last executing test programs: 4m8.004808914s ago: executing program 0 (id=128): keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0x1, 0x2, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x22, 0x0, 0x9) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, &(0x7f00000000c0), 0x200002, 0x8}, 0x803}, 0xa, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r2 = ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r1, 0x2, 0x68e3d08b, 0x6}) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) pidfd_open$auto(0x1, 0x0) read$auto_media_devnode_fops_mc_devnode(r2, &(0x7f0000000100)=""/128, 0x80) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) lseek$auto(0x3, 0x2, 0x4) ioctl$auto(0x3, 0xae41, 0x38) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) ioctl$auto(0x3, 0x4020aea5, 0x38) 4m7.521545311s ago: executing program 0 (id=131): prctl$auto_PR_SET_IO_FLUSHER(0x39, 0xd, 0x81, 0x4, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x13c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@OVS_DP_ATTR_NAME={0xb, 0x1, '-.#*/*\x00'}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r2}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}, @OVS_DP_ATTR_NAME={0xfb, 0x1, '\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9\xacw\x9ed\x00\xad\xb7\t\x84\x04\xf0\xa4\'\xd9'}]}, 0x13c}}, 0x48000) (async) r3 = socket(0x11, 0x80003, 0x300) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/carrier_changes\x00', 0x129000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/213, 0xd5) (async) setsockopt$auto(r3, 0x107, 0x11, 0x0, 0x4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/pm_debug_messages\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)=""/64, 0x40) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) write$auto(0xca, &(0x7f0000000480)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9\xacw\x9ed\x00\xad\xb7\t\x84\x04\xf0\xa4\'\xd9', 0x5) 4m7.198704933s ago: executing program 0 (id=132): mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) arch_prctl$auto_ARCH_SET_GS(0x1001, 0x1000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pipe2$auto(0x0, 0x80) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) socket(0x28, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 4m6.148471228s ago: executing program 0 (id=138): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/uid_map\x00', 0x2240, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) io_uring_setup$auto(0x1000, 0x0) (async) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) (async) write$auto(0xffffffffffffffff, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) (async) madvise$auto(0x0, 0x200007, 0x19) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) (async) sched_getattr$auto(0x0, 0x0, 0x68, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) (async) prctl$auto(0x3c, 0x0, 0x4, 0x7, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop15\x00', 0x808981, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x88540, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x418100, 0x0) connect$auto(r2, &(0x7f0000000000)=@hci={0x1f, 0x4, 0x5}, 0x2) (async) epoll_create$auto(0x3e) 4m4.153748734s ago: executing program 0 (id=144): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(r0, 0x0, 0x300000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x143e02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r3 = socket(0x29, 0x5, 0x0) write$auto(r3, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 4m2.423106901s ago: executing program 0 (id=149): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x9) (async) shutdown$auto(r0, 0xff) recvfrom$auto(r0, &(0x7f00000000c0)="5472090e33ba06f0dbc909c5d3d96df51557404ffd29b46fc03a7edf83e7d48eaf1d49", 0xfff, 0x5, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x4}}, &(0x7f00000001c0)=0x7) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x21, 0x6, 0x48}) (async) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x205ae, &(0x7f0000000100)={&(0x7f0000000200)='D', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r0, 0x408010) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r2, 0xc0045520, 0xffffffffffffffff) write$auto(0x3, 0x0, 0x100082) (async) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/icmp\x00', 0x42500, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000001080)=""/244, 0xf4) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, 0x0) (async) madvise$auto(0x0, 0x200007, 0x8) 3m47.102654363s ago: executing program 32 (id=149): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x9) (async) shutdown$auto(r0, 0xff) recvfrom$auto(r0, &(0x7f00000000c0)="5472090e33ba06f0dbc909c5d3d96df51557404ffd29b46fc03a7edf83e7d48eaf1d49", 0xfff, 