last executing test programs: 3.621725071s ago: executing program 0 (id=678): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc9218473325", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xe, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x400, 0x80000004, 0xc, 0x0, 0x100000000, 0xb80, 0x100000004e34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r1, 0x0, 0x9a6, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x10000000000b) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC1\x00', 0x20500, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, 0x0) set_mempolicy$auto(0x6, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xa, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/tty/ttyx6/dev\x00', 0x183943, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x18bc00, 0x0) close_range$auto(r3, r3, 0x40) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram3\x00', 0x44000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) 3.060808637s ago: executing program 3 (id=681): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/teql0/statistics/tx_aborted_errors\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0x1e0240, 0x0) read$auto(r1, 0x0, 0x85) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) r2 = socket(0xa, 0xa, 0x3) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x30, 0x0, 0x8f) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/geneve0/drop_unicast_in_l2_multicast\x00', 0xc1e13b61f74943c7, 0x0) sendfile$auto(r3, r3, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(r4, &(0x7f0000000040)={&(0x7f0000000000), 0xfff}, 0x6) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x21, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x309801, 0x0) r5 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000006400)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r6, 0x0, 0xfffffdef) mseal$auto(0x0, 0x7dda, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(r5, &(0x7f000000ac80)='\x00', 0xd) 2.747955422s ago: executing program 2 (id=683): openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/5t\x00', 0x40, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$auto_PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000080)={0x40, 0x2}) 2.704439032s ago: executing program 0 (id=684): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x151401, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/split\x00', 0x0, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/split\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)=""/87, 0x57) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)=""/87, 0x57) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) (async) ioctl$auto(0x3, 0xae41, r4) write$auto(r0, &(0x7f0000000280)='\x00', 0xff) ioctl$auto_KVM_GET_MSRS(r3, 0xaea2, 0x0) ioctl$auto_TUNSETOWNER(r5, 0x400454cc, &(0x7f00000001c0)=0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f00000001c0), 0x1) r6 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="18000000", @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r2, &(0x7f0000000000)='-\x00', 0x30) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r2) (async) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r2) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xff}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x48}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.507333991s ago: executing program 2 (id=685): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x8, 0xffffffffffffffff) r1 = socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) io_uring_setup$auto(0x7, 0x0) getsockopt$auto(r1, 0x107, 0xb, 0x0, 0x0) fcntl$auto(r0, 0x10, 0x2) write$auto(0xca, &(0x7f0000000000)='\x04>V\x1b\x00\x01\x00\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*\xa4\xd80\x12\xb4D.\xf7\xad\x9a\x7f\x84\xe3\xbfX(\x02\xa4\x10K|\nb\xfeA$3\xc0z\x93\xed\x8c\x970\x1b\xacR7M\\\x06\xbfe\xe4\xfeh\x1e\xf5A\x15\xd7\xb7\f\x1c\xc6W0f,\x88L\x97\xdf_m\xd9%/\x8f\xa5\f\x14\x92\x00'/117, 0x100000001) 2.455872497s ago: executing program 0 (id=686): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/140, 0x8c) r1 = prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r1, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4dc8e2f56ac8a0bc5866") mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1500f9"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) landlock_restrict_self$auto(r0, 0xfffffffe) mmap$auto(0xc8, 0xe2, 0x0, 0xeb1, r0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x119200, 0x0) getpid() ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c01, 0x0) 2.371551251s ago: executing program 2 (id=687): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x7ffffffc}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) write$auto_tracing_free_buffer_fops_trace(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x5, 0x4) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) getsockopt$auto_SO_TIMESTAMP_NEW(r1, 0xc4, 0x3f, &(0x7f0000000040)='/dev/nullb0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x189401, 0x0) mmap$auto(0xffffffffffffffff, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xae, 0xffffffffffff0006, 0x16) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x400000100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a001, 0x0) 2.201713505s ago: executing program 3 (id=688): r0 = mq_open$auto(&(0x7f0000000000)='#)[\x00', 0x3dcd, 0x6, &(0x7f0000000040)={0x2, 0x8, 0x4, 0x5}) r1 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f00000000c0)={0x1, &(0x7f0000000080)={0x5, 0x8, 0x10, @raw=0x9}}) r2 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy13/netdev:wlan0/stations/08:02:11:00:00:01/rx_fragments\x00', 0x8000, 0x0) r3 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)=@bpf_attr_3={0x7fffffff, 0x23, 0xa7, 0x0, 0xe1, 0xc4, 0x2, 0x8, 0x8, "bf6a8bf170ea2b34e10c55ca834d7fcc", 0x0, 0x2, r0, 0x7, 0x6, 0x4248, 0x5, 0x2, 0x9, 0x1, @attach_prog_fd=r1, 0x1, 0x8000000000000001, 0x8000000000000001, 0x1, 0x8, r2, r3}, 0x81) r7 = prctl$auto(0x4, 0x80000000, 0xffffffffffffffff, 0x0, 0xe3c2) poll$auto(&(0x7f0000000280)={r5, 0x2, 0x81}, 0x1, 0x5dd) read$auto_fops_ulong_ro_(r8, &(0x7f00000002c0)=""/79, 0x4f) sysfs$auto(0x0, 0x30, 0x3) readv$auto(r1, &(0x7f0000000380)={&(0x7f0000000340)="f857c466e5e2bcf080970e20b96fe76b", 0x6}, 0x9) write$auto(r6, &(0x7f00000003c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0xc) fcntl$auto_F_ADD_SEALS(r2, 0x409, 0x7ff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000400), 0x400080, 0x0) r9 = clone3$auto(&(0x7f0000000440)={0x26bd, 0x4, 0x4, 0xc27, 0x4, 0xfffffffffffffd06, 0xff, 0x1000, 0x979, 0xffffffffffffff3f, 0xffff}, 0x6) ioctl$auto_XFS_IOC_ALLOCSP64(r4, 0x40305824, &(0x7f00000004c0)={0x782, 0x3, 0x0, 0x1, 0xb834, r9}) ioctl$auto(r0, 0x7, r5) r10 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000540), r7) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r10, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x6}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x7fff}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}, @IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000800) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000680)='/dev/audio\x00', 0x600, 0x0) write$auto_cpu_latency_qos_fops_qos(r0, &(0x7f00000006c0)="c191fce379be38954845b7dec087636dba56ee604fe19ff451df2229fe452ae16fb40a68f5bc9f8acd61180a2235ebe43a6c86606f94833dd54bc53d0b08f67df2a623bef23eaba8656625537b194a82d81073ea0d0086cb6f294a2e49aa084781ce1339c7d3a05d8c580087583397b614282f411fa80c9412a6376b996ecada41579839f12db9500dcdb00be7586d1eb0375e1c8ee0b616b4f15a6867f2184063189f937c0e1c16e6e8ab42a2f026ea7256066a0e5e17d44fc6d9ff6c2ae1af262b416061e84327a51599db69889bb8e0af18faf8bcf65a1372b880c8bd2da7", 0xe0) r11 = socket(0x1, 0x4, 0x4) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000800)={0x5, &(0x7f00000007c0)={0x89f, 0x1f, 0x6, @raw=0x5}}) sysfs$auto(0x2f9, 0x3, 0x8) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) copy_file_range$auto(r8, &(0x7f0000000880)=0x7, r11, &(0x7f00000008c0)=0x6, 0x7f, 0x1) io_uring_register$auto_IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000900)="3689a46343993d206ae43532d2d71009705a46366a73f88b92749c734a528d4fa2caebb0ee121bd6830cafe84e4d3a6efb7effad03c43f8f347d1ab0f1a934966aa9068fa1ee3d37bdcd001bfb729f15972da1d7c85d513f6c728604f76aea77da8b3095e3c424992736c36ffaaca8ad4892a9f3b0c487875ee84239cc7fbb1320075c368956a9ee6df14bab9e50459acd3c1871807ca48d0dcd59ecc97e1e39c35a2372e1f58bb091804632e744c3de6a537fd63b4bb44b8c2d0d6e9cdd6581d520a08e5571c773a79b81f8ae155b5acfd8af38cb05df645d35d9018cfac38cc2d2baac4996fb189000a9f06a", 0x38000000) mknod$auto(&(0x7f0000000a00)='./file0\x00', 0xd92, 0xffffffff) ioctl$auto(r7, 0x4, r4) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000a40), 0x244400, 0x0) getsockopt$auto_SO_RCVMARK(r6, 0x2, 0x4b, &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)=0x4) 1.992494061s ago: executing program 2 (id=689): statmount$auto(0x0, &(0x7f0000000380)={0x3, 0x1, 0x9, 0x7352, 0x10000, 0x65f, 0x4, 0x7, 0xf0, 0x1, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x3, 0x84, 0x4, 0x0, 0x7, 0x22000, 0x203, 0x0, 0xf, 0x4, 0x0, 0x1, 0x0, 0xfffffff9, [0x7, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x1c00000000, 0xfffffffffffffffe, 0x4, 0x0, 0x8000000000000, 0x800, 0x100000000000, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x7, 0x920, 0xfffffffffffffffe, 0x108001, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x3, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xf) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, &(0x7f0000000080)={@siginfo_0_0={0x4, 0x2, 0x9, @_kill={r0}}}, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (rerun: 64) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) (async) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000500)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a63c8fa7f7d5152d4831f60eade8e3d8a508f6178de4e7e975de72c549dbc7876cb528ba0841788237bfc00dd4eef5") (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) (async) readv$auto(0x3, 0x0, 0x1) (async) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ubifs/chk_orphans\x00', 0x8000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS1\x00', 0x500, 0x0) ioctl$auto_TIOCMGET2(r2, 0x5415, &(0x7f0000002d00)) (async) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) getsockopt$auto_SO_TXREHASH(r1, 0x5, 0x4a, &(0x7f0000000000)='.!![[&-#\'*T\x00', &(0x7f0000000040)=0x3) (async) ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)="f9c6db73364934578d51601d132b20dd82ae0781f6cb18c55fb7ed811a498af961a2ba35abcb2a9e90cb1318a4e844fa36d450dd94feeb082f1df20f92ccf13a81a57128c3747e32049e83c577e1acbc77ae0592cdbc051382debcaa0dc8ed6a464e67d65d0fe51909b6301747549e056844706522e452069bc58cceba3c6f41643ea20806562e91ca8a2cc01217c98f9dbad36dd49ba0ac6b5eac96f27ca3511f2ead40050e4c") (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x101202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) (async, rerun: 64) r3 = socket(0x2, 0x3, 0x100) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0_to_bond\x00'}) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x1a1302, 0x0) (async) unshare$auto(0x40000080) acct$auto(&(0x7f00000003c0)='/dev/sequencer2\x00\xe5F\xff\xb95E(7GhId\xa3\xa8\xe9\x9f\x95\xd3\x88\xd2\xbc<1\x14\xa5^\xd2\x9dv\x10\x83]\x9c(\x98\xce\x9aOor_\x9c\xa7\x9e\x93\xe7\b\x82\xefO\x88\xba\x99k\x06\x9c;\a\tF\x1e\xa4T\xef&\x8c\xab\xdf\xb5]\x81\xfdx09m\xb6\xb7\x92g\xbc\xd6\xd3\xbc\xce\x15\xb4\xdb\xf2\xe8\b\"\t\xe9\xe2\x0f\xfd\x1dd\x86\x05\xb49\xf7\x92\xc1iVR\xef\xdb\xf0h\v\xa3\'\xc1\xd5P\x1c?\x92\t\xb4\xc9|\x93M\x92\xae{\x8d\x98\fK\x8e\xfd\fv\xd7+\xf8\x8aU\x92q\xeb\t\xcc\x1d') (async) shmget$auto(0x0, 0x7b, 0xfd) 1.343617167s ago: executing program 2 (id=691): r0 = socket(0x21, 0x80000, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r0, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000440)=ANY=[@ANYBLOB="a4080000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf250200000008000400d89100000f000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000800970001000000cc00a4800400aa00d4544e1073d6faed16543d429e869666e4839368ecc296888ed6c1c4b8e443fa63691d72ede328456950ca713675fc7956e7c12a08f6bcb22ea63f595ed1ecb4aa9c10aac284e4ac4aad4ff8b2cf91668ff79a45da1cf27af010be2fd40f95847303548dcc8051b3f26ac757a799478d6ea93e319fef57fc1eb8519ca89841aec2032651d16b8c11edf87e80e9d6fb45695300436fea3fccceeffc390d4651c0e1362292b6ddedad616cae422064e88a0c005a00657468746f6f6c0008007a00e000000108005c800400cb8008009d00", @ANYRES32=0x0, @ANYBLOB="04000180f91377eabc3ceebcfd18acdc9ee9d1c382de132fed6d4ed8c7b2e411d3530a8f263e977976c4dba422b0e23de8fb7ed7a8312043bb6ddb9293f97b0dfac39cbe32589f2f388923be2459713fdf6fb4806da133b8a174a0fc88b40db041f81c2e752fd243669c15db9276dfdc35e19c43fd153a52b35566fbdeb9130de73e0fcf3dfa9113eaaba9c4060a8201ecaa6205c3492b7ca686b34d451926fb6483ed48624e269b73176d3e067a31e9452c57057fa994dca41336a28f802103afaa4d439eb5299fa6bc162aa5120867c5482a5473ae4e13d7060211012b0fd723fd7e8b36283f413da5b7e1d6ffdb3b1c5792e308000000", @ANYRES32=0x0, @ANYBLOB="8b00358004004e804e067fda153e4652c2de8f9866a6c120467b6104949d0b110faa9e4a9e7c1ea4f1c9bdff5696ece603f037f033c27194a43b9e90b2ca7421bf0f770b86f2c770812dcc6a2c71d36aa285901ce8e4ddfba2e4ac421c15a2721f81849c455d63b148958dd5635f29c48279ca7cefedd0fd3059bce34b4973055919c43482ebc837f24f510004000600dd0305000ec2d4f4b685aa86dd3721eaa4ad66f0b5835f3e65f199231481b59719e6b9299327a2abb3a8f7147d47c96543895e966229852c5e6d8f093088e7c2fd3d0d8ce320972af28f99a250a45aa0676ee0613fb74b1d7b69535422d8fa974003b04f32b783fecf23e29d1fe90e2d54f9f2dde42a6c5f3215bd0174693cff1ea93f7522ffa02dbf7770eafdcd95cc55a4377095cb01dd31d42586a5640f8c7b7d23f97899549fcd05bf074348ae7b8a6319281c0a5593c0249ffa4734fea26add1991ef28d1f48aaf594f4abcaf319678474cecc9b859a1edbd6723ce7ece69f7da6d09c10fa34fc49e309b313958f951e62d6e1435f9584dcd5718cf29a4c20640f3a9c35f6677de289beab72959517176d6fc12d1c893782bc5ab62938c52ceb64fdbebadc0043e3a3901442511c5b696356170bf3e8e37e31198bd48c6c03bffa31af16ccfdaba74d1ee96a951e1501cef7e7a59260fd15447bbd7c93d86014ddf01f8dbe4c73a0fbe758c8f340a06297884e210582a01f060a191feefe6f0cfbd9c5f6b32d80172dc3b40675f9c72ccb3f8122509b05277c37a40a39aa5c0256470d72946e69c1e73c2f6f4fd3c130991804b2227218812fabbb8d2905e1aa9d6095fe108eb4f26ab5558b74ca9eab82ecf357b94d21a48c0f50bddf6acf77ddbeaf8dac8033f375be34172709826f73103f5a7139386b4d1f20cc6dd9497e299f7e335f509d059534adf3fabd28e706c657c2d02ec08fb1180c7b3cb3efdb493ec9e84f049181471220f14dc22dfa41aaf05b03039cfba2a27d141566a829ae27ed4761957536c65fd61f43a151183cc4844c42a8d65331982c0e5755edad02bb1536f0fabb958327fdcc16deaedf10263603741d5615e24402b24a91ac330bd9f278dc30122166da86bf64179458732e6228bc99f670ba2642302649daaffb0d3903d17984af5c768d5e10b088622651bbcf4a5b03af1414cbd8e3401ed633b49044af14b042631e4c9e6268951f88e0076bf141da8509a159157d6f5e95fda2e70633a0b4304468e8bd7329ae36813a6ebd50c9c28c6ddbff3ceededbc1f70ca58947518538ef71aa1885141adc0fea34d76f61aa8cba0884882aa88eb1f5f953771b8b1455845cd2ff84944854aa05da4f826de067f373fa1de7dd3fc4daddbbea800f4d8ff565c602a3ba750af08f6b4cece6725aa84342705b64155042c8fa7ab3b09b5011dd1ab1a37e7d5b0cd3d831c0387d77f04941269143ca13cccee10213b7f109b5f69653cea5fb1f8912d5f651cfae434af2bf031b67c79e8a12453f266831439fa380d74e3b5ba997e2a2cb64de9ed92b09e3112670d5566235df7a0bcdfc0f966cedcf1983b2a65e71d595c75f33b64c8c20000000800080000800000"], 0x8a4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) (async) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r0, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000440)=ANY=[@ANYBLOB="a4080000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf250200000008000400d89100000f000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000800970001000000cc00a4800400aa00d4544e1073d6faed16543d429e869666e4839368ecc296888ed6c1c4b8e443fa63691d72ede328456950ca713675fc7956e7c12a08f6bcb22ea63f595ed1ecb4aa9c10aac284e4ac4aad4ff8b2cf91668ff79a45da1cf27af010be2fd40f95847303548dcc8051b3f26ac757a799478d6ea93e319fef57fc1eb8519ca89841aec2032651d16b8c11edf87e80e9d6fb45695300436fea3fccceeffc390d4651c0e1362292b6ddedad616cae422064e88a0c005a00657468746f6f6c0008007a00e000000108005c800400cb8008009d00", @ANYRES32=0x0, @ANYBLOB="04000180f91377eabc3ceebcfd18acdc9ee9d1c382de132fed6d4ed8c7b2e411d3530a8f263e977976c4dba422b0e23de8fb7ed7a8312043bb6ddb9293f97b0dfac39cbe32589f2f388923be2459713fdf6fb4806da133b8a174a0fc88b40db041f81c2e752fd243669c15db9276dfdc35e19c43fd153a52b35566fbdeb9130de73e0fcf3dfa9113eaaba9c4060a8201ecaa6205c3492b7ca686b34d451926fb6483ed48624e269b73176d3e067a31e9452c57057fa994dca41336a28f802103afaa4d439eb5299fa6bc162aa5120867c5482a5473ae4e13d7060211012b0fd723fd7e8b36283f413da5b7e1d6ffdb3b1c5792e308000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x8a4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r2 = epoll_create$auto(0x3e) poll$auto(&(0x7f0000000040)={r2, 0xffff, 0x1}, 0x5, 0x108) epoll_ctl$auto(r2, 0x1, r1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) (async) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mincore$auto(0x0, 0x1, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) (async) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x7, 0x4689, 0x19) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x40, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r4, 0x40284504, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x401006, 0x4015, 0x0) 1.329066043s ago: executing program 0 (id=692): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) (async) r1 = socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) seccomp$auto(0x0, 0x100000000, 0xfffffffffffffffc) writev$auto(0xffffffffffffffff, 0x0, 0x3) 1.231959037s ago: executing program 3 (id=693): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300f5"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7fff}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x800000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r5}, @NET_SHAPER_A_METRIC={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r6, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x300}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x400c1}, 0x4000) 1.200388632s ago: executing program 1 (id=694): r0 = socket(0xa, 0x3, 0x3a) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x800000, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0x7}, 0x7) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0x7}, 0x7) ioctl$auto_I2C_RDWR(r1, 0x707, &(0x7f0000000180)) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/x86/nmi_longest_ns\x00', 0x0, 0x0) (async) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/x86/nmi_longest_ns\x00', 0x0, 0x0) time$auto(&(0x7f0000000000)=0x101) (async) time$auto(&(0x7f0000000000)=0x101) socket(0x18, 0xa, 0x1) r2 = socket(0xa, 0x3, 0x3a) prctl$auto_PR_SET_MM_START_CODE(0x57, 0x1, 0x0, 0x8, 0xffffffffffff8218) (async) r3 = prctl$auto_PR_SET_MM_START_CODE(0x57, 0x1, 0x0, 0x8, 0xffffffffffff8218) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_INFO(r4, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f00000028c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0xc2000, 0x0) (async) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0xc2000, 0x0) ioctl$auto_FBIOGET_VSCREENINFO(r6, 0x4600, &(0x7f0000000000)) getpid() (async) r7 = getpid() sendmsg$auto_IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x16c, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffb}, @IPVS_CMD_ATTR_DAEMON={0x147, 0x3, 0x0, 0x1, [@nested={0x18, 0x3f, 0x0, 0x1, [@typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @generic="ec42eb17e35639871b7bac5cb57fd083", @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@loopback}, @nested={0x24, 0x13c, 0x0, 0x1, [@typed={0xf, 0x84, 0x0, 0x0, @str='/dev/i2c-0\x00'}, @nested={0x4, 0xb8}, @typed={0x6, 0xc1, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0x72}]}, @typed={0x8, 0x31, 0x0, 0x0, @pid=r7}, @nested={0x97, 0x78, 0x0, 0x1, [@generic="7b86764cd21a33ac6c0959050d268dc013b3ebe13020e6143cdb9bb418d1e1ab82a5332be79d44e3e92adc35654d15b250c61c6e85c1e9cfed57f898ac1f3657303e56f21d2526ffd2c5783bf05e91b6d2ccdda5b9a440c30358b14e157b3d7d714323fb25eb04206b5a704f6f5be171634aee0eed73f877bb5e7d92e583b1", @typed={0x8, 0x2a, 0x0, 0x0, @u32=0xadc9}, @typed={0xc, 0x2d, 0x0, 0x0, @u64=0x1}]}, @generic="55f23849abf2a279b4ab47d4d923d83348a623ce437438", @nested={0x8, 0x10c, 0x0, 0x1, [@nested={0x4, 0xd9}]}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}, @nested={0x19, 0xfc, 0x0, 0x1, [@typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0xa0}, @generic="06e2221e30"]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x2000c809}, 0x1) setsockopt$auto(r2, 0x29, 0x4b, &(0x7f00000000c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x98\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c55000000ac5600"}, 0x66) 1.037065635s ago: executing program 1 (id=695): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory15/phys_index\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4010ae67, 0x38) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x2, 0x40eb2, 0xffffffffffffffff, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) shutdown$auto(0x200000003, 0x2) 985.513643ms ago: executing program 3 (id=696): setsockopt$auto_SO_PRIORITY(0xffffffffffffffff, 0x5, 0xc, &(0x7f0000000000)='-.