137][ T6535] ? rcu_is_watching+0x12/0xc0 [ 145.834180][ T6535] do_syscall_64+0x115/0x840 [ 145.834218][ T6535] ? clear_bhb_loop+0x40/0x90 [ 145.834252][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.834281][ T6535] RIP: 0033:0x7f04ac39ce59 [ 145.834303][ T6535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.834329][ T6535] RSP: 002b:00007f04ad2bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.834355][ T6535] RAX: ffffffffffffffda RBX: 00007f04ac615fa0 RCX: 00007f04ac39ce59 [ 145.834372][ T6535] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 145.834388][ T6535] RBP: 00007f04ad2bd090 R08: 0000000000000000 R09: 0000000000000000 [ 145.834404][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.834420][ T6535] R13: 00007f04ac616038 R14: 00007f04ac615fa0 R15: 00007ffea71db088 [ 145.834456][ T6535] [ 145.834568][ T6529] vivid-011: RDS Program Type: 0 inactive [ 146.578916][ T6529] vivid-011: RDS PS Name: inactive [ 146.634305][ T6529] vivid-011: RDS Radio Text: inactive [ 146.645672][ T6547] FAULT_INJECTION: forcing a failure. [ 146.645672][ T6547] name failslab, interval 1, probability 0, space 0, times 0 [ 146.680547][ T6547] CPU: 0 UID: 0 PID: 6547 Comm: syz.2.152 Not tainted syzkaller #0 PREEMPT(full) [ 146.680587][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.680606][ T6547] Call Trace: [ 146.680615][ T6547] [ 146.680626][ T6547] dump_stack_lvl+0x100/0x190 [ 146.680687][ T6547] should_fail_ex.cold+0x5/0xa [ 146.680727][ T6547] should_failslab+0xc2/0x120 [ 146.680767][ T6547] __kmalloc_cache_noprof+0x7a/0x6f0 [ 146.680812][ T6547] ? trace_pid_list_alloc+0x2fe/0x480 [ 146.680863][ T6547] trace_pid_list_alloc+0x2fe/0x480 [ 146.680910][ T6547] trace_pid_write+0x110/0x460 [ 146.680955][ T6547] ? __pfx_trace_pid_write+0x10/0x10 [ 146.681020][ T6547] event_pid_write.isra.0+0x1e4/0x7d0 [ 146.681070][ T6547] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 146.681137][ T6547] vfs_write+0x2aa/0x1070 [ 146.681178][ T6547] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 146.681227][ T6547] ? __pfx_vfs_write+0x10/0x10 [ 146.681262][ T6547] ? __fget_files+0x215/0x3d0 [ 146.681307][ T6547] ? __fget_files+0x21f/0x3d0 [ 146.681355][ T6547] ksys_write+0x12a/0x250 [ 146.681391][ T6547] ? __pfx_ksys_write+0x10/0x10 [ 146.681430][ T6547] ? rcu_is_watching+0x12/0xc0 [ 146.681471][ T6547] do_syscall_64+0x115/0x840 [ 146.681515][ T6547] ? clear_bhb_loop+0x40/0x90 [ 146.681555][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.681607][ T6547] RIP: 0033:0x7fdf14d9ce59 [ 146.681635][ T6547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.681666][ T6547] RSP: 002b:00007fdf15bd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.681698][ T6547] RAX: ffffffffffffffda RBX: 00007fdf15015fa0 RCX: 00007fdf14d9ce59 [ 146.681720][ T6547] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 146.681739][ T6547] RBP: 00007fdf14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 146.681759][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.681778][ T6547] R13: 00007fdf15016038 R14: 00007fdf15015fa0 R15: 00007ffe954fb138 [ 146.681822][ T6547] [ 146.945439][ T6529] vivid-011: RDS Traffic Announcement: false inactive [ 146.952438][ T6529] vivid-011: RDS Traffic Program: false inactive [ 146.958818][ T6529] vivid-011: RDS Music: false inactive [ 146.964355][ T6529] vivid-011: ================== END STATUS ================== [ 147.543861][ T6557] netlink: 342 bytes leftover after parsing attributes in process `syz.3.154'. [ 150.055266][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.162'. [ 150.888845][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.166'. [ 154.861388][ T6671] netlink: 178 bytes leftover after parsing attributes in process `syz.1.178'. [ 156.839021][ T6716] net_ratelimit: 195 callbacks suppressed [ 156.839046][ T6716] netlink: zone id is out of range [ 156.869153][ T6720] FAULT_INJECTION: forcing a failure. [ 156.869153][ T6720] name fail_futex, interval 1, probability 0, space 0, times 1 [ 156.871466][ T6716] netlink: zone id is out of range [ 156.906442][ T6716] netlink: zone id is out of range [ 156.957967][ T6716] netlink: zone id is out of range [ 156.968959][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT(full) [ 156.969002][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.969020][ T6720] Call Trace: [ 156.969030][ T6720] [ 156.969045][ T6720] dump_stack_lvl+0x100/0x190 [ 156.969104][ T6720] should_fail_ex.cold+0x5/0xa [ 156.969143][ T6720] get_futex_key+0x295/0x1510 [ 156.969198][ T6720] ? __pfx_get_futex_key+0x10/0x10 [ 156.969251][ T6720] ? kasan_save_track+0x14/0x30 [ 156.969282][ T6720] ? __kasan_kmalloc+0xaa/0xb0 [ 156.969318][ T6720] futex_lock_pi+0x1d2/0x7a0 [ 156.969360][ T6720] ? __pfx_futex_lock_pi+0x10/0x10 [ 156.969448][ T6720] ? __pfx_futex_wake_mark+0x10/0x10 [ 156.969516][ T6720] ? __pfx_clockevents_program_event+0x10/0x10 [ 156.969557][ T6720] do_futex+0x18a/0x350 [ 156.969590][ T6720] ? __pfx_do_futex+0x10/0x10 [ 156.969619][ T6720] ? do_raw_spin_unlock+0x145/0x1e0 [ 156.969665][ T6720] ? rcu_is_watching+0x12/0xc0 [ 156.969704][ T6720] __x64_sys_futex+0x34f/0x4d0 [ 156.969746][ T6720] ? __pfx___x64_sys_futex+0x10/0x10 [ 156.969790][ T6720] do_syscall_64+0x115/0x840 [ 156.969831][ T6720] ? clear_bhb_loop+0x40/0x90 [ 156.969866][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.969895][ T6720] RIP: 0033:0x7fdf14d9ce59 [ 156.969920][ T6720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.969947][ T6720] RSP: 002b:00007fdf15bb8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 156.969974][ T6720] RAX: ffffffffffffffda RBX: 00007fdf15016090 RCX: 00007fdf14d9ce59 [ 156.969992][ T6720] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 156.970008][ T6720] RBP: 00007fdf14e32d6f R08: 0000000000000000 R09: 000000008000fff5 [ 156.970024][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.970039][ T6720] R13: 00007fdf15016128 R14: 00007fdf15016090 R15: 00007ffe954fb138 [ 156.970073][ T6720] [ 156.970074][ T6716] netlink: zone id is out of range [ 157.273951][ T6716] netlink: zone id is out of range [ 157.293967][ T6716] netlink: zone id is out of range [ 157.309330][ T6716] netlink: zone id is out of range [ 157.319463][ T6716] netlink: zone id is out of range [ 157.334769][ T6716] netlink: zone id is out of range [ 158.000010][ T6735] netlink: 342 bytes leftover after parsing attributes in process `syz.3.190'. [ 158.011306][ T6735] netlink: 342 bytes leftover after parsing attributes in process `syz.3.190'. [ 158.020922][ T6735] netlink: 342 bytes leftover after parsing attributes in process `syz.3.190'. [ 158.136968][ T6737] can0: slcan on pty155. [ 158.318242][ T6741] can0 (unregistered): slcan off pty155. [ 158.623308][ T6760] netlink: 350 bytes leftover after parsing attributes in process `syz.3.195'. [ 158.668224][ T6763] netlink: 350 bytes leftover after parsing attributes in process `syz.3.195'. [ 158.858916][ T6774] random: crng reseeded on system resumption [ 159.058659][ T6774] hub 1-0:1.0: USB hub found [ 159.068367][ T6774] hub 1-0:1.0: 1 port detected [ 159.475581][ T6794] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 159.570414][ T6800] FAULT_INJECTION: forcing a failure. [ 159.570414][ T6800] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 159.628145][ T6800] CPU: 0 UID: 0 PID: 6800 Comm: syz.3.202 Not tainted syzkaller #0 PREEMPT(full) [ 159.628178][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.628193][ T6800] Call Trace: [ 159.628201][ T6800] [ 159.628211][ T6800] dump_stack_lvl+0x100/0x190 [ 159.628261][ T6800] should_fail_ex.cold+0x5/0xa [ 159.628289][ T6800] ? prepare_alloc_pages+0x16d/0x5f0 [ 159.628326][ T6800] should_fail_alloc_page+0xeb/0x140 [ 159.628360][ T6800] prepare_alloc_pages+0x1f0/0x5f0 [ 159.628401][ T6800] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 159.628459][ T6800] ? __lock_acquire+0x4a5/0x2630 [ 159.628524][ T6800] ? __lock_acquire+0x4a5/0x2630 [ 159.628566][ T6800] ? __css_rstat_updated+0x1ce/0x5a0 [ 159.628607][ T6800] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 159.628655][ T6800] ? do_raw_spin_lock+0x128/0x260 [ 159.628684][ T6800] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 159.628715][ T6800] ? find_held_lock+0x2b/0x80 [ 159.628759][ T6800] ? __lock_acquire+0x4a5/0x2630 [ 159.628801][ T6800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.628841][ T6800] ? policy_nodemask+0xed/0x4f0 [ 159.628877][ T6800] alloc_pages_mpol+0x1fb/0x540 [ 159.628911][ T6800] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 159.628943][ T6800] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 159.628980][ T6800] folio_alloc_mpol_noprof+0x36/0x260 [ 159.629021][ T6800] shmem_alloc_folio+0x135/0x160 [ 159.629060][ T6800] shmem_alloc_and_add_folio+0x371/0xd40 [ 159.629113][ T6800] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 159.629160][ T6800] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 159.629195][ T6800] shmem_get_folio_gfp+0x6ab/0x1900 [ 159.629228][ T6800] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 159.629255][ T6800] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 159.629283][ T6800] ? lockdep_hardirqs_on+0x78/0x100 [ 159.629327][ T6800] shmem_fault+0x1f9/0xa20 [ 159.629353][ T6800] ? __lock_acquire+0x4a5/0x2630 [ 159.629396][ T6800] ? __pfx_shmem_fault+0x10/0x10 [ 159.629423][ T6800] ? __up_read+0x2c1/0x6e0 [ 159.629463][ T6800] ? __pfx_filemap_map_pages+0x10/0x10 [ 159.629514][ T6800] __do_fault+0x10b/0x440 [ 159.629542][ T6800] ? find_held_lock+0x2b/0x80 [ 159.629578][ T6800] do_fault+0x2db/0x1750 [ 159.629616][ T6800] __handle_mm_fault+0x187d/0x2a00 [ 159.629664][ T6800] ? mt_find+0x45e/0x8e0 [ 159.629707][ T6800] ? __pfx___handle_mm_fault+0x10/0x10 [ 159.629745][ T6800] ? __pfx_mt_find+0x10/0x10 [ 159.629804][ T6800] ? find_vma+0xbf/0x140 [ 159.629833][ T6800] ? __pfx_find_vma+0x10/0x10 [ 159.629865][ T6800] handle_mm_fault+0x37b/0xa30 [ 159.629912][ T6800] do_user_addr_fault+0x74c/0x12f0 [ 159.629950][ T6800] ? trace_page_fault_kernel+0x7a/0x200 [ 159.629983][ T6800] exc_page_fault+0x6f/0xd0 [ 159.630023][ T6800] asm_exc_page_fault+0x26/0x30 [ 159.630050][ T6800] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 159.630078][ T6800] Code: 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 159.630102][ T6800] RSP: 0018:ffffc900050376e0 EFLAGS: 00050206 [ 159.630124][ T6800] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000ffd [ 159.630140][ T6800] RDX: 0000000000000001 RSI: ffff888043bd1003 RDI: 00000000000b1000 [ 159.630156][ T6800] RBP: ffffc90005037d10 R08: 0000000000000000 R09: ffffed100877a3ff [ 159.630173][ T6800] R10: ffff888043bd1fff R11: 0000000000000000 R12: ffff888043bd1000 [ 159.630207][ T6800] R13: 00000000000b0ffd R14: 00000000000b0ffd R15: 0000000000001000 [ 159.630244][ T6800] _copy_to_iter+0x4c5/0x1720 [ 159.630303][ T6800] ? __pfx__copy_to_iter+0x10/0x10 [ 159.630338][ T6800] ? do_raw_spin_unlock+0x145/0x1e0 [ 159.630372][ T6800] ? folio_mark_accessed+0xf3/0x1040 [ 159.630399][ T6800] ? __pfx_filemap_get_pages+0x10/0x10 [ 159.630426][ T6800] ? __pfx_folio_mark_accessed+0x10/0x10 [ 159.630461][ T6800] copy_page_to_iter+0x285/0x370 [ 159.630500][ T6800] filemap_read+0x7a9/0x10a0 [ 159.630560][ T6800] ? __pfx_filemap_read+0x10/0x10 [ 159.630612][ T6800] ? __pfx_down_read+0x10/0x10 [ 159.630641][ T6800] ? __pfx_aa_file_perm+0x10/0x10 [ 159.630703][ T6800] blkdev_read_iter+0x2c4/0x4f0 [ 159.630755][ T6800] do_iter_readv_writev+0x60d/0x920 [ 159.630788][ T6800] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 159.630824][ T6800] ? bpf_lsm_file_permission+0x9/0x10 [ 159.630850][ T6800] ? security_file_permission+0x76/0x210 [ 159.630890][ T6800] ? rw_verify_area+0xce/0x6d0 [ 159.630921][ T6800] vfs_readv+0x4d3/0x8d0 [ 159.630980][ T6800] ? __pfx_vfs_readv+0x10/0x10 [ 159.631013][ T6800] ? __pfx_futex_wake+0x10/0x10 [ 159.631067][ T6800] ? __fget_files+0x21f/0x3d0 [ 159.631103][ T6800] ? do_preadv+0x1ac/0x270 [ 159.631126][ T6800] do_preadv+0x1ac/0x270 [ 159.631153][ T6800] ? __pfx_do_preadv+0x10/0x10 [ 159.631186][ T6800] __x64_sys_preadv2+0xef/0x160 [ 159.631220][ T6800] do_syscall_64+0x115/0x840 [ 159.631254][ T6800] ? clear_bhb_loop+0x40/0x90 [ 159.631285][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.631309][ T6800] RIP: 0033:0x7f04ac39ce59 [ 159.631329][ T6800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.631354][ T6800] RSP: 002b:00007f04ad2bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 159.631377][ T6800] RAX: ffffffffffffffda RBX: 00007f04ac615fa0 RCX: 00007f04ac39ce59 [ 159.631393][ T6800] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000006 [ 159.631410][ T6800] RBP: 00007f04ac432d6f R08: 0000000000000004 R09: 000000000000002a [ 159.631424][ T6800] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 159.631437][ T6800] R13: 00007f04ac616038 R14: 00007f04ac615fa0 R15: 00007ffea71db088 [ 159.631468][ T6800] [ 161.478216][ T6861] netlink: 342 bytes leftover after parsing attributes in process `syz.2.212'. [ 162.144136][ T6869] blktrace: Concurrent blktraces are not allowed on loop2 [ 162.237215][ T29] audit: type=1806 audit(1781443184.588:4): res=-14 [ 164.225399][ T6906] net_ratelimit: 402 callbacks suppressed [ 164.225423][ T6906] netlink: zone id is out of range [ 164.253952][ T6906] netlink: zone id is out of range [ 164.263237][ T6906] netlink: zone id is out of range [ 164.299446][ T6906] netlink: zone id is out of range [ 164.353249][ T6906] netlink: zone id is out of range [ 164.358564][ T6906] netlink: zone id is out of range [ 164.368856][ T6906] netlink: zone id is out of range [ 164.374234][ T6906] netlink: zone id is out of range [ 164.379471][ T6906] netlink: zone id is out of range [ 164.385066][ T6906] netlink: zone id is out of range [ 166.020867][ T6950] netlink: 186 bytes leftover after parsing attributes in process `syz.0.225'. [ 166.050465][ T6950] netlink: 186 bytes leftover after parsing attributes in process `syz.0.225'. [ 166.124941][ T6957] bridge0: port 3(ipvlan0) entered blocking state [ 166.154741][ T6957] bridge0: port 3(ipvlan0) entered disabled state [ 166.191944][ T6957] ipvlan0: entered allmulticast mode [ 166.221364][ T6957] veth0_vlan: entered allmulticast mode [ 166.232947][ T6950] netlink: 130 bytes leftover after parsing attributes in process `syz.0.225'. [ 166.263194][ T6957] ipvlan0: left allmulticast mode [ 166.286626][ T6954] Process accounting resumed [ 166.291667][ T6957] veth0_vlan: left allmulticast mode [ 166.532938][ T6977] syz.0.231 uses obsolete (PF_INET,SOCK_PACKET) [ 167.053082][ T6982] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(32769.0.87751119), cmd(12) [ 168.206359][ T7022] sctp: [Deprecated]: syz.2.239 (pid 7022) Use of int in max_burst socket option. [ 168.206359][ T7022] Use struct sctp_assoc_value instead [ 168.909911][ T7037] netlink: 342 bytes leftover after parsing attributes in process `syz.3.243'. [ 169.662279][ T7056] net_ratelimit: 403 callbacks suppressed [ 169.662298][ T7056] netlink: zone id is out of range [ 169.809703][ T7056] netlink: zone id is out of range [ 169.856431][ T7056] netlink: zone id is out of range [ 169.908577][ T7056] netlink: zone id is out of range [ 169.988743][ T7056] netlink: zone id is out of range [ 170.063850][ T7056] netlink: zone id is out of range [ 170.098131][ T7056] netlink: zone id is out of range [ 170.138777][ T7056] netlink: zone id is out of range [ 170.191549][ T7056] netlink: zone id is out of range [ 170.219577][ T7056] netlink: zone id is out of range [ 170.315885][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.250'. [ 171.206552][ T29] audit: type=1326 audit(1781443193.558:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.1.253" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb82f79ce59 code=0x0 [ 171.610604][ T7101] FAULT_INJECTION: forcing a failure. [ 171.610604][ T7101] name failslab, interval 1, probability 0, space 0, times 0 [ 171.623881][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: syz.1.256 Not tainted syzkaller #0 PREEMPT(full) [ 171.623909][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.623922][ T7101] Call Trace: [ 171.623929][ T7101] [ 171.623936][ T7101] dump_stack_lvl+0x100/0x190 [ 171.623977][ T7101] should_fail_ex.cold+0x5/0xa [ 171.624004][ T7101] should_failslab+0xc2/0x120 [ 171.624030][ T7101] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 171.624064][ T7101] ? __pmd_alloc+0xbf/0x950 [ 171.624096][ T7101] __pmd_alloc+0xbf/0x950 [ 171.624126][ T7101] __handle_mm_fault+0xa9c/0x2a00 [ 171.624161][ T7101] ? mt_find+0x45e/0x8e0 [ 171.624200][ T7101] ? __pfx___handle_mm_fault+0x10/0x10 [ 171.624230][ T7101] ? __pfx_mt_find+0x10/0x10 [ 171.624305][ T7101] ? find_vma+0xbf/0x140 [ 171.624328][ T7101] ? __pfx_find_vma+0x10/0x10 [ 171.624353][ T7101] handle_mm_fault+0x37b/0xa30 [ 171.624390][ T7101] do_user_addr_fault+0x74c/0x12f0 [ 171.624418][ T7101] ? trace_page_fault_kernel+0x7a/0x200 [ 171.624444][ T7101] exc_page_fault+0x6f/0xd0 [ 171.624474][ T7101] asm_exc_page_fault+0x26/0x30 [ 171.624494][ T7101] RIP: 0010:strncpy_from_user+0xfd/0x2d0 [ 171.624526][ T7101] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 22 d3 db fc 48 83 fd 07 0f 86 bb 00 00 00 e8 33 d8 db fc <4d> 8b 24 1e e8 2a d8 db fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff [ 171.624546][ T7101] RSP: 0018:ffffc900038ffd00 EFLAGS: 00050287 [ 171.624563][ T7101] RAX: 0000000000000033 RBX: 0000000000000000 RCX: ffffc900066d1000 [ 171.624576][ T7101] RDX: 0000000000080000 RSI: ffffffff852c252d RDI: ffff888035041f00 [ 171.624589][ T7101] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007 [ 171.624601][ T7101] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000 [ 171.624614][ T7101] R13: ffff88805009dc18 R14: 0000000000000000 R15: 00000000000000a8 [ 171.624634][ T7101] ? strncpy_from_user+0xfd/0x2d0 [ 171.624671][ T7101] do_getname+0x78/0x390 [ 171.624710][ T7101] do_sys_openat2+0xc5/0x1e0 [ 171.624743][ T7101] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.624803][ T7101] __x64_sys_openat+0x12d/0x210 [ 171.624839][ T7101] ? __pfx___x64_sys_openat+0x10/0x10 [ 171.624874][ T7101] ? exit_to_user_mode_loop+0xf3/0x670 [ 171.624915][ T7101] ? rcu_is_watching+0x12/0xc0 [ 171.624944][ T7101] do_syscall_64+0x115/0x840 [ 171.625000][ T7101] ? clear_bhb_loop+0x40/0x90 [ 171.625039][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.625070][ T7101] RIP: 0033:0x7fb82f79ce59 [ 171.625095][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.625124][ T7101] RSP: 002b:00007fb83066d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.625153][ T7101] RAX: ffffffffffffffda RBX: 00007fb82fa15fa0 RCX: 00007fb82f79ce59 [ 171.625173][ T7101] RDX: 0000000000008002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 171.625201][ T7101] RBP: 00007fb82f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 171.625220][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.625238][ T7101] R13: 00007fb82fa16038 R14: 00007fb82fa15fa0 R15: 00007ffe187d8c38 [ 171.625278][ T7101] [ 171.681949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 172.923443][ T7116] netlink: 342 bytes leftover after parsing attributes in process `syz.1.260'. [ 173.309511][ T7121] FAULT_INJECTION: forcing a failure. [ 173.309511][ T7121] name failslab, interval 1, probability 0, space 0, times 0 [ 173.325087][ T7121] CPU: 1 UID: 0 PID: 7121 Comm: syz.0.261 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.325130][ T7121] Tainted: [L]=SOFTLOCKUP [ 173.325167][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.325185][ T7121] Call Trace: [ 173.325195][ T7121] [ 173.325206][ T7121] dump_stack_lvl+0x100/0x190 [ 173.325274][ T7121] should_fail_ex.cold+0x5/0xa [ 173.325311][ T7121] should_failslab+0xc2/0x120 [ 173.325347][ T7121] __kmalloc_cache_noprof+0x7a/0x6f0 [ 173.325391][ T7121] ? fsnotify_alloc_group+0x92/0x330 [ 173.325437][ T7121] fsnotify_alloc_group+0x92/0x330 [ 173.325480][ T7121] __do_sys_fanotify_init+0x2bb/0xe80 [ 173.325518][ T7121] do_syscall_64+0x115/0x840 [ 173.325559][ T7121] ? clear_bhb_loop+0x40/0x90 [ 173.325595][ T7121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.325626][ T7121] RIP: 0033:0x7f24d9b9ce59 [ 173.325648][ T7121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.325677][ T7121] RSP: 002b:00007f24daaed028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 173.325704][ T7121] RAX: ffffffffffffffda RBX: 00007f24d9e15fa0 RCX: 00007f24d9b9ce59 [ 173.325723][ T7121] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 173.325740][ T7121] RBP: 00007f24d9c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 173.325757][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.325774][ T7121] R13: 00007f24d9e16038 R14: 00007f24d9e15fa0 R15: 00007ffd530231f8 [ 173.325811][ T7121] [ 174.149893][ T50] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 174.847569][ T7158] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[7158] [ 176.122197][ T7187] netlink: 342 bytes leftover after parsing attributes in process `syz.0.276'. [ 176.205337][ T50] Bluetooth: hci0: command 0x2016 tx timeout [ 177.404498][ T7207] hub 1-0:1.0: USB hub found [ 177.425704][ T7207] hub 1-0:1.0: 1 port detected [ 178.025029][ T7214] kexec: Could not allocate control_code_buffer [ 178.285390][ T50] Bluetooth: hci0: command 0x2016 tx timeout [ 179.470050][ T7249] netlink: 342 bytes leftover after parsing attributes in process `syz.0.288'. [ 180.562224][ T5635] Bluetooth: hci3: unexpected event 0x10 length: 124 > 1 [ 180.565912][ T50] Bluetooth: hci3: hardware error 0x00 [ 181.361640][ T7269] raw_sendmsg: syz.3.292 forgot to set AF_INET. Fix it! [ 182.035643][ T7309] FAULT_INJECTION: forcing a failure. [ 182.035643][ T7309] name failslab, interval 1, probability 0, space 0, times 0 [ 182.089902][ T7309] CPU: 1 UID: 0 PID: 7309 Comm: syz.0.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.089952][ T7309] Tainted: [L]=SOFTLOCKUP [ 182.089963][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 182.089987][ T7309] Call Trace: [ 182.089997][ T7309] [ 182.090009][ T7309] dump_stack_lvl+0x100/0x190 [ 182.090074][ T7309] should_fail_ex.cold+0x5/0xa [ 182.090114][ T7309] ? tomoyo_realpath_from_path+0xb6/0x690 [ 182.090162][ T7309] should_failslab+0xc2/0x120 [ 182.090203][ T7309] __kmalloc_noprof+0xe0/0x850 [ 182.090255][ T7309] ? kfree+0x1dd/0x6c0 [ 182.090302][ T7309] tomoyo_realpath_from_path+0xb6/0x690 [ 182.090351][ T7309] tomoyo_path_number_perm+0x23c/0x580 [ 182.090383][ T7309] ? tomoyo_path_number_perm+0x22e/0x580 [ 182.090419][ T7309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.090485][ T7309] ? current_check_access_path+0x269/0x430 [ 182.090526][ T7309] ? __pfx_current_check_access_path+0x10/0x10 [ 182.090573][ T7309] ? d_alloc_parallel+0x864/0x14e0 [ 182.090607][ T7309] tomoyo_path_mknod+0x164/0x190 [ 182.090660][ T7309] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 182.090706][ T7309] ? find_held_lock+0x2b/0x80 [ 182.090743][ T7309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.090789][ T7309] security_path_mknod+0x161/0x300 [ 182.090832][ T7309] may_o_create+0x30/0x3a0 [ 182.090880][ T7309] lookup_open.isra.0+0xa0d/0x11b0 [ 182.090915][ T7309] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 182.090949][ T7309] ? __pfx___might_resched+0x10/0x10 [ 182.090978][ T7309] ? mnt_get_write_access+0x52/0x2f0 [ 182.091030][ T7309] ? __pfx_down_write+0x10/0x10 [ 182.091077][ T7309] ? mnt_get_write_access+0x1e9/0x2f0 [ 182.091127][ T7309] path_openat+0x2291/0x31a0 [ 182.091183][ T7309] ? __pfx_path_openat+0x10/0x10 [ 182.091238][ T7309] do_file_open+0x20e/0x430 [ 182.091276][ T7309] ? __pfx_do_file_open+0x10/0x10 [ 182.091335][ T7309] ? alloc_fd+0x476/0x790 [ 182.091371][ T7309] ? do_getname+0x191/0x390 [ 182.091415][ T7309] do_sys_openat2+0x10d/0x1e0 [ 182.091458][ T7309] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.091531][ T7309] __x64_sys_openat+0x12d/0x210 [ 182.091577][ T7309] ? __pfx___x64_sys_openat+0x10/0x10 [ 182.091621][ T7309] ? ksys_write+0x1ac/0x250 [ 182.091665][ T7309] ? rcu_is_watching+0x12/0xc0 [ 182.091703][ T7309] do_syscall_64+0x115/0x840 [ 182.091743][ T7309] ? clear_bhb_loop+0x40/0x90 [ 182.091779][ T7309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.091807][ T7309] RIP: 0033:0x7f24d9b9ce59 [ 182.091831][ T7309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.091858][ T7309] RSP: 002b:00007f24daaed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.091885][ T7309] RAX: ffffffffffffffda RBX: 00007f24d9e15fa0 RCX: 00007f24d9b9ce59 [ 182.091904][ T7309] RDX: 000000000010b542 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 182.091922][ T7309] RBP: 00007f24d9c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 182.091939][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.091956][ T7309] R13: 00007f24d9e16038 R14: 00007f24d9e15fa0 R15: 00007ffd530231f8 [ 182.091992][ T7309] [ 182.428729][ T7309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.663901][ T7319] ACPI: Can not change Invalid GPE/Fixed Event status [ 182.682710][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 182.921847][ T7315] hub 1-0:1.0: USB hub found [ 182.940160][ T7315] hub 1-0:1.0: 1 port detected [ 183.090269][ T7309] FAULT_INJECTION: forcing a failure. [ 183.090269][ T7309] name failslab, interval 1, probability 0, space 0, times 0 [ 183.129825][ T7338] net_ratelimit: 196 callbacks suppressed [ 183.129851][ T7338] netlink: zone id is out of range [ 183.145386][ T7309] CPU: 1 UID: 0 PID: 7309 Comm: syz.0.