last executing test programs: 6.577701328s ago: executing program 1 (id=2175): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) futex_wait$auto(0x0, 0x80000000, 0x21b1, 0x80, 0x0, 0x3) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) write$auto_proc_mem_operations_base(r1, 0x0, 0x0) socket(0x6, 0x5, 0xffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$auto(r5, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x5, 0x10001, 0x400000000003, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) ioctl$auto_EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x8005) ioctl$auto_EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000480)="444883f8008244f0989a1a5e13792e43d7f612d7720cb7f9d5b9febcc2fb2e23b009d567348f7b231ca9856e593235ec88399d86cd55d4c1fc935c143ae2fedb824f76cc40", 0x4f5a, &(0x7f0000000140)={&(0x7f0000000540)="aee5864e743dea286c2dad9c6063a913d95aad4fbd19c14c681d370d92162c89e6dfe0de93c4e5d58fd83aca79c710f4083d7f0ecc0a45c1653c8354ce78f5cd220035fb65dd58d6a61f1286aad40eae4494419c6679894248c89dcbe06f5c9e552a6721fc27bcd3aa0df98d0f6d5681484527541d5bea06d69de40c3a409152c212dc005837616b176a7069fcb7391749ca90c7905b17015b27f37d4cd0c3dbfe260beeb22f765313b5bd321c", 0x101}, 0x1, &(0x7f00000007c0)="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", 0x8d, 0x3}, 0x93}, 0x3, 0x80c) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/030/001\x00', 0x2901, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event0\x00', 0x4c0c2, 0x0) ioctl$auto(0x3, 0xc048aec8, 0xffffffffffffffff) mprotect$auto(0x200000000000, 0x806121, 0x4) 6.486758165s ago: executing program 3 (id=2177): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/neigh/caif0/anycast_delay\x00', 0x40682, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nullb0/hctx1/state\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x581000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, 0x0) write$auto(r1, &(0x7f0000001ac0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3\t\x00\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057\x1c&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\x7f\x00\x00\x00AN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81.f\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xbd_r\xf16\xec\xf3\xbb[.\xf3\xef\xf8\x16x\x9e\xb3*:/L\xa0Kg\xf0\xa2\x84\xa3o\xcc\x9e\xd3\xeb\xd3(\xaa\x93g~\x01\x81\x1eV\xf1L\xfc\xad\xa9#O\xe4\x12\xd3\xbda\xbc\x9a\x9f+9\'\xc4\x13\xf0\xc88\x1d80?\xc2\a\af\xdc?-&\xedAd\x9c\xe5&\xb9\x14\xe1\x85 \xbf\x18\xfc:#\xcf\x7ffT\xefPb\xe1\xfa]\xcc\x8a\xe3\x99\x98u\x9bj>\x9d\xc2\x1fk\x87\x92\xfb(U\xa8\xcd4+\xf6e5],\xec\x84 \x1b\x10d\x1b@\x84X\xa1\xa8\xd7\xccO\xb0Qq\x1a\xa4<\\\x0e\xa4\x7f^\x1a|\xfd\xe6#\x00\x9e\x1d\x00k\x84\x1b\xa3\xb1O\xe0IzJRO\xf4,\xe5\xdb\x03CA\x13Q\x84\xbb\x88\xb4\xe3\xba\xf0/\xd0\x04\ny\a\x8d\x12h\xe22\xcb\"\xce\x00\x00\x9e\xb4\x8aaS1\f\xa9\xa73\x88\x8eA\xcb\xa0n\x14(\x8c;8N\xd3\x97\b\x12\xec\x1a\x9b\xbe\x0e9N\x16[e\xd5\x83wm\xe0\xdd\xafC2[\xacw\xe2v\xf5\x1cp\xf0\xc7TC\xd2^)\xf7\x1f\xf6\xc3', 0x1) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket(0x2, 0x6, 0x0) lstat$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)={0x659f, 0x3, 0x8000000000000000, 0x3cfa, 0x0, 0x0, 0x0, 0x4, 0x101, 0x5, 0x8000000000000001, 0x8, 0x4, 0xc0b, 0x9, 0x7, 0xe65}) close_range$auto(0x2, r3, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x404400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r5, 0x4068aea3, &(0x7f0000000080)={0xa3}) mmap$auto(0xe4b, 0x2020009, 0x2, 0x16, r4, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x3a9803, 0x0) read$auto(r7, 0x0, 0x7) epoll_create1$auto(0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0x3ff, 0x25, &(0x7f0000000200)='$\x00', &(0x7f0000000280)=0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x1, 0x0) 5.716842801s ago: executing program 3 (id=2179): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) io_uring_setup$auto(0x85, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14006b42", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x40480c0}, 0x40000) r5 = getsockopt$auto(r1, 0x0, 0x487, 0x0, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x7, 0x28002) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r6, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) pipe2$auto(0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) r7 = socket(0x2, 0x5, 0x0) getsockopt$auto(r7, 0x84, 0x75, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) ioprio_get$auto(0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x3b72, 0x0) ioctl$auto_CEC_ADAP_S_PHYS_ADDR(r5, 0x40026102, &(0x7f0000000040)=0xfdf) 4.577262299s ago: executing program 1 (id=2183): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0xeffffffe, 0x3, 0x0) socket(0x2, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) fdatasync$auto(0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r1, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000200)="7b9b7da024c1c24169fb1eb914e3b7f221f2841c3d38cd87d0", 0x1, &(0x7f0000000380)={&(0x7f0000000280)="8346937e12ba00e330311a19e48a0a9a2e91b6de44b66b63f1596b3f9d5c9f510298d5522b2f135e98b99e6fac9035b3e0469f8d1a694f4c16c64bb3c27c1179a6c16599a273abe7a3569be3", 0x4}, 0x54, &(0x7f00000003c0)="58a887ce482f9847847a27203ddba921d454a6c86fce97592078366c4f6c8fee6e7fd116b574b538e1bad18ef1da26cba8642753abd3f8a96926c38339c11b133eef5aa66e23c098ba119eb39971e64edb18441af8d68649f32ada49d82cc34fcb6e9bdf708ee7abcdfb1c5b915d39c0be5f029d67b53f7afb0a133600981508423b6fa88476b25248297c7d3426dff1c875d16de47691fc61aafcae44ff57e63b2b25a7", 0x4000d8, 0x7fffffff}, 0x5fb}, 0x101, 0xc2d2, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000000)=' ', 0x1) write$auto(r2, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) r3 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(r3, &(0x7f0000000300)={0x0, 0x10001}, 0xc) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000100)=""/114, 0x72) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0x1000eb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.422854876s ago: executing program 0 (id=2184): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/overlay/parameters/check_copy_up\x00', 0x129882, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) (fail_nth: 8) 4.049801771s ago: executing program 0 (id=2185): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2000040080000004, 0xe) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000e80)=""/206, 0xce) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x90006441, 0xc35) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010072e0fa60fddbdf2500000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, &(0x7f0000000340)={[0x8, 0x5, 0xffff, 0x9, 0xf55c, 0x4, 0x8, 0x1, 0x9, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x2, 0x6, 0x89, 0x3, 0x5]}, &(0x7f00000003c0)={[0x101, 0x9a, 0x10, 0x4, 0x3, 0x1000000000009, 0x5, 0x223d, 0x10000, 0x3, 0x1000, 0x6, 0x4, 0x10000, 0x6, 0x10]}, &(0x7f0000000440)={[0xfffffffffffffff3, 0x8b0, 0x743b, 0x0, 0x10, 0x8, 0xffffffffffffffff, 0x6, 0x5f, 0x9, 0x6, 0x0, 0x401, 0x1, 0x9, 0x3]}, &(0x7f00000004c0)={0x7fff, 0x3}) pwrite64$auto(0xc8, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99?\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xad\x83\x13\x82\xdfT\x916;CL\"\x81\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2SZ\xf6\x8d\xdb\xcb\r\xcaN_\xa6h\xe2\xf9*w_\x84\xb8\x1aY>%:\xad9\xb8\x87\xfc\x85\x90\xfaB\xb6\xe3I\x18$\x1f\xc1YG\x94\xec\x82\xb7b[8n(\xd1Y\a\x04w\xd53\xce\xee\xdbw\xb0\xd4\xae\x0f\xce\x8e+\xaa\xcf\x86\xcd@~\xe0', 0xfded, 0x3) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r3) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40210}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x148, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7d}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x10}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x200}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7ff}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xd}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x81}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x4}, @ETHTOOL_A_CABLE_TEST_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6e4}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdfd}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7fff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40004}, 0x20000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x124, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PLCA_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7c7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdd92}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PLCA_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}]}, @ETHTOOL_A_PLCA_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32, @ANYBLOB="0c0001800800010002"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) listen$auto(0x3, 0x83) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x100, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 4.008759665s ago: executing program 2 (id=2186): futex$auto(&(0x7f0000000000)=0xfffffff7, 0x8, 0x5, &(0x7f0000000040)={0x8000, 0x2}, &(0x7f0000000080)=0x6, 0x0) (async) r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) mq_timedsend$auto(r0, &(0x7f0000000100)=')-\x00', 0x7, 0x8, &(0x7f0000000140)={0x0, 0x8}) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0\x00', 0x125000, 0x0) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r3 = pidfd_getfd$auto(r2, 0xffffffffffffffff, 0x400) ioctl$auto_TIOCSETD2(r3, 0x5423, &(0x7f0000000200)="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") read$auto_event_trigger_fops_trace(r3, &(0x7f0000001200)=""/33, 0x21) (async) sendmsg$auto_NL80211_CMD_SET_CQM(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf8}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x2000080) (async) r4 = getpid() fcntl$auto_F_SETOWN(r2, 0x8, r4) move_pages$auto(r4, 0x4, &(0x7f0000001380)=&(0x7f0000001340)="ff", &(0x7f00000013c0)=0x1, &(0x7f0000001400)=0x80000001, 0x6) (async) r5 = bpf$auto(0x1000, &(0x7f0000001440)=@query={@target_fd=r0, 0x2, 0xfff, 0x6, 0x6, @prog_cnt=0x3, 0x0, 0x8b8, 0x31bb, 0x9, 0x6}, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001540), r5) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001680)={&(0x7f0000001500), 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0xb4, r7, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_PMKID={0xa0, 0x55, "120f526425189bbf26f8f6d6634bc7620eca020ed360fd627ded142ce7b784cf734ef42e6e168e8cc904de99f402a998a34ff784ef51a9ea3541260f038bacd147cfba4380aa80bca4c7373d67e80849d905dd0dd956c12e4fbc00813d52c2430d5bdbfba7b9ac3eea869bc3f91533c4a7a236c891dcfcd29d0c5de19bf30d514426bcbd3529c6223e6750104838156a0bf2644367007ac6b045739b"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2000}, 0x11) (async) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000016c0), r5) (async) ioctl$auto_OTPERASE(r6, 0x400c4d19, &(0x7f0000001700)={0x9, 0x3, 0x2}) r9 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000001780), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r5, &(0x7f0000003c40)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c00)={&(0x7f00000017c0)={0x2430, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x12b2, 0x1, 0x0, 0x1, [@typed={0x4, 0xe6}, @nested={0x1a3, 0xc5, 0x0, 0x1, [@generic="d60d8acccbe9a70a2f420b0dc9fa0d8e7cc137590c4ff473a080e40b37ee4d1bd3b6ffacac768e3c3003c5f8b5c619c03d0d28db732c56ea1330db872291cf66339750a247929ae9eae675335db6", @generic="20f55a7fa6bb7fdfb2b263de551ce42802f8d0d1dc965910d34ec707b77c717a0d5127d81bc387b56901c0bbc477eb5e4e3b44b8d7baa061d87b008ed4a48770", @nested={0x4, 0x6d}, @nested={0x4, 0xd9}, @generic="fe470f4d23e33f12cd0b1a8863a4e4ae9e4b748f3e19b7493aca5c1dcf39bf00b7af74b627a29e2ce3c95434f5b6582ac49e2fafe76d4d6df2b1a974982d6ec42e987d09a6dbaaf2ed6efbd9178cfbf7e95a1604115c37e8eaff5a79f48a8d8acd83c396a001479e82fc2ec7243212a717c9ff5561d1915db7a68b52e8021df61a895273346e7525a5a34df287f866d4c2b7d4ed213b70a6c987583ea198ff4fd617c03d7dc22419a7262b8eeb947f1982553b61d7e90b2a9ba5b5be0b8b83f93398999d8ea9be9d98091afe42181d28cce5c5", @typed={0x8, 0x81, 0x0, 0x0, @u32=0xffff8001}, @generic="cb549bb3b5959d22a3c59d36636dfd42807fdc51c13af910b29a6fc90748409090d8e9a04bb7", @typed={0x8, 0x6a, 0x0, 0x0, @pid=r4}]}, @typed={0x14, 0xf4, 0x0, 0x0, @ipv6=@remote}, @generic="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", @generic="2307fe0594cb8f5b9a25e28f104bbe1b5b16aa15bc7fc91d4a36969f710597938b0a17846c0cb3ab057913716931d3cd4050041cd840b808f921749c79ebadc18637b7f6b1402ff02b59609808d0ba6bed291760501575cee17c01492203a1e96dd4aeab7a2d410c03b0114f74bed434e329ecc7ce209a8a102fe913807090e30fb7cd274918b6c8ebc042e7d7f3c78f13f5228b0840d1db28b75e9791e2f2129500a9986c4d9e6a9f6d6939eb315824f5ffc1e067e9c92a3879c32ffc39f7a45f331d29be360c21bae01ccc7a596c1bf334dacf2f8af7496899b8bd698df14b9bc587c21af8bc59fff5952c1117d2f692a5"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x5a, 0x1, 0x0, 0x1, [@generic="f9d6ac5402e080978e595612b3a23ae612d8ce0a316da9bc51d5607f5eada9a69841cd144b382ba2078ea81696e698bbb4eb248e198d508277dbb7169443", @typed={0x8, 0x145, 0x0, 0x0, @uid}, @typed={0x8, 0xd4, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x36, 0x0, 0x0, @ipv4=@empty}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x110c, 0x1, 0x0, 0x1, [@nested={0xe1, 0xa5, 0x0, 0x1, [@generic="776a80da8869842233b2b47a07bd72f7792d9636da68ae64cfb1b6362dc675d7b84f28398422cc9f12b88b1b799d3e66eb2de784c61c5a25adbac663f1a6ffaf8ac063cb8aadc6039cd2bbd7a61c13e166dbe2b8dff93d4929112387b66180f214f6b17f99b02aa35c5af6883873a64e651d319a8560db90eefef3d8729ee2a4df9abb957bbb2886b923a06e5079a8e123bafa85f09bad22c7b24c988954db00921611b22d038e1eaf5ed8cc2e533b17ce8500bd53c17a49fa92e18c14db5900fa06b71196f34b1daabab6b4045578838adee7eca6", @typed={0x8, 0x77, 0x0, 0x0, @ipv4=@local}]}, @generic="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", @generic="14082cdab0260a865fa19ebd904c54e0d64d406fbebbcb37574fe74b8a25da14", @typed={0x4, 0x58}]}]}, 0x2430}}, 0x24000000) (async) r10 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000003cc0), r6) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r5, &(0x7f0000003d80)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x14, r10, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) ioctl$auto_MEMSETBADBLOCK(r3, 0x40084d0c, &(0x7f0000003dc0)=0x7) (async) r11 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000003e00)='/sys/kernel/debug/bluetooth/hci8/force_wakeup\x00', 0x200000, 0x0) (async) r12 = fcntl$auto(r1, 0x1, r4) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES2(r5, 0x80489439, &(0x7f0000003e40)=[{0x0, 0x9, 0x81}, {0x4, 0x7, 0x3ff}, {0xba0, 0xd, 0xfffffffffffffff8}]) (async) shmctl$auto_IPC_INFO(0x3, 0x3, &(0x7f0000004000)={{0x7fff, 0xffffffffffffffff, 0xee01, 0x2, 0x40, 0x3ff, 0x9}, 0x3ff, 0x9bff, 0xe, 0x7fff, @raw=0xfffffc00, @inferred=r4, 0x4, 0x0, &(0x7f0000003ec0)="bbc5012fdc48bbd76187731b245f0f0042291ef5dd355c377aec29ab3f7a79768750b4d81df73a6bd0d0dccf4defa3c8f6f4174cbc31bb93686c104476dd661632238ed97bfe0fea3cbed854050eade2de9a9bf42762ea6bada668ed5fd28417da3b04f8b0301757fc4fea4ec02dbbad39b7953ecc8305bbdb3934f5afe13778518853ca5e168e74f71690c7bdac8706b63e5f8564697138da47f5b55b728d48191355ac04c1325dd4281dc7421d23a5b453e8c4d1ad0e9f487a7e4bca66eedf6f11ce97228812a7034884696ad2119b576038860eb70375e9f65d8dc44fc7dc4e50af1da77797e734d5d26ccd4408e05094ac83e65f4821ef", &(0x7f0000003fc0)="81045aa7fc106c40bdffe48b1efcaad1eef1ed7710602cf2d1f3bf"}) (async) shmctl$auto_SHM_LOCK(0x8, 0xb, &(0x7f00000041c0)={{0x6, 0xee00, 0x0, 0x2e08, 0x8000, 0x7, 0xaff4}, 0x3, 0x0, 0x1cc, 0x5, @inferred=r4, @inferred=r4, 0x7f, 0x0, &(0x7f0000004080)="cb5af7c1be1507f5ba4179be9dbd5f1167863cbb4fb6856a0d2b0aa72ff8e9899d52fa35533cfa55e4227e757c7490111e16f6c5a13df3ab382bac02decdae92f09430169dfb8e31", &(0x7f0000004100)="b5f1e87778c334dfcceb6559ac7d906e0f2250d788ec5dc0afe0f339ac5b58d87eaa918f33ff3f52112170acc2b3005a64935d68671d8e82bc75c1d04146c6ccee86d4cb768a637df605e536ab29aa5d7f88d23298e91504ccfd19f22631bae3788a99cfa1f2387d2f78d7a50f7eb8ed99e364a7d92c12eef5bcb28c5701213a893566db3f5de88fdbb6a2fd1075a60105a1fa8f38ff3bde9f5d560128e6c599c57251fb2a641a445e77df628a4c51904a415996"}) fchown$auto(r5, r13, r14) (async) sendmsg$auto_HWSIM_CMD_FRAME(r12, &(0x7f0000004800)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000047c0)={&(0x7f0000004280)={0x534, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_TX_INFO_FLAGS={0xb6, 0x15, "72dbf489ea04aeb1bdb907e287a076678fee83e2fc9fca4365e08e098af18b53f11c980b03f4d7805b2a1e7da1b8323d290d4c01075c99b00866b851c6816f34c625ffaa77d1077332a6e2e66959e9aa5430e110dee955002dd713fbf3ce5008a13c97e4afb91582fdbc28f676d95393d96842d54e615a1072cea4745e05c137582739bc019e4de2045464f5ad16499db9c2f897be201f15536285104cd97d52c6022a024699c18e1cc69ea9d0940191bcb5"}, @HWSIM_ATTR_FRAME={0x3e4, 0x3, "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"}, @HWSIM_ATTR_CHANNELS={0x8}, @HWSIM_ATTR_TX_INFO_FLAGS={0x6b, 0x15, "15d0136fedc7016624d02c6b12226d66ed8bc0a2e30bc364347ceae658204b71a461094972bf77bb5ce389fb345e53c4142d298a7605b41d68a7281664d3daa26a1ba844ac4cb02c9e15791458af80db3821192672b4d8d4dca3afa05e03256805079f591d90ff"}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x2}, @HWSIM_ATTR_REG_STRICT_REG={0x4}]}, 0x534}}, 0x2004c011) (async) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004840)=@bpf_attr_4={0x2, r11, 0x7, r3}, 0x7326) 3.701733277s ago: executing program 2 (id=2187): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) writev$auto(r0, &(0x7f00000002c0)={0x0, 0x5}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.9/usb27/product\x00', 0x1ff903, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x40001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r3, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptytd\x00', 0x800, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r5 = socketpair$auto(0x1e, 0x1, 0xfffffffe, 0x0) ioctl$auto(r4, 0x541c, r5) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x89f3, r1) kexec_load$auto(0x6, 0x10000, &(0x7f0000000080)={@buf=&(0x7f0000000140)="315c589fe2f373c4aa4e8c81430a555cb13d9048749c8ebcd2f12e3a9514ec684b", 0x7, 0x3b, 0x6}, 0x401) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, 0x0, 0x6a) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xfffffffe) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xe1d2b27bdc14ab34) fcntl$auto(r6, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7f) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) 3.318568307s ago: executing program 0 (id=2188): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000001c0)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8004) select$auto(0x6, 0x0, &(0x7f0000000000)={[0x5, 0x20000000000002, 0x5, 0x19, 0x6, 0x44, 0xffffffffffffffd4, 0x200000f, 0x0, 0x0, 0xf, 