\x00', 0x1) (async, rerun: 64) r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x101000, 0x0) (rerun: 64) ioctl$auto_XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000080)={0x4, 0x7, 0x7ff, 0x0, 0xb1, 0x7f, 0x8, 0x9}) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyz3\x00', 0x800, 0x0) r2 = ioctl$auto_TIOCGPTPEER2(r1, 0x5441, 0x0) syz_clone3(&(0x7f00000012c0)={0x114200, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x21}, &(0x7f0000000200)=""/116, 0x74, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=[0x0, 0xffffffffffffffff], 0x2, {r2}}, 0x58) r4 = waitid$auto(0xc3, r3, &(0x7f0000001440)={@siginfo_0_0={0x1, 0x0, 0x3, @_sigsys={&(0x7f0000001340)="73c6549873b9465036a111ef8ab21f09d79b2467b7fd758b6c4f24c46defde02fb9ddc1b5d3c6b173945972d5515d835fa9be98f183c0b92167a3f97c670244edfdd9e0b07907d73a0ec791ac81a4b5bab319358af88f0237e8c479b1c6f6df77809c6e0295bd1ae001b19036641874456872790ead5ad31b508c8382e75ebd0ae06e61e403147fa76d387d6273947e798a8ad1e70cc819fa420ad9dc0b9d36d192a1dd7ef85932f8084ef8135bb6593eeb4672fdceda47bed9601fa153ca1febce24aebde0805c9e9d5bf1d91fc", 0x7, 0x1}}}, 0x2, &(0x7f00000014c0)={{0x2, 0xfffffffffffff3bb}, {0x5, 0xec}, 0x9, 0xa834, 0x7, 0x8, 0x4, 0x7, 0x7, 0x9c6, 0x9, 0x1e, 0xa, 0xfffffffffffffffc, 0x8, 0x7fffffff}) (async) sendfile$auto(r3, r2, &(0x7f0000001580)=0x36, 0x80000000) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f00000015c0)=""/119, 0x77) (async, rerun: 64) r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001640)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x400, 0x0) (rerun: 64) ioctl$auto_XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000001680)={r5, 0x0, 0x4, 0xd, 0x3ff, 0x4, [0xe17f, 0x10001, 0x3, 0x0, 0x9, 0x8000000000000001]}) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f0000001b00)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001780)={0x33c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, "9096f31534e8"}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x8e, 0xba, "15561bf707b1c9a1b5b6db46029272719a07e44ebb75c3d8ed72edf96314066ae839f630a279aaa88744a7a069dd4f59d0b19221e73b927a415c6af7e16fff2548099db0977c3fccb3cc400de214f13f5824261104181f0618b280d55a60a4ec41391e2fe34c852495a07141151bd9bdcc6492330f86ae73560688097fc0d3b50d89fa05af01dcdaccfb"}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}, @NL80211_ATTR_SAR_SPEC={0x1cc, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8}, @NL80211_SAR_ATTR_SPECS={0xa4, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xc99c}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xcd9f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5c5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5e22}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x788}]}]}, @NL80211_SAR_ATTR_SPECS={0x11c, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x40}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffeff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x287a3cdf}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4522b8d4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x58}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6f0}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9ae}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffe}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x200}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000001}]}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0xc, 0x131, 0x0, 0x1, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x200}]}, @NL80211_ATTR_MAC={0x8, 0x6, "50827e05"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xb}, @NL80211_ATTR_VHT_CAPABILITY={0x90, 0x9d, "5e082fe5325dd53c17839904139aeda0be8836d3e344b00508a416eb0a7f03103529d73a32fca7b43cb3f2bde1e4445049a6f6f8fd6f03584d9e0f69a75d427611f8d85e90cb39bacb52b4150e3cfce195b8161d9baa457aea40cc290e44a9f20c38f002e2ead624aa2078415eea66794627153698051e6872c2c68c6485ec6a5b1502521a2f36389c647769"}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001b40)="ffeea04ea4237e953564bf49c76f3bf7d80db17c8594d85ede816995e47257de69bb02c69561ee97f7823ca0627d50e1f9aa5972eded89a699c5eceabc6fb4a1280b65df1d7baede4cec22b7cba11965d2045cd17c646e809ec30e3343980a62895ca685c6ed7e0a7a01be2ce1657eb2ec773c23fd27ed30cefa49b97a98930b88e61bdf7fc12cbfa31aeb110f42cfc25f200dcacc6e311b5f24734bc76def7ea0f161053d1cfc258633f009ef58fcebf50a595e527de647a38b2086f97c3eb2", 0xc0) r8 = fcntl$auto_F_DUPFD_CLOEXEC(r1, 0x406, r2) (async) r9 = ioctl$auto_TUNGETVNETHDRSZ2(r2, 0x800454d7, &(0x7f0000001c00)=0x101) ioctl$auto_TUNGETSNDBUF(r9, 0x800454d3, &(0x7f0000001c40)=0x6) (async) socket(0x1f, 0x4, 0x101) (async) r10 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000001c80), 0x400, 0x0) read$auto_percpu_stats_fops_(r10, &(0x7f0000001cc0)=""/154, 0x9a) getsockopt$auto_SO_RESERVE_MEM(r5, 0x401, 0x49, &(0x7f0000001d80)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', &(0x7f0000001dc0)=0x6) (async) getsockopt$auto_SO_DEBUG(r6, 0xfff00000, 0x1, &(0x7f0000001e00)='\x00', &(0x7f0000001e40)=0xd25) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001ec0), r9) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r11, &(0x7f0000002040)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)={0xdc, r12, 0x8, 0x70bd29, 0x25dfdbfc, {}, "a15a25ee22ff57ec65d343e96b39cf355cdd9e485341cf2c3cac418552482a4a0d70d312e19f126e22f0adc4d7d7989be3881a67b03aed63454be157e4092c2173f200fe90f8f91cdbb3ba2ae83b258f9d9329bd894235eb801f5dc9b2562a308bee7d8816697d267fc3338a1808e8ed13ba38db578123c92c6a26a8603ec90105bc5701ffeec7aec608a1dc741a7577b8f3f710f4d1d52d2d94ffbe8c2360efc7129d92e013f0a309a8d2cdd7871f4b8dbae577102ef3d46a19c183d0747416a0f23def2372"}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20) (async) semctl$auto(0x0, 0xb943, 0x4, 0xfff) (async, rerun: 64) bpf$auto(0xfffffffc, &(0x7f0000002080)=@link_detach={r1}, 0x3) (async, rerun: 64) getsockopt$auto_SO_KEEPALIVE(r1, 0x5, 0x9, &(0x7f0000002140)=')[$-&\\\x00', &(0x7f0000002180)=0x7) ioctl$auto_RTC_EPOCH_SET(r2, 0x4008700e, &(0x7f00000021c0)=0xfffffffffffffcd0) (async) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000002200)={r8, 0x0, 0x6, 0x10000, 0x0, 0x41}) 935.398354ms ago: executing program 0 (id=697): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}}}, 0x7) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) socket(0x6, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x3, 0x700, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xffffffff, 0x0, 0xffffffff, 0x8000000000000) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3d, 0xffffffbfffffffff, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) msgsnd$auto(0x0, &(0x7f0000000080)={0x6, 0x2}, 0xf, 0xc45) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x9) getcwd$auto(0x0, 0xffffffffffffffff) sendmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x0, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/sockstat\x00', 0x48240, 0x0) pread64$auto(r2, 0x0, 0xfffffffffffffff8, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000280)={[0xe5, 0x9, 0xffffffffffffff83, 0x1, 0x5, 0x6, 0x1000015f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0x8001, 0x6, 0x2, 0x4000000000000d]}, 0x0) 853.166199ms ago: executing program 3 (id=698): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) unshare$auto(0x40000080) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0x1, 0x2800], {0x6, 0x41e, 0xe, 0x2de, 0x504, 0x3, 0x101, 0x9, 0x6}, {0xfff80002, 0x2, 0x52, 0x5, 0x10001, 0x3d, 0x76c5, 0x8, 0x8000000000000000}}) (async) r0 = getpid() process_vm_readv$auto(r0, &(0x7f00000001c0)={0x0, 0x100fff}, 0x3, &(0x7f0000000180)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x30, 0x0, 0x56b) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r2 = socket(0x9, 0x1, 0xf) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x202000a, 0x3, 0xdc, 0xfffffffffffffffa, 0x8000) (async) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bond_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NETDEV_A_DEV_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r5}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_DEV_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x6, 0x2400009, 0xdd, 0x9b72, r2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) (async) madvise$auto(0x0, 0x200007, 0x8) (async) mmap$auto(0x0, 0xfffffffffffffff9, 0x4, 0x48eb1, 0xffffffffffffffff, 0x300000000000) 794.867903ms ago: executing program 1 (id=699): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0xc4100, 0x0) ioctl$auto_BLKTRACESTART(r0, 0x1274, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r2, 0xae03, 0xaf) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001340)={{0x7fff, 0xee01, 0xffffffffffffffff, 0x4, 0x9, 0x7, 0x8}, 0x9, 0x1, 0xfb, 0x6b4, @raw=0x4, @inferred=0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)="5fe54287139ee0589a36b358950a21317ad3b5f84934a0053aca918bf45ab68a561ff9677808ea611e973eccf3c4c06fa91225f7f534e78647a77c0a52f193f277f9ab50", &(0x7f0000001280)}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x70bda6, 0x25dfdbfd, {}, [@HSR_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sysfs$auto(0x2, 0x12, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r5) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01082dbd7000fbdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MESH_ID={0x21, 0x18, "baa948767f5b41aefcb3f1f539a8788a335a613a98584eac31763d9738"}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xfffffffb}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x3}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x80}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0xffff0001}, @NL80211_ATTR_PMK={0xc, 0xfe, "f4af42e6ce2b4c62"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x80000001}, @NL80211_ATTR_KEY_DATA={0xf, 0x7, "c6546a2bc47ea395184330"}]}, 0x84}, 0x1, 0x0, 0x0, 0x40880}, 0x40010) lsm_list_modules$auto(0x0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000024c0), 0xffffffffffffffff) r8 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r8, 0x6a, 0x3, 0x0, 0x100) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r9, &(0x7f00000001c0)="352c8efa618c0bcf83a4ebdb27ec25906b0e1015b18c429fc1d7c523728754e19b334a", 0x23) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TASKSTATS_CMD_GET(r10, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000f7", @ANYRES16=r7, @ANYBLOB="020027bd7000fcdbdf25010000005b0003002d3a2d215d2ef7be74046887623ec92154063a2a8df39609904504ad2904f7d54268c22b723a59e26655afe621e95195f40e6294458b79cb610763ddb97422efd1c7e68262f043c547ea1392ee29fe3e20214fb5bb602800"], 0x70}, 0x1, 0x0, 0x0, 0x2000c881}, 0x4000894) 455.906832ms ago: executing program 2 (id=700): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x5, 0x40009, 0x20df, 0x27c, 0x7, 0x28003) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/can/stats\x00', 0x121040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x20000002, 0x20000000000007, 0x4000000000e3, 0x40eb3, r0, 0x2ffffffffffe) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/dummy_hcd.5/usb6/bMaxPower\x00', 0x80, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mq_getsetattr$auto(0x3, 0x0, &(0x7f0000000100)={0x8, 0x8, 0x2, 0x1}) mmap$auto(0x0, 0x8, 0xe0, 0x9b72, r0, 0x7fff) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) pread64$auto(r0, 0x0, 0x100006, 0xc982) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) unshare$auto(0x40000080) acct$auto(0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mbind$auto(0x2000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 444.451225ms ago: executing program 1 (id=701): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000080df, 0xeb1, 0x6, 0x8000) (async) writev$auto(0xffffffffffffffff, 0x0, 0x3) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x0, 0xfffff004, 0x2) (async) io_uring_setup$auto(0x6, 0x0) epoll_create$auto(0x3e) r0 = prctl$auto(0x3e, 0xfffffffffffffff7, 0x0, 0x7, 0x0) (async) socket(0x15, 0x5, 0x0) userfaultfd$auto(0x1) (async) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x8000) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x3, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x1ff, 0x0, 0x8000001000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0xffff, 0xfffffffffffffff8, 0x0, 0x80000011, r0, 0x101) (async) write$auto(0x3, 0x0, 0xfdef) (async) munmap$auto(0x8000, 0xffffffff) 348.286882ms ago: executing program 3 (id=702): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4020009, 0x7ff, 0x1000000000ebe, 0x401, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x61e283, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x240, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare$auto(0x40000080) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900), 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x44}}, 0x54) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000100)=""/92, 0x5c) write$auto(0x3, 0x0, 0x1) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop8\x00', 0x0, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) r5 = socket(0x2, 0x3, 0xa) setsockopt$auto(r5, 0x0, 0x20, 0x0, 0x5) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r6, 0x0, 0x8, 0xffff) ioctl$auto(r0, 0xc0304d18, 0x8) 191.839653ms ago: executing program 1 (id=703): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0xa, 0x5, 0x84) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r0) (async, rerun: 64) waitid$auto_P_PID(0x1, 0xffffffffffffffff, 0x0, 0xc9, 0x0) (rerun: 64) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async, rerun: 64) socket(0xa, 0x3, 0x3a) (rerun: 64) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0x\x113\a\xc7\x91\x92@\xb2P', 0x8081) (async) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 74.275084ms ago: executing program 1 (id=704): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket(0x2, 0x5, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, 0x0, 0x52) readv$auto(0x3, 0x0, 0x1) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x22002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r4, 0x510, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x45c3}]}, @ETHTOOL_A_PODL_PSE_ADMIN_CONTROL={0x8, 0x3, 0x5}, @ETHTOOL_A_C33_PSE_ADMIN_CONTROL={0x8, 0x6, 0x9}, @ETHTOOL_A_C33_PSE_ADMIN_CONTROL={0x8, 0x6, 0x6}, @ETHTOOL_A_C33_PSE_AVAIL_PW_LIMIT={0x8, 0xc, 0xf1}, @ETHTOOL_A_C33_PSE_ADMIN_CONTROL={0x8, 0x6, 0x7fffffff}, @ETHTOOL_A_C33_PSE_ADMIN_CONTROL={0x8, 0x6, 0x8}, @ETHTOOL_A_PODL_PSE_ADMIN_CONTROL={0x8, 0x3, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x30000e6e) ioctl$auto_TUNSETCARRIER(r2, 0x400454e2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000e80)=""/206, 0xce) madvise$auto(0x0, 0x2003f0, 0x17) 0s ago: executing program 0 (id=705): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x484, 0x400, 0x9}]}) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): IBSS network, BSSID 50:50:50:50:50:50 [ 64.048770][ T5773] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 64.175764][ T5779] FAULT_INJECTION: forcing a failure. [ 64.175764][ T5779] name failslab, interval 1, probability 0, space 0, times 1 [ 64.260134][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 64.260171][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 64.260195][ T5779] Call Trace: [ 64.260204][ T5779] [ 64.260213][ T5779] dump_stack_lvl+0x100/0x190 [ 64.260274][ T5779] should_fail_ex.cold+0x5/0xa [ 64.260302][ T5779] ? fs_reclaim_acquire+0x70/0x100 [ 64.260329][ T5779] should_failslab+0xc2/0x120 [ 64.260368][ T5779] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 64.260402][ T5779] ? security_inode_alloc+0x3b/0x2c0 [ 64.260427][ T5779] ? lockdep_init_map_type+0x5c/0x250 [ 64.260466][ T5779] security_inode_alloc+0x3b/0x2c0 [ 64.260488][ T5779] inode_init_always_gfp+0xc77/0xfb0 [ 64.260528][ T5779] alloc_inode+0x8e/0x250 [ 64.260555][ T5779] new_inode+0x22/0x1c0 [ 64.260582][ T5779] shmem_get_inode+0x1e3/0x1010 [ 64.260612][ T5779] ? __pfx_shmem_get_inode+0x10/0x10 [ 64.260642][ T5779] __shmem_file_setup+0x168/0x460 [ 64.260668][ T5779] ? __pfx___shmem_file_setup+0x10/0x10 [ 64.260697][ T5779] newseg+0x3c0/0xed0 [ 64.260728][ T5779] ? __pfx_newseg+0x10/0x10 [ 64.260756][ T5779] ? rcu_is_watching+0x12/0xc0 [ 64.260778][ T5779] ? ipcget+0x8aa/0xf50 [ 64.260803][ T5779] ? lock_release+0x24d/0x310 [ 64.260837][ T5779] ipcget+0x909/0xf50 [ 64.260870][ T5779] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 64.260907][ T5779] ? __pfx_ipcget+0x10/0x10 [ 64.260935][ T5779] ? __x64_sys_futex+0x34f/0x4d0 [ 64.260961][ T5779] ? __x64_sys_futex+0x358/0x4d0 [ 64.260983][ T5779] __x64_sys_shmget+0x13b/0x1b0 [ 64.261001][ T5779] ? __pfx___x64_sys_shmget+0x10/0x10 [ 64.261019][ T5779] ? rcu_is_watching+0x12/0xc0 [ 64.261033][ T5779] do_syscall_64+0x115/0x840 [ 64.261051][ T5779] ? clear_bhb_loop+0x40/0x90 [ 64.261067][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.261081][ T5779] RIP: 0033:0x7f94f6f9ce59 [ 64.261101][ T5779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.261120][ T5779] RSP: 002b:00007f94f7ea8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 64.261139][ T5779] RAX: ffffffffffffffda RBX: 00007f94f7216090 RCX: 00007f94f6f9ce59 [ 64.261155][ T5779] RDX: 0000000000005300 RSI: 0000000000000001 RDI: 00000000000006a2 [ 64.261169][ T5779] RBP: 00007f94f7032e6f R08: 0000000000000000 R09: 0000000000000000 [ 64.261184][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.261199][ T5779] R13: 00007f94f7216128 R14: 00007f94f7216090 R15: 00007fffd9eeef38 [ 64.261221][ T5779] [ 65.296938][ T5622] Bluetooth: hci3: command tx timeout [ 65.296952][ T5628] Bluetooth: hci2: command tx timeout [ 65.296975][ T5628] Bluetooth: hci1: command tx timeout [ 65.481236][ T5628] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 65.576655][ T5798] netlink: zone id is out of range [ 65.583265][ T5798] netlink: zone id is out of range [ 65.592289][ T5798] netlink: zone id is out of range [ 65.603102][ T5798] netlink: zone id is out of range [ 65.610325][ T5798] netlink: zone id is out of range [ 65.618849][ T5798] netlink: zone id is out of range [ 65.626208][ T5798] netlink: zone id is out of range [ 65.635697][ T5798] netlink: zone id is out of range [ 65.657629][ T5788] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.666177][ T5798] netlink: zone id is out of range [ 65.678135][ T5788] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 65.695536][ T5788] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 65.749152][ T5798] netlink: zone id is out of range [ 65.778225][ T5788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.795655][ T5788] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 65.833772][ T5788] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 65.883517][ T5788] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.905676][ T5788] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 65.935020][ T5788] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 65.954280][ T5788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.963403][ T5788] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 65.981524][ T5788] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.042234][ T5802] hub 1-0:1.0: USB hub found [ 66.073030][ T5802] hub 1-0:1.0: 1 port detected [ 66.613868][ T5822] Zero length message leads to an empty skb [ 66.895336][ T5826] FAULT_INJECTION: forcing a failure. [ 66.895336][ T5826] name failslab, interval 1, probability 0, space 0, times 0 [ 66.916823][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 66.916859][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 66.916875][ T5826] Call Trace: [ 66.916883][ T5826] [ 66.916894][ T5826] dump_stack_lvl+0x100/0x190 [ 66.916932][ T5826] should_fail_ex.cold+0x5/0xa [ 66.916947][ T5826] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 66.916974][ T5826] should_failslab+0xc2/0x120 [ 66.916997][ T5826] __kmalloc_cache_noprof+0x7a/0x6e0 [ 66.917013][ T5826] ? seg6_net_init+0x49/0x1c0 [ 66.917031][ T5826] ? __pfx_seg6_net_init+0x10/0x10 [ 66.917046][ T5826] seg6_net_init+0x49/0x1c0 [ 66.917061][ T5826] ops_init+0x1e2/0x5f0 [ 66.917077][ T5826] setup_net+0x118/0x3a0 [ 66.917092][ T5826] ? __pfx_setup_net+0x10/0x10 [ 66.917106][ T5826] ? mutex_init_lockdep+0xf1/0x120 [ 66.917126][ T5826] copy_net_ns+0x46f/0x7c0 [ 66.917143][ T5826] create_new_namespaces+0x3ea/0xac0 [ 66.917165][ T5826] unshare_nsproxy_namespaces+0xf2/0x220 [ 66.917187][ T5826] ksys_unshare+0x438/0xab0 [ 66.917202][ T5826] ? __pfx_ksys_unshare+0x10/0x10 [ 66.917219][ T5826] __x64_sys_unshare+0x31/0x40 [ 66.917233][ T5826] do_syscall_64+0x115/0x840 [ 66.917252][ T5826] ? clear_bhb_loop+0x40/0x90 [ 66.917268][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.917283][ T5826] RIP: 0033:0x7f94f6f9ce59 [ 66.917296][ T5826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.917310][ T5826] RSP: 002b:00007f94f7ea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 66.917325][ T5826] RAX: ffffffffffffffda RBX: 00007f94f7216090 RCX: 00007f94f6f9ce59 [ 66.917335][ T5826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 66.917343][ T5826] RBP: 00007f94f7032e6f R08: 0000000000000000 R09: 0000000000000000 [ 66.917352][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.917360][ T5826] R13: 00007f94f7216128 R14: 00007f94f7216090 R15: 00007fffd9eeef38 [ 66.917374][ T5826] [ 67.257274][ T5628] Bluetooth: hci0: command 0x0419 tx timeout [ 67.859338][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.948136][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.020333][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.061981][ T5841] random: crng reseeded on system resumption [ 68.233077][ T5845] FAULT_INJECTION: forcing a failure. [ 68.233077][ T5845] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.296065][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 68.296101][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 68.296116][ T5845] Call Trace: [ 68.296124][ T5845] [ 68.296133][ T5845] dump_stack_lvl+0x100/0x190 [ 68.296177][ T5845] should_fail_ex.cold+0x5/0xa [ 68.296205][ T5845] _copy_from_user+0x2e/0xd0 [ 68.296234][ T5845] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 68.296268][ T5845] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 68.296303][ T5845] do_sock_getsockopt+0x530/0x6e0 [ 68.296332][ T5845] ? ksys_write+0x12a/0x250 [ 68.296377][ T5845] ? lock_release+0x1d0/0x310 [ 68.296407][ T5845] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 68.296435][ T5845] ? rcu_is_watching+0x12/0xc0 [ 68.296458][ T5845] ? rcu_is_watching+0x12/0xc0 [ 68.296480][ T5845] ? __fget_files+0x215/0x3d0 [ 68.296515][ T5845] ? __fget_files+0x21f/0x3d0 [ 68.296549][ T5845] __sys_getsockopt+0x133/0x1d0 [ 68.296570][ T5845] ? __pfx_ksys_write+0x10/0x10 [ 68.296601][ T5845] ? __x64_sys_getsockopt+0xbd/0x160 [ 68.296621][ T5845] __x64_sys_getsockopt+0xbd/0x160 [ 68.296642][ T5845] ? trace_irq_enable.constprop.0+0x122/0x160 [ 68.296675][ T5845] do_syscall_64+0x115/0x840 [ 68.296707][ T5845] ? clear_bhb_loop+0x40/0x90 [ 68.296735][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.296759][ T5845] RIP: 0033:0x7f94f6f9ce59 [ 68.296778][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.296802][ T5845] RSP: 002b:00007f94f7ea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 68.296827][ T5845] RAX: ffffffffffffffda RBX: 00007f94f7216090 RCX: 00007f94f6f9ce59 [ 68.296843][ T5845] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 68.296856][ T5845] RBP: 00007f94f7ea8090 R08: 0000200000000240 R09: 0000000000000000 [ 68.296871][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.296886][ T5845] R13: 00007f94f7216128 R14: 00007f94f7216090 R15: 00007fffd9eeef38 [ 68.296910][ T5845] [ 68.366051][ T5828] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.296547][ T5628] Bluetooth: hci0: command 0x0419 tx timeout [ 69.937093][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.016812][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.096597][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.390792][ T5887] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 71.376657][ T5628] Bluetooth: hci0: command 0x0419 tx timeout [ 71.780247][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.794665][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.875917][ T5923] netlink: 'syz.2.34': attribute type 3 has an invalid length. [ 71.898288][ T5925] random: crng reseeded on system resumption [ 72.016449][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.096737][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.098810][ T5929] process 'syz.1.35' launched '/dev/fd/7' with NULL argv: empty string added [ 72.176607][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.465964][ T5928] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 73.103646][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.41'. [ 73.247482][ T5953] Format for adding new port is "id [perm_addr]" (uint MAC). [ 73.393816][ T5953] input: jJǸ-9%vJ86 as /devices/virtual/input/input6 [ 73.457962][ T5628] Bluetooth: hci0: command 0x0419 tx timeout [ 74.526717][ T6012] FAULT_INJECTION: forcing a failure. [ 74.526717][ T6012] name failslab, interval 1, probability 0, space 0, times 0 [ 74.570635][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) [ 74.570672][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 74.570688][ T6012] Call Trace: [ 74.570696][ T6012] [ 74.570706][ T6012] dump_stack_lvl+0x100/0x190 [ 74.570756][ T6012] should_fail_ex.cold+0x5/0xa [ 74.570782][ T6012] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 74.570821][ T6012] should_failslab+0xc2/0x120 [ 74.570861][ T6012] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 74.570899][ T6012] ? mempool_init_node+0x2f7/0x6e0 [ 74.570941][ T6012] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 74.570982][ T6012] mempool_init_node+0x2f7/0x6e0 [ 74.571025][ T6012] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 74.571062][ T6012] ? __pfx_mempool_free_slab+0x10/0x10 [ 74.571102][ T6012] mempool_init_noprof+0x3a/0x50 [ 74.571144][ T6012] bioset_init+0x37e/0x8a0 [ 74.571185][ T6012] ? __pfx_bioset_init+0x10/0x10 [ 74.571232][ T6012] __alloc_disk_node+0x83/0x6b0 [ 74.571261][ T6012] __blk_mq_alloc_disk+0x89/0x120 [ 74.571301][ T6012] loop_add+0x498/0xb60 [ 74.571339][ T6012] ? __pfx_loop_add+0x10/0x10 [ 74.571390][ T6012] loop_control_ioctl+0xae/0x620 [ 74.571429][ T6012] ? __pfx_loop_control_ioctl+0x10/0x10 [ 74.571469][ T6012] ? xfd_validate_state+0x129/0x190 [ 74.571512][ T6012] ? __pfx_loop_control_ioctl+0x10/0x10 [ 74.571599][ T6012] __x64_sys_ioctl+0x18e/0x210 [ 74.571637][ T6012] do_syscall_64+0x115/0x840 [ 74.571673][ T6012] ? clear_bhb_loop+0x40/0x90 [ 74.571704][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.571732][ T6012] RIP: 0033:0x7f77e839ce59 [ 74.571754][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.571781][ T6012] RSP: 002b:00007f77e65f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.571808][ T6012] RAX: ffffffffffffffda RBX: 00007f77e8615fa0 RCX: 00007f77e839ce59 [ 74.571827][ T6012] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 74.571845][ T6012] RBP: 00007f77e8432e6f R08: 0000000000000000 R09: 0000000000000000 [ 74.571861][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.571878][ T6012] R13: 00007f77e8616038 R14: 00007f77e8615fa0 R15: 00007ffd45cbf558 [ 74.571904][ T6012] [ 74.620017][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 75.239222][ T6041] FAULT_INJECTION: forcing a failure. [ 75.239222][ T6041] name failslab, interval 1, probability 0, space 0, times 0 [ 75.255364][ T6041] CPU: 0 UID: 0 PID: 6041 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(full) [ 75.255401][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 75.255417][ T6041] Call Trace: [ 75.255424][ T6041] [ 75.255434][ T6041] dump_stack_lvl+0x100/0x190 [ 75.255479][ T6041] should_fail_ex.cold+0x5/0xa [ 75.255502][ T6041] ? fs_reclaim_acquire+0x70/0x100 [ 75.255525][ T6041] should_failslab+0xc2/0x120 [ 75.255561][ T6041] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 75.255592][ T6041] ? security_inode_alloc+0x3b/0x2c0 [ 75.255618][ T6041] ? lockdep_init_map_type+0x5c/0x250 [ 75.255654][ T6041] security_inode_alloc+0x3b/0x2c0 [ 75.255681][ T6041] inode_init_always_gfp+0xc77/0xfb0 [ 75.255723][ T6041] alloc_inode+0x8e/0x250 [ 75.255754][ T6041] new_inode+0x22/0x1c0 [ 75.255786][ T6041] debugfs_create_symlink+0xd1/0x220 [ 75.255828][ T6041] drm_debugfs_clients_add+0x199/0x210 [ 75.255884][ T6041] drm_file_alloc+0x5c6/0xb40 [ 75.255914][ T6041] drm_open_helper+0x1fc/0x540 [ 75.255945][ T6041] drm_open+0x1a0/0x3e0 [ 75.255975][ T6041] ? __pfx_drm_open+0x10/0x10 [ 75.256002][ T6041] drm_stub_open+0x20f/0x380 [ 75.256029][ T6041] ? __pfx_drm_stub_open+0x10/0x10 [ 75.256056][ T6041] chrdev_open+0x234/0x6a0 [ 75.256081][ T6041] ? __pfx_apparmor_file_open+0x10/0x10 [ 75.256107][ T6041] ? __pfx_chrdev_open+0x10/0x10 [ 75.256134][ T6041] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 75.256167][ T6041] do_dentry_open+0x6ab/0x14d0 [ 75.256192][ T6041] ? __pfx_chrdev_open+0x10/0x10 [ 75.256221][ T6041] vfs_open+0x82/0x3f0 [ 75.256253][ T6041] path_openat+0x2873/0x4280 [ 75.256281][ T6041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.256313][ T6041] ? __pfx_path_openat+0x10/0x10 [ 75.256343][ T6041] do_file_open+0x20e/0x430 [ 75.256368][ T6041] ? __pfx_do_file_open+0x10/0x10 [ 75.256398][ T6041] ? alloc_fd+0x471/0x7a0 [ 75.256434][ T6041] ? do_getname+0x191/0x390 [ 75.256464][ T6041] do_sys_openat2+0x10f/0x1e0 [ 75.256496][ T6041] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.256526][ T6041] ? __fget_files+0x21f/0x3d0 [ 75.256563][ T6041] __x64_sys_openat+0x12d/0x210 [ 75.256590][ T6041] ? __pfx___x64_sys_openat+0x10/0x10 [ 75.256621][ T6041] ? rcu_is_watching+0x12/0xc0 [ 75.256647][ T6041] do_syscall_64+0x115/0x840 [ 75.256684][ T6041] ? clear_bhb_loop+0x40/0x90 [ 75.256715][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.256743][ T6041] RIP: 0033:0x7f77e839ce59 [ 75.256766][ T6041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.256792][ T6041] RSP: 002b:00007f77e65f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.256821][ T6041] RAX: ffffffffffffffda RBX: 00007f77e8615fa0 RCX: 00007f77e839ce59 [ 75.256840][ T6041] RDX: 0000000000028900 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 75.256867][ T6041] RBP: 00007f77e8432e6f R08: 0000000000000000 R09: 0000000000000000 [ 75.256885][ T6041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.256902][ T6041] R13: 00007f77e8616038 R14: 00007f77e8615fa0 R15: 00007ffd45cbf558 [ 75.256930][ T6041] [ 75.606520][ T6041] debugfs: out of free dentries, can not create symlink 'device' [ 75.638503][ T6041] sd 0:0:1:0: PR command failed: 1026 [ 75.682445][ T6041] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 75.723758][ T6041] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 76.127630][ T6054] FAULT_INJECTION: forcing a failure. [ 76.127630][ T6054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.206739][ T6054] CPU: 0 UID: 0 PID: 6054 Comm: syz.0.54 Not tainted syzkaller #0 PREEMPT(full) [ 76.206774][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.206790][ T6054] Call Trace: [ 76.206797][ T6054] [ 76.206814][ T6054] dump_stack_lvl+0x100/0x190 [ 76.206867][ T6054] should_fail_ex.cold+0x5/0xa [ 76.206895][ T6054] _copy_from_user+0x2e/0xd0 [ 76.206925][ T6054] do_ip_getsockopt+0x42a/0x23f0 [ 76.206952][ T6054] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 76.206975][ T6054] ? is_bpf_text_address+0x94/0x1a0 [ 76.207005][ T6054] ? __kernel_text_address+0xd/0x30 [ 76.207036][ T6054] ? aa_label_sk_perm+0x194/0x5f0 [ 76.207063][ T6054] ? unwind_get_return_address+0x59/0xa0 [ 76.207098][ T6054] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 76.207127][ T6054] ? putname+0xb1/0x110 [ 76.207150][ T6054] ? _parse_integer_limit+0x17f/0x1d0 [ 76.207185][ T6054] ? _kstrtoull+0x13c/0x1f0 [ 76.207218][ T6054] ? __pfx__kstrtoull+0x10/0x10 [ 76.207250][ T6054] ? rcu_is_watching+0x12/0xc0 [ 76.207275][ T6054] ? aa_file_perm+0x7e4/0x14d0 [ 76.207307][ T6054] ? rcu_is_watching+0x12/0xc0 [ 76.207327][ T6054] ip_getsockopt+0xa1/0x1e0 [ 76.207347][ T6054] ? __pfx_ip_getsockopt+0x10/0x10 [ 76.207369][ T6054] ? __might_fault+0xc5/0x140 [ 76.207399][ T6054] ? lock_release+0x24d/0x310 [ 76.207433][ T6054] ipv6_getsockopt+0x243/0x2a0 [ 76.207468][ T6054] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 76.207498][ T6054] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 76.207529][ T6054] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 76.207556][ T6054] do_sock_getsockopt+0x50a/0x6e0 [ 76.207582][ T6054] ? ksys_write+0x12a/0x250 [ 76.207614][ T6054] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 76.207654][ T6054] ? rcu_is_watching+0x12/0xc0 [ 76.207677][ T6054] ? rcu_is_watching+0x12/0xc0 [ 76.207698][ T6054] ? __fget_files+0x215/0x3d0 [ 76.207736][ T6054] ? __fget_files+0x21f/0x3d0 [ 76.207772][ T6054] __sys_getsockopt+0x133/0x1d0 [ 76.207797][ T6054] ? __pfx_ksys_write+0x10/0x10 [ 76.207939][ T6054] ? __x64_sys_getsockopt+0xbd/0x160 [ 76.207961][ T6054] __x64_sys_getsockopt+0xbd/0x160 [ 76.207981][ T6054] ? trace_irq_enable.constprop.0+0x122/0x160 [ 76.208023][ T6054] do_syscall_64+0x115/0x840 [ 76.208055][ T6054] ? clear_bhb_loop+0x40/0x90 [ 76.208084][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.208109][ T6054] RIP: 0033:0x7f77e839ce59 [ 76.208131][ T6054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.208154][ T6054] RSP: 002b:00007f77e65d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 76.208179][ T6054] RAX: ffffffffffffffda RBX: 00007f77e8616090 RCX: 00007f77e839ce59 [ 76.208196][ T6054] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 76.208209][ T6054] RBP: 00007f77e65d5090 R08: 0000200000000240 R09: 0000000000000000 [ 76.208224][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.208238][ T6054] R13: 00007f77e8616128 R14: 00007f77e8616090 R15: 00007ffd45cbf558 [ 76.208333][ T6054] [ 77.316437][ T30] audit: type=1804 audit(1781814806.354:2): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.56" name="/newroot/12/file0" dev="tmpfs" ino=80 res=1 errno=0 [ 77.642578][ T6084] capability: warning: `syz.3.61' uses 32-bit capabilities (legacy support in use) [ 77.668864][ T6084] MTRR 1 not used [ 77.762313][ T6089] sd 0:0:1:0: PR command failed: 1026 [ 77.787390][ T6089] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 77.826449][ T6089] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 78.033713][ T6099] futex_wake_op: syz.3.64 tries to shift op by -2048; fix this program [ 78.075427][ T6096] 0x000000000001-0x000000020000 : "" [ 78.120316][ T6096] ftl_cs: FTL header corrupt! [ 78.499015][ T6119] FAULT_INJECTION: forcing a failure. [ 78.499015][ T6119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.553412][ T6119] CPU: 1 UID: 0 PID: 6119 Comm: syz.2.69 Not tainted syzkaller #0 PREEMPT(full) [ 78.553438][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.553447][ T6119] Call Trace: [ 78.553454][ T6119] [ 78.553461][ T6119] dump_stack_lvl+0x100/0x190 [ 78.553497][ T6119] should_fail_ex.cold+0x5/0xa [ 78.553518][ T6119] _copy_from_user+0x2e/0xd0 [ 78.553536][ T6119] get_info+0x116/0x5f0 [ 78.553557][ T6119] ? __pfx_get_info+0x10/0x10 [ 78.553575][ T6119] ? sockopt_release_sock+0x57/0x70 [ 78.553589][ T6119] ? sockopt_release_sock+0x57/0x70 [ 78.553602][ T6119] ? rcu_is_watching+0x12/0xc0 [ 78.553617][ T6119] ? sockopt_release_sock+0x57/0x70 [ 78.553629][ T6119] ? trace_irq_enable.constprop.0+0x122/0x160 [ 78.553649][ T6119] ? sockopt_release_sock+0x57/0x70 [ 78.553669][ T6119] ? rcu_is_watching+0x12/0xc0 [ 78.553684][ T6119] ? lock_acquire+0x301/0x370 [ 78.553702][ T6119] ? rcu_is_watching+0x12/0xc0 [ 78.553716][ T6119] ? bpf_lsm_capable+0x9/0x10 [ 78.553736][ T6119] ? security_capable+0x80/0x260 [ 78.553757][ T6119] do_ipt_get_ctl+0x209/0xab0 [ 78.553777][ T6119] ? __mutex_unlock_slowpath+0x350/0x910 [ 78.553797][ T6119] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 78.553817][ T6119] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.553845][ T6119] ? nf_sockopt_find.isra.0+0x222/0x290 [ 78.553875][ T6119] nf_getsockopt+0x7c/0xe0 [ 78.553895][ T6119] ip_getsockopt+0x192/0x1e0 [ 78.553909][ T6119] ? __pfx_ip_getsockopt+0x10/0x10 [ 78.553922][ T6119] ? lock_release+0x24d/0x310 [ 78.553940][ T6119] ipv6_getsockopt+0x243/0x2a0 [ 78.553961][ T6119] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 78.553979][ T6119] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 78.553999][ T6119] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 78.554016][ T6119] do_sock_getsockopt+0x50a/0x6e0 [ 78.554032][ T6119] ? ksys_write+0x12a/0x250 [ 78.554054][ T6119] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 78.554071][ T6119] ? rcu_is_watching+0x12/0xc0 [ 78.554084][ T6119] ? rcu_is_watching+0x12/0xc0 [ 78.554096][ T6119] ? __fget_files+0x215/0x3d0 [ 78.554118][ T6119] ? __fget_files+0x21f/0x3d0 [ 78.554139][ T6119] __sys_getsockopt+0x133/0x1d0 [ 78.554152][ T6119] ? __pfx_ksys_write+0x10/0x10 [ 78.554173][ T6119] ? __x64_sys_getsockopt+0xbd/0x160 [ 78.554185][ T6119] __x64_sys_getsockopt+0xbd/0x160 [ 78.554197][ T6119] ? trace_irq_enable.constprop.0+0x122/0x160 [ 78.554216][ T6119] do_syscall_64+0x115/0x840 [ 78.554235][ T6119] ? clear_bhb_loop+0x40/0x90 [ 78.554251][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.554265][ T6119] RIP: 0033:0x7f288699ce59 [ 78.554285][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.554311][ T6119] RSP: 002b:00007f288787c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 78.554400][ T6119] RAX: ffffffffffffffda RBX: 00007f2886c16090 RCX: 00007f288699ce59 [ 78.554410][ T6119] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 78.554418][ T6119] RBP: 00007f288787c090 R08: 0000200000000240 R09: 0000000000000000 [ 78.554427][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.554435][ T6119] R13: 00007f2886c16128 R14: 00007f2886c16090 R15: 00007ffc39cd5f08 [ 78.554448][ T6119] [ 79.056522][ T5628] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 80.135691][ T6129] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5620] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6129] [ 81.020727][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 81.397961][ T6175] FAULT_INJECTION: forcing a failure. [ 81.397961][ T6175] name failslab, interval 1, probability 0, space 0, times 0 [ 81.440982][ T6168] mmap: syz.1.78 (6168) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.455809][ T6175] CPU: 0 UID: 0 PID: 6175 