last executing test programs: 4m35.28340914s ago: executing program 2 (id=10511): write$auto(0xffffffffffffffff, 0x0, 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xf5\x00'/21, 0x100000002, 0x100000001) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) ioctl$auto_BLKTRACESETUP32(r4, 0xc0401273, &(0x7f0000000080)={"a49d980a059fa15ab42df574526717a42787c7192a7e12417113edfa3556973a", 0xb, 0x7, 0x8, 0x9, 0x1000, 0xffffffffffffffff}) kcmp$auto_KCMP_SIGHAND(0xffffffffffffffff, r5, 0x4, 0x9, 0x5) 4m33.121174417s ago: executing program 2 (id=10522): r0 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x20242, 0x0) pread64$auto(r0, &(0x7f0000000340)='\x00\x00y\x005\xa4,\x0e\xf5,\xf8>%\xdf\xa7\xee\xbd.\x87MJ\xe7`a\xd1\xfe\vx`\xd9G\x15\xc9\xe6\x92sZ3\\\xe8\xbc\x10\xa1\xc1\x05\t\x03~\xbc\xb4\xcd;G\x06\xb2\xd3\xd0\xd9\x9cG\x83{\xf0\xc7l0\x82p;\xa7H\x16T1\xe5r\xcey\x85\n\xc6\xa3\x1a\x06%P\x93XdW\x90gi\xa0\x9c>\x15\\\x17v_\xc5l', 0x6, 0x1) r1 = socketcall$auto(0xffe, 0x0) ioctl$auto(0x3, 0x4008ae61, r1) read$auto(r1, &(0x7f0000000040)='\x00\x00y\x005\xa4,\x0e\xf5,\xf8>%\xdf\xa7\xee\xbd.\x87MJ\xe7`a\xd1\xfe\vx`\xd9G\x15\xc9\xe6\x92sZ3\\\xe8\xbc\x10\xa1\xc1\x05\t\x03~\xbc\xb4\xcd;G\x06\xb2\xd3\xd0\xd9\x9cG\x83{\xf0\xc7l0\x82p;\xa7H\x16T1\xe5r\xcey\x85\n\xc6\xa3\x1a\x06%P\x93XdW\x90gi\xa0\x9c>\x15\\\x17v_\xc5l', 0x9fba) 4m32.983688605s ago: executing program 2 (id=10524): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) writev$auto(0x3, 0x0, 0x8) 4m32.030345045s ago: executing program 2 (id=10526): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto(r0, &(0x7f0000000100)='!}*[\\@:[\xd5\xe5\xc5/\xa5', 0xc) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) setrlimit$auto(0xb, 0x0) timer_create$auto(0x3, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x4000000000000, 0x5, 0xfffffffffffffffc, 0x7f1, r0, 0x4) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0x101000, 0x0) ioctl$auto_TIOCMSET2(r1, 0x5418, &(0x7f00000001c0)="6ab1") 4m31.48097865s ago: executing program 2 (id=10530): mmap$auto(0x0, 0x2, 0x8004000080000df, 0x40eb2, 0x401, 0x300000000001) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) unshare$auto(0x8000000) r0 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x4) r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000001240)='\t\x00', 0x2) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x20009, 0x8d, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xffd6) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x0, 0x5, 0x2) r2 = socket(0x15, 0x5, 0x0) setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/status\x00', 0x0, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, 0x0) 4m30.455471421s ago: executing program 2 (id=10536): syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x1, 0x1000000000, 0xdf, 0x49b7f, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x18, 0xfffffffffffffffd, 0x0, 0x0, 0x2) write$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x1, 0x20009, 0x4000000000df, 0x40080000000eb1, 0xffffffffffffffff, 0xffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/usb-serial/drivers/digi_4/new_id\x00', 0x183841, 0x0) sysfs$auto(0x2, 0x100000000000038, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x5c8) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2000000000400007, 0x7, 0x9b72, r3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(r2, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) 4m15.356059138s ago: executing program 32 (id=10536): syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x1, 0x1000000000, 0xdf, 0x49b7f, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x18, 0xfffffffffffffffd, 0x0, 0x0, 0x2) write$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x1, 0x20009, 0x4000000000df, 0x40080000000eb1, 0xffffffffffffffff, 0xffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/usb-serial/drivers/digi_4/new_id\x00', 0x183841, 0x0) sysfs$auto(0x2, 0x100000000000038, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x5c8) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2000000000400007, 0x7, 0x9b72, r3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(r2, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) 13.198964593s ago: executing program 4 (id=11414): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) set_mempolicy$auto(0x1, 0x0, 0x803) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x17, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) pkey_free$auto(0xfffffffd) mmap$auto(0x0, 0x8001, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x203, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x49, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00', @ANYBLOB, @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c000100"], 0x8d}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 12.365425159s ago: executing program 4 (id=11418): r0 = bpf$auto_BPF_ITER_CREATE(0x21, 0x0, 0x4) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket(0x18, 0xa, 0x1) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) writev$auto(0xca, 0x0, 0x2000000000000003) socket(0x9, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) sendfile$auto(r0, r0, &(0x7f0000000040)=0xfff, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptyud\x00', 0x169900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x604881, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r3, 0x40086602, &(0x7f0000000000)={'bridge0\x00'}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 11.38203853s ago: executing program 4 (id=11423): capget$auto(0x0, 0xfffffffffffffffe) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x7, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x6, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) close_range$auto(0x2, r1, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) 9.04909652s ago: executing program 4 (id=11429): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) capget$auto(0x0, 0xfffffffffffffffe) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x7, 0x0, 0x0) mmap$auto(0x0, 0x202000b, 0x4, 0xeb5, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000100)={@siginfo_0_0={0xfffffc01, 0xfffffe00, 0x769d, @_rt={0x0, 0xee01, @sival_int=0x8001}}}, 0xd, &(0x7f0000000180)={{0x7}, {0x10000, 0x91}, 0x4, 0x0, 0xd33, 0x87, 0x100000001, 0x6, 0x7, 0x1, 0x6b5, 0xc, 0x3, 0xd, 0x8, 0x6}) mmap$auto(0x6, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x64842, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x80000001) r2 = socket(0x25, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) connect$auto(r2, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0x1}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x40, 0x40000e2, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = fcntl$auto(0x0, 0x407, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xcb1, r3, 0x8000) recvmmsg$auto(r1, 0x0, 0x2, 0xfffffffc, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x80000000, 0x80020008, 0xeb1, 0x401, 0x83fc) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 7.952302134s ago: executing program 4 (id=11432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x5, 0x801, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x400a01, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000640)='/Eev/audin1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x02\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccE\x10\x94\xf2,8\x88\x12\x11\x81s\xf6\xed\xec\xd8\xbf\xda\xde\xd0\xc2\xf0;X\xd2\xee\xfa\x18PB\x19pHg*\x00\xba3\xdd3\xdb\x94\\\xa9n\x98\xbe\x7f\xae\x89\xa2\xc4K\bC\xe2M/\xd04R\x85w\xde\x03\x1a\b\xda\x8d\xa3K\xd0\x16\xaf\xdd\x1b\x1dV\xce\xa8\x05;<\xb6O?v\xacI\x14\xa1b\xdf\x8d\xe8$\xf6\xe5\xa5lS\xd4&\xb9\xdc*\xfe\xbaX~b\x80\xb8\xba\x91\x80\xa7BE\'\x12h}\xe4S\x9dh3b\xbb\x9d\xf4\xf3\x920Q\xd9\xbc2\x89\xf9\xf6,\xb7Z;\xa3\x01wx\x8a\x103$\x0f\x81\xc2\"f[\xf5D\xe5\xe3\x10\x01%\x03\xda\x91sC\t\xfe\xd0S\xef\x19', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x8) mmap$auto(0x0, 0xffffffff80000001, 0x0, 0xeb1, r0, 0x4) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket(0x1f, 0x800, 0x0) sendto$auto(r2, 0x0, 0x8000000008000, 0x0, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x80000000000001, 0x400008, 0x1, 0x9b72, r0, 0xcf) r5 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000200)='/dev/dvb/adapter0/frontend0\x00', 0x80000000008) r6 = open(0x0, 0x22040, 0x75) socket(0xa, 0x3, 0x87) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f4) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYRES64=r4, @ANYRES16=r1, @ANYRESHEX=r5, @ANYBLOB="c1f050d04069eb9993cdc376dcc54877ec379609e393ecac66db8bc8575d51c6a087088b393bb4e27155a3fdb5773276e29da116d38bd6c7133ed3efba8bdfa2a7d3c63b45fcd9496cf3b4442be4fd157b8581e82f0dd10c53234bd1df968e1173f3861fe6c9a4000accb79c917831e0a8ef574b", @ANYBLOB="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", @ANYBLOB="2be9d2de2535c2c15bc1b12403f6e3d8412934e56668bad57ada43ce6e24dbe607eb53931e95a7a75a72ea81bb95292f93ddddad03cd575ace38f3be6de2a858128aa5ce35da6a7cb30174709b6873f668455716b66b93c234ccaa84beaae3c0f9f103770db44a0098c82026f26149ab4dd0aed9a19eca", @ANYRES16, @ANYRES64=r6], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0x3, 0xeb1, 0x401, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x60000, 0x0) prctl$auto(0x39, 0x10004, 0x0, 0x4, 0x4) 6.884167455s ago: executing program 4 (id=11436): syslog$auto_SYSLOG_ACTION_READ_CLEAR(0x4, 0x0, 0x100) mknod$auto(0x0, 0x1001, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto(0xffffffffffffffff, 0x4008af03, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffb0005, 0x2017) madvise$auto(0x2, 0xffbfffffffff0001, 0x15) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x18140, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0xf368, 0x3, 0xeb1, 0xffffffffffffffff, 0x0) ioctl$auto(0x3, 0x4048aec9, r0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r2, 0x64c6, 0x1e2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) madvise$auto(0x2243, 0x200, 0x80) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) 5.07820666s ago: executing program 3 (id=11439): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000001, 0x9, 0x5, 0x0, 0x85b5, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0xfc, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x8, 0x20000001, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x0, 0x80800, 0x0, 0x8001, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x2000000000000001]}, 0xffff, 0x7d) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)) 4.939006592s ago: executing program 1 (id=11440): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x3a) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) r1 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/thread-self/ns/cgroup\x00', 0x800, 0x0) open_by_handle_at$auto(r1, &(0x7f0000005e00)={0x10, 0xf1, "82a0d48cb31f0af60000000823b40e62"}, 0x80000001) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_KSMBD_EVENT_HEARTBEAT_REQUEST(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0xa00, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0x4005, 0x4, 0x800000948b, 0x3, 0x15f4da0c, 0x3, 0x3, 0x0, 0x80200001, 0x1c51, 0x10001, 0x91, 0x400000001, 0x2]}, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x5) mmap$auto(0xa105, 0x4, 0x6, 0x7f, r3, 0x81) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0xa, 0x2, 0x3a) (async) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/thread-self/ns/cgroup\x00', 0x800, 0x0) (async) open_by_handle_at$auto(r1, &(0x7f0000005e00)={0x10, 0xf1, "82a0d48cb31f0af60000000823b40e62"}, 0x80000001) (async) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$auto_KSMBD_EVENT_HEARTBEAT_REQUEST(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0xa00, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0x4005, 0x4, 0x800000948b, 0x3, 0x15f4da0c, 0x3, 0x3, 0x0, 0x80200001, 0x1c51, 0x10001, 0x91, 0x400000001, 0x2]}, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x5) (async) mmap$auto(0xa105, 0x4, 0x6, 0x7f, r3, 0x81) (async) 4.760926013s ago: executing program 3 (id=11441): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(r1, 0x90009427, &(0x7f0000001080)={@inferred, "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"}) read$auto(0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x40000000000000, 0x2020009, 0x100008, 0x9000000eb1, r2, 0x8000) lseek$auto(0x3, 0xffffffffff800002, 0x10) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyzd\x00', 0x1419c0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_l2cap_debugfs_fops_(0xffffffffffffffff, &(0x7f0000000240)=""/167, 0xa7) kill$auto(0x0, 0x21) r3 = prctl$auto(0x9, 0x3, 0x0, 0x6, 0x100000001) r4 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x3, 0x9, 0x4cbd5d) fallocate$auto(r4, 0x1, 0x820, 0xfffffffffffffffa) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000000000eb1, 0x401, 0x7ffc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) preadv$auto(r3, &(0x7f0000000200)={&(0x7f0000000180)="c0992dabdff10a8ddaa936c8b6f96d50edb6f04c62e1c25d0d12af575a2c7b16323f88c53ef53ca26a10a9fc7e37157e0d696896b890930bd1d7ce4daf6bbe5be67e2f38bd0da87300efc767bd647bee101ffcd5c898c389e5a535e8ad2e13043297e4012d0a12e6e852c81e175a23a9fb977c1f7853804eaafe0d", 0x4}, 0x7, 0xe06, 0x1dcc) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x121001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff0f5, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 4.658864345s ago: executing program 1 (id=11442): write$auto(0xffffffffffffffff, 0x0, 0xa) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) bind$auto(0xffffffffffffffff, 0x0, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000424bd7000f7dbdf250100003f"], 0x14}, 0x1, 0x0, 0x0, 0x44041}, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 4.646777095s ago: executing program 0 (id=11443): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00ff"}) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x2}, 0x2) 4.269055012s ago: executing program 0 (id=11444): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x40, 0x942, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x2000003, 0x8, 0x4, 0x10, 0xb65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, [0x2, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x2d24, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, &(0x7f0000000080)="d82acb") r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0x4000000df, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x70ed581b) open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0xe, 0x10000, 0x1, 0xe6) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x9}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x222040, 0x20) close_range$auto(r0, r3, 0x89d9719) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000380)="3afc4d03afb285c0db8c647e09109893f3b5c47abefe40ff6aa4d93d162d3fa2ee54cb") 4.143962054s ago: executing program 1 (id=11445): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(r1, 0x90009427, &(0x7f0000001080)={@inferred, "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"}) read$auto(0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x40000000000000, 0x2020009, 0x100008, 0x9000000eb1, r2, 0x8000) lseek$auto(0x3, 0xffffffffff800002, 0x10) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyzd\x00', 0x1419c0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_l2cap_debugfs_fops_(0xffffffffffffffff, &(0x7f0000000240)=""/167, 0xa7) kill$auto(0x0, 0x21) r3 = prctl$auto(0x9, 0x3, 0x0, 0x6, 0x80000100000001) r4 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x3, 0x9, 0x4cbd5d) fallocate$auto(r4, 0x1, 0x820, 0xfffffffffffffffa) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) mmap$auto(0x0, 0x20009, 0x10, 0x4000000000eb1, r0, 0x7ffc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) preadv$auto(r3, &(0x7f0000000200)={&(0x7f0000000180)="c0992dabdff10a8ddaa936c8b6f96d50edb6f04c62e1c25d0d12af575a2c7b16323f88c53ef53ca26a10a9fc7e37157e0d696896b890930bd1d7ce4daf6bbe5be67e2f38bd0da87300efc767bd647bee101ffcd5c898c389e5a535e8ad2e13043297e4012d0a12e6e852c81e175a23a9fb977c1f7853804eaafe0d", 0x4}, 0x7, 0xe06, 0x1dcc) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x121001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) socket(0x26, 0x800, 0x402) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x500000000000) 3.66230813s ago: executing program 3 (id=11446): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x5, 0x801, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket(0x23, 0x2, 0x0) sendto$auto(r2, 0x0, 0x8000000008000, 0x0, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0xa001, 0x0) write$auto(r6, &(0x7f0000000200)='/dev/dvb/adapter0/frontend0\x00', 0x3) r7 = open(0x0, 0x22040, 0x75) socket(0xa, 0x3, 0x87) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f4) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES64=r4, @ANYRES16=r0, @ANYRESHEX=r5, @ANYBLOB="c1f050d04069eb9993cdc376dcc54877ec379609e393ecac66db8bc8575d51c6a087088b393bb4e27155a3fdb5773276e29da116d38bd6c7133ed3efba8bdfa2a7d3c63b45fcd9496cf3b4442be4fd157b8581e82f0dd10c53234bd1df968e1173f3861fe6c9a4000accb79c917831e0a8ef574b", @ANYBLOB="e9aecc05c92d95c71ca66ff0b89f549f9b807c80f3126c359522fe88b560a897cce0af7cc71958a15bd81c4f82847e57f3d834c7d522f89ed1dcb63c0723ab7fe580a89807c9b564fc5e326f918eb14402bcbb5eb8fc39264ec069776a0308a7816b8c9822e3ca7e85e957f93eb819872b2858", @ANYBLOB="2be9d2de2535c2c15bc1b12403f6e3d8412934e56668bad57ada43ce6e24dbe607eb53931e95a7a75a72ea81bb95292f93ddddad03cd575ace38f3be6de2a858128aa5ce35da6a7cb30174709b6873f668455716b66b93c234ccaa84beaae3c0f9f103770db44a0098c82026f26149ab4dd0aed9a19eca", @ANYRES32=r1, @ANYRES64=r7], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x700, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 3.420866931s ago: executing program 0 (id=11447): mmap$auto(0x0, 0x5, 0x3, 0x14, 0xffffffffffffffff, 0x8000) socket(0x29, 0x5, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0) r1 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(r1, &(0x7f0000000040)=@can, &(0x7f0000000080)=0x80) socket(0x29, 0x5, 0x0) pread64$auto(r0, 0x0, 0xa87, 0x200009) 3.011476401s ago: executing program 0 (id=11448): bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000000)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x5e95}, 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) socket(0x18, 0xa, 0x1) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) pipe2$auto(&(0x7f00000000c0), 0x0) writev$auto(0xca, 0x0, 0x2000000000000003) socket(0xa, 0x3, 0x3b) socket(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x402000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x4f) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.998689232s ago: executing program 1 (id=11449): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) landlock_restrict_self$auto(r0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\xc0', 0x3, 0x0) 1.914716809s ago: executing program 3 (id=11450): ioctl$auto_VHOST_SET_VRING_CALL2(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0xe8, 0xffffffffffffffff}) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x200a00, 0x0) r2 = bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=@bpf_attr_1={0xffffffffffffffff, 0x9, @next_key}, 0x87) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)=@link_update={r0, @new_prog_fd=r1, 