0xd59, 0x900000000105, 0x9b, 0x2, 0xffffffffffffffff]}, 0x0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1ad800, 0x155) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x10, 0x3, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/fcloop/ctl/del_local_port\x00', 0x80001, 0x0) r3 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty37\x00', 0x800, 0x0) ioctl$auto(r4, 0x560a, r3) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) madvise$auto(0x6, 0x200007, 0x19) 2.965978017s ago: executing program 3 (id=2189): socket(0xa, 0x3, 0x3a) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/modules\x00', 0x88880, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x40601, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2400c890) getsockopt$auto_SO_PASSPIDFD(r1, 0x1, 0x4c, &(0x7f0000000180)='/dev/dsp\x00', &(0x7f00000001c0)=0x5) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 2.463159837s ago: executing program 3 (id=2190): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) semctl$auto_SETALL(0x1, 0x803, 0x11, 0x81) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x4, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/005/001\x00', 0x40cc00, 0x0) getsockopt$auto_SO_BINDTODEVICE(0xffffffffffffffff, 0x1ff, 0x19, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000040)=0x1b36) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/vivid.0/cec28/power/runtime_suspended_time\x00', 0x22040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xa0000, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) ioctl$auto_PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0x100082) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40400, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) write$auto(r0, 0x0, 0xa5d5) 2.453467036s ago: executing program 2 (id=2191): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x20, 0x0, 0x301, 0x70bd23, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x9, 0x2, 'l2tp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB='j'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) r1 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000140), 0x240000, 0x0) read$auto_ima_measurements_ops_ima_fs(r1, &(0x7f0000001a80)=""/4096, 0x1000) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x67ca, 0x7ff) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x67c1, 0x7ff) sysfs$auto(0x2, 0x2c, 0x0) r2 = fsopen$auto(0x0, 0x1) read$auto_udf_dir_operations_udfdecl(r2, &(0x7f0000000040)=""/23, 0x17) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) ioctl$auto_BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000340)={"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", 0x8, 0x1}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) 2.411333356s ago: executing program 0 (id=2192): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x401, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x52) write$auto(0x3, 0x0, 0xfdf3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) 2.350301256s ago: executing program 1 (id=2193): getrlimit$auto(0xffff, 0x0) r0 = socket(0x15, 0x1, 0x40) recvmmsg$auto(r0, &(0x7f0000000200)={{&(0x7f0000000000)="13daff6ff80d9cd18cc4936f3c9647131ba29eb637d349acb352bbd60aef596120d04b48a071caf5ff65e89458d26ee043b48dba7046d9176acf694b204f7cea4f45e369376729247e621038ccebee1b0287", 0x84, &(0x7f0000000080)={&(0x7f0000000100)="949877c04882f0cfd6ae58ca8f987dd507aba860ac76aeab9829611f305fcf2c57b18b4276563ab098c1b89337ddd16b26ba0e9a391e6ffe3abec609bd0e9dcb640e02ab99f96fae20f43d53c459d13452b72b866010d8c0652e025e17f479af27b6797b18dda6f12ac26c8632b28202db1065e59ffcec01523226a9589daea84fbebda6041cae304f53a38260c4b7ea06ad9c638764af298507e4bebf849c164900ef01a92454372d3abf7e", 0xc}, 0x2, &(0x7f00000001c0)="6e5d7449fe288708012c5eab18ef5efa5575d5bb4d63f32ffc01c0b707d309cd58ea1f4994c856b29dac3ade2087bdf1cd7c16759339edb69f", 0x2, 0x20000000}, 0x5d}, 0x8, 0x6, &(0x7f0000000240)={0x6, 0x5}) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000280)={"c3f9600a328a199723aef09dfb8ea6872c711db4f4d3fc2ce48e374121cc26f9", 0x7, 0x68, 0x3, 0x4, 0x8, 0xffffffffffffffff}) wait4$auto(r1, &(0x7f0000000300)=0x5, 0x7, &(0x7f0000000340)={{0x9, 0x90000000000}, {0x4, 0x2}, 0x1, 0x1, 0x7, 0x5a, 0x8, 0x4, 0x1, 0xc, 0x1, 0x1ff, 0x3, 0x3ff, 0x20080000, 0x5}) getsockopt$auto(r0, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) 2.147731366s ago: executing program 1 (id=2194): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x1ff) socket(0x10, 0x80002, 0x0) mmap$auto(0xffffffffffffffff, 0xffff, 0x4000000000e3, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x7, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="ddffff", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf2503000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d4) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) socket(0xa, 0x801, 0x84) readv$auto(0x3, 0x0, 0x9) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='V'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r2, 0x0) socket(0xa, 0x3, 0x3a) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 2.100504914s ago: executing program 2 (id=2195): sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000ffdbdf35200000000c00038008000200b40300001800028014000200766c616e0000000000000000000000006556e2734ce96265af1b0f78efb3dd15baa4c1c33ccc2fd6c3a5d2a9ebc1"], 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x20000044) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000480)="f21a9a3c5c3e006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c76eed1672bb713aca465c9bbc23b50000000000000004c635fcd1410f37152ad1f7fa09270ce98f867fefbe147095e2928c0a", 0x58) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xd, 0x300000000000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) getsockopt$auto(r1, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x6, 0x20008, 0x3d0, 0x17, 0x40000000000a5, 0xf) r2 = prctl$auto(0x1000000003b, 0xfffffffffffffffb, 0x4, 0x5, 0x7) getcwd$auto(0x0, 0xffffffffffffffff) renameat$auto(0x6, 0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r2, 0x80000001) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.831754856s ago: executing program 1 (id=2196): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/version\x00', 0x101000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400005, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) mprotect$auto(0x0, 0x4, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40076f3f, 0x38) 1.538123161s ago: executing program 1 (id=2197): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x48402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r1, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x80, 0x0) readv$auto(0x3, 0x0, 0x7) mmap$auto(0xdb5e, 0xe00000, 0x1, 0x810, r0, 0xfffffffffffffdde) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 1.357424493s ago: executing program 2 (id=2198): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) semctl$auto_SETALL(0x1, 0x803, 0x11, 0x81) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x4, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/005/001\x00', 0x40cc00, 0x0) getsockopt$auto_SO_BINDTODEVICE(0xffffffffffffffff, 0x1ff, 0x19, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000040)=0x1b36) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/vivid.0/cec28/power/runtime_suspended_time\x00', 0x22040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xa0000, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) ioctl$auto_PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d, 0x0) read$auto(r2, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop14/queue/max_sectors_kb\x00', 0x80602, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40400, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) write$auto(r0, 0x0, 0xa5d5) 1.293675864s ago: executing program 0 (id=2199): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r1, 0x29, 0xcb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x5, 0x10001, 0x400000000003, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) ioctl$auto_EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x8005) ioctl$auto_EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000480)="444883f8008244f0989a1a5e13792e43d7f612d7720cb7f9d5b9febcc2fb2e23b009d567348f7b231ca9856e593235ec88399d86cd55d4c1fc935c143ae2fedb824f76cc4023d95187a542ca1f3b5558e698728733603c501d1bbe18426fc194c506ac11b532a0538224415ec2d9d72e16240a50a95bc0745dd5ab4f9fa687c91bfbf0fe649b10d69998", 0x4f5a, &(0x7f0000000140)={&(0x7f0000000540)="aee5864e743dea286c2dad9c6063a913d95aad4fbd19c14c681d370d92162c89e6dfe0de93c4e5d58fd83aca79c710f4083d7f0ecc0a45c1653c8354ce78f5cd220035fb65dd58d6a61f1286aad40eae4494419c6679894248c89dcbe06f5c9e552a6721fc27bcd3aa0df98d0f6d5681484527541d5bea06d69de40c3a409152c212dc005837616b176a7069fcb7391749ca90c7905b17015b27f37d4cd0c3dbfe260beeb22f765313b5bd321c", 0x101}, 0x1, &(0x7f00000007c0)="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", 0x8d, 0x3}, 0x93}, 0x3, 0x80c) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0x5, 0x1) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x480943, 0x0) 1.089683548s ago: executing program 3 (id=2200): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_IEEE802154_LIST_PHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x3}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x1}, @IEEE802154_ATTR_DEV_NAME={0x14}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xb}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) listen$auto(r3, 0x7f142c88) accept$auto(r3, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) socket(0x11, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r4, 0x0, 0xc3) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) futex$auto(&(0x7f0000000000)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) set_mempolicy_home_node$auto(0x0, 0x200fffd, 0x5, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) getuid() 192.664239ms ago: executing program 0 (id=2201): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1000) socket(0x2, 0x80002, 0x73) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x80, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$auto(0x3, 0x81484d11, 0x38) write$auto(0x3, 0x0, 0xfffffdef) 115.464009ms ago: executing program 2 (id=2202): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) 0s ago: executing program 3 (id=2203): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x401) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4e1f, @empty}, 0x6a) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) fcntl$auto(0x0, 0x407, 0x100000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000c8008000800", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19ff2d63890bd791dd2000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0xc800) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) read$auto(r0, 0x0, 0x1) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.2/usb14/14-0:1.0/ep_81/bmAttributes\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r4, &(0x7f0000000180)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0xb) fsmount$auto(r4, 0x5, 0xe) kernel console output (not intermixed with test programs): 892][T12922] ksmbd: Unknown IPC event: 14, ignore. [ 508.432791][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 508.440555][ T5838] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 508.659769][T12941] ubi0: attaching mtd1 [ 508.726162][T12941] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 508.766162][T12945] misc userio: Invalid payload size [ 509.530098][ T796] Process accounting resumed [ 510.955705][ T5838] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 510.963179][ T5838] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 511.088880][T12998] misc userio: Invalid payload size [ 511.375523][T13005] random: crng reseeded on system resumption [ 511.791055][T13016] input: f as /devices/virtual/input/input25 [ 513.441787][T13048] netlink: 'syz.2.1515': attribute type 21 has an invalid length. [ 513.480664][T13048] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1515'. [ 514.051688][T13055] misc userio: Invalid payload size [ 514.135790][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 514.143626][ T5838] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 514.401432][T13063] input: f as /devices/virtual/input/input26 [ 516.403310][T13118] input: f as /devices/virtual/input/input27 [ 516.863990][T13061] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 516.871501][T13061] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 518.945521][T13169] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 519.134920][T13174] random: crng reseeded on system resumption [ 520.619629][T13190] misc userio: Invalid payload size [ 521.503174][T13193] Process accounting resumed [ 521.546329][T13217] FAULT_INJECTION: forcing a failure. [ 521.546329][T13217] name failslab, interval 1, probability 0, space 0, times 0 [ 521.559979][T13217] CPU: 0 UID: 0 PID: 13217 Comm: syz.2.1551 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.560017][T13217] Tainted: [L]=SOFTLOCKUP [ 521.560026][T13217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.560041][T13217] Call Trace: [ 521.560050][T13217] [ 521.560059][T13217] dump_stack_lvl+0x100/0x190 [ 521.560100][T13217] should_fail_ex.cold+0x5/0xa [ 521.560129][T13217] should_failslab+0xc2/0x120 [ 521.560166][T13217] __kmalloc_cache_noprof+0x7a/0x6f0 [ 521.560198][T13217] ? alloc_tty_struct+0x96/0x8c0 [ 521.560238][T13217] alloc_tty_struct+0x96/0x8c0 [ 521.560272][T13217] ? __pfx_alloc_tty_struct+0x10/0x10 [ 521.560314][T13217] pty_common_install+0x1c7/0xb30 [ 521.560343][T13217] ? __pfx_pty_unix98_install+0x10/0x10 [ 521.560371][T13217] tty_init_dev.part.0+0x9e/0x470 [ 521.560406][T13217] tty_init_dev+0x60/0x80 [ 521.560439][T13217] ptmx_open+0x15e/0x3c0 [ 521.560462][T13217] ? __pfx_ptmx_open+0x10/0x10 [ 521.560485][T13217] chrdev_open+0x234/0x6a0 [ 521.560509][T13217] ? __pfx_apparmor_file_open+0x10/0x10 [ 521.560545][T13217] ? __pfx_chrdev_open+0x10/0x10 [ 521.560571][T13217] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 521.560603][T13217] do_dentry_open+0x6d8/0x1660 [ 521.560626][T13217] ? __pfx_chrdev_open+0x10/0x10 [ 521.560658][T13217] vfs_open+0x82/0x3f0 [ 521.560692][T13217] path_openat+0x208c/0x31a0 [ 521.560726][T13217] ? __pfx_path_openat+0x10/0x10 [ 521.560762][T13217] do_file_open+0x20e/0x430 [ 521.560789][T13217] ? __pfx_do_file_open+0x10/0x10 [ 521.560835][T13217] ? alloc_fd+0x476/0x790 [ 521.560861][T13217] ? do_getname+0x191/0x390 [ 521.560893][T13217] do_sys_openat2+0x10d/0x1e0 [ 521.560925][T13217] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.560959][T13217] ? __fget_files+0x21f/0x3d0 [ 521.561004][T13217] __x64_sys_openat+0x12d/0x210 [ 521.561036][T13217] ? __pfx___x64_sys_openat+0x10/0x10 [ 521.561079][T13217] do_syscall_64+0x106/0xf80 [ 521.561107][T13217] ? clear_bhb_loop+0x40/0x90 [ 521.561142][T13217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.561179][T13217] RIP: 0033:0x7fb26a79c799 [ 521.561199][T13217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.561242][T13217] RSP: 002b:00007fb26b741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 521.561266][T13217] RAX: ffffffffffffffda RBX: 00007fb26aa15fa0 RCX: 00007fb26a79c799 [ 521.561282][T13217] RDX: 0000000018000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 521.561299][T13217] RBP: 00007fb26a832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 521.561314][T13217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.561329][T13217] R13: 00007fb26aa16038 R14: 00007fb26aa15fa0 R15: 00007ffcbe0a3c08 [ 521.561361][T13217] [ 522.427163][T13223] random: crng reseeded on system resumption [ 522.655356][ T29] audit: type=1800 audit(4294967330.620:9): pid=13237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1553" name="lu_gp_id" dev="configfs" ino=48753 res=0 errno=0 [ 522.698474][T13237] kstrtoul() returned -22 for lu_gp_id [ 522.960898][T13229] zswap: compressor not available [ 523.250496][T13245] netlink: 'syz.0.1557': attribute type 14 has an invalid length. [ 523.292893][T13245] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1557'. [ 523.483866][T13061] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 523.494289][T13061] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 523.576661][T13254] kAFS: unparsable volume name [ 523.623130][T13256] FAULT_INJECTION: forcing a failure. [ 523.623130][T13256] name failslab, interval 1, probability 0, space 0, times 0 [ 523.778069][T13256] CPU: 0 UID: 0 PID: 13256 Comm: syz.3.1559 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.778107][T13256] Tainted: [L]=SOFTLOCKUP [ 523.778115][T13256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 523.778129][T13256] Call Trace: [ 523.778137][T13256] [ 523.778146][T13256] dump_stack_lvl+0x100/0x190 [ 523.778185][T13256] should_fail_ex.cold+0x5/0xa [ 523.778213][T13256] should_failslab+0xc2/0x120 [ 523.778236][T13256] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 523.778269][T13256] ? __mpol_dup+0x74/0x370 [ 523.778301][T13256] __mpol_dup+0x74/0x370 [ 523.778326][T13256] ? __pfx___mpol_dup+0x10/0x10 [ 523.778359][T13256] mbind_range+0x2ad/0x550 [ 523.778389][T13256] do_mbind+0x7de/0xfd0 [ 523.778424][T13256] ? __pfx_do_mbind+0x10/0x10 [ 523.778449][T13256] ? find_held_lock+0x2b/0x80 [ 523.778470][T13256] ? ksys_write+0x190/0x250 [ 523.778504][T13256] ? ksys_write+0x190/0x250 [ 523.778551][T13256] ? __pfx_get_nodes+0x10/0x10 [ 523.778586][T13256] ? __fget_files+0x21f/0x3d0 [ 523.778628][T13256] kernel_mbind+0x1b7/0x200 [ 523.778657][T13256] ? __pfx_kernel_mbind+0x10/0x10 [ 523.778693][T13256] do_syscall_64+0x106/0xf80 [ 523.778719][T13256] ? clear_bhb_loop+0x40/0x90 [ 523.778747][T13256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.778770][T13256] RIP: 0033:0x7f549ef9c799 [ 523.778788][T13256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.778811][T13256] RSP: 002b:00007f549fd6f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 523.778833][T13256] RAX: ffffffffffffffda RBX: 00007f549f216090 RCX: 00007f549ef9c799 [ 523.778849][T13256] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 523.778863][T13256] RBP: 00007f549fd6f090 R08: 0000000000000006 R09: 0000000000000002 [ 523.778878][T13256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.778892][T13256] R13: 00007f549f216128 R14: 00007f549f216090 R15: 00007fff8c226e18 [ 523.778927][T13256] [ 524.559206][T13268] FAULT_INJECTION: forcing a failure. [ 524.559206][T13268] name fail_futex, interval 1, probability 0, space 0, times 0 [ 524.585925][T13268] CPU: 0 UID: 0 PID: 13268 Comm: syz.3.1562 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.585964][T13268] Tainted: [L]=SOFTLOCKUP [ 524.585972][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.585987][T13268] Call