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT(full) [ 81.455844][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 81.455858][ T6175] Call Trace: [ 81.455865][ T6175] [ 81.455873][ T6175] dump_stack_lvl+0x100/0x190 [ 81.455922][ T6175] should_fail_ex.cold+0x5/0xa [ 81.455949][ T6175] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 81.455980][ T6175] should_failslab+0xc2/0x120 [ 81.456017][ T6175] __kmalloc_cache_noprof+0x7a/0x6e0 [ 81.456045][ T6175] ? __request_module+0x2b7/0x6a0 [ 81.456090][ T6175] __request_module+0x2b7/0x6a0 [ 81.456122][ T6175] ? __pfx___request_module+0x10/0x10 [ 81.456158][ T6175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.456204][ T6175] xt_request_find_table_lock+0x9f/0xf0 [ 81.456242][ T6175] get_info+0x196/0x5f0 [ 81.456277][ T6175] ? __pfx_get_info+0x10/0x10 [ 81.456309][ T6175] ? sockopt_release_sock+0x57/0x70 [ 81.456336][ T6175] ? sockopt_release_sock+0x57/0x70 [ 81.456360][ T6175] ? rcu_is_watching+0x12/0xc0 [ 81.456383][ T6175] ? sockopt_release_sock+0x57/0x70 [ 81.456402][ T6175] ? trace_irq_enable.constprop.0+0x122/0x160 [ 81.456434][ T6175] ? sockopt_release_sock+0x57/0x70 [ 81.456456][ T6175] ? rcu_is_watching+0x12/0xc0 [ 81.456478][ T6175] ? lock_acquire+0x301/0x370 [ 81.456507][ T6175] ? rcu_is_watching+0x12/0xc0 [ 81.456530][ T6175] ? bpf_lsm_capable+0x9/0x10 [ 81.456564][ T6175] ? security_capable+0x80/0x260 [ 81.456601][ T6175] do_ipt_get_ctl+0x209/0xab0 [ 81.456633][ T6175] ? __mutex_unlock_slowpath+0x350/0x910 [ 81.456663][ T6175] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 81.456693][ T6175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.456726][ T6175] ? nf_sockopt_find.isra.0+0x222/0x290 [ 81.456758][ T6175] nf_getsockopt+0x7c/0xe0 [ 81.456786][ T6175] ip_getsockopt+0x192/0x1e0 [ 81.456806][ T6175] ? __pfx_ip_getsockopt+0x10/0x10 [ 81.456824][ T6175] ? lock_release+0x24d/0x310 [ 81.456851][ T6175] ipv6_getsockopt+0x243/0x2a0 [ 81.456881][ T6175] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 81.456907][ T6175] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 81.456938][ T6175] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 81.456963][ T6175] do_sock_getsockopt+0x50a/0x6e0 [ 81.456987][ T6175] ? ksys_write+0x12a/0x250 [ 81.457017][ T6175] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 81.457043][ T6175] ? rcu_is_watching+0x12/0xc0 [ 81.457062][ T6175] ? rcu_is_watching+0x12/0xc0 [ 81.457087][ T6175] ? __fget_files+0x215/0x3d0 [ 81.457119][ T6175] ? __fget_files+0x21f/0x3d0 [ 81.457149][ T6175] __sys_getsockopt+0x133/0x1d0 [ 81.457169][ T6175] ? __pfx_ksys_write+0x10/0x10 [ 81.457199][ T6175] ? __x64_sys_getsockopt+0xbd/0x160 [ 81.457217][ T6175] __x64_sys_getsockopt+0xbd/0x160 [ 81.457235][ T6175] ? trace_irq_enable.constprop.0+0x122/0x160 [ 81.457262][ T6175] do_syscall_64+0x115/0x840 [ 81.457287][ T6175] ? clear_bhb_loop+0x40/0x90 [ 81.457310][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.457330][ T6175] RIP: 0033:0x7f77e839ce59 [ 81.457347][ T6175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.457366][ T6175] RSP: 002b:00007f77e65d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 81.457387][ T6175] RAX: ffffffffffffffda RBX: 00007f77e8616090 RCX: 00007f77e839ce59 [ 81.457401][ T6175] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 81.457413][ T6175] RBP: 00007f77e65d5090 R08: 0000200000000240 R09: 0000000000000000 [ 81.457426][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.457438][ T6175] R13: 00007f77e8616128 R14: 00007f77e8616090 R15: 00007ffd45cbf558 [ 81.457458][ T6175] [ 81.839989][ T6171] could not allocate digest TFM handle [ 82.029342][ T808] cfg80211: failed to load regulatory.db [ 82.382306][ T6198] block nbd0: Unsupported socket: should be TCP or UNIX. [ 82.727956][ T30] audit: type=1800 audit(1781814811.774:3): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="features" dev="configfs" ino=11350 res=0 errno=0 [ 82.836291][ T30] audit: type=1800 audit(1781814811.804:4): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="features" dev="configfs" ino=11350 res=0 errno=0 [ 82.884356][ T30] audit: type=1800 audit(1781814811.804:5): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="features" dev="configfs" ino=11350 res=0 errno=0 [ 82.996750][ T30] audit: type=1800 audit(1781814811.804:6): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="features" dev="configfs" ino=11350 res=0 errno=0 [ 83.017968][ T30] audit: type=1800 audit(1781814811.804:7): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="features" dev="configfs" ino=11350 res=0 errno=0 [ 83.038918][ T30] audit: type=1800 audit(1781814811.804:8): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="features" dev="configfs" ino=11350 res=0 errno=0 [ 83.176593][ T30] audit: type=1800 audit(1781814811.804:9): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="features" dev="configfs" ino=11350 res=0 errno=0 [ 83.201861][ T30] audit: type=1800 audit(1781814811.804:10): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="features" dev="configfs" ino=11350 res=0 errno=0 [ 83.279150][ T30] audit: type=1800 audit(1781814811.804:11): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="features" dev="configfs" ino=11350 res=0 errno=0 [ 83.354166][ T30] audit: type=1800 audit(1781814811.804:12): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="features" dev="configfs" ino=11350 res=0 errno=0 [ 83.845896][ T6237] FAULT_INJECTION: forcing a failure. [ 83.845896][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 83.889306][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT(full) [ 83.889339][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 83.889353][ T6237] Call Trace: [ 83.889361][ T6237] [ 83.889369][ T6237] dump_stack_lvl+0x100/0x190 [ 83.889410][ T6237] should_fail_ex.cold+0x5/0xa [ 83.889432][ T6237] ? __kmalloc_node_track_caller_noprof+0xbe/0x890 [ 83.889472][ T6237] should_failslab+0xc2/0x120 [ 83.889507][ T6237] __kmalloc_node_track_caller_noprof+0xe4/0x890 [ 83.889540][ T6237] ? __request_module+0x2d5/0x6a0 [ 83.889578][ T6237] kstrdup+0x51/0xe0 [ 83.889610][ T6237] __request_module+0x2d5/0x6a0 [ 83.889644][ T6237] ? __pfx___request_module+0x10/0x10 [ 83.889678][ T6237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.889719][ T6237] xt_request_find_table_lock+0x9f/0xf0 [ 83.889753][ T6237] get_info+0x196/0x5f0 [ 83.889783][ T6237] ? __pfx_get_info+0x10/0x10 [ 83.889812][ T6237] ? sockopt_release_sock+0x57/0x70 [ 83.889835][ T6237] ? sockopt_release_sock+0x57/0x70 [ 83.889858][ T6237] ? rcu_is_watching+0x12/0xc0 [ 83.889879][ T6237] ? sockopt_release_sock+0x57/0x70 [ 83.889910][ T6237] ? trace_irq_enable.constprop.0+0x122/0x160 [ 83.889941][ T6237] ? sockopt_release_sock+0x57/0x70 [ 83.889965][ T6237] ? rcu_is_watching+0x12/0xc0 [ 83.889987][ T6237] ? lock_acquire+0x301/0x370 [ 83.890016][ T6237] ? rcu_is_watching+0x12/0xc0 [ 83.890041][ T6237] ? bpf_lsm_capable+0x9/0x10 [ 83.890075][ T6237] ? security_capable+0x80/0x260 [ 83.890113][ T6237] do_ipt_get_ctl+0x209/0xab0 [ 83.890146][ T6237] ? __mutex_unlock_slowpath+0x350/0x910 [ 83.890178][ T6237] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 83.890213][ T6237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.890261][ T6237] ? nf_sockopt_find.isra.0+0x222/0x290 [ 83.890299][ T6237] nf_getsockopt+0x7c/0xe0 [ 83.890333][ T6237] ip_getsockopt+0x192/0x1e0 [ 83.890355][ T6237] ? __pfx_ip_getsockopt+0x10/0x10 [ 83.890376][ T6237] ? lock_release+0x24d/0x310 [ 83.890406][ T6237] ipv6_getsockopt+0x243/0x2a0 [ 83.890443][ T6237] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 83.890474][ T6237] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 83.890509][ T6237] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 83.890540][ T6237] do_sock_getsockopt+0x50a/0x6e0 [ 83.890570][ T6237] ? ksys_write+0x12a/0x250 [ 83.890608][ T6237] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 83.890639][ T6237] ? rcu_is_watching+0x12/0xc0 [ 83.890663][ T6237] ? rcu_is_watching+0x12/0xc0 [ 83.890687][ T6237] ? __fget_files+0x215/0x3d0 [ 83.890726][ T6237] ? __fget_files+0x21f/0x3d0 [ 83.890764][ T6237] __sys_getsockopt+0x133/0x1d0 [ 83.890789][ T6237] ? __pfx_ksys_write+0x10/0x10 [ 83.890826][ T6237] ? __x64_sys_getsockopt+0xbd/0x160 [ 83.890849][ T6237] __x64_sys_getsockopt+0xbd/0x160 [ 83.890873][ T6237] ? trace_irq_enable.constprop.0+0x122/0x160 [ 83.890913][ T6237] do_syscall_64+0x115/0x840 [ 83.890944][ T6237] ? clear_bhb_loop+0x40/0x90 [ 83.890973][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.890998][ T6237] RIP: 0033:0x7f77e839ce59 [ 83.891019][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.891043][ T6237] RSP: 002b:00007f77e65d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 83.891067][ T6237] RAX: ffffffffffffffda RBX: 00007f77e8616090 RCX: 00007f77e839ce59 [ 83.891085][ T6237] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 83.891100][ T6237] RBP: 00007f77e65d5090 R08: 0000200000000240 R09: 0000000000000000 [ 83.891117][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.891132][ T6237] R13: 00007f77e8616128 R14: 00007f77e8616090 R15: 00007ffd45cbf558 [ 83.891157][ T6237] [ 84.611219][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.97'. [ 84.790179][ T6268] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 84.945514][ T6273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.033122][ T6273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.080662][ T6273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.148181][ T6273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.536274][ T6289] FAULT_INJECTION: forcing a failure. [ 85.536274][ T6289] name failslab, interval 1, probability 0, space 0, times 0 [ 85.582810][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT(full) [ 85.582845][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 85.582860][ T6289] Call Trace: [ 85.582868][ T6289] [ 85.582877][ T6289] dump_stack_lvl+0x100/0x190 [ 85.582921][ T6289] should_fail_ex.cold+0x5/0xa [ 85.582946][ T6289] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 85.582977][ T6289] should_failslab+0xc2/0x120 [ 85.583017][ T6289] __kmalloc_cache_noprof+0x7a/0x6e0 [ 85.583044][ T6289] ? call_usermodehelper_setup+0xaf/0x360 [ 85.583075][ T6289] ? __pfx_free_modprobe_argv+0x10/0x10 [ 85.583110][ T6289] call_usermodehelper_setup+0xaf/0x360 [ 85.583144][ T6289] __request_module+0x3c7/0x6a0 [ 85.583179][ T6289] ? __pfx___request_module+0x10/0x10 [ 85.583216][ T6289] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.583261][ T6289] xt_request_find_table_lock+0x9f/0xf0 [ 85.583299][ T6289] get_info+0x196/0x5f0 [ 85.583334][ T6289] ? __pfx_get_info+0x10/0x10 [ 85.583366][ T6289] ? sockopt_release_sock+0x57/0x70 [ 85.583392][ T6289] ? sockopt_release_sock+0x57/0x70 [ 85.583416][ T6289] ? rcu_is_watching+0x12/0xc0 [ 85.583439][ T6289] ? sockopt_release_sock+0x57/0x70 [ 85.583463][ T6289] ? trace_irq_enable.constprop.0+0x122/0x160 [ 85.583498][ T6289] ? sockopt_release_sock+0x57/0x70 [ 85.583523][ T6289] ? rcu_is_watching+0x12/0xc0 [ 85.583546][ T6289] ? lock_acquire+0x301/0x370 [ 85.583578][ T6289] ? rcu_is_watching+0x12/0xc0 [ 85.583603][ T6289] ? bpf_lsm_capable+0x9/0x10 [ 85.583637][ T6289] ? security_capable+0x80/0x260 [ 85.583681][ T6289] do_ipt_get_ctl+0x209/0xab0 [ 85.583717][ T6289] ? __mutex_unlock_slowpath+0x350/0x910 [ 85.583750][ T6289] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 85.583786][ T6289] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.583826][ T6289] ? nf_sockopt_find.isra.0+0x222/0x290 [ 85.583864][ T6289] nf_getsockopt+0x7c/0xe0 [ 85.583899][ T6289] ip_getsockopt+0x192/0x1e0 [ 85.583923][ T6289] ? __pfx_ip_getsockopt+0x10/0x10 [ 85.583946][ T6289] ? lock_release+0x24d/0x310 [ 85.583980][ T6289] ipv6_getsockopt+0x243/0x2a0 [ 85.584016][ T6289] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 85.584050][ T6289] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 85.584085][ T6289] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 85.584115][ T6289] do_sock_getsockopt+0x50a/0x6e0 [ 85.584145][ T6289] ? ksys_write+0x12a/0x250 [ 85.584182][ T6289] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 85.584212][ T6289] ? rcu_is_watching+0x12/0xc0 [ 85.584234][ T6289] ? rcu_is_watching+0x12/0xc0 [ 85.584253][ T6289] ? __fget_files+0x215/0x3d0 [ 85.584287][ T6289] ? __fget_files+0x21f/0x3d0 [ 85.584318][ T6289] __sys_getsockopt+0x133/0x1d0 [ 85.584338][ T6289] ? __pfx_ksys_write+0x10/0x10 [ 85.584372][ T6289] ? __x64_sys_getsockopt+0xbd/0x160 [ 85.584392][ T6289] __x64_sys_getsockopt+0xbd/0x160 [ 85.584412][ T6289] ? trace_irq_enable.constprop.0+0x122/0x160 [ 85.584443][ T6289] do_syscall_64+0x115/0x840 [ 85.584471][ T6289] ? clear_bhb_loop+0x40/0x90 [ 85.584495][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.584515][ T6289] RIP: 0033:0x7f77e839ce59 [ 85.584532][ T6289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.584553][ T6289] RSP: 002b:00007f77e65d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 85.584577][ T6289] RAX: ffffffffffffffda RBX: 00007f77e8616090 RCX: 00007f77e839ce59 [ 85.584593][ T6289] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 85.584607][ T6289] RBP: 00007f77e65d5090 R08: 0000200000000240 R09: 0000000000000000 [ 85.584621][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.584634][ T6289] R13: 00007f77e8616128 R14: 00007f77e8616090 R15: 00007ffd45cbf558 [ 85.584656][ T6289] [ 86.947204][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.108'. [ 87.976146][ T5628] Bluetooth: hci1: unexpected event 0x10 length: 124 > 1 [ 87.976218][ T5622] Bluetooth: hci1: hardware error 0x00 [ 88.330596][ T6338] FAULT_INJECTION: forcing a failure. [ 88.330596][ T6338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.364043][ T6338] CPU: 0 UID: 0 PID: 6338 Comm: syz.1.114 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.364083][ T6338] Tainted: [L]=SOFTLOCKUP [ 88.364092][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.364106][ T6338] Call Trace: [ 88.364113][ T6338] [ 88.364122][ T6338] dump_stack_lvl+0x100/0x190 [ 88.364163][ T6338] should_fail_ex.cold+0x5/0xa [ 88.364190][ T6338] _copy_to_user+0x32/0xd0 [ 88.364219][ T6338] simple_read_from_buffer+0xcb/0x170 [ 88.364256][ T6338] proc_fail_nth_read+0x1af/0x230 [ 88.364287][ T6338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.364318][ T6338] ? security_file_permission+0x76/0x210 [ 88.364347][ T6338] ? rw_verify_area+0xce/0x6d0 [ 88.364377][ T6338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.364409][ T6338] vfs_read+0x1e4/0xb40 [ 88.364452][ T6338] ? __pfx_vfs_read+0x10/0x10 [ 88.364481][ T6338] ? rcu_is_watching+0x12/0xc0 [ 88.364506][ T6338] ? __fget_files+0x21f/0x3d0 [ 88.364545][ T6338] ksys_read+0x12a/0x250 [ 88.364579][ T6338] ? __pfx_ksys_read+0x10/0x10 [ 88.364613][ T6338] ? rcu_is_watching+0x12/0xc0 [ 88.364637][ T6338] do_syscall_64+0x115/0x840 [ 88.364667][ T6338] ? clear_bhb_loop+0x40/0x90 [ 88.364695][ T6338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.364720][ T6338] RIP: 0033:0x7f94f6f5d68e [ 88.364739][ T6338] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.364762][ T6338] RSP: 002b:00007f94f7ea7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.364787][ T6338] RAX: ffffffffffffffda RBX: 00007f94f7ea86c0 RCX: 00007f94f6f5d68e [ 88.364804][ T6338] RDX: 000000000000000f RSI: 00007f94f7ea80a0 RDI: 0000000000000005 [ 88.364819][ T6338] RBP: 00007f94f7ea8090 R08: 0000000000000000 R09: 0000000000000000 [ 88.364834][ T6338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.364849][ T6338] R13: 00007f94f7216128 R14: 00007f94f7216090 R15: 00007fffd9eeef38 [ 88.364874][ T6338] [ 88.578589][ T6342] net_ratelimit: 49 callbacks suppressed [ 88.578612][ T6342] openvswitch: netlink: Flow key attr not present in new flow. [ 88.700758][ T6349] FAULT_INJECTION: forcing a failure. [ 88.700758][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 88.759623][ T6349] CPU: 1 UID: 0 PID: 6349 Comm: syz.3.116 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.759671][ T6349] Tainted: [L]=SOFTLOCKUP [ 88.759680][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.759695][ T6349] Call Trace: [ 88.759702][ T6349] [ 88.759711][ T6349] dump_stack_lvl+0x100/0x190 [ 88.759755][ T6349] should_fail_ex.cold+0x5/0xa [ 88.759780][ T6349] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 88.759811][ T6349] should_failslab+0xc2/0x120 [ 88.759847][ T6349] __kmalloc_cache_noprof+0x7a/0x6e0 [ 88.759883][ T6349] ? snd_pcm_oss_open+0x5e5/0x1390 [ 88.759920][ T6349] ? rcu_is_watching+0x12/0xc0 [ 88.759947][ T6349] snd_pcm_oss_open+0x5e5/0x1390 [ 88.759982][ T6349] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 88.760013][ T6349] ? tomoyo_check_open_permission+0x211/0x3c0 [ 88.760055][ T6349] ? __pfx_default_wake_function+0x10/0x10 [ 88.760093][ T6349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.760123][ T6349] ? do_raw_spin_lock+0x128/0x260 [ 88.760159][ T6349] ? rcu_is_watching+0x12/0xc0 [ 88.760182][ T6349] ? soundcore_open+0x231/0x5a0 [ 88.760221][ T6349] ? lock_release+0x24d/0x310 [ 88.760255][ T6349] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 88.760286][ T6349] soundcore_open+0x2e3/0x5a0 [ 88.760314][ T6349] ? __pfx_soundcore_open+0x10/0x10 [ 88.760341][ T6349] chrdev_open+0x234/0x6a0 [ 88.760364][ T6349] ? __pfx_apparmor_file_open+0x10/0x10 [ 88.760388][ T6349] ? __pfx_chrdev_open+0x10/0x10 [ 88.760411][ T6349] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 88.760434][ T6349] do_dentry_open+0x6ab/0x14d0 [ 88.760452][ T6349] ? __pfx_chrdev_open+0x10/0x10 [ 88.760472][ T6349] vfs_open+0x82/0x3f0 [ 88.760497][ T6349] path_openat+0x2873/0x4280 [ 88.760522][ T6349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.760550][ T6349] ? __pfx_path_openat+0x10/0x10 [ 88.760577][ T6349] do_file_open+0x20e/0x430 [ 88.760602][ T6349] ? __pfx_do_file_open+0x10/0x10 [ 88.760635][ T6349] ? alloc_fd+0x471/0x7a0 [ 88.760672][ T6349] ? do_getname+0x191/0x390 [ 88.760701][ T6349] do_sys_openat2+0x10f/0x1e0 [ 88.760730][ T6349] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.760761][ T6349] ? trace_irq_enable.constprop.0+0x122/0x160 [ 88.760799][ T6349] __x64_sys_openat+0x12d/0x210 [ 88.760829][ T6349] ? __pfx___x64_sys_openat+0x10/0x10 [ 88.760862][ T6349] ? rcu_is_watching+0x12/0xc0 [ 88.760887][ T6349] do_syscall_64+0x115/0x840 [ 88.760926][ T6349] ? clear_bhb_loop+0x40/0x90 [ 88.760957][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.760982][ T6349] RIP: 0033:0x7f07bab9ce59 [ 88.761001][ T6349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.761025][ T6349] RSP: 002b:00007f07bba6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.761050][ T6349] RAX: ffffffffffffffda RBX: 00007f07bae15fa0 RCX: 00007f07bab9ce59 [ 88.761067][ T6349] RDX: 0000000000020342 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 88.761083][ T6349] RBP: 00007f07bac32e6f R08: 0000000000000000 R09: 0000000000000000 [ 88.761099][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.761114][ T6349] R13: 00007f07bae16038 R14: 00007f07bae15fa0 R15: 00007ffec328d9e8 [ 88.761138][ T6349] [ 89.663663][ T6388] usb usb4: usbfs: process 6388 (syz.2.121) did not claim interface 0 before use [ 90.017083][ T5622] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 90.043216][ T6403] netlink: 164 bytes leftover after parsing attributes in process `syz.0.124'. [ 90.707720][ T6439] netlink: 186 bytes leftover after parsing attributes in process `syz.1.133'. [ 90.797092][ T6446] random: crng reseeded on system resumption [ 90.808340][ T6446] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.882393][ T6446] FAULT_INJECTION: forcing a failure. [ 90.882393][ T6446] name fail_futex, interval 1, probability 0, space 0, times 1 [ 90.895986][ T6446] CPU: 1 UID: 0 PID: 6446 Comm: syz.1.134 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.896030][ T6446] Tainted: [L]=SOFTLOCKUP [ 