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.145433][ T7309] Tainted: [L]=SOFTLOCKUP [ 183.145444][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.145462][ T7309] Call Trace: [ 183.145471][ T7309] [ 183.145483][ T7309] dump_stack_lvl+0x100/0x190 [ 183.145544][ T7309] should_fail_ex.cold+0x5/0xa [ 183.145585][ T7309] ? ops_init+0x77/0x5f0 [ 183.145621][ T7309] should_failslab+0xc2/0x120 [ 183.145660][ T7309] __kmalloc_noprof+0xe0/0x850 [ 183.145718][ T7309] ops_init+0x77/0x5f0 [ 183.145752][ T7309] setup_net+0x118/0x3a0 [ 183.145787][ T7309] ? __pfx_setup_net+0x10/0x10 [ 183.145820][ T7309] ? mutex_init_lockdep+0xf1/0x120 [ 183.145860][ T7309] copy_net_ns+0x46f/0x7c0 [ 183.145902][ T7309] create_new_namespaces+0x3ea/0xac0 [ 183.145952][ T7309] unshare_nsproxy_namespaces+0xf2/0x220 [ 183.145996][ T7309] ksys_unshare+0x438/0xab0 [ 183.146051][ T7309] ? __pfx_ksys_unshare+0x10/0x10 [ 183.146105][ T7309] ? xfd_validate_state+0x129/0x190 [ 183.146149][ T7309] __x64_sys_unshare+0x31/0x40 [ 183.146196][ T7309] do_syscall_64+0x115/0x840 [ 183.146243][ T7309] ? clear_bhb_loop+0x40/0x90 [ 183.146282][ T7309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.146315][ T7309] RIP: 0033:0x7f24d9b9ce59 [ 183.146340][ T7309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.146371][ T7309] RSP: 002b:00007f24daaed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 183.146402][ T7309] RAX: ffffffffffffffda RBX: 00007f24d9e15fa0 RCX: 00007f24d9b9ce59 [ 183.146424][ T7309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 183.146442][ T7309] RBP: 00007f24d9c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 183.146461][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.146479][ T7309] R13: 00007f24d9e16038 R14: 00007f24d9e15fa0 R15: 00007ffd530231f8 [ 183.146522][ T7309] [ 183.359883][ T7338] netlink: zone id is out of range [ 183.400616][ T7338] netlink: zone id is out of range [ 183.497828][ T7338] netlink: zone id is out of range [ 183.517359][ T7338] netlink: zone id is out of range [ 183.523445][ T7338] netlink: zone id is out of range [ 183.528619][ T7338] netlink: del zone limit has 4 unknown bytes [ 183.808632][ T7336] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.3.303: 7 [ 187.842711][ T7432] netlink: 342 bytes leftover after parsing attributes in process `syz.0.321'. [ 189.939661][ T7453] kexec: Could not allocate control_code_buffer [ 191.316030][ T7500] binder: 7494:7500 ioctl 40086602 e20 returned -22 [ 192.856432][ T7519] netlink: 342 bytes leftover after parsing attributes in process `syz.2.338'. [ 192.947107][ T7520] FAULT_INJECTION: forcing a failure. [ 192.947107][ T7520] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 193.006655][ T7520] CPU: 0 UID: 0 PID: 7520 Comm: syz.2.338 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.006704][ T7520] Tainted: [L]=SOFTLOCKUP [ 193.006715][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.006732][ T7520] Call Trace: [ 193.006741][ T7520] [ 193.006771][ T7520] dump_stack_lvl+0x100/0x190 [ 193.006833][ T7520] should_fail_ex.cold+0x5/0xa [ 193.006875][ T7520] _copy_from_user+0x2e/0xd0 [ 193.006922][ T7520] copy_msghdr_from_user+0x9f/0x4f0 [ 193.006974][ T7520] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 193.007041][ T7520] ___sys_sendmsg+0x106/0x1e0 [ 193.007089][ T7520] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.007182][ T7520] __sys_sendmsg+0x170/0x220 [ 193.007224][ T7520] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.007272][ T7520] ? rcu_is_watching+0x12/0xc0 [ 193.007315][ T7520] do_syscall_64+0x115/0x840 [ 193.007360][ T7520] ? clear_bhb_loop+0x40/0x90 [ 193.007399][ T7520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.007432][ T7520] RIP: 0033:0x7fdf14d9ce59 [ 193.007458][ T7520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.007488][ T7520] RSP: 002b:00007fdf15bb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.007518][ T7520] RAX: ffffffffffffffda RBX: 00007fdf15016090 RCX: 00007fdf14d9ce59 [ 193.007539][ T7520] RDX: 00000000000040d0 RSI: 0000200000000040 RDI: 0000000000000004 [ 193.007558][ T7520] RBP: 00007fdf15bb8090 R08: 0000000000000000 R09: 0000000000000000 [ 193.007577][ T7520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.007594][ T7520] R13: 00007fdf15016128 R14: 00007fdf15016090 R15: 00007ffe954fb138 [ 193.007634][ T7520] [ 194.227145][ T7544] netlink: 334 bytes leftover after parsing attributes in process `syz.0.344'. [ 194.368012][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375712][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.555993][ T7573] netlink: 342 bytes leftover after parsing attributes in process `syz.0.351'. [ 195.668205][ T7574] FAULT_INJECTION: forcing a failure. [ 195.668205][ T7574] name failslab, interval 1, probability 0, space 0, times 0 [ 195.741031][ T7574] CPU: 1 UID: 0 PID: 7574 Comm: syz.0.351 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.741079][ T7574] Tainted: [L]=SOFTLOCKUP [ 195.741089][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.741107][ T7574] Call Trace: [ 195.741116][ T7574] [ 195.741128][ T7574] dump_stack_lvl+0x100/0x190 [ 195.741190][ T7574] should_fail_ex.cold+0x5/0xa [ 195.741231][ T7574] should_failslab+0xc2/0x120 [ 195.741269][ T7574] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 195.741322][ T7574] ? __alloc_skb+0x140/0x710 [ 195.741349][ T7574] ? __alloc_skb+0x5b7/0x710 [ 195.741383][ T7574] __alloc_skb+0x140/0x710 [ 195.741410][ T7574] ? __alloc_skb+0x5b7/0x710 [ 195.741436][ T7574] ? __pfx___alloc_skb+0x10/0x10 [ 195.741477][ T7574] netlink_alloc_large_skb+0x69/0x150 [ 195.741530][ T7574] netlink_sendmsg+0x680/0xda0 [ 195.741578][ T7574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.741618][ T7574] ? __import_iovec+0x1d2/0x640 [ 195.741667][ T7574] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 195.741713][ T7574] ____sys_sendmsg+0x9e1/0xb70 [ 195.741752][ T7574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.741797][ T7574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.741856][ T7574] ___sys_sendmsg+0x190/0x1e0 [ 195.741901][ T7574] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.741991][ T7574] __sys_sendmsg+0x170/0x220 [ 195.742025][ T7574] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.742073][ T7574] ? rcu_is_watching+0x12/0xc0 [ 195.742114][ T7574] do_syscall_64+0x115/0x840 [ 195.742157][ T7574] ? clear_bhb_loop+0x40/0x90 [ 195.742195][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.742226][ T7574] RIP: 0033:0x7f24d9b9ce59 [ 195.742251][ T7574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.742280][ T7574] RSP: 002b:00007f24daacc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.742308][ T7574] RAX: ffffffffffffffda RBX: 00007f24d9e16090 RCX: 00007f24d9b9ce59 [ 195.742329][ T7574] RDX: 00000000000040d0 RSI: 0000200000000040 RDI: 0000000000000004 [ 195.742347][ T7574] RBP: 00007f24daacc090 R08: 0000000000000000 R09: 0000000000000000 [ 195.742366][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.742383][ T7574] R13: 00007f24d9e16128 R14: 00007f24d9e16090 R15: 00007ffd530231f8 [ 195.742423][ T7574] [ 196.530251][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 196.582365][ T7583] ptrace attach of ""[7590] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7583] [ 196.606887][ T7586] ptrace attach of ""[7590] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7586] [ 196.911398][ T50] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 197.088044][ T7581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.285648][ T7565] Process accounting paused [ 197.484997][ T7593] kexec: Could not allocate control_code_buffer [ 197.625129][ T7605] vivid-007: ================= START STATUS ================= [ 197.645955][ T7605] vivid-007: Enable Output Cropping: true grabbed [ 197.674634][ T7605] vivid-007: Enable Output Composing: true grabbed [ 197.724652][ T7605] vivid-007: Enable Output Scaler: true grabbed [ 197.755409][ T7605] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 197.808306][ T7605] vivid-007: Transmit Mode: HDMI grabbed [ 197.867082][ T7605] vivid-007: Hotplug Present: 0x00000000 [ 197.907946][ T7605] vivid-007: RxSense Present: 0x00000000 [ 197.928016][ T7605] vivid-007: EDID Present: 0x00000000 [ 197.961613][ T7605] vivid-007: ================== END STATUS ================== [ 198.088060][ T29] audit: type=1804 audit(1781443220.438:6): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.359" name="/newroot/92/file0" dev="tmpfs" ino=502 res=1 errno=0 [ 198.150663][ T29] audit: type=1804 audit(1781443220.468:7): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.359" name="/newroot/92/file0" dev="tmpfs" ino=502 res=1 errno=0 [ 198.244127][ T7631] netlink: 342 bytes leftover after parsing attributes in process `syz.1.362'. [ 198.843754][ T7641] warning: `syz.0.363' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 199.240244][ T7638] binder: 7635:7638 ioctl c0306201 200000000000 returned -11 [ 199.321795][ T7650] netlink: 342 bytes leftover after parsing attributes in process `syz.2.366'. [ 199.396671][ T7638] smpboot: CPU 1 is now offline [ 200.003055][ T7661] FAULT_INJECTION: forcing a failure. [ 200.003055][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 200.040867][ T7645] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.064933][ T7661] CPU: 0 UID: 0 PID: 7661 Comm: syz.2.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.064969][ T7661] Tainted: [L]=SOFTLOCKUP [ 200.064977][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.064991][ T7661] Call Trace: [ 200.064998][ T7661] [ 200.065006][ T7661] dump_stack_lvl+0x100/0x190 [ 200.065049][ T7661] should_fail_ex.cold+0x5/0xa [ 200.065077][ T7661] should_failslab+0xc2/0x120 [ 200.065105][ T7661] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 200.065142][ T7661] ? __kernfs_new_node+0xd2/0x9f0 [ 200.065172][ T7661] __kernfs_new_node+0xd2/0x9f0 [ 200.065200][ T7661] ? __pfx___kernfs_new_node+0x10/0x10 [ 200.065231][ T7661] ? find_held_lock+0x2b/0x80 [ 200.065258][ T7661] ? kernfs_root+0xee/0x2a0 [ 200.065281][ T7661] ? kernfs_root+0xee/0x2a0 [ 200.065311][ T7661] kernfs_new_node+0x11b/0x1a0 [ 200.065344][ T7661] __kernfs_create_file+0x53/0x350 [ 200.065381][ T7661] sysfs_add_file_mode_ns+0x207/0x3c0 [ 200.065411][ T7661] internal_create_group+0x593/0xfb0 [ 200.065443][ T7661] ? __pfx_internal_create_group+0x10/0x10 [ 200.065473][ T7661] ? kernfs_create_link+0x1bd/0x240 [ 200.065512][ T7661] internal_create_groups+0x9d/0x150 [ 200.065544][ T7661] device_add+0x71a/0x1950 [ 200.065570][ T7661] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.065603][ T7661] ? __pfx_device_add+0x10/0x10 [ 200.065627][ T7661] ? lockdep_init_map_type+0x5c/0x250 [ 200.065664][ T7661] ? __init_waitqueue_head+0xca/0x150 [ 200.065695][ T7661] netdev_register_kobject+0x1a9/0x3d0 [ 200.065736][ T7661] register_netdevice+0x151c/0x24b0 [ 200.065768][ T7661] ? __pfx_register_netdevice+0x10/0x10 [ 200.065791][ T7661] ? net_generic+0xea/0x2a0 [ 200.065819][ T7661] ppp_dev_configure+0x986/0xcb0 [ 200.065847][ T7661] ppp_ioctl+0x9d7/0x27c0 [ 200.065872][ T7661] ? find_held_lock+0x2b/0x80 [ 200.065899][ T7661] ? __pfx_ppp_ioctl+0x10/0x10 [ 200.065927][ T7661] ? __fget_files+0x21f/0x3d0 [ 200.065957][ T7661] ? __pfx_ppp_ioctl+0x10/0x10 [ 200.065981][ T7661] __x64_sys_ioctl+0x18e/0x210 [ 200.066005][ T7661] do_syscall_64+0x115/0x840 [ 200.066037][ T7661] ? clear_bhb_loop+0x40/0x90 [ 200.066065][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.066088][ T7661] RIP: 0033:0x7fdf14d9ce59 [ 200.066107][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.066128][ T7661] RSP: 002b:00007fdf15bd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.066149][ T7661] RAX: ffffffffffffffda RBX: 00007fdf15015fa0 RCX: 00007fdf14d9ce59 [ 200.066164][ T7661] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 200.066177][ T7661] RBP: 00007fdf14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 200.066191][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.066203][ T7661] R13: 00007fdf15016038 R14: 00007fdf15015fa0 R15: 00007ffe954fb138 [ 200.066232][ T7661] [ 200.364405][ T7645] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 200.407925][ T7645] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 200.436673][ T7645] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.442765][ T7645] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 200.451975][ T7645] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 200.463956][ T7645] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.469923][ T7645] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 200.478949][ T7645] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.190094][ T7685] netlink: 334 bytes leftover after parsing attributes in process `syz.1.373'. [ 202.026316][ T7699] FAULT_INJECTION: forcing a failure. [ 202.026316][ T7699] name failslab, interval 1, probability 0, space 0, times 0 [ 202.043339][ T5635] Bluetooth: hci0: command 0x2016 tx timeout [ 202.108095][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.2.376 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.108131][ T7699] Tainted: [L]=SOFTLOCKUP [ 202.108139][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.108153][ T7699] Call Trace: [ 202.108160][ T7699] [ 202.108168][ T7699] dump_stack_lvl+0x100/0x190 [ 202.108221][ T7699] should_fail_ex.cold+0x5/0xa [ 202.108248][ T7699] ? tracepoint_add_func+0x3a8/0x1150 [ 202.108278][ T7699] should_failslab+0xc2/0x120 [ 202.108303][ T7699] __kmalloc_noprof+0xe0/0x850 [ 202.108341][ T7699] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 202.108370][ T7699] tracepoint_add_func+0x3a8/0x1150 [ 202.108399][ T7699] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 202.108432][ T7699] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 202.108459][ T7699] tracepoint_probe_register+0xc4/0x110 [ 202.108498][ T7699] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 202.108529][ T7699] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 202.108563][ T7699] ? __pfx_trace_event_raw_event_nfsd_file_insert_err+0x10/0x10 [ 202.108599][ T7699] trace_event_reg+0x209/0x350 [ 202.108628][ T7699] __ftrace_event_enable_disable+0x211/0x6f0 [ 202.108664][ T7699] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 202.108708][ T7699] ftrace_set_clr_event+0x1b7/0x3f0 [ 202.108733][ T7699] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 202.108756][ T7699] ? trace_get_user+0x3ae/0xa70 [ 202.108793][ T7699] ftrace_event_write+0x259/0x2c0 [ 202.108817][ T7699] ? __pfx_ftrace_event_write+0x10/0x10 [ 202.108850][ T7699] vfs_write+0x2aa/0x1070 [ 202.108874][ T7699] ? __pfx_ftrace_event_write+0x10/0x10 [ 202.108900][ T7699] ? __pfx_vfs_write+0x10/0x10 [ 202.108923][ T7699] ? __fget_files+0x215/0x3d0 [ 202.108953][ T7699] ? __fget_files+0x21f/0x3d0 [ 202.108985][ T7699] ksys_write+0x12a/0x250 [ 202.109009][ T7699] ? __pfx_ksys_write+0x10/0x10 [ 202.109035][ T7699] ? rcu_is_watching+0x12/0xc0 [ 202.109063][ T7699] do_syscall_64+0x115/0x840 [ 202.109093][ T7699] ? clear_bhb_loop+0x40/0x90 [ 202.109122][ T7699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.109144][ T7699] RIP: 0033:0x7fdf14d9ce59 [ 202.109160][ T7699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.109180][ T7699] RSP: 002b:00007fdf15bd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.109200][ T7699] RAX: ffffffffffffffda RBX: 00007fdf15015fa0 RCX: 00007fdf14d9ce59 [ 202.109214][ T7699] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000007 [ 202.109226][ T7699] RBP: 00007fdf14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 202.109238][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.109250][ T7699] R13: 00007fdf15016038 R14: 00007fdf15015fa0 R15: 00007ffe954fb138 [ 202.109277][ T7699] [ 202.396337][ T7699] event trace: Could not enable event nfsd_file_insert_err [ 202.814382][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.822436][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.161319][ T7708] netlink: 342 bytes leftover after parsing attributes in process `syz.2.378'. [ 204.094560][ T7724] ubi0: attaching mtd0 [ 204.122396][ T50] Bluetooth: hci0: command 0x2016 tx timeout [ 204.182710][ T7724] ubi0: scanning is finished [ 204.182789][ T7724] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 204.658669][ T7724] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 204.841611][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.841661][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.202476][ T5635] Bluetooth: hci0: command 0x2016 tx timeout [ 206.734593][ T7753] netlink: 350 bytes leftover after parsing attributes in process `syz.2.385'. [ 206.921596][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.928699][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.217171][ T7833] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 212.423061][ T7833] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 212.475339][ T7833] pci 0000:00:01.3: PCI INT A: no GSI [ 213.330897][ T7849] netlink: zone id is out of range [ 213.358442][ T7849] netlink: zone id is out of range [ 213.406015][ T7849] netlink: zone id is out of range [ 213.460971][ T7849] netlink: zone id is out of range [ 213.495281][ T7849] netlink: zone id is out of range [ 213.526281][ T7849] netlink: del zone limit has 8 unknown bytes [ 215.629076][ T7883] netlink: 342 bytes leftover after parsing attributes in process `syz.0.404'. [ 217.568888][ T7903] netlink: zone id is out of range [ 217.603044][ T7903] netlink: zone id is out of range [ 217.633849][ T7903] netlink: zone id is out of range [ 217.693529][ T7903] netlink: zone id is out of range [ 218.668164][ T7924] vivid-007: ================= START STATUS ================= [ 218.768790][ T7924] vivid-007: Enable Output Cropping: true [ 218.876314][ T7924] vivid-007: Enable Output Composing: true [ 218.952831][ T7924] vivid-007: Enable Output Scaler: true [ 219.024308][ T7924] vivid-007: Tx RGB Quantization Range: Automatic [ 219.067997][ T7924] vivid-007: Transmit Mode: HDMI [ 219.087087][ T7933] netlink: 342 bytes leftover after parsing attributes in process `syz.2.415'. [ 219.114460][ T7924] vivid-007: Hotplug Present: 0x00000000 [ 219.178356][ T7924] vivid-007: RxSense Present: 0x00000000 [ 219.228138][ T7924] vivid-007: EDID Present: 0x00000000 [ 219.270637][ T7924] vivid-007: ================== END STATUS ================== [ 221.843346][ T7959] net_ratelimit: 4 callbacks suppressed [ 221.843365][ T7959] netlink: zone id is out of range [ 221.892712][ T7959] netlink: zone id is out of range [ 221.915188][ T7959] netlink: zone id is out of range [ 221.937892][ T7959] netlink: zone id is out of range [ 221.992364][ T7959] netlink: zone id is out of range [ 222.026024][ T7959] netlink: zone id is out of range [ 222.059515][ T7959] netlink: zone id is out of range [ 222.102774][ T7959] netlink: zone id is out of range [ 222.140670][ T7959] netlink: zone id is out of range [ 222.170800][ T7959] netlink: zone id is out of range [ 225.878888][ T8003] netlink: 342 bytes leftover after parsing attributes in process `syz.0.428'. [ 227.073021][ T8023] net_ratelimit: 196 callbacks suppressed [ 227.073041][ T8023] netlink: zone id is out of range [ 227.271987][ T8023] netlink: zone id is out of range [ 227.359338][ T8023] netlink: zone id is out of range [ 227.428461][ T8023] netlink: zone id is out of range [ 227.508602][ T8023] netlink: zone id is out of range [ 227.577872][ T8023] netlink: zone id is out of range [ 227.687213][ T8023] netlink: zone id is out of range [ 227.789277][ T8023] netlink: zone id is out of range [ 227.861583][ T8023] netlink: zone id is out of range [ 227.930757][ T8023] netlink: zone id is out of range [ 228.060563][ T8027] Process accounting resumed [ 228.574543][ T8039] netlink: 342 bytes leftover after parsing attributes in process `syz.2.435'. [ 229.179898][ T8045] netlink: 25 bytes leftover after parsing attributes in process `syz.3.436'. [ 230.976315][ T8069] FAULT_INJECTION: forcing a failure. [ 230.976315][ T8069] name failslab, interval 1, probability 0, space 0, times 0 [ 231.069961][ T8069] CPU: 0 UID: 0 PID: 8069 Comm: syz.1.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.069994][ T8069] Tainted: [L]=SOFTLOCKUP [ 231.070001][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.070013][ T8069] Call Trace: [ 231.070020][ T8069] [ 231.070027][ T8069] dump_stack_lvl+0x100/0x190 [ 231.070074][ T8069] should_fail_ex.cold+0x5/0xa [ 231.070101][ T8069] should_failslab+0xc2/0x120 [ 231.070127][ T8069] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 231.070162][ T8069] ? sock_alloc_inode+0x26/0x290 [ 231.070191][ T8069] ? __pfx_sock_alloc_inode+0x10/0x10 [ 231.070218][ T8069] sock_alloc_inode+0x26/0x290 [ 231.070242][ T8069] ? __pfx_sock_alloc_inode+0x10/0x10 [ 231.070266][ T8069] alloc_inode+0x68/0x250 [ 231.070300][ T8069] sock_alloc+0x44/0x280 [ 231.070320][ T8069] ? security_socket_create+0x7f/0x250 [ 231.070344][ T8069] __sock_create+0xc2/0x860 [ 231.070376][ T8069] __sys_socket+0x14d/0x260 [ 231.070405][ T8069] ? __pfx___sys_socket+0x10/0x10 [ 231.070442][ T8069] __x64_sys_socket+0x72/0xb0 [ 231.070470][ T8069] ? lockdep_hardirqs_on+0x78/0x100 [ 231.070500][ T8069] do_syscall_64+0x115/0x840 [ 231.070529][ T8069] ? clear_bhb_loop+0x40/0x90 [ 231.070555][ T8069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.070576][ T8069] RIP: 0033:0x7fb82f79ce59 [ 231.070592][ T8069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.070612][ T8069] RSP: 002b:00007fb83066d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 231.070631][ T8069] RAX: ffffffffffffffda RBX: 00007fb82fa15fa0 RCX: 00007fb82f79ce59 [ 231.070644][ T8069] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 231.070656][ T8069] RBP: 00007fb82f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 231.070668][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.070680][ T8069] R13: 00007fb82fa16038 R14: 00007fb82fa15fa0 R15: 00007ffe187d8c38 [ 231.070706][ T8069] [ 234.118479][ T8102] Line length is too long: Should be less than 4094 [ 235.906151][ T808] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 235.967852][ T8094] kexec: Could not allocate control_code_buffer [ 238.328985][ T8143] netlink: 302 bytes leftover after parsing attributes in process `syz.1.455'. [ 239.594572][ T5723] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 245.194058][ T8239] bridge0: port 3(dummy0) entered blocking state [ 245.259831][ T8239] bridge0: port 3(dummy0) entered disabled state [ 245.314013][ T8239] dummy0: entered allmulticast mode [ 245.397202][ T8239] dummy0: entered promiscuous mode [ 245.447271][ T8239] bridge0: port 3(dummy0) entered blocking state [ 245.455147][ T8239] bridge0: port 3(dummy0) entered forwarding state [ 245.604796][ T8248] netlink: 'syz.1.478': attribute type 5 has an invalid length. [ 245.768770][ T8248] netlink: 4158 bytes leftover after parsing attributes in process `syz.1.478'. [ 248.191672][ T8286] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 248.521786][ T8298] FAULT_INJECTION: forcing a failure. [ 248.521786][ T8298] name failslab, interval 1, probability 0, space 0, times 0 [ 248.582505][ T8298] CPU: 0 UID: 5 PID: 8298 Comm: syz.2.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.582539][ T8298] Tainted: [L]=SOFTLOCKUP [ 248.582546][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 248.582563][ T8298] Call Trace: [ 248.582571][ T8298] [ 248.582579][ T8298] dump_stack_lvl+0x100/0x190 [ 248.582641][ T8298] should_fail_ex.cold+0x5/0xa [ 248.582672][ T8298] should_failslab+0xc2/0x120 [ 248.582704][ T8298] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 248.582731][ T8298] ? fib_rules_register+0x30/0x500 [ 248.582773][ T8298] kmemdup_noprof+0x29/0x60 [ 248.582800][ T8298] fib_rules_register+0x30/0x500 [ 248.582835][ T8298] fib4_rules_init+0x1f/0x1c0 [ 248.582860][ T8298] fib_net_init+0x1dc/0x3f0 [ 248.582893][ T8298] ? is_module_address+0x69/0xf0 [ 248.582916][ T8298] ? __pfx_fib_net_init+0x10/0x10 [ 248.582948][ T8298] ? timer_init_key+0x155/0x330 [ 248.582988][ T8298] ? devinet_init_net+0x56c/0x8d0 [ 248.583027][ T8298] ? __pfx_fib_net_init+0x10/0x10 [ 248.583058][ T8298] ops_init+0x1e2/0x5f0 [ 248.583088][ T8298] setup_net+0x118/0x3a0 [ 248.583116][ T8298] ? __pfx_setup_net+0x10/0x10 [ 248.583143][ T8298] ? mutex_init_lockdep+0xf1/0x120 [ 248.583171][ T8298] copy_net_ns+0x46f/0x7c0 [ 248.583204][ T8298] create_new_namespaces+0x3ea/0xac0 [ 248.583241][ T8298] unshare_nsproxy_namespaces+0xf2/0x220 [ 248.583275][ T8298] ksys_unshare+0x438/0xab0 [ 248.583313][ T8298] ? __pfx_ksys_unshare+0x10/0x10 [ 248.583347][ T8298] ? xfd_validate_state+0x129/0x190 [ 248.583370][ T8298] ? set_cred_ucounts+0x10f/0x200 [ 248.583405][ T8298] __x64_sys_unshare+0x31/0x40 [ 248.583440][ T8298] do_syscall_64+0x115/0x840 [ 248.583476][ T8298] ? clear_bhb_loop+0x40/0x90 [ 248.583506][ T8298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.583532][ T8298] RIP: 0033:0x7fdf14d9ce59 [ 248.583551][ T8298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.583575][ T8298] RSP: 002b:00007fdf15bd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 248.583602][ T8298] RAX: ffffffffffffffda RBX: 00007fdf15015fa0 RCX: 00007fdf14d9ce59 [ 248.583619][ T8298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 248.583633][ T8298] RBP: 00007fdf14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 248.583648][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.583662][ T8298] R13: 00007fdf15016038 R14: 00007fdf15015fa0 R15: 00007ffe954fb138 [ 248.583692][ T8298] [ 250.977667][ T8334] random: crng reseeded on system resumption [ 251.250858][ T8334] hub 1-0:1.0: USB hub found [ 251.307821][ T8334] hub 1-0:1.0: 1 port detected [ 252.786572][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.502'. [ 252.842200][ T8368] veth1_vlan: entered allmulticast mode [ 253.236275][ T5635] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 254.146777][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 254.245421][ T8401] netlink: 342 bytes leftover after parsing attributes in process `syz.0.506'. [ 254.545216][ T8405] FAULT_INJECTION: forcing a failure. [ 254.545216][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 254.598545][ T8405] CPU: 0 UID: 0 PID: 8405 Comm: syz.2.507 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.598599][ T8405] Tainted: [L]=SOFTLOCKUP [ 254.598607][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.598621][ T8405] Call Trace: [ 254.598628][ T8405] [ 254.598636][ T8405] dump_stack_lvl+0x100/0x190 [ 254.598680][ T8405] should_fail_ex.cold+0x5/0xa [ 254.598708][ T8405] should_failslab+0xc2/0x120 [ 254.598736][ T8405] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 254.598760][ T8405] ? kstrdup_const+0x63/0x80 [ 254.598788][ T8405] kstrdup+0x51/0xe0 [ 254.598812][ T8405] kstrdup_const+0x63/0x80 [ 254.598835][ T8405] alloc_vfsmnt+0xe5/0x6a0 [ 254.598867][ T8405] ? __pfx___might_resched+0x10/0x10 [ 254.598892][ T8405] clone_mnt+0x4b/0x930 [ 254.598917][ T8405] copy_tree+0xfc/0xbf0 [ 254.598944][ T8405] ? __pfx_down_write+0x10/0x10 [ 254.598986][ T8405] copy_mnt_ns+0x3fa/0x1180 [ 254.599023][ T8405] ? __pfx_copy_mnt_ns+0x10/0x10 [ 254.599057][ T8405] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 254.599099][ T8405] ? create_new_namespaces+0x30/0xac0 [ 254.599128][ T8405] ? rcu_is_watching+0x12/0xc0 [ 254.599157][ T8405] create_new_namespaces+0xd3/0xac0 [ 254.599184][ T8405] ? bpf_lsm_capable+0x9/0x10 [ 254.599208][ T8405] ? security_capable+0x80/0x260 [ 254.599233][ T8405] unshare_nsproxy_namespaces+0xf2/0x220 [ 254.599264][ T8405] ksys_unshare+0x438/0xab0 [ 254.599298][ T8405] ? __pfx_ksys_unshare+0x10/0x10 [ 254.599329][ T8405] ? xfd_validate_state+0x129/0x190 [ 254.599350][ T8405] ? ksys_write+0x1ac/0x250 [ 254.599384][ T8405] __x64_sys_unshare+0x31/0x40 [ 254.599416][ T8405] do_syscall_64+0x115/0x840 [ 254.599458][ T8405] ? clear_bhb_loop+0x40/0x90 [ 254.599501][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.599524][ T8405] RIP: 0033:0x7fdf14d9ce59 [ 254.599542][ T8405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.599563][ T8405] RSP: 002b:00007fdf15bd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 254.599583][ T8405] RAX: ffffffffffffffda RBX: 00007fdf15015fa0 RCX: 00007fdf14d9ce59 [ 254.599598][ T8405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 254.599611][ T8405] RBP: 00007fdf14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 254.599624][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.599637][ T8405] R13: 00007fdf15016038 R14: 00007fdf15015fa0 R15: 00007ffe954fb138 [ 254.599664][ T8405] [ 255.534696][ T8410] net_ratelimit: 403 callbacks suppressed [ 255.534717][ T8410] netlink: zone id is out of range [ 255.546365][ T8410] netlink: zone id is out of range [ 255.551883][ T8410] netlink: zone id is out of range [ 255.558149][ T8410] netlink: zone id is out of range [ 255.564627][ T8410] netlink: zone id is out of range [ 255.570083][ T8410] netlink: zone id is out of range [ 255.575310][ T8410] netlink: zone id is out of range [ 255.580667][ T8410] netlink: zone id is out of range [ 255.590073][ T8410] netlink: zone id is out of range [ 255.603713][ T8410] netlink: zone id is out of range [ 255.699121][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.705590][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.491135][ T8419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.509'. [ 258.145348][ T8431] Process accounting paused [ 260.858641][ T8488] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 260.914158][ T8488] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 260.958819][ T8488] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 261.000166][ T8488] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 261.041060][ T8488] page dumped because: unmovable page [ 261.065799][ T8488] page_owner tracks the page as allocated [ 261.104473][ T8488] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1549056415, free_ts 0 [ 261.168869][ T8488] register_early_stack+0x74/0xaf [ 261.201497][ T8488] init_page_owner+0x4c/0xa10 [ 261.223314][ T8488] page_ext_init+0x71d/0x780 [ 261.245250][ T8488] mm_core_init+0x229/0x270 [ 261.264871][ T8488] page_owner free stack trace missing [ 261.702135][ T8516] net_ratelimit: 196 callbacks suppressed [ 261.702154][ T8516] netlink: zone id is out of range [ 261.849029][ T8516] netlink: zone id is out of range [ 261.888181][ T8516] netlink: zone id is out of range [ 261.916859][ T8516] netlink: zone id is out of range [ 261.960586][ T8516] netlink: zone id is out of range [ 261.999060][ T8516] netlink: zone id is out of range [ 262.036466][ T8516] netlink: zone id is out of range [ 262.071462][ T8516] netlink: zone id is out of range [ 262.102689][ T8516] netlink: zone id is out of range [ 262.134999][ T8516] netlink: zone id is out of range [ 262.241242][ T8525] hub 1-0:1.0: USB hub found [ 262.272735][ T8525] hub 1-0:1.0: 1 port detected [ 262.427487][ T8524] FAULT_INJECTION: forcing a failure. [ 262.427487][ T8524] name failslab, interval 1, probability 0, space 0, times 0 [ 262.558564][ T8528] hub 1-0:1.0: USB hub found [ 262.576740][ T8532] netlink: 338 bytes leftover after parsing attributes in process `syz.1.532'. [ 262.602259][ T8528] hub 1-0:1.0: 1 port detected [ 262.621243][ T8533] netlink: 338 bytes leftover after parsing attributes in process `syz.1.532'. [ 262.633966][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.2.530 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.633998][ T8524] Tainted: [L]=SOFTLOCKUP [ 262.634006][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.634018][ T8524] Call Trace: [ 262.634025][ T8524] [ 262.634032][ T8524] dump_stack_lvl+0x100/0x190 [ 262.634073][ T8524] should_fail_ex.cold+0x5/0xa [ 262.634099][ T8524] should_failslab+0xc2/0x120 [ 262.634125][ T8524] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 262.634160][ T8524] ? __d_alloc+0x34/0xa40 [ 262.634193][ T8524] __d_alloc+0x34/0xa40 [ 262.634224][ T8524] d_alloc_parallel+0x111/0x14e0 [ 262.634250][ T8524] ? __lock_acquire+0x4a5/0x2630 [ 262.634287][ T8524] ? __pfx_d_alloc_parallel+0x10/0x10 [ 262.634310][ T8524] ? lockdep_init_map_type+0x5c/0x250 [ 262.634346][ T8524] ? lockdep_init_map_type+0x5c/0x250 [ 262.634384][ T8524] __lookup_slow+0x193/0x460 [ 262.634422][ T8524] ? __pfx___lookup_slow+0x10/0x10 [ 262.634468][ T8524] ? __d_lookup+0x266/0x4a0 [ 262.634493][ T8524] lookup_slow+0x50/0x70 [ 262.634525][ T8524] link_path_walk+0x1377/0x1cc0 [ 262.634557][ T8524] path_openat+0x1be/0x31a0 [ 262.634581][ T8524] ? kasan_save_stack+0x3f/0x50 [ 262.634601][ T8524] ? kasan_save_stack+0x30/0x50 [ 262.634620][ T8524] ? kasan_save_track+0x14/0x30 [ 262.634640][ T8524] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 262.634680][ T8524] ? __pfx_path_openat+0x10/0x10 [ 262.634716][ T8524] do_file_open+0x20e/0x430 [ 262.634745][ T8524] ? __pfx_do_file_open+0x10/0x10 [ 262.634790][ T8524] ? alloc_fd+0x476/0x790 [ 262.634818][ T8524] ? do_getname+0x191/0x390 [ 262.634851][ T8524] do_sys_openat2+0x10d/0x1e0 [ 262.634884][ T8524] ? __pfx_do_sys_openat2+0x10/0x10 [ 262.634926][ T8524] __x64_sys_openat+0x12d/0x210 [ 262.634960][ T8524] ? __pfx___x64_sys_openat+0x10/0x10 [ 262.634991][ T8524] ? ksys_write+0x1ac/0x250 [ 262.635018][ T8524] ? rcu_is_watching+0x12/0xc0 [ 262.635046][ T8524] do_syscall_64+0x115/0x840 [ 262.635075][ T8524] ? clear_bhb_loop+0x40/0x90 [ 262.635101][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.635122][ T8524] RIP: 0033:0x7fdf14d9ce59 [ 262.635139][ T8524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.635159][ T8524] RSP: 002b:00007fdf15bd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 262.635178][ T8524] RAX: ffffffffffffffda RBX: 00007fdf15015fa0 RCX: 00007fdf14d9ce59 [ 262.635192][ T8524] RDX: 0000000000010481 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 262.635205][ T8524] RBP: 00007fdf14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 262.635217][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.635229][ T8524] R13: 00007fdf15016038 R14: 00007fdf15015fa0 R15: 00007ffe954fb138 [ 262.635255][ T8524] [ 263.061971][ T8536] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 263.103908][ T8532] netlink: 306 bytes leftover after parsing attributes in process `syz.1.532'. [ 263.114773][ T8533] netlink: 338 bytes leftover after parsing attributes in process `syz.1.532'. [ 263.124000][ T8533] netlink: 338 bytes leftover after parsing attributes in process `syz.1.532'. [ 263.134255][ T8533] netlink: 338 bytes leftover after parsing attributes in process `syz.1.532'. [ 263.143448][ T8533] netlink: 338 bytes leftover after parsing attributes in process `syz.1.532'. [ 263.152689][ T8533] netlink: 338 bytes leftover after parsing attributes in process `syz.1.532'. [ 263.161859][ T8533] netlink: 338 bytes leftover after parsing attributes in process `syz.1.532'. [ 263.171114][ T8533] netlink: 338 bytes leftover after parsing attributes in process `syz.1.532'. [ 264.137134][ T8542] KVM: debugfs: duplicate directory 8542-3 [ 264.196397][ T8542] KVM: debugfs: duplicate directory 8542-4 [ 264.278067][ T8542] KVM: debugfs: duplicate directory 8542-5 [ 264.353203][ T8542] KVM: debugfs: duplicate directory 8542-6 [ 264.412192][ T8542] KVM: debugfs: duplicate directory 8542-7 [ 264.451488][ T8542] KVM: debugfs: duplicate directory 8542-8 [ 264.518086][ T8542] KVM: debugfs: duplicate directory 8542-9 [ 264.562835][ T8542] KVM: debugfs: duplicate directory 8542-10 [ 264.638047][ T8542] KVM: debugfs: duplicate directory 8542-11 [ 264.674437][ T8542] KVM: debugfs: duplicate directory 8542-12 [ 267.604435][ T8603] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.628747][ T8603] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.655183][ T8603] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 268.006619][ T8610] __nla_validate_parse: 8 callbacks suppressed [ 268.006639][ T8610] netlink: 342 bytes leftover after parsing attributes in process `syz.3.549'. [ 268.397806][ T8622] netlink: 342 bytes leftover after parsing attributes in process `syz.2.552'. [ 268.704175][ T8630] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 269.156762][ T8634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'. [ 269.380830][ T5635] Bluetooth: hci0: command 0x2016 tx timeout [ 269.621810][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.733065][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 271.090194][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807675a800: rx timeout, send abort [ 271.598396][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807675a800: abort rx timeout. Force session deactivation [ 272.635249][ T8688] net_ratelimit: 404 callbacks suppressed [ 272.635266][ T8688] netlink: zone id is out of range [ 272.765397][ T8688] netlink: zone id is out of range [ 272.818029][ T8688] netlink: zone id is out of range [ 272.868739][ T8688] netlink: zone id is out of range [ 272.928919][ T8688] netlink: zone id is out of range [ 272.975349][ T8688] netlink: zone id is out of range [ 273.022260][ T8688] netlink: zone id is out of range [ 273.059232][ T8688] netlink: zone id is out of range [ 273.086187][ T8688] netlink: zone id is out of range [ 273.116074][ T8688] netlink: zone id is out of range [ 273.652280][ T5635] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 274.959687][ T8734] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(32769.0.87751119), cmd(12) [ 275.670754][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 275.802393][ T8757] binder: 8752:8757 ioctl 40046205 0 returned -22 [ 275.850945][ T8755] IPVS: length: 537396514 != 24 [ 275.911653][ T8757] QAT: failed to copy from user cfg_data. [ 277.737325][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 278.562532][ T8823] FAULT_INJECTION: forcing a failure. [ 278.562532][ T8823] name failslab, interval 1, probability 0, space 0, times 0 [ 278.650711][ T8823] CPU: 0 UID: 0 PID: 8823 Comm: syz.2.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.650743][ T8823] Tainted: [L]=SOFTLOCKUP [ 278.650750][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.650762][ T8823] Call Trace: [ 278.650768][ T8823] [ 278.650775][ T8823] dump_stack_lvl+0x100/0x190 [ 278.650813][ T8823] should_fail_ex.cold+0x5/0xa [ 278.650838][ T8823] ? tomoyo_realpath_from_path+0xb6/0x690 [ 278.650867][ T8823] should_failslab+0xc2/0x120 [ 278.650891][ T8823] __kmalloc_noprof+0xe0/0x850 [ 278.650922][ T8823] ? kfree+0x1dd/0x6c0 [ 278.650953][ T8823] tomoyo_realpath_from_path+0xb6/0x690 [ 278.650988][ T8823] tomoyo_path_number_perm+0x23c/0x580 [ 278.651011][ T8823] ? tomoyo_path_number_perm+0x22e/0x580 [ 278.651036][ T8823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 278.651137][ T8823] ? find_held_lock+0x2b/0x80 [ 278.651166][ T8823] ? __fget_files+0x215/0x3d0 [ 278.651209][ T8823] ? hook_file_ioctl_common+0x149/0x410 [ 278.651238][ T8823] ? __fget_files+0x215/0x3d0 [ 278.651269][ T8823] ? __fget_files+0x21f/0x3d0 [ 278.651299][ T8823] ? 0xffffffff81000000 [ 278.651315][ T8823] ? 0xffffffff81000000 [ 278.651330][ T8823] security_file_ioctl+0xd3/0x230 [ 278.651360][ T8823] __x64_sys_ioctl+0xb7/0x210 [ 278.651385][ T8823] do_syscall_64+0x115/0x840 [ 278.651417][ T8823] ? clear_bhb_loop+0x40/0x90 [ 278.651446][ T8823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.651469][ T8823] RIP: 0033:0x7fdf14d9ce59 [ 278.651487][ T8823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.651508][ T8823] RSP: 002b:00007fdf15bd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.651529][ T8823] RAX: ffffffffffffffda RBX: 00007fdf15015fa0 RCX: 00007fdf14d9ce59 [ 278.651544][ T8823] RDX: ffffffff81000000 RSI: 0000000000004c03 RDI: 0000000000000003 [ 278.651558][ T8823] RBP: 00007fdf15bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 278.651572][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.651585][ T8823] R13: 00007fdf15016038 R14: 00007fdf15015fa0 R15: 00007ffe954fb138 [ 278.651607][ T8823] ? 