0x5, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x4}}, &(0x7f00000001c0)=0x7) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x21, 0x6, 0x48}) (async) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x205ae, &(0x7f0000000100)={&(0x7f0000000200)='D', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r0, 0x408010) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r2, 0xc0045520, 0xffffffffffffffff) write$auto(0x3, 0x0, 0x100082) (async) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/icmp\x00', 0x42500, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000001080)=""/244, 0xf4) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, 0x0) (async) madvise$auto(0x0, 0x200007, 0x8) 6.827288133s ago: executing program 3 (id=958): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x100000000000000, 0x4000000000df, 0xeb1, 0x401, 0x1) setsockopt$auto(0x3, 0x10000000084, 0x6, 0x0, 0x8) socket(0x2, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop7\x00', 0xc10103, 0x0) listen$auto(0x3, 0x81) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:/\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8eX\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xdef\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x810000003d, 0x8) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim5/ports/0/udp_ports_table0\x00', 0x472881, 0x0) waitid$auto_P_PIDFD(0x3, r2, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x8, 0xf8, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe6"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x82}, {0x8, 0x2}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0x3, 0x3, 0x501, 0xfff, 0x0, 0x3, 0x9, 0xc, 0xfffffffffffffffa}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x1010, 0x4, 0x9) r4 = socket(0xb, 0x0, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) copy_file_range$auto(r3, &(0x7f0000000200)=0xfffffffffffffffa, r4, &(0x7f0000000300)=0x3, 0x7, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 5.85878966s ago: executing program 1 (id=961): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) fcntl$auto_F_GETPIPE_SZ(r0, 0x408, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0x1f, 0x0, 0x3d) mmap$auto(0x0, 0x2020209, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4818) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) r4 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r4, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "3d64dc8bff7fff7f610000000024"}, 0x55) getpeername$auto(0x3, 0x0, 0x0) 5.79038393s ago: executing program 3 (id=963): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = io_uring_setup$auto(0x86, 0x0) (async) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x40201, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) ioctl$auto(r1, 0xc0845658, r0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040890) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000180)={0x8000, &(0x7f00000000c0)={0x2, 0x3, 0x5, @raw=0xa77}}) (async) socket(0x1d, 0x3, 0x1) (async) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) (async) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram14\x00', 0x2040, 0x0) (async) ioctl$auto_PPPIOCATTACH(r4, 0x4004743d, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$auto_PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000040)=0x12fa) (async) io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4c, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0xfffffffa, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x4, 0x751, 0x3, 0x3b, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5d, 0x400, 0x9, 0x7, 0x8000, 0x7f}}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000dd, 0x40000eb1, r5, 0x8000) (async, rerun: 32) sysfs$auto(0x2, 0x0, 0x0) (async, rerun: 32) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) r8 = fsopen$auto(0x0, 0x10) fsconfig$auto(r8, 0x6, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20100008}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x939}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xe}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1d6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 4.757268209s ago: executing program 1 (id=967): openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sysfs$auto(0x2, 0x3c, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040), 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x42e01, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) mmap$auto(0x0, 0x172, 0xdf, 0xeb1, 0x401, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) pidfd_open$auto(0x1, 0x0) socket(0x2, 0x3, 0x100) bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000009, 0x80000001, 0x10008, 0x8250, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) 4.601832769s ago: executing program 4 (id=968): unshare$auto(0x40000080) prctl$auto(0x3e, 0x40000001, 0x0, 0x1, 0x800000000) r0 = socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x5, 0xd, 0x9b72, r0, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/dormant\x00', 0x2880, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, 0x0, 0x844) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r1 = socket(0xf, 0x1, 0x0) close_range$auto(r1, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0x9, 0x3, 0xf, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x8, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7570, 0x0, 0x3, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000180)='!:-', 0x3) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0xffffffffffffffff, 0x0, 0x7ffe) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x38020000) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x20, 0x0, 0x8000006) 4.59818567s ago: executing program 2 (id=969): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x521881, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000800)={0x1c, r2, 0x935, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000240)={0x3, r1}) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xe6GP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xaf\v7\xcew\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfa\x0e\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x40100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8004) r4 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r4, 0x0, 0x0) socketpair$auto(0xfffffff8, 0x2, 0x5, &(0x7f00000000c0)) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) r5 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$auto_SO_RCVPRIORITY(r5, 0x4, 0x52, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x3, 0x3, 0x62, 0x8, 0x3, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x5, 0xffffffffff7ffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0x4, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x5, 0x8000000000000002]}, 0x0) 3.962029965s ago: executing program 3 (id=970): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) (rerun: 32) io_uring_setup$auto(0x1, 0x0) keyctl$auto_KEYCTL_PKEY_VERIFY(0x1c, 0x823, 0x2, 0x2, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e1000000ff00"}, 0x58) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) (async) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async, rerun: 32) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, 0x0) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 3.956986444s ago: executing program 4 (id=971): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon35\x00', 0x101002, 0x0) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) setfsuid$auto(0x0) (async) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8000) read$auto(0x3, 0x0, 0x80) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/gretap0/uevent\x00', 0x2262, 0x0) write$auto(r3, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) 3.318269511s ago: executing program 2 (id=972): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) io_setup$auto(0x8001, &(0x7f0000000000)=0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x2c, 0x0) r0 = socket(0x2, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x85, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r1, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r3}, 0x36) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) io_setup$auto(0x8001, &(0x7f0000000000)=0x3) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x2c, 0x0) (async) socket(0x2, 0x5, 0x0) (async) getsockopt$auto(r0, 0x84, 0x85, 0x0, 0x0) (async) io_uring_setup$auto(0x1, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1d, 0x2, 0x7) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) (async) sendto$auto(r1, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r3}, 0x36) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) 2.911659735s ago: executing program 4 (id=973): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x0, 0x1, 0xffffffff7ffffffd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026b29d4669aab6914ae5000004005e8008000300", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r2, @ANYBLOB="000126bd7000fbdbdf257e00000004001e0108003501080000000f004f0079a9d52d6fea800b0dccde005a005500f1bfd9ab38864be9ba9342eee72c1363665bf5753153090bcacec7bba9586d23e70a4061b977df19127ea9e21d783fbffb9fcd49193bf72d5920a3f3623d391dd5b3e2268992da12999002ced94f4c8417dce14cc0350000340123800400380006006b002d0000002000048008007c00", @ANYRES32, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, &(0x7f0000000000)={0x2, 0x10000003, 0x5}) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram2/queue/io_poll\x00', 0x20a42, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 