90.896040][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 90.896056][ T6446] Call Trace: [ 90.896064][ T6446] [ 90.896074][ T6446] dump_stack_lvl+0x100/0x190 [ 90.896124][ T6446] should_fail_ex.cold+0x5/0xa [ 90.896154][ T6446] get_futex_key+0x1d2/0x14f0 [ 90.896191][ T6446] ? __pfx_get_futex_key+0x10/0x10 [ 90.896227][ T6446] ? futex_wake+0x4ea/0x5e0 [ 90.896256][ T6446] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 90.896285][ T6446] futex_wake+0xf4/0x5e0 [ 90.896314][ T6446] ? __pfx_futex_wake+0x10/0x10 [ 90.896342][ T6446] ? preempt_count_add+0x76/0x150 [ 90.896378][ T6446] ? ksys_write+0x190/0x250 [ 90.896424][ T6446] ? rcu_is_watching+0x12/0xc0 [ 90.896453][ T6446] do_futex+0x2b2/0x440 [ 90.896487][ T6446] ? __pfx_do_futex+0x10/0x10 [ 90.896524][ T6446] __x64_sys_futex+0x34f/0x4d0 [ 90.896559][ T6446] ? __pfx___x64_sys_futex+0x10/0x10 [ 90.896598][ T6446] ? __pfx_kernel_mbind+0x10/0x10 [ 90.896630][ T6446] ? rcu_is_watching+0x12/0xc0 [ 90.896657][ T6446] do_syscall_64+0x115/0x840 [ 90.896692][ T6446] ? clear_bhb_loop+0x40/0x90 [ 90.896724][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.896751][ T6446] RIP: 0033:0x7f94f6f9ce59 [ 90.896772][ T6446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.896798][ T6446] RSP: 002b:00007f94f7ec90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.896826][ T6446] RAX: ffffffffffffffda RBX: 00007f94f7215fa8 RCX: 00007f94f6f9ce59 [ 90.896845][ T6446] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f94f7215fac [ 90.896862][ T6446] RBP: 00007f94f7215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 90.896879][ T6446] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 90.896893][ T6446] R13: 00007f94f7216038 R14: 00007fffd9eeee50 R15: 00007fffd9eeef38 [ 90.896917][ T6446] [ 91.190820][ T6454] FAULT_INJECTION: forcing a failure. [ 91.190820][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 91.195703][ T6446] syz.1.134 (6446) used greatest stack depth: 18696 bytes left [ 91.242767][ T6454] CPU: 0 UID: 0 PID: 6454 Comm: syz.0.135 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.242794][ T6454] Tainted: [L]=SOFTLOCKUP [ 91.242800][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.242809][ T6454] Call Trace: [ 91.242814][ T6454] [ 91.242819][ T6454] dump_stack_lvl+0x100/0x190 [ 91.242848][ T6454] should_fail_ex.cold+0x5/0xa [ 91.242864][ T6454] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 91.242894][ T6454] should_failslab+0xc2/0x120 [ 91.242917][ T6454] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 91.242936][ T6454] ? create_new_namespaces+0x30/0xac0 [ 91.242957][ T6454] ? rcu_is_watching+0x12/0xc0 [ 91.242996][ T6454] create_new_namespaces+0x30/0xac0 [ 91.243017][ T6454] ? bpf_lsm_capable+0x9/0x10 [ 91.243039][ T6454] ? security_capable+0x80/0x260 [ 91.243061][ T6454] unshare_nsproxy_namespaces+0xf2/0x220 [ 91.243083][ T6454] ksys_unshare+0x438/0xab0 [ 91.243098][ T6454] ? __pfx_ksys_unshare+0x10/0x10 [ 91.243116][ T6454] __x64_sys_unshare+0x31/0x40 [ 91.243131][ T6454] do_syscall_64+0x115/0x840 [ 91.243150][ T6454] ? clear_bhb_loop+0x40/0x90 [ 91.243166][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.243180][ T6454] RIP: 0033:0x7f77e839ce59 [ 91.243193][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.243207][ T6454] RSP: 002b:00007f77e65f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 91.243222][ T6454] RAX: ffffffffffffffda RBX: 00007f77e8615fa0 RCX: 00007f77e839ce59 [ 91.243232][ T6454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 91.243241][ T6454] RBP: 00007f77e8432e6f R08: 0000000000000000 R09: 0000000000000000 [ 91.243249][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.243259][ T6454] R13: 00007f77e8616038 R14: 00007f77e8615fa0 R15: 00007ffd45cbf558 [ 91.243273][ T6454] [ 94.656472][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 94.846892][ T5622] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 94.860921][ T6653] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 94.925398][ T6654] can: request_module (can-proto-3) failed. [ 95.190944][ T6663] vivid-007: ================= START STATUS ================= [ 95.215255][ T6663] vivid-007: Generate PTS: true [ 95.237125][ T6663] vivid-007: Generate SCR: true [ 95.250753][ T6663] tpg source WxH: 320x240 (Y'CbCr) [ 95.269321][ T6663] tpg field: 1 [ 95.281531][ T6663] tpg crop: (0,0)/320x240 [ 95.296043][ T6663] tpg compose: (0,0)/320x240 [ 95.311283][ T6663] tpg colorspace: 8 [ 95.325720][ T6663] tpg transfer function: 0/0 [ 95.343847][ T6663] tpg Y'CbCr encoding: 0/0 [ 95.354678][ T6663] tpg quantization: 0/0 [ 95.369515][ T6663] tpg RGB range: 0/2 [ 95.394991][ T6663] vivid-007: ================== END STATUS ================== [ 95.760027][ T6671] futex_wake_op: syz.2.163 tries to shift op by -2048; fix this program [ 96.122001][ T5622] Bluetooth: hci3: unexpected event 0x33 length: 124 > 10 [ 96.158818][ T6694] warning: `syz.3.169' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.885241][ T6753] misc userio: Invalid payload size [ 96.896507][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.077127][ T6761] FAULT_INJECTION: forcing a failure. [ 97.077127][ T6761] name failslab, interval 1, probability 0, space 0, times 0 [ 97.123667][ T6761] CPU: 0 UID: 0 PID: 6761 Comm: syz.3.178 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.123713][ T6761] Tainted: [L]=SOFTLOCKUP [ 97.123724][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.123741][ T6761] Call Trace: [ 97.123750][ T6761] [ 97.123760][ T6761] dump_stack_lvl+0x100/0x190 [ 97.123820][ T6761] should_fail_ex.cold+0x5/0xa [ 97.123848][ T6761] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 97.123888][ T6761] should_failslab+0xc2/0x120 [ 97.123930][ T6761] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 97.123967][ T6761] ? __d_alloc+0x35/0xa50 [ 97.123997][ T6761] __d_alloc+0x35/0xa50 [ 97.124025][ T6761] d_alloc_pseudo+0x1c/0xc0 [ 97.124058][ T6761] alloc_file_pseudo+0x118/0x290 [ 97.124090][ T6761] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 97.124123][ T6761] ? __raw_spin_lock_init+0x3a/0x110 [ 97.124166][ T6761] create_pipe_files+0x360/0x970 [ 97.124195][ T6761] do_pipe2+0xbd/0x1e0 [ 97.124220][ T6761] ? __pfx_do_pipe2+0x10/0x10 [ 97.124245][ T6761] ? xfd_validate_state+0x129/0x190 [ 97.124291][ T6761] __x64_sys_pipe2+0x54/0x80 [ 97.124318][ T6761] do_syscall_64+0x115/0x840 [ 97.124354][ T6761] ? clear_bhb_loop+0x40/0x90 [ 97.124386][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.124413][ T6761] RIP: 0033:0x7f07bab9ce59 [ 97.124436][ T6761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.124462][ T6761] RSP: 002b:00007f07bba6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 97.124488][ T6761] RAX: ffffffffffffffda RBX: 00007f07bae15fa0 RCX: 00007f07bab9ce59 [ 97.124506][ T6761] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 97.124523][ T6761] RBP: 00007f07bac32e6f R08: 0000000000000000 R09: 0000000000000000 [ 97.124539][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.124556][ T6761] R13: 00007f07bae16038 R14: 00007f07bae15fa0 R15: 00007ffec328d9e8 [ 97.124582][ T6761] [ 97.882468][ T6787] i2c i2c-0: delete_device: Extra parameters [ 98.526956][ T6826] FAULT_INJECTION: forcing a failure. [ 98.526956][ T6826] name failslab, interval 1, probability 0, space 0, times 0 [ 98.573825][ T6826] CPU: 1 UID: 0 PID: 6826 Comm: syz.2.189 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.573874][ T6826] Tainted: [L]=SOFTLOCKUP [ 98.573885][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.573910][ T6826] Call Trace: [ 98.573919][ T6826] [ 98.573929][ T6826] dump_stack_lvl+0x100/0x190 [ 98.573978][ T6826] should_fail_ex.cold+0x5/0xa [ 98.574006][ T6826] should_failslab+0xc2/0x120 [ 98.574048][ T6826] __kmalloc_cache_noprof+0x7a/0x6e0 [ 98.574081][ T6826] ? sctp_add_bind_addr+0xae/0x3e0 [ 98.574122][ T6826] sctp_add_bind_addr+0xae/0x3e0 [ 98.574160][ T6826] sctp_copy_local_addr_list+0x349/0x550 [ 98.574203][ T6826] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 98.574244][ T6826] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 98.574272][ T6826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.574305][ T6826] sctp_bind_addr_copy+0x331/0x530 [ 98.574348][ T6826] sctp_connect_new_asoc+0x1c9/0x770 [ 98.574380][ T6826] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 98.574411][ T6826] ? sctp_sendmsg+0xf97/0x22e0 [ 98.574439][ T6826] ? rcu_is_watching+0x12/0xc0 [ 98.574463][ T6826] ? sctp_sendmsg+0xf97/0x22e0 [ 98.574491][ T6826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.574522][ T6826] sctp_sendmsg+0x1743/0x22e0 [ 98.574554][ T6826] ? __pfx_sctp_sendmsg+0x10/0x10 [ 98.574587][ T6826] ? aa_sk_perm+0x309/0xaa0 [ 98.574618][ T6826] ? __pfx_aa_sk_perm+0x10/0x10 [ 98.574651][ T6826] ? __pfx_sctp_sendmsg+0x10/0x10 [ 98.574682][ T6826] inet_sendmsg+0x11c/0x140 [ 98.574738][ T6826] __sys_sendto+0x430/0x4a0 [ 98.574776][ T6826] ? __pfx_inet_sendmsg+0x10/0x10 [ 98.574817][ T6826] ? __pfx___sys_sendto+0x10/0x10 [ 98.574860][ T6826] ? fd_install+0x223/0x580 [ 98.574894][ T6826] ? lock_release+0x24d/0x310 [ 98.574932][ T6826] ? xfd_validate_state+0x129/0x190 [ 98.574978][ T6826] __x64_sys_sendto+0xe0/0x1c0 [ 98.575017][ T6826] ? trace_irq_enable.constprop.0+0x122/0x160 [ 98.575051][ T6826] do_syscall_64+0x115/0x840 [ 98.575082][ T6826] ? clear_bhb_loop+0x40/0x90 [ 98.575116][ T6826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.575142][ T6826] RIP: 0033:0x7f288699ce59 [ 98.575165][ T6826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.575192][ T6826] RSP: 002b:00007f288787c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 98.575221][ T6826] RAX: ffffffffffffffda RBX: 00007f2886c16090 RCX: 00007f288699ce59 [ 98.575240][ T6826] RDX: 000000000002000f RSI: 0000000000000000 RDI: 0000000000000003 [ 98.575258][ T6826] RBP: 00007f2886a32e6f R08: 0000200000000000 R09: 000000000000001c [ 98.575276][ T6826] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 98.575292][ T6826] R13: 00007f2886c16128 R14: 00007f2886c16090 R15: 00007ffc39cd5f08 [ 98.575317][ T6826] [ 98.980589][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.020029][ T6827] zswap: compressor not available [ 99.352770][ T6852] FAULT_INJECTION: forcing a failure. [ 99.352770][ T6852] name failslab, interval 1, probability 0, space 0, times 0 [ 99.390387][ T6850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.193'. [ 99.444572][ T6850] hsr_slave_0: left promiscuous mode [ 99.460816][ T6852] CPU: 0 UID: 0 PID: 6852 Comm: syz.0.194 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.460855][ T6852] Tainted: [L]=SOFTLOCKUP [ 99.460864][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.460877][ T6852] Call Trace: [ 99.460884][ T6852] [ 99.460892][ T6852] dump_stack_lvl+0x100/0x190 [ 99.460931][ T6852] should_fail_ex.cold+0x5/0xa [ 99.460954][ T6852] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 99.460983][ T6852] should_failslab+0xc2/0x120 [ 99.461018][ T6852] __kmalloc_cache_noprof+0x7a/0x6e0 [ 99.461044][ T6852] ? vidtv_psi_network_name_desc_init+0x68/0x310 [ 99.461076][ T6852] vidtv_psi_network_name_desc_init+0x68/0x310 [ 99.461102][ T6852] vidtv_psi_nit_table_init+0x291/0x5f0 [ 99.461128][ T6852] ? kasan_save_track+0x14/0x30 [ 99.461161][ T6852] vidtv_channel_si_init+0xccf/0x18f0 [ 99.461194][ T6852] vidtv_mux_init+0x526/0xbf0 [ 99.461225][ T6852] vidtv_start_feed+0x34e/0x500 [ 99.461257][ T6852] ? __pfx_vidtv_start_feed+0x10/0x10 [ 99.461291][ T6852] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 99.461328][ T6852] ? dmx_section_feed_allocate_filter+0x388/0x480 [ 99.461352][ T6852] ? rcu_is_watching+0x12/0xc0 [ 99.461373][ T6852] dmx_section_feed_start_filtering+0x3a8/0x660 [ 99.461402][ T6852] dvb_dmxdev_filter_start+0x767/0xdd0 [ 99.461441][ T6852] dvb_demux_do_ioctl+0xe64/0x1200 [ 99.461481][ T6852] dvb_usercopy+0x167/0x340 [ 99.461512][ T6852] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 99.461548][ T6852] ? __pfx_dvb_usercopy+0x10/0x10 [ 99.461583][ T6852] ? __fget_files+0x21f/0x3d0 [ 99.461621][ T6852] dvb_demux_ioctl+0x29/0x40 [ 99.461653][ T6852] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 99.461687][ T6852] __x64_sys_ioctl+0x18e/0x210 [ 99.461720][ T6852] do_syscall_64+0x115/0x840 [ 99.461751][ T6852] ? clear_bhb_loop+0x40/0x90 [ 99.461787][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.461813][ T6852] RIP: 0033:0x7f77e839ce59 [ 99.461833][ T6852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.461857][ T6852] RSP: 002b:00007f77e65f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.461881][ T6852] RAX: ffffffffffffffda RBX: 00007f77e8615fa0 RCX: 00007f77e839ce59 [ 99.461898][ T6852] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000069 [ 99.461912][ T6852] RBP: 00007f77e8432e6f R08: 0000000000000000 R09: 0000000000000000 [ 99.461926][ T6852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.461940][ T6852] R13: 00007f77e8616038 R14: 00007f77e8615fa0 R15: 00007ffd45cbf558 [ 99.461963][ T6852] [ 99.790131][ T6850] hsr_slave_1: left promiscuous mode [ 99.873059][ T6876] vivid-011: ================= START STATUS ================= [ 99.949283][ T6860] cgroup: fork rejected by pids controller in /syz0 [ 99.967670][ T6876] vivid-011: Radio HW Seek Mode: Bounded [ 99.982688][ T6876] vivid-011: Radio Programmable HW Seek: false [ 100.021308][ T6876] vivid-011: RDS Rx I/O Mode: Block I/O [ 100.060969][ T6876] vivid-011: Generate RBDS Instead of RDS: false [ 100.084399][ T6876] vivid-011: RDS Reception: true [ 100.128347][ T6876] vivid-011: RDS Program Type: 0 inactive [ 100.144477][ T6876] vivid-011: RDS PS Name: inactive [ 100.159215][ T6876] vivid-011: RDS Radio Text: inactive [ 100.170277][ T6876] vivid-011: RDS Traffic Announcement: false inactive [ 100.183927][ T6876] vivid-011: RDS Traffic Program: false inactive [ 100.194338][ T6876] vivid-011: RDS Music: false inactive [ 100.204970][ T6876] vivid-011: ================== END STATUS ================== [ 101.627633][ T6978] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 102.861660][ T7058] netlink: 334 bytes leftover after parsing attributes in process `syz.2.207'. [ 102.894611][ T7058] netlink: 334 bytes leftover after parsing attributes in process `syz.2.207'. [ 102.933949][ T7058] netlink: 334 bytes leftover after parsing attributes in process `syz.2.207'. [ 102.949285][ T7058] netlink: 334 bytes leftover after parsing attributes in process `syz.2.207'. [ 102.970667][ T7058] netlink: 334 bytes leftover after parsing attributes in process `syz.2.207'. [ 102.988225][ T7058] netlink: 334 bytes leftover after parsing attributes in process `syz.2.207'. [ 103.010565][ T7058] netlink: 334 bytes leftover after parsing attributes in process `syz.2.207'. [ 103.061882][ T7058] netlink: 334 bytes leftover after parsing attributes in process `syz.2.207'. [ 103.086817][ T7058] netlink: 334 bytes leftover after parsing attributes in process `syz.2.207'. [ 103.107711][ T7058] netlink: 334 bytes leftover after parsing attributes in process `syz.2.207'. [ 103.260867][ T7072] nfs4: Unknown parameter '' [ 104.210763][ T7109] FAULT_INJECTION: forcing a failure. [ 104.210763][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 104.253040][ T7109] CPU: 0 UID: 0 PID: 7109 Comm: syz.2.215 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.253084][ T7109] Tainted: [L]=SOFTLOCKUP [ 104.253095][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.253111][ T7109] Call Trace: [ 104.253119][ T7109] [ 104.253129][ T7109] dump_stack_lvl+0x100/0x190 [ 104.253177][ T7109] should_fail_ex.cold+0x5/0xa [ 104.253204][ T7109] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 104.253242][ T7109] should_failslab+0xc2/0x120 [ 104.253285][ T7109] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 104.253320][ T7109] ? mas_preallocate+0x1105/0x14a0 [ 104.253350][ T7109] mas_preallocate+0x1105/0x14a0 [ 104.253380][ T7109] ? __pfx_mas_preallocate+0x10/0x10 [ 104.253412][ T7109] ? anon_vma_name+0x5a/0x250 [ 104.253442][ T7109] __split_vma+0x33d/0xda0 [ 104.253476][ T7109] ? __pfx___split_vma+0x10/0x10 [ 104.253510][ T7109] ? __pfx___vma_start_write+0x10/0x10 [ 104.253540][ T7109] ? __pfx_mas_prev+0x10/0x10 [ 104.253583][ T7109] vms_gather_munmap_vmas+0x3a5/0x1720 [ 104.253620][ T7109] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 104.253659][ T7109] ? mas_walk+0x6ef/0x9b0 [ 104.253698][ T7109] __mmap_region+0x4aa/0x2dd0 [ 104.253734][ T7109] ? __pfx___mmap_region+0x10/0x10 [ 104.253765][ T7109] ? rcu_is_watching+0x12/0xc0 [ 104.253790][ T7109] ? lock_acquire+0x301/0x370 [ 104.253821][ T7109] ? __pfx___might_resched+0x10/0x10 [ 104.253855][ T7109] ? do_raw_spin_lock+0x128/0x260 [ 104.253897][ T7109] ? rcu_is_watching+0x12/0xc0 [ 104.253920][ T7109] ? __css_rstat_updated+0x1ce/0x5a0 [ 104.253961][ T7109] ? clockevents_program_event+0x23e/0x820 [ 104.254001][ T7109] ? lock_release+0x24d/0x310 [ 104.254033][ T7109] ? __pfx___css_rstat_updated+0x10/0x10 [ 104.254068][ T7109] ? do_raw_spin_lock+0x128/0x260 [ 104.254105][ T7109] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.254140][ T7109] ? debug_object_assert_init+0x1c4/0x300 [ 104.254163][ T7109] ? rcu_is_watching+0x12/0xc0 [ 104.254193][ T7109] ? trace_hrtimer_start+0x77/0x220 [ 104.254233][ T7109] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 104.254267][ T7109] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 104.254308][ T7109] ? rcu_is_watching+0x12/0xc0 [ 104.254333][ T7109] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 104.254373][ T7109] ? rcu_is_watching+0x12/0xc0 [ 104.254396][ T7109] ? trace_irq_enable.constprop.0+0x122/0x160 [ 104.254453][ T7109] mmap_region+0x35d/0x620 [ 104.254484][ T7109] ? rcu_is_watching+0x12/0xc0 [ 104.254507][ T7109] ? __pfx_mmap_region+0x10/0x10 [ 104.254538][ T7109] ? cap_mmap_addr+0x4b/0x120 [ 104.254572][ T7109] ? bpf_lsm_mmap_addr+0x9/0x30 [ 104.254602][ T7109] ? security_mmap_addr+0x71/0x1e0 [ 104.254631][ T7109] ? __get_unmapped_area+0x255/0x3e0 [ 104.254658][ T7109] do_mmap+0xc63/0x12f0 [ 104.254682][ T7109] ? __pfx_do_mmap+0x10/0x10 [ 104.254706][ T7109] ? __pfx_down_write_killable+0x10/0x10 [ 104.254744][ T7109] ? __pfx_futex_wait+0x10/0x10 [ 104.254772][ T7109] vm_mmap_pgoff+0x29e/0x470 [ 104.254799][ T7109] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 104.254827][ T7109] ? __pfx_do_futex+0x10/0x10 [ 104.254869][ T7109] ksys_mmap_pgoff+0xe4/0x610 [ 104.254911][ T7109] ? __x64_sys_futex+0x358/0x4d0 [ 104.254963][ T7109] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 104.255001][ T7109] ? xfd_validate_state+0x129/0x190 [ 104.255039][ T7109] __x64_sys_mmap+0x125/0x190 [ 104.255063][ T7109] do_syscall_64+0x115/0x840 [ 104.255094][ T7109] ? clear_bhb_loop+0x40/0x90 [ 104.255122][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.255146][ T7109] RIP: 0033:0x7f288699ce59 [ 104.255167][ T7109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.255188][ T7109] RSP: 002b:00007f288785b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 104.255211][ T7109] RAX: ffffffffffffffda RBX: 00007f2886c16180 RCX: 00007f288699ce59 [ 104.255227][ T7109] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000 [ 104.255243][ T7109] RBP: 00007f2886a32e6f R08: 0000000000000405 R09: 0000000000008000 [ 104.255257][ T7109] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 104.255272][ T7109] R13: 00007f2886c16218 R14: 00007f2886c16180 R15: 00007ffc39cd5f08 [ 104.255294][ T7109] [ 106.244469][ T7155] bonding: unable to delete non-existent ) [ 106.797489][ T7183] skbuff: bad partial csum: csum=65535/1 headroom=4 headlen=65543 [ 108.181859][ T7297] __nla_validate_parse: 23 callbacks suppressed [ 108.181873][ T7297] netlink: 342 bytes leftover after parsing attributes in process `syz.2.237'. [ 108.657859][ T7326] FAULT_INJECTION: forcing a failure. [ 108.657859][ T7326] name fail_futex, interval 1, probability 0, space 0, times 0 [ 108.672207][ T7326] CPU: 1 UID: 0 PID: 