Trace: [ 524.585995][T13268] [ 524.586004][T13268] dump_stack_lvl+0x100/0x190 [ 524.586044][T13268] should_fail_ex.cold+0x5/0xa [ 524.586072][T13268] get_futex_key+0x1d2/0x1620 [ 524.586103][T13268] ? __pfx_get_futex_key+0x10/0x10 [ 524.586141][T13268] futex_wake+0xea/0x530 [ 524.586179][T13268] ? __pfx_futex_wake+0x10/0x10 [ 524.586217][T13268] ? putname+0xb1/0x110 [ 524.586240][T13268] ? kmem_cache_free+0x124/0x6a0 [ 524.586277][T13268] do_futex+0x32b/0x350 [ 524.586308][T13268] ? __pfx_do_futex+0x10/0x10 [ 524.586336][T13268] ? __pfx_do_sys_openat2+0x10/0x10 [ 524.586368][T13268] ? find_held_lock+0x2b/0x80 [ 524.586394][T13268] __x64_sys_futex+0x34f/0x4d0 [ 524.586426][T13268] ? __x64_sys_openat+0x12d/0x210 [ 524.586457][T13268] ? __pfx___x64_sys_futex+0x10/0x10 [ 524.586499][T13268] do_syscall_64+0x106/0xf80 [ 524.586526][T13268] ? clear_bhb_loop+0x40/0x90 [ 524.586556][T13268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.586593][T13268] RIP: 0033:0x7f549ef9c799 [ 524.586611][T13268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.586633][T13268] RSP: 002b:00007f549fd900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 524.586655][T13268] RAX: ffffffffffffffda RBX: 00007f549f215fa8 RCX: 00007f549ef9c799 [ 524.586669][T13268] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f549f215fac [ 524.586683][T13268] RBP: 00007f549f215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 524.586697][T13268] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 524.586710][T13268] R13: 00007f549f216038 R14: 00007fff8c226d30 R15: 00007fff8c226e18 [ 524.586738][T13268] [ 525.612264][T13282] vivid-007: ================= START STATUS ================= [ 525.702966][T13282] vivid-007: Generate PTS: true [ 525.764004][T13282] vivid-007: Generate SCR: true [ 525.834843][T13282] tpg source WxH: 320x240 (Y'CbCr) [ 525.842372][T13290] misc userio: Invalid payload size [ 525.865833][T13293] random: crng reseeded on system resumption [ 525.875724][T13282] tpg field: 1 [ 525.885867][T13282] tpg crop: (0,0)/320x240 [ 525.912050][T13282] tpg compose: (0,0)/320x240 [ 525.954878][T13282] tpg colorspace: 8 [ 525.980056][T13282] tpg transfer function: 0/0 [ 526.034474][T13282] tpg Y'CbCr encoding: 0/0 [ 526.066725][T13282] tpg quantization: 0/0 [ 526.143187][T13282] tpg RGB range: 0/2 [ 526.188318][T13282] vivid-007: ================== END STATUS ================== [ 526.714975][ T5835] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 526.722863][ T5835] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 527.079606][T13313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1572'. [ 527.344553][T13315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1573'. [ 527.415676][T13317] FAULT_INJECTION: forcing a failure. [ 527.415676][T13317] name fail_futex, interval 1, probability 0, space 0, times 0 [ 527.506688][T13317] CPU: 0 UID: 0 PID: 13317 Comm: syz.3.1574 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.506728][T13317] Tainted: [L]=SOFTLOCKUP [ 527.506737][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.506754][T13317] Call Trace: [ 527.506762][T13317] [ 527.506772][T13317] dump_stack_lvl+0x100/0x190 [ 527.506813][T13317] should_fail_ex.cold+0x5/0xa [ 527.506842][T13317] get_futex_key+0x1d2/0x1620 [ 527.506874][T13317] ? __pfx_get_futex_key+0x10/0x10 [ 527.506913][T13317] futex_wake+0xea/0x530 [ 527.506951][T13317] ? __pfx_futex_wake+0x10/0x10 [ 527.507010][T13317] ? putname+0xb1/0x110 [ 527.507034][T13317] ? kmem_cache_free+0x124/0x6a0 [ 527.507072][T13317] do_futex+0x32b/0x350 [ 527.507104][T13317] ? __pfx_do_futex+0x10/0x10 [ 527.507133][T13317] ? __pfx_do_sys_openat2+0x10/0x10 [ 527.507167][T13317] ? __fget_files+0x21f/0x3d0 [ 527.507208][T13317] __x64_sys_futex+0x34f/0x4d0 [ 527.507242][T13317] ? __x64_sys_openat+0x12d/0x210 [ 527.507274][T13317] ? __pfx___x64_sys_futex+0x10/0x10 [ 527.507317][T13317] do_syscall_64+0x106/0xf80 [ 527.507345][T13317] ? clear_bhb_loop+0x40/0x90 [ 527.507375][T13317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.507401][T13317] RIP: 0033:0x7f549ef9c799 [ 527.507421][T13317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.507447][T13317] RSP: 002b:00007f549fd900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 527.507470][T13317] RAX: ffffffffffffffda RBX: 00007f549f215fa8 RCX: 00007f549ef9c799 [ 527.507486][T13317] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f549f215fac [ 527.507501][T13317] RBP: 00007f549f215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 527.507517][T13317] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 527.507544][T13317] R13: 00007f549f216038 R14: 00007fff8c226d30 R15: 00007fff8c226e18 [ 527.507575][T13317] [ 527.880190][T13323] misc userio: Invalid payload size [ 528.239859][T13334] input: f as /devices/virtual/input/input28 [ 528.807629][T13348] FAULT_INJECTION: forcing a failure. [ 528.807629][T13348] name failslab, interval 1, probability 0, space 0, times 0 [ 528.891274][T13348] CPU: 0 UID: 0 PID: 13348 Comm: syz.3.1582 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.891313][T13348] Tainted: [L]=SOFTLOCKUP [ 528.891322][T13348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.891337][T13348] Call Trace: [ 528.891344][T13348] [ 528.891354][T13348] dump_stack_lvl+0x100/0x190 [ 528.891395][T13348] should_fail_ex.cold+0x5/0xa [ 528.891433][T13348] should_failslab+0xc2/0x120 [ 528.891458][T13348] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 528.891493][T13348] ? __kernfs_new_node+0xd2/0x960 [ 528.891533][T13348] __kernfs_new_node+0xd2/0x960 [ 528.891565][T13348] ? __lock_acquire+0x4a5/0x2630 [ 528.891598][T13348] ? __pfx___kernfs_new_node+0x10/0x10 [ 528.891638][T13348] ? find_held_lock+0x2b/0x80 [ 528.891659][T13348] ? kernfs_root+0xee/0x2a0 [ 528.891690][T13348] ? kernfs_root+0xee/0x2a0 [ 528.891729][T13348] kernfs_new_node+0x11b/0x1a0 [ 528.891771][T13348] kernfs_create_dir_ns+0x4c/0x1a0 [ 528.891813][T13348] sysfs_create_dir_ns+0x13a/0x2b0 [ 528.891860][T13348] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 528.891892][T13348] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 528.891923][T13348] ? kfree_const+0x5a/0x70 [ 528.891958][T13348] ? rcu_is_watching+0x12/0xc0 [ 528.892013][T13348] ? kfree_const+0x5a/0x70 [ 528.892049][T13348] ? kfree+0x2ec/0x6b0 [ 528.892082][T13348] kobject_add_internal+0x2c8/0x930 [ 528.892122][T13348] kobject_add+0x16a/0x1e0 [ 528.892157][T13348] ? __pfx_kobject_add+0x10/0x10 [ 528.892193][T13348] ? __pfx_kobject_add+0x10/0x10 [ 528.892238][T13348] blk_register_queue+0x8d/0x590 [ 528.892283][T13348] __add_disk+0x73f/0xe40 [ 528.892318][T13348] ? find_held_lock+0x2b/0x80 [ 528.892343][T13348] add_disk_fwnode+0x3d4/0x5c0 [ 528.892383][T13348] zram_add+0x4d2/0x610 [ 528.892409][T13348] ? __pfx_zram_add+0x10/0x10 [ 528.892460][T13348] ? find_held_lock+0x2b/0x80 [ 528.892481][T13348] ? sysfs_file_kobj+0xe4/0x290 [ 528.892515][T13348] ? __pfx_hot_add_show+0x10/0x10 [ 528.892541][T13348] hot_add_show+0x21/0x80 [ 528.892568][T13348] class_attr_show+0x72/0xa0 [ 528.892608][T13348] ? __pfx_class_attr_show+0x10/0x10 [ 528.892645][T13348] sysfs_kf_seq_show+0x217/0x3a0 [ 528.892680][T13348] seq_read_iter+0x32f/0x1270 [ 528.892731][T13348] kernfs_fop_read_iter+0x46c/0x610 [ 528.892758][T13348] ? rw_verify_area+0xce/0x6d0 [ 528.892792][T13348] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 528.892821][T13348] vfs_read+0x825/0xb30 [ 528.892869][T13348] ? __pfx_vfs_read+0x10/0x10 [ 528.892926][T13348] ksys_read+0x12a/0x250 [ 528.892964][T13348] ? __pfx_ksys_read+0x10/0x10 [ 528.893011][T13348] do_syscall_64+0x106/0xf80 [ 528.893039][T13348] ? clear_bhb_loop+0x40/0x90 [ 528.893069][T13348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.893095][T13348] RIP: 0033:0x7f549ef9c799 [ 528.893116][T13348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.893140][T13348] RSP: 002b:00007f549fd6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 528.893163][T13348] RAX: ffffffffffffffda RBX: 00007f549f216090 RCX: 00007f549ef9c799 [ 528.893179][T13348] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000005 [ 528.893195][T13348] RBP: 00007f549f032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 528.893211][T13348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.893226][T13348] R13: 00007f549f216128 R14: 00007f549f216090 R15: 00007fff8c226e18 [ 528.893259][T13348] [ 528.893271][T13348] kobject: kobject_add_internal failed for queue (error: -12 parent: zram0) [ 530.147795][T13344] input: 00 [ 530.147795][T13344] as /devices/virtual/input/input29 [ 530.682262][T13374] misc userio: Invalid payload size [ 531.626155][T13384] binder: 13378:13384 ioctl c018620c 0 returned -1 [ 532.042954][T13393] binder: 13391:13393 ioctl c018620c 0 returned -1 [ 532.838880][T13403] input: f as /devices/virtual/input/input30 [ 532.944991][T13398] FAULT_INJECTION: forcing a failure. [ 532.944991][T13398] name failslab, interval 1, probability 0, space 0, times 0 [ 533.029255][T13398] CPU: 0 UID: 0 PID: 13398 Comm: syz.3.1593 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.029292][T13398] Tainted: [L]=SOFTLOCKUP [ 533.029300][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.029314][T13398] Call Trace: [ 533.029322][T13398] [ 533.029331][T13398] dump_stack_lvl+0x100/0x190 [ 533.029369][T13398] should_fail_ex.cold+0x5/0xa [ 533.029395][T13398] ? tomoyo_encode2+0xfb/0x3c0 [ 533.029418][T13398] should_failslab+0xc2/0x120 [ 533.029441][T13398] __kmalloc_noprof+0xe0/0x850 [ 533.029474][T13398] ? d_absolute_path+0x136/0x1b0 [ 533.029508][T13398] tomoyo_encode2+0xfb/0x3c0 [ 533.029537][T13398] tomoyo_encode+0x29/0x50 [ 533.029559][T13398] tomoyo_realpath_from_path+0x18c/0x690 [ 533.029591][T13398] tomoyo_path_number_perm+0x23c/0x580 [ 533.029626][T13398] ? tomoyo_path_number_perm+0x22e/0x580 [ 533.029664][T13398] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 533.029727][T13398] ? find_held_lock+0x2b/0x80 [ 533.029747][T13398] ? __fget_files+0x215/0x3d0 [ 533.029782][T13398] ? hook_file_ioctl_common+0x146/0x410 [ 533.029823][T13398] ? __fget_files+0x21f/0x3d0 [ 533.029868][T13398] security_file_ioctl+0xd3/0x230 [ 533.029926][T13398] __x64_sys_ioctl+0xb7/0x210 [ 533.029962][T13398] do_syscall_64+0x106/0xf80 [ 533.029988][T13398] ? clear_bhb_loop+0x40/0x90 [ 533.030030][T13398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.030054][T13398] RIP: 0033:0x7f549ef9c799 [ 533.030073][T13398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.030095][T13398] RSP: 002b:00007f549fd90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.030117][T13398] RAX: ffffffffffffffda RBX: 00007f549f215fa0 RCX: 00007f549ef9c799 [ 533.030133][T13398] RDX: 0000000000000000 RSI: 00000000c018620c RDI: 0000000000000006 [ 533.030148][T13398] RBP: 00007f549fd90090 R08: 0000000000000000 R09: 0000000000000000 [ 533.030162][T13398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.030177][T13398] R13: 00007f549f216038 R14: 00007f549f215fa0 R15: 00007fff8c226e18 [ 533.030207][T13398] [ 533.030226][T13398] ERROR: Out of memory at tomoyo_realpath_from_path. [ 534.276133][T13415] Process accounting resumed [ 534.371521][T13427] random: crng reseeded on system resumption [ 534.387960][T13061] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 534.395478][T13061] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 534.433280][T13429] openvswitch: HfR: Dropping previously announced user features [ 534.488839][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1600'. [ 534.613084][T13398] binder: 13397:13398 ioctl c018620c 0 returned -22 [ 534.625796][T13429] HfR: left promiscuous mode [ 535.044411][T13444] HfR: entered promiscuous mode [ 535.087347][T13444] FAULT_INJECTION: forcing a failure. [ 535.087347][T13444] name failslab, interval 1, probability 0, space 0, times 0 [ 535.180987][T13444] CPU: 0 UID: 0 PID: 13444 Comm: syz.3.1601 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.181026][T13444] Tainted: [L]=SOFTLOCKUP [ 535.181034][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.181048][T13444] Call Trace: [ 535.181057][T13444] [ 535.181066][T13444] dump_stack_lvl+0x100/0x190 [ 535.181118][T13444] should_fail_ex.cold+0x5/0xa [ 535.181167][T13444] should_failslab+0xc2/0x120 [ 535.181194][T13444] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 535.181235][T13444] ? __alloc_skb+0x140/0x710 [ 535.181265][T13444] __alloc_skb+0x140/0x710 [ 535.181289][T13444] ? __alloc_skb+0x5b7/0x710 [ 535.181313][T13444] ? __pfx___alloc_skb+0x10/0x10 [ 535.181346][T13444] netlink_alloc_large_skb+0x69/0x150 [ 535.181379][T13444] netlink_sendmsg+0x680/0xda0 [ 535.181415][T13444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.181444][T13444] ? __import_iovec+0x1d2/0x640 [ 535.181469][T13444] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 535.181506][T13444] ____sys_sendmsg+0xa54/0xc30 [ 535.181544][T13444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.181591][T13444] ___sys_sendmsg+0x190/0x1e0 [ 535.181629][T13444] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.181704][T13444] __sys_sendmsg+0x170/0x220 [ 535.181733][T13444] ? __pfx___sys_sendmsg+0x10/0x10 [ 535.181778][T13444] do_syscall_64+0x106/0xf80 [ 535.181811][T13444] ? clear_bhb_loop+0x40/0x90 [ 535.181841][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.181865][T13444] RIP: 0033:0x7f549ef9c799 [ 535.181884][T13444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.181908][T13444] RSP: 002b:00007f549fd90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.181931][T13444] RAX: ffffffffffffffda RBX: 00007f549f215fa0 RCX: 00007f549ef9c799 [ 535.181947][T13444] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 535.181963][T13444] RBP: 00007f549fd90090 R08: 0000000000000000 R09: 0000000000000000 [ 535.181978][T13444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.181992][T13444] R13: 00007f549f216038 R14: 00007f549f215fa0 R15: 00007fff8c226e18 [ 535.182023][T13444] [ 535.475570][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 535.589611][T13453] input: f as /devices/virtual/input/input31 [ 536.082904][T13468] FAULT_INJECTION: forcing a failure. [ 536.082904][T13468] name failslab, interval 1, probability 0, space 0, times 0 [ 536.097182][T13468] CPU: 0 UID: 0 PID: 13468 Comm: syz.3.1607 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.097227][T13468] Tainted: [L]=SOFTLOCKUP [ 536.097235][T13468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.097248][T13468] Call Trace: [ 536.097274][T13468] [ 536.097283][T13468] dump_stack_lvl+0x100/0x190 [ 536.097324][T13468] should_fail_ex.cold+0x5/0xa [ 536.097356][T13468] ? tomoyo_realpath_from_path+0xb6/0x690 [ 536.097383][T13468] should_failslab+0xc2/0x120 [ 536.097408][T13468] __kmalloc_noprof+0xe0/0x850 [ 536.097448][T13468] tomoyo_realpath_from_path+0xb6/0x690 [ 536.097482][T13468] tomoyo_path_number_perm+0x23c/0x580 [ 536.097518][T13468] ? tomoyo_path_number_perm+0x22e/0x580 [ 536.097556][T13468] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 536.097595][T13468] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.097637][T13468] ? unwind_get_return_address+0x59/0xa0 [ 536.097663][T13468] ? arch_stack_walk+0xa6/0xf0 [ 536.097704][T13468] ? current_check_access_path+0x281/0x460 [ 536.097748][T13468] ? __pfx_current_check_access_path+0x10/0x10 [ 536.097782][T13468] tomoyo_path_mknod+0x164/0x190 [ 536.097813][T13468] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 536.097844][T13468] ? __d_lookup+0x25c/0x4a0 [ 536.097875][T13468] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 536.097918][T13468] security_path_mknod+0x161/0x300 [ 536.097947][T13468] may_o_create+0x30/0x3a0 [ 536.097980][T13468] ? kernfs_dop_revalidate+0xd2/0x740 [ 536.098020][T13468] lookup_open.isra.0+0xa0d/0x11b0 [ 536.098061][T13468] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 536.098101][T13468] ? __pfx___might_resched+0x10/0x10 [ 536.098135][T13468] ? mnt_get_write_access+0x52/0x2f0 [ 536.098172][T13468] ? __pfx_down_write+0x10/0x10 [ 536.098202][T13468] ? mnt_get_write_access+0x1e9/0x2f0 [ 536.098238][T13468] path_openat+0x2291/0x31a0 [ 536.098267][T13468] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 536.098295][T13468] ? __pfx_path_openat+0x10/0x10 [ 536.098329][T13468] do_file_open+0x20e/0x430 [ 536.098355][T13468] ? __pfx_do_file_open+0x10/0x10 [ 536.098410][T13468] ? _raw_spin_unlock+0x28/0x50 [ 536.098433][T13468] ? alloc_fd+0x476/0x790 [ 536.098464][T13468] do_sys_openat2+0x10d/0x1e0 [ 536.098494][T13468] ? __pfx_do_sys_openat2+0x10/0x10 [ 536.098527][T13468] ? __fget_files+0x21f/0x3d0 [ 536.098575][T13468] __x64_sys_open+0xfe/0x1d0 [ 536.098606][T13468] ? __pfx___x64_sys_open+0x10/0x10 [ 536.098635][T13468] ? ksys_write+0x1ac/0x250 [ 536.098682][T13468] do_syscall_64+0x106/0xf80 [ 536.098708][T13468] ? clear_bhb_loop+0x40/0x90 [ 536.098743][T13468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.098783][T13468] RIP: 0033:0x7f549ef9c799 [ 536.098802][T13468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.098825][T13468] RSP: 002b:00007f549fd90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 536.098847][T13468] RAX: ffffffffffffffda RBX: 00007f549f215fa0 RCX: 00007f549ef9c799 [ 536.098863][T13468] RDX: e1d2b27bdc14aabc RSI: 0000000000004242 RDI: 0000200000000000 [ 536.098878][T13468] RBP: 00007f549fd90090 R08: 0000000000000000 R09: 0000000000000000 [ 536.098893][T13468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.098907][T13468] R13: 00007f549f216038 R14: 00007f549f215fa0 R15: 00007fff8c226e18 [ 536.098939][T13468] [ 536.099050][T13468] ERROR: Out of memory at tomoyo_realpath_from_path. [ 536.897567][T13480] misc userio: Invalid payload size [ 536.911084][T13061] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 536.911378][T13061] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 536.911404][T13061] CPU: 0 UID: 0 PID: 13061 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.911438][T13061] Tainted: [L]=SOFTLOCKUP [ 536.911448][T13061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.911465][T13061] Workqueue: hci1 hci_rx_work [ 536.911489][T13061] Call Trace: [ 536.911497][T13061] [ 536.911507][T13061] dump_stack_lvl+0x100/0x190 [ 536.911546][T13061] sysfs_warn_dup.cold+0x1c/0x28 [ 536.911582][T13061] sysfs_create_dir_ns+0x24b/0x2b0 [ 536.911615][T13061] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 536.911647][T13061] ? find_held_lock+0x2b/0x80 [ 536.911670][T13061] ? kobject_add_internal+0x25f/0x930 [ 536.911704][T13061] ? kobject_add_internal+0x25f/0x930 [ 536.911753][T13061] ? do_raw_spin_unlock+0x145/0x1e0 [ 536.911792][T13061] kobject_add_internal+0x2c8/0x930 [ 536.911832][T13061] kobject_add+0x16a/0x1e0 [ 536.911866][T13061] ? __pfx_kobject_add+0x10/0x10 [ 