2.90583722s ago: executing program 1 (id=974): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0x7, 0x7, 0x6, 0x8, 0x83, 0x3, 0x1ffe001, 0xcad, 0x1, 0xd, 0xf, 0x40100000001, 0x207, 0xd3, 0x1]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x11e, 0x1, 0xfffffffffffffffe, 0x0) getsockopt$auto(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffe) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2862, 0x0) sendfile$auto(r4, r3, 0x0, 0x800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x7) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$auto_SNDCTL_SEQ_RESET(r5, 0x5100, 0x0) 1.926440459s ago: executing program 2 (id=975): mmap$auto(0x0, 0x1, 0x4000000000df, 0x19, 0xffffffffffffffff, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x68a82, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000001480)={0x3, [0x5c20f0b6, 0x5, 0x1, 0x6, 0x69f7]}) (async) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000001480)={0x3, [0x5c20f0b6, 0x5, 0x1, 0x6, 0x69f7]}) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket(0x2, 0x80002, 0x73) socket(0x2, 0xa, 0x1) (async) socket(0x2, 0xa, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) (async) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() r6 = setfsuid$auto(0xee01) setresuid$auto(0x0, r6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000004680)=ANY=[@ANYBLOB="84130000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0x1384}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000004680)=ANY=[@ANYBLOB="84130000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fddbdf251f000000ab025e800b0137800baa8663910947e8b6b9290ad350a55c053123a5c5e793e8009300c7fb6d2aea8a9abb530998d2e3db97ab33b3353c0d213d2cca202662c077b3282e9cd1b82fbdb14d282e7c14d4043e729e848f8d3ff951a016aa52f04eeaf8c7b655a4d5627518fe03f6bcf0eca939a70903115252bec95076f0dba6cf2a6e16a95472472e11fd7a12f7cb23151afc14982e5639e4ba3d51b8e8be0d820c10695b7ebd6504b4ba2565803df940e3514034daca36d4e3aa57863346f28678dbd14238af8e9da77c1b68240f9b18cb785c8d655fb1eaf5ec27b58518d83a3832e6d33a1a4fc4efe0b6ea4adaf26f4e80deb0a95d67e585ecbbe3a3ab28a0c287c350524ba20800a200", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0x1384}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r7 = getegid() fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, r7) statx$auto(r1, &(0x7f0000000100)='./file0\x00', 0x6, 0x7ff, &(0x7f0000000140)={0x1, 0x368, 0xa, 0x1, r6, r7, 0x9, 0x7fff, 0x100000001, 0x3, 0x9, 0x8000, {0x80000000, 0x9}, {0x0, 0x3}, {0x5679, 0x1}, {0x7, 0xb1b7}, 0x80000000, 0x7fff, 0x4, 0xc6b8, 0x10001, 0x7, 0x3ff, 0x9, 0x8, 0x2, 0x0, 0x8, [0xfffffffffffffffd, 0x9, 0x6, 0xc7, 0x5, 0x100000001, 0x402, 0xa, 0x6ef]}) unshare$auto(0x1) (async) unshare$auto(0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) shmdt$auto(0x0) ioctl$auto(0x1, 0x890b, 0x8) iopl$auto(0x3) prctl$auto_PR_SET_SECCOMP(0x16, 0x1, 0x6, 0x200, 0x81) link$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.894534665s ago: executing program 4 (id=976): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r1 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) getsockopt$auto_SO_BSDCOMPAT(r1, 0x401, 0xe, &(0x7f0000000080)='[]\x00', &(0x7f0000000100)=0x6) mmap$auto(0x0, 0x440008, 0x5c, 0x9b70, 0x2, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000280)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0x9, @inferred=r1}}) mprotect$auto(0x110c238000, 0x1, 0x3) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000140)={0x6, 0x8, 0x3, 0x2, 0x1, "07a9e5a097304e8cdb22d7590356f89a91fbf406a8d0c13a6560afd062b7ee1c1a3dacfdd3812f9a6a137739b4544a9c6d400aa0c0f698ae7c958a50636a7e5b", "e1405cd9185c77ee7ea581c3e92987ad004b15705eef8508b416055bdf9c18e8ca61023b0e5012efa0af64eecfca3a3e405c4f8ba30347170f86244da2cc398046e44676dfb88b71458f727a57f4bb0b", "1baf123cd29f257bfbab4545d9562c37e5e2d8ff1a8915ebbb70ee225861d562", 0x5, 0x1ff, 0x2, "d5adc1fb69b160f00be4f5ac7a149129e82de0c62d68100c0a99cf1d95a5dcebd97d9170b672070040919ec0ee6d24f63ef49e4188201d6a5efacbed"}) madvise$auto(0x110c230000, 0x8031ca, 0x9) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r5, 0x40084d05, r5) 1.613400019s ago: executing program 4 (id=977): r0 = io_uring_setup$auto(0x1d48, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x10001, 0x0, 0x1) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) select$auto(0x5, 0x0, 0x0, &(0x7f00000011c0)={[0x0, 0x401, 0xdd36, 0x8fd3, 0x948b, 0xd, 0xf, 0x3, 0x2, 0x5dc5, 0x878c, 0x3, 0x1, 0x9, 0x1]}, 0x0) r1 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0xfd1ab101a01c344a, 0x0) readv$auto(r1, &(0x7f0000001180)={&(0x7f0000000000), 0x2}, 0x6) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40044}, 0x48000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x2, 0x32, 