0xffffffff81000000 [ 278.651629][ T8823] [ 278.651638][ T8823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.309386][ T8833] [ 279.854257][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 280.032524][ T8858] Zero length message leads to an empty skb [ 281.646208][ T5709] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 281.843223][ T8880] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 281.871957][ T8880] netlink: 'syz.1.603': attribute type 6 has an invalid length. [ 283.345911][ T8891] mmap: syz.1.605 (8891) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 283.524229][ T8902] net_ratelimit: 197 callbacks suppressed [ 283.524248][ T8902] netlink: zone id is out of range [ 283.612639][ T8902] netlink: zone id is out of range [ 283.674890][ T8902] netlink: zone id is out of range [ 283.711908][ T8902] netlink: zone id is out of range [ 283.748318][ T8902] netlink: zone id is out of range [ 283.782353][ T8902] netlink: zone id is out of range [ 283.817879][ T8902] netlink: zone id is out of range [ 283.845417][ T8902] netlink: zone id is out of range [ 283.887437][ T8902] netlink: zone id is out of range [ 283.913474][ T8902] netlink: zone id is out of range [ 285.117261][ T8937] process 'syz.3.611' launched './file0' with NULL argv: empty string added [ 287.999752][ T8984] ubi0: attaching mtd0 [ 288.079153][ T8965] Process accounting resumed [ 288.249970][ T8984] ubi0: scanning is finished [ 288.334209][ T8984] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 289.061706][ T8984] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 289.736233][ T9011] zswap: compressor not available [ 290.250370][ T9023] net_ratelimit: 195 callbacks suppressed [ 290.250389][ T9023] netlink: zone id is out of range [ 290.376411][ T9023] netlink: zone id is out of range [ 290.460543][ T9023] netlink: zone id is out of range [ 290.508994][ T9023] netlink: zone id is out of range [ 290.539777][ T9023] netlink: zone id is out of range [ 290.577935][ T9023] netlink: zone id is out of range [ 290.609766][ T9023] netlink: zone id is out of range [ 290.637596][ T9023] netlink: zone id is out of range [ 290.665604][ T9023] netlink: zone id is out of range [ 290.698067][ T9023] netlink: zone id is out of range [ 291.012378][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 291.397742][ T50] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 291.397775][ T50] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 291.412796][ T50] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 291.412853][ T50] Bluetooth: hci2: adv larger than maximum supported [ 291.424382][ T50] Bluetooth: hci2: Malformed LE Event: 0x0d [ 295.950982][ T9114] FAULT_INJECTION: forcing a failure. [ 295.950982][ T9114] name failslab, interval 1, probability 0, space 0, times 0 [ 296.027419][ T9114] CPU: 0 UID: 0 PID: 9114 Comm: syz.0.647 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.027456][ T9114] Tainted: [L]=SOFTLOCKUP [ 296.027464][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.027477][ T9114] Call Trace: [ 296.027484][ T9114] [ 296.027493][ T9114] dump_stack_lvl+0x100/0x190 [ 296.027537][ T9114] should_fail_ex.cold+0x5/0xa [ 296.027566][ T9114] ? tomoyo_encode2+0xfb/0x3c0 [ 296.027598][ T9114] should_failslab+0xc2/0x120 [ 296.027626][ T9114] __kmalloc_noprof+0xe0/0x850 [ 296.027668][ T9114] ? d_absolute_path+0x136/0x1b0 [ 296.027696][ T9114] tomoyo_encode2+0xfb/0x3c0 [ 296.027733][ T9114] tomoyo_encode+0x29/0x50 [ 296.027764][ T9114] tomoyo_realpath_from_path+0x18c/0x690 [ 296.027807][ T9114] tomoyo_check_open_permission+0x2af/0x3c0 [ 296.027839][ T9114] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 296.027878][ T9114] ? hook_file_open+0x24e/0x7a0 [ 296.027928][ T9114] ? path_get+0x61/0x80 [ 296.027963][ T9114] tomoyo_file_open+0x6b/0x90 [ 296.027985][ T9114] security_file_open+0xb5/0x1e0 [ 296.028018][ T9114] do_dentry_open+0x588/0x14d0 [ 296.028054][ T9114] vfs_open+0x82/0x3f0 [ 296.028092][ T9114] path_openat+0x208c/0x31a0 [ 296.028131][ T9114] ? __pfx_path_openat+0x10/0x10 [ 296.028171][ T9114] do_file_open+0x20e/0x430 [ 296.028202][ T9114] ? __pfx_do_file_open+0x10/0x10 [ 296.028252][ T9114] ? alloc_fd+0x476/0x790 [ 296.028284][ T9114] ? do_getname+0x191/0x390 [ 296.028322][ T9114] do_sys_openat2+0x10d/0x1e0 [ 296.028358][ T9114] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.028405][ T9114] __x64_sys_openat+0x12d/0x210 [ 296.028442][ T9114] ? __pfx___x64_sys_openat+0x10/0x10 [ 296.028477][ T9114] ? ksys_write+0x1ac/0x250 [ 296.028507][ T9114] ? rcu_is_watching+0x12/0xc0 [ 296.028537][ T9114] do_syscall_64+0x115/0x840 [ 296.028570][ T9114] ? clear_bhb_loop+0x40/0x90 [ 296.028599][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.028622][ T9114] RIP: 0033:0x7f24d9b9ce59 [ 296.028640][ T9114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.028667][ T9114] RSP: 002b:00007f24daaed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.028689][ T9114] RAX: ffffffffffffffda RBX: 00007f24d9e15fa0 RCX: 00007f24d9b9ce59 [ 296.028704][ T9114] RDX: 000000000000a901 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 296.028718][ T9114] RBP: 00007f24d9c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 296.028732][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.028745][ T9114] R13: 00007f24d9e16038 R14: 00007f24d9e15fa0 R15: 00007ffd530231f8 [ 296.028774][ T9114] [ 296.028806][ T9114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.704500][ T9144] syz.3.653 uses obsolete (PF_INET,SOCK_PACKET) [ 300.138891][ T9167] FAULT_INJECTION: forcing a failure. [ 300.138891][ T9167] name fail_futex, interval 1, probability 0, space 0, times 0 [ 300.152644][ T9167] CPU: 0 UID: 0 PID: 9167 Comm: syz.3.658 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.152682][ T9167] Tainted: [L]=SOFTLOCKUP [ 300.152690][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.152706][ T9167] Call Trace: [ 300.152713][ T9167] [ 300.152721][ T9167] dump_stack_lvl+0x100/0x190 [ 300.152769][ T9167] should_fail_ex.cold+0x5/0xa [ 300.152800][ T9167] should_fail_futex+0x4c/0x60 [ 300.152841][ T9167] futex_lock_pi_atomic+0x12d/0xaf0 [ 300.152871][ T9167] ? futex_hash+0x141/0x370 [ 300.152913][ T9167] futex_lock_pi+0x245/0x7a0 [ 300.152947][ T9167] ? __pfx_futex_lock_pi+0x10/0x10 [ 300.153007][ T9167] ? __pfx_futex_wake_mark+0x10/0x10 [ 300.153045][ T9167] ? ksys_write+0x190/0x250 [ 300.153072][ T9167] ? ksys_write+0x190/0x250 [ 300.153106][ T9167] do_futex+0x18a/0x350 [ 300.153131][ T9167] ? __pfx_do_futex+0x10/0x10 [ 300.153164][ T9167] __x64_sys_futex+0x34f/0x4d0 [ 300.153193][ T9167] ? __pfx___x64_sys_futex+0x10/0x10 [ 300.153218][ T9167] ? ksys_write+0x1ac/0x250 [ 300.153249][ T9167] ? rcu_is_watching+0x12/0xc0 [ 300.153282][ T9167] do_syscall_64+0x115/0x840 [ 300.153322][ T9167] ? clear_bhb_loop+0x40/0x90 [ 300.153353][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.153378][ T9167] RIP: 0033:0x7f04ac39ce59 [ 300.153398][ T9167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.153422][ T9167] RSP: 002b:00007f04ad2bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 300.153444][ T9167] RAX: ffffffffffffffda RBX: 00007f04ac615fa0 RCX: 00007f04ac39ce59 [ 300.153460][ T9167] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 300.153474][ T9167] RBP: 00007f04ac432d6f R08: 0000000000000000 R09: 000000008000fff5 [ 300.153489][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.153503][ T9167] R13: 00007f04ac616038 R14: 00007f04ac615fa0 R15: 00007ffea71db088 [ 300.153534][ T9167] [ 300.945563][ T9178] FAULT_INJECTION: forcing a failure. [ 300.945563][ T9178] name failslab, interval 1, probability 0, space 0, times 0 [ 301.019268][ T9178] CPU: 0 UID: 0 PID: 9178 Comm: syz.0.661 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.019308][ T9178] Tainted: [L]=SOFTLOCKUP [ 301.019316][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.019331][ T9178] Call Trace: [ 301.019339][ T9178] [ 301.019349][ T9178] dump_stack_lvl+0x100/0x190 [ 301.019397][ T9178] should_fail_ex.cold+0x5/0xa [ 301.019427][ T9178] ? process_vm_rw_core.constprop.0+0x1d7/0x950 [ 301.019455][ T9178] should_failslab+0xc2/0x120 [ 301.019485][ T9178] __kmalloc_noprof+0xe0/0x850 [ 301.019526][ T9178] ? find_held_lock+0x2b/0x80 [ 301.019561][ T9178] process_vm_rw_core.constprop.0+0x1d7/0x950 [ 301.019591][ T9178] ? futex_unqueue+0x13d/0x2c0 [ 301.019621][ T9178] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 301.019650][ T9178] ? iovec_from_user+0xda/0x140 [ 301.019699][ T9178] ? iovec_from_user+0xda/0x140 [ 301.019740][ T9178] process_vm_rw+0x226/0x2d0 [ 301.019768][ T9178] ? __pfx_process_vm_rw+0x10/0x10 [ 301.019799][ T9178] ? msgctl_stat+0x543/0x780 [ 301.019849][ T9178] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 301.019900][ T9178] ? xfd_validate_state+0x129/0x190 [ 301.019923][ T9178] ? __task_pid_nr_ns+0x1ca/0x510 [ 301.019966][ T9178] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 301.019993][ T9178] ? do_syscall_64+0x90/0x840 [ 301.020029][ T9178] ? lockdep_hardirqs_on+0x78/0x100 [ 301.020064][ T9178] do_syscall_64+0x115/0x840 [ 301.020099][ T9178] ? clear_bhb_loop+0x40/0x90 [ 301.020129][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.020154][ T9178] RIP: 0033:0x7f24d9b9ce59 [ 301.020173][ T9178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.020197][ T9178] RSP: 002b:00007f24daaed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 301.020219][ T9178] RAX: ffffffffffffffda RBX: 00007f24d9e15fa0 RCX: 00007f24d9b9ce59 [ 301.020235][ T9178] RDX: 0000000000000003 RSI: 0000200000002980 RDI: 00000000000002ff [ 301.020256][ T9178] RBP: 00007f24d9c32d6f R08: 0000000000000004 R09: 0000000000000000 [ 301.020271][ T9178] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 301.020286][ T9178] R13: 00007f24d9e16038 R14: 00007f24d9e15fa0 R15: 00007ffd530231f8 [ 301.020316][ T9178] [ 303.478965][ T9218] random: crng reseeded on system resumption [ 303.565093][ T9219] ubi0: attaching mtd0 [ 303.636513][ T9219] ubi0: scanning is finished [ 303.721503][ T9219] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 304.060462][ T9227] netlink: 178 bytes leftover after parsing attributes in process `syz.0.670'. [ 304.071806][ T9219] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 304.177615][ T9223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.670'. [ 305.730199][ T9253] binder: 9252:9253 ioctl c0046209 ffffffffffffffff returned -22 [ 307.007959][ T9283] futex_wake_op: syz.3.678 tries to shift op by -2048; fix this program [ 307.057806][ T9283] blktrace: Concurrent blktraces are not allowed on loop2 [ 308.712056][ T9320] Process accounting resumed [ 308.997721][ T9328] ======================================================= [ 308.997721][ T9328] WARNING: The mand mount option has been deprecated and [ 308.997721][ T9328] and is ignored by this kernel. Remove the mand [ 308.997721][ T9328] option from the mount to silence this warning. [ 308.997721][ T9328] ======================================================= [ 309.660170][ T9337] vhci_hcd: not connected 4 [ 311.503576][ T29] audit: type=1800 audit(1843108695.496:8): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.697" name="lu_gp_id" dev="configfs" ino=30716 res=0 errno=0 [ 314.228679][ T9437] netlink: 342 bytes leftover after parsing attributes in process `syz.2.702'. [ 316.194134][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.707'. [ 316.817988][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.826282][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.607593][ T9507] FAULT_INJECTION: forcing a failure. [ 317.607593][ T9507] name failslab, interval 1, probability 0, space 0, times 0 [ 317.766687][ T9507] CPU: 0 UID: 0 PID: 9507 Comm: syz.3.713 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.766726][ T9507] Tainted: [L]=SOFTLOCKUP [ 317.766734][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.766749][ T9507] Call Trace: [ 317.766756][ T9507] [ 317.766765][ T9507] dump_stack_lvl+0x100/0x190 [ 317.766825][ T9507] should_fail_ex.cold+0x5/0xa [ 317.766857][ T9507] should_failslab+0xc2/0x120 [ 317.766888][ T9507] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 317.766914][ T9507] ? drm_atomic_get_connector_state+0x270/0x8f0 [ 317.766951][ T9507] krealloc_node_align_noprof+0x321/0x3e0 [ 317.766982][ T9507] drm_atomic_get_connector_state+0x270/0x8f0 [ 317.767018][ T9507] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 317.767054][ T9507] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 317.767088][ T9507] ? modeset_lock+0x114/0x6d0 [ 317.767121][ T9507] __drm_atomic_helper_set_config+0x5f6/0xee0 [ 317.767158][ T9507] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 317.767194][ T9507] ? drm_client_rotation+0x451/0x6a0 [ 317.767234][ T9507] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 317.767281][ T9507] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 317.767349][ T9507] drm_client_modeset_commit_locked+0x14d/0x580 [ 317.767393][ T9507] drm_client_modeset_commit+0x4f/0x80 [ 317.767556][ T9507] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 317.767598][ T9507] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 317.767637][ T9507] drm_fbdev_client_restore+0x1b/0x30 [ 317.767664][ T9507] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 