536.911901][T13061] ? class_to_subsys+0x10f/0x150 [ 536.911930][T13061] ? kobject_put+0xb9/0x640 [ 536.911960][T13061] ? _raw_spin_unlock+0x28/0x50 [ 536.911991][T13061] device_add+0x294/0x1950 [ 536.912031][T13061] ? __pfx_dev_set_name+0x10/0x10 [ 536.912058][T13061] ? __pfx_device_add+0x10/0x10 [ 536.912099][T13061] ? mgmt_send_event_skb+0x2fb/0x460 [ 536.912131][T13061] hci_conn_add_sysfs+0x1a3/0x260 [ 536.912161][T13061] le_conn_complete_evt+0x11cb/0x1f40 [ 536.912210][T13061] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 536.912249][T13061] ? __pfx_bt_warn+0x10/0x10 [ 536.912284][T13061] hci_le_conn_complete_evt+0x23c/0x3a0 [ 536.912327][T13061] ? skb_pull_data+0x15f/0x1e0 [ 536.912367][T13061] hci_le_meta_evt+0x34a/0x5f0 [ 536.912394][T13061] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 536.912440][T13061] hci_event_packet+0x682/0x11c0 [ 536.912484][T13061] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 536.912512][T13061] ? __pfx_hci_event_packet+0x10/0x10 [ 536.912556][T13061] ? kcov_remote_start+0x374/0x660 [ 536.912596][T13061] ? lockdep_hardirqs_on+0x78/0x100 [ 536.912631][T13061] hci_rx_work+0x451/0xfc0 [ 536.912669][T13061] process_one_work+0x9d7/0x1920 [ 536.912722][T13061] ? __pfx_process_one_work+0x10/0x10 [ 536.912768][T13061] ? __pfx_hci_rx_work+0x10/0x10 [ 536.912794][T13061] worker_thread+0x5da/0xe40 [ 536.912837][T13061] ? __pfx_worker_thread+0x10/0x10 [ 536.912873][T13061] ? kthread+0x13a/0x450 [ 536.912904][T13061] ? __pfx_worker_thread+0x10/0x10 [ 536.912937][T13061] kthread+0x370/0x450 [ 536.912968][T13061] ? __pfx_kthread+0x10/0x10 [ 536.913002][T13061] ret_from_fork+0x754/0xd80 [ 536.913040][T13061] ? __pfx_ret_from_fork+0x10/0x10 [ 536.913077][T13061] ? rcu_is_watching+0x12/0xc0 [ 536.913114][T13061] ? __switch_to+0x7b4/0x1120 [ 536.913141][T13061] ? __pfx_kthread+0x10/0x10 [ 536.913175][T13061] ret_from_fork_asm+0x1a/0x30 [ 536.913216][T13061] [ 536.913242][T13061] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 536.913275][T13061] Bluetooth: hci1: failed to register connection device [ 537.467872][T13489] Invalid ELF header magic: != ELF [ 538.290101][T13500] input: f as /devices/virtual/input/input32 [ 538.353795][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1615'. [ 541.427808][T13545] misc userio: Invalid payload size [ 542.819701][T13061] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 542.827216][T13061] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 544.044640][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 544.056186][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.064253][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.072115][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.079803][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.338624][ T139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.028539][ T139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.173013][T13061] Bluetooth: hci0: command tx timeout [ 546.300505][ T139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.728764][ T139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.383450][T13558] chnl_net:caif_netlink_parms(): no params data found [ 547.530349][ T139] bridge_slave_1: left allmulticast mode [ 547.566636][ T139] bridge_slave_1: left promiscuous mode [ 547.573728][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.716604][ T139] bridge_slave_0: left allmulticast mode [ 547.722287][ T139] bridge_slave_0: left promiscuous mode [ 547.777057][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.867989][T13583] random: crng reseeded on system resumption [ 548.249921][T13061] Bluetooth: hci0: command tx timeout [ 548.960454][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.105668][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.193676][ T139] bond0 (unregistering): Released all slaves [ 549.592226][T13558] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.592319][T13558] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.592491][T13558] bridge_slave_0: entered allmulticast mode [ 549.601146][T13558] bridge_slave_0: entered promiscuous mode [ 549.603218][T13558] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.604186][T13558] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.604298][T13558] bridge_slave_1: entered allmulticast mode [ 549.626693][T13558] bridge_slave_1: entered promiscuous mode [ 549.637373][T13608] misc userio: Invalid payload size [ 549.891099][T13558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.956941][T13558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.114732][T13558] team0: Port device team_slave_0 added [ 550.182684][T13558] team0: Port device team_slave_1 added [ 550.332507][T13061] Bluetooth: hci0: command tx timeout [ 550.335151][T13558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.335171][T13558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.335200][T13558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.345268][T13558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.345285][T13558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.345334][T13558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.720782][T13619] FAULT_INJECTION: forcing a failure. [ 550.720782][T13619] name failslab, interval 1, probability 0, space 0, times 0 [ 550.720850][T13619] CPU: 0 UID: 0 PID: 13619 Comm: syz.2.1636 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.720886][T13619] Tainted: [L]=SOFTLOCKUP [ 550.720895][T13619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.720910][T13619] Call Trace: [ 550.720919][T13619] [ 550.720928][T13619] dump_stack_lvl+0x100/0x190 [ 550.720970][T13619] should_fail_ex.cold+0x5/0xa [ 550.720999][T13619] ? ima_alloc_init_template+0x19d/0x6d0 [ 550.721036][T13619] should_failslab+0xc2/0x120 [ 550.721062][T13619] __kmalloc_noprof+0xe0/0x850 [ 550.721099][T13619] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 550.721137][T13619] ima_alloc_init_template+0x19d/0x6d0 [ 550.721175][T13619] ? take_dentry_name_snapshot+0x310/0x7c0 [ 550.721213][T13619] ima_store_measurement+0x1e3/0x5b0 [ 550.721252][T13619] ? __pfx_ima_store_measurement+0x10/0x10 [ 550.721306][T13619] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 550.721344][T13619] process_measurement+0x19cc/0x2350 [ 550.721388][T13619] ? stack_trace_save+0x8e/0xc0 [ 550.721413][T13619] ? __pfx_process_measurement+0x10/0x10 [ 550.721447][T13619] ? __lock_acquire+0x4a5/0x2630 [ 550.721478][T13619] ? __kasan_slab_alloc+0x89/0x90 [ 550.721516][T13619] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 550.721552][T13619] ? init_file+0x95/0x480 [ 550.721576][T13619] ? alloc_empty_file+0x73/0x1c0 [ 550.721604][T13619] ? alloc_file_pseudo+0x13a/0x230 [ 550.721633][T13619] ? ksys_mmap_pgoff+0x232/0x650 [ 550.721656][T13619] ? __x64_sys_mmap+0x125/0x190 [ 550.721691][T13619] ? do_syscall_64+0x106/0xf80 [ 550.721746][T13619] ? __pfx_aa_file_perm+0x10/0x10 [ 550.721782][T13619] ima_file_mmap+0x1c4/0x1f0 [ 550.721816][T13619] ? __pfx_ima_file_mmap+0x10/0x10 [ 550.721857][T13619] security_mmap_file+0x278/0x9b0 [ 550.721883][T13619] vm_mmap_pgoff+0xec/0x470 [ 550.721914][T13619] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 550.721938][T13619] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 550.721971][T13619] ? hugetlbfs_get_inode+0x36e/0x750 [ 550.722021][T13619] ksys_mmap_pgoff+0x273/0x650 [ 550.722047][T13619] ? __x64_sys_futex+0x358/0x4d0 [ 550.722079][T13619] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 550.722105][T13619] ? xfd_validate_state+0x129/0x190 [ 550.722160][T13619] __x64_sys_mmap+0x125/0x190 [ 550.722200][T13619] do_syscall_64+0x106/0xf80 [ 550.722227][T13619] ? clear_bhb_loop+0x40/0x90 [ 550.722258][T13619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.722286][T13619] RIP: 0033:0x7fb26a79c799 [ 550.722312][T13619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.722337][T13619] RSP: 002b:00007fb26b741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 550.722361][T13619] RAX: ffffffffffffffda RBX: 00007fb26aa15fa0 RCX: 00007fb26a79c799 [ 550.722378][T13619] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 550.722393][T13619] RBP: 00007fb26a832bd9 R08: ffffffffffffffff R09: 0000300000000000 [ 550.722410][T13619] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 550.722424][T13619] R13: 00007fb26aa16038 R14: 00007fb26aa15fa0 R15: 00007ffcbe0a3c08 [ 550.722463][T13619] [ 550.724434][ T29] audit: type=1804 audit(4294967358.680:10): pid=13619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.1636" name="anon_hugepage" dev="hugetlbfs" ino=50922 res=0 errno=0 [ 550.756595][T13558] hsr_slave_0: entered promiscuous mode [ 550.758498][T13558] hsr_slave_1: entered promiscuous mode [ 550.759032][T13558] debugfs: 'hsr0' already exists in 'hsr' [ 550.759065][T13558] Cannot create hsr debugfs directory [ 551.712705][ T139] hsr_slave_0: left promiscuous mode [ 551.713303][ T139] hsr_slave_1: left promiscuous mode [ 551.713969][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.714007][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.718150][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.718171][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.752301][ T139] veth1_macvtap: left allmulticast mode [ 551.752455][ T139] veth1_macvtap: left promiscuous mode [ 551.752523][ T139] veth0_macvtap: left promiscuous mode [ 551.752624][ T139] veth1_vlan: left promiscuous mode [ 551.752691][ T139] veth0_vlan: left promiscuous mode [ 552.231308][ T139] team0 (unregistering): Port device team_slave_1 removed [ 552.254200][ T139] team0 (unregistering): Port device team_slave_0 removed [ 552.411025][T13061] Bluetooth: hci0: command tx timeout [ 553.575880][T13061] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 553.575913][T13061] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 553.850826][T13558] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 553.876188][T13558] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 553.882055][T13558] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 553.907054][T13558] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 554.527682][T13558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.560072][T13648] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 554.560298][T13648] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 554.579503][T13648] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 554.579750][T13648] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 554.580612][T13648] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 554.580669][T13648] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 554.581608][T13648] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 554.593609][T13648] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 554.593693][T13648] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 554.596426][T13648] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 554.609897][T13648] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 554.610226][T13648] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 554.610280][T13648] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 554.611276][T13558] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.622549][T13648] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 554.629697][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.629794][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.661880][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.661967][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.447693][T13061] Bluetooth: hci2: command 0x0406 tx timeout [ 555.550280][T13558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.753377][T13558] veth0_vlan: entered promiscuous mode [ 555.821408][T13558] veth1_vlan: entered promiscuous mode [ 555.959573][T13558] veth0_macvtap: entered promiscuous mode [ 555.990401][T13558] veth1_macvtap: entered promiscuous mode [ 556.079969][T13558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.119620][T13558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.150439][ T466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.150526][ T466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.150579][ T466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.150631][ T466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.561619][ T466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.627614][ T466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.648251][T13061] Bluetooth: hci0: command 0x0c1a tx timeout [ 556.654335][T13061] Bluetooth: hci3: command 0x0406 tx timeout [ 556.661632][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 556.726710][T13725] random: crng reseeded on system resumption [ 557.115385][ T466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.148666][ T466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.434021][T13740] input: f as /devices/virtual/input/input33 [ 557.525482][T13722] Bluetooth: hci2: command 0x0406 tx timeout [ 557.897135][T13722] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 558.725206][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 558.731248][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 558.737540][T13722] Bluetooth: hci0: command 0x0c1a tx timeout [ 558.931804][T13765] misc userio: Invalid payload size [ 559.014835][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 559.428253][T13787] random: crng reseeded on system resumption [ 559.606978][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 559.804196][T13793] input: f as /devices/virtual/input/input34 [ 559.999882][T13800] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input35 [ 560.805181][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 560.811330][T13722] Bluetooth: hci3: command 0x0406 tx timeout [ 560.817376][T13061] Bluetooth: hci0: command 0x0c1a tx timeout [ 561.554572][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 561.687312][T13722] Bluetooth: hci2: command 0x0406 tx timeout [ 561.984817][T13843] misc userio: Invalid payload size [ 562.151759][T13846] random: crng reseeded on system resumption [ 562.573135][T13856] random: crng reseeded on system resumption [ 562.891532][T13722] Bluetooth: hci3: command 0x0406 tx timeout [ 562.898032][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.904344][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.955310][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 564.510509][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 564.552091][T13899] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 565.943252][T13922] random: crng reseeded on system resumption [ 567.166136][T13943] mkiss: ax0: crc mode is auto. [ 567.733310][T13948] input: f as /devices/virtual/input/input36 [ 568.815459][T13968] input: f as /devices/virtual/input/input37 [ 569.421583][T13978] random: crng reseeded on system resumption [ 569.846062][T13722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 569.865797][T13722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 569.873884][T13722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 569.881991][T13722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 569.899216][T13722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 570.793224][T13987] chnl_net:caif_netlink_parms(): no params data found [ 571.013197][T13987] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.034144][T13987] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.044521][T13987] bridge_slave_0: entered allmulticast mode [ 571.064508][T13987] bridge_slave_0: entered promiscuous mode [ 571.092257][T13987] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.121959][T13987] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.143296][T13987] bridge_slave_1: entered allmulticast mode [ 571.171549][T13987] bridge_slave_1: entered promiscuous mode [ 571.275203][T14012] input: f as /devices/virtual/input/input38 [ 571.513121][T13987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.538919][T13987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.550675][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 571.550708][ T5838] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 571.709849][T13987] team0: Port device team_slave_0 added [ 571.728884][T13987] team0: Port device team_slave_1 added [ 571.925462][T13722] Bluetooth: hci1: command tx timeout [ 571.992716][T13987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.992737][T13987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.992767][T13987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.029370][T13987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.029389][T13987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.029420][T13987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.258231][T13987] hsr_slave_0: entered promiscuous mode [ 572.265445][T13987] hsr_slave_1: entered promiscuous mode [ 572.266036][T13987] debugfs: 'hsr0' already exists in 'hsr' [ 572.266057][T13987] Cannot create hsr debugfs directory [ 572.901314][T14041] random: crng reseeded on system resumption [ 572.918166][T14043] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ekl*[GCHFx^ĒPktkyve' [ 573.141005][T13987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.255793][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1705'. [ 573.296704][T14049] random: crng reseeded on system resumption [ 573.461937][T13987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.688151][T13987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.890666][T13987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.006358][T13722] Bluetooth: hci1: command tx timeout [ 574.986961][T13987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 575.072651][T13987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 575.163867][T13987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 575.280017][T13987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 575.803890][T13722] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 575.811724][T13722] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 576.085527][ T5838] Bluetooth: hci1: command tx timeout [ 576.367152][T14113] random: crng reseeded on system resumption [ 576.480369][T13987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.713413][T13987] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.768675][T14129] random: crng reseeded on system resumption [ 577.280207][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.287424][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.382429][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.389638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.830145][T13987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.896589][T14143] FAULT_INJECTION: forcing a failure. [ 577.896589][T14143] name