0xfff) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) ioctl$auto_IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000300)={0x9, 0x5, 0x10000000}) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) execve$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=&(0x7f00000000c0)='[:\x00', &(0x7f00000001c0)=&(0x7f0000000180)='])\x00') syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r0, 0x6, &(0x7f0000000280)="2ee23230577bd786939fd5287a063d0a89d076d03d342305b295da2791304dbec1a1fd68458ef67689c5d85094ba144f637ba68546bd19fd1bcf7b4327ef54b73c2c0c9102214a776b49098c1a46ffe0081a5b4ea973e5d1b9aa9a2c0e6a13a0bde319ad0f9dc6fe4e7b344118a7bfd3a07692158c34de54") bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000340)=@iter_create={r2, 0x6}, 0x8) 1.497731072s ago: executing program 1 (id=978): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000100"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r1, 0x6, 0x8, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x5, 0x1ff, 0x5, 0x7, 0xffffffffffffffff, 0x8, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x9, 0x6, 0x7, 0x6}, 0x10) bpf$auto(0x2, 0x0, 0xb) bpf$auto(0x4, 0x0, 0xc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), r0) sendmsg$auto_SMC_NETLINK_GET_STATS(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x1c4, r2, 0x900, 0x70bd25, 0x25dfdbfb, {}, "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"}, 0x1c4}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) write$auto(0x3, 0x0, 0xffd8) 1.41055969s ago: executing program 2 (id=979): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000080)="b75fb9e42c035e63035fc42ceccb6640") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000003c0)={0x8, 0x7, 0x1, 0x6, 0x3, "643b20f2cd9ca66a9446432dc65b1c3b559de8abce8c88f80e0b47261f8b92863f99d3e64297ddfbc4a6876738b09fb23dff3c7b2b78ec47f280f456bbe75d35", "0dca75fa79eef4e966898575354caa255fc0d2576bd32d5ff9e62c43a490376947963558ce5215d0a30780b0947c116da90500000043c0b990690a10ee00", "8869480c8c4a4a74848f9fb21f8167479d358f1ff61bb53902f195a35c503c5b", 0xfffffffd, 0xffffffff, 0x2, "3baaa9f6273476c2182fee840366cecdbb4ea3c1a5f9dbd939698a4eac17f8a1a6dd1c884933614246ef326a762dc75f1e83e9acddce00b658d97a2f"}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x6, 0x0) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) semctl$auto_IPC_INFO(0x1000, 0x9, 0x3, 0xb) ioctl$auto(r0, 0x8916, 0x1) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyu4\x00', 0x101942, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/b2c2_flexcop_usb/uevent\x00', 0x5db603, 0x0) mmap$auto(0xffffffffffffffff, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xa) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x1e, 0x3a794e69122da555, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(r0, 0x6, r2) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0x93) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) mmap$auto(0x19, 0xbf69, 0x3, 0x16, 0xfffffffffffffffa, 0x4008000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mbind$auto(0x200000, 0x48e, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x9, 0xffa, 0x8000000008011, r4, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/enable\x00', 0x8002, 0x0) mmap$auto(0x0, 0x2020009, 0xe, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x1007, 0xffffffefffff0007, 0x7f) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) unshare$auto(0x40000080) 1.400588269s ago: executing program 3 (id=980): close_range$auto(0x2, 0x8, 0x0) ioprio_get$auto(0x57ac, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x4040, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x4040, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x41a0ae8d, 0x0) 1.273310508s ago: executing program 1 (id=981): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/psaux\x00', 0x3014c2, 0x0) socket(0x10, 0x2, 0x4) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyt7\x00', 0x206001, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8881, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001a80), 0x1140, 0x0) ioctl$auto_PPPIOCATTACH(r3, 0x4004743d, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x208000, 0x0) close_range$auto(r2, r0, 0x0) r4 = socket(0x10, 0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) read$auto(r4, &(0x7f0000000000)='\xaf', 0x380) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfffffffffffffffd, 0x20005, 0x4000000000df, 0x19, 0x401, 0x8000) bind$auto(r1, &(0x7f0000000040)=@can, 0x1000006a) clock_gettime$auto(0x6, 0x0) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x5b) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x8, 0x311) r6 = socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) sendmmsg$auto(r6, 0x0, 0x2, 