317.767690][ T9507] drm_client_dev_restore+0x205/0x2a0 [ 317.767738][ T9507] drm_release+0x2c6/0x360 [ 317.767771][ T9507] ? __pfx_drm_release+0x10/0x10 [ 317.767804][ T9507] __fput+0x3ff/0xb50 [ 317.767857][ T9507] task_work_run+0x150/0x240 [ 317.767898][ T9507] ? __pfx_task_work_run+0x10/0x10 [ 317.767924][ T9507] ? rcu_is_watching+0x12/0xc0 [ 317.767962][ T9507] exit_to_user_mode_loop+0x157/0x670 [ 317.768008][ T9507] ? rcu_is_watching+0x12/0xc0 [ 317.768040][ T9507] do_syscall_64+0x652/0x840 [ 317.768075][ T9507] ? clear_bhb_loop+0x40/0x90 [ 317.768106][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.768132][ T9507] RIP: 0033:0x7f04ac39ce59 [ 317.768157][ T9507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.768187][ T9507] RSP: 002b:00007f04ad2bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 317.768214][ T9507] RAX: 0000000000000000 RBX: 00007f04ac615fa0 RCX: 00007f04ac39ce59 [ 317.768231][ T9507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 317.768246][ T9507] RBP: 00007f04ac432d6f R08: 0000000000000000 R09: 0000000000000000 [ 317.768261][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.768275][ T9507] R13: 00007f04ac616038 R14: 00007f04ac615fa0 R15: 00007ffea71db088 [ 317.768319][ T9507] [ 318.379503][ T9516] random: crng reseeded on system resumption [ 318.924449][ T9504] netlink: 338 bytes leftover after parsing attributes in process `syz.0.712'. [ 319.535611][ T9508] Process accounting paused [ 320.376896][ T9541] netlink: 342 bytes leftover after parsing attributes in process `syz.0.719'. [ 321.557147][ T9558] input: f as /devices/virtual/input/input7 [ 322.201219][ T9539] kexec: Could not allocate control_code_buffer [ 322.573152][ T9571] FAULT_INJECTION: forcing a failure. [ 322.573152][ T9571] name fail_futex, interval 1, probability 0, space 0, times 0 [ 322.716251][ T9571] CPU: 0 UID: 0 PID: 9571 Comm: syz.2.725 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.716287][ T9571] Tainted: [L]=SOFTLOCKUP [ 322.716295][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.716309][ T9571] Call Trace: [ 322.716316][ T9571] [ 322.716324][ T9571] dump_stack_lvl+0x100/0x190 [ 322.716367][ T9571] should_fail_ex.cold+0x5/0xa [ 322.716392][ T9571] ? rcu_is_watching+0x12/0xc0 [ 322.716430][ T9571] get_futex_key+0x1d2/0x1510 [ 322.716471][ T9571] ? __pfx_get_futex_key+0x10/0x10 [ 322.716510][ T9571] ? trace_pid_list_is_set+0x22c/0x390 [ 322.716546][ T9571] futex_wait_setup+0x83/0x510 [ 322.716581][ T9571] __futex_wait+0x19f/0x300 [ 322.716611][ T9571] ? __pfx___futex_wait+0x10/0x10 [ 322.716644][ T9571] ? __pfx_futex_wake_mark+0x10/0x10 [ 322.716676][ T9571] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 322.716699][ T9571] ? __hrtimer_setup+0x208/0x330 [ 322.716724][ T9571] ? ktime_add_safe+0x60/0x70 [ 322.716749][ T9571] futex_wait+0xe6/0x370 [ 322.716777][ T9571] ? __pfx_futex_wait+0x10/0x10 [ 322.716810][ T9571] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 322.716841][ T9571] do_futex+0x1ef/0x350 [ 322.716865][ T9571] ? __pfx_do_futex+0x10/0x10 [ 322.716887][ T9571] ? ktime_get+0x22c/0x320 [ 322.716919][ T9571] ? lockdep_hardirqs_on+0x78/0x100 [ 322.716955][ T9571] __x64_sys_futex+0x34f/0x4d0 [ 322.716983][ T9571] ? __pfx___x64_sys_futex+0x10/0x10 [ 322.717011][ T9571] ? rcu_is_watching+0x12/0xc0 [ 322.717039][ T9571] do_syscall_64+0x115/0x840 [ 322.717071][ T9571] ? clear_bhb_loop+0x40/0x90 [ 322.717098][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.717121][ T9571] RIP: 0033:0x7fdf14d9ce59 [ 322.717140][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.717162][ T9571] RSP: 002b:00007ffe954fb298 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 322.717183][ T9571] RAX: ffffffffffffffda RBX: 000000000004eda3 RCX: 00007fdf14d9ce59 [ 322.717198][ T9571] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdf1501609c [ 322.717211][ T9571] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 322.717224][ T9571] R10: 00007ffe954fb3a0 R11: 0000000000000246 R12: 00007ffe954fb3c0 [ 322.717238][ T9571] R13: 00007fdf1501609c R14: 000000000004edd5 R15: 00007ffe954fb3a0 [ 322.717269][ T9571] [ 324.420281][ T9589] FAULT_INJECTION: forcing a failure. [ 324.420281][ T9589] name failslab, interval 1, probability 0, space 0, times 0 [ 324.501512][ T9589] CPU: 0 UID: 0 PID: 9589 Comm: syz.1.727 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.501556][ T9589] Tainted: [L]=SOFTLOCKUP [ 324.501565][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.501580][ T9589] Call Trace: [ 324.501588][ T9589] [ 324.501597][ T9589] dump_stack_lvl+0x100/0x190 [ 324.501644][ T9589] should_fail_ex.cold+0x5/0xa [ 324.501675][ T9589] ? lsm_blob_alloc+0x68/0x90 [ 324.501712][ T9589] should_failslab+0xc2/0x120 [ 324.501743][ T9589] __kmalloc_noprof+0xe0/0x850 [ 324.501783][ T9589] ? trace_kmem_cache_alloc+0xd5/0x100 [ 324.501819][ T9589] lsm_blob_alloc+0x68/0x90 [ 324.501857][ T9589] security_sk_alloc+0x2d/0x290 [ 324.501885][ T9589] sk_prot_alloc+0x1d1/0x2a0 [ 324.501919][ T9589] sk_alloc+0x36/0xe80 [ 324.501961][ T9589] inet_create+0x3a0/0x1060 [ 324.502002][ T9589] ? inet_create+0x94/0x1060 [ 324.502046][ T9589] __sock_create+0x339/0x860 [ 324.502086][ T9589] udp_sock_create4+0xa6/0x450 [ 324.502118][ T9589] ? __pfx_udp_sock_create4+0x10/0x10 [ 324.502155][ T9589] ? lockdep_hardirqs_on+0x78/0x100 [ 324.502191][ T9589] ? crng_make_state+0x2b0/0x6c0 [ 324.502235][ T9589] rxrpc_open_socket+0x4ef/0x6b0 [ 324.502265][ T9589] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 324.502309][ T9589] ? rcu_is_watching+0x12/0xc0 [ 324.502345][ T9589] ? trace_rxrpc_local+0x80/0x250 [ 324.502374][ T9589] rxrpc_lookup_local+0xac7/0x1220 [ 324.502409][ T9589] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 324.502442][ T9589] ? __local_bh_enable_ip+0x9e/0x120 [ 324.502478][ T9589] rxrpc_sendmsg+0x34a/0x680 [ 324.502515][ T9589] sock_write_iter+0x524/0x5a0 [ 324.502547][ T9589] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 324.502579][ T9589] ? __pfx_sock_write_iter+0x10/0x10 [ 324.502615][ T9589] ? futex_hash+0x141/0x370 [ 324.502664][ T9589] ? bpf_lsm_file_permission+0x9/0x10 [ 324.502687][ T9589] ? security_file_permission+0x76/0x210 [ 324.502722][ T9589] ? rw_verify_area+0xce/0x6d0 [ 324.502749][ T9589] vfs_write+0x6ac/0x1070 [ 324.502778][ T9589] ? __pfx_sock_write_iter+0x10/0x10 [ 324.502814][ T9589] ? __pfx_vfs_write+0x10/0x10 [ 324.502840][ T9589] ? find_held_lock+0x2b/0x80 [ 324.502890][ T9589] ksys_write+0x1f8/0x250 [ 324.502919][ T9589] ? __pfx_ksys_write+0x10/0x10 [ 324.502950][ T9589] ? rcu_is_watching+0x12/0xc0 [ 324.502982][ T9589] do_syscall_64+0x115/0x840 [ 324.503018][ T9589] ? clear_bhb_loop+0x40/0x90 [ 324.503048][ T9589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.503074][ T9589] RIP: 0033:0x7fb82f79ce59 [ 324.503094][ T9589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.503118][ T9589] RSP: 002b:00007fb83066d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 324.503142][ T9589] RAX: ffffffffffffffda RBX: 00007fb82fa15fa0 RCX: 00007fb82f79ce59 [ 324.503158][ T9589] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 324.503173][ T9589] RBP: 00007fb82f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 324.503189][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.503204][ T9589] R13: 00007fb82fa16038 R14: 00007fb82fa15fa0 R15: 00007ffe187d8c38 [ 324.503235][ T9589] [ 325.530497][ T9598] net_ratelimit: 195 callbacks suppressed [ 325.530522][ T9598] netlink: zone id is out of range [ 325.571472][ T9598] netlink: zone id is out of range [ 325.588678][ T9598] netlink: zone id is out of range [ 325.630002][ T9598] netlink: zone id is out of range [ 325.677294][ T9598] netlink: zone id is out of range [ 325.696040][ T9598] netlink: zone id is out of range [ 325.711362][ T9598] netlink: zone id is out of range [ 325.738431][ T9598] netlink: zone id is out of range [ 325.757852][ T9598] netlink: zone id is out of range [ 325.770529][ T9598] netlink: zone id is out of range [ 326.383831][ T9608] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 326.398798][ T9606] netlink: 342 bytes leftover after parsing attributes in process `syz.1.732'. [ 326.602127][ T9609] zswap: compressor not available [ 327.557514][ T9634] futex_wake_op: syz.2.736 tries to shift op by -2048; fix this program [ 330.146958][ T9667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.743'. [ 331.608398][ T9693] netlink: 'syz.0.748': attribute type 11 has an invalid length. [ 332.549076][ T9707] FAULT_INJECTION: forcing a failure. [ 332.549076][ T9707] name failslab, interval 1, probability 0, space 0, times 0 [ 332.657332][ T9707] CPU: 0 UID: 0 PID: 9707 Comm: syz.2.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.657370][ T9707] Tainted: [L]=SOFTLOCKUP [ 332.657378][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 332.657392][ T9707] Call Trace: [ 332.657399][ T9707] [ 332.657408][ T9707] dump_stack_lvl+0x100/0x190 [ 332.657455][ T9707] should_fail_ex.cold+0x5/0xa [ 332.657485][ T9707] should_failslab+0xc2/0x120 [ 332.657514][ T9707] __kmalloc_cache_noprof+0x7a/0x6f0 [ 332.657549][ T9707] ? kset_create_and_add+0x4d/0x190 [ 332.657573][ T9707] ? lockdep_init_map_type+0x5c/0x250 [ 332.657618][ T9707] kset_create_and_add+0x4d/0x190 [ 332.657643][ T9707] netdev_register_kobject+0x1ef/0x3d0 [ 332.657680][ T9707] register_netdevice+0x151c/0x24b0 [ 332.657719][ T9707] ? __pfx_register_netdevice+0x10/0x10 [ 332.657748][ T9707] ? net_generic+0xea/0x2a0 [ 332.657778][ T9707] ppp_dev_configure+0x986/0xcb0 [ 332.657809][ T9707] ppp_ioctl+0x9d7/0x27c0 [ 332.657836][ T9707] ? find_held_lock+0x2b/0x80 [ 332.657866][ T9707] ? __pfx_ppp_ioctl+0x10/0x10 [ 332.657896][ T9707] ? __fget_files+0x21f/0x3d0 [ 332.657929][ T9707] ? __pfx_ppp_ioctl+0x10/0x10 [ 332.657955][ T9707] __x64_sys_ioctl+0x18e/0x210 [ 332.657981][ T9707] do_syscall_64+0x115/0x840 [ 332.658015][ T9707] ? clear_bhb_loop+0x40/0x90 [ 332.658044][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.658069][ T9707] RIP: 0033:0x7fdf14d9ce59 [ 332.658088][ T9707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.658113][ T9707] RSP: 002b:00007fdf15b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.658137][ T9707] RAX: ffffffffffffffda RBX: 00007fdf15016180 RCX: 00007fdf14d9ce59 [ 332.658152][ T9707] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 332.658167][ T9707] RBP: 00007fdf14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 332.658182][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.658196][ T9707] R13: 00007fdf15016218 R14: 00007fdf15016180 R15: 00007ffe954fb138 [ 332.658226][ T9707] [ 335.244538][ T808] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 335.282049][ T9731] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 335.385638][ T9731] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 335.481778][ T9731] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 336.060062][ T9750] Process accounting resumed [ 337.108686][ T50] Bluetooth: hci0: command 0x2016 tx timeout [ 337.387541][ T9788] blktrace: Concurrent blktraces are not allowed on nbd5 [ 337.427133][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 337.506384][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 339.215788][ T9801] binder: 9799:9801 ioctl 4018620d ffffffffffffffff returned -22 [ 339.376899][ T9824] FAULT_INJECTION: forcing a failure. [ 339.376899][ T9824] name failslab, interval 1, probability 0, space 0, times 0 [ 339.449841][ T9824] CPU: 0 UID: 0 PID: 9824 Comm: syz.2.