failslab, interval 1, probability 0, space 0, times 0 [ 577.914879][T13987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.948444][T14143] CPU: 0 UID: 0 PID: 14143 Comm: syz.1.1717 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.948485][T14143] Tainted: [L]=SOFTLOCKUP [ 577.948494][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.948510][T14143] Call Trace: [ 577.948518][T14143] [ 577.948528][T14143] dump_stack_lvl+0x100/0x190 [ 577.948572][T14143] should_fail_ex.cold+0x5/0xa [ 577.948600][T14143] should_failslab+0xc2/0x120 [ 577.948625][T14143] __kmalloc_cache_noprof+0x7a/0x6f0 [ 577.948664][T14143] ? pty_common_install+0xdf/0xb30 [ 577.948695][T14143] pty_common_install+0xdf/0xb30 [ 577.948724][T14143] ? __pfx_pty_unix98_install+0x10/0x10 [ 577.948751][T14143] tty_init_dev.part.0+0x9e/0x470 [ 577.948787][T14143] tty_init_dev+0x60/0x80 [ 577.948819][T14143] ptmx_open+0x15e/0x3c0 [ 577.948842][T14143] ? __pfx_ptmx_open+0x10/0x10 [ 577.948864][T14143] chrdev_open+0x234/0x6a0 [ 577.948888][T14143] ? __pfx_apparmor_file_open+0x10/0x10 [ 577.948924][T14143] ? __pfx_chrdev_open+0x10/0x10 [ 577.948949][T14143] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 577.948982][T14143] do_dentry_open+0x6d8/0x1660 [ 577.949004][T14143] ? __pfx_chrdev_open+0x10/0x10 [ 577.949035][T14143] vfs_open+0x82/0x3f0 [ 577.949068][T14143] path_openat+0x208c/0x31a0 [ 577.949102][T14143] ? __pfx_path_openat+0x10/0x10 [ 577.949137][T14143] do_file_open+0x20e/0x430 [ 577.949164][T14143] ? __pfx_do_file_open+0x10/0x10 [ 577.949210][T14143] ? alloc_fd+0x476/0x790 [ 577.949260][T14143] ? do_getname+0x191/0x390 [ 577.949296][T14143] do_sys_openat2+0x10d/0x1e0 [ 577.949328][T14143] ? __pfx_do_sys_openat2+0x10/0x10 [ 577.949362][T14143] ? __fget_files+0x21f/0x3d0 [ 577.949407][T14143] __x64_sys_openat+0x12d/0x210 [ 577.949439][T14143] ? __pfx___x64_sys_openat+0x10/0x10 [ 577.949486][T14143] do_syscall_64+0x106/0xf80 [ 577.949515][T14143] ? clear_bhb_loop+0x40/0x90 [ 577.949545][T14143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.949571][T14143] RIP: 0033:0x7f753599c799 [ 577.949592][T14143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.949617][T14143] RSP: 002b:00007f7533bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 577.949641][T14143] RAX: ffffffffffffffda RBX: 00007f7535c15fa0 RCX: 00007f753599c799 [ 577.949663][T14143] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 577.949680][T14143] RBP: 00007f7535a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 577.949696][T14143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.949711][T14143] R13: 00007f7535c16038 R14: 00007f7535c15fa0 R15: 00007ffe40190d38 [ 577.949743][T14143] [ 578.514912][ T5838] Bluetooth: hci1: command tx timeout [ 578.871812][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 578.920920][ T65] bridge_slave_1: left allmulticast mode [ 578.941927][ T65] bridge_slave_1: left promiscuous mode [ 578.957497][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.979613][ T65] bridge_slave_0: left allmulticast mode [ 578.987593][ T65] bridge_slave_0: left promiscuous mode [ 578.997895][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.163482][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.178164][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.191032][ T65] bond0 (unregistering): Released all slaves [ 579.693789][T13987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.071144][T13987] veth0_vlan: entered promiscuous mode [ 580.361206][T13987] veth1_vlan: entered promiscuous mode [ 581.050987][T13987] veth0_macvtap: entered promiscuous mode [ 581.198017][T13987] veth1_macvtap: entered promiscuous mode [ 581.220308][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 581.228391][ T5838] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 581.368080][ T65] hsr_slave_0: left promiscuous mode [ 581.389456][ T65] hsr_slave_1: left promiscuous mode [ 581.414457][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.443323][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.477411][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.502006][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.548928][ T65] veth1_macvtap: left allmulticast mode [ 581.567900][ T65] veth1_macvtap: left promiscuous mode [ 581.584916][ T65] veth0_macvtap: left promiscuous mode [ 581.609673][ T65] veth1_vlan: left promiscuous mode [ 581.630917][ T65] veth0_vlan: left promiscuous mode [ 582.492792][ T65] team0 (unregistering): Port device team_slave_1 removed [ 582.573615][ T65] team0 (unregistering): Port device team_slave_0 removed [ 583.164522][T13987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.356029][T13987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.461008][ T1148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.517866][ T1148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.583980][ T1148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.660425][ T1148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.019538][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.058048][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.436863][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.457480][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.539398][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1731'. [ 584.863032][T14230] misc userio: Invalid payload size [ 584.930386][T14233] input: f as /devices/virtual/input/input39 [ 585.341936][T13722] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 585.414777][T14243] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 586.686477][T14262] random: crng reseeded on system resumption [ 587.722140][T14285] input: f as /devices/virtual/input/input40 [ 588.211573][T14290] FAULT_INJECTION: forcing a failure. [ 588.211573][T14290] name failslab, interval 1, probability 0, space 0, times 0 [ 588.259398][T14290] CPU: 0 UID: 0 PID: 14290 Comm: syz.0.1742 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.259437][T14290] Tainted: [L]=SOFTLOCKUP [ 588.259445][T14290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.259459][T14290] Call Trace: [ 588.259468][T14290] [ 588.259476][T14290] dump_stack_lvl+0x100/0x190 [ 588.259517][T14290] should_fail_ex.cold+0x5/0xa [ 588.259544][T14290] should_failslab+0xc2/0x120 [ 588.259569][T14290] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 588.259606][T14290] ? __alloc_skb+0x140/0x710 [ 588.259637][T14290] __alloc_skb+0x140/0x710 [ 588.259668][T14290] ? __alloc_skb+0x5b7/0x710 [ 588.259692][T14290] ? __pfx___alloc_skb+0x10/0x10 [ 588.259718][T14290] ? __pfx___might_resched+0x10/0x10 [ 588.259753][T14290] ? __lock_acquire+0x4a5/0x2630 [ 588.259787][T14290] netlink_alloc_large_skb+0x69/0x150 [ 588.259821][T14290] netlink_sendmsg+0x680/0xda0 [ 588.259856][T14290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.259889][T14290] ? __import_iovec+0x1d2/0x640 [ 588.259915][T14290] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 588.259952][T14290] ____sys_sendmsg+0xa54/0xc30 [ 588.259990][T14290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.260028][T14290] ? rcu_is_watching+0x12/0xc0 [ 588.260063][T14290] ? ___sys_sendmsg+0x19d/0x1e0 [ 588.260097][T14290] ? kfree+0x2ec/0x6b0 [ 588.260130][T14290] ___sys_sendmsg+0x190/0x1e0 [ 588.260168][T14290] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.260230][T14290] ? __pfx___might_resched+0x10/0x10 [ 588.260270][T14290] __sys_sendmmsg+0x205/0x430 [ 588.260301][T14290] ? __pfx___sys_sendmmsg+0x10/0x10 [ 588.260339][T14290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 588.260380][T14290] ? fput+0x79/0x100 [ 588.260406][T14290] ? ksys_write+0x1ac/0x250 [ 588.260443][T14290] ? __pfx_ksys_write+0x10/0x10 [ 588.260485][T14290] __x64_sys_sendmmsg+0x9c/0x100 [ 588.260512][T14290] ? lockdep_hardirqs_on+0x78/0x100 [ 588.260540][T14290] do_syscall_64+0x106/0xf80 [ 588.260566][T14290] ? clear_bhb_loop+0x40/0x90 [ 588.260596][T14290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.260620][T14290] RIP: 0033:0x7f0e45f9c799 [ 588.260640][T14290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.260668][T14290] RSP: 002b:00007f0e46dea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 588.260692][T14290] RAX: ffffffffffffffda RBX: 00007f0e46215fa0 RCX: 00007f0e45f9c799 [ 588.260708][T14290] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 588.260723][T14290] RBP: 00007f0e46dea090 R08: 0000000000000000 R09: 0000000000000000 [ 588.260738][T14290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.260753][T14290] R13: 00007f0e46216038 R14: 00007f0e46215fa0 R15: 00007ffdb855f808 [ 588.260784][T14290] [ 588.798995][T14301] FAULT_INJECTION: forcing a failure. [ 588.798995][T14301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.812579][T14301] CPU: 0 UID: 0 PID: 14301 Comm: syz.0.1745 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.812612][T14301] Tainted: [L]=SOFTLOCKUP [ 588.812620][T14301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.812633][T14301] Call Trace: [ 588.812640][T14301] [ 588.812648][T14301] dump_stack_lvl+0x100/0x190 [ 588.812690][T14301] should_fail_ex.cold+0x5/0xa [ 588.812716][T14301] strncpy_from_user+0x3b/0x2d0 [ 588.812753][T14301] do_getname+0x78/0x390 [ 588.812782][T14301] do_sys_openat2+0xc5/0x1e0 [ 588.812809][T14301] ? __pfx_do_sys_openat2+0x10/0x10 [ 588.812835][T14301] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 588.812866][T14301] ? __fget_files+0x21f/0x3d0 [ 588.812903][T14301] __x64_sys_openat+0x12d/0x210 [ 588.812931][T14301] ? __pfx___x64_sys_openat+0x10/0x10 [ 588.812957][T14301] ? ksys_write+0x1ac/0x250 [ 588.812999][T14301] do_syscall_64+0x106/0xf80 [ 588.813023][T14301] ? clear_bhb_loop+0x40/0x90 [ 588.813049][T14301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.813071][T14301] RIP: 0033:0x7f0e45f9c799 [ 588.813088][T14301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.813109][T14301] RSP: 002b:00007f0e46dea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 588.813130][T14301] RAX: ffffffffffffffda RBX: 00007f0e46215fa0 RCX: 00007f0e45f9c799 [ 588.813145][T14301] RDX: 0000000000103041 RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 588.813159][T14301] RBP: 00007f0e46dea090 R08: 0000000000000000 R09: 0000000000000000 [ 588.813172][T14301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.813185][T14301] R13: 00007f0e46216038 R14: 00007f0e46215fa0 R15: 00007ffdb855f808 [ 588.813213][T14301] [ 589.824316][T14318] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 589.889804][T14315] sp0: Synchronizing with TNC [ 590.203032][T14326] tc_dump_action: action bad kind [ 590.276585][T14329] input: jJǸ-9%vJ86 as /devices/virtual/input/input42 [ 590.511750][T14332] overlayfs: "check_copy_up" module option is obsolete [ 591.464816][T14354] random: crng reseeded on system resumption [ 592.242945][T14374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1765'. [ 592.287553][T14374] macsec0: entered promiscuous mode [ 592.314437][T14374] macsec0: entered allmulticast mode [ 592.334532][T14374] veth1_macvtap: entered allmulticast mode [ 592.583157][T14384] misc userio: Invalid payload size [ 593.441081][T14395] zswap: compressor not available [ 593.820537][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 593.830173][ T5838] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 593.979127][T14417] random: crng reseeded on system resumption [ 594.752150][T14433] input: f as /devices/virtual/input/input43 [ 595.794853][T14453] FAULT_INJECTION: forcing a failure. [ 595.794853][T14453] name failslab, interval 1, probability 0, space 0, times 0 [ 595.883923][T14453] CPU: 0 UID: 0 PID: 14453 Comm: syz.1.1784 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.883964][T14453] Tainted: [L]=SOFTLOCKUP [ 595.883974][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.883988][T14453] Call Trace: [ 595.884001][T14453] [ 595.884011][T14453] dump_stack_lvl+0x100/0x190 [ 595.884051][T14453] should_fail_ex.cold+0x5/0xa [ 595.884080][T14453] should_failslab+0xc2/0x120 [ 595.884105][T14453] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 595.884139][T14453] ? alloc_empty_file+0x55/0x1c0 [ 595.884173][T14453] alloc_empty_file+0x55/0x1c0 [ 595.884203][T14453] alloc_file_pseudo+0x13a/0x230 [ 595.884233][T14453] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 595.884263][T14453] ? alloc_fd+0x476/0x790 [ 595.884290][T14453] sock_alloc_file+0x50/0x210 [ 595.884320][T14453] __sys_socket+0x1c0/0x260 [ 595.884357][T14453] ? __pfx___sys_socket+0x10/0x10 [ 595.884395][T14453] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 595.884429][T14453] __x64_sys_socket+0x72/0xb0 [ 595.884464][T14453] ? lockdep_hardirqs_on+0x78/0x100 [ 595.884492][T14453] do_syscall_64+0x106/0xf80 [ 595.884517][T14453] ? clear_bhb_loop+0x40/0x90 [ 595.884546][T14453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.884570][T14453] RIP: 0033:0x7f753599c799 [ 595.884590][T14453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.884613][T14453] RSP: 002b:00007f7533bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 595.884636][T14453] RAX: ffffffffffffffda RBX: 00007f7535c15fa0 RCX: 00007f753599c799 [ 595.884652][T14453] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 595.884666][T14453] RBP: 00007f7535a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 595.884681][T14453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.884695][T14453] R13: 00007f7535c16038 R14: 00007f7535c15fa0 R15: 00007ffe40190d38 [ 595.884725][T14453] [ 596.334106][T13722] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 596.342279][T13722] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 596.638532][T14470] random: crng reseeded on system resumption syzkaller syzkaller login: [ 597.202251][T14482] input: f as /devices/virtual/input/input44 [ 597.349954][T14485] HfR: entered promiscuous mode [ 597.411375][T14485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1791'. [ 598.374718][T14504] FAULT_INJECTION: forcing a failure. [ 598.374718][T14504] name failslab, interval 1, probability 0, space 0, times 0 [ 598.444705][T14504] CPU: 0 UID: 0 PID: 14504 Comm: syz.2.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.444760][T14504] Tainted: [L]=SOFTLOCKUP [ 598.444770][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.444785][T14504] Call Trace: [ 598.444793][T14504] [ 598.444803][T14504] dump_stack_lvl+0x100/0x190 [ 598.444844][T14504] should_fail_ex.cold+0x5/0xa [ 598.444871][T14504] should_failslab+0xc2/0x120 [ 598.444896][T14504] __kmalloc_cache_noprof+0x7a/0x6f0 [ 598.444927][T14504] ? acpi_ds_create_walk_state+0x95/0x300 [ 598.444973][T14504] acpi_ds_create_walk_state+0x95/0x300 [ 598.445018][T14504] acpi_ps_execute_method+0x2c1/0xe90 [ 598.445050][T14504] acpi_ns_evaluate+0x640/0x1670 [ 598.445083][T14504] acpi_evaluate_object+0x420/0xe00 [ 598.445117][T14504] ? kasan_save_stack+0x30/0x50 [ 598.445153][T14504] ? kasan_save_track+0x14/0x30 [ 598.445194][T14504] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 598.445238][T14504] acpi_evaluate_integer+0xdf/0x220 [ 598.445269][T14504] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 598.445310][T14504] ? __pfx_status_show+0x10/0x10 [ 598.445344][T14504] status_show+0xa0/0x120 [ 598.445377][T14504] ? __pfx_status_show+0x10/0x10 [ 598.445418][T14504] dev_attr_show+0x52/0xa0 [ 598.445457][T14504] ? __pfx_dev_attr_show+0x10/0x10 [ 598.445494][T14504] sysfs_kf_seq_show+0x217/0x3a0 [ 598.445530][T14504] seq_read_iter+0x32f/0x1270 [ 598.445578][T14504] kernfs_fop_read_iter+0x46c/0x610 [ 598.445604][T14504] ? rw_verify_area+0xce/0x6d0 [ 598.445644][T14504] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 598.445672][T14504] vfs_read+0x825/0xb30 [ 598.445712][T14504] ? __pfx_vfs_read+0x10/0x10 [ 598.445768][T14504] ksys_read+0x12a/0x250 [ 598.445804][T14504] ? __pfx_ksys_read+0x10/0x10 [ 598.445849][T14504] do_syscall_64+0x106/0xf80 [ 598.445875][T14504] ? clear_bhb_loop+0x40/0x90 [ 598.445905][T14504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.445930][T14504] RIP: 0033:0x7f5520f9c799 [ 598.445949][T14504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.445973][T14504] RSP: 002b:00007f5521e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.445995][T14504] RAX: ffffffffffffffda RBX: 00007f5521215fa0 RCX: 00007f5520f9c799 [ 598.446011][T14504] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 598.446027][T14504] RBP: 00007f5521032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 598.446041][T14504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.446055][T14504] R13: 00007f5521216038 R14: 00007f5521215fa0 R15: 00007ffe95f82748 [ 598.446087][T14504] [ 599.211982][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 599.324400][T14510] zswap: compressor not available [ 599.578822][T14518] FAULT_INJECTION: forcing a failure. [ 599.578822][T14518] name failslab, interval 1, probability 0, space 0, times 0 [ 599.606597][T14520] HfR: entered promiscuous mode [ 599.631155][T14518] CPU: 0 UID: 0 PID: 14518 Comm: syz.3.1798 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.631194][T14518] Tainted: [L]=SOFTLOCKUP [ 599.631203][T14518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 599.631219][T14518] Call Trace: [ 599.631227][T14518] [ 599.631236][T14518] dump_stack_lvl+0x100/0x190 [ 599.631279][T14518] should_fail_ex.cold+0x5/0xa [ 599.631308][T14518] should_failslab+0xc2/0x120 [ 599.631333][T14518] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 599.631371][T14518] ? shmem_alloc_inode+0x25/0x50 [ 599.631401][T14518] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 599.631430][T14518] shmem_alloc_inode+0x25/0x50 [ 599.631456][T14518] alloc_inode+0x68/0x250 [ 599.631488][T14518] new_inode+0x22/0x1c0 [ 599.631517][T14518] ? trace_kmem_cache_alloc+0xf3/0x120 [ 599.631545][T14518] shmem_get_inode+0x212/0x1040 [ 599.631580][T14518] ? __pfx_shmem_get_inode+0x10/0x10 [ 599.631611][T14518] ? rcu_is_watching+0x12/0xc0 [ 599.631647][T14518] ? percpu_counter_add_batch+0xb9/0x230 [ 599.631696][T14518] __shmem_file_setup+0x3ac/0x490 [ 599.631730][T14518] ? __pfx___shmem_file_setup+0x10/0x10 [ 599.631768][T14518] ? vm_area_alloc+0x1f/0x160 [ 599.631804][T14518] shmem_zero_setup+0x96/0x1b0 [ 599.631844][T14518] __mmap_region+0x2198/0x29e0 [ 599.631892][T14518] ? __pfx___mmap_region+0x10/0x10 [ 599.631947][T14518] ? set_next_entity+0x11e/0x9c0 [ 599.631987][T14518] ? __lock_acquire+0x4a5/0x2630 [ 599.632016][T14518] ? update_cfs_rq_load_avg+0x51/0x550 [ 599.632055][T14518] ? find_held_lock+0x2b/0x80 [ 599.632076][T14518] ? finish_task_switch.isra.0+0x200/0xb80 [ 599.632102][T14518] ? finish_task_switch.isra.0+0x200/0xb80 [ 599.632139][T14518] ? trace_sched_exit_tp+0x13a/0x180 [ 599.632167][T14518] ? __schedule+0x1000/0x6120 [ 599.632227][T14518] ? rcu_is_watching+0x12/0xc0 [ 599.632263][T14518] ? cap_capable+0x107/0x460 [ 599.632299][T14518] mmap_region+0x180/0x3e0 [ 599.632340][T14518] do_mmap+0xc63/0x12f0 [ 599.632371][T14518] ? __pfx_do_mmap+0x10/0x10 [ 599.632396][T14518] ? __pfx_down_write_killable+0x10/0x10 [ 599.632454][T14518] vm_mmap_pgoff+0x29e/0x470 [ 599.632487][T14518] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 599.632516][T14518] ? do_futex+0x192/0x350 [ 599.632548][T14518] ? __pfx_do_futex+0x10/0x10 [ 599.632585][T14518] ksys_mmap_pgoff+0xe1/0x650 [ 599.632610][T14518] ? __x64_sys_futex+0x34f/0x4d0 [ 599.632641][T14518] ? __x64_sys_futex+0x358/0x4d0 [ 599.632673][T14518] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 599.632699][T14518] ? xfd_validate_state+0x129/0x190 [ 599.632740][T14518] __x64_sys_mmap+0x125/0x190 [ 599.632780][T14518] do_syscall_64+0x106/0xf80 [ 599.632807][T14518] ? clear_bhb_loop+0x40/0x90 [ 599.632838][T14518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.632863][T14518] RIP: 0033:0x7f549ef9c799 [ 599.632890][T14518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.632914][T14518] RSP: 002b:00007f549fd90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 599.632938][T14518] RAX: ffffffffffffffda RBX: 00007f549f215fa0 RCX: 00007f549ef9c799 [ 599.632955][T14518] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 599.632970][T14518] RBP: 00007f549f032bd9 R08: fffffffffffffffa R09: 0000000000008000 [ 599.632986][T14518] R10: 0000009000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 599.633001][T14518] R13: 00007f549f216038 R14: 00007f549f215fa0 R15: 00007fff8c226e18 [ 599.633033][T14518] [ 600.051391][T14526] input: f as /devices/virtual/input/input45 [ 600.758277][T14535] input: f as /devices/virtual/input/input46 [ 601.246771][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'. [ 601.427778][ T5838] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 601.542081][T14560] netlink: zone id is out of range [ 601.604244][T14559] netlink: set zone limit has 8 unknown bytes [ 601.676782][T14560] netlink: zone id is out of range [ 601.720272][T14560] netlink: zone id is out of range [ 601.789748][T14560] netlink: zone id is out of range [ 601.842158][T14560] netlink: zone id is out of range [ 601.887573][T14560] netlink: zone id is out of range [ 601.916915][T14560] netlink: zone id is out of range [ 601.958324][T14560] netlink: zone id is out of range [ 601.980746][T14560] netlink: zone id is out of range [ 602.041982][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1810'. [ 602.956000][T14584] random: crng reseeded on system resumption [ 603.017035][T14586] vivid-007: ================= START STATUS ================= [ 603.048559][T14586] vivid-007: Generate PTS: true [ 603.068996][T14586] vivid-007: Generate SCR: true [ 603.081927][T14586] tpg source WxH: 320x240 (Y'CbCr) [ 603.103153][T14586] tpg field: 1 [ 603.120147][T14586] tpg crop: (0,0)/320x240 [ 603.135543][T14586] tpg compose: (0,0)/320x240 [ 603.150940][T14586] tpg colorspace: 8 [ 603.182272][T14586] tpg transfer function: 0/0 [ 603.210924][T14586] tpg Y'CbCr encoding: 0/0 [ 603.222895][T14586] tpg quantization: 0/0 [ 603.235834][T14586] tpg RGB range: 0/2 [ 603.245280][T14586] vivid-007: ================== END STATUS ================== [ 604.748750][T14619] input: f as /devices/virtual/input/input47 [ 605.262924][T14629] input: f as /devices/virtual/input/input48 [ 605.943695][T14627] FAULT_INJECTION: forcing a failure. [ 605.943695][T14627] name fail_futex, interval 1, probability 0, space 0, times 0 [ 606.012251][T14627] CPU: 0 UID: 0 PID: 14627 Comm: syz.3.1823 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.012288][T14627] Tainted: [L]=SOFTLOCKUP [ 606.012297][T14627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 606.012311][T14627] Call Trace: [ 606.012319][T14627] [ 606.012328][T14627] dump_stack_lvl+0x100/0x190 [ 606.012367][T14627] should_fail_ex.cold+0x5/0xa [ 606.012394][T14627] get_futex_key+0x1d2/0x1620 [ 606.012424][T14627] ? __pfx_get_futex_key+0x10/0x10 [ 606.012449][T14627] ? lock_acquire+0x1cf/0x380 [ 606.012487][T14627] futex_wake+0xea/0x530 [ 606.012524][T14627] ? __pfx_futex_wake+0x10/0x10 [ 606.012557][T14627] ? exit_mm_release+0x19/0x30 [ 606.012592][T14627] do_futex+0x32b/0x350 [ 606.012633][T14627] ? __pfx_do_futex+0x10/0x10 [ 606.012658][T14627] ? __might_fault+0xc5/0x140 [ 606.012695][T14627] mm_release+0x24a/0x2f0 [ 606.012716][T14627] do_exit+0x675/0x2aa0 [ 606.012741][T14627] ? finish_task_switch.isra.0+0x205/0xb80 [ 606.012768][T14627] ? __pfx_do_exit+0x10/0x10 [ 606.012795][T14627] ? do_raw_spin_lock+0x128/0x260 [ 606.012882][T14627] ? find_held_lock+0x2b/0x80 [ 606.012902][T14627] ? get_signal+0x7e0/0x21e0 [ 606.012928][T14627] do_group_exit+0xd5/0x2a0 [ 606.012966][T14627] get_signal+0x1ec7/0x21e0 [ 606.012992][T14627] ? do_raw_spin_lock+0x128/0x260 [ 606.013027][T14627] ? do_msgrcv+0xfe8/0x16f0 [ 606.013057][T14627] ? __pfx_get_signal+0x10/0x10 [ 606.013082][T14627] ? do_msgrcv+0x1047/0x16f0 [ 606.013113][T14627] arch_do_signal_or_restart+0x91/0x770 [ 606.013142][T14627] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 606.013186][T14627] exit_to_user_mode_loop+0x86/0x4a0 [ 606.013218][T14627] do_syscall_64+0x668/0xf80 [ 606.013244][T14627] ? clear_bhb_loop+0x40/0x90 [ 606.013272][T14627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.013295][T14627] RIP: 0033:0x7f549ef9c799 [ 606.013314][T14627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.013335][T14627] RSP: 002b:00007f549fd6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 606.013357][T14627] RAX: fffffffffffffdfe RBX: 00007f549f216090 RCX: 00007f549ef9c799 [ 606.013373][T14627] RDX: 0000000000000ff9 RSI: 0000000000000000 RDI: 0000000000000000 [ 606.013388][T14627] RBP: 00007f549fd6f090 R08: 0000000000000003 R09: 0000000000000000 [ 606.013402][T14627] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 606.013416][T14627] R13: 00007f549f216128 R14: 00007f549f216090 R15: 00007fff8c226e18 [ 606.013465][T14627] [ 608.917391][T14669] random: crng reseeded on system resumption [ 609.225903][T14677] input: f as /devices/virtual/input/input49 [ 609.342729][T14681] device-mapper: ioctl: Invalid ioctl structure: name , dev 8100000000 [ 609.627527][T14691] random: crng reseeded on system resumption [ 610.489713][T14710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1841'. [ 611.426722][T14726] random: crng reseeded on system resumption [ 611.998719][T14740] openvswitch: HfR: Dropping previously announced user features [ 612.018719][T14740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1848'. [ 612.107726][T14742] misc userio: Invalid payload size [ 612.874483][T14768] x_tables: duplicate underflow at hook 4 [ 614.566347][T14776] [U] ^\ [ 615.078947][T14801] misc userio: Invalid payload size [ 616.514854][T14822] FAULT_INJECTION: forcing a failure. [ 616.514854][T14822] name failslab, interval 1, probability 0, space 0, times 0 [ 616.576517][T14822] CPU: 0 UID: 0 PID: 14822 Comm: syz.2.1864 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.576555][T14822] Tainted: [L]=SOFTLOCKUP [ 616.576564][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 616.576579][T14822] Call Trace: [ 616.576587][T14822] [ 616.576596][T14822] dump_stack_lvl+0x100/0x190 [ 616.576636][T14822] should_fail_ex.cold+0x5/0xa [ 616.576665][T14822] should_failslab+0xc2/0x120 [ 616.576689][T14822] __kmalloc_cache_noprof+0x7a/0x6f0 [ 616.576720][T14822] ? proc_self_get_link+0x189/0x1f0 [ 616.576759][T14822] proc_self_get_link+0x189/0x1f0 [ 616.576793][T14822] pick_link+0xac2/0x13c0 [ 616.576825][T14822] ? __pfx_proc_self_get_link+0x10/0x10 [ 616.576862][T14822] step_into_slowpath+0x9ba/0xf90 [ 616.576903][T14822] ? __pfx_step_into_slowpath+0x10/0x10 [ 616.576961][T14822] ? lookup_fast+0x2da/0x600 [ 616.576990][T14822] ? inode_permission+0x374/0x620 [ 616.577021][T14822] link_path_walk+0xf28/0x1cc0 [ 616.577063][T14822] path_lookupat+0x74/0xc40 [ 616.577100][T14822] filename_lookup+0x202/0x590 [ 616.577138][T14822] ? __pfx_filename_lookup+0x10/0x10 [ 616.577191][T14822] ? strncpy_from_user+0x19d/0x2d0 [ 616.577229][T14822] ? do_getname+0x191/0x390 [ 616.577258][T14822] __x64_sys_name_to_handle_at+0x1cc/0x2d0 [ 616.577286][T14822] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 616.577321][T14822] do_syscall_64+0x106/0xf80 [ 616.577345][T14822] ? clear_bhb_loop+0x40/0x90 [ 616.577373][T14822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.577395][T14822] RIP: 0033:0x7f5520f9c799 [ 616.577413][T14822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.577435][T14822] RSP: 002b:00007f5521df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 616.577456][T14822] RAX: ffffffffffffffda RBX: 00007f5521216090 RCX: 00007f5520f9c799 [ 616.577470][T14822] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: ffffffffffffffff [ 616.577485][T14822] RBP: 00007f5521032bd9 R08: 0000000000000200 R09: 0000000000000000 [ 616.577499][T14822] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 616.577513][T14822] R13: 00007f5521216128 R14: 00007f5521216090 R15: 00007ffe95f82748 [ 616.577542][T14822] [ 618.058088][T14837] input: f as /devices/virtual/input/input51 [ 618.214929][T14845] FAULT_INJECTION: forcing a failure. [ 618.214929][T14845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.299466][T14845] CPU: 0 UID: 0 PID: 14845 Comm: syz.1.1869 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.299504][T14845] Tainted: [L]=SOFTLOCKUP [ 618.299513][T14845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.299527][T14845] Call Trace: [ 618.299535][T14845] [ 618.299545][T14845] dump_stack_lvl+0x100/0x190 [ 618.299585][T14845] should_fail_ex.cold+0x5/0xa [ 618.299613][T14845] _copy_from_user+0x2e/0xd0 [ 618.299652][T14845] ucma_disconnect+0x80/0x1f0 [ 618.299680][T14845] ? __pfx_ucma_disconnect+0x10/0x10 [ 618.299713][T14845] ? __pfx_ucma_disconnect+0x10/0x10 [ 618.299750][T14845] ucma_write+0x1fb/0x330 [ 618.299775][T14845] ? __pfx_ucma_write+0x10/0x10 [ 618.299800][T14845] ? bpf_lsm_file_permission+0x9/0x10 [ 618.299837][T14845] ? security_file_permission+0x76/0x210 [ 618.299862][T14845] ? rw_verify_area+0xce/0x6d0 [ 618.299903][T14845] vfs_write+0x2aa/0x1070 [ 618.299941][T14845] ? __pfx_ucma_write+0x10/0x10 [ 618.299990][T14845] ? __pfx_vfs_write+0x10/0x10 [ 618.300025][T14845] ? find_held_lock+0x2b/0x80 [ 618.300047][T14845] ? __fget_files+0x215/0x3d0 [ 618.300083][T14845] ? __fget_files+0x215/0x3d0 [ 618.300125][T14845] ? __fget_files+0x21f/0x3d0 [ 618.300169][T14845] ksys_write+0x1f8/0x250 [ 618.300206][T14845] ? __pfx_ksys_write+0x10/0x10 [ 618.300251][T14845] do_syscall_64+0x106/0xf80 [ 618.300278][T14845] ? clear_bhb_loop+0x40/0x90 [ 618.300308][T14845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.300332][T14845] RIP: 0033:0x7f753599c799 [ 618.300352][T14845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.300375][T14845] RSP: 002b:00007f7533bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 618.300397][T14845] RAX: ffffffffffffffda RBX: 00007f7535c16090 RCX: 00007f753599c799 [ 618.300412][T14845] RDX: 00000000000000c3 RSI: 0000000000000000 RDI: 000000000000000c [ 618.300426][T14845] RBP: 00007f7533bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 618.300441][T14845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.300455][T14845] R13: 00007f7535c16128 R14: 00007f7535c16090 R15: 00007ffe40190d38 [ 618.300488][T14845] [ 618.834507][T14848] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input52 [ 619.123416][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1871'. [ 619.133610][T14854] random: crng reseeded on system resumption [ 619.743838][T14867] misc userio: Invalid payload size [ 620.688174][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 621.326439][T14878] Process accounting resumed [ 621.470196][T14899] kAFS: unparsable volume name [ 621.815284][T14906] input: f as /devices/virtual/input/input53 [ 622.631158][T14923] misc userio: Invalid payload size [ 622.763872][T14927] random: crng reseeded on system resumption [ 623.384002][T14941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1890'. [ 624.066557][T14947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1892'. [ 624.345673][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.358714][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.576321][T14958] misc userio: Invalid payload size [ 625.149448][ T29] audit: type=1806 audit(4294967312.620:11): xattr="." res=0 [ 625.326629][T14972] FAULT_INJECTION: forcing a failure. [ 625.326629][T14972] name failslab, interval 1, probability 0, space 0, times 0 [ 625.391652][T14972] CPU: 0 UID: 0 PID: 14972 Comm: syz.1.1900 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.391690][T14972] Tainted: [L]=SOFTLOCKUP [ 625.391699][T14972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.391713][T14972] Call Trace: [ 625.391721][T14972] [ 625.391731][T14972] dump_stack_lvl+0x100/0x190 [ 625.391771][T14972] should_fail_ex.cold+0x5/0xa [ 625.391799][T14972] should_failslab+0xc2/0x120 [ 625.391823][T14972] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 625.391860][T14972] ? sock_alloc_inode+0x25/0x1c0 [ 625.391896][T14972] ? __pfx_sock_alloc_inode+0x10/0x10 [ 625.391930][T14972] sock_alloc_inode+0x25/0x1c0 [ 625.391962][T14972] alloc_inode+0x68/0x250 [ 625.391994][T14972] sock_alloc+0x44/0x280 [ 625.392022][T14972] ? security_socket_create+0x7f/0x250 [ 625.392067][T14972] __sock_create+0xc2/0x860 [ 625.392103][T14972] ? lockdep_init_map_type+0x5c/0x250 [ 625.392139][T14972] smc_create+0x163/0x290 [ 625.392164][T14972] __sock_create+0x339/0x860 [ 625.392204][T14972] __sys_socket+0x14d/0x260 [ 625.392241][T14972] ? __pfx___sys_socket+0x10/0x10 [ 625.392286][T14972] __x64_sys_socket+0x72/0xb0 [ 625.392322][T14972] ? lockdep_hardirqs_on+0x78/0x100 [ 625.392351][T14972] do_syscall_64+0x106/0xf80 [ 625.392377][T14972] ? clear_bhb_loop+0x40/0x90 [ 625.392407][T14972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.392431][T14972] RIP: 0033:0x7f753599c799 [ 625.392451][T14972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.392487][T14972] RSP: 002b:00007f7533bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 625.392508][T14972] RAX: ffffffffffffffda RBX: 00007f7535c15fa0 RCX: 00007f753599c799 [ 625.392523][T14972] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 625.392537][T14972] RBP: 00007f7535a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 625.392551][T14972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.392565][T14972] R13: 00007f7535c16038 R14: 00007f7535c15fa0 R15: 00007ffe40190d38 [ 625.392592][T14972] [ 625.392617][T14972] net_ratelimit: 5 callbacks suppressed [ 625.392631][T14972] socket: no more sockets [ 627.678242][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 627.718707][T15010] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1907'. [ 627.764768][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 628.250546][T15014] FAULT_INJECTION: forcing a failure. [ 628.250546][T15014] name failslab, interval 1, probability 0, space 0, times 0 [ 628.312133][T15014] CPU: 0 UID: 0 PID: 15014 Comm: syz.0.1909 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.312169][T15014] Tainted: [L]=SOFTLOCKUP [ 628.312177][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 628.312190][T15014] Call Trace: [ 628.312198][T15014] [ 628.312207][T15014] dump_stack_lvl+0x100/0x190 [ 628.312246][T15014] should_fail_ex.cold+0x5/0xa [ 628.312272][T15014] should_failslab+0xc2/0x120 [ 628.312296][T15014] __kmalloc_cache_noprof+0x7a/0x6f0 [ 628.312334][T15014] ? binder_get_thread+0x201/0x850 [ 628.312369][T15014] binder_get_thread+0x201/0x850 [ 628.312401][T15014] binder_ioctl+0x26f/0x7610 [ 628.312443][T15014] ? tomoyo_path_number_perm+0x28f/0x580 [ 628.312477][T15014] ? tomoyo_path_number_perm+0x28f/0x580 [ 628.312533][T15014] ? tomoyo_path_number_perm+0x188/0x580 [ 628.312570][T15014] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 628.312611][T15014] ? __pfx_binder_ioctl+0x10/0x10 [ 628.312645][T15014] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 628.312685][T15014] ? do_vfs_ioctl+0x226/0x13e0 [ 628.312723][T15014] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 628.312795][T15014] ? find_held_lock+0x2b/0x80 [ 628.312817][T15014] ? __fget_files+0x215/0x3d0 [ 628.312854][T15014] ? hook_file_ioctl_common+0x146/0x410 [ 628.312897][T15014] ? __fget_files+0x21f/0x3d0 [ 628.312938][T15014] ? __pfx_binder_ioctl+0x10/0x10 [ 628.312972][T15014] __x64_sys_ioctl+0x18e/0x210 [ 628.313008][T15014] do_syscall_64+0x106/0xf80 [ 628.313035][T15014] ? clear_bhb_loop+0x40/0x90 [ 628.313064][T15014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.313088][T15014] RIP: 0033:0x7f0e45f9c799 [ 628.313113][T15014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.313137][T15014] RSP: 002b:00007f0e46dea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.313163][T15014] RAX: ffffffffffffffda RBX: 00007f0e46215fa0 RCX: 00007f0e45f9c799 [ 628.313179][T15014] RDX: 0000000000000000 RSI: 00000000c018620c RDI: 0000000000000006 [ 628.313194][T15014] RBP: 00007f0e46dea090 R08: 0000000000000000 R09: 0000000000000000 [ 628.313208][T15014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.313223][T15014] R13: 00007f0e46216038 R14: 00007f0e46215fa0 R15: 00007ffdb855f808 [ 628.313254][T15014] [ 628.580053][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1911'. [ 628.777840][T15014] binder: 15012:15014 ioctl c018620c 0 returned -12 [ 628.938682][T15028] input: f as /devices/virtual/input/input54 [ 629.667064][T15037] bond0: invalid ARP target specified [ 629.982468][T15040] FAULT_INJECTION: forcing a failure. [ 629.982468][T15040] name failslab, interval 1, probability 0, space 0, times 0 [ 630.075275][T15040] CPU: 0 UID: 0 PID: 15040 Comm: syz.2.1915 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.075315][T15040] Tainted: [L]=SOFTLOCKUP [ 630.075326][T15040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 630.075341][T15040] Call Trace: [ 630.075349][T15040] [ 630.075359][T15040] dump_stack_lvl+0x100/0x190 [ 630.075398][T15040] should_fail_ex.cold+0x5/0xa [ 630.075425][T15040] ? tomoyo_encode2+0xfb/0x3c0 [ 630.075450][T15040] should_failslab+0xc2/0x120 [ 630.075474][T15040] __kmalloc_noprof+0xe0/0x850 [ 630.075508][T15040] ? d_absolute_path+0x136/0x1b0 [ 630.075544][T15040] tomoyo_encode2+0xfb/0x3c0 [ 630.075574][T15040] tomoyo_encode+0x29/0x50 [ 630.075605][T15040] tomoyo_realpath_from_path+0x18c/0x690 [ 630.075641][T15040] tomoyo_path_number_perm+0x23c/0x580 [ 630.075678][T15040] ? tomoyo_path_number_perm+0x22e/0x580 [ 630.075730][T15040] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 630.075767][T15040] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.075798][T15040] ? unwind_get_return_address+0x59/0xa0 [ 630.075822][T15040] ? arch_stack_walk+0xa6/0xf0 [ 630.075861][T15040] ? current_check_access_path+0x281/0x460 [ 630.075888][T15040] ? __pfx_current_check_access_path+0x10/0x10 [ 630.075921][T15040] tomoyo_path_mknod+0x164/0x190 [ 630.075950][T15040] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 630.075981][T15040] ? __d_lookup+0x25c/0x4a0 [ 630.076010][T15040] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 630.076053][T15040] security_path_mknod+0x161/0x300 [ 630.076082][T15040] may_o_create+0x30/0x3a0 [ 630.076110][T15040] ? kernfs_dop_revalidate+0xd2/0x740 [ 630.076148][T15040] lookup_open.isra.0+0xa0d/0x11b0 [ 630.076187][T15040] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 630.076226][T15040] ? __pfx___might_resched+0x10/0x10 [ 630.076259][T15040] ? mnt_get_write_access+0x52/0x2f0 [ 630.076295][T15040] ? __pfx_down_write+0x10/0x10 [ 630.076327][T15040] ? mnt_get_write_access+0x1e9/0x2f0 [ 630.076362][T15040] path_openat+0x2291/0x31a0 [ 630.076390][T15040] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 630.076417][T15040] ? __pfx_path_openat+0x10/0x10 [ 630.076450][T15040] do_file_open+0x20e/0x430 [ 630.076475][T15040] ? __pfx_do_file_open+0x10/0x10 [ 630.076518][T15040] ? _raw_spin_unlock+0x28/0x50 [ 630.076540][T15040] ? alloc_fd+0x476/0x790 [ 630.076569][T15040] do_sys_openat2+0x10d/0x1e0 [ 630.076603][T15040] ? __pfx_do_sys_openat2+0x10/0x10 [ 630.076636][T15040] ? irqentry_exit+0x180/0x670 [ 630.076680][T15040] ? lockdep_hardirqs_on+0x78/0x100 [ 630.076711][T15040] __x64_sys_open+0xfe/0x1d0 [ 630.076741][T15040] ? __pfx___x64_sys_open+0x10/0x10 [ 630.076783][T15040] do_syscall_64+0x106/0xf80 [ 630.076809][T15040] ? clear_bhb_loop+0x40/0x90 [ 630.076839][T15040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.076863][T15040] RIP: 0033:0x7f5520f9c799 [ 630.076882][T15040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.076906][T15040] RSP: 002b:00007f5521e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 630.076929][T15040] RAX: ffffffffffffffda RBX: 00007f5521215fa0 RCX: 00007f5520f9c799 [ 630.076945][T15040] RDX: e1d2b27bdc14aabc RSI: 0000000000004242 RDI: 0000200000000000 [ 630.076961][T15040] RBP: 00007f5521e17090 R08: 0000000000000000 R09: 0000000000000000 [ 630.076975][T15040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.076990][T15040] R13: 00007f5521216038 R14: 00007f5521215fa0 R15: 00007ffe95f82748 [ 630.077021][T15040] [ 630.081518][T15040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 631.374015][T15069] misc userio: Invalid payload size [ 634.044132][T15089] [U] [ 634.046975][T15089] [U] [ 634.049681][T15089] [U] [ 634.052429][T15089] [U] [ 634.107901][T15089] [U] [ 634.110657][T15089] [U] [ 634.113371][T15089] [U] [ 634.116163][T15089] [U] [ 634.156804][T15089] [U] [ 634.159557][T15089] [U] [ 634.162283][T15089] [U] [ 634.165008][T15089] [U] [ 634.260409][T15089] [U] [ 634.263160][T15089] [U] [ 634.265882][T15089] [U] [ 634.268583][T15089] [U] [ 634.313774][T15089] [U] [ 634.571826][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1933'. [ 634.641223][T15120] random: crng reseeded on system resumption [ 635.094283][ T29] audit: type=1804 audit(4294967327.740:12): pid=15130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1935" name="/newroot/82/file0" dev="tmpfs" ino=443 res=1 errno=0 [ 635.259311][T15134] random: crng reseeded on system resumption [ 635.383255][T15134] FAULT_INJECTION: forcing a failure. [ 635.383255][T15134] name failslab, interval 1, probability 0, space 0, times 0 [ 635.464241][T15134] CPU: 0 UID: 0 PID: 15134 Comm: syz.0.1936 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.464281][T15134] Tainted: [L]=SOFTLOCKUP [ 635.464291][T15134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.464306][T15134] Call Trace: [ 635.464314][T15134] [ 635.464324][T15134] dump_stack_lvl+0x100/0x190 [ 635.464365][T15134] should_fail_ex.cold+0x5/0xa [ 635.464394][T15134] should_failslab+0xc2/0x120 [ 635.464419][T15134] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 635.464460][T15134] ? brnf_init_net+0x42/0x450 [ 635.464488][T15134] ? __pfx_brnf_init_net+0x10/0x10 [ 635.464514][T15134] kmemdup_noprof+0x29/0x60 [ 635.464552][T15134] brnf_init_net+0x42/0x450 [ 635.464580][T15134] ? __pfx_brnf_init_net+0x10/0x10 [ 635.464605][T15134] ops_init+0x1e2/0x5f0 [ 635.464638][T15134] setup_net+0x118/0x3a0 [ 635.464670][T15134] ? __pfx_setup_net+0x10/0x10 [ 635.464698][T15134] ? lockdep_init_map_type+0x5c/0x250 [ 635.464732][T15134] ? mutex_init_lockep+0x110/0x150 [ 635.464783][T15134] copy_net_ns+0x46f/0x7c0 [ 635.464818][T15134] create_new_namespaces+0x3ea/0xac0 [ 635.464849][T15134] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 635.464878][T15134] ksys_unshare+0x473/0xad0 [ 635.464916][T15134] ? __pfx_ksys_unshare+0x10/0x10 [ 635.464987][T15134] __x64_sys_unshare+0x31/0x40 [ 635.465018][T15134] do_syscall_64+0x106/0xf80 [ 635.465046][T15134] ? clear_bhb_loop+0x40/0x90 [ 635.465076][T15134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.465108][T15134] RIP: 0033:0x7f0e45f9c799 [ 635.465128][T15134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.465154][T15134] RSP: 002b:00007f0e46dea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 635.465178][T15134] RAX: ffffffffffffffda RBX: 00007f0e46215fa0 RCX: 00007f0e45f9c799 [ 635.465195][T15134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 635.465211][T15134] RBP: 00007f0e46032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 635.465227][T15134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.465242][T15134] R13: 00007f0e46216038 R14: 00007f0e46215fa0 R15: 00007ffdb855f808 [ 635.465275][T15134] [ 636.939397][T15159] random: crng reseeded on system resumption [ 637.416631][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 637.424136][ T5838] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 637.718274][T15163] binder: 15156:15163 ioctl c018620c 0 returned -1 [ 638.414415][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 638.944564][T15191] input: f as /devices/virtual/input/input55 [ 639.217805][T15192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1950'. [ 641.980090][T15240] program syz.1.1962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.757453][ T29] audit: type=1326 audit(4294967335.410:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.1.1965" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f753599c799 code=0x0 [ 643.382413][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 643.390681][ T5838] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 645.124464][T15296] input: f as /devices/virtual/input/input56 [ 645.556534][T15300] FAULT_INJECTION: forcing a failure. [ 645.556534][T15300] name failslab, interval 1, probability 0, space 0, times 0 [ 645.612491][T15300] CPU: 0 UID: 0 PID: 15300 Comm: syz.3.1973 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.612532][T15300] Tainted: [L]=SOFTLOCKUP [ 645.612541][T15300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.612557][T15300] Call Trace: [ 645.612565][T15300] [ 645.612574][T15300] dump_stack_lvl+0x100/0x190 [ 645.612615][T15300] should_fail_ex.cold+0x5/0xa [ 645.612644][T15300] should_failslab+0xc2/0x120 [ 645.612669][T15300] __kmalloc_cache_noprof+0x7a/0x6f0 [ 645.612701][T15300] ? pty_common_install+0xdf/0xb30 [ 645.612732][T15300] pty_common_install+0xdf/0xb30 [ 645.612762][T15300] ? __pfx_pty_unix98_install+0x10/0x10 [ 645.612802][T15300] tty_init_dev.part.0+0x9e/0x470 [ 645.612837][T15300] tty_init_dev+0x60/0x80 [ 645.612869][T15300] ptmx_open+0x15e/0x3c0 [ 645.612892][T15300] ? __pfx_ptmx_open+0x10/0x10 [ 645.612914][T15300] chrdev_open+0x234/0x6a0 [ 645.612953][T15300] ? __pfx_apparmor_file_open+0x10/0x10 [ 645.612989][T15300] ? __pfx_chrdev_open+0x10/0x10 [ 645.613015][T15300] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 645.613045][T15300] do_dentry_open+0x6d8/0x1660 [ 645.613075][T15300] ? __pfx_chrdev_open+0x10/0x10 [ 645.613126][T15300] vfs_open+0x82/0x3f0 [ 645.613161][T15300] path_openat+0x208c/0x31a0 [ 645.613196][T15300] ? __pfx_path_openat+0x10/0x10 [ 645.613231][T15300] do_file_open+0x20e/0x430 [ 645.613258][T15300] ? __pfx_do_file_open+0x10/0x10 [ 645.613303][T15300] ? alloc_fd+0x476/0x790 [ 645.613340][T15300] ? do_getname+0x191/0x390 [ 645.613372][T15300] do_sys_openat2+0x10d/0x1e0 [ 645.613402][T15300] ? __pfx_do_sys_openat2+0x10/0x10 [ 645.613435][T15300] ? __fget_files+0x21f/0x3d0 [ 645.613478][T15300] __x64_sys_openat+0x12d/0x210 [ 645.613509][T15300] ? __pfx___x64_sys_openat+0x10/0x10 [ 645.613551][T15300] do_syscall_64+0x106/0xf80 [ 645.613579][T15300] ? clear_bhb_loop+0x40/0x90 [ 645.613608][T15300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.613633][T15300] RIP: 0033:0x7f549ef9c799 [ 645.613653][T15300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.613676][T15300] RSP: 002b:00007f549fd90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 645.613699][T15300] RAX: ffffffffffffffda RBX: 00007f549f215fa0 RCX: 00007f549ef9c799 [ 645.613715][T15300] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 645.613730][T15300] RBP: 00007f549f032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 645.613744][T15300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.613759][T15300] R13: 00007f549f216038 R14: 00007f549f215fa0 R15: 00007fff8c226e18 [ 645.613789][T15300] [ 646.492761][T15309] misc userio: Invalid payload size [ 647.555223][T15322] random: crng reseeded on system resumption [ 649.055870][T15350] random: crng reseeded on system resumption [ 652.238629][T15388] input: f as /devices/virtual/input/input57 [ 652.697064][T15398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1994'. [ 652.789024][T15398] macsec0: entered promiscuous mode [ 652.857823][T15398] macsec0: entered allmulticast mode [ 652.923685][T15398] veth1_macvtap: entered allmulticast mode [ 652.971564][T15394] kexec: Could not allocate control_code_buffer syzkaller syzkaller login: [ 653.340775][T15406] random: crng reseeded on system resumption [ 654.072345][T15419] input: f as /devices/virtual/input/input58 [ 654.455977][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 654.463491][ T5838] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 655.361552][T15442] random: crng reseeded on system resumption [ 655.730331][T15446] random: crng reseeded on system resumption [ 655.785216][T15448] input: jJǸ-9%vJ86 as /devices/virtual/input/input59 [ 655.864378][T15453] FAULT_INJECTION: forcing a failure. [ 655.864378][T15453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.986618][T15453] CPU: 0 UID: 0 PID: 15453 Comm: syz.2.2009 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.986654][T15453] Tainted: [L]=SOFTLOCKUP [ 655.986663][T15453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 655.986677][T15453] Call Trace: [ 655.986684][T15453] [ 655.986693][T15453] dump_stack_lvl+0x100/0x190 [ 655.986732][T15453] should_fail_ex.cold+0x5/0xa [ 655.986758][T15453] _copy_to_iter+0x5a4/0x1720 [ 655.986801][T15453] ? __pfx__copy_to_iter+0x10/0x10 [ 655.986836][T15453] ? __pfx_input_devices_seq_show+0x10/0x10 [ 655.986870][T15453] ? seq_read_iter+0x819/0x1270 [ 655.986911][T15453] seq_read_iter+0xdab/0x1270 [ 655.986957][T15453] seq_read+0x33b/0x4c0 [ 655.986990][T15453] ? __pfx_seq_read+0x10/0x10 [ 655.987042][T15453] ? __pfx_seq_read+0x10/0x10 [ 655.987075][T15453] proc_reg_read+0x240/0x330 [ 655.987114][T15453] ? __pfx_proc_reg_read+0x10/0x10 [ 655.987149][T15453] vfs_read+0x1e4/0xb30 [ 655.987188][T15453] ? __pfx_vfs_read+0x10/0x10 [ 655.987240][T15453] ? __fget_files+0x215/0x3d0 [ 655.987284][T15453] ? __fget_files+0x21f/0x3d0 [ 655.987329][T15453] ksys_read+0x12a/0x250 [ 655.987365][T15453] ? __pfx_ksys_read+0x10/0x10 [ 655.987410][T15453] do_syscall_64+0x106/0xf80 [ 655.987438][T15453] ? clear_bhb_loop+0x40/0x90 [ 655.987468][T15453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.987492][T15453] RIP: 0033:0x7f5520f9c799 [ 655.987512][T15453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.987535][T15453] RSP: 002b:00007f5521df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 655.987569][T15453] RAX: ffffffffffffffda RBX: 00007f5521216090 RCX: 00007f5520f9c799 [ 655.987584][T15453] RDX: 000000000000fedf RSI: 0000200000000000 RDI: 0000000000000004 [ 655.987599][T15453] RBP: 00007f5521df6090 R08: 0000000000000000 R09: 0000000000000000 [ 655.987612][T15453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.987627][T15453] R13: 00007f5521216128 R14: 00007f5521216090 R15: 00007ffe95f82748 [ 655.987657][T15453] [ 658.279641][T15490] random: crng reseeded on system resumption [ 658.994519][T15499] random: crng reseeded on system resumption [ 660.335539][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 660.343036][ T5838] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 661.242258][T15533] random: crng reseeded on system resumption [ 662.957482][T15567] netlink: 'syz.0.2034': attribute type 2 has an invalid length. [ 663.303478][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 663.311567][ T5838] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 664.866618][T15595] random: crng reseeded on system resumption [ 666.752521][T15626] input: f as /devices/virtual/input/input60 [ 667.186231][T15632] random: crng reseeded on system resumption [ 672.693339][T15722] input: f as /devices/virtual/input/input61 [ 674.218006][T15753] input: f as /devices/virtual/input/input62 [ 675.896754][T15786] random: crng reseeded on system resumption [ 676.829983][ T29] audit: type=1804 audit(4294967330.290:14): pid=15798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2080" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 676.867415][T15794] random: crng reseeded on system resumption [ 677.172596][T15810] input: f as /devices/virtual/input/input63 [ 679.447427][T15841] Invalid ELF header magic: != ELF [ 680.464181][ T29] audit: type=1807 audit(4294967333.910:15): UNKNOWN= [ 680.523120][ T29] audit: type=1802 audit(4294967333.980:16): pid=15861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2091" res=0 errno=0 [ 681.697638][T15876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2095'. [ 682.295732][T15876] ipvlan0: entered promiscuous mode [ 682.329744][T15876] ipvlan0: entered allmulticast mode [ 682.366101][T15876] veth0_vlan: entered allmulticast mode [ 682.806296][T15851] ima: policy update failed [ 682.831403][ T29] audit: type=1802 audit(4294967336.290:17): pid=15851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2091" res=0 errno=0 [ 682.944044][T15886] FAULT_INJECTION: forcing a failure. [ 682.944044][T15886] name failslab, interval 1, probability 0, space 0, times 0 [ 683.025061][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.3.2098 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.025102][T15886] Tainted: [L]=SOFTLOCKUP [ 683.025112][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.025127][T15886] Call Trace: [ 683.025136][T15886] [ 683.025146][T15886] dump_stack_lvl+0x100/0x190 [ 683.025187][T15886] should_fail_ex.cold+0x5/0xa [ 683.025216][T15886] should_failslab+0xc2/0x120 [ 683.025241][T15886] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 683.025276][T15886] ? alloc_empty_file+0x55/0x1c0 [ 683.025305][T15886] ? __pfx_stack_trace_save+0x10/0x10 [ 683.025333][T15886] alloc_empty_file+0x55/0x1c0 [ 683.025364][T15886] path_openat+0xe8/0x31a0 [ 683.025386][T15886] ? kasan_save_stack+0x3f/0x50 [ 683.025422][T15886] ? kasan_save_stack+0x30/0x50 [ 683.025468][T15886] ? kasan_save_track+0x14/0x30 [ 683.025505][T15886] ? __kasan_slab_alloc+0x89/0x90 [ 683.025543][T15886] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 683.025578][T15886] ? do_getname+0x35/0x390 [ 683.025605][T15886] ? do_sys_openat2+0xc5/0x1e0 [ 683.025636][T15886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.025666][T15886] ? __pfx_path_openat+0x10/0x10 [ 683.025700][T15886] do_file_open+0x20e/0x430 [ 683.025726][T15886] ? __pfx_do_file_open+0x10/0x10 [ 683.025790][T15886] ? alloc_fd+0x476/0x790 [ 683.025815][T15886] ? do_getname+0x191/0x390 [ 683.025846][T15886] do_sys_openat2+0x10d/0x1e0 [ 683.025876][T15886] ? __pfx_do_sys_openat2+0x10/0x10 [ 683.025908][T15886] ? __sys_sendmsg+0x18f/0x220 [ 683.025954][T15886] __x64_sys_openat+0x12d/0x210 [ 683.025983][T15886] ? __pfx___x64_sys_openat+0x10/0x10 [ 683.026023][T15886] do_syscall_64+0x106/0xf80 [ 683.026048][T15886] ? clear_bhb_loop+0x40/0x90 [ 683.026076][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.026099][T15886] RIP: 0033:0x7f549ef9c799 [ 683.026118][T15886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.026140][T15886] RSP: 002b:00007f549fd90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 683.026161][T15886] RAX: ffffffffffffffda RBX: 00007f549f215fa0 RCX: 00007f549ef9c799 [ 683.026177][T15886] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 683.026191][T15886] RBP: 00007f549f032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 683.026205][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.026219][T15886] R13: 00007f549f216038 R14: 00007f549f215fa0 R15: 00007fff8c226e18 [ 683.026247][T15886] [ 683.138424][T15890] misc userio: Invalid payload size [ 683.142009][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 683.142040][ T5838] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 685.779726][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.779807][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.910037][T15921] misc userio: Invalid payload size [ 686.774631][T15940] FAULT_INJECTION: forcing a failure. [ 686.774631][T15940] name failslab, interval 1, probability 0, space 0, times 0 [ 686.846020][T15940] CPU: 0 UID: 0 PID: 15940 Comm: syz.2.2110 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.846059][T15940] Tainted: [L]=SOFTLOCKUP [ 686.846068][T15940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 686.846090][T15940] Call Trace: [ 686.846098][T15940] [ 686.846107][T15940] dump_stack_lvl+0x100/0x190 [ 686.846148][T15940] should_fail_ex.cold+0x5/0xa [ 686.846176][T15940] should_failslab+0xc2/0x120 [ 686.846200][T15940] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 686.846239][T15940] ? security_inode_alloc+0x3b/0x2c0 [ 686.846274][T15940] ? lockdep_init_map_type+0x5c/0x250 [ 686.846311][T15940] security_inode_alloc+0x3b/0x2c0 [ 686.846347][T15940] inode_init_always_gfp+0xced/0x1040 [ 686.846391][T15940] alloc_inode+0x8e/0x250 [ 686.846422][T15940] alloc_anon_inode+0x2a/0x3e0 [ 686.846448][T15940] anon_inode_make_secure_inode+0x2f/0x140 [ 686.846479][T15940] __do_sys_memfd_secret+0xd7/0x3d0 [ 686.846505][T15940] do_syscall_64+0x106/0xf80 [ 686.846532][T15940] ? clear_bhb_loop+0x40/0x90 [ 686.846561][T15940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.846586][T15940] RIP: 