0xc, @old_prog_fd=r2}, 0xe3c) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={"3dc47ed5c0ad2201ba5dc3b16ed4345e5f23ea271b8308ec2ce9956dec3231d2", 0x2d0, 0x1, 0x3, 0xab7, 0x80, 0xffffffffffffffff}) msgctl$auto(0x9, 0x1, &(0x7f0000000300)={{0xfffffc01, 0xffffffffffffffff, 0xee01, 0xd3f, 0x5, 0x9, 0x2}, &(0x7f0000000280)=0xc2, &(0x7f00000002c0)=0x39, 0x5, 0x0, 0x8, 0x9, 0x8001, 0xd7, 0x89fc, 0x7, @inferred=0xffffffffffffffff, @raw=0x11}) r10 = waitid$auto(0x5, r4, &(0x7f0000000380)={@siginfo_0_0={0x0, 0x8f84, 0xeb68, @_kill={r7, r8}}}, 0xffffff00, &(0x7f0000000400)={{0x0, 0x9}, {0x0, 0x290}, 0x26, 0x80000000, 0xb, 0x7, 0x8, 0x7b, 0x7, 0x4, 0x2, 0x1, 0x5, 0x9, 0x7, 0xa310}) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0) ioctl$auto_I2C_RDWR(r5, 0x707, &(0x7f0000000500)="20680688648c692682e308290b53b571060fc62cae86f2330a2f53cf0ebdabb0a1d198e2499f3e156619aa08632aba90a4e68e6f4ac25bc4d898f0ab6f5b3a80a40ad183d853b2661336d253fcbe4278c3884c1c2fed4c145aa726ff5bd9827c07cf3c7e44f3f735c11e289f9bf58a70ee03664bfc919d1eeaa3e6459b87a9811b2a4f0abf2f720ff9101e16e73b121207f440bb3e67790afe1602f8a8cad32ad7cb2857da95b0831f413d6e1e10d87ad96bbf463625b885208f43ddf4c7e549b82e4b7ea97a4658d221dfc6e3c80b46b42f8824df2fc81a46d15f96df38f63e1da09d43e71dff6ffb3066256604d3143757148d27a7") r13 = accept$auto(r0, &(0x7f0000000600)=@nfc={0x27, 0x0, 0x1, 0x5}, &(0x7f0000000640)) ioctl$auto_VHOST_SET_VRING_ENDIAN2(r4, 0x4008af13, &(0x7f0000000680)={0x4, 0x9a}) ioctl$auto_I2C_SMBUS(r4, 0x720, &(0x7f00000006c0)="998ec50245b15a72dddfccc4c5da40dd486cb277") r14 = prctl$auto_PR_SET_MM_BRK(0x200, 0x7, r10, 0x9, 0x3) bind$auto(r14, &(0x7f0000000700)=@qipcrtr={0x2a, 0x3, 0x3fff}, 0x8) r15 = fcntl$getown(r3, 0x9) process_vm_readv$auto(r15, &(0x7f0000000800)={&(0x7f0000000740)="0cbeb3e93c06c8f3dacfe879c1a044a82fc78041c15d937e214c095a523c342aa6008d4086f480b0549fae47b3324b6dd467bdd50b4d067f04f3d3c5fc63a355d90304ea29806f9298739af589ab4a26a55f914bad0cf29f964dc06608bfd12697db0234bc108e9e862c4f2e660e35e2cd212c00129b2c9ded7d8a3939db00c37c33b88d22261bd01d3a608ca84ab6ed73eb96a2610ab58683ff8c41e33c67fd2ba6d04ce871bf6c143f238a745b6c58a38e7d887a8fb6b9e0643bd50fef78b0", 0x6}, 0x0, &(0x7f0000000900)={&(0x7f0000000840)="005de68a566d5ebcd841f537f1b633e983e3cd93bc782eb6064d6bb728a184f24db4c5ec315f441abe97c685ebaa43dbc0a9fd2bdb03225b61285273f596d18c890df9322720f5853c38c40b6b9d573496f08e90bd8a6ea7411d3716fb281c45d896302c60681eb6e022ea0b2143a21593b0c3e98bbe0ba41aa7d4b0011f1d22d0bb931665d214220110bb81a59f68dbb1c713c430a476934456d7c5c96d19e8bee35582a9b71c40a3da21661860980e749c33ee68edb170", 0xc}, 0x6, 0x1) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1fc, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACINFO={0x140, 0x7, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @fd=r13}, @typed={0x4, 0x7d}, @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x8, 0x153, 0x0, 0x1, [@nested={0x4, 0x63}]}, @nested={0x104, 0xfa, 0x0, 0x1, [@nested={0x4, 0x16}, @nested={0x4}, @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0xfb, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="d4f812d3c86c25f30dfc8237f8a334248b7505c6a84b40c009075526c2bcbee5856705ba6ba8395b372e4b203a7e17c398879ab2c7f393fcae1fde98056a032be0d9fa8607a8e956f0f1426f5b924800edfdc0d07afd464d7fd00830a602e57243053eccdc121e0c9ec9844112afdbd4b1231375b8930c17ecb4ebf767a044ba34c9e4d17da152c6c9275726f5a6a5a53835f07b5ec2eebc0576b455f141a7d9438cc34f86bc7705cbcfb0e1718c5afb5cda03b4600f28cc3493500c98a96c1df6aa2b6279786f49ca3574bed6c8fabf04bdd84d47e13b31", @nested={0x4, 0xea}]}]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xa}, @SEG6_ATTR_SECRET={0x74, 0x4, "33a8c2ae1a0a852dcdfa58275528eed0202f18a103561f6e64a1edd8c51f2facb9a8db3cfc04a995c561cadd649395868623dc3c64cc719c015f423b8fd3453d27028e78bba6c0dec3542c4ac0daf1a947146fc58b3ed89aa95eb0ff6d6966055d58deef9a793ce7bdb9a1840949842a"}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r16 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000c00)) mmap$auto(0x8, 0xfffffffffffffff6, 0x80, 0xfa, r16, 0xfffffffffffffeff) mbind$auto(0x8, 0x0, 0x401, &(0x7f0000000c40)=0xb37, 0x7, 0x5) r17 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000c80), r17) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/self/fail-nth\x00', 0x17c7ae9a5739c451, 0x0) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000d00), r3) write$auto(r16, &(0x7f0000000d40)='/proc/self/mountstats\x00', 0x70) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000d80), r6) shmctl$auto_SHM_INFO(0x2334, 0xe, &(0x7f0000000f40)={{0x1, r12, r9, 0x20, 0x8, 0x1, 0x8}, 0x106b, 0x45ae, 0x0, 0x3, @inferred=r7, @inferred=r7, 0x3, 0x0, &(0x7f0000000dc0)="aac0a568e318f989fb84fac4ddc2ab3ac3a685aa2cc4d9510dafb19e358ddb9567eb72ff1e84e6e7be8282d8fa1db88cbf2f8c578c7be70c6589cb9e0e935246d3d99761cd4f60d8f0e9d05294850ba23f935be7ab223a96a004abdd3a95d87cbd45d881d4cc8b5b1b7c3cfa8d31f53d163961e4aeeb8e6679a1a487b0c87ad42356a16c79a937056b96f2b59c9a0c12285fdc57b5aaaa4366a153782f66e4b1dc101152f994", &(0x7f0000000e80)="5ad5660f842c1053b83859db049b3f8cee4515f458b746e8d0e2451065f33395b284ebd7089efbc079c70453a49814a742a023583947f2d85ddaf3ff1538adc253f8a861c9a4fd1d8ee8c4708a7a9809372b9827a968c9b8bcd2cabc6aa875ef37b82330f747cd56a92d0fcfe8765168ea1e7300c57f65db48b0ce2f5670c4f3a1a424f1efa5b56fce"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000fc0)='/sys/devices/virtual/tty/ptyd9/power/control\x00', 0x129400, 0x0) r18 = getgid() shmctl$auto(0x7fffffff, 0xc, &(0x7f0000003000)={{0x0, r12, r18, 0x3, 0x1400, 0x6, 0x1}, 0xd3b, 0x8001, 0x8000000000000000, 0x2, @raw=0x3, @inferred=r11, 0x1, 0x0, &(0x7f0000001000)="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", &(0x7f0000002000)="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"}) 1.902689426s ago: executing program 0 (id=11451): write$auto(0xffffffffffffffff, 0x0, 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xff\x00'/21, 0x100000002, 0x100000001) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) ioctl$auto_BLKTRACESETUP32(r4, 0xc0401273, &(0x7f0000000080)={"a49d980a059fa15ab42df574526717a42787c7192a7e12417113edfa3556973a", 0xb, 0x7, 0x8, 0x9, 0x1000, 0xffffffffffffffff}) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, 0x0, 0x101400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) 1.701714858s ago: executing program 1 (id=11452): mkdir$auto(&(0x7f0000000100)='./file0\x00', 0x8cd) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x2, &(0x7f0000000300)={[0x3, 0xff, 0x8, 0x7, 0x8, 0x2, 0x26, 0x2, 0xfe2, 0x6, 0xe, 0x7, 0x100000001, 0xffffffff80000001, 0x2, 0x8c]}, 0x0, 0x0, &(0x7f0000000480)={0x9, 0x9}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x200, 0x4) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x4) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000380)={0x6, [0x1ff, 0xfff, 0x4], [{0x1, 0xff, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x80, 0x0, 0x0, 0x1, 0x1}, {0x1ff, 0x6, 0x1, 0x1}, {0x7fff, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x3590, 0x3, 0x1, 0x0, 0x1}, {0x0, 0x20, 0x0, 0x0, 0x1, 0x1}, {0x5d6, 0x7, 0x1, 0x1}, {0x80000000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xdf, 0x1}, {0x2, 0xe, 0x1, 0x1, 0x0, 0x1}], 0x7, 0x4, 0xc, 0x6, 0x200, 0x401, 0xfffffffffffffeff, "88a3e32921c700e8d189a7534ad6f347345887ce689fe346dc02809645f1f9764dec9ad2d83992be6dca670abe2c982f2ab6b63bb60a4bbeaac81d42794f97b1"}) 1.589097754s ago: executing program 3 (id=11453): write$auto(0xffffffffffffffff, 0x0, 0xa) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) bind$auto(0xffffffffffffffff, 0x0, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000424bd7000f7dbdf250100003f"], 0x14}, 0x1, 0x0, 0x0, 0x44041}, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 733.725096ms ago: executing program 3 (id=11454): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22641, 0x0) lseek$auto(0x3, 0x2, 0x4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2c, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) sendto$auto(0xffffffffffffffff, 0x0, 0x8000000008000, 0x0, 0x0, 0x80) r1 = io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0xa001, 0x0) r2 = open(0x0, 0x22040, 0x75) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f4) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES16, @ANYRESHEX=r1, @ANYBLOB="c1f050d04069eb9993cdc376dcc54877ec379609e393ecac66db8bc8575d51c6a087088b393bb4e27155a3fdb5773276e29da116d38bd6c7133ed3efba8bdfa2a7d3c63b45fcd9496cf3b4442be4fd157b8581e82f0dd10c53234bd1df968e1173f3861fe6c9a4000accb79c917831e0a8ef574b", @ANYBLOB="e9aecc05c92d95c71ca66ff0b89f549f9b807c80f3126c359522fe88b560a897cce0af7cc71958a15bd81c4f82847e57f3d834c7d522f89ed1dcb63c0723ab7fe580a89807c9b564fc5e326f918eb14402bcbb5eb8fc39264ec069776a0308a7816b8c9822e3ca7e85e957f93eb819872b2858", @ANYBLOB="2be9d2de2535c2c15bc1b12403f6e3d8412934e56668bad57ada43ce6e24dbe607eb53931e95a7a75a72ea81bb95292f93ddddad03cd575ace38f3be6de2a858128aa5ce35da6a7cb30174709b6873f668455716b66b93c234ccaa84beaae3c0f9f103770db44a0098c82026f26149ab4dd0aed9a19eca", @ANYRES32=r0, @ANYRES64=r2], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f00000000c0)=@bpf_attr_7={@start_id=0x6, 0xa, 0x9, r0}, 0xf06) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 107.128525ms ago: executing program 1 (id=11455): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x26, 0x5, 0x8c68) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyra\x00', 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000040)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x6, 0x7, 0x2) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0) read$auto(r4, 0x0, 0xb4d3) unshare$auto(0x40000080) setsockopt$auto(r0, 0xd0, 0x800000e4, 0x0, 0x569) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 0s ago: executing program 0 (id=11456): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, 0x0, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40400) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000001, 0x9, 0x5, 0x0, 0x85b5, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0xfc, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x8, 0x20000001, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x0, 0x80800, 0x0, 0x8001, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x2000000000000001]}, 0xffff, 0x7d) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0xa) semctl$auto(0x7, 0x2, 0x13, 0x1) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)="080000008bc2c98324a8dc") kernel console output (not intermixed with test programs): 3459.483167][T32389] kernel_init_freeable+0x6e5/0x7a0 [ 3459.483187][T32389] kernel_init+0x1f/0x1e0 [ 3459.488754][T32389] ret_from_fork+0x754/0xd80 [ 3459.488806][T32389] ret_from_fork_asm+0x1a/0x30 [ 3459.732455][T32403] random: crng reseeded on system resumption [ 3461.853730][T32450] random: crng reseeded on system resumption [ 3461.871920][T32450] FAULT_INJECTION: forcing a failure. [ 3461.871920][T32450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3461.927892][T32450] CPU: 0 UID: 0 PID: 32450 Comm: syz.0.10978 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3461.927940][T32450] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3461.927947][T32450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3461.927957][T32450] Call Trace: [ 3461.927964][T32450] [ 3461.927971][T32450] dump_stack_lvl+0x100/0x190 [ 3461.928000][T32450] should_fail_ex.cold+0x5/0xa [ 3461.928016][T32450] ? prepare_alloc_pages+0x16d/0x5f0 [ 3461.928036][T32450] should_fail_alloc_page+0xeb/0x140 [ 3461.928053][T32450] prepare_alloc_pages+0x1f0/0x5f0 [ 3461.928076][T32450] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 3461.928106][T32450] ? stack_trace_save+0x8e/0xc0 [ 3461.928122][T32450] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3461.928144][T32450] ? stack_depot_save_flags+0x27/0x9d0 [ 3461.928162][T32450] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3461.928186][T32450] ? kasan_save_stack+0x3f/0x50 [ 3461.928207][T32450] ? kasan_save_stack+0x30/0x50 [ 3461.928228][T32450] ? kasan_save_track+0x14/0x30 [ 3461.928253][T32450] ? do_sys_openat2+0x10d/0x1e0 [ 3461.928271][T32450] ? __x64_sys_openat+0x12d/0x210 [ 3461.928289][T32450] ? do_syscall_64+0x106/0xf80 [ 3461.928306][T32450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3461.928323][T32450] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3461.928348][T32450] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3461.928373][T32450] ? policy_nodemask+0xed/0x4f0 [ 3461.928390][T32450] alloc_pages_mpol+0x1fb/0x550 [ 3461.928408][T32450] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3461.928428][T32450] alloc_pages_noprof+0x131/0x390 [ 3461.928445][T32450] get_zeroed_page_noprof+0x18/0xb0 [ 3461.928462][T32450] get_image_page+0x18/0x1a0 [ 3461.928485][T32450] memory_bm_create+0x432/0xba0 [ 3461.928517][T32450] create_basic_memory_bitmaps+0x10b/0x350 [ 3461.928536][T32450] snapshot_open+0x230/0x2a0 [ 3461.928552][T32450] ? __pfx_snapshot_open+0x10/0x10 [ 3461.928576][T32450] misc_open+0x26d/0x450 [ 3461.928603][T32450] ? __pfx_misc_open+0x10/0x10 [ 3461.928627][T32450] chrdev_open+0x234/0x6a0 [ 3461.928642][T32450] ? __pfx_apparmor_file_open+0x10/0x10 [ 3461.928664][T32450] ? __pfx_chrdev_open+0x10/0x10 [ 3461.928681][T32450] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 3461.928701][T32450] do_dentry_open+0x6d8/0x1660 [ 3461.928715][T32450] ? __pfx_chrdev_open+0x10/0x10 [ 3461.928736][T32450] vfs_open+0x82/0x3f0 [ 3461.928758][T32450] path_openat+0x208c/0x31a0 [ 3461.928780][T32450] ? __pfx_path_openat+0x10/0x10 [ 3461.928803][T32450] do_file_open+0x20e/0x430 [ 3461.928819][T32450] ? __pfx_do_file_open+0x10/0x10 [ 3461.928848][T32450] ? alloc_fd+0x476/0x790 [ 3461.928865][T32450] ? do_getname+0x191/0x390 [ 3461.928885][T32450] do_sys_openat2+0x10d/0x1e0 [ 3461.928904][T32450] ? __pfx_do_sys_openat2+0x10/0x10 [ 3461.928924][T32450] ? find_held_lock+0x2b/0x80 [ 3461.928957][T32450] __x64_sys_openat+0x12d/0x210 [ 3461.928997][T32450] ? __pfx___x64_sys_openat+0x10/0x10 [ 3461.929046][T32450] do_syscall_64+0x106/0xf80 [ 3461.929079][T32450] ? clear_bhb_loop+0x40/0x90 [ 3461.929100][T32450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3461.929116][T32450] RIP: 0033:0x7fa00db9c799 [ 3461.929130][T32450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3461.929149][T32450] RSP: 002b:00007fa00eaeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3461.929176][T32450] RAX: ffffffffffffffda RBX: 00007fa00de15fa0 RCX: 00007fa00db9c799 [ 3461.929195][T32450] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 3461.929213][T32450] RBP: 00007fa00dc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3461.929230][T32450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3461.929248][T32450] R13: 00007fa00de16038 R14: 00007fa00de15fa0 R15: 00007ffc12e0d968 [ 3461.929273][T32450] [ 3462.714119][T32450] netlink: 342 bytes leftover after parsing attributes in process `syz.0.10978'. [ 3462.874005][T32463] random: crng reseeded on system resumption [ 3463.110239][T32468] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input27 [ 3464.170171][T32480] Invalid ELF header magic: != ELF [ 3464.907824][T32478] FAULT_INJECTION: forcing a failure. [ 3464.907824][T32478] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3464.907870][T32478] CPU: 1 UID: 0 PID: 32478 Comm: syz.4.10983 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3464.907913][T32478] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3464.907923][T32478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3464.907940][T32478] Call Trace: [ 3464.907949][T32478] [ 3464.907960][T32478] dump_stack_lvl+0x100/0x190 [ 3464.908005][T32478] should_fail_ex.cold+0x5/0xa [ 3464.908039][T32478] get_futex_key+0x107c/0x1620 [ 3464.908077][T32478] ? __pfx_get_futex_key+0x10/0x10 [ 3464.908107][T32478] ? lock_acquire+0x1cf/0x380 [ 3464.908155][T32478] futex_wake+0xea/0x530 [ 3464.908199][T32478] ? __pfx_futex_wake+0x10/0x10 [ 3464.908247][T32478] ? exit_mm_release+0x19/0x30 [ 3464.908291][T32478] do_futex+0x32b/0x350 [ 3464.908327][T32478] ? __pfx_do_futex+0x10/0x10 [ 3464.908360][T32478] ? __might_fault+0xc5/0x140 [ 3464.908408][T32478] mm_release+0x24a/0x2f0 [ 3464.908437][T32478] do_exit+0x675/0x2aa0 [ 3464.908478][T32478] ? __pfx_do_exit+0x10/0x10 [ 3464.908513][T32478] ? do_raw_spin_lock+0x128/0x260 [ 3464.908551][T32478] ? find_held_lock+0x2b/0x80 [ 3464.908576][T32478] ? get_signal+0x7e0/0x21e0 [ 3464.908608][T32478] do_group_exit+0xd5/0x2a0 [ 3464.908648][T32478] get_signal+0x1ec7/0x21e0 [ 3464.908685][T32478] ? ksys_write+0x190/0x250 [ 3464.908728][T32478] ? __pfx_get_signal+0x10/0x10 [ 3464.908758][T32478] ? do_futex+0x192/0x350 [ 3464.908796][T32478] arch_do_signal_or_restart+0x91/0x770 [ 3464.908830][T32478] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3464.908871][T32478] ? __pfx___x64_sys_futex+0x10/0x10 [ 3464.908915][T32478] exit_to_user_mode_loop+0x86/0x4a0 [ 3464.908953][T32478] do_syscall_64+0x668/0xf80 [ 3464.908983][T32478] ? clear_bhb_loop+0x40/0x90 [ 3464.909015][T32478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3464.909043][T32478] RIP: 0033:0x7fb6a939c799 [ 3464.909065][T32478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3464.909092][T32478] RSP: 002b:00007fb6aa2c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3464.909118][T32478] RAX: fffffffffffffe00 RBX: 00007fb6a9615fa8 RCX: 00007fb6a939c799 [ 3464.909137][T32478] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb6a9615fa8 [ 3464.909154][T32478] RBP: 00007fb6a9615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3464.909170][T32478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3464.909186][T32478] R13: 00007fb6a9616038 R14: 00007ffe4a0d2950 R15: 00007ffe4a0d2a38 [ 3464.909230][T32478] [ 3465.379517][T32510] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 3465.379541][T32510] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3465.379554][T32510] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3465.379571][T32510] page_type: f5(slab) [ 3465.379587][T32510] raw: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3465.379603][T32510] raw: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3465.379618][T32510] head: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3465.379633][T32510] head: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3465.379647][T32510] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 3465.379662][T32510] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3465.379671][T32510] page dumped because: unmovable page [ 3465.379680][T32510] page_owner tracks the page as allocated [ 3465.379687][T32510] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5206, tgid 5206 (udevadm), ts 30341852540, free_ts 24412258221 [ 3465.379717][T32510] post_alloc_hook+0x153/0x170 [ 3465.379742][T32510] get_page_from_freelist+0x111d/0x3140 [ 3465.379764][T32510] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 3465.379787][T32510] new_slab+0xa6/0x6d0 [ 3465.380147][T32510] refill_objects+0x26b/0x400 [ 3465.380189][T32510] __pcs_replace_empty_main+0x19f/0x600 [ 3465.380226][T32510] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 3465.380249][T32510] alloc_inode+0x183/0x250 [ 3465.380268][T32510] iget_locked+0x1d9/0x6d0 [ 3465.380288][T32510] kernfs_get_inode+0x46/0x470 [ 3465.380307][T32510] kernfs_iop_lookup+0x1a7/0x2d0 [ 3465.380328][T32510] __lookup_slow+0x251/0x460 [ 3465.380346][T32510] lookup_slow+0x50/0x70 [ 3465.380364][T32510] path_lookupat+0x5e8/0xc40 [ 3465.380383][T32510] filename_lookup+0x202/0x590 [ 3465.380405][T32510] do_readlinkat+0xd3/0x370 [ 3465.380421][T32510] page last free pid 1 tgid 1 stack trace: [ 3465.380431][T32510] __free_frozen_pages+0x7e1/0x10d0 [ 3465.380449][T32510] free_contig_range+0xde/0x1d0 [ 3465.380466][T32510] destroy_args+0xa8/0x7a0 [ 3465.380489][T32510] debug_vm_pgtable+0x1b66/0x34c0 [ 3465.380508][T32510] do_one_initcall+0x11d/0x760 [ 3465.380525][T32510] kernel_init_freeable+0x6e5/0x7a0 [ 3465.380546][T32510] kernel_init+0x1f/0x1e0 [ 3465.380567][T32510] ret_from_fork+0x754/0xd80 [ 3465.380589][T32510] ret_from_fork_asm+0x1a/0x30 [ 3466.698351][T32531] netlink: 'syz.1.10996': attribute type 19 has an invalid length. [ 3466.698371][T32531] netlink: 226 bytes leftover after parsing attributes in process `syz.1.10996'. [ 3468.017464][T32561] random: crng reseeded on system resumption [ 3468.426101][T32564] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input28 [ 3469.363805][T32590] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 3469.411201][T32590] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3469.487907][T32590] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3469.521107][T32596] netlink: 342 bytes leftover after parsing attributes in process `syz.0.11007'. [ 3469.611394][T32590] page_type: f5(slab) [ 3469.645200][T32590] raw: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3469.694885][T32590] raw: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3469.743009][T32590] head: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3469.812091][T32590] head: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3469.843576][T32590] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 3469.955982][T32590] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3470.008955][T32604] FAULT_INJECTION: forcing a failure. [ 3470.008955][T32604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3470.022378][T32590] page dumped because: unmovable page [ 3470.044825][T32604] CPU: 1 UID: 0 PID: 32604 Comm: syz.4.11011 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3470.044866][T32604] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3470.044877][T32604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3470.044892][T32604] Call Trace: [ 3470.044902][T32604] [ 3470.044912][T32604] dump_stack_lvl+0x100/0x190 [ 3470.044956][T32604] should_fail_ex.cold+0x5/0xa [ 3470.044987][T32604] _copy_from_user+0x2e/0xd0 [ 3470.045030][T32604] ctl_ioctl+0xf3/0xcd0 [ 3470.045165][T32604] ? __pfx_ctl_ioctl+0x10/0x10 [ 3470.045232][T32604] ? __fget_files+0x21f/0x3d0 [ 3470.045264][T32604] dm_ctl_ioctl+0x22/0x30 [ 3470.045294][T32604] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 3470.045325][T32604] __x64_sys_ioctl+0x18e/0x210 [ 3470.045367][T32604] do_syscall_64+0x106/0xf80 [ 3470.045399][T32604] ? clear_bhb_loop+0x40/0x90 [ 3470.045433][T32604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3470.045462][T32604] RIP: 0033:0x7fb6a939c799 [ 3470.045486][T32604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3470.045513][T32604] RSP: 002b:00007fb6aa2c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3470.045538][T32604] RAX: ffffffffffffffda RBX: 00007fb6a9615fa0 RCX: 00007fb6a939c799 [ 3470.045557][T32604] RDX: 00002000000001c0 RSI: fffffff7effffd04 RDI: 0000000000000003 [ 3470.045575][T32604] RBP: 00007fb6aa2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 3470.045595][T32604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3470.045612][T32604] R13: 00007fb6a9616038 R14: 00007fb6a9615fa0 R15: 00007ffe4a0d2a38 [ 3470.045650][T32604] [ 3470.068486][T32590] page_owner tracks the page as allocated [ 3470.068593][T32590] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5206, tgid 5206 (udevadm), ts 30341852540, free_ts 24412258221 [ 3470.068630][T32590] post_alloc_hook+0x153/0x170 [ 3470.068655][T32590] get_page_from_freelist+0x111d/0x3140 [ 3470.068677][T32590] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 3470.068700][T32590] new_slab+0xa6/0x6d0 [ 3470.068718][T32590] refill_objects+0x26b/0x400 [ 3470.068737][T32590] __pcs_replace_empty_main+0x19f/0x600 [ 3470.068762][T32590] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 3470.068784][T32590] alloc_inode+0x183/0x250 [ 3470.068803][T32590] iget_locked+0x1d9/0x6d0 [ 3470.068821][T32590] kernfs_get_inode+0x46/0x470 [ 3470.068841][T32590] kernfs_iop_lookup+0x1a7/0x2d0 [ 3470.068861][T32590] __lookup_slow+0x251/0x460 [ 3470.068880][T32590] lookup_slow+0x50/0x70 [ 3470.068897][T32590] path_lookupat+0x5e8/0xc40 [ 3470.068917][T32590] filename_lookup+0x202/0x590 [ 3470.068939][T32590] do_readlinkat+0xd3/0x370 [ 3470.068956][T32590] page last free pid 1 tgid 1 stack trace: [ 3470.068965][T32590] __free_frozen_pages+0x7e1/0x10d0 [ 3470.068984][T32590] free_contig_range+0xde/0x1d0 [ 3470.069001][T32590] destroy_args+0xa8/0x7a0 [ 3470.069020][T32590] debug_vm_pgtable+0x1b66/0x34c0 [ 3470.069040][T32590] do_one_initcall+0x11d/0x760 [ 3470.069056][T32590] kernel_init_freeable+0x6e5/0x7a0 [ 3470.069075][T32590] kernel_init+0x1f/0x1e0 [ 3470.069097][T32590] ret_from_fork+0x754/0xd80 [ 3470.069118][T32590] ret_from_fork_asm+0x1a/0x30 [ 3470.595547][T32618] random: crng reseeded on system resumption [ 3472.369770][T32655] FAULT_INJECTION: forcing a failure. [ 3472.369770][T32655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3472.369801][T32655] CPU: 0 UID: 0 PID: 32655 Comm: syz.4.11018 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3472.369824][T32655] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3472.369830][T32655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3472.369839][T32655] Call Trace: [ 3472.369845][T32655] [ 3472.369851][T32655] dump_stack_lvl+0x100/0x190 [ 3472.369877][T32655] should_fail_ex.cold+0x5/0xa [ 3472.369895][T32655] _copy_to_user+0x32/0xd0 [ 3472.369921][T32655] cpuid_read+0x1d9/0x360 [ 3472.369943][T32655] ? __pfx_cpuid_read+0x10/0x10 [ 3472.369961][T32655] ? __pfx_cpuid_smp_cpuid+0x10/0x10 [ 3472.369979][T32655] ? __pfx___might_resched+0x10/0x10 [ 3472.370007][T32655] ? apparmor_file_permission+0x13f/0x1c0 [ 3472.370032][T32655] ? bpf_lsm_file_permission+0x9/0x10 [ 3472.370056][T32655] ? security_file_permission+0x76/0x210 [ 3472.370075][T32655] ? rw_verify_area+0xce/0x6d0 [ 3472.370103][T32655] ? __pfx_cpuid_read+0x10/0x10 [ 3472.370121][T32655] vfs_readv+0x5d8/0x8d0 [ 3472.370147][T32655] ? __pfx_vfs_readv+0x10/0x10 [ 3472.370169][T32655] ? find_held_lock+0x2b/0x80 [ 3472.370194][T32655] ? __fget_files+0x21f/0x3d0 [ 3472.370213][T32655] ? do_readv+0x13e/0x340 [ 3472.370232][T32655] do_readv+0x13e/0x340 [ 3472.370253][T32655] ? __pfx_do_readv+0x10/0x10 [ 3472.370280][T32655] do_syscall_64+0x106/0xf80 [ 3472.370297][T32655] ? clear_bhb_loop+0x40/0x90 [ 3472.370316][T32655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3472.370331][T32655] RIP: 0033:0x7fb6a939c799 [ 3472.370345][T32655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3472.370359][T32655] RSP: 002b:00007fb6aa2c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 3472.370374][T32655] RAX: ffffffffffffffda RBX: 00007fb6a9615fa0 RCX: 00007fb6a939c799 [ 3472.370384][T32655] RDX: 0000000000000003 RSI: 0000200000000680 RDI: 0000000000000002 [ 3472.370393][T32655] RBP: 00007fb6aa2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 3472.370402][T32655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3472.370411][T32655] R13: 00007fb6a9616038 R14: 00007fb6a9615fa0 R15: 00007ffe4a0d2a38 [ 3472.370430][T32655] [ 3472.810081][T32666] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 3472.810120][T32666] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3472.810147][T32666] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3472.810176][T32666] page_type: f5(slab) [ 3472.810204][T32666] raw: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3472.810234][T32666] raw: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3472.810263][T32666] head: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3472.810290][T32666] head: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3472.810320][T32666] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 3472.810349][T32666] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3472.810367][T32666] page dumped because: unmovable page [ 3472.810381][T32666] page_owner tracks the page as allocated [ 3472.810394][T32666] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5206, tgid 5206 (udevadm), ts 30341852540, free_ts 24412258221 [ 3472.810449][T32666] post_alloc_hook+0x153/0x170 [ 3472.810493][T32666] get_page_from_freelist+0x111d/0x3140 [ 3472.810535][T32666] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 3472.810575][T32666] new_slab+0xa6/0x6d0 [ 3472.812046][T32666] refill_objects+0x26b/0x400 [ 3472.812094][T32666] __pcs_replace_empty_main+0x19f/0x600 [ 3472.812138][T32666] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 3472.812180][T32666] alloc_inode+0x183/0x250 [ 3472.812218][T32666] iget_locked+0x1d9/0x6d0 [ 3472.812255][T32666] kernfs_get_inode+0x46/0x470 [ 3472.812293][T32666] kernfs_iop_lookup+0x1a7/0x2d0 [ 3472.812335][T32666] __lookup_slow+0x251/0x460 [ 3472.812371][T32666] lookup_slow+0x50/0x70 [ 3472.812406][T32666] path_lookupat+0x5e8/0xc40 [ 3472.812454][T32666] filename_lookup+0x202/0x590 [ 3472.812496][T32666] do_readlinkat+0xd3/0x370 [ 3472.812527][T32666] page last free pid 1 tgid 1 stack trace: [ 3472.812544][T32666] __free_frozen_pages+0x7e1/0x10d0 [ 3472.812586][T32666] free_contig_range+0xde/0x1d0 [ 3472.812623][T32666] destroy_args+0xa8/0x7a0 [ 3472.812660][T32666] debug_vm_pgtable+0x1b66/0x34c0 [ 3472.812697][T32666] do_one_initcall+0x11d/0x760 [ 3472.812728][T32666] kernel_init_freeable+0x6e5/0x7a0 [ 3472.812774][T32666] kernel_init+0x1f/0x1e0 [ 3472.812817][T32666] ret_from_fork+0x754/0xd80 [ 3472.812859][T32666] ret_from_fork_asm+0x1a/0x30 [ 3472.836221][T32666] netlink: 342 bytes leftover after parsing attributes in process `syz.0.11021'. [ 3474.836288][T32702] FAULT_INJECTION: forcing a failure. [ 3474.836288][T32702] name failslab, interval 1, probability 0, space 0, times 0 [ 3474.836379][T32702] CPU: 1 UID: 0 PID: 32702 Comm: syz.4.11027 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3474.836405][T32702] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3474.836411][T32702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3474.836421][T32702] Call Trace: [ 3474.836428][T32702] [ 3474.836435][T32702] dump_stack_lvl+0x100/0x190 [ 3474.836472][T32702] should_fail_ex.cold+0x5/0xa [ 3474.836504][T32702] should_failslab+0xc2/0x120 [ 3474.836532][T32702] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 3474.836564][T32702] ? mas_alloc_nodes+0x280/0x390 [ 3474.836584][T32702] mas_alloc_nodes+0x280/0x390 [ 3474.836601][T32702] mas_preallocate+0x39c/0xf10 [ 3474.836623][T32702] ? __pfx_mas_preallocate+0x10/0x10 [ 3474.836646][T32702] ? vm_area_alloc+0x1f/0x160 [ 3474.836667][T32702] ? lockdep_init_map_type+0x5c/0x250 [ 3474.836689][T32702] __mmap_region+0x12b5/0x29e0 [ 3474.836714][T32702] ? __pfx___mmap_region+0x10/0x10 [ 3474.836741][T32702] ? process_measurement+0x1f4/0x2350 [ 3474.836836][T32702] ? is_bpf_text_address+0x94/0x1a0 [ 3474.836878][T32702] ? kernel_text_address+0x8d/0x100 [ 3474.836918][T32702] ? __kernel_text_address+0xd/0x30 [ 3474.837010][T32702] ? rcu_is_watching+0x12/0xc0 [ 3474.837052][T32702] ? cap_capable+0x107/0x460 [ 3474.837096][T32702] mmap_region+0x180/0x3e0 [ 3474.837143][T32702] do_mmap+0xc63/0x12f0 [ 3474.837180][T32702] ? __pfx_do_mmap+0x10/0x10 [ 3474.837210][T32702] ? __pfx_down_write_killable+0x10/0x10 [ 3474.837258][T32702] vm_mmap_pgoff+0x29e/0x470 [ 3474.837295][T32702] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3474.837331][T32702] ? __fget_files+0x215/0x3d0 [ 3474.837359][T32702] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3474.837401][T32702] ksys_mmap_pgoff+0xe1/0x650 [ 3474.837434][T32702] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 3474.837461][T32702] ? fput+0x79/0x100 [ 3474.837516][T32702] ? ksys_write+0x1ac/0x250 [ 3474.837559][T32702] ? __pfx_ksys_write+0x10/0x10 [ 3474.837605][T32702] __x64_sys_mmap+0x125/0x190 [ 3474.837648][T32702] do_syscall_64+0x106/0xf80 [ 3474.837677][T32702] ? clear_bhb_loop+0x40/0x90 [ 3474.837710][T32702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3474.837738][T32702] RIP: 0033:0x7fb6a939c799 [ 3474.837761][T32702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3474.837784][T32702] RSP: 002b:00007fb6aa2a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3474.837810][T32702] RAX: ffffffffffffffda RBX: 00007fb6a9616090 RCX: 00007fb6a939c799 [ 3474.837829][T32702] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 3474.837846][T32702] RBP: 00007fb6aa2a6090 R08: fffffffffffffffa R09: 0000000000008000 [ 3474.837864][T32702] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 3474.837881][T32702] R13: 00007fb6a9616128 R14: 00007fb6a9616090 R15: 00007ffe4a0d2a38 [ 3474.837919][T32702] [ 3476.288689][T32733] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 3477.434875][T32753] FAULT_INJECTION: forcing a failure. [ 3477.434875][T32753] name failslab, interval 1, probability 0, space 0, times 0 [ 3477.522251][T32753] CPU: 1 UID: 0 PID: 32753 Comm: syz.1.11038 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3477.522295][T32753] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3477.522305][T32753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3477.522321][T32753] Call Trace: [ 3477.522331][T32753] [ 3477.522342][T32753] dump_stack_lvl+0x100/0x190 [ 3477.522388][T32753] should_fail_ex.cold+0x5/0xa [ 3477.522420][T32753] should_failslab+0xc2/0x120 [ 3477.522449][T32753] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 3477.522497][T32753] ? can_rx_register+0x582/0x6f0 [ 3477.522516][T32753] ? lockdep_hardirqs_on+0x78/0x100 [ 3477.522539][T32753] can_rx_register+0x582/0x6f0 [ 3477.522553][T32753] ? __pfx_bcm_rx_handler+0x10/0x10 [ 3477.522576][T32753] ? __pfx_can_rx_register+0x10/0x10 [ 3477.522593][T32753] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3477.522622][T32753] bcm_sendmsg+0xcd0/0x44e0 [ 3477.522647][T32753] ? __pfx_bcm_sendmsg+0x10/0x10 [ 3477.522666][T32753] ? __pfx_aa_sk_perm+0x10/0x10 [ 3477.522697][T32753] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 3477.522720][T32753] ____sys_sendmsg+0xa54/0xc30 [ 3477.522746][T32753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3477.522772][T32753] ? rcu_core+0x5a2/0x10d0 [ 3477.522790][T32753] ? kasan_save_stack+0x3f/0x50 [ 3477.522812][T32753] ? kasan_save_stack+0x30/0x50 [ 3477.522836][T32753] ___sys_sendmsg+0x190/0x1e0 [ 3477.522859][T32753] ? __pfx____sys_sendmsg+0x10/0x10 [ 3477.522891][T32753] ? find_held_lock+0x2b/0x80 [ 3477.522918][T32753] __sys_sendmmsg+0x205/0x430 [ 3477.522939][T32753] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3477.522962][T32753] ? try_to_wake_up+0x160/0x1a80 [ 3477.522977][T32753] ? __pfx_sched_clock_cpu+0x10/0x10 [ 3477.523005][T32753] ? lockdep_softirqs_on+0xad/0x120 [ 3477.523025][T32753] ? handle_softirqs+0x86a/0x9e0 [ 3477.523046][T32753] __x64_sys_sendmmsg+0x9c/0x100 [ 3477.523063][T32753] ? lockdep_hardirqs_on+0x78/0x100 [ 3477.523081][T32753] do_syscall_64+0x106/0xf80 [ 3477.523110][T32753] ? clear_bhb_loop+0x40/0x90 [ 3477.523142][T32753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3477.523169][T32753] RIP: 0033:0x7f9d9d19c799 [ 3477.523195][T32753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3477.523221][T32753] RSP: 002b:00007f9d9e01e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3477.523249][T32753] RAX: ffffffffffffffda RBX: 00007f9d9d415fa0 RCX: 00007f9d9d19c799 [ 3477.523268][T32753] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 3477.523280][T32753] RBP: 00007f9d9e01e090 R08: 0000000000000000 R09: 0000000000000000 [ 3477.523289][T32753] R10: 0000000000001f00 R11: 0000000000000246 R12: 0000000000000001 [ 3477.523299][T32753] R13: 00007f9d9d416038 R14: 00007f9d9d415fa0 R15: 00007ffefd959428 [ 3477.523319][T32753] [ 3478.094029][T32757] netlink: 'syz.3.11037': attribute type 23 has an invalid length. [ 3478.442481][T32767] FAULT_INJECTION: forcing a failure. [ 3478.442481][T32767] name failslab, interval 1, probability 0, space 0, times 0 [ 3478.465364][T32767] CPU: 1 UID: 0 PID: 32767 Comm: syz.3.11041 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3478.465392][T32767] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3478.465398][T32767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3478.465408][T32767] Call Trace: [ 3478.465413][T32767] [ 3478.465420][T32767] dump_stack_lvl+0x100/0x190 [ 3478.465447][T32767] should_fail_ex.cold+0x5/0xa [ 3478.465465][T32767] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 3478.465481][T32767] should_failslab+0xc2/0x120 [ 3478.465497][T32767] __kmalloc_noprof+0xe0/0x850 [ 3478.465519][T32767] ? trace_kmalloc+0x101/0x130 [ 3478.465537][T32767] kernfs_fop_write_iter+0x26a/0x5f0 [ 3478.465555][T32767] iter_file_splice_write+0x830/0x10a0 [ 3478.465581][T32767] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3478.465600][T32767] ? __pfx_copy_splice_read+0x10/0x10 [ 3478.465633][T32767] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3478.465650][T32767] direct_splice_actor+0x192/0x6c0 [ 3478.465675][T32767] splice_direct_to_actor+0x345/0xa30 [ 3478.465700][T32767] ? __pfx_direct_splice_actor+0x10/0x10 [ 3478.465728][T32767] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3478.465757][T32767] do_splice_direct+0x174/0x240 [ 3478.465772][T32767] ? __pfx_do_splice_direct+0x10/0x10 [ 3478.465797][T32767] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 3478.465823][T32767] ? rw_verify_area+0xce/0x6d0 [ 3478.465846][T32767] do_sendfile+0xadc/0xe20 [ 3478.465877][T32767] ? __pfx_do_sendfile+0x10/0x10 [ 3478.465899][T32767] ? __fget_files+0x21f/0x3d0 [ 3478.465918][T32767] __x64_sys_sendfile64+0x1d8/0x220 [ 3478.465935][T32767] ? ksys_write+0x1ac/0x250 [ 3478.465957][T32767] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3478.465979][T32767] do_syscall_64+0x106/0xf80 [ 3478.465997][T32767] ? clear_bhb_loop+0x40/0x90 [ 3478.466016][T32767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3478.466032][T32767] RIP: 0033:0x7fa91db9c799 [ 3478.466044][T32767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3478.466059][T32767] RSP: 002b:00007fa91ea2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3478.466074][T32767] RAX: ffffffffffffffda RBX: 00007fa91de15fa0 RCX: 00007fa91db9c799 [ 3478.466084][T32767] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 3478.466093][T32767] RBP: 00007fa91ea2a090 R08: 0000000000000000 R09: 0000000000000000 [ 3478.466102][T32767] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 3478.466111][T32767] R13: 00007fa91de16038 R14: 00007fa91de15fa0 R15: 00007fff1d72f478 [ 3478.466131][T32767] [ 3479.447128][ T318] random: crng reseeded on system resumption [ 3479.475784][ T319] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 3479.570996][ T319] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3479.594863][ T319] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3479.613565][ T319] page_type: f5(slab) [ 3479.617570][ T319] raw: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3479.663045][ T319] raw: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3479.691511][ T324] netlink: 342 bytes leftover after parsing attributes in process `syz.0.11046'. [ 3479.712421][ T326] FAULT_INJECTION: forcing a failure. [ 3479.712421][ T326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3479.731284][ T319] head: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3479.756957][ T319] head: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3479.773639][ T326] CPU: 1 UID: 0 PID: 326 Comm: syz.4.11048 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3479.773686][ T326] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3479.773697][ T326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3479.773714][ T326] Call Trace: [ 3479.773732][ T326] [ 3479.773743][ T326] dump_stack_lvl+0x100/0x190 [ 3479.773790][ T326] should_fail_ex.cold+0x5/0xa [ 3479.773820][ T326] _copy_from_user+0x2e/0xd0 [ 3479.773863][ T326] copy_msghdr_from_user+0x9f/0x4f0 [ 3479.773907][ T326] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3479.773953][ T326] ? rcu_is_watching+0x12/0xc0 [ 3479.773991][ T326] ? ___sys_sendmsg+0x19d/0x1e0 [ 3479.774030][ T326] ? kfree+0x2ec/0x6b0 [ 3479.774070][ T326] ___sys_sendmsg+0x106/0x1e0 [ 3479.774114][ T326] ? __pfx____sys_sendmsg+0x10/0x10 [ 3479.774188][ T326] ? __pfx___might_resched+0x10/0x10 [ 3479.774234][ T326] __sys_sendmmsg+0x205/0x430 [ 3479.774271][ T326] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3479.774316][ T326] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3479.774367][ T326] ? fput+0x79/0x100 [ 3479.774398][ T326] ? ksys_write+0x1ac/0x250 [ 3479.774437][ T326] ? __pfx_ksys_write+0x10/0x10 [ 3479.774483][ T326] __x64_sys_sendmmsg+0x9c/0x100 [ 3479.774513][ T326] ? lockdep_hardirqs_on+0x78/0x100 [ 3479.774542][ T326] do_syscall_64+0x106/0xf80 [ 3479.774573][ T326] ? clear_bhb_loop+0x40/0x90 [ 3479.774606][ T326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3479.774638][ T326] RIP: 0033:0x7fb6a939c799 [ 3479.774661][ T326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3479.774687][ T326] RSP: 002b:00007fb6aa2c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3479.774713][ T326] RAX: ffffffffffffffda RBX: 00007fb6a9615fa0 RCX: 00007fb6a939c799 [ 3479.774742][ T326] RDX: 0000000000002004 RSI: 0000200000000200 RDI: 0000000000000003 [ 3479.774760][ T326] RBP: 00007fb6aa2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 3479.774778][ T326] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 3479.774795][ T326] R13: 00007fb6a9616038 R14: 00007fb6a9615fa0 R15: 00007ffe4a0d2a38 [ 3479.774832][ T326] [ 3480.085369][ T319] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 3480.107291][ T319] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3480.195185][ T319] page dumped because: unmovable page [ 3480.200606][ T319] page_owner tracks the page as allocated [ 3480.261862][ T319] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5206, tgid 5206 (udevadm), ts 30341852540, free_ts 24412258221 [ 3480.348537][ T329] netlink: 'syz.4.11049': attribute type 1 has an invalid length. [ 3480.379863][ T319] post_alloc_hook+0x153/0x170 [ 3480.447995][ T319] get_page_from_freelist+0x111d/0x3140 [ 3480.492353][ T319] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 3480.520418][ T319] new_slab+0xa6/0x6d0 [ 3480.546775][ T319] refill_objects+0x26b/0x400 [ 3480.582264][ T319] __pcs_replace_empty_main+0x19f/0x600 [ 3480.615634][ T319] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 3480.639962][ T319] alloc_inode+0x183/0x250 [ 3480.662984][ T319] iget_locked+0x1d9/0x6d0 [ 3480.669815][ T319] kernfs_get_inode+0x46/0x470 [ 3480.683286][ T319] kernfs_iop_lookup+0x1a7/0x2d0 [ 3480.703753][ T319] __lookup_slow+0x251/0x460 [ 3480.719318][ T319] lookup_slow+0x50/0x70 [ 3480.736901][ T319] path_lookupat+0x5e8/0xc40 [ 3480.757340][ T319] filename_lookup+0x202/0x590 [ 3480.775655][ T319] do_readlinkat+0xd3/0x370 [ 3480.792085][ T319] page last free pid 1 tgid 1 stack trace: [ 3480.811357][ T319] __free_frozen_pages+0x7e1/0x10d0 [ 3480.828081][ T319] free_contig_range+0xde/0x1d0 [ 3480.835002][ T319] destroy_args+0xa8/0x7a0 [ 3480.849309][ T319] debug_vm_pgtable+0x1b66/0x34c0 [ 3480.883307][ T319] do_one_initcall+0x11d/0x760 [ 3480.909575][ T319] kernel_init_freeable+0x6e5/0x7a0 [ 3480.931053][ T319] kernel_init+0x1f/0x1e0 [ 3480.943339][ T319] ret_from_fork+0x754/0xd80 [ 3480.958031][ T319] ret_from_fork_asm+0x1a/0x30 [ 3481.264649][ T349] random: crng reseeded on system resumption [ 3481.651444][ T363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11062'. [ 3482.614010][ T390] Setting dangerous option i915.mitigations - tainting kernel [ 3482.635099][ T387] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 3482.647741][ T387] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3482.666857][ T387] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3482.666891][ T387] page_type: f5(slab) [ 3482.666920][ T387] raw: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3482.666947][ T387] raw: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3482.676025][ T390] Bad "i915.mitigations=Î×ÚCmâUQüF\§Þ ", 'Î×ÚCmâUQüF\§Þ' is unknown [ 3482.679694][ T387] head: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3482.716731][ T393] FAULT_INJECTION: forcing a failure. [ 3482.716731][ T393] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3482.744817][ T392] netlink: 342 bytes leftover after parsing attributes in process `syz.3.11066'. [ 3482.763330][ T387] head: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3482.772120][ T387] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 3482.816118][ T387] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3482.843602][ T393] CPU: 0 UID: 0 PID: 393 Comm: syz.0.11074 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3482.843629][ T393] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3482.843635][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3482.843645][ T393] Call Trace: [ 3482.843650][ T393] [ 3482.843657][ T393] dump_stack_lvl+0x100/0x190 [ 3482.843685][ T393] should_fail_ex.cold+0x5/0xa [ 3482.843700][ T393] ? prepare_alloc_pages+0x16d/0x5f0 [ 3482.843720][ T393] should_fail_alloc_page+0xeb/0x140 [ 3482.843737][ T393] prepare_alloc_pages+0x1f0/0x5f0 [ 3482.843757][ T393] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 3482.843780][ T393] ? vhost_dev_set_owner+0x190/0xa30 [ 3482.843800][ T393] ? stack_trace_save+0x8e/0xc0 [ 3482.843816][ T393] ? __pfx_stack_trace_save+0x10/0x10 [ 3482.843831][ T393] ? stack_depot_save_flags+0x27/0x9d0 [ 3482.843848][ T393] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3482.843869][ T393] ? tomoyo_path_number_perm+0x46d/0x580 [ 3482.843895][ T393] ? vhost_dev_set_owner+0x190/0xa30 [ 3482.843912][ T393] ? kasan_save_stack+0x3f/0x50 [ 3482.843933][ T393] ? kasan_save_stack+0x30/0x50 [ 3482.843954][ T393] ? kasan_save_track+0x14/0x30 [ 3482.843976][ T393] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3482.843997][ T393] ? vhost_net_ioctl+0xfa3/0x1910 [ 3482.844015][ T393] ? __x64_sys_ioctl+0x18e/0x210 [ 3482.844034][ T393] ? do_syscall_64+0x106/0xf80 [ 3482.844065][ T393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3482.844098][ T393] ? policy_nodemask+0xed/0x4f0 [ 3482.844115][ T393] alloc_pages_mpol+0x1fb/0x550 [ 3482.844132][ T393] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3482.844149][ T393] ? rcu_is_watching+0x12/0xc0 [ 3482.844174][ T393] ___kmalloc_large_node+0x104/0x150 [ 3482.844193][ T393] __kmalloc_large_noprof+0x1c/0x70 [ 3482.844211][ T393] vhost_dev_set_owner+0x2b6/0xa30 [ 3482.844236][ T393] vhost_net_ioctl+0xfa3/0x1910 [ 3482.844253][ T393] ? do_vfs_ioctl+0x226/0x13e0 [ 3482.844274][ T393] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3482.844294][ T393] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 3482.844317][ T393] ? find_held_lock+0x2b/0x80 [ 3482.844331][ T393] ? __fget_files+0x215/0x3d0 [ 3482.844343][ T393] ? hook_file_ioctl_common+0x146/0x410 [ 3482.844371][ T393] ? __fget_files+0x21f/0x3d0 [ 3482.844387][ T393] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 3482.844407][ T393] __x64_sys_ioctl+0x18e/0x210 [ 3482.844429][ T393] do_syscall_64+0x106/0xf80 [ 3482.844445][ T393] ? clear_bhb_loop+0x40/0x90 [ 3482.844464][ T393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3482.844480][ T393] RIP: 0033:0x7fa00db9c799 [ 3482.844494][ T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3482.844508][ T393] RSP: 002b:00007fa00eaca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3482.844524][ T393] RAX: ffffffffffffffda RBX: 00007fa00de16090 RCX: 00007fa00db9c799 [ 3482.844534][ T393] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 3482.844543][ T393] RBP: 00007fa00eaca090 R08: 0000000000000000 R09: 0000000000000000 [ 3482.844551][ T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3482.844560][ T393] R13: 00007fa00de16128 R14: 00007fa00de16090 R15: 00007ffc12e0d968 [ 3482.844580][ T393] [ 3483.083825][ T387] page dumped because: unmovable page [ 3483.259604][ T387] page_owner tracks the page as allocated [ 3483.265432][ T387] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5206, tgid 5206 (udevadm), ts 30341852540, free_ts 24412258221 [ 3483.288206][ T387] post_alloc_hook+0x153/0x170 [ 3483.292977][ T387] get_page_from_freelist+0x111d/0x3140 [ 3483.298601][ T387] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 3483.304588][ T387] new_slab+0xa6/0x6d0 [ 3483.308686][ T387] refill_objects+0x26b/0x400 [ 3483.313447][ T387] __pcs_replace_empty_main+0x19f/0x600 [ 3483.319054][ T387] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 3483.324985][ T387] alloc_inode+0x183/0x250 [ 3483.329645][ T387] iget_locked+0x1d9/0x6d0 [ 3483.340468][ T387] kernfs_get_inode+0x46/0x470 [ 3483.363280][ T387] kernfs_iop_lookup+0x1a7/0x2d0 [ 3483.368345][ T387] __lookup_slow+0x251/0x460 [ 3483.394906][ T387] lookup_slow+0x50/0x70 [ 3483.445239][ T387] path_lookupat+0x5e8/0xc40 [ 3483.449868][ T387] filename_lookup+0x202/0x590 [ 3483.501197][ T387] do_readlinkat+0xd3/0x370 [ 3483.520760][ T387] page last free pid 1 tgid 1 stack trace: [ 3483.538403][ T387] __free_frozen_pages+0x7e1/0x10d0 [ 3483.566494][ T387] free_contig_range+0xde/0x1d0 [ 3483.575848][ T387] destroy_args+0xa8/0x7a0 [ 3483.593227][ T387] debug_vm_pgtable+0x1b66/0x34c0 [ 3483.625966][ T387] do_one_initcall+0x11d/0x760 [ 3483.643743][ T387] kernel_init_freeable+0x6e5/0x7a0 [ 3483.648962][ T387] kernel_init+0x1f/0x1e0 [ 3483.663360][ T387] ret_from_fork+0x754/0xd80 [ 3483.672385][ T387] ret_from_fork_asm+0x1a/0x30 [ 3484.436813][ T413] random: crng reseeded on system resumption [ 3484.690336][ T419] Setting dangerous option i915.mitigations - tainting kernel [ 3484.697999][ T419] Bad "i915.mitigations=Î×ÚCmâUQüF\§Þ ", 'Î×ÚCmâUQüF\§Þ' is unknown [ 3484.928033][ T426] Setting dangerous option i915.mitigations - tainting kernel [ 3484.965687][ T426] Bad "i915.mitigations=Î×ÚCmâUQüF\§Þ ", 'Î×ÚCmâUQüF\§Þ' is unknown [ 3484.969079][ T427] netlink: 'syz.3.11076': attribute type 1 has an invalid length. [ 3485.360312][ T440] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 3485.360346][ T440] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3485.360369][ T440] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3485.360397][ T440] page_type: f5(slab) [ 3485.360423][ T440] raw: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3485.360451][ T440] raw: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3485.360479][ T440] head: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 3485.360505][ T440] head: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 3485.360530][ T440] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 3485.360556][ T440] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3485.360573][ T440] page dumped because: unmovable page [ 3485.360587][ T440] page_owner tracks the page as allocated [ 3485.360600][ T440] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5206, tgid 5206 (udevadm), ts 30341852540, free_ts 24412258221 [ 3485.360653][ T440] post_alloc_hook+0x153/0x170 [ 3485.360694][ T440] get_page_from_freelist+0x111d/0x3140 [ 3485.360744][ T440] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 3485.360787][ T440] new_slab+0xa6/0x6d0 [ 3485.360818][ T440] refill_objects+0x26b/0x400 [ 3485.360854][ T440] __pcs_replace_empty_main+0x19f/0x600 [ 3485.360895][ T440] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 3485.360939][ T440] alloc_inode+0x183/0x250 [ 3485.360977][ T440] iget_locked+0x1d9/0x6d0 [ 3485.361013][ T440] kernfs_get_inode+0x46/0x470 [ 3485.361052][ T440] kernfs_iop_lookup+0x1a7/0x2d0 [ 3485.361093][ T440] __lookup_slow+0x251/0x460 [ 3485.361130][ T440] lookup_slow+0x50/0x70 [ 3485.361164][ T440] path_lookupat+0x5e8/0xc40 [ 3485.361202][ T440] filename_lookup+0x202/0x590 [ 3485.361242][ T440] do_readlinkat+0xd3/0x370 [ 3485.361272][ T440] page last free pid 1 tgid 1 stack trace: [ 3485.361290][ T440] __free_frozen_pages+0x7e1/0x10d0 [ 3485.361327][ T440] free_contig_range+0xde/0x1d0 [ 3485.361362][ T440] destroy_args+0xa8/0x7a0 [ 3485.361400][ T440] debug_vm_pgtable+0x1b66/0x34c0 [ 3485.361439][ T440] do_one_initcall+0x11d/0x760 [ 3485.361469][ T440] kernel_init_freeable+0x6e5/0x7a0 [ 3485.361507][ T440] kernel_init+0x1f/0x1e0 [ 3485.361548][ T440] ret_from_fork+0x754/0xd80 [ 3485.361589][ T440] ret_from_fork_asm+0x1a/0x30 [ 3485.409043][ T440] netlink: 342 bytes leftover after parsing attributes in process `syz.1.11081'. [ 3485.592277][ T445] qrtr: Invalid version 0 [ 3486.669704][ T456] random: crng reseeded on system resumption [ 3486.916371][ T463] FAULT_INJECTION: forcing a failure. [ 3486.916371][ T463] name failslab, interval 1, probability 0, space 0, times 0 [ 3486.946359][ T463] CPU: 1 UID: 0 PID: 463 Comm: syz.0.11087 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3486.946404][ T463] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3486.946413][ T463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3486.946428][ T463] Call Trace: [ 3486.946437][ T463] [ 3486.946448][ T463] dump_stack_lvl+0x100/0x190 [ 3486.946494][ T463] should_fail_ex.cold+0x5/0xa [ 3486.946521][ T463] ? tomoyo_realpath_from_path+0xb6/0x690 [ 3486.946551][ T463] should_failslab+0xc2/0x120 [ 3486.946579][ T463] __kmalloc_noprof+0xe0/0x850 [ 3486.946625][ T463] tomoyo_realpath_from_path+0xb6/0x690 [ 3486.946655][ T463] tomoyo_path2_perm+0x366/0x700 [ 3486.946679][ T463] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 3486.946701][ T463] ? stack_trace_save+0x8e/0xc0 [ 3486.946716][ T463] ? __pfx_stack_trace_save+0x10/0x10 [ 3486.946729][ T463] ? try_to_unlazy+0x296/0x910 [ 3486.946749][ T463] ? stack_depot_save_flags+0x27/0x9d0 [ 3486.946769][ T463] ? kasan_save_stack+0x30/0x50 [ 3486.946791][ T463] ? kasan_save_track+0x14/0x30 [ 3486.946811][ T463] ? kasan_save_free_info+0x3b/0x70 [ 3486.946829][ T463] ? __kasan_slab_free+0x5f/0x80 [ 3486.946860][ T463] ? rcu_is_watching+0x12/0xc0 [ 3486.946881][ T463] ? hook_sb_pivotroot+0x1e0/0x320 [ 3486.946896][ T463] ? apparmor_capable+0x1d7/0x4d0 [ 3486.946922][ T463] security_sb_pivotroot+0xc4/0x210 [ 3486.946944][ T463] path_pivot_root+0x14f/0x1320 [ 3486.946968][ T463] ? kasan_quarantine_put+0x104/0x240 [ 3486.946989][ T463] ? lockdep_hardirqs_on+0x78/0x100 [ 3486.947008][ T463] ? __pfx_path_pivot_root+0x10/0x10 [ 3486.947026][ T463] ? kmem_cache_free+0x124/0x6a0 [ 3486.947056][ T463] ? putname+0xb6/0x110 [ 3486.947073][ T463] __x64_sys_pivot_root+0x19a/0x1c0 [ 3486.947092][ T463] ? __pfx___x64_sys_pivot_root+0x10/0x10 [ 3486.947117][ T463] do_syscall_64+0x106/0xf80 [ 3486.947134][ T463] ? clear_bhb_loop+0x40/0x90 [ 3486.947152][ T463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3486.947168][ T463] RIP: 0033:0x7fa00db9c799 [ 3486.947181][ T463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3486.947196][ T463] RSP: 002b:00007fa00eaca028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 3486.947211][ T463] RAX: ffffffffffffffda RBX: 00007fa00de16090 RCX: 00007fa00db9c799 [ 3486.947221][ T463] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000140 [ 3486.947231][ T463] RBP: 00007fa00eaca090 R08: 0000000000000000 R09: 0000000000000000 [ 3486.947240][ T463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3486.947249][ T463] R13: 00007fa00de16128 R14: 00007fa00de16090 R15: 00007ffc12e0d968 [ 3486.947268][ T463] [ 3486.947578][ T463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3487.460169][ T478] FAULT_INJECTION: forcing a failure. [ 3487.460169][ T478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3487.486713][ T478] CPU: 0 UID: 0 PID: 478 Comm: syz.3.11090 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3487.486757][ T478] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3487.486768][ T478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3487.486784][ T478] Call Trace: [ 3487.486794][ T478] [ 3487.486805][ T478] dump_stack_lvl+0x100/0x190 [ 3487.486849][ T478] should_fail_ex.cold+0x5/0xa [ 3487.486881][ T478] _copy_to_user+0x32/0xd0 [ 3487.486926][ T478] simple_read_from_buffer+0xcb/0x170 [ 3487.486971][ T478] proc_fail_nth_read+0x1af/0x230 [ 3487.487007][ T478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3487.487042][ T478] ? rw_verify_area+0xce/0x6d0 [ 3487.487079][ T478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3487.487112][ T478] vfs_read+0x1e4/0xb30 [ 3487.487156][ T478] ? __pfx_vfs_read+0x10/0x10 [ 3487.487194][ T478] ? __fget_files+0x215/0x3d0 [ 3487.487227][ T478] ? __fget_files+0x21f/0x3d0 [ 3487.487262][ T478] ksys_read+0x12a/0x250 [ 3487.487302][ T478] ? __pfx_ksys_read+0x10/0x10 [ 3487.487353][ T478] do_syscall_64+0x106/0xf80 [ 3487.487383][ T478] ? clear_bhb_loop+0x40/0x90 [ 3487.487417][ T478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3487.487445][ T478] RIP: 0033:0x7fa91db5cfce [ 3487.487459][ T478] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3487.487474][ T478] RSP: 002b:00007fa91ea29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3487.487489][ T478] RAX: ffffffffffffffda RBX: 00007fa91ea2a6c0 RCX: 00007fa91db5cfce [ 3487.487500][ T478] RDX: 000000000000000f RSI: 00007fa91ea2a0a0 RDI: 0000000000000004 [ 3487.487509][ T478] RBP: 00007fa91ea2a090 R08: 0000000000000000 R09: 0000000000000000 [ 3487.487518][ T478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3487.487527][ T478] R13: 00007fa91de16038 R14: 00007fa91de15fa0 R15: 00007fff1d72f478 [ 3487.487547][ T478] [ 3489.639719][ T514] random: crng reseeded on system resumption [ 3490.037321][ T522] FAULT_INJECTION: forcing a failure. [ 3490.037321][ T522] name failslab, interval 1, probability 0, space 0, times 0 [ 3490.063707][ T522] CPU: 0 UID: 0 PID: 522 Comm: syz.4.11100 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3490.063735][ T522] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3490.063741][ T522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3490.063752][ T522] Call Trace: [ 3490.063757][ T522] [ 3490.063764][ T522] dump_stack_lvl+0x100/0x190 [ 3490.063795][ T522] should_fail_ex.cold+0x5/0xa [ 3490.063815][ T522] should_failslab+0xc2/0x120 [ 3490.063832][ T522] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 3490.063857][ T522] ? __d_alloc+0x34/0xa80 [ 3490.063877][ T522] __d_alloc+0x34/0xa80 [ 3490.063895][ T522] d_alloc_pseudo+0x1c/0xc0 [ 3490.063916][ T522] alloc_file_pseudo+0xcf/0x230 [ 3490.063937][ T522] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 3490.063956][ T522] ? alloc_fd+0x476/0x790 [ 3490.063973][ T522] sock_alloc_file+0x50/0x210 [ 3490.063995][ T522] __sys_socket+0x1c0/0x260 [ 3490.064018][ T522] ? __pfx___sys_socket+0x10/0x10 [ 3490.064046][ T522] __x64_sys_socket+0x72/0xb0 [ 3490.064068][ T522] ? lockdep_hardirqs_on+0x78/0x100 [ 3490.064088][ T522] do_syscall_64+0x106/0xf80 [ 3490.064105][ T522] ? clear_bhb_loop+0x40/0x90 [ 3490.064124][ T522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3490.064140][ T522] RIP: 0033:0x7fb6a939c799 [ 3490.064153][ T522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3490.064167][ T522] RSP: 002b:00007fb6aa2c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3490.064182][ T522] RAX: ffffffffffffffda RBX: 00007fb6a9615fa0 RCX: 00007fb6a939c799 [ 3490.064192][ T522] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 3490.064201][ T522] RBP: 00007fb6a9432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3490.064210][ T522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3490.064219][ T522] R13: 00007fb6a9616038 R14: 00007fb6a9615fa0 R15: 00007ffe4a0d2a38 [ 3490.064247][ T522] [ 3490.494722][ T522] FAULT_INJECTION: forcing a failure. [ 3490.494722][ T522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3490.573785][ T522] CPU: 0 UID: 0 PID: 522 Comm: syz.4.11100 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3490.573814][ T522] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3490.573820][ T522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3490.573830][ T522] Call Trace: [ 3490.573836][ T522] [ 3490.573842][ T522] dump_stack_lvl+0x100/0x190 [ 3490.573870][ T522] should_fail_ex.cold+0x5/0xa [ 3490.573886][ T522] ? fs_reclaim_acquire+0x70/0x100 [ 3490.573905][ T522] should_fail_alloc_page+0xeb/0x140 [ 3490.573923][ T522] prepare_alloc_pages+0x1f0/0x5f0 [ 3490.573943][ T522] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 3490.573965][ T522] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3490.573983][ T522] ? is_bpf_text_address+0x8a/0x1a0 [ 3490.574004][ T522] ? lock_release+0x263/0x320 [ 3490.574022][ T522] ? bpf_ksym_find+0x124/0x1c0 [ 3490.574039][ T522] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3490.574056][ T522] ? is_bpf_text_address+0x94/0x1a0 [ 3490.574078][ T522] ? kernel_text_address+0x8d/0x100 [ 3490.574099][ T522] ? __kernel_text_address+0xd/0x30 [ 3490.574119][ T522] ? unwind_get_return_address+0x59/0xa0 [ 3490.574136][ T522] ? arch_stack_walk+0xa6/0xf0 [ 3490.574150][ T522] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3490.574185][ T522] ? check_noncircular+0x97/0x160 [ 3490.574202][ T522] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3490.574227][ T522] ? policy_nodemask+0xed/0x4f0 [ 3490.574245][ T522] alloc_pages_mpol+0x1fb/0x550 [ 3490.574262][ T522] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3490.574278][ T522] ? __kasan_kmalloc+0xaa/0xb0 [ 3490.574299][ T522] ? __get_vm_area_node+0x101/0x330 [ 3490.574318][ T522] alloc_pages_noprof+0x131/0x390 [ 3490.574335][ T522] get_free_pages_noprof+0x10/0xb0 [ 3490.574350][ T522] __kasan_populate_vmalloc+0xa0/0x210 [ 3490.574377][ T522] alloc_vmap_area+0x95d/0x2bd0 [ 3490.574400][ T522] ? __pfx_alloc_vmap_area+0x10/0x10 [ 3490.574421][ T522] __get_vm_area_node+0x1ca/0x330 [ 3490.574440][ T522] ? relay_open_buf.part.0+0x40f/0xb70 [ 3490.574462][ T522] get_vm_area_caller+0x71/0xa0 [ 3490.574478][ T522] ? relay_open_buf.part.0+0x40f/0xb70 [ 3490.574500][ T522] vmap+0x131/0x2f0 [ 3490.574516][ T522] ? __pfx_vmap+0x10/0x10 [ 3490.574530][ T522] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 3490.574558][ T522] relay_open_buf.part.0+0x40f/0xb70 [ 3490.574585][ T522] relay_open+0x7b9/0xa00 [ 3490.574609][ T522] blk_trace_setup_prepare+0x35c/0x6c0 [ 3490.574632][ T522] blk_trace_setup+0x217/0x440 [ 3490.574654][ T522] ? __pfx_blk_trace_setup+0x10/0x10 [ 3490.574679][ T522] ? __pfx_vsnprintf+0x10/0x10 [ 3490.574707][ T522] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3490.574740][ T522] ? do_vfs_ioctl+0x226/0x13e0 [ 3490.574764][ T522] blk_trace_ioctl+0x245/0x320 [ 3490.574786][ T522] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 3490.574810][ T522] ? find_held_lock+0x2b/0x80 [ 3490.574824][ T522] ? __fget_files+0x215/0x3d0 [ 3490.574837][ T522] ? hook_file_ioctl_common+0x146/0x410 [ 3490.574865][ T522] blkdev_ioctl+0x17c/0x6f0 [ 3490.574884][ T522] ? __pfx_blkdev_ioctl+0x10/0x10 [ 3490.574905][ T522] ? __pfx_blkdev_ioctl+0x10/0x10 [ 3490.574923][ T522] __x64_sys_ioctl+0x18e/0x210 [ 3490.574945][ T522] do_syscall_64+0x106/0xf80 [ 3490.574962][ T522] ? clear_bhb_loop+0x40/0x90 [ 3490.574981][ T522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3490.574996][ T522] RIP: 0033:0x7fb6a939c799 [ 3490.575011][ T522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3490.575026][ T522] RSP: 002b:00007fb6aa2c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3490.575042][ T522] RAX: ffffffffffffffda RBX: 00007fb6a9615fa0 RCX: 00007fb6a939c799 [ 3490.575052][ T522] RDX: 0000200000000880 RSI: 00000000c0481273 RDI: 0000000000000008 [ 3490.575062][ T522] RBP: 00007fb6a9432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3490.575072][ T522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3490.575081][ T522] R13: 00007fb6a9616038 R14: 00007fb6a9615fa0 R15: 00007ffe4a0d2a38 [ 3490.575103][ T522] [ 3491.876239][ T553] random: crng reseeded on system resumption [ 3492.134159][ T555] FAULT_INJECTION: forcing a failure. [ 3492.134159][ T555] name failslab, interval 1, probability 0, space 0, times 0 [ 3492.204527][ T555] CPU: 1 UID: 0 PID: 555 Comm: syz.1.11109 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3492.204558][ T555] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3492.204564][ T555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3492.204574][ T555] Call Trace: [ 3492.204579][ T555] [ 3492.204586][ T555] dump_stack_lvl+0x100/0x190 [ 3492.204613][ T555] should_fail_ex.cold+0x5/0xa [ 3492.204631][ T555] ? __list_lru_init+0xd9/0x4b0 [ 3492.204651][ T555] should_failslab+0xc2/0x120 [ 3492.204669][ T555] __kmalloc_noprof+0xe0/0x850 [ 3492.204714][ T555] __list_lru_init+0xd9/0x4b0 [ 3492.204743][ T555] alloc_super+0x926/0xd20 [ 3492.204768][ T555] ? __pfx_mqueue_fill_super+0x10/0x10 [ 3492.204789][ T555] sget_fc+0x117/0xc70 [ 3492.204811][ T555] ? __pfx_set_anon_super_fc+0x10/0x10 [ 3492.204832][ T555] ? __pfx_mqueue_fill_super+0x10/0x10 [ 3492.204851][ T555] get_tree_nodev+0x28/0x190 [ 3492.204874][ T555] mqueue_get_tree+0xf1/0x130 [ 3492.204893][ T555] vfs_get_tree+0x92/0x320 [ 3492.204914][ T555] fc_mount_longterm+0x1a/0x270 [ 3492.204936][ T555] mq_init_ns+0x482/0x820 [ 3492.204959][ T555] copy_ipcs+0x3dd/0x7e0 [ 3492.204982][ T555] create_new_namespaces+0x20a/0xac0 [ 3492.204999][ T555] ? security_capable+0x80/0x260 [ 3492.205022][ T555] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 3492.205040][ T555] ksys_unshare+0x473/0xad0 [ 3492.205081][ T555] ? __pfx_ksys_unshare+0x10/0x10 [ 3492.205106][ T555] __x64_sys_unshare+0x31/0x40 [ 3492.205124][ T555] do_syscall_64+0x106/0xf80 [ 3492.205142][ T555] ? clear_bhb_loop+0x40/0x90 [ 3492.205161][ T555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3492.205177][ T555] RIP: 0033:0x7f9d9d19c799 [ 3492.205189][ T555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3492.205204][ T555] RSP: 002b:00007f9d9e01e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 3492.205219][ T555] RAX: ffffffffffffffda RBX: 00007f9d9d415fa0 RCX: 00007f9d9d19c799 [ 3492.205229][ T555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 3492.205239][ T555] RBP: 00007f9d9d232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3492.205248][ T555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3492.205257][ T555] R13: 00007f9d9d416038 R14: 00007f9d9d415fa0 R15: 00007ffefd959428 [ 3492.205277][ T555] [ 3492.994190][ T569] netlink: 'syz.0.11113': attribute type 11 has an invalid length. [ 3493.002286][ T569] netlink: 'syz.0.11113': attribute type 11 has an invalid length. [ 3493.063256][ T569] netlink: 'syz.0.11113': attribute type 11 has an invalid length. [ 3493.311754][ T575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11116'. [ 3493.783172][ T587] random: crng reseeded on system resumption [ 3493.954813][ T592] FAULT_INJECTION: forcing a failure. [ 3493.954813][ T592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3493.967923][ T592] CPU: 0 UID: 0 PID: 592 Comm: syz.3.11121 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3493.967949][ T592] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3493.967955][ T592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3493.967964][ T592] Call Trace: [ 3493.967970][ T592] [ 3493.967976][ T592] dump_stack_lvl+0x100/0x190 [ 3493.968003][ T592] should_fail_ex.cold+0x5/0xa [ 3493.968021][ T592] _copy_to_user+0x32/0xd0 [ 3493.968048][ T592] dvb_usercopy+0x2d1/0x340 [ 3493.968131][ T592] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 3493.968173][ T592] ? __pfx_dvb_usercopy+0x10/0x10 [ 3493.968200][ T592] ? __fget_files+0x21f/0x3d0 [ 3493.968218][ T592] dvb_frontend_ioctl+0x50/0x80 [ 3493.968234][ T592] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 3493.968252][ T592] __x64_sys_ioctl+0x18e/0x210 [ 3493.968275][ T592] do_syscall_64+0x106/0xf80 [ 3493.968293][ T592] ? clear_bhb_loop+0x40/0x90 [ 3493.968318][ T592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3493.968334][ T592] RIP: 0033:0x7fa91db9c799 [ 3493.968348][ T592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3493.968363][ T592] RSP: 002b:00007fa91ea2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3493.968378][ T592] RAX: ffffffffffffffda RBX: 00007fa91de15fa0 RCX: 00007fa91db9c799 [ 3493.968392][ T592] RDX: 0000000000000004 RSI: 0000000080106f53 RDI: 0000000000000003 [ 3493.968401][ T592] RBP: 00007fa91ea2a090 R08: 0000000000000000 R09: 0000000000000000 [ 3493.968410][ T592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3493.968419][ T592] R13: 00007fa91de16038 R14: 00007fa91de15fa0 R15: 00007fff1d72f478 [ 3493.968438][ T592] [ 3495.301044][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.312648][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.320942][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.331116][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.338182][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.346117][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.352988][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.360080][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.367098][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.374255][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.381075][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.388137][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.395137][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.401970][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.410031][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.417103][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.425222][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.432048][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.443050][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.450058][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.457064][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.464283][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.471115][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.478023][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.485061][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.491961][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.499155][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.506023][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.513170][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.532770][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.551290][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.559794][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.566719][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.573591][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.582882][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.589803][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.597508][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.604454][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.611308][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.619244][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.626986][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.633947][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.640801][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.648395][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.655406][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.662251][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.669234][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.676103][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.684605][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.693401][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.700280][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.709697][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.716811][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.723678][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.731301][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.738162][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.745253][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.752809][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.759996][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.771911][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.778954][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.785974][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.792902][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.799905][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3495.807269][T23842] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 3496.809073][ T642] random: crng reseeded on system resumption [ 3497.279532][ T648] zswap: compressor û not available [ 3497.537784][ T663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11136'. [ 3497.751607][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 3497.827541][ T663] bridge_slave_1 (unregistering): left allmulticast mode [ 3497.863887][ T663] bridge_slave_1 (unregistering): left promiscuous mode [ 3497.888858][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 3499.293346][ T691] FAULT_INJECTION: forcing a failure. [ 3499.293346][ T691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3499.490677][ T691] CPU: 1 UID: 0 PID: 691 Comm: syz.4.11143 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3499.490726][ T691] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3499.490737][ T691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3499.490753][ T691] Call Trace: [ 3499.490763][ T691] [ 3499.490773][ T691] dump_stack_lvl+0x100/0x190 [ 3499.490822][ T691] should_fail_ex.cold+0x5/0xa [ 3499.490855][ T691] _copy_to_user+0x32/0xd0 [ 3499.490903][ T691] mon_text_copy_to_user+0xce/0x1a0 [ 3499.491035][ T691] mon_text_read_t+0x470/0x600 [ 3499.491078][ T691] ? __debugfs_file_get+0x1fc/0x860 [ 3499.491113][ T691] ? __pfx_mon_text_read_t+0x10/0x10 [ 3499.491163][ T691] full_proxy_read+0x135/0x1a0 [ 3499.491197][ T691] ? __pfx_full_proxy_read+0x10/0x10 [ 3499.491232][ T691] vfs_read+0x1e4/0xb30 [ 3499.491287][ T691] ? __pfx_vfs_read+0x10/0x10 [ 3499.491327][ T691] ? find_held_lock+0x2b/0x80 [ 3499.491356][ T691] ? __fget_files+0x215/0x3d0 [ 3499.491381][ T691] ? __fget_files+0x215/0x3d0 [ 3499.491413][ T691] ? __fget_files+0x21f/0x3d0 [ 3499.491450][ T691] __x64_sys_pread64+0x1eb/0x250 [ 3499.491478][ T691] ? __pfx___x64_sys_pread64+0x10/0x10 [ 3499.491518][ T691] do_syscall_64+0x106/0xf80 [ 3499.491550][ T691] ? clear_bhb_loop+0x40/0x90 [ 3499.491585][ T691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3499.491615][ T691] RIP: 0033:0x7fb6a939c799 [ 3499.491638][ T691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3499.491665][ T691] RSP: 002b:00007fb6aa2a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 3499.491692][ T691] RAX: ffffffffffffffda RBX: 00007fb6a9616090 RCX: 00007fb6a939c799 [ 3499.491711][ T691] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000005 [ 3499.491728][ T691] RBP: 00007fb6aa2a6090 R08: 0000000000000000 R09: 0000000000000000 [ 3499.491746][ T691] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 3499.491763][ T691] R13: 00007fb6a9616128 R14: 00007fb6a9616090 R15: 00007ffe4a0d2a38 [ 3499.491801][ T691] [ 3499.704001][ T697] random: crng reseeded on system resumption [ 3502.393170][ T725] block nbd8: shutting down sockets [ 3503.260164][ T756] random: crng reseeded on system resumption [ 3506.474196][ T807] netlink: 338 bytes leftover after parsing attributes in process `syz.3.11164'. [ 3506.774547][ T813] random: crng reseeded on system resumption [ 3508.824774][ T843] random: crng reseeded on system resumption [ 3509.051814][ T846] hub 1-0:1.0: USB hub found [ 3509.192338][ T846] hub 1-0:1.0: 1 port detected [ 3509.301628][ T848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11172'. [ 3510.102712][ T868] random: crng reseeded on system resumption [ 3511.736418][ T888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11181'. [ 3512.344866][ T888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3512.381065][ T888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3512.504101][ T888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3512.523180][ T888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3513.219433][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 3513.219502][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3513.336928][ T913] random: crng reseeded on system resumption [ 3513.639487][ T919] random: crng reseeded on system resumption [ 3514.806583][ T940] FAULT_INJECTION: forcing a failure. [ 3514.806583][ T940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3514.883351][ T940] CPU: 1 UID: 0 PID: 940 Comm: syz.3.11192 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3514.883399][ T940] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3514.883411][ T940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3514.883427][ T940] Call Trace: [ 3514.883437][ T940] [ 3514.883448][ T940] dump_stack_lvl+0x100/0x190 [ 3514.883495][ T940] should_fail_ex.cold+0x5/0xa [ 3514.883530][ T940] _copy_to_user+0x32/0xd0 [ 3514.883578][ T940] simple_read_from_buffer+0xcb/0x170 [ 3514.883622][ T940] proc_fail_nth_read+0x1af/0x230 [ 3514.883659][ T940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3514.883695][ T940] ? rw_verify_area+0xce/0x6d0 [ 3514.883733][ T940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3514.883766][ T940] vfs_read+0x1e4/0xb30 [ 3514.883813][ T940] ? __pfx_vfs_read+0x10/0x10 [ 3514.883853][ T940] ? __fget_files+0x215/0x3d0 [ 3514.883887][ T940] ? __fget_files+0x21f/0x3d0 [ 3514.883924][ T940] ksys_read+0x12a/0x250 [ 3514.883961][ T940] ? __pfx_ksys_read+0x10/0x10 [ 3514.884020][ T940] do_syscall_64+0x106/0xf80 [ 3514.884052][ T940] ? clear_bhb_loop+0x40/0x90 [ 3514.884087][ T940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3514.884116][ T940] RIP: 0033:0x7fa91db5cfce [ 3514.884140][ T940] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3514.884167][ T940] RSP: 002b:00007fa91ea29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3514.884193][ T940] RAX: ffffffffffffffda RBX: 00007fa91ea2a6c0 RCX: 00007fa91db5cfce [ 3514.884212][ T940] RDX: 000000000000000f RSI: 00007fa91ea2a0a0 RDI: 0000000000000005 [ 3514.884229][ T940] RBP: 00007fa91ea2a090 R08: 0000000000000000 R09: 0000000000000000 [ 3514.884247][ T940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3514.884269][ T940] R13: 00007fa91de16038 R14: 00007fa91de15fa0 R15: 00007fff1d72f478 [ 3514.884304][ T940] [ 3516.170284][ T965] random: crng reseeded on system resumption [ 3516.812247][ T981] FAULT_INJECTION: forcing a failure. [ 3516.812247][ T981] name failslab, interval 1, probability 0, space 0, times 0 [ 3516.987549][ T981] CPU: 1 UID: 0 PID: 981 Comm: syz.0.11203 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3516.987594][ T981] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3516.987606][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3516.987622][ T981] Call Trace: [ 3516.987631][ T981] [ 3516.987642][ T981] dump_stack_lvl+0x100/0x190 [ 3516.987688][ T981] should_fail_ex.cold+0x5/0xa [ 3516.987720][ T981] should_failslab+0xc2/0x120 [ 3516.987748][ T981] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 3516.987787][ T981] ? security_file_alloc+0x34/0x2c0 [ 3516.987815][ T981] ? trace_kmem_cache_alloc+0xf3/0x120 [ 3516.987850][ T981] security_file_alloc+0x34/0x2c0 [ 3516.987879][ T981] init_file+0x95/0x480 [ 3516.987912][ T981] alloc_empty_file+0x73/0x1c0 [ 3516.987946][ T981] path_openat+0xe8/0x31a0 [ 3516.987972][ T981] ? kasan_save_stack+0x3f/0x50 [ 3516.988012][ T981] ? kasan_save_stack+0x30/0x50 [ 3516.988048][ T981] ? kasan_save_track+0x14/0x30 [ 3516.988094][ T981] ? __kasan_slab_alloc+0x89/0x90 [ 3516.988117][ T981] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 3516.988156][ T981] ? do_getname+0x35/0x390 [ 3516.988186][ T981] ? do_sys_openat2+0xc5/0x1e0 [ 3516.988220][ T981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3516.988254][ T981] ? __pfx_path_openat+0x10/0x10 [ 3516.988296][ T981] do_file_open+0x20e/0x430 [ 3516.988328][ T981] ? __pfx_do_file_open+0x10/0x10 [ 3516.988379][ T981] ? alloc_fd+0x476/0x790 [ 3516.988410][ T981] ? do_getname+0x191/0x390 [ 3516.988445][ T981] do_sys_openat2+0x10d/0x1e0 [ 3516.988479][ T981] ? __pfx_do_sys_openat2+0x10/0x10 [ 3516.988511][ T981] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3516.988552][ T981] ? __fget_files+0x21f/0x3d0 [ 3516.988584][ T981] __x64_sys_openat+0x12d/0x210 [ 3516.988620][ T981] ? __pfx___x64_sys_openat+0x10/0x10 [ 3516.988654][ T981] ? ksys_write+0x1ac/0x250 [ 3516.988707][ T981] do_syscall_64+0x106/0xf80 [ 3516.988739][ T981] ? clear_bhb_loop+0x40/0x90 [ 3516.988773][ T981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3516.988801][ T981] RIP: 0033:0x7fa00db9c799 [ 3516.988825][ T981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3516.988851][ T981] RSP: 002b:00007fa00eaeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3516.988876][ T981] RAX: ffffffffffffffda RBX: 00007fa00de15fa0 RCX: 00007fa00db9c799 [ 3516.988896][ T981] RDX: 0000000000082000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 3516.988914][ T981] RBP: 00007fa00eaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 3516.988930][ T981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3516.988947][ T981] R13: 00007fa00de16038 R14: 00007fa00de15fa0 R15: 00007ffc12e0d968 [ 3516.988984][ T981] [ 3519.770941][ T999] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3519.771080][ T999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3519.771185][ T999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3519.771291][ T999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3519.771383][ T999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3520.573115][ T1029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11214'. [ 3521.135127][T24452] Bluetooth: hci4: command 0x0c1a tx timeout [ 3521.773561][T24452] Bluetooth: hci2: command 0x0c1a tx timeout [ 3521.779707][T24452] Bluetooth: hci0: command 0x0c1a tx timeout [ 3521.785776][T23842] Bluetooth: hci3: command 0x0c1a tx timeout [ 3521.791839][T26507] Bluetooth: hci1: command 0x0c1a tx timeout [ 3522.372599][ T1054] FAULT_INJECTION: forcing a failure. [ 3522.372599][ T1054] name failslab, interval 1, probability 0, space 0, times 0 [ 3522.394669][ T1054] CPU: 0 UID: 0 PID: 1054 Comm: syz.4.11218 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3522.394697][ T1054] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3522.394703][ T1054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3522.394712][ T1054] Call Trace: [ 3522.394718][ T1054] [ 3522.394724][ T1054] dump_stack_lvl+0x100/0x190 [ 3522.394752][ T1054] should_fail_ex.cold+0x5/0xa [ 3522.394770][ T1054] should_failslab+0xc2/0x120 [ 3522.394787][ T1054] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 3522.394808][ T1054] ? do_getname+0x35/0x390 [ 3522.394826][ T1054] ? fput+0x79/0x100 [ 3522.394845][ T1054] do_getname+0x35/0x390 [ 3522.394864][ T1054] __x64_sys_execve+0x76/0xd0 [ 3522.394887][ T1054] do_syscall_64+0x106/0xf80 [ 3522.394905][ T1054] ? clear_bhb_loop+0x40/0x90 [ 3522.394923][ T1054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3522.394939][ T1054] RIP: 0033:0x7fb6a939c799 [ 3522.394953][ T1054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3522.394967][ T1054] RSP: 002b:00007fb6aa2c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 3522.394982][ T1054] RAX: ffffffffffffffda RBX: 00007fb6a9615fa0 RCX: 00007fb6a939c799 [ 3522.394993][ T1054] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000200000000180 [ 3522.395002][ T1054] RBP: 00007fb6aa2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 3522.395011][ T1054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3522.395021][ T1054] R13: 00007fb6a9616038 R14: 00007fb6a9615fa0 R15: 00007ffe4a0d2a38 [ 3522.395040][ T1054] [ 3524.124240][ T1073] random: crng reseeded on system resumption [ 3524.240756][ T1072] mkiss: ax0: crc mode is auto. [ 3525.198382][ T1080] bond0: invalid ARP target specified [ 3525.920288][ T1097] nvme_fabrics: missing parameter 'transport=%s' [ 3525.920313][ T1097] nvme_fabrics: missing parameter 'nqn=%s' [ 3526.514735][ T1110] random: crng reseeded on system resumption [ 3527.260670][ T1123] netlink: NAT attribute type 6 has unexpected length (4 != 2) [ 3528.005429][ T1130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11240'. [ 3529.433780][ T1154] random: crng reseeded on system resumption [ 3533.082289][ T1216] netlink: Setting conntrack mark requires 'commit' flag. [ 3533.389153][ T1221] random: crng reseeded on system resumption [ 3534.162595][ T1245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11263'. [ 3534.442808][ T1252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11265'. [ 3535.001511][ T1257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11266'. [ 3536.801033][ T1294] random: crng reseeded on system resumption [ 3541.105342][ T1046] Bluetooth: hci3: unexpected event 0x03 length: 123 > 11 [ 3542.208533][ T1367] random: crng reseeded on system resumption [ 3542.989696][ T1046] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 3543.843808][ T1393] FAULT_INJECTION: forcing a failure. [ 3543.843808][ T1393] name failslab, interval 1, probability 0, space 0, times 0 [ 3543.905424][ T1393] CPU: 0 UID: 0 PID: 1393 Comm: syz.1.11292 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3543.905474][ T1393] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3543.905487][ T1393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3543.905505][ T1393] Call Trace: [ 3543.905514][ T1393] [ 3543.905522][ T1393] dump_stack_lvl+0x100/0x190 [ 3543.905550][ T1393] should_fail_ex.cold+0x5/0xa [ 3543.905570][ T1393] should_failslab+0xc2/0x120 [ 3543.905586][ T1393] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 3543.905608][ T1393] ? __d_alloc+0x34/0xa80 [ 3543.905626][ T1393] ? lockdep_init_map_type+0x5c/0x250 [ 3543.905648][ T1393] __d_alloc+0x34/0xa80 [ 3543.905666][ T1393] d_alloc_pseudo+0x1c/0xc0 [ 3543.905687][ T1393] alloc_file_pseudo+0xcf/0x230 [ 3543.905706][ T1393] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 3543.905725][ T1393] ? alloc_fd+0x476/0x790 [ 3543.905743][ T1393] sock_alloc_file+0x50/0x210 [ 3543.905763][ T1393] __sys_socket+0x1c0/0x260 [ 3543.905786][ T1393] ? __pfx___sys_socket+0x10/0x10 [ 3543.905814][ T1393] __x64_sys_socket+0x72/0xb0 [ 3543.905844][ T1393] ? lockdep_hardirqs_on+0x78/0x100 [ 3543.905864][ T1393] do_syscall_64+0x106/0xf80 [ 3543.905881][ T1393] ? clear_bhb_loop+0x40/0x90 [ 3543.905900][ T1393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3543.905916][ T1393] RIP: 0033:0x7f9d9d19c799 [ 3543.905930][ T1393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3543.905944][ T1393] RSP: 002b:00007f9d9e01e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3543.905959][ T1393] RAX: ffffffffffffffda RBX: 00007f9d9d415fa0 RCX: 00007f9d9d19c799 [ 3543.905970][ T1393] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 3543.905979][ T1393] RBP: 00007f9d9d232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3543.905989][ T1393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3543.905998][ T1393] R13: 00007f9d9d416038 R14: 00007f9d9d415fa0 R15: 00007ffefd959428 [ 3543.906018][ T1393] [ 3546.084570][ T1428] random: crng reseeded on system resumption [ 3546.264295][ T1431] FAULT_INJECTION: forcing a failure. [ 3546.264295][ T1431] name failslab, interval 1, probability 0, space 0, times 0 [ 3546.333043][ T1431] CPU: 0 UID: 0 PID: 1431 Comm: syz.0.11300 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3546.333071][ T1431] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3546.333078][ T1431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3546.333088][ T1431] Call Trace: [ 3546.333094][ T1431] [ 3546.333100][ T1431] dump_stack_lvl+0x100/0x190 [ 3546.333135][ T1431] should_fail_ex.cold+0x5/0xa [ 3546.333155][ T1431] should_failslab+0xc2/0x120 [ 3546.333171][ T1431] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 3546.333204][ T1431] ? alloc_empty_file+0x55/0x1c0 [ 3546.333245][ T1431] alloc_empty_file+0x55/0x1c0 [ 3546.333278][ T1431] alloc_file_pseudo+0x13a/0x230 [ 3546.333299][ T1431] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 3546.333318][ T1431] ? _raw_spin_unlock+0x28/0x50 [ 3546.333334][ T1431] ? alloc_fd+0x476/0x790 [ 3546.333351][ T1431] __anon_inode_getfile+0xe8/0x280 [ 3546.333371][ T1431] do_epoll_create+0x329/0x4b0 [ 3546.333387][ T1431] __x64_sys_epoll_create+0x45/0x70 [ 3546.333404][ T1431] do_syscall_64+0x106/0xf80 [ 3546.333422][ T1431] ? clear_bhb_loop+0x40/0x90 [ 3546.333440][ T1431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3546.333456][ T1431] RIP: 0033:0x7fa00db9c799 [ 3546.333469][ T1431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3546.333484][ T1431] RSP: 002b:00007fa00eaeb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 3546.333499][ T1431] RAX: ffffffffffffffda RBX: 00007fa00de15fa0 RCX: 00007fa00db9c799 [ 3546.333509][ T1431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003e [ 3546.333518][ T1431] RBP: 00007fa00dc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3546.333527][ T1431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3546.333537][ T1431] R13: 00007fa00de16038 R14: 00007fa00de15fa0 R15: 00007ffc12e0d968 [ 3546.333557][ T1431] [ 3547.523364][ T1447] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 3549.460522][ T30] audit: type=1800 audit(2147483831.110:18): pid=1480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11311" name="features" dev="configfs" ino=427770 res=0 errno=0 [ 3549.548314][ T1481] random: crng reseeded on system resumption [ 3549.652577][ T1487] FAULT_INJECTION: forcing a failure. [ 3549.652577][ T1487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3549.702165][ T1487] CPU: 1 UID: 0 PID: 1487 Comm: syz.0.11312 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3549.702216][ T1487] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3549.702227][ T1487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3549.702245][ T1487] Call Trace: [ 3549.702261][ T1487] [ 3549.702272][ T1487] dump_stack_lvl+0x100/0x190 [ 3549.702319][ T1487] should_fail_ex.cold+0x5/0xa [ 3549.702353][ T1487] _copy_to_user+0x32/0xd0 [ 3549.702399][ T1487] ctl_ioctl+0x17b/0xcd0 [ 3549.702436][ T1487] ? __pfx_ctl_ioctl+0x10/0x10 [ 3549.702503][ T1487] ? __fget_files+0x21f/0x3d0 [ 3549.702537][ T1487] dm_ctl_ioctl+0x22/0x30 [ 3549.702567][ T1487] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 3549.702598][ T1487] __x64_sys_ioctl+0x18e/0x210 [ 3549.702640][ T1487] do_syscall_64+0x106/0xf80 [ 3549.702672][ T1487] ? clear_bhb_loop+0x40/0x90 [ 3549.702707][ T1487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3549.702735][ T1487] RIP: 0033:0x7fa00db9c799 [ 3549.702758][ T1487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3549.702784][ T1487] RSP: 002b:00007fa00eaeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3549.702811][ T1487] RAX: ffffffffffffffda RBX: 00007fa00de15fa0 RCX: 00007fa00db9c799 [ 3549.702830][ T1487] RDX: 00002000000001c0 RSI: fffffff7effffd04 RDI: 0000000000000003 [ 3549.702849][ T1487] RBP: 00007fa00eaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 3549.702866][ T1487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3549.702882][ T1487] R13: 00007fa00de16038 R14: 00007fa00de15fa0 R15: 00007ffc12e0d968 [ 3549.702919][ T1487] [ 3550.798735][ T1503] FAULT_INJECTION: forcing a failure. [ 3550.798735][ T1503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3550.859979][ T1503] CPU: 0 UID: 0 PID: 1503 Comm: syz.1.11318 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3550.860013][ T1503] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3550.860019][ T1503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3550.860029][ T1503] Call Trace: [ 3550.860035][ T1503] [ 3550.860042][ T1503] dump_stack_lvl+0x100/0x190 [ 3550.860070][ T1503] should_fail_ex.cold+0x5/0xa [ 3550.860088][ T1503] _copy_to_user+0x32/0xd0 [ 3550.860114][ T1503] cpuid_read+0x1d9/0x360 [ 3550.860136][ T1503] ? __pfx_cpuid_read+0x10/0x10 [ 3550.860154][ T1503] ? __pfx_cpuid_smp_cpuid+0x10/0x10 [ 3550.860172][ T1503] ? __pfx___might_resched+0x10/0x10 [ 3550.860200][ T1503] ? apparmor_file_permission+0x13f/0x1c0 [ 3550.860227][ T1503] ? bpf_lsm_file_permission+0x9/0x10 [ 3550.860257][ T1503] ? security_file_permission+0x76/0x210 [ 3550.860273][ T1503] ? rw_verify_area+0xce/0x6d0 [ 3550.860295][ T1503] ? __pfx_cpuid_read+0x10/0x10 [ 3550.860312][ T1503] vfs_readv+0x5d8/0x8d0 [ 3550.860338][ T1503] ? __pfx_vfs_readv+0x10/0x10 [ 3550.860360][ T1503] ? find_held_lock+0x2b/0x80 [ 3550.860385][ T1503] ? __fget_files+0x21f/0x3d0 [ 3550.860403][ T1503] ? do_readv+0x13e/0x340 [ 3550.860423][ T1503] do_readv+0x13e/0x340 [ 3550.860444][ T1503] ? __pfx_do_readv+0x10/0x10 [ 3550.860470][ T1503] do_syscall_64+0x106/0xf80 [ 3550.860488][ T1503] ? clear_bhb_loop+0x40/0x90 [ 3550.860507][ T1503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3550.860523][ T1503] RIP: 0033:0x7f9d9d19c799 [ 3550.860536][ T1503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3550.860552][ T1503] RSP: 002b:00007f9d9e01e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 3550.860567][ T1503] RAX: ffffffffffffffda RBX: 00007f9d9d415fa0 RCX: 00007f9d9d19c799 [ 3550.860578][ T1503] RDX: 0000000000000003 RSI: 0000200000000680 RDI: 0000000000000002 [ 3550.860587][ T1503] RBP: 00007f9d9e01e090 R08: 0000000000000000 R09: 0000000000000000 [ 3550.860596][ T1503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3550.860605][ T1503] R13: 00007f9d9d416038 R14: 00007f9d9d415fa0 R15: 00007ffefd959428 [ 3550.860625][ T1503] [ 3551.701974][ T1519] random: crng reseeded on system resumption [ 3552.066673][ T1526] random: crng reseeded on system resumption [ 3552.314890][ T1530] Unrecognized hibernate image header format! [ 3552.336543][ T1530] PM: hibernation: Image mismatch: architecture specific data [ 3556.250519][ T1562] FAULT_INJECTION: forcing a failure. [ 3556.250519][ T1562] name failslab, interval 1, probability 0, space 0, times 0 [ 3556.417294][ T1562] CPU: 0 UID: 0 PID: 1562 Comm: syz.1.11330 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3556.417340][ T1562] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3556.417349][ T1562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3556.417364][ T1562] Call Trace: [ 3556.417373][ T1562] [ 3556.417383][ T1562] dump_stack_lvl+0x100/0x190 [ 3556.417427][ T1562] should_fail_ex.cold+0x5/0xa [ 3556.417461][ T1562] should_failslab+0xc2/0x120 [ 3556.417490][ T1562] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 3556.417532][ T1562] ? shmem_alloc_inode+0x25/0x50 [ 3556.417566][ T1562] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 3556.417599][ T1562] shmem_alloc_inode+0x25/0x50 [ 3556.417628][ T1562] alloc_inode+0x68/0x250 [ 3556.417661][ T1562] new_inode+0x22/0x1c0 [ 3556.417693][ T1562] ? trace_kmem_cache_alloc+0xf3/0x120 [ 3556.417727][ T1562] shmem_get_inode+0x212/0x1040 [ 3556.417767][ T1562] ? __pfx_shmem_get_inode+0x10/0x10 [ 3556.417801][ T1562] ? rcu_is_watching+0x12/0xc0 [ 3556.417841][ T1562] ? percpu_counter_add_batch+0xb9/0x230 [ 3556.417894][ T1562] __shmem_file_setup+0x3ac/0x490 [ 3556.417927][ T1562] ? __pfx___shmem_file_setup+0x10/0x10 [ 3556.417965][ T1562] ? vm_area_alloc+0x1f/0x160 [ 3556.418000][ T1562] shmem_zero_setup+0x96/0x1b0 [ 3556.418039][ T1562] __mmap_region+0x2198/0x29e0 [ 3556.418079][ T1562] ? __pfx___mmap_region+0x10/0x10 [ 3556.418110][ T1562] ? process_measurement+0x1f4/0x2350 [ 3556.418213][ T1562] ? is_bpf_text_address+0x94/0x1a0 [ 3556.418249][ T1562] ? kernel_text_address+0x8d/0x100 [ 3556.418284][ T1562] ? __kernel_text_address+0xd/0x30 [ 3556.418360][ T1562] ? rcu_is_watching+0x12/0xc0 [ 3556.418397][ T1562] ? cap_capable+0x107/0x460 [ 3556.418435][ T1562] mmap_region+0x180/0x3e0 [ 3556.418476][ T1562] do_mmap+0xc63/0x12f0 [ 3556.418510][ T1562] ? __pfx_do_mmap+0x10/0x10 [ 3556.418537][ T1562] ? __pfx_down_write_killable+0x10/0x10 [ 3556.418579][ T1562] vm_mmap_pgoff+0x29e/0x470 [ 3556.418613][ T1562] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3556.418644][ T1562] ? __fget_files+0x215/0x3d0 [ 3556.418667][ T1562] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3556.418704][ T1562] ksys_mmap_pgoff+0xe1/0x650 [ 3556.418735][ T1562] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 3556.418758][ T1562] ? fput+0x79/0x100 [ 3556.418785][ T1562] ? ksys_write+0x1ac/0x250 [ 3556.418822][ T1562] ? __pfx_ksys_write+0x10/0x10 [ 