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.449878][ T9824] Tainted: [L]=SOFTLOCKUP [ 339.449886][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 339.449900][ T9824] Call Trace: [ 339.449907][ T9824] [ 339.449915][ T9824] dump_stack_lvl+0x100/0x190 [ 339.449959][ T9824] should_fail_ex.cold+0x5/0xa [ 339.449989][ T9824] should_failslab+0xc2/0x120 [ 339.450017][ T9824] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 339.450062][ T9824] ? __alloc_skb+0x140/0x710 [ 339.450087][ T9824] __alloc_skb+0x140/0x710 [ 339.450108][ T9824] ? __pfx___alloc_skb+0x10/0x10 [ 339.450130][ T9824] ? find_held_lock+0x2b/0x80 [ 339.450176][ T9824] ? tipc_node_xmit+0x1f6/0xfb0 [ 339.450210][ T9824] ? lockdep_init_map_type+0x5c/0x250 [ 339.450253][ T9824] tipc_buf_acquire+0x26/0xe0 [ 339.450282][ T9824] tipc_msg_build+0x112/0x1100 [ 339.450317][ T9824] ? __pfx_tipc_node_xmit+0x10/0x10 [ 339.450354][ T9824] ? __pfx_tipc_msg_build+0x10/0x10 [ 339.450394][ T9824] ? register_lock_class+0x40/0x560 [ 339.450439][ T9824] __tipc_sendstream+0x6a6/0x10f0 [ 339.450478][ T9824] ? __pfx___tipc_sendstream+0x10/0x10 [ 339.450507][ T9824] ? do_raw_spin_lock+0x128/0x260 [ 339.450533][ T9824] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.450560][ T9824] ? __pfx_woken_wake_function+0x10/0x10 [ 339.450593][ T9824] ? __local_bh_enable_ip+0x9e/0x120 [ 339.450626][ T9824] tipc_send_packet+0x6c/0xa0 [ 339.450655][ T9824] ____sys_sendmsg+0x9e1/0xb70 [ 339.450685][ T9824] ? __pfx_tipc_send_packet+0x10/0x10 [ 339.450716][ T9824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.450753][ T9824] ? rcu_is_watching+0x12/0xc0 [ 339.450779][ T9824] ? ___sys_sendmsg+0x19d/0x1e0 [ 339.450810][ T9824] ? kfree+0x1dd/0x6c0 [ 339.450848][ T9824] ___sys_sendmsg+0x190/0x1e0 [ 339.450884][ T9824] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.450943][ T9824] ? __pfx___might_resched+0x10/0x10 [ 339.450974][ T9824] __sys_sendmmsg+0x205/0x430 [ 339.451002][ T9824] ? __pfx___sys_sendmmsg+0x10/0x10 [ 339.451035][ T9824] ? __pfx_do_futex+0x10/0x10 [ 339.451063][ T9824] ? __fget_files+0x215/0x3d0 [ 339.451105][ T9824] ? xfd_validate_state+0x129/0x190 [ 339.451136][ T9824] __x64_sys_sendmmsg+0x9c/0x100 [ 339.451161][ T9824] ? lockdep_hardirqs_on+0x78/0x100 [ 339.451197][ T9824] do_syscall_64+0x115/0x840 [ 339.451231][ T9824] ? clear_bhb_loop+0x40/0x90 [ 339.451260][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.451285][ T9824] RIP: 0033:0x7fdf14d9ce59 [ 339.451304][ T9824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.451328][ T9824] RSP: 002b:00007fdf15bd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 339.451352][ T9824] RAX: ffffffffffffffda RBX: 00007fdf15015fa0 RCX: 00007fdf14d9ce59 [ 339.451367][ T9824] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 339.451381][ T9824] RBP: 00007fdf14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 339.451395][ T9824] R10: 0000000000001f00 R11: 0000000000000246 R12: 0000000000000000 [ 339.451410][ T9824] R13: 00007fdf15016038 R14: 00007fdf15015fa0 R15: 00007ffe954fb138 [ 339.451441][ T9824] [ 340.445631][ T9860] random: crng reseeded on system resumption [ 341.144059][ T9862] NFSD: Failed to start, no listeners configured. [ 342.857404][ T9914] ubi0: attaching mtd0 [ 342.897762][ T9914] ubi0: scanning is finished [ 342.958259][ T9914] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 343.293958][ T29] audit: type=1326 audit(1843108727.461:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.3.783" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04ac39ce59 code=0x0 [ 343.567780][ T9914] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 345.678260][ T9931] Process accounting resumed [ 349.359222][T10019] FAULT_INJECTION: forcing a failure. [ 349.359222][T10019] name failslab, interval 1, probability 0, space 0, times 0 [ 349.421928][T10019] CPU: 0 UID: 0 PID: 10019 Comm: syz.3.796 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.421964][T10019] Tainted: [L]=SOFTLOCKUP [ 349.421971][T10019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.421985][T10019] Call Trace: [ 349.421992][T10019] [ 349.422000][T10019] dump_stack_lvl+0x100/0x190 [ 349.422043][T10019] should_fail_ex.cold+0x5/0xa [ 349.422071][T10019] should_failslab+0xc2/0x120 [ 349.422099][T10019] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 349.422135][T10019] ? mas_preallocate+0x1105/0x14a0 [ 349.422162][T10019] mas_preallocate+0x1105/0x14a0 [ 349.422188][T10019] ? __pfx_mas_preallocate+0x10/0x10 [ 349.422223][T10019] ? anon_vma_name+0x5a/0x250 [ 349.422259][T10019] __split_vma+0x33d/0xda0 [ 349.422297][T10019] ? __pfx___split_vma+0x10/0x10 [ 349.422341][T10019] ? vma_link+0x5ee/0x8d0 [ 349.422385][T10019] vms_gather_munmap_vmas+0x1d2/0x1720 [ 349.422424][T10019] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 349.422458][T10019] ? alloc_new_pud+0x217/0x320 [ 349.422491][T10019] ? get_old_pud+0xd8/0x360 [ 349.422524][T10019] ? move_page_tables+0x11c/0x4610 [ 349.422560][T10019] ? __pfx_copy_vma+0x10/0x10 [ 349.422602][T10019] do_vmi_align_munmap+0x287/0x5f0 [ 349.422640][T10019] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 349.422737][T10019] do_vmi_munmap+0x1f8/0x3e0 [ 349.422781][T10019] move_vma+0xe5b/0x1920 [ 349.422825][T10019] ? __pfx_move_vma+0x10/0x10 [ 349.422868][T10019] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 349.422911][T10019] ? vrm_set_new_addr+0x204/0x290 [ 349.422953][T10019] mremap_to+0x234/0x4c0 [ 349.422991][T10019] ? mas_walk+0x6ef/0x9b0 [ 349.423024][T10019] ? __pfx_mremap_to+0x10/0x10 [ 349.423063][T10019] ? check_prep_vma+0x912/0xe60 [ 349.423109][T10019] __do_sys_mremap+0x88c/0x1850 [ 349.423163][T10019] ? __pfx___do_sys_mremap+0x10/0x10 [ 349.423213][T10019] ? do_futex+0x192/0x350 [ 349.423239][T10019] ? __pfx_do_futex+0x10/0x10 [ 349.423272][T10019] ? __x64_sys_futex+0x34f/0x4d0 [ 349.423309][T10019] ? rcu_is_watching+0x12/0xc0 [ 349.423341][T10019] do_syscall_64+0x115/0x840 [ 349.423376][T10019] ? clear_bhb_loop+0x40/0x90 [ 349.423406][T10019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.423432][T10019] RIP: 0033:0x7f04ac39ce59 [ 349.423452][T10019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.423476][T10019] RSP: 002b:00007f04ad2bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 349.423500][T10019] RAX: ffffffffffffffda RBX: 00007f04ac615fa0 RCX: 00007f04ac39ce59 [ 349.423516][T10019] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 349.423531][T10019] RBP: 00007f04ac432d6f R08: 0000000100000000 R09: 0000000000000000 [ 349.423546][T10019] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 349.423561][T10019] R13: 00007f04ac616038 R14: 00007f04ac615fa0 R15: 00007ffea71db088 [ 349.423592][T10019] [ 350.653474][T10018] Process accounting resumed [ 350.969405][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 354.041015][T10059] kexec: Could not allocate control_code_buffer [ 356.123212][ T29] audit: type=1800 audit(1843108740.348:10): pid=10100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.811" name="dbroot" dev="configfs" ino=34155 res=0 errno=0 [ 358.587912][T10133] FAULT_INJECTION: forcing a failure. [ 358.587912][T10133] name failslab, interval 1, probability 0, space 0, times 0 [ 358.682975][T10133] CPU: 0 UID: 0 PID: 10133 Comm: syz.3.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.683016][T10133] Tainted: [L]=SOFTLOCKUP [ 358.683026][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.683041][T10133] Call Trace: [ 358.683049][T10133] [ 358.683058][T10133] dump_stack_lvl+0x100/0x190 [ 358.683105][T10133] should_fail_ex.cold+0x5/0xa [ 358.683136][T10133] should_failslab+0xc2/0x120 [ 358.683167][T10133] __kmalloc_cache_noprof+0x7a/0x6f0 [ 358.683204][T10133] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 358.683252][T10133] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 358.683296][T10133] vidtv_mux_init+0x8a6/0xbf0 [ 358.683338][T10133] vidtv_start_feed+0x34e/0x500 [ 358.683367][T10133] ? __pfx_vidtv_start_feed+0x10/0x10 [ 358.683396][T10133] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 358.683445][T10133] dmx_section_feed_start_filtering+0x3a8/0x660 [ 358.683487][T10133] dvb_dmxdev_filter_start+0x767/0xdd0 [ 358.683524][T10133] dvb_demux_do_ioctl+0xe64/0x1200 [ 358.683560][T10133] dvb_usercopy+0x167/0x340 [ 358.683600][T10133] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 358.683629][T10133] ? __pfx_dvb_usercopy+0x10/0x10 [ 358.683680][T10133] ? __fget_files+0x21f/0x3d0 [ 358.683715][T10133] dvb_demux_ioctl+0x29/0x40 [ 358.683737][T10133] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 358.683761][T10133] __x64_sys_ioctl+0x18e/0x210 [ 358.683789][T10133] do_syscall_64+0x115/0x840 [ 358.683825][T10133] ? clear_bhb_loop+0x40/0x90 [ 358.683855][T10133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.683892][T10133] RIP: 0033:0x7f04ac39ce59 [ 358.683918][T10133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.683952][T10133] RSP: 002b:00007f04ad29c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.683992][T10133] RAX: ffffffffffffffda RBX: 00007f04ac616090 RCX: 00007f04ac39ce59 [ 358.684008][T10133] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 000000000000000e [ 358.684041][T10133] RBP: 00007f04ac432d6f R08: 0000000000000000 R09: 0000000000000000 [ 358.684056][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.684071][T10133] R13: 00007f04ac616128 R14: 00007f04ac616090 R15: 00007ffea71db088 [ 358.684104][T10133] [ 358.684221][ T5723] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 358.922948][ T5723] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 358.931385][ T5723] CPU: 0 UID: 0 PID: 5723 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.942425][ T5723] Tainted: [L]=SOFTLOCKUP [ 358.946747][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.956817][ T5723] Workqueue: events vidtv_mux_tick [ 358.961953][ T5723] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 358.968585][ T5723] Code: fb d4 d7 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 358.988289][ T5723] RSP: 0018:ffffc9000465f3f0 EFLAGS: 00010202 [ 358.994363][ T5723] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 359.002338][ T5723] RDX: 0000000000000000 RSI: ffffffff88302865 RDI: ffff88802f32be00 [ 359.010318][ T5723] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 359.018316][ T5723] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000465f690 [ 359.026292][ T5723] R13: ffffc9000465f670 R14: 0000000000000178 R15: 0000000000000000 [ 359.034289][ T5723] FS: 0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 359.043223][ T5723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.049813][ T5723] CR2: 00007f1e82a00020 CR3: 000000006a39c000 CR4: 00000000003526f0 [ 359.057795][ T5723] Call Trace: [ 359.061080][ T5723] [ 359.064016][ T5723] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 359.070361][ T5723] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 359.075935][ T5723] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 359.082026][ T5723] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 359.087765][ T5723] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 359.093859][ T5723] ? find_held_lock+0x2b/0x80 [ 359.098552][ T5723] ? unwind_next_frame+0x3be/0x2090 [ 359.103761][ T5723] ? unwind_next_frame+0x3be/0x2090 [ 359.108975][ T5723] vidtv_mux_push_si+0x932/0xe80 [ 359.113934][ T5723] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 359.119415][ T5723] ? arch_stack_walk+0x94/0xf0 [ 359.124206][ T5723] ? ret_from_fork_asm+0x1a/0x30 [ 359.129178][ T5723] ? stack_trace_save+0x8e/0xc0 [ 359.134039][ T5723] ? vidtv_memset+0x50/0x90 [ 359.138551][ T5723] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 359.144189][ T5723] ? try_to_merge_one_page+0xae0/0x1a70 [ 359.149755][ T5723] ? kasan_save_track+0x14/0x30 [ 359.154612][ T5723] ? do_raw_spin_lock+0x128/0x260 [ 359.159643][ T5723] vidtv_mux_tick+0xe93/0x1460 [ 359.164441][ T5723] ? __lock_acquire+0x4a5/0x2630 [ 359.169433][ T5723] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 359.174652][ T5723] ? __lock_acquire+0x4a5/0x2630 [ 359.179608][ T5723] ? do_raw_spin_unlock+0x145/0x1e0 [ 359.184814][ T5723] ? debug_object_deactivate+0x2e4/0x3b0 [ 359.190466][ T5723] ? rcu_is_watching+0x12/0xc0 [ 359.195259][ T5723] process_one_work+0xa0e/0x1980 [ 359.200216][ T5723] ? __pfx_process_one_work+0x10/0x10 [ 359.205599][ T5723] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 359.210814][ T5723] worker_thread+0x5ef/0xe50 [ 359.215418][ T5723] ? __pfx_worker_thread+0x10/0x10 [ 359.220532][ T5723] ? kthread+0x13a/0x450 [ 359.224789][ T5723] ? __pfx_worker_thread+0x10/0x10 [ 359.229909][ T5723] kthread+0x370/0x450 [ 359.234000][ T5723] ? __pfx_kthread+0x10/0x10 [ 359.238610][ T5723] ret_from_fork+0x72b/0xd50 [ 359.243208][ T5723] ? __pfx_ret_from_fork+0x10/0x10 [ 359.248327][ T5723] ? __switch_to+0x800/0x1100 [ 359.253016][ T5723] ? __switch_to_asm+0x39/0x70 [ 359.257823][ T5723] ? __pfx_kthread+0x10/0x10 [ 359.262461][ T5723] ret_from_fork_asm+0x1a/0x30 [ 359.267245][ T5723] [ 359.270276][ T5723] Modules linked in: [ 359.275256][ T5723] ---[ end trace 0000000000000000 ]--- [ 359.340371][T10138] syz.2.817 (10138): /proc/10138/oom_adj is deprecated, please use /proc/10138/oom_score_adj instead. [ 359.391836][T10138] capability: warning: `syz.2.817' uses 32-bit capabilities (legacy support in use) SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 360.298361][ T5723] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 360.305051][ T5723] Code: fb d4 d7 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 360.333610][ T5723] RSP: 0018:ffffc9000465f3f0 EFLAGS: 00010202 [ 360.344022][ T1172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.356586][ T5723] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 360.366136][ T5723] RDX: 0000000000000000 RSI: ffffffff88302865 RDI: ffff88802f32be00 [ 360.378780][ T1172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.392623][ T5723] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 360.401828][ T5723] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000465f690 [ 360.415011][ T1172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.428979][ T5723] R13: ffffc9000465f670 R14: 0000000000000178 R15: 0000000000000000 [ 360.480295][ T5723] FS: 0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 360.494669][ T1172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.515625][ T5723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.598264][ T5723] CR2: 00007fff9be90fec CR3: 0000000037c5e000 CR4: 00000000003526f0 [ 360.624741][ T1172] bridge_slave_1: left allmulticast mode [ 360.641618][ T5723] Kernel panic - not syncing: Fatal exception [ 360.647774][ T5723] Kernel Offset: disabled [ 360.652101][ T5723] Rebooting in 86400 seconds..