0033:0x7f5520f9c799 [ 686.846605][T15940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.846629][T15940] RSP: 002b:00007f5521df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 686.846652][T15940] RAX: ffffffffffffffda RBX: 00007f5521216090 RCX: 00007f5520f9c799 [ 686.846668][T15940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 686.846683][T15940] RBP: 00007f5521032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 686.846697][T15940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.846711][T15940] R13: 00007f5521216128 R14: 00007f5521216090 R15: 00007ffe95f82748 [ 686.846741][T15940] [ 687.366960][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 687.374436][ T5838] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 688.544196][T15969] random: crng reseeded on system resumption [ 689.355720][T13722] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 689.363203][T13722] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 690.110303][ T10] Process accounting resumed [ 690.296203][T16002] vivid-007: ================= START STATUS ================= [ 690.386579][T16002] vivid-007: Generate PTS: true [ 690.386626][T16002] vivid-007: Generate SCR: true [ 690.386652][T16002] tpg source WxH: 320x240 (Y'CbCr) [ 690.386668][T16002] tpg field: 1 [ 690.386678][T16002] tpg crop: (0,0)/320x240 [ 690.386694][T16002] tpg compose: (0,0)/320x240 [ 690.386710][T16002] tpg colorspace: 8 [ 690.386720][T16002] tpg transfer function: 0/0 [ 690.386739][T16002] tpg Y'CbCr encoding: 0/0 [ 690.386751][T16002] tpg quantization: 0/0 [ 690.386763][T16002] tpg RGB range: 0/2 [ 690.386775][T16002] vivid-007: ================== END STATUS ================== [ 690.425096][T16011] misc userio: Invalid payload size [ 692.972382][T13722] Bluetooth: hci1: command 0x0406 tx timeout [ 693.957269][T16063] input: f as /devices/virtual/input/input66 [ 694.756369][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 694.763894][ T5838] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 695.515583][T16098] random: crng reseeded on system resumption [ 696.966049][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 696.973525][ T5838] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 697.742766][T16144] random: crng reseeded on system resumption [ 699.396254][T16167] FAULT_INJECTION: forcing a failure. [ 699.396254][T16167] name failslab, interval 1, probability 0, space 0, times 0 [ 699.478506][T16167] CPU: 0 UID: 0 PID: 16167 Comm: syz.1.2162 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.478545][T16167] Tainted: [L]=SOFTLOCKUP [ 699.478554][T16167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.478570][T16167] Call Trace: [ 699.478578][T16167] [ 699.478589][T16167] dump_stack_lvl+0x100/0x190 [ 699.478632][T16167] should_fail_ex.cold+0x5/0xa [ 699.478662][T16167] should_failslab+0xc2/0x120 [ 699.478687][T16167] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 699.478724][T16167] ? __anon_vma_prepare+0x344/0x5e0 [ 699.478762][T16167] __anon_vma_prepare+0x344/0x5e0 [ 699.478799][T16167] __vmf_anon_prepare+0x11f/0x250 [ 699.478829][T16167] do_anonymous_page+0x552/0x1fb0 [ 699.478863][T16167] ? __handle_mm_fault+0x17a4/0x2b60 [ 699.478902][T16167] __handle_mm_fault+0x1d42/0x2b60 [ 699.478951][T16167] ? __pfx___handle_mm_fault+0x10/0x10 [ 699.478986][T16167] ? pte_offset_map_lock+0x174/0x320 [ 699.479011][T16167] ? find_held_lock+0x2b/0x80 [ 699.479043][T16167] ? follow_page_pte+0x5b3/0x1400 [ 699.479076][T16167] handle_mm_fault+0x36d/0xa20 [ 699.479114][T16167] __get_user_pages+0xf9c/0x34d0 [ 699.479151][T16167] ? __pfx___get_user_pages+0x10/0x10 [ 699.479186][T16167] populate_vma_page_range+0x267/0x3f0 [ 699.479220][T16167] ? __pfx_populate_vma_page_range+0x10/0x10 [ 699.479249][T16167] ? __pfx_find_vma_intersection+0x10/0x10 [ 699.479275][T16167] ? do_mmap+0x93f/0x12f0 [ 699.479304][T16167] __mm_populate+0x107/0x3a0 [ 699.479333][T16167] ? __pfx___mm_populate+0x10/0x10 [ 699.479364][T16167] ? up_write+0x290/0x4f0 [ 699.479402][T16167] vm_mmap_pgoff+0x37f/0x470 [ 699.479432][T16167] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 699.479461][T16167] ? do_futex+0x192/0x350 [ 699.479493][T16167] ? __pfx_do_futex+0x10/0x10 [ 699.479530][T16167] ksys_mmap_pgoff+0xe1/0x650 [ 699.479555][T16167] ? __x64_sys_futex+0x34f/0x4d0 [ 699.479585][T16167] ? __x64_sys_futex+0x358/0x4d0 [ 699.479617][T16167] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 699.479642][T16167] ? xfd_validate_state+0x129/0x190 [ 699.479683][T16167] __x64_sys_mmap+0x125/0x190 [ 699.479723][T16167] do_syscall_64+0x106/0xf80 [ 699.479752][T16167] ? clear_bhb_loop+0x40/0x90 [ 699.479781][T16167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.479807][T16167] RIP: 0033:0x7f753599c799 [ 699.479827][T16167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.479852][T16167] RSP: 002b:00007f7533bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 699.479875][T16167] RAX: ffffffffffffffda RBX: 00007f7535c16090 RCX: 00007f753599c799 [ 699.479893][T16167] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 699.479909][T16167] RBP: 00007f7535a32bd9 R08: 0000000000000007 R09: 0000000000028000 [ 699.479937][T16167] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 699.479953][T16167] R13: 00007f7535c16128 R14: 00007f7535c16090 R15: 00007ffe40190d38 [ 699.479985][T16167] [ 699.778699][T16171] input: jJǸ-9%vJ86 as /devices/virtual/input/input70 syzkaller syzkaller login: [ 700.967235][T13722] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 700.975724][T13722] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 702.115165][T16211] input: f as /devices/virtual/input/input71 [ 702.440759][T16221] random: crng reseeded on system resumption [ 704.023626][T16254] FAULT_INJECTION: forcing a failure. [ 704.023626][T16254] name failslab, interval 1, probability 0, space 0, times 0 [ 704.188316][T16254] CPU: 0 UID: 0 PID: 16254 Comm: syz.3.2179 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.188357][T16254] Tainted: [L]=SOFTLOCKUP [ 704.188366][T16254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 704.188381][T16254] Call Trace: [ 704.188399][T16254] [ 704.188409][T16254] dump_stack_lvl+0x100/0x190 [ 704.188449][T16254] should_fail_ex.cold+0x5/0xa [ 704.188478][T16254] should_failslab+0xc2/0x120 [ 704.188503][T16254] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 704.188542][T16254] ? __d_alloc+0x34/0xa80 [ 704.188573][T16254] __d_alloc+0x34/0xa80 [ 704.188602][T16254] d_alloc_pseudo+0x1c/0xc0 [ 704.188636][T16254] alloc_file_pseudo+0xcf/0x230 [ 704.188668][T16254] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 704.188700][T16254] ? __raw_spin_lock_init+0x3a/0x110 [ 704.188742][T16254] create_pipe_files+0x360/0x970 [ 704.188770][T16254] do_pipe2+0xbd/0x1e0 [ 704.188793][T16254] ? __pfx_do_pipe2+0x10/0x10 [ 704.188817][T16254] ? xfd_validate_state+0x129/0x190 [ 704.188862][T16254] __x64_sys_pipe2+0x54/0x80 [ 704.188886][T16254] do_syscall_64+0x106/0xf80 [ 704.188915][T16254] ? clear_bhb_loop+0x40/0x90 [ 704.188945][T16254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.188970][T16254] RIP: 0033:0x7f549ef9c799 [ 704.188990][T16254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.189015][T16254] RSP: 002b:00007f549fd6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 704.189038][T16254] RAX: ffffffffffffffda RBX: 00007f549f216090 RCX: 00007f549ef9c799 [ 704.189062][T16254] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 704.189077][T16254] RBP: 00007f549f032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 704.189093][T16254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.189108][T16254] R13: 00007f549f216128 R14: 00007f549f216090 R15: 00007fff8c226e18 [ 704.189140][T16254] [ 704.666162][T16264] vivid-007: ================= START STATUS ================= [ 704.666183][T16264] vivid-007: Generate PTS: true [ 704.666210][T16264] vivid-007: Generate SCR: true [ 704.666235][T16264] tpg source WxH: 320x240 (Y'CbCr) [ 704.666251][T16264] tpg field: 1 [ 704.666260][T16264] tpg crop: (0,0)/320x240 [ 704.666276][T16264] tpg compose: (0,0)/320x240 [ 704.666292][T16264] tpg colorspace: 8 [ 704.666302][T16264] tpg transfer function: 0/0 [ 704.666314][T16264] tpg Y'CbCr encoding: 0/0 [ 704.666326][T16264] tpg quantization: 0/0 [ 704.666338][T16264] tpg RGB range: 0/2 [ 704.666350][T16264] vivid-007: ================== END STATUS ================== [ 704.745299][T16273] misc userio: Invalid payload size [ 705.016749][T16276] zswap: compressor not available [ 705.016858][T16278] FAULT_INJECTION: forcing a failure. [ 705.016858][T16278] name failslab, interval 1, probability 0, space 0, times 0 [ 705.016919][T16278] CPU: 0 UID: 0 PID: 16278 Comm: syz.0.2184 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.016950][T16278] Tainted: [L]=SOFTLOCKUP [ 705.016959][T16278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 705.016972][T16278] Call Trace: [ 705.016980][T16278] [ 705.016988][T16278] dump_stack_lvl+0x100/0x190 [ 705.017026][T16278] should_fail_ex.cold+0x5/0xa [ 705.017052][T16278] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 705.017074][T16278] should_failslab+0xc2/0x120 [ 705.017097][T16278] __kmalloc_noprof+0xe0/0x850 [ 705.017131][T16278] ? trace_kmalloc+0x101/0x130 [ 705.017157][T16278] kernfs_fop_write_iter+0x26a/0x5f0 [ 705.017184][T16278] iter_file_splice_write+0x830/0x10a0 [ 705.017221][T16278] ? __pfx_iter_file_splice_write+0x10/0x10 [ 705.017285][T16278] ? __pfx_copy_splice_read+0x10/0x10 [ 705.017345][T16278] ? __pfx_iter_file_splice_write+0x10/0x10 [ 705.017387][T16278] direct_splice_actor+0x192/0x6c0 [ 705.017428][T16278] splice_direct_to_actor+0x345/0xa30 [ 705.017469][T16278] ? __pfx_direct_splice_actor+0x10/0x10 [ 705.017512][T16278] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 705.017559][T16278] do_splice_direct+0x174/0x240 [ 705.017599][T16278] ? __pfx_do_splice_direct+0x10/0x10 [ 705.017638][T16278] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 705.017685][T16278] ? rw_verify_area+0xce/0x6d0 [ 705.017721][T16278] do_sendfile+0xadc/0xe20 [ 705.017762][T16278] ? __pfx_do_sendfile+0x10/0x10 [ 705.017798][T16278] ? __fget_files+0x21f/0x3d0 [ 705.017842][T16278] __x64_sys_sendfile64+0x1d8/0x220 [ 705.017880][T16278] ? ksys_write+0x1ac/0x250 [ 705.017933][T16278] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 705.017969][T16278] do_syscall_64+0x106/0xf80 [ 705.017996][T16278] ? clear_bhb_loop+0x40/0x90 [ 705.018040][T16278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.018063][T16278] RIP: 0033:0x7f0e45f9c799 [ 705.018081][T16278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.018103][T16278] RSP: 002b:00007f0e46dc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 705.018143][T16278] RAX: ffffffffffffffda RBX: 00007f0e46216090 RCX: 00007f0e45f9c799 [ 705.018159][T16278] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 705.018173][T16278] RBP: 00007f0e46dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 705.018188][T16278] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 705.018202][T16278] R13: 00007f0e46216128 R14: 00007f0e46216090 R15: 00007ffdb855f808 [ 705.018233][T16278] [ 705.352333][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 705.352364][ T5838] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 706.018062][T16297] FAULT_INJECTION: forcing a failure. [ 706.018062][T16297] name failslab, interval 1, probability 0, space 0, times 0 [ 706.018104][T16297] CPU: 0 UID: 0 PID: 16297 Comm: syz.0.2188 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.018140][T16297] Tainted: [L]=SOFTLOCKUP [ 706.018148][T16297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 706.018163][T16297] Call Trace: [ 706.018171][T16297] [ 706.018180][T16297] dump_stack_lvl+0x100/0x190 [ 706.018266][T16297] should_fail_ex.cold+0x5/0xa [ 706.018295][T16297] should_failslab+0xc2/0x120 [ 706.018321][T16297] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 706.018357][T16297] ? do_getname+0x35/0x390 [ 706.018393][T16297] do_getname+0x35/0x390 [ 706.018431][T16297] do_sys_openat2+0xc5/0x1e0 [ 706.018462][T16297] ? __pfx_do_sys_openat2+0x10/0x10 [ 706.018505][T16297] __x64_sys_openat+0x12d/0x210 [ 706.018538][T16297] ? __pfx___x64_sys_openat+0x10/0x10 [ 706.018573][T16297] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 706.018606][T16297] ? syscall_user_dispatch+0x76/0x130 [ 706.018645][T16297] do_syscall_64+0x106/0xf80 [ 706.018673][T16297] ? clear_bhb_loop+0x40/0x90 [ 706.018702][T16297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.018728][T16297] RIP: 0033:0x7f0e45f9c799 [ 706.018748][T16297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.018773][T16297] RSP: 002b:00007f0e46dea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 706.018796][T16297] RAX: ffffffffffffffda RBX: 00007f0e46215fa0 RCX: 00007f0e45f9c799 [ 706.018813][T16297] RDX: 0000000000000802 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 706.018829][T16297] RBP: 00007f0e46032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 706.018844][T16297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.018859][T16297] R13: 00007f0e46216038 R14: 00007f0e46215fa0 R15: 00007ffdb855f808 [ 706.018891][T16297] [ 706.374205][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 706.376158][T16301] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2189'. [ 707.557805][T16320] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2195'. [ 708.304147][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'. [ 709.209631][T16350] BUG: unable to handle page fault for address: fffff5200087b200 [ 709.209653][T16350] #PF: supervisor read access in kernel mode [ 709.209668][T16350] #PF: error_code(0x0000) - not-present page [ 709.209681][T16350] PGD 23fff5067 P4D 23fff5067 PUD 1c6b8067 PMD 21bb0067 PTE 0 [ 709.209725][T16350] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 709.209752][T16350] CPU: 0 UID: 0 PID: 16350 Comm: syz.2.2202 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.209787][T16350] Tainted: [L]=SOFTLOCKUP [ 709.209796][T16350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 709.209812][T16350] RIP: 0010:sys_fillrect+0xc77/0x1910 [ 709.209845][T16350] Code: 00 00 48 8d 3c f5 00 00 00 00 48 89 44 24 20 48 89 7c 24 10 48 89 74 24 30 eb 03 45 89 ef e8 b0 9a c7 fc 4c 89 e1 48 c1 e9 03 <42> 80 3c 31 00 0f 85 c0 0a 00 00 48 8b 44 24 08 49 89 2c 24 49 8d [ 709.209871][T16350] RSP: 0018:ffffc90004fff658 EFLAGS: 00010a06 [ 709.209891][T16350] RAX: 0000000000020b53 RBX: 0000000000000180 RCX: 1ffff9200087b200 [ 709.209907][T16350] RDX: 0000000000080000 RSI: ffffffff85407410 RDI: 0000000000000010 [ 709.209925][T16350] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000004 [ 709.209945][T16350] R10: 0000000000000180 R11: 0000000000000000 R12: ffffc900043d9000 [ 709.209961][T16350] R13: ffffc900043d9000 R14: dffffc0000000000 R15: 0000000000000004 [ 709.209978][T16350] FS: 00007f5521e176c0(0000) GS:ffff88812434c000(0000) knlGS:0000000000000000 [ 709.210002][T16350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.210019][T16350] CR2: fffff5200087b200 CR3: 0000000076656000 CR4: 00000000003526f0 [ 709.210035][T16350] Call Trace: [ 709.210045][T16350] [ 709.210061][T16350] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 709.210101][T16350] bit_clear+0x17d/0x220 [ 709.210141][T16350] ? __pfx_bit_clear+0x10/0x10 [ 709.210181][T16350] ? fb_get_color_depth+0x120/0x250 [ 709.210218][T16350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 709.210270][T16350] __fbcon_clear+0x633/0x760 [ 709.210308][T16350] ? __pfx_bit_clear+0x10/0x10 [ 709.210350][T16350] fbcon_scroll+0x48b/0x650 [ 709.210388][T16350] con_scroll+0x464/0x690 [ 709.210419][T16350] do_con_write+0x6883/0x8540 [ 709.210458][T16350] ? __pfx_do_con_write+0x10/0x10 [ 709.210496][T16350] con_write+0x23/0xb0 [ 709.210525][T16350] n_tty_write+0x44f/0x12d0 [ 709.210568][T16350] ? __pfx_n_tty_write+0x10/0x10 [ 709.210603][T16350] ? trace_kmalloc+0x101/0x130 [ 709.210629][T16350] ? __pfx_woken_wake_function+0x10/0x10 [ 709.210667][T16350] ? rcu_is_watching+0x12/0xc0 [ 709.210704][T16350] ? file_tty_write.isra.0+0x694/0x890 [ 709.210734][T16350] ? kfree+0x2ec/0x6b0 [ 709.210764][T16350] ? __pfx_n_tty_write+0x10/0x10 [ 709.210801][T16350] file_tty_write.isra.0+0x4d2/0x890 [ 709.210835][T16350] redirected_tty_write+0xd4/0x120 [ 709.210866][T16350] vfs_write+0x6ac/0x1070 [ 709.210905][T16350] ? __pfx_redirected_tty_write+0x10/0x10 [ 709.210941][T16350] ? __pfx_vfs_write+0x10/0x10 [ 709.210978][T16350] ? find_held_lock+0x2b/0x80 [ 709.211009][T16350] ksys_write+0x12a/0x250 [ 709.211047][T16350] ? __pfx_ksys_write+0x10/0x10 [ 709.211090][T16350] do_syscall_64+0x106/0xf80 [ 709.211119][T16350] ? clear_bhb_loop+0x40/0x90 [ 709.211148][T16350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.211174][T16350] RIP: 0033:0x7f5520f9c799 [ 709.211195][T16350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.211219][T16350] RSP: 002b:00007f5521e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 709.211250][T16350] RAX: ffffffffffffffda RBX: 00007f5521215fa0 RCX: 00007f5520f9c799 [ 709.211268][T16350] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 709.211284][T16350] RBP: 00007f5521032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 709.211299][T16350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.211315][T16350] R13: 00007f5521216038 R14: 00007f5521215fa0 R15: 00007ffe95f82748 [ 709.211340][T16350] [ 709.211349][T16350] Modules linked in: [ 709.211364][T16350] CR2: fffff5200087b200 [ 709.211387][T16350] ---[ end trace 0000000000000000 ]--- [ 709.211402][T16350] RIP: 0010:sys_fillrect+0xc77/0x1910 [ 709.211433][T16350] Code: 00 00 48 8d 3c f5 00 00 00 00 48 89 44 24 20 48 89 7c 24 10 48 89 74 24 30 eb 03 45 89 ef e8 b0 9a c7 fc 4c 89 e1 48 c1 e9 03 <42> 80 3c 31 00 0f 85 c0 0a 00 00 48 8b 44 24 08 49 89 2c 24 49 8d [ 709.211457][T16350] RSP: 0018:ffffc90004fff658 EFLAGS: 00010a06 [ 709.211477][T16350] RAX: 0000000000020b53 RBX: 0000000000000180 RCX: 1ffff9200087b200 [ 709.211494][T16350] RDX: 0000000000080000 RSI: ffffffff85407410 RDI: 0000000000000010 [ 709.211511][T16350] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000004 [ 709.211526][T16350] R10: 0000000000000180 R11: 0000000000000000 R12: ffffc900043d9000 [ 709.211543][T16350] R13: ffffc900043d9000 R14: dffffc0000000000 R15: 0000000000000004 [ 709.211560][T16350] FS: 00007f5521e176c0(0000) GS:ffff88812434c000(0000) knlGS:0000000000000000 [ 709.211584][T16350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.211600][T16350] CR2: fffff5200087b200 CR3: 0000000076656000 CR4: 00000000003526f0 [ 709.211622][T16350] Kernel panic - not syncing: Fatal exception [ 709.211691][T16350] Kernel Offset: disabled