3556.418863][ T1562] __x64_sys_mmap+0x125/0x190 [ 3556.418903][ T1562] do_syscall_64+0x106/0xf80 [ 3556.418931][ T1562] ? clear_bhb_loop+0x40/0x90 [ 3556.418962][ T1562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3556.418988][ T1562] RIP: 0033:0x7f9d9d19c799 [ 3556.419009][ T1562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3556.419033][ T1562] RSP: 002b:00007f9d9dffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3556.419057][ T1562] RAX: ffffffffffffffda RBX: 00007f9d9d416090 RCX: 00007f9d9d19c799 [ 3556.419075][ T1562] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 3556.419090][ T1562] RBP: 00007f9d9dffd090 R08: fffffffffffffffa R09: 0000000000008000 [ 3556.419107][ T1562] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 3556.419130][ T1562] R13: 00007f9d9d416128 R14: 00007f9d9d416090 R15: 00007ffefd959428 [ 3556.419165][ T1562] [ 3556.863517][ T1565] random: crng reseeded on system resumption [ 3557.271777][ T1570] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 3557.335129][ T1570] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 3558.344662][ T1588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11337'. [ 3559.295401][ T1602] FAULT_INJECTION: forcing a failure. [ 3559.295401][ T1602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3559.308968][ T1602] CPU: 1 UID: 0 PID: 1602 Comm: syz.4.11342 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3559.309009][ T1602] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3559.309019][ T1602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3559.309034][ T1602] Call Trace: [ 3559.309044][ T1602] [ 3559.309054][ T1602] dump_stack_lvl+0x100/0x190 [ 3559.309097][ T1602] should_fail_ex.cold+0x5/0xa [ 3559.309131][ T1602] _copy_from_user+0x2e/0xd0 [ 3559.309175][ T1602] copy_msghdr_from_user+0x9f/0x4f0 [ 3559.309222][ T1602] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3559.309272][ T1602] ? rcu_is_watching+0x12/0xc0 [ 3559.309322][ T1602] ? ___sys_sendmsg+0x19d/0x1e0 [ 3559.309360][ T1602] ? kfree+0x2ec/0x6b0 [ 3559.309402][ T1602] ___sys_sendmsg+0x106/0x1e0 [ 3559.309447][ T1602] ? __pfx____sys_sendmsg+0x10/0x10 [ 3559.309523][ T1602] ? __pfx___might_resched+0x10/0x10 [ 3559.309574][ T1602] __sys_sendmmsg+0x205/0x430 [ 3559.309613][ T1602] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3559.309661][ T1602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3559.309714][ T1602] ? fput+0x79/0x100 [ 3559.309747][ T1602] ? ksys_write+0x1ac/0x250 [ 3559.309804][ T1602] ? __pfx_ksys_write+0x10/0x10 [ 3559.309856][ T1602] __x64_sys_sendmmsg+0x9c/0x100 [ 3559.309890][ T1602] ? lockdep_hardirqs_on+0x78/0x100 [ 3559.309924][ T1602] do_syscall_64+0x106/0xf80 [ 3559.309957][ T1602] ? clear_bhb_loop+0x40/0x90 [ 3559.309992][ T1602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3559.310022][ T1602] RIP: 0033:0x7fb6a939c799 [ 3559.310045][ T1602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3559.310074][ T1602] RSP: 002b:00007fb6aa2c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3559.310102][ T1602] RAX: ffffffffffffffda RBX: 00007fb6a9615fa0 RCX: 00007fb6a939c799 [ 3559.310122][ T1602] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 3559.310140][ T1602] RBP: 00007fb6aa2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 3559.310159][ T1602] R10: 0000000000001f00 R11: 0000000000000246 R12: 0000000000000001 [ 3559.310177][ T1602] R13: 00007fb6a9616038 R14: 00007fb6a9615fa0 R15: 00007ffe4a0d2a38 [ 3559.310216][ T1602] [ 3560.602039][ T1622] FAULT_INJECTION: forcing a failure. [ 3560.602039][ T1622] name failslab, interval 1, probability 0, space 0, times 0 [ 3560.850285][ T1622] CPU: 0 UID: 0 PID: 1622 Comm: syz.4.11348 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3560.850311][ T1622] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3560.850318][ T1622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3560.850327][ T1622] Call Trace: [ 3560.850333][ T1622] [ 3560.850339][ T1622] dump_stack_lvl+0x100/0x190 [ 3560.850366][ T1622] should_fail_ex.cold+0x5/0xa [ 3560.850385][ T1622] should_failslab+0xc2/0x120 [ 3560.850400][ T1622] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 3560.850424][ T1622] ? __alloc_skb+0x140/0x710 [ 3560.850445][ T1622] __alloc_skb+0x140/0x710 [ 3560.850459][ T1622] ? __alloc_skb+0x5b7/0x710 [ 3560.850475][ T1622] ? __pfx___alloc_skb+0x10/0x10 [ 3560.850491][ T1622] ? __pfx___might_resched+0x10/0x10 [ 3560.850512][ T1622] ? __lock_acquire+0x4a5/0x2630 [ 3560.850534][ T1622] netlink_alloc_large_skb+0x69/0x150 [ 3560.850557][ T1622] netlink_sendmsg+0x680/0xda0 [ 3560.850580][ T1622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3560.850598][ T1622] ? __import_iovec+0x1d2/0x640 [ 3560.850614][ T1622] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 3560.850650][ T1622] ____sys_sendmsg+0xa54/0xc30 [ 3560.850693][ T1622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3560.850734][ T1622] ? rcu_is_watching+0x12/0xc0 [ 3560.850774][ T1622] ? ___sys_sendmsg+0x19d/0x1e0 [ 3560.850812][ T1622] ? kfree+0x2ec/0x6b0 [ 3560.850836][ T1622] ___sys_sendmsg+0x190/0x1e0 [ 3560.850860][ T1622] ? __pfx____sys_sendmsg+0x10/0x10 [ 3560.850900][ T1622] ? __pfx___might_resched+0x10/0x10 [ 3560.850924][ T1622] __sys_sendmmsg+0x205/0x430 [ 3560.850945][ T1622] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3560.850968][ T1622] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3560.850996][ T1622] ? fput+0x79/0x100 [ 3560.851012][ T1622] ? ksys_write+0x1ac/0x250 [ 3560.851035][ T1622] ? __pfx_ksys_write+0x10/0x10 [ 3560.851061][ T1622] __x64_sys_sendmmsg+0x9c/0x100 [ 3560.851078][ T1622] ? lockdep_hardirqs_on+0x78/0x100 [ 3560.851096][ T1622] do_syscall_64+0x106/0xf80 [ 3560.851112][ T1622] ? clear_bhb_loop+0x40/0x90 [ 3560.851131][ T1622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3560.851147][ T1622] RIP: 0033:0x7fb6a939c799 [ 3560.851160][ T1622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3560.851181][ T1622] RSP: 002b:00007fb6aa2c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3560.851196][ T1622] RAX: ffffffffffffffda RBX: 00007fb6a9615fa0 RCX: 00007fb6a939c799 [ 3560.851206][ T1622] RDX: 0000000000002004 RSI: 0000200000000200 RDI: 0000000000000003 [ 3560.851216][ T1622] RBP: 00007fb6aa2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 3560.851225][ T1622] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 3560.851234][ T1622] R13: 00007fb6a9616038 R14: 00007fb6a9615fa0 R15: 00007ffe4a0d2a38 [ 3560.851254][ T1622] [ 3564.296183][ T1662] FAULT_INJECTION: forcing a failure. [ 3564.296183][ T1662] name failslab, interval 1, probability 0, space 0, times 0 [ 3564.393434][ T1662] CPU: 1 UID: 0 PID: 1662 Comm: syz.4.11359 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3564.393486][ T1662] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3564.393497][ T1662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3564.393513][ T1662] Call Trace: [ 3564.393522][ T1662] [ 3564.393533][ T1662] dump_stack_lvl+0x100/0x190 [ 3564.393584][ T1662] should_fail_ex.cold+0x5/0xa [ 3564.393617][ T1662] should_failslab+0xc2/0x120 [ 3564.393647][ T1662] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 3564.393686][ T1662] ? shmem_alloc_inode+0x25/0x50 [ 3564.393720][ T1662] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 3564.393752][ T1662] shmem_alloc_inode+0x25/0x50 [ 3564.393781][ T1662] alloc_inode+0x68/0x250 [ 3564.393827][ T1662] new_inode+0x22/0x1c0 [ 3564.393868][ T1662] shmem_get_inode+0x212/0x1040 [ 3564.393907][ T1662] ? __pfx_shmem_get_inode+0x10/0x10 [ 3564.393955][ T1662] __shmem_file_setup+0x184/0x490 [ 3564.393994][ T1662] ? __pfx___shmem_file_setup+0x10/0x10 [ 3564.394033][ T1662] ? do_raw_spin_lock+0x128/0x260 [ 3564.394073][ T1662] ? find_held_lock+0x2b/0x80 [ 3564.394099][ T1662] ? alloc_fd+0x476/0x790 [ 3564.394124][ T1662] ? alloc_fd+0x476/0x790 [ 3564.394155][ T1662] memfd_alloc_file+0x247/0x620 [ 3564.394191][ T1662] ? _raw_spin_unlock+0x28/0x50 [ 3564.394220][ T1662] ? __pfx_memfd_alloc_file+0x10/0x10 [ 3564.394269][ T1662] __do_sys_memfd_create+0x236/0x3d0 [ 3564.394310][ T1662] do_syscall_64+0x106/0xf80 [ 3564.394341][ T1662] ? clear_bhb_loop+0x40/0x90 [ 3564.394375][ T1662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3564.394405][ T1662] RIP: 0033:0x7fb6a939c799 [ 3564.394430][ T1662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3564.394460][ T1662] RSP: 002b:00007fb6aa2c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3564.394489][ T1662] RAX: ffffffffffffffda RBX: 00007fb6a9615fa0 RCX: 00007fb6a939c799 [ 3564.394510][ T1662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3564.394527][ T1662] RBP: 00007fb6a9432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3564.394544][ T1662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3564.394561][ T1662] R13: 00007fb6a9616038 R14: 00007fb6a9615fa0 R15: 00007ffe4a0d2a38 [ 3564.394600][ T1662] [ 3565.937003][ T1687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11362'. [ 3566.679348][ T1702] vivid-007: ================= START STATUS ================= [ 3566.679435][ T1702] vivid-007: Generate PTS: true [ 3566.679476][ T1702] vivid-007: Generate SCR: true [ 3566.679493][ T1702] tpg source WxH: 320x240 (Y'CbCr) [ 3566.679504][ T1702] tpg field: 1 [ 3566.679510][ T1702] tpg crop: (0,0)/320x240 [ 3566.679520][ T1702] tpg compose: (0,0)/320x240 [ 3566.679531][ T1702] tpg colorspace: 8 [ 3566.679537][ T1702] tpg transfer function: 0/0 [ 3566.679545][ T1702] tpg Y'CbCr encoding: 0/0 [ 3566.679553][ T1702] tpg quantization: 0/0 [ 3566.679560][ T1702] tpg RGB range: 0/2 [ 3566.679568][ T1702] vivid-007: ================== END STATUS ================== [ 3567.036594][ T1711] Setting dangerous option i915.mitigations - tainting kernel [ 3567.036621][ T1711] Bad "i915.mitigations=Î×ÚCmâUQüF\§Þ ", 'Î×ÚCmâUQüF\§Þ' is unknown [ 3567.037983][ T1711] FAULT_INJECTION: forcing a failure. [ 3567.037983][ T1711] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3567.038027][ T1711] CPU: 0 UID: 0 PID: 1711 Comm: syz.0.11367 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3567.038050][ T1711] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3567.038055][ T1711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3567.038065][ T1711] Call Trace: [ 3567.038070][ T1711] [ 3567.038076][ T1711] dump_stack_lvl+0x100/0x190 [ 3567.038110][ T1711] should_fail_ex.cold+0x5/0xa [ 3567.038125][ T1711] ? prepare_alloc_pages+0x16d/0x5f0 [ 3567.038145][ T1711] should_fail_alloc_page+0xeb/0x140 [ 3567.038162][ T1711] prepare_alloc_pages+0x1f0/0x5f0 [ 3567.038182][ T1711] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 3567.038205][ T1711] ? rcu_is_watching+0x12/0xc0 [ 3567.038227][ T1711] ? trace_mm_page_alloc+0x17a/0x1d0 [ 3567.038245][ T1711] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 3567.038266][ T1711] ? vhost_dev_set_owner+0x190/0xa30 [ 3567.038286][ T1711] ? stack_trace_save+0x8e/0xc0 [ 3567.038301][ T1711] ? __pfx_stack_trace_save+0x10/0x10 [ 3567.038316][ T1711] ? stack_depot_save_flags+0x27/0x9d0 [ 3567.038332][ T1711] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3567.038356][ T1711] ? vhost_dev_set_owner+0x190/0xa30 [ 3567.038373][ T1711] ? kasan_save_stack+0x3f/0x50 [ 3567.038395][ T1711] ? kasan_save_stack+0x30/0x50 [ 3567.038415][ T1711] ? kasan_save_track+0x14/0x30 [ 3567.038437][ T1711] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3567.038458][ T1711] ? vhost_net_ioctl+0xfa3/0x1910 [ 3567.038476][ T1711] ? __x64_sys_ioctl+0x18e/0x210 [ 3567.038503][ T1711] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3567.038529][ T1711] ? policy_nodemask+0xed/0x4f0 [ 3567.038546][ T1711] alloc_pages_mpol+0x1fb/0x550 [ 3567.038562][ T1711] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3567.038578][ T1711] ? find_held_lock+0x2b/0x80 [ 3567.038593][ T1711] ? rcu_read_unlock+0x17/0x60 [ 3567.038611][ T1711] ? vhost_dev_set_owner+0x330/0xa30 [ 3567.038627][ T1711] ___kmalloc_large_node+0x104/0x150 [ 3567.038647][ T1711] __kmalloc_large_node_noprof+0x1c/0x70 [ 3567.038666][ T1711] __kmalloc_noprof+0x5be/0x850 [ 3567.038691][ T1711] vhost_dev_set_owner+0x330/0xa30 [ 3567.038715][ T1711] vhost_net_ioctl+0xfa3/0x1910 [ 3567.038732][ T1711] ? do_vfs_ioctl+0x226/0x13e0 [ 3567.038753][ T1711] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3567.038773][ T1711] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 3567.038796][ T1711] ? find_held_lock+0x2b/0x80 [ 3567.038809][ T1711] ? __fget_files+0x215/0x3d0 [ 3567.038822][ T1711] ? hook_file_ioctl_common+0x146/0x410 [ 3567.038850][ T1711] ? __fget_files+0x21f/0x3d0 [ 3567.038867][ T1711] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 3567.038891][ T1711] __x64_sys_ioctl+0x18e/0x210 [ 3567.038913][ T1711] do_syscall_64+0x106/0xf80 [ 3567.038930][ T1711] ? clear_bhb_loop+0x40/0x90 [ 3567.038948][ T1711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3567.038964][ T1711] RIP: 0033:0x7fa00db9c799 [ 3567.038977][ T1711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3567.038992][ T1711] RSP: 002b:00007fa00eaeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3567.039007][ T1711] RAX: ffffffffffffffda RBX: 00007fa00de15fa0 RCX: 00007fa00db9c799 [ 3567.039018][ T1711] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 3567.039027][ T1711] RBP: 00007fa00eaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 3567.039036][ T1711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3567.039049][ T1711] R13: 00007fa00de16038 R14: 00007fa00de15fa0 R15: 00007ffc12e0d968 [ 3567.039069][ T1711] [ 3567.527340][ T1718] netlink: 'syz.3.11369': attribute type 2 has an invalid length. [ 3567.893341][ T1727] Setting dangerous option i915.mitigations - tainting kernel [ 3567.893384][ T1727] Bad "i915.mitigations=Î×ÚCmâUQüF\§Þ ", 'Î×ÚCmâUQüF\§Þ' is unknown [ 3568.478688][ T1745] Setting dangerous option i915.mitigations - tainting kernel [ 3568.478731][ T1745] Bad "i915.mitigations=Î×ÚCmâUQüF\§Þ ", 'Î×ÚCmâUQüF\§Þ' is unknown [ 3569.575710][ T1763] FAULT_INJECTION: forcing a failure. [ 3569.575710][ T1763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3569.575847][ T1763] CPU: 1 UID: 0 PID: 1763 Comm: syz.0.11377 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3569.575893][ T1763] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3569.575905][ T1763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3569.575922][ T1763] Call Trace: [ 3569.575933][ T1763] [ 3569.575944][ T1763] dump_stack_lvl+0x100/0x190 [ 3569.575992][ T1763] should_fail_ex.cold+0x5/0xa [ 3569.576020][ T1763] ? prepare_alloc_pages+0x16d/0x5f0 [ 3569.576057][ T1763] should_fail_alloc_page+0xeb/0x140 [ 3569.576090][ T1763] prepare_alloc_pages+0x1f0/0x5f0 [ 3569.576128][ T1763] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 3569.576177][ T1763] ? __lock_acquire+0x4a5/0x2630 [ 3569.576220][ T1763] ? __lock_acquire+0x4a5/0x2630 [ 3569.576258][ T1763] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3569.576319][ T1763] ? is_bpf_text_address+0x8a/0x1a0 [ 3569.576361][ T1763] ? bpf_ksym_find+0x124/0x1c0 [ 3569.576394][ T1763] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3569.576425][ T1763] ? is_bpf_text_address+0x94/0x1a0 [ 3569.576464][ T1763] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3569.576514][ T1763] ? policy_nodemask+0xed/0x4f0 [ 3569.576548][ T1763] alloc_pages_mpol+0x1fb/0x550 [ 3569.576580][ T1763] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3569.576610][ T1763] ? __lock_acquire+0x4a5/0x2630 [ 3569.576655][ T1763] alloc_pages_noprof+0x131/0x390 [ 3569.576688][ T1763] pte_alloc_one+0x1e/0x3e0 [ 3569.576722][ T1763] __pte_alloc+0x6d/0x3f0 [ 3569.576748][ T1763] ? __pfx___pte_alloc+0x10/0x10 [ 3569.576785][ T1763] copy_page_range+0x3e51/0x6570 [ 3569.576894][ T1763] ? __pfx_copy_page_range+0x10/0x10 [ 3569.576942][ T1763] ? mas_store+0x666/0xac0 [ 3569.576987][ T1763] ? __pfx_mas_store+0x10/0x10 [ 3569.577035][ T1763] ? __pfx___vma_start_write+0x10/0x10 [ 3569.577084][ T1763] dup_mmap+0xd25/0x2180 [ 3569.577134][ T1763] ? __pfx_dup_mmap+0x10/0x10 [ 3569.577166][ T1763] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3569.577207][ T1763] ? __lock_acquire+0x4a5/0x2630 [ 3569.577244][ T1763] ? find_held_lock+0x2b/0x80 [ 3569.577270][ T1763] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 3569.577346][ T1763] copy_process+0x73d7/0x7a10 [ 3569.577381][ T1763] ? __pfx___schedule+0x10/0x10 [ 3569.577428][ T1763] ? __pfx_copy_process+0x10/0x10 [ 3569.577469][ T1763] ? _copy_from_user+0x59/0xd0 [ 3569.577516][ T1763] kernel_clone+0xfc/0x9a0 [ 3569.577552][ T1763] ? __pfx_kernel_clone+0x10/0x10 [ 3569.577583][ T1763] ? futex_private_hash_put+0x107/0x1c0 [ 3569.577633][ T1763] ? __pfx_futex_wake+0x10/0x10 [ 3569.577682][ T1763] __do_sys_clone3+0x214/0x290 [ 3569.577716][ T1763] ? __pfx___do_sys_clone3+0x10/0x10 [ 3569.577805][ T1763] do_syscall_64+0x106/0xf80 [ 3569.577853][ T1763] ? clear_bhb_loop+0x40/0x90 [ 3569.577890][ T1763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3569.577920][ T1763] RIP: 0033:0x7fa00db9c799 [ 3569.577944][ T1763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3569.577973][ T1763] RSP: 002b:00007fa00eac9ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3569.578008][ T1763] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa00db9c799 [ 3569.578028][ T1763] RDX: 00007fa00eac9f10 RSI: 0000000000000058 RDI: 00007fa00eac9f10 [ 3569.578048][ T1763] RBP: 00007fa00dc32bd9 R08: 0000000000000000 R09: 0000000000000058 [ 3569.578066][ T1763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3569.578083][ T1763] R13: 00007fa00de16128 R14: 00007fa00de16090 R15: 00007ffc12e0d968 [ 3569.578127][ T1763] [ 3572.968625][ T1819] FAULT_INJECTION: forcing a failure. [ 3572.968625][ T1819] name failslab, interval 1, probability 0, space 0, times 0 [ 3573.095603][ T1819] CPU: 1 UID: 0 PID: 1819 Comm: syz.1.11382 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3573.095652][ T1819] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3573.095663][ T1819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3573.095679][ T1819] Call Trace: [ 3573.095689][ T1819] [ 3573.095700][ T1819] dump_stack_lvl+0x100/0x190 [ 3573.095746][ T1819] should_fail_ex.cold+0x5/0xa [ 3573.095779][ T1819] ? tomoyo_encode2+0xfb/0x3c0 [ 3573.095809][ T1819] should_failslab+0xc2/0x120 [ 3573.095839][ T1819] __kmalloc_noprof+0xe0/0x850 [ 3573.095879][ T1819] ? rcu_is_watching+0x12/0xc0 [ 3573.095927][ T1819] tomoyo_encode2+0xfb/0x3c0 [ 3573.095963][ T1819] tomoyo_encode+0x29/0x50 [ 3573.095992][ T1819] tomoyo_realpath_from_path+0x18c/0x690 [ 3573.096033][ T1819] tomoyo_path2_perm+0x366/0x700 [ 3573.096079][ T1819] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 3573.096120][ T1819] ? stack_trace_save+0x8e/0xc0 [ 3573.096148][ T1819] ? __pfx_stack_trace_save+0x10/0x10 [ 3573.096174][ T1819] ? try_to_unlazy+0x296/0x910 [ 3573.096213][ T1819] ? stack_depot_save_flags+0x27/0x9d0 [ 3573.096251][ T1819] ? kasan_save_stack+0x30/0x50 [ 3573.096291][ T1819] ? kasan_save_track+0x14/0x30 [ 3573.096331][ T1819] ? kasan_save_free_info+0x3b/0x70 [ 3573.096365][ T1819] ? __kasan_slab_free+0x5f/0x80 [ 3573.096438][ T1819] ? rcu_is_watching+0x12/0xc0 [ 3573.096477][ T1819] ? hook_sb_pivotroot+0x1e0/0x320 [ 