7326 Comm: syz.3.242 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.672247][ T7326] Tainted: [L]=SOFTLOCKUP [ 108.672256][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.672270][ T7326] Call Trace: [ 108.672278][ T7326] [ 108.672287][ T7326] dump_stack_lvl+0x100/0x190 [ 108.672331][ T7326] should_fail_ex.cold+0x5/0xa [ 108.672363][ T7326] get_futex_key+0x1d2/0x14f0 [ 108.672397][ T7326] ? __pfx_get_futex_key+0x10/0x10 [ 108.672434][ T7326] ? rcu_is_watching+0x12/0xc0 [ 108.672458][ T7326] ? is_bpf_text_address+0x8a/0x1a0 [ 108.672485][ T7326] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 108.672514][ T7326] ? rcu_is_watching+0x12/0xc0 [ 108.672537][ T7326] futex_wait_setup+0x91/0x540 [ 108.672565][ T7326] __futex_wait+0x19f/0x300 [ 108.672591][ T7326] ? __pfx___futex_wait+0x10/0x10 [ 108.672614][ T7326] ? futex_hash+0x311/0x400 [ 108.672643][ T7326] ? rcu_is_watching+0x12/0xc0 [ 108.672665][ T7326] ? __pfx_futex_wake_mark+0x10/0x10 [ 108.672689][ T7326] ? futex_wake+0x4ea/0x5e0 [ 108.672702][ T7326] ? rcu_is_watching+0x12/0xc0 [ 108.672714][ T7326] ? futex_wake+0x4ea/0x5e0 [ 108.672726][ T7326] ? lock_release+0x24d/0x310 [ 108.672744][ T7326] futex_wait+0xe6/0x370 [ 108.672758][ T7326] ? __pfx_futex_wait+0x10/0x10 [ 108.672776][ T7326] do_futex+0x265/0x440 [ 108.672795][ T7326] ? __pfx_do_futex+0x10/0x10 [ 108.672816][ T7326] __x64_sys_futex+0x34f/0x4d0 [ 108.672836][ T7326] ? __pfx___x64_sys_futex+0x10/0x10 [ 108.672857][ T7326] ? rcu_is_watching+0x12/0xc0 [ 108.672870][ T7326] do_syscall_64+0x115/0x840 [ 108.672889][ T7326] ? clear_bhb_loop+0x40/0x90 [ 108.672904][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.672918][ T7326] RIP: 0033:0x7f07bab9ce59 [ 108.672930][ T7326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.672943][ T7326] RSP: 002b:00007f07bba6a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.672957][ T7326] RAX: ffffffffffffffda RBX: 00007f07bae15fa8 RCX: 00007f07bab9ce59 [ 108.672967][ T7326] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f07bae15fa8 [ 108.672975][ T7326] RBP: 00007f07bae15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 108.672983][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.672991][ T7326] R13: 00007f07bae16038 R14: 00007ffec328d900 R15: 00007ffec328d9e8 [ 108.673004][ T7326] [ 110.974689][ T7403] zswap: compressor 000 not available [ 111.216358][ T7417] netlink: 330 bytes leftover after parsing attributes in process `syz.0.262'. [ 111.276556][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.283912][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.459556][ T7426] zswap: compressor 000 not available [ 111.460359][ T7440] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 111.822609][ T7436] kexec: Could not allocate control_code_buffer [ 112.531156][ T7471] netlink: 334 bytes leftover after parsing attributes in process `syz.2.271'. [ 113.396201][ T7495] : Can't lookup blockdev [ 114.387835][ T7515] netlink: 338 bytes leftover after parsing attributes in process `syz.2.279'. [ 114.887295][ T7520] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.904340][ T7520] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.926186][ T7520] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.102888][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.139187][ T7530] netlink: 13 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.170088][ T7530] netlink: 342 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.552394][ T7534] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 115.784240][ T7547] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 115.804812][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 115.804831][ T30] audit: type=1807 audit(1781814844.854:68): UNKNOWN=nl80211 res=0 [ 115.825026][ T30] audit: type=1802 audit(1781814844.854:69): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.286" res=0 errno=0 [ 115.996703][ T7555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.290'. [ 116.183023][ T7544] ima: policy update failed [ 116.190569][ T30] audit: type=1802 audit(1781814845.244:70): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.286" res=0 errno=0 [ 116.465551][ T7577] random: crng reseeded on system resumption [ 116.645768][ T5628] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 116.976941][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.977007][ T50] Bluetooth: hci0: command 0x0419 tx timeout [ 116.989297][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.065090][ T7617] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 118.094017][ T7617] netlink: 9 bytes leftover after parsing attributes in process `syz.3.301'. [ 118.144692][ T7623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'. [ 119.044935][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.169886][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 119.262041][ T7664] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.760801][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.313'. [ 119.863387][ T7677] macsec0: entered promiscuous mode [ 119.888236][ T7677] macsec0: entered allmulticast mode [ 119.907244][ T7677] veth1_macvtap: entered allmulticast mode [ 120.411133][ T7681] GUP no longer grows the stack in syz.3.314 (7681): 5000-401000 (4000) [ 120.431075][ T7681] CPU: 1 UID: 0 PID: 7681 Comm: syz.3.314 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.431120][ T7681] Tainted: [L]=SOFTLOCKUP [ 120.431129][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.431145][ T7681] Call Trace: [ 120.431153][ T7681] [ 120.431163][ T7681] dump_stack_lvl+0x100/0x190 [ 120.431220][ T7681] gup_vma_lookup.cold+0x83/0x96 [ 120.431259][ T7681] __get_user_pages+0x241/0x32a0 [ 120.431300][ T7681] ? down_read_killable+0x35e/0x520 [ 120.431344][ T7681] ? __pfx___get_user_pages+0x10/0x10 [ 120.431371][ T7681] ? __pfx_validate_mm+0x10/0x10 [ 120.431402][ T7681] ? trace_irq_enable.constprop.0+0x122/0x160 [ 120.431444][ T7681] __gup_longterm_locked+0x87d/0x16f0 [ 120.431471][ T7681] ? vms_complete_munmap_vmas+0x741/0xdd0 [ 120.431504][ T7681] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.431540][ T7681] ? __pfx___gup_longterm_locked+0x10/0x10 [ 120.431567][ T7681] ? rcu_is_watching+0x12/0xc0 [ 120.431594][ T7681] ? rcu_is_watching+0x12/0xc0 [ 120.431620][ T7681] ? gup_fast_fallback+0x7e8/0x2790 [ 120.431646][ T7681] ? rcu_is_watching+0x12/0xc0 [ 120.431672][ T7681] ? rcu_is_watching+0x12/0xc0 [ 120.431699][ T7681] gup_fast_fallback+0x16dc/0x2790 [ 120.431738][ T7681] ? __pfx_gup_fast_fallback+0x10/0x10 [ 120.431767][ T7681] ? trace_irq_enable.constprop.0+0x122/0x160 [ 120.431804][ T7681] ? finish_task_switch.isra.0+0x2c5/0x1010 [ 120.431848][ T7681] get_user_pages_fast+0xa7/0xf0 [ 120.431875][ T7681] ? __pfx_get_user_pages_fast+0x10/0x10 [ 120.431903][ T7681] ? rcu_is_watching+0x12/0xc0 [ 120.431929][ T7681] ? lock_acquire+0x301/0x370 [ 120.431965][ T7681] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 120.432002][ T7681] ? pipe_lock+0x69/0x80 [ 120.432041][ T7681] ? __pfx___schedule+0x10/0x10 [ 120.432074][ T7681] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 120.432108][ T7681] ? __pfx___mutex_lock+0x10/0x10 [ 120.432145][ T7681] ? iovec_from_user+0xda/0x140 [ 120.432180][ T7681] iov_iter_get_pages2+0xa3/0x100 [ 120.432211][ T7681] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 120.432243][ T7681] ? wait_for_space+0x2ca/0x3b0 [ 120.432270][ T7681] __do_sys_vmsplice+0x7dd/0x13c0 [ 120.432308][ T7681] ? plist_del+0x308/0x510 [ 120.432335][ T7681] ? do_raw_spin_lock+0x128/0x260 [ 120.432377][ T7681] ? futex_wake+0x4ea/0x5e0 [ 120.432406][ T7681] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 120.432434][ T7681] ? futex_private_hash_put+0x115/0x1c0 [ 120.432474][ T7681] ? futex_wake+0x220/0x5e0 [ 120.432500][ T7681] ? __pfx_futex_wake+0x10/0x10 [ 120.432527][ T7681] ? alloc_fd+0x471/0x7a0 [ 120.432559][ T7681] ? __pfx___do_sys_mremap+0x10/0x10 [ 120.432607][ T7681] ? do_syscall_64+0x115/0x840 [ 120.432641][ T7681] do_syscall_64+0x115/0x840 [ 120.432675][ T7681] ? clear_bhb_loop+0x40/0x90 [ 120.432706][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.432734][ T7681] RIP: 0033:0x7f07bab9ce59 [ 120.432764][ T7681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.432791][ T7681] RSP: 002b:00007f07bba49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 120.432817][ T7681] RAX: ffffffffffffffda RBX: 00007f07bae16090 RCX: 00007f07bab9ce59 [ 120.432835][ T7681] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000000 [ 120.432852][ T7681] RBP: 00007f07bac32e6f R08: 0000000000000000 R09: 0000000000000000 [ 120.432869][ T7681] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 120.432886][ T7681] R13: 00007f07bae16128 R14: 00007f07bae16090 R15: 00007ffec328d9e8 [ 120.432912][ T7681] [ 121.124433][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.168560][ T30] audit: type=1800 audit(1781814850.226:71): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.318" name="trigger" dev="tracefs" ino=19680823 res=0 errno=0 [ 121.559021][ T7716] can: request_module (can-proto-4) failed. [ 121.834808][ T7726] random: crng reseeded on system resumption [ 122.856433][ T7752] netlink: 'syz.3.328': attribute type 2 has an invalid length. [ 122.929000][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 123.887226][ T7742] kexec: Could not allocate control_code_buffer [ 124.370300][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 124.432885][ T7785] zswap: compressor not available [ 124.588107][ T30] audit: type=1800 audit(1781814853.648:72): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.331" name="lu_gp_id" dev="configfs" ino=21738 res=0 errno=0 [ 124.823376][ T7802] bond0: invalid ARP target specified [ 124.830591][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 124.845052][ T7800] HfR: entered promiscuous mode [ 124.857779][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'. [ 124.949513][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'. [ 124.962619][ T7804] HfR: left promiscuous mode [ 125.440775][ T7830] bridge0: port 3(veth1) entered blocking state [ 125.467650][ T7830] bridge0: port 3(veth1) entered disabled state [ 125.482193][ T7830] veth1: entered allmulticast mode [ 125.498696][ T7830] veth1: entered promiscuous mode [ 125.514081][ T7830] bridge0: port 3(veth1) entered blocking state [ 125.520481][ T7830] bridge0: port 3(veth1) entered forwarding state [ 125.748757][ T7838] vivid-008: ================= START STATUS ================= [ 125.756829][ T7838] vivid-008: ================== END STATUS ================== [ 126.448716][ T7855] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 211!phy1!netdev:wlan1!rc_rateid [ 126.523831][ T7861] sysfs: cannot create duplicate filename '/class/ieee80211/211!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 126.565454][ T7861] CPU: 1 UID: 0 PID: 7861 Comm: syz.1.348 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.565503][ T7861] Tainted: [L]=SOFTLOCKUP [ 126.565513][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.565529][ T7861] Call Trace: [ 126.565538][ T7861] [ 126.565549][ T7861] dump_stack_lvl+0x100/0x190 [ 126.565602][ T7861] sysfs_warn_dup.cold+0x1c/0x28 [ 126.565639][ T7861] sysfs_do_create_link_sd+0x113/0x140 [ 126.565682][ T7861] sysfs_create_link+0x61/0xc0 [ 126.565704][ T7861] device_add+0x675/0x1970 [ 126.565726][ T7861] ? __pfx_device_add+0x10/0x10 [ 126.565742][ T7861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.565762][ T7861] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 126.565790][ T7861] wiphy_register+0x2151/0x3110 [ 126.565810][ T7861] ? __pfx_wiphy_register+0x10/0x10 [ 126.565826][ T7861] ? __asan_memset+0x23/0x50 [ 126.565844][ T7861] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 126.565861][ T7861] ieee80211_register_hw+0x3053/0x4580 [ 126.565890][ T7861] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 126.565911][ T7861] ? __pfx___debug_object_init+0x10/0x10 [ 126.565928][ T7861] ? net_generic+0xea/0x2a0 [ 126.565947][ T7861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.565965][ T7861] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 126.566007][ T7861] ? __hrtimer_setup+0x208/0x330 [ 126.566033][ T7861] mac80211_hwsim_new_radio+0x2acc/0x64d0 [ 126.566064][ T7861] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 126.566087][ T7861] ? __asan_memcpy+0x3c/0x60 [ 126.566105][ T7861] hwsim_new_radio_nl+0xc6b/0x13f0 [ 126.566127][ T7861] ? rcu_is_watching+0x12/0xc0 [ 126.566142][ T7861] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 126.566166][ T7861] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 126.566188][ T7861] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 126.566212][ T7861] genl_family_rcv_msg_doit+0x214/0x300 [ 126.566234][ T7861] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 126.566255][ T7861] ? genl_get_cmd+0x3e7/0x760 [ 126.566275][ T7861] ? bpf_lsm_capable+0x9/0x10 [ 126.566296][ T7861] ? security_capable+0x80/0x260 [ 126.566318][ T7861] ? ns_capable+0xd2/0xf0 [ 126.566339][ T7861] genl_rcv_msg+0x560/0x800 [ 126.566359][ T7861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.566387][ T7861] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 126.566415][ T7861] netlink_rcv_skb+0x159/0x420 [ 126.566436][ T7861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.566462][ T7861] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.566485][ T7861] ? netlink_deliver_tap+0x1ae/0xcc0 [ 126.566503][ T7861] genl_rcv+0x28/0x40 [ 126.566522][ T7861] netlink_unicast+0x585/0x850 [ 126.566541][ T7861] ? __pfx_netlink_unicast+0x10/0x10 [ 126.566561][ T7861] ? __build_skb_around+0x278/0x390 [ 126.566603][ T7861] netlink_sendmsg+0x8b0/0xda0 [ 126.566639][ T7861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.566672][ T7861] ? __import_iovec+0x1d2/0x640 [ 126.566691][ T7861] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 126.566715][ T7861] ____sys_sendmsg+0x9e1/0xb70 [ 126.566735][ T7861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.566755][ T7861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.566774][ T7861] ? rcu_is_watching+0x12/0xc0 [ 126.566788][ T7861] ? ___sys_sendmsg+0x19d/0x1e0 [ 126.566806][ T7861] ? kfree+0x1e5/0x6c0 [ 126.566823][ T7861] ___sys_sendmsg+0x190/0x1e0 [ 126.566842][ T7861] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.566864][ T7861] ? rcu_is_watching+0x12/0xc0 [ 126.566883][ T7861] ? __pfx___might_resched+0x10/0x10 [ 126.566904][ T7861] __sys_sendmmsg+0x20c/0x440 [ 126.566920][ T7861] ? __pfx___sys_sendmmsg+0x10/0x10 [ 126.566933][ T7861] ? do_vfs_ioctl+0x226/0x13e0 [ 126.566958][ T7861] ? trace_irq_enable.constprop.0+0x122/0x160 [ 126.566979][ T7861] ? kcov_ioctl+0x16a/0x720 [ 126.566996][ T7861] __x64_sys_sendmmsg+0x9c/0x100 [ 126.567011][ T7861] do_syscall_64+0x115/0x840 [ 126.567030][ T7861] ? clear_bhb_loop+0x40/0x90 [ 126.567046][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.567061][ T7861] RIP: 0033:0x7f94f6f9ce59 [ 126.567077][ T7861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.567091][ T7861] RSP: 002b:00007f94f7ea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 126.567107][ T7861] RAX: ffffffffffffffda RBX: 00007f94f7216090 RCX: 00007f94f6f9ce59 [ 126.567117][ T7861] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 126.567127][ T7861] RBP: 00007f94f7032e6f R08: 0000000000000000 R09: 0000000000000000 [ 126.567137][ T7861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.567147][ T7861] R13: 00007f94f7216128 R14: 00007f94f7216090 R15: 00007fffd9eeef38 [ 126.567163][ T7861] [ 127.706436][ T7872] random: crng reseeded on system resumption [ 127.716419][ T30] audit: type=1800 audit(1781814856.780:73): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.352" name="members" dev="configfs" ino=21971 res=0 errno=0 [ 128.051960][ T7887] futex_wake_op: syz.2.354 tries to shift op by -2048; fix this program [ 128.201601][ T7899] can: request_module (can-proto-0) failed. [ 128.703982][ T7920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.360'. [ 128.985537][ T7933] netlink: 25 bytes leftover after parsing attributes in process `syz.3.362'. [ 129.597498][ T7962] ======================================================= [ 129.597498][ T7962] WARNING: The mand mount option has been deprecated and [ 129.597498][ T7962] and is ignored by this kernel. Remove the mand [ 129.597498][ T7962] option from the mount to silence this warning. [ 129.597498][ T7962] ======================================================= [ 131.082313][ T8002] netlink: 342 bytes leftover after parsing attributes in process `syz.1.378'. [ 131.488724][ T7996] futex_wake_op: syz.3.377 tries to shift op by -2048; fix this program [ 131.521582][ T7996] futex_wake_op: syz.3.377 tries to shift op by -2048; fix this program [ 133.199232][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.207232][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.037798][ T8096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.054613][ T8096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.080510][ T8096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.094603][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'. [ 134.408735][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 134.510313][ T8119] FAULT_INJECTION: forcing a failure. [ 134.510313][ T8119] name failslab, interval 1, probability 0, space 0, times 0 [ 134.557169][ T8119] CPU: 0 UID: 0 PID: 8119 Comm: syz.1.