3573.096505][ T1819] ? apparmor_capable+0x1d7/0x4d0 [ 3573.096554][ T1819] security_sb_pivotroot+0xc4/0x210 [ 3573.096596][ T1819] path_pivot_root+0x14f/0x1320 [ 3573.096643][ T1819] ? kasan_quarantine_put+0x104/0x240 [ 3573.096684][ T1819] ? lockdep_hardirqs_on+0x78/0x100 [ 3573.096718][ T1819] ? __pfx_path_pivot_root+0x10/0x10 [ 3573.096752][ T1819] ? kmem_cache_free+0x124/0x6a0 [ 3573.096796][ T1819] ? putname+0xb6/0x110 [ 3573.096830][ T1819] __x64_sys_pivot_root+0x19a/0x1c0 [ 3573.096864][ T1819] ? __pfx___x64_sys_pivot_root+0x10/0x10 [ 3573.096913][ T1819] do_syscall_64+0x106/0xf80 [ 3573.096945][ T1819] ? clear_bhb_loop+0x40/0x90 [ 3573.096981][ T1819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3573.097010][ T1819] RIP: 0033:0x7f9d9d19c799 [ 3573.097034][ T1819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3573.097061][ T1819] RSP: 002b:00007f9d9dffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 3573.097089][ T1819] RAX: ffffffffffffffda RBX: 00007f9d9d416090 RCX: 00007f9d9d19c799 [ 3573.097109][ T1819] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000140 [ 3573.097128][ T1819] RBP: 00007f9d9dffd090 R08: 0000000000000000 R09: 0000000000000000 [ 3573.097146][ T1819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3573.097163][ T1819] R13: 00007f9d9d416128 R14: 00007f9d9d416090 R15: 00007ffefd959428 [ 3573.097203][ T1819] [ 3573.097229][ T1819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3573.563972][ T1834] random: crng reseeded on system resumption [ 3573.896245][ T1840] FAULT_INJECTION: forcing a failure. [ 3573.896245][ T1840] name failslab, interval 1, probability 0, space 0, times 0 [ 3573.956671][ T1840] CPU: 0 UID: 0 PID: 1840 Comm: syz.1.11387 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3573.956721][ T1840] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3573.956735][ T1840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3573.956752][ T1840] Call Trace: [ 3573.956762][ T1840] [ 3573.956774][ T1840] dump_stack_lvl+0x100/0x190 [ 3573.956826][ T1840] should_fail_ex.cold+0x5/0xa [ 3573.956862][ T1840] should_failslab+0xc2/0x120 [ 3573.956894][ T1840] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 3573.956939][ T1840] ? __d_alloc+0x34/0xa80 [ 3573.956979][ T1840] __d_alloc+0x34/0xa80 [ 3573.957026][ T1840] d_alloc+0x4a/0x1e0 [ 3573.957061][ T1840] lookup_one_qstr_excl+0x175/0x250 [ 3573.957105][ T1840] start_creating_noperm+0x90/0xd0 [ 3573.957157][ T1840] do_mq_open+0x250/0x9c0 [ 3573.957204][ T1840] ? __pfx_do_mq_open+0x10/0x10 [ 3573.957253][ T1840] __x64_sys_mq_open+0x152/0x1e0 [ 3573.957295][ T1840] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 3573.957357][ T1840] do_syscall_64+0x106/0xf80 [ 3573.957391][ T1840] ? clear_bhb_loop+0x40/0x90 [ 3573.957429][ T1840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3573.957460][ T1840] RIP: 0033:0x7f9d9d19c799 [ 3573.957485][ T1840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3573.957515][ T1840] RSP: 002b:00007f9d9e01e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 3573.957545][ T1840] RAX: ffffffffffffffda RBX: 00007f9d9d415fa0 RCX: 00007f9d9d19c799 [ 3573.957565][ T1840] RDX: 0000000000000008 RSI: 0000000000000dd1 RDI: 0000200000000000 [ 3573.957584][ T1840] RBP: 00007f9d9d232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3573.957603][ T1840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3573.957621][ T1840] R13: 00007f9d9d416038 R14: 00007f9d9d415fa0 R15: 00007ffefd959428 [ 3573.957663][ T1840] [ 3574.799205][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 3574.813131][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3576.223983][ T1873] random: crng reseeded on system resumption [ 3576.445176][ T1873] FAULT_INJECTION: forcing a failure. [ 3576.445176][ T1873] name failslab, interval 1, probability 0, space 0, times 0 [ 3576.560439][ T1873] CPU: 0 UID: 0 PID: 1873 Comm: syz.3.11392 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3576.560494][ T1873] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3576.560506][ T1873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3576.560525][ T1873] Call Trace: [ 3576.560535][ T1873] [ 3576.560547][ T1873] dump_stack_lvl+0x100/0x190 [ 3576.560605][ T1873] should_fail_ex.cold+0x5/0xa [ 3576.560641][ T1873] should_failslab+0xc2/0x120 [ 3576.560672][ T1873] __kmalloc_cache_noprof+0x7a/0x6f0 [ 3576.560711][ T1873] ? alloc_netdev_mqs+0xd95/0x14f0 [ 3576.560747][ T1873] ? __asan_memset+0x23/0x50 [ 3576.560793][ T1873] alloc_netdev_mqs+0xd95/0x14f0 [ 3576.560837][ T1873] ? __pfx_loopback_net_init+0x10/0x10 [ 3576.560953][ T1873] loopback_net_init+0x38/0x170 [ 3576.560997][ T1873] ? __pfx_loopback_net_init+0x10/0x10 [ 3576.561039][ T1873] ops_init+0x1e2/0x5f0 [ 3576.561112][ T1873] setup_net+0x118/0x3a0 [ 3576.561151][ T1873] ? __pfx_setup_net+0x10/0x10 [ 3576.561186][ T1873] ? lockdep_init_map_type+0x5c/0x250 [ 3576.561228][ T1873] ? mutex_init_lockep+0x110/0x150 [ 3576.561273][ T1873] copy_net_ns+0x46f/0x7c0 [ 3576.561318][ T1873] create_new_namespaces+0x3ea/0xac0 [ 3576.561360][ T1873] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 3576.561396][ T1873] ksys_unshare+0x473/0xad0 [ 3576.561436][ T1873] ? __pfx_ksys_unshare+0x10/0x10 [ 3576.561492][ T1873] __x64_sys_unshare+0x31/0x40 [ 3576.561529][ T1873] do_syscall_64+0x106/0xf80 [ 3576.561563][ T1873] ? clear_bhb_loop+0x40/0x90 [ 3576.561609][ T1873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3576.561640][ T1873] RIP: 0033:0x7fa91db9c799 [ 3576.561667][ T1873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3576.561696][ T1873] RSP: 002b:00007fa91ea2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 3576.561725][ T1873] RAX: ffffffffffffffda RBX: 00007fa91de15fa0 RCX: 00007fa91db9c799 [ 3576.561746][ T1873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 3576.561765][ T1873] RBP: 00007fa91dc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3576.561784][ T1873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3576.561802][ T1873] R13: 00007fa91de16038 R14: 00007fa91de15fa0 R15: 00007fff1d72f478 [ 3576.561844][ T1873] [ 3578.006245][ T1899] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 3580.565113][ T1954] FAULT_INJECTION: forcing a failure. [ 3580.565113][ T1954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3580.642549][ T1954] CPU: 1 UID: 0 PID: 1954 Comm: syz.3.11404 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3580.642598][ T1954] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3580.642609][ T1954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3580.642626][ T1954] Call Trace: [ 3580.642636][ T1954] [ 3580.642647][ T1954] dump_stack_lvl+0x100/0x190 [ 3580.642692][ T1954] should_fail_ex.cold+0x5/0xa [ 3580.642725][ T1954] _copy_to_user+0x32/0xd0 [ 3580.642769][ T1954] simple_read_from_buffer+0xcb/0x170 [ 3580.642815][ T1954] proc_fail_nth_read+0x1af/0x230 [ 3580.642848][ T1954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3580.642883][ T1954] ? rw_verify_area+0xce/0x6d0 [ 3580.642921][ T1954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3580.642954][ T1954] vfs_read+0x1e4/0xb30 [ 3580.642999][ T1954] ? __pfx_vfs_read+0x10/0x10 [ 3580.643040][ T1954] ? __fget_files+0x215/0x3d0 [ 3580.643074][ T1954] ? __fget_files+0x21f/0x3d0 [ 3580.643111][ T1954] ksys_read+0x12a/0x250 [ 3580.643152][ T1954] ? __pfx_ksys_read+0x10/0x10 [ 3580.643213][ T1954] do_syscall_64+0x106/0xf80 [ 3580.643244][ T1954] ? clear_bhb_loop+0x40/0x90 [ 3580.643278][ T1954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3580.643307][ T1954] RIP: 0033:0x7fa91db5cfce [ 3580.643331][ T1954] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3580.643358][ T1954] RSP: 002b:00007fa91ea29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3580.643384][ T1954] RAX: ffffffffffffffda RBX: 00007fa91ea2a6c0 RCX: 00007fa91db5cfce [ 3580.643412][ T1954] RDX: 000000000000000f RSI: 00007fa91ea2a0a0 RDI: 0000000000000006 [ 3580.643429][ T1954] RBP: 00007fa91ea2a090 R08: 0000000000000000 R09: 0000000000000000 [ 3580.643447][ T1954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3580.643464][ T1954] R13: 00007fa91de16038 R14: 00007fa91de15fa0 R15: 00007fff1d72f478 [ 3580.643503][ T1954] [ 3582.819236][ T1986] FAULT_INJECTION: forcing a failure. [ 3582.819236][ T1986] name failslab, interval 1, probability 0, space 0, times 0 [ 3582.867977][ T1986] CPU: 1 UID: 0 PID: 1986 Comm: syz.4.11412 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3582.868033][ T1986] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3582.868045][ T1986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3582.868063][ T1986] Call Trace: [ 3582.868073][ T1986] [ 3582.868084][ T1986] dump_stack_lvl+0x100/0x190 [ 3582.868136][ T1986] should_fail_ex.cold+0x5/0xa [ 3582.868173][ T1986] should_failslab+0xc2/0x120 [ 3582.868204][ T1986] __kmalloc_cache_noprof+0x7a/0x6f0 [ 3582.868240][ T1986] ? drm_atomic_helper_setup_commit+0x56f/0x14f0 [ 3582.868333][ T1986] ? drm_atomic_helper_check+0x10f/0x190 [ 3582.868374][ T1986] drm_atomic_helper_setup_commit+0x56f/0x14f0 [ 3582.868427][ T1986] drm_atomic_helper_commit+0xa9/0x380 [ 3582.868463][ T1986] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 3582.868497][ T1986] drm_atomic_commit+0x230/0x300 [ 3582.868528][ T1986] ? __pfx_drm_atomic_commit+0x10/0x10 [ 3582.868557][ T1986] ? __pfx___drm_printfn_info+0x10/0x10 [ 3582.868614][ T1986] ? drm_client_rotation+0x451/0x6a0 [ 3582.868654][ T1986] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 3582.868700][ T1986] ? __mutex_lock+0x26a/0x1b90 [ 3582.868736][ T1986] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 3582.868771][ T1986] ? drm_master_internal_acquire+0x21/0x80 [ 3582.868839][ T1986] drm_client_modeset_commit_locked+0x14d/0x580 [ 3582.868880][ T1986] drm_client_modeset_commit+0x4f/0x80 [ 3582.868915][ T1986] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 3582.868957][ T1986] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 3582.869005][ T1986] drm_fbdev_client_restore+0x1b/0x30 [ 3582.869051][ T1986] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 3582.869095][ T1986] drm_client_dev_restore+0x205/0x2a0 [ 3582.869137][ T1986] drm_release+0x2c6/0x360 [ 3582.869169][ T1986] ? __pfx_drm_release+0x10/0x10 [ 3582.869200][ T1986] __fput+0x3ff/0xb40 [ 3582.869242][ T1986] task_work_run+0x150/0x240 [ 3582.869286][ T1986] ? __pfx_task_work_run+0x10/0x10 [ 3582.869340][ T1986] exit_to_user_mode_loop+0x100/0x4a0 [ 3582.869382][ T1986] do_syscall_64+0x668/0xf80 [ 3582.869416][ T1986] ? clear_bhb_loop+0x40/0x90 [ 3582.869452][ T1986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3582.869483][ T1986] RIP: 0033:0x7fb6a939c799 [ 3582.869508][ T1986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3582.869536][ T1986] RSP: 002b:00007fb6aa2a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 3582.869564][ T1986] RAX: 0000000000000000 RBX: 00007fb6a9616090 RCX: 00007fb6a939c799 [ 3582.869581][ T1986] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 3582.869598][ T1986] RBP: 00007fb6a9432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3582.869616][ T1986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3582.869633][ T1986] R13: 00007fb6a9616128 R14: 00007fb6a9616090 R15: 00007ffe4a0d2a38 [ 3582.869673][ T1986] [ 3584.711081][ T2004] forcing mempool usage for bvec_alloc+0x197/0x210 [ 3585.278430][ T2011] random: crng reseeded on system resumption [ 3592.286773][ T2102] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 3592.410862][ T2104] netlink: 338 bytes leftover after parsing attributes in process `syz.3.11439'. [ 3593.399008][ T2121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11444'. [ 3593.578569][ T2121] veth1_macvtap: left promiscuous mode [ 3594.648124][ T2144] random: crng reseeded on system resumption [ 3594.869211][ T2143] hub 1-0:1.0: USB hub found [ 3594.885179][ T2143] hub 1-0:1.0: 1 port detected [ 3597.447713][ T2174] FAULT_INJECTION: forcing a failure. [ 3597.447713][ T2174] name failslab, interval 1, probability 0, space 0, times 0 [ 3597.479540][ T2173] netlink: 'syz.0.11456': attribute type 4 has an invalid length. [ 3597.493645][ T2174] CPU: 0 UID: 0 PID: 2174 Comm: syz.1.11455 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3597.493698][ T2174] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3597.493710][ T2174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3597.493727][ T2174] Call Trace: [ 3597.493736][ T2174] [ 3597.493747][ T2174] dump_stack_lvl+0x100/0x190 [ 3597.493798][ T2174] should_fail_ex.cold+0x5/0xa [ 3597.493836][ T2174] should_failslab+0xc2/0x120 [ 3597.493868][ T2174] __kmalloc_cache_noprof+0x7a/0x6f0 [ 3597.493906][ T2174] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 3597.494025][ T2174] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 3597.494071][ T2174] vidtv_mux_init+0x8a6/0xbf0 [ 3597.494114][ T2174] vidtv_start_feed+0x33e/0x4c0 [ 3597.494191][ T2174] ? __pfx_vidtv_start_feed+0x10/0x10 [ 3597.494239][ T2174] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 3597.494294][ T2174] ? mark_held_locks+0x40/0x70 [ 3597.494339][ T2174] ? __pfx_vidtv_start_feed+0x10/0x10 [ 3597.494383][ T2174] dmx_ts_feed_start_filtering+0xf6/0x220 [ 3597.494438][ T2174] dvb_dmxdev_start_feed+0x273/0x3f0 [ 3597.494493][ T2174] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 3597.494541][ T2174] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 3597.494590][ T2174] dvb_demux_do_ioctl+0xe64/0x1200 [ 3597.494649][ T2174] dvb_usercopy+0x167/0x340 [ 3597.494687][ T2174] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 3597.494734][ T2174] ? __pfx_dvb_usercopy+0x10/0x10 [ 3597.494789][ T2174] ? __fget_files+0x21f/0x3d0 [ 3597.494825][ T2174] dvb_demux_ioctl+0x29/0x40 [ 3597.494864][ T2174] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 3597.494905][ T2174] __x64_sys_ioctl+0x18e/0x210 [ 3597.494951][ T2174] do_syscall_64+0x106/0xf80 [ 3597.494984][ T2174] ? clear_bhb_loop+0x40/0x90 [ 3597.495023][ T2174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3597.495054][ T2174] RIP: 0033:0x7f9d9d19c799 [ 3597.495080][ T2174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3597.495110][ T2174] RSP: 002b:00007f9d9dffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3597.495140][ T2174] RAX: ffffffffffffffda RBX: 00007f9d9d416090 RCX: 00007f9d9d19c799 [ 3597.495161][ T2174] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 3597.495179][ T2174] RBP: 00007f9d9d232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3597.495198][ T2174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3597.495217][ T2174] R13: 00007f9d9d416128 R14: 00007f9d9d416090 R15: 00007ffefd959428 [ 3597.495259][ T2174] [ 3597.495382][T11660] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 3597.754054][T11660] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 3597.762491][T11660] CPU: 0 UID: 0 PID: 11660 Comm: kworker/0:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 3597.773492][T11660] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 3597.778660][T11660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3597.788694][T11660] Workqueue: events vidtv_mux_tick [ 3597.793795][T11660] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 3597.800387][T11660] Code: ac 7d dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 3597.819977][T11660] RSP: 0018:ffffc9000e2df3f8 EFLAGS: 00010202 [ 3597.826026][T11660] RAX: 0000000000000002 RBX: ffffc9000e2df678 RCX: 0000000000000002 [ 3597.833976][T11660] RDX: 0000000000000000 RSI: ffffffff882b9394 RDI: ffff888029f99e80 [ 3597.841930][T11660] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 3597.849909][T11660] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000e2df698 [ 3597.857869][T11660] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 3597.865823][T11660] FS: 0000000000000000(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000 [ 3597.874742][T11660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3597.881307][T11660] CR2: 000000000069a000 CR3: 0000000075a4a000 CR4: 00000000003526f0 [ 3597.889259][T11660] Call Trace: [ 3597.892523][T11660] [ 3597.895437][T11660] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 3597.901760][T11660] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 3597.907294][T11660] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 3597.913347][T11660] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 3597.919055][T11660] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 3597.925111][T11660] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3597.931251][T11660] vidtv_mux_push_si+0x932/0xe80 [ 3597.936175][T11660] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 3597.941621][T11660] ? __pfx_vidtv_ts_pcr_write_into+0x10/0x10 [ 3597.947594][T11660] ? do_raw_spin_lock+0x128/0x260 [ 3597.952606][T11660] ? debug_object_activate+0x331/0x490 [ 3597.958053][T11660] vidtv_mux_tick+0xe96/0x1480 [ 3597.962802][T11660] ? debug_object_activate+0x331/0x490 [ 3597.968246][T11660] ? __lock_acquire+0x4a5/0x2630 [ 3597.973172][T11660] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 3597.978370][T11660] ? __lock_acquire+0x4a5/0x2630 [ 3597.983291][T11660] ? debug_object_deactivate+0x2e4/0x3b0 [ 3597.988909][T11660] ? finish_task_switch.isra.0+0x200/0xb80 [ 3597.994699][T11660] ? rcu_is_watching+0x12/0xc0 [ 3597.999450][T11660] process_one_work+0x9d7/0x1920 [ 3598.004379][T11660] ? __pfx_process_one_work+0x10/0x10 [ 3598.009739][T11660] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 3598.014920][T11660] worker_thread+0x5da/0xe40 [ 3598.019503][T11660] ? kthread+0x13a/0x450 [ 3598.023736][T11660] ? __pfx_worker_thread+0x10/0x10 [ 3598.028833][T11660] kthread+0x370/0x450 [ 3598.032884][T11660] ? __pfx_kthread+0x10/0x10 [ 3598.037458][T11660] ret_from_fork+0x754/0xd80 [ 3598.042036][T11660] ? __pfx_ret_from_fork+0x10/0x10 [ 3598.047133][T11660] ? __switch_to+0x7b4/0x1120 [ 3598.051790][T11660] ? __pfx_kthread+0x10/0x10 [ 3598.056367][T11660] ret_from_fork_asm+0x1a/0x30 [ 3598.061118][T11660] [ 3598.064119][T11660] Modules linked in: [ 3598.069512][T11660] ---[ end trace 0000000000000000 ]--- [ 3598.306153][ T2173] netlink: 314 bytes leftover after parsing attributes in process `syz.0.11456'. [ 3598.338928][T11660] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 3598.338984][T11660] Code: ac 7d dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 3598.339009][T11660] RSP: 0018:ffffc9000e2df3f8 EFLAGS: 00010202 [ 3598.339032][T11660] RAX: 0000000000000002 RBX: ffffc9000e2df678 RCX: 0000000000000002 [ 3598.339049][T11660] RDX: 0000000000000000 RSI: ffffffff882b9394 RDI: ffff888029f99e80 [ 3598.339076][T11660] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 3598.339094][T11660] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000e2df698 [ 3598.339111][T11660] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 3598.339128][T11660] FS: 0000000000000000(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000 [ 3598.339154][T11660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3598.339173][T11660] CR2: 00007f9d9dfdcd58 CR3: 000000000e598000 CR4: 00000000003526f0 [ 3598.339218][T11660] Kernel panic - not syncing: Fatal exception [ 3598.339475][T11660] Kernel Offset: disabled