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.557217][ T8119] Tainted: [L]=SOFTLOCKUP [ 134.557227][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.557245][ T8119] Call Trace: [ 134.557254][ T8119] [ 134.557264][ T8119] dump_stack_lvl+0x100/0x190 [ 134.557310][ T8119] should_fail_ex.cold+0x5/0xa [ 134.557335][ T8119] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 134.557370][ T8119] should_failslab+0xc2/0x120 [ 134.557405][ T8119] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 134.557438][ T8119] ? alloc_inode+0x68/0x250 [ 134.557466][ T8119] ? simple_start_creating+0xb0/0x110 [ 134.557500][ T8119] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 134.557534][ T8119] alloc_inode+0x68/0x250 [ 134.557560][ T8119] new_inode+0x22/0x1c0 [ 134.557588][ T8119] __debugfs_create_file+0x105/0x4f0 [ 134.557623][ T8119] debugfs_create_file_full+0x41/0x60 [ 134.557658][ T8119] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 134.557689][ T8119] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 134.557718][ T8119] ? ida_alloc_range+0x70d/0x830 [ 134.557773][ T8119] ? lockdep_init_map_type+0x5c/0x250 [ 134.557809][ T8119] preinit_net.part.0+0x252/0x920 [ 134.557836][ T8119] copy_net_ns+0x339/0x7c0 [ 134.557863][ T8119] create_new_namespaces+0x3ea/0xac0 [ 134.557899][ T8119] unshare_nsproxy_namespaces+0xf2/0x220 [ 134.557934][ T8119] ksys_unshare+0x438/0xab0 [ 134.557958][ T8119] ? __pfx_ksys_unshare+0x10/0x10 [ 134.557987][ T8119] __x64_sys_unshare+0x31/0x40 [ 134.558010][ T8119] do_syscall_64+0x115/0x840 [ 134.558041][ T8119] ? clear_bhb_loop+0x40/0x90 [ 134.558068][ T8119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.558092][ T8119] RIP: 0033:0x7f94f6f9ce59 [ 134.558111][ T8119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.558134][ T8119] RSP: 002b:00007f94f7ea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 134.558161][ T8119] RAX: ffffffffffffffda RBX: 00007f94f7216090 RCX: 00007f94f6f9ce59 [ 134.558178][ T8119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 134.558193][ T8119] RBP: 00007f94f7032e6f R08: 0000000000000000 R09: 0000000000000000 [ 134.558208][ T8119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.558222][ T8119] R13: 00007f94f7216128 R14: 00007f94f7216090 R15: 00007fffd9eeef38 [ 134.558246][ T8119] [ 134.558270][ T8119] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880347d0280' [ 135.130546][ T8130] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 135.973548][ T8155] netlink: 338 bytes leftover after parsing attributes in process `syz.2.409'. [ 135.997310][ T5630] Bluetooth: hci0: command 0x0419 tx timeout [ 136.076656][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.157136][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.218494][ T8173] MTRR 1 not used [ 136.775785][ T8190] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 137.372622][ T8231] netlink: 342 bytes leftover after parsing attributes in process `syz.1.420'. [ 138.393030][ T8280] hub 1-0:1.0: USB hub found [ 138.435465][ T8280] hub 1-0:1.0: 1 port detected [ 138.513549][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 138.545192][ T8288] nbd: must specify an index to disconnect [ 140.814388][ T5630] Bluetooth: hci3: SCO packet too small [ 140.883797][ T5630] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 140.891875][ T5630] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 141.568880][ T8329] kexec: Could not allocate control_code_buffer [ 141.636493][ T5714] Process accounting resumed [ 141.859589][ T8363] Process accounting resumed [ 143.457937][ T8433] random: crng reseeded on system resumption [ 143.543281][ T8435] hub 1-0:1.0: USB hub found [ 143.570469][ T8435] hub 1-0:1.0: 1 port detected [ 145.559680][ T8498] futex_wake_op: syz.1.459 tries to shift op by -2048; fix this program [ 145.575536][ T8498] futex_wake_op: syz.1.459 tries to shift op by -2048; fix this program [ 146.652661][ T8526] zram: Removed device: zram0 [ 147.258868][ T8545] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.286787][ T8545] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.314853][ T8545] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.731634][ T8563] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 149.078050][ T8591] NFSD: Failed to start, no listeners configured. [ 149.270948][ T5630] Bluetooth: hci0: command 0x0419 tx timeout [ 149.350179][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.356266][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.875772][ T30] audit: type=1326 audit(8277292038.301:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8504 comm="syz.0.458" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77e839ce59 code=0x0 [ 150.607780][ T8634] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 150.900551][ T8647] random: crng reseeded on system resumption [ 152.863492][ T8687] vivid-008: ================= START STATUS ================= [ 152.877809][ T8687] vivid-008: ================== END STATUS ================== [ 155.532671][ T8722] netlink: 'syz.2.508': attribute type 23 has an invalid length. [ 155.548494][ T8712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.507'. [ 155.851866][ T8728] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 159.123788][ T5630] Bluetooth: hci3: unexpected subevent 0x12 length: 123 > 5 [ 160.272628][ T8764] zswap: compressor not available [ 162.885193][ T8847] netlink: 36 bytes leftover after parsing attributes in process `syz.1.537'. [ 163.194901][ T8848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.792069][ T30] audit: type=1800 audit(8277292053.219:75): pid=8893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.544" name="file0" dev="tmpfs" ino=720 res=0 errno=0 [ 165.152153][ T8891] FAULT_INJECTION: forcing a failure. [ 165.152153][ T8891] name failslab, interval 1, probability 0, space 0, times 0 [ 165.204740][ T8891] CPU: 0 UID: 0 PID: 8891 Comm: syz.2.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.204786][ T8891] Tainted: [L]=SOFTLOCKUP [ 165.204796][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.204812][ T8891] Call Trace: [ 165.204821][ T8891] [ 165.204834][ T8891] dump_stack_lvl+0x100/0x190 [ 165.204883][ T8891] should_fail_ex.cold+0x5/0xa [ 165.204910][ T8891] ? __kmalloc_noprof+0xba/0x840 [ 165.204940][ T8891] ? constrain_params_by_rules+0x175/0xcc0 [ 165.204976][ T8891] should_failslab+0xc2/0x120 [ 165.205014][ T8891] __kmalloc_noprof+0xe0/0x840 [ 165.205039][ T8891] ? unwind_get_return_address+0x59/0xa0 [ 165.205074][ T8891] constrain_params_by_rules+0x175/0xcc0 [ 165.205109][ T8891] ? stack_depot_save_flags+0x479/0x9d0 [ 165.205143][ T8891] ? trace_irq_enable.constprop.0+0x122/0x160 [ 165.205183][ T8891] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 165.205220][ T8891] ? __kasan_kmalloc+0xaa/0xb0 [ 165.205250][ T8891] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 165.205283][ T8891] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 165.205313][ T8891] ? snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 165.205347][ T8891] ? rcu_is_watching+0x12/0xc0 [ 165.205374][ T8891] ? snd_interval_refine+0x2d0/0x580 [ 165.205403][ T8891] snd_pcm_hw_refine+0x7e7/0xad0 [ 165.205444][ T8891] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 165.205484][ T8891] ? __asan_memset+0x23/0x50 [ 165.205514][ T8891] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 165.205546][ T8891] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 165.205598][ T8891] ? trace_contention_end+0x126/0x160 [ 165.205635][ T8891] ? rcu_is_watching+0x12/0xc0 [ 165.205660][ T8891] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 165.205694][ T8891] ? __pfx___mutex_lock+0x10/0x10 [ 165.205729][ T8891] ? __mutex_lock+0x26d/0x1bd0 [ 165.205766][ T8891] ? __mutex_unlock_slowpath+0x350/0x910 [ 165.205803][ T8891] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 165.205838][ T8891] snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 165.205873][ T8891] snd_pcm_oss_poll+0x404/0xae0 [ 165.205903][ T8891] ? lock_release+0x24d/0x310 [ 165.205934][ T8891] ? __pfx___pollwait+0x10/0x10 [ 165.205971][ T8891] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 165.206001][ T8891] ? __fget_files+0x21f/0x3d0 [ 165.206041][ T8891] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 165.206075][ T8891] do_select+0xd54/0x1850 [ 165.206109][ T8891] ? do_raw_spin_lock+0x128/0x260 [ 165.206156][ T8891] ? __pfx_do_select+0x10/0x10 [ 165.206194][ T8891] ? __pfx___pollwait+0x10/0x10 [ 165.206233][ T8891] ? __pfx_pollwake+0x10/0x10 [ 165.206270][ T8891] ? __pfx_pollwake+0x10/0x10 [ 165.206326][ T8891] ? rcu_is_watching+0x12/0xc0 [ 165.206352][ T8891] ? __might_fault+0xc5/0x140 [ 165.206385][ T8891] ? rcu_is_watching+0x12/0xc0 [ 165.206410][ T8891] ? __might_fault+0xc5/0x140 [ 165.206441][ T8891] ? lock_release+0x24d/0x310 [ 165.206479][ T8891] ? core_sys_select+0x55b/0xbb0 [ 165.206517][ T8891] core_sys_select+0x55b/0xbb0 [ 165.206569][ T8891] ? __pfx_core_sys_select+0x10/0x10 [ 165.206620][ T8891] ? rcu_is_watching+0x12/0xc0 [ 165.206646][ T8891] ? get_pid_task+0xfc/0x250 [ 165.206686][ T8891] ? do_futex+0x190/0x440 [ 165.206726][ T8891] ? __pfx_do_futex+0x10/0x10 [ 165.206764][ T8891] kern_select+0x1d0/0x280 [ 165.206800][ T8891] ? __pfx_kern_select+0x10/0x10 [ 165.206846][ T8891] __x64_sys_select+0xbd/0x160 [ 165.206867][ T8891] ? trace_irq_enable.constprop.0+0x122/0x160 [ 165.206889][ T8891] do_syscall_64+0x115/0x840 [ 165.206907][ T8891] ? clear_bhb_loop+0x40/0x90 [ 165.206924][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.206939][ T8891] RIP: 0033:0x7f288699ce59 [ 165.206952][ T8891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.206966][ T8891] RSP: 002b:00007f288789d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 165.206985][ T8891] RAX: ffffffffffffffda RBX: 00007f2886c15fa0 RCX: 00007f288699ce59 [ 165.207002][ T8891] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007 [ 165.207017][ T8891] RBP: 00007f2886a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 165.207032][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.207048][ T8891] R13: 00007f2886c16038 R14: 00007f2886c15fa0 R15: 00007ffc39cd5f08 [ 165.207064][ T8891] [ 166.082490][ T8929] blktrace: Concurrent blktraces are not allowed on loop2 [ 167.160446][ T8954] FAULT_INJECTION: forcing a failure. [ 167.160446][ T8954] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 167.252767][ T8954] CPU: 0 UID: 0 PID: 8954 Comm: syz.2.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.252812][ T8954] Tainted: [L]=SOFTLOCKUP [ 167.252822][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.252838][ T8954] Call Trace: [ 167.252847][ T8954] [ 167.252857][ T8954] dump_stack_lvl+0x100/0x190 [ 167.252908][ T8954] should_fail_ex.cold+0x5/0xa [ 167.252939][ T8954] should_fail_alloc_page+0xeb/0x140 [ 167.252981][ T8954] prepare_alloc_pages+0x1f0/0x5f0 [ 167.253008][ T8954] ? copy_page_range+0xd1a/0x5b20 [ 167.253038][ T8954] ? dup_mmap+0xd44/0x21b0 [ 167.253066][ T8954] __alloc_frozen_pages_noprof+0x19a/0x2b60 [ 167.253108][ T8954] ? rcu_is_watching+0x12/0xc0 [ 167.253134][ T8954] ? unwind_next_frame+0x3be/0x2090 [ 167.253166][ T8954] ? rcu_is_watching+0x12/0xc0 [ 167.253192][ T8954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 167.253228][ T8954] ? rcu_is_watching+0x12/0xc0 [ 167.253253][ T8954] ? is_bpf_text_address+0x8a/0x1a0 [ 167.253285][ T8954] ? rcu_is_watching+0x12/0xc0 [ 167.253309][ T8954] ? is_bpf_text_address+0x8a/0x1a0 [ 167.253348][ T8954] ? lock_release+0x24d/0x310 [ 167.253384][ T8954] ? bpf_ksym_find+0x124/0x1c0 [ 167.253425][ T8954] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 167.253458][ T8954] ? kernel_text_address+0x8d/0x100 [ 167.253490][ T8954] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 167.253521][ T8954] ? __kernel_text_address+0xd/0x30 [ 167.253552][ T8954] ? unwind_get_return_address+0x59/0xa0 [ 167.253585][ T8954] ? arch_stack_walk+0xa6/0xf0 [ 167.253616][ T8954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.253652][ T8954] ? policy_nodemask+0xed/0x4f0 [ 167.253695][ T8954] alloc_pages_mpol+0x1fb/0x540 [ 167.253737][ T8954] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 167.253777][ T8954] ? stack_depot_save_flags+0x27/0x9d0 [ 167.253821][ T8954] alloc_pages_noprof+0x1a/0x160 [ 167.253851][ T8954] __pud_alloc+0x3b/0x690 [ 167.253879][ T8954] copy_page_range+0x364b/0x5b20 [ 167.253912][ T8954] ? rcu_is_watching+0x12/0xc0 [ 167.253938][ T8954] ? rcu_is_cpu_rrupt_from_idle+0x213/0x270 [ 167.253969][ T8954] ? rcu_read_unlock+0x17/0x60 [ 167.253995][ T8954] ? lock_release+0x24d/0x310 [ 167.254032][ T8954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.254064][ T8954] ? mas_wr_store_entry+0xa1/0x1e80 [ 167.254091][ T8954] ? __pfx_copy_page_range+0x10/0x10 [ 167.254125][ T8954] ? mas_store+0x666/0xac0 [ 167.254150][ T8954] ? __pfx_mas_store+0x10/0x10 [ 167.254173][ T8954] ? down_write+0x146/0x1f0 [ 167.254215][ T8954] ? __pfx___vma_start_write+0x10/0x10 [ 167.254246][ T8954] ? anon_vma_fork+0x23b/0x6b0 [ 167.254275][ T8954] dup_mmap+0xd44/0x21b0 [ 167.254306][ T8954] ? __pfx_dup_mmap+0x10/0x10 [ 167.254341][ T8954] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 167.254375][ T8954] ? lock_release+0x24d/0x310 [ 167.254411][ T8954] ? do_raw_spin_lock+0x128/0x260 [ 167.254453][ T8954] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 167.254492][ T8954] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 167.254528][ T8954] ? rcu_is_watching+0x12/0xc0 [ 167.254553][ T8954] ? lock_acquire+0x301/0x370 [ 167.254591][ T8954] copy_process+0x4588/0x7ff0 [ 167.254625][ T8954] ? __pfx_copy_process+0x10/0x10 [ 167.254650][ T8954] ? futex_wake+0x4ea/0x5e0 [ 167.254676][ T8954] ? rcu_is_watching+0x12/0xc0 [ 167.254707][ T8954] kernel_clone+0x176/0x9d0 [ 167.254733][ T8954] ? __pfx_kernel_clone+0x10/0x10 [ 167.254767][ T8954] __do_sys_clone+0xd9/0x120 [ 167.254793][ T8954] ? __pfx___do_sys_clone+0x10/0x10 [ 167.254818][ T8954] ? fd_install+0x24f/0x580 [ 167.254865][ T8954] ? rcu_is_watching+0x12/0xc0 [ 167.254892][ T8954] do_syscall_64+0x115/0x840 [ 167.254927][ T8954] ? clear_bhb_loop+0x40/0x90 [ 167.254958][ T8954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.254986][ T8954] RIP: 0033:0x7f288699ce59 [ 167.255009][ T8954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.255036][ T8954] RSP: 002b:00007f288785afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 167.255064][ T8954] RAX: ffffffffffffffda RBX: 00007f2886c16180 RCX: 00007f288699ce59 [ 167.255082][ T8954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 167.255099][ T8954] RBP: 00007f2886a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 167.255115][ T8954] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 167.255131][ T8954] R13: 00007f2886c16218 R14: 00007f2886c16180 R15: 00007ffc39cd5f08 [ 167.255157][ T8954] [ 168.408925][ T8980] NFSD: Failed to start, no listeners configured. [ 172.106968][ T9022] Process accounting paused [ 172.196169][ T9052] FAULT_INJECTION: forcing a failure. [ 172.196169][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 172.209483][ T9052] CPU: 1 UID: 0 PID: 9052 Comm: syz.0.566 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.209525][ T9052] Tainted: [L]=SOFTLOCKUP [ 172.209537][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.209562][ T9052] Call Trace: [ 172.209569][ T9052] [ 172.209577][ T9052] dump_stack_lvl+0x100/0x190 [ 172.209628][ T9052] should_fail_ex.cold+0x5/0xa [ 172.209653][ T9052] ? __kmalloc_noprof+0xba/0x840 [ 172.209682][ T9052] ? sk_prot_alloc+0x10b/0x2a0 [ 172.209707][ T9052] should_failslab+0xc2/0x120 [ 172.209739][ T9052] __kmalloc_noprof+0xe0/0x840 [ 172.209765][ T9052] sk_prot_alloc+0x10b/0x2a0 [ 172.209794][ T9052] sk_alloc+0x36/0xe80 [ 172.209825][ T9052] __netlink_create+0x5e/0x2c0 [ 172.209852][ T9052] ? __wake_up+0x3f/0x60 [ 172.209876][ T9052] netlink_create+0x29b/0x610 [ 172.209899][ T9052] ? __pfx_genl_bind+0x10/0x10 [ 172.209926][ T9052] ? __pfx_genl_unbind+0x10/0x10 [ 172.209953][ T9052] ? __pfx_genl_release+0x10/0x10 [ 172.209982][ T9052] __sock_create+0x339/0x860 [ 172.210012][ T9052] __sys_socket+0x14d/0x260 [ 172.210039][ T9052] ? __pfx___sys_socket+0x10/0x10 [ 172.210071][ T9052] __x64_sys_socket+0x72/0xb0 [ 172.210098][ T9052] do_syscall_64+0x115/0x840 [ 172.210125][ T9052] ? clear_bhb_loop+0x40/0x90 [ 172.210149][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.210171][ T9052] RIP: 0033:0x7f77e839ce59 [ 172.210188][ T9052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.210209][ T9052] RSP: 002b:00007f77e65f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 172.210231][ T9052] RAX: ffffffffffffffda RBX: 00007f77e8615fa0 RCX: 00007f77e839ce59 [ 172.210246][ T9052] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 172.210258][ T9052] RBP: 00007f77e8432e6f R08: 0000000000000000 R09: 0000000000000000 [ 172.210276][ T9052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.210289][ T9052] R13: 00007f77e8616038 R14: 00007f77e8615fa0 R15: 00007ffd45cbf558 [ 172.210310][ T9052] [ 173.076579][ T9067] binder: 9066:9067 ioctl c0046209 ffffffffffffffff returned -22 [ 175.552977][ T9141] FAULT_INJECTION: forcing a failure. [ 175.552977][ T9141] name failslab, interval 1, probability 0, space 0, times 0 [ 175.573812][ T9141] CPU: 0 UID: 0 PID: 9141 Comm: syz.3.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.573858][ T9141] Tainted: [L]=SOFTLOCKUP [ 175.573868][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.573885][ T9141] Call Trace: [ 175.573894][ T9141] [ 175.573904][ T9141] dump_stack_lvl+0x100/0x190 [ 175.573955][ T9141] should_fail_ex.cold+0x5/0xa [ 175.573982][ T9141] ? fs_reclaim_acquire+0x70/0x100 [ 175.574011][ T9141] ? ima_alloc_init_template+0x19d/0x6d0 [ 175.574040][ T9141] should_failslab+0xc2/0x120 [ 175.574080][ T9141] __kmalloc_noprof+0xe0/0x840 [ 175.574114][ T9141] ima_alloc_init_template+0x19d/0x6d0 [ 175.574139][ T9141] ? d_absolute_path+0x136/0x1b0 [ 175.574174][ T9141] ? __pfx_d_absolute_path+0x10/0x10 [ 175.574212][ T9141] ima_add_violation+0x128/0x3c0 [ 175.574243][ T9141] ? __pfx_ima_add_violation+0x10/0x10 [ 175.574268][ T9141] ? ima_d_path+0x137/0x260 [ 175.574292][ T9141] ? __pfx_ima_d_path+0x10/0x10 [ 175.574321][ T9141] ? lockdep_init_map_type+0x5c/0x250 [ 175.574359][ T9141] ? ima_inode_get+0x39d/0x580 [ 175.574398][ T9141] process_measurement+0x148f/0x2350 [ 175.574444][ T9141] ? __pfx_process_measurement+0x10/0x10 [ 175.574490][ T9141] ? rcu_is_watching+0x12/0xc0 [ 175.574516][ T9141] ? lock_release+0x24d/0x310 [ 175.574565][ T9141] ? __pfx_aa_file_perm+0x10/0x10 [ 175.574603][ T9141] ? futex_wake+0x4ea/0x5e0 [ 175.574640][ T9141] ima_file_mmap+0x1c4/0x1f0 [ 175.574682][ T9141] ? __pfx_ima_file_mmap+0x10/0x10 [ 175.574727][ T9141] security_mmap_file+0x278/0x9b0 [ 175.574761][ T9141] vm_mmap_pgoff+0xec/0x470 [ 175.574789][ T9141] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 175.574816][ T9141] ? lock_release+0x24d/0x310 [ 175.574852][ T9141] ? __fget_files+0x21f/0x3d0 [ 175.574891][ T9141] ksys_mmap_pgoff+0x3cb/0x610 [ 175.574930][ T9141] ? __x64_sys_futex+0x358/0x4d0 [ 175.574968][ T9141] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 175.575008][ T9141] ? xfd_validate_state+0x129/0x190 [ 175.575053][ T9141] __x64_sys_mmap+0x125/0x190 [ 175.575081][ T9141] do_syscall_64+0x115/0x840 [ 175.575117][ T9141] ? clear_bhb_loop+0x40/0x90 [ 175.575148][ T9141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.575176][ T9141] RIP: 0033:0x7f07bab9ce59 [ 175.575198][ T9141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.575224][ T9141] RSP: 002b:00007f07bba6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 175.575252][ T9141] RAX: ffffffffffffffda RBX: 00007f07bae15fa0 RCX: 00007f07bab9ce59 [ 175.575271][ T9141] RDX: 0000000000000fd5 RSI: 0000000000000001 RDI: 0000000000000000 [ 175.575288][ T9141] RBP: 00007f07bac32e6f R08: 0000000000000006 R09: 0000000040000000 [ 175.575305][ T9141] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 175.575322][ T9141] R13: 00007f07bae16038 R14: 00007f07bae15fa0 R15: 00007ffec328d9e8 [ 175.575349][ T9141] [ 175.871700][ T30] audit: type=1804 audit(8277292064.244:76): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.586" name="/newroot/168/file0" dev="tmpfs" ino=908 res=0 errno=0 [ 176.263788][ T9165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.589'. [ 176.347052][ T8351] syz.0.440 (8351) used greatest stack depth: 17440 bytes left [ 176.983998][ T9180] blktrace: Concurrent blktraces are not allowed on loop2 [ 177.298697][ T9196] netlink: 'syz.2.595': attribute type 16 has an invalid length. [ 177.333335][ T9196] netlink: 330 bytes leftover after parsing attributes in process `syz.2.595'. [ 177.456721][ T9203] FAULT_INJECTION: forcing a failure. [ 177.456721][ T9203] name failslab, interval 1, probability 0, space 0, times 0 [ 177.469889][ T9203] CPU: 1 UID: 0 PID: 9203 Comm: syz.2.597 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.469921][ T9203] Tainted: [L]=SOFTLOCKUP [ 177.469927][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.469936][ T9203] Call Trace: [ 177.469941][ T9203] [ 177.469947][ T9203] dump_stack_lvl+0x100/0x190 [ 177.469985][ T9203] should_fail_ex.cold+0x5/0xa [ 177.470001][ T9203] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 177.470019][ T9203] should_failslab+0xc2/0x120 [ 177.470041][ T9203] __kmalloc_cache_noprof+0x7a/0x6e0 [ 177.470058][ T9203] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 177.470077][ T9203] ? kfree+0x22b/0x6c0 [ 177.470094][ T9203] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 177.470114][ T9203] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 177.470137][ T9203] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 177.470156][ T9203] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 177.470178][ T9203] snd_pcm_oss_change_params_locked+0x193a/0x39f0 [ 177.470205][ T9203] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 177.470237][ T9203] ? __pfx___mutex_lock+0x10/0x10 [ 177.470257][ T9203] ? tomoyo_path_number_perm+0x28f/0x580 [ 177.470274][ T9203] ? lock_release+0x24d/0x310 [ 177.470294][ T9203] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.470312][ T9203] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 177.470333][ T9203] snd_pcm_oss_get_formats+0x7d/0x350 [ 177.470351][ T9203] ? __might_fault+0xc5/0x140 [ 177.470369][ T9203] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 177.470387][ T9203] ? __might_fault+0xc5/0x140 [ 177.470405][ T9203] snd_pcm_oss_ioctl+0x1870/0x3790 [ 177.470424][ T9203] ? __fget_files+0x215/0x3d0 [ 177.470444][ T9203] ? hook_file_ioctl_common+0x149/0x410 [ 177.470460][ T9203] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 177.470479][ T9203] ? __fget_files+0x21f/0x3d0 [ 177.470500][ T9203] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 177.470519][ T9203] __x64_sys_ioctl+0x18e/0x210 [ 177.470539][ T9203] do_syscall_64+0x115/0x840 [ 177.470557][ T9203] ? clear_bhb_loop+0x40/0x90 [ 177.470573][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.470587][ T9203] RIP: 0033:0x7f288699ce59 [ 177.470600][ T9203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.470615][ T9203] RSP: 002b:00007f288789d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.470639][ T9203] RAX: ffffffffffffffda RBX: 00007f2886c15fa0 RCX: 00007f288699ce59 [ 177.470649][ T9203] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000005 [ 177.470659][ T9203] RBP: 00007f2886a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 177.470668][ T9203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.470677][ T9203] R13: 00007f2886c16038 R14: 00007f2886c15fa0 R15: 00007ffc39cd5f08 [ 177.470691][ T9203] [ 178.193389][ T9186] kexec: Could not allocate control_code_buffer [ 179.207653][ T9269] FAULT_INJECTION: forcing a failure. [ 179.207653][ T9269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.222859][ T9269] CPU: 0 UID: 0 PID: 9269 Comm: syz.2.609 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.222908][ T9269] Tainted: [L]=SOFTLOCKUP [ 179.222918][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.222936][ T9269] Call Trace: [ 179.222945][ T9269] [ 179.222955][ T9269] dump_stack_lvl+0x100/0x190 [ 179.223007][ T9269] should_fail_ex.cold+0x5/0xa [ 179.223037][ T9269] _copy_from_user+0x2e/0xd0 [ 179.223070][ T9269] memdup_user_nul+0x6c/0x120 [ 179.223111][ T9269] handle_policy_update+0x1a4/0xf00 [ 179.223149][ T9269] ? __pfx___might_resched+0x10/0x10 [ 179.223188][ T9269] ? __pfx_handle_policy_update+0x10/0x10 [ 179.223224][ T9269] ? apparmor_capable+0x1d7/0x4d0 [ 179.223251][ T9269] ? bpf_lsm_capable+0x9/0x10 [ 179.223289][ T9269] ? security_capable+0x80/0x260 [ 179.223330][ T9269] safesetid_uid_file_write+0x84/0xc0 [ 179.223366][ T9269] vfs_write+0x2aa/0x1050 [ 179.223405][ T9269] ? __pfx_safesetid_uid_file_write+0x10/0x10 [ 179.223444][ T9269] ? __pfx_vfs_write+0x10/0x10 [ 179.223483][ T9269] ? rcu_is_watching+0x12/0xc0 [ 179.223512][ T9269] ? __fget_files+0x21f/0x3d0 [ 179.223558][ T9269] ksys_write+0x12a/0x250 [ 179.223596][ T9269] ? __pfx_ksys_write+0x10/0x10 [ 179.223637][ T9269] ? rcu_is_watching+0x12/0xc0 [ 179.223664][ T9269] do_syscall_64+0x115/0x840 [ 179.223698][ T9269] ? clear_bhb_loop+0x40/0x90 [ 179.223728][ T9269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.223755][ T9269] RIP: 0033:0x7f288699ce59 [ 179.223777][ T9269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.223802][ T9269] RSP: 002b:00007f288789d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.223826][ T9269] RAX: ffffffffffffffda RBX: 00007f2886c15fa0 RCX: 00007f288699ce59 [ 179.223842][ T9269] RDX: 00000000000000be RSI: 0000200000000540 RDI: 0000000000000008 [ 179.223866][ T9269] RBP: 00007f2886a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 179.223881][ T9269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.223897][ T9269] R13: 00007f2886c16038 R14: 00007f2886c15fa0 R15: 00007ffc39cd5f08 [ 179.223925][ T9269] [ 179.926922][ T9276] netlink: zone id is out of range [ 179.926922][ T9282] netlink: zone id is out of range [ 179.926939][ T9276] netlink: zone id is out of range [ 179.926948][ T9276] netlink: zone id is out of range [ 179.969959][ T9276] netlink: zone id is out of range [ 179.969970][ T9282] netlink: zone id is out of range [ 179.969979][ T9282] netlink: zone id is out of range [ 179.985950][ T9282] netlink: zone id is out of range [ 179.993987][ T9282] netlink: zone id is out of range [ 179.994092][ T9276] netlink: zone id is out of range [ 180.760406][ T9318] ubi0: attaching mtd0 [ 180.806595][ T9318] ubi0: scanning is finished [ 180.830654][ T9318] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 181.035068][ T9318] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 182.401003][ T9365] vhci_hcd: not connected 4 [ 182.549660][ T9372] vivid-007: ================= START STATUS ================= [ 182.574361][ T9372] vivid-007: Enable Output Cropping: true [ 182.592930][ T9372] vivid-007: Enable Output Composing: true [ 182.638787][ T9372] vivid-007: Enable Output Scaler: true [ 182.692158][ T9372] vivid-007: Tx RGB Quantization Range: Automatic [ 182.738316][ T9372] vivid-007: Transmit Mode: HDMI [ 182.764660][ T9372] vivid-007: Hotplug Present: 0x00000000 [ 182.770538][ T9372] vivid-007: RxSense Present: 0x00000000 [ 182.778446][ T9372] vivid-007: EDID Present: 0x00000000 [ 182.784159][ T9372] vivid-007: ================== END STATUS ================== [ 182.802061][ T9378] vivid-007: ================= START STATUS ================= [ 182.895043][ T9378] vivid-007: Generate PTS: true [ 182.919127][ T9378] vivid-007: Generate SCR: true [ 182.939470][ T9378] tpg source WxH: 320x240 (Y'CbCr) [ 182.974755][ T9378] tpg field: 1 [ 183.002813][ T9378] tpg crop: (0,0)/320x240 [ 183.026516][ T9378] tpg compose: (0,0)/320x240 [ 183.057930][ T9378] tpg colorspace: 8 [ 183.090946][ T9378] tpg transfer function: 0/0 [ 183.119741][ T9378] tpg Y'CbCr encoding: 0/0 [ 183.137779][ T9378] tpg quantization: 0/0 [ 183.153892][ T9378] tpg RGB range: 0/2 [ 183.163002][ T9378] vivid-007: ================== END STATUS ================== [ 183.531867][ T9405] random: crng reseeded on system resumption [ 183.585584][ T9405] hub 1-0:1.0: USB hub found [ 183.590526][ T9405] hub 1-0:1.0: 1 port detected [ 183.784183][ T9413] FAULT_INJECTION: forcing a failure. [ 183.784183][ T9413] name failslab, interval 1, probability 0, space 0, times 0 [ 183.814571][ T9413] CPU: 1 UID: 0 PID: 9413 Comm: syz.0.639 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.814621][ T9413] Tainted: [L]=SOFTLOCKUP [ 183.814632][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.814649][ T9413] Call Trace: [ 183.814658][ T9413] [ 183.814669][ T9413] dump_stack_lvl+0x100/0x190 [ 183.814720][ T9413] should_fail_ex.cold+0x5/0xa [ 183.814748][ T9413] ? __kmalloc_cache_node_noprof+0x57/0x760 [ 183.814792][ T9413] should_failslab+0xc2/0x120 [ 183.814834][ T9413] __kmalloc_cache_node_noprof+0x7d/0x760 [ 183.814874][ T9413] ? __alloc_workqueue+0x781/0x1940 [ 183.814901][ T9413] ? lockdep_init_map_type+0x5c/0x250 [ 183.814940][ T9413] __alloc_workqueue+0x781/0x1940 [ 183.814972][ T9413] alloc_workqueue_noprof+0xc7/0x130 [ 183.815000][ T9413] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 183.815032][ T9413] ? __pfx___debug_object_init+0x10/0x10 [ 183.815064][ T9413] nci_register_device+0x394/0xb80 [ 183.815102][ T9413] ? __pfx_nci_register_device+0x10/0x10 [ 183.815140][ T9413] ? lockdep_init_map_type+0x5c/0x250 [ 183.815183][ T9413] virtual_ncidev_open+0x141/0x220 [ 183.815219][ T9413] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 183.815252][ T9413] misc_open+0x26d/0x450 [ 183.815289][ T9413] ? __pfx_misc_open+0x10/0x10 [ 183.815325][ T9413] chrdev_open+0x234/0x6a0 [ 183.815352][ T9413] ? __pfx_apparmor_file_open+0x10/0x10 [ 183.815379][ T9413] ? __pfx_chrdev_open+0x10/0x10 [ 183.815406][ T9413] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 183.815441][ T9413] do_dentry_open+0x6ab/0x14d0 [ 183.815466][ T9413] ? __pfx_chrdev_open+0x10/0x10 [ 183.815495][ T9413] vfs_open+0x82/0x3f0 [ 183.815528][ T9413] path_openat+0x2873/0x4280 [ 183.815556][ T9413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.815588][ T9413] ? __pfx_path_openat+0x10/0x10 [ 183.815619][ T9413] do_file_open+0x20e/0x430 [ 183.815646][ T9413] ? __pfx_do_file_open+0x10/0x10 [ 183.815685][ T9413] ? alloc_fd+0x471/0x7a0 [ 183.815729][ T9413] ? do_getname+0x191/0x390 [ 183.815763][ T9413] do_sys_openat2+0x10f/0x1e0 [ 183.815796][ T9413] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.815839][ T9413] __x64_sys_openat+0x12d/0x210 [ 183.815873][ T9413] ? __pfx___x64_sys_openat+0x10/0x10 [ 183.815909][ T9413] ? rcu_is_watching+0x12/0xc0 [ 183.815938][ T9413] do_syscall_64+0x115/0x840 [ 183.815974][ T9413] ? clear_bhb_loop+0x40/0x90 [ 183.816006][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.816035][ T9413] RIP: 0033:0x7f77e839ce59 [ 183.816057][ T9413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.816093][ T9413] RSP: 002b:00007f77e65f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 183.816123][ T9413] RAX: ffffffffffffffda RBX: 00007f77e8615fa0 RCX: 00007f77e839ce59 [ 183.816141][ T9413] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 183.816158][ T9413] RBP: 00007f77e8432e6f R08: 0000000000000000 R09: 0000000000000000 [ 183.816176][ T9413] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 183.816194][ T9413] R13: 00007f77e8616038 R14: 00007f77e8615fa0 R15: 00007ffd45cbf558 [ 183.816222][ T9413] [ 184.854323][ T9449] can: request_module (can-proto-0) failed. [ 186.294780][ T9481] ubi31: attaching mtd0 [ 186.297007][ T9481] ubi31: scanning is finished [ 186.297034][ T9481] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 186.575811][ T9490] misc userio: Invalid payload size [ 186.612217][ T9481] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 187.502663][ T9519] FAULT_INJECTION: forcing a failure. [ 187.502663][ T9519] name failslab, interval 1, probability 0, space 0, times 0 [ 187.516648][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: syz.0.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.516676][ T9519] Tainted: [L]=SOFTLOCKUP [ 187.516681][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.516691][ T9519] Call Trace: [ 187.516696][ T9519] [ 187.516702][ T9519] dump_stack_lvl+0x100/0x190 [ 187.516730][ T9519] should_fail_ex.cold+0x5/0xa [ 187.516746][ T9519] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 187.516767][ T9519] should_failslab+0xc2/0x120 [ 187.516789][ T9519] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 187.516809][ T9519] ? do_getname+0x35/0x390 [ 187.516826][ T9519] ? percpu_counter_add_batch+0xb9/0x230 [ 187.516844][ T9519] do_getname+0x35/0x390 [ 187.516860][ T9519] do_sys_openat2+0xc7/0x1e0 [ 187.516878][ T9519] ? __pfx_do_sys_openat2+0x10/0x10 [ 187.516896][ T9519] ? lock_release+0x24d/0x310 [ 187.516916][ T9519] __x64_sys_openat+0x12d/0x210 [ 187.516934][ T9519] ? __pfx___x64_sys_openat+0x10/0x10 [ 187.516958][ T9519] ? rcu_is_watching+0x12/0xc0 [ 187.516975][ T9519] do_syscall_64+0x115/0x840 [ 187.516996][ T9519] ? clear_bhb_loop+0x40/0x90 [ 187.517013][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.517028][ T9519] RIP: 0033:0x7f77e839ce59 [ 187.517041][ T9519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.517056][ T9519] RSP: 002b:00007f77e65f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 187.517073][ T9519] RAX: ffffffffffffffda RBX: 00007f77e8615fa0 RCX: 00007f77e839ce59 [ 187.517085][ T9519] RDX: 0000000000022902 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 187.517094][ T9519] RBP: 00007f77e8432e6f R08: 0000000000000000 R09: 0000000000000000 [ 187.517103][ T9519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.517111][ T9519] R13: 00007f77e8616038 R14: 00007f77e8615fa0 R15: 00007ffd45cbf558 [ 187.517125][ T9519] [ 190.147070][ T9598] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 50007 [ 191.684500][ T9659] netlink: 146 bytes leftover after parsing attributes in process `syz.0.686'. [ 193.071529][ T9706] netlink: 146 bytes leftover after parsing attributes in process `syz.3.693'. [ 193.355418][ T9711] Process accounting resumed [ 194.023911][ T9753] FAULT_INJECTION: forcing a failure. [ 194.023911][ T9753] name failslab, interval 1, probability 0, space 0, times 0 [ 194.165379][ T9753] CPU: 0 UID: 0 PID: 9753 Comm: syz.2.700 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.165425][ T9753] Tainted: [L]=SOFTLOCKUP [ 194.165435][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.165452][ T9753] Call Trace: [ 194.165460][ T9753] [ 194.165469][ T9753] dump_stack_lvl+0x100/0x190 [ 194.165520][ T9753] should_fail_ex.cold+0x5/0xa [ 194.165548][ T9753] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 194.165583][ T9753] should_failslab+0xc2/0x120 [ 194.165625][ T9753] __kmalloc_cache_noprof+0x7a/0x6e0 [ 194.165657][ T9753] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 194.165700][ T9753] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 194.165740][ T9753] vidtv_mux_init+0x8a6/0xbf0 [ 194.165776][ T9753] vidtv_start_feed+0x34e/0x500 [ 194.165814][ T9753] ? __pfx_vidtv_start_feed+0x10/0x10 [ 194.165854][ T9753] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 194.165901][ T9753] ? dmx_section_feed_allocate_filter+0x388/0x480 [ 194.165932][ T9753] ? rcu_is_watching+0x12/0xc0 [ 194.165961][ T9753] dmx_section_feed_start_filtering+0x3a8/0x660 [ 194.166009][ T9753] dvb_dmxdev_filter_start+0x767/0xdd0 [ 194.166061][ T9753] dvb_demux_do_ioctl+0xe64/0x1200 [ 194.166108][ T9753] dvb_usercopy+0x167/0x340 [ 194.166139][ T9753] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 194.166173][ T9753] ? __pfx_dvb_usercopy+0x10/0x10 [ 194.166208][ T9753] ? __fget_files+0x21f/0x3d0 [ 194.166246][ T9753] dvb_demux_ioctl+0x29/0x40 [ 194.166280][ T9753] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 194.166315][ T9753] __x64_sys_ioctl+0x18e/0x210 [ 194.166349][ T9753] do_syscall_64+0x115/0x840 [ 194.166383][ T9753] ? clear_bhb_loop+0x40/0x90 [ 194.166414][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.166440][ T9753] RIP: 0033:0x7f288699ce59 [ 194.166461][ T9753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.166490][ T9753] RSP: 002b:00007f288783a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.166517][ T9753] RAX: ffffffffffffffda RBX: 00007f2886c16270 RCX: 00007f288699ce59 [ 194.166536][ T9753] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 194.166554][ T9753] RBP: 00007f2886a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 194.166571][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.166587][ T9753] R13: 00007f2886c16308 R14: 00007f2886c16270 R15: 00007ffc39cd5f08 [ 194.166614][ T9753] [ 194.166761][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 194.422566][ T10] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 194.431086][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.441935][ T10] Tainted: [L]=SOFTLOCKUP [ 194.446327][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.456996][ T10] Workqueue: events vidtv_mux_tick [ 194.462110][ T10] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 194.468704][ T10] Code: bb 5e d1 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 194.488397][ T10] RSP: 0018:ffffc900000f73f8 EFLAGS: 00010202 [ 194.494540][ T10] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 194.502520][ T10] RDX: 0000000000000000 RSI: ffffffff88375de5 RDI: ffff88801e2abe00 [ 194.510509][ T10] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 194.518493][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900000f7698 [ 194.526536][ T10] R13: ffffc900000f7678 R14: 0000000000000178 R15: 0000000000000000 [ 194.534505][ T10] FS: 0000000000000000(0000) GS:ffff88812433b000(0000) knlGS:0000000000000000 [ 194.543451][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.550118][ T10] CR2: 0000001b34009ff8 CR3: 0000000075e8e000 CR4: 00000000003526f0 [ 194.558514][ T10] Call Trace: [ 194.561799][ T10] [ 194.565163][ T10] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 194.571575][ T10] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 194.577272][ T10] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 194.583426][ T10] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 194.589148][ T10] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 194.595329][ T10] ? unwind_next_frame+0x3be/0x2090 [ 194.600618][ T10] ? rcu_is_watching+0x12/0xc0 [ 194.605402][ T10] ? rcu_is_watching+0x12/0xc0 [ 194.610151][ T10] ? unwind_next_frame+0x3be/0x2090 [ 194.615350][ T10] ? lock_release+0x24d/0x310 [ 194.620022][ T10] ? unwind_next_frame+0x3c8/0x2090 [ 194.625217][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 194.630148][ T10] ? lock_release+0x24d/0x310 [ 194.634853][ T10] vidtv_mux_push_si+0x932/0xe80 [ 194.639812][ T10] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 194.645268][ T10] ? rhashtable_free_and_destroy+0xed/0x5d0 [ 194.651185][ T10] ? rcu_is_watching+0x12/0xc0 [ 194.655940][ T10] ? trace_ignore_this_task+0xbc/0x100 [ 194.661381][ T10] ? lock_release+0x24d/0x310 [ 194.666064][ T10] ? vidtv_memset+0x50/0x90 [ 194.670644][ T10] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 194.676268][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 194.681734][ T10] ? debug_object_activate+0x331/0x490 [ 194.687199][ T10] vidtv_mux_tick+0xe93/0x1460 [ 194.691974][ T10] ? debug_object_activate+0x331/0x490 [ 194.697437][ T10] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 194.702632][ T10] ? debug_object_deactivate+0x2e4/0x3b0 [ 194.708264][ T10] ? rcu_is_watching+0x12/0xc0 [ 194.713012][ T10] ? debug_object_deactivate+0x2e4/0x3b0 [ 194.718644][ T10] ? lock_release+0x24d/0x310 [ 194.723346][ T10] ? debug_object_deactivate+0x2e4/0x3b0 [ 194.729010][ T10] ? __pfx_debug_object_deactivate+0x10/0x10 [ 194.735082][ T10] ? trace_irq_enable.constprop.0+0x122/0x160 [ 194.741202][ T10] ? rcu_is_watching+0x12/0xc0 [ 194.745966][ T10] ? lock_acquire+0x301/0x370 [ 194.750744][ T10] ? rcu_is_watching+0x12/0xc0 [ 194.755502][ T10] ? rcu_is_watching+0x12/0xc0 [ 194.760256][ T10] process_one_work+0xa23/0x1940 [ 194.765290][ T10] ? __pfx_process_one_work+0x10/0x10 [ 194.770688][ T10] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 194.775937][ T10] worker_thread+0x5ef/0xe50 [ 194.780538][ T10] ? kthread+0x13a/0x450 [ 194.784792][ T10] ? __pfx_worker_thread+0x10/0x10 [ 194.789894][ T10] kthread+0x370/0x450 [ 194.793952][ T10] ? __pfx_kthread+0x10/0x10 [ 194.798551][ T10] ret_from_fork+0x72b/0xd50 [ 194.803218][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 194.808359][ T10] ? __switch_to+0x800/0x10f0 [ 194.813112][ T10] ? __switch_to_asm+0x39/0x70 [ 194.817879][ T10] ? __pfx_kthread+0x10/0x10 [ 194.822496][ T10] ret_from_fork_asm+0x1a/0x30 [ 194.827260][ T10] [ 194.830279][ T10] Modules linked in: [ 194.837974][ T10] ---[ end trace 0000000000000000 ]--- [ 194.854881][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.861296][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.895841][ T30] audit: type=1800 audit(8277292083.314:77): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.705" name="discovery_nqn" dev="configfs" ino=33675 res=0 errno=0 [ 194.937234][ T10] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 194.943983][ T10] Code: bb 5e d1 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 194.968170][ T10] RSP: 0018:ffffc900000f73f8 EFLAGS: 00010202 [ 194.974300][ T10] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 194.982484][ T10] RDX: 0000000000000000 RSI: ffffffff88375de5 RDI: ffff88801e2abe00 [ 194.990525][ T10] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 195.013708][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900000f7698 [ 195.022982][ T10] R13: ffffc900000f7678 R14: 0000000000000178 R15: 0000000000000000 [ 195.031076][ T10] FS: 0000000000000000(0000) GS:ffff88812433b000(0000) knlGS:0000000000000000 [ 195.040386][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.047290][ T10] CR2: 0000001b33fe2ff8 CR3: 0000000075e8e000 CR4: 00000000003526f0 [ 195.055749][ T10] Kernel panic - not syncing: Fatal exception [ 195.062216][ T10] Kernel Offset: disabled [ 195.066544][ T10] Rebooting in 86400 seconds..