0x1ef) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0xa, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r6, 0x6fec) get_robust_list$auto(0x0, 0x0, 0x0) 1.146593326s ago: executing program 3 (id=982): unshare$auto(0x40000080) (async) r0 = socket(0x10, 0x2, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r1, 0x92106402, r1) (async) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), 0xffffffffffffffff) pread64$auto(r2, 0x0, 0x4, 0xc9) (async) r3 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2, 0x0) (async) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140), 0x8) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000003040), 0x4}, 0x9) (async) mprotect$auto(0x110c230000, 0xa588, 0x6) (async) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r4, 0x0, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB='\x00P\x00'], 0x14}, 0x1, 0x0, 0x0, 0x9abc98507ea37f97}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r5) (async) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r5) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="04000000", @ANYRES16=r6, @ANYBLOB="f51b26bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) writev$auto(r3, &(0x7f0000003600)={0x0, 0x2}, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x14, 0xfffffffffffffff7, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x5ee, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x16b000, 0x0) 750.74151ms ago: executing program 2 (id=983): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000300"/17, 0x11) timer_create$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0003, 0x10000017) close_range$auto(0x0, 0x5, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x8742, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/icmp\x00', 0x181800, 0x0) pread64$auto(r1, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) write$auto(r2, 0x0, 0xe) ioctl$auto(0xc8, 0x400454cb, 0xffffffffffffffff) 419.172679ms ago: executing program 4 (id=984): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x0, 0x1, 0xffffffff7ffffffd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026b29d4669aab6914ae5000004005e8008000300", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r2, @ANYBLOB="000126bd7000fbdbdf257e00000004001e0108003501080000000f004f0079a9d52d6fea800b0dccde005a005500f1bfd9ab38864be9ba9342eee72c1363665bf5753153090bcacec7bba9586d23e70a4061b977df19127ea9e21d783fbffb9fcd49193bf72d5920a3f3623d391dd5b3e2268992da12999002ced94f4c8417dce14cc0350000340123800400380006006b002d0000002000048008007c00", @ANYRES32, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, &(0x7f0000000000)={0x2, 0x10000003, 0x5}) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram2/queue/io_poll\x00', 0x20a42, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 287.425413ms ago: executing program 1 (id=985): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0x2, 0x0) r0 = socket(0x11, 0x80000, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_BLKSECDISCARD(r1, 0x127d, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty46\x00', 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040)="0988a6837e77e554823bbd38ce360e6afa6afd36b325916caad9c1d8bb96ba29b6785b29569792d8256e7569d2ba73d1a051f30ac28a21", 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0xfffffffd}, 0x5, 0x20000000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x800029, 0x4, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8002) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x67c0}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x58) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x4, 0x4000a, 0x2000000000000e2, 0x19b72, 0x7, 0x200000028000) 163.004833ms ago: executing program 3 (id=986): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) (async, rerun: 32) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (rerun: 32) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) socket(0x28, 0x5, 0x0) (async, rerun: 32) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) (async, rerun: 32) socket(0xa, 0x2, 0x0) (async) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x29, 0xa, 0xb) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7) (async) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 2 (id=987): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x141000, 0x0) mmap$auto(0x0, 0x4022005, 0x8, 0xeb1, r0, 0x7c) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x0, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/null_blk/uevent\x00', 0xa901, 0x0) write$auto(r1, &(0x7f0000000440)='7\x00\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xbap\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV\x94R+\x94s\x84\xa4\xd4M\xa9\xea\\Vt\xde\xedS\xf8?\x91\xef\xb3 4^\xc9DO\x88Er\xb5\x82b\x8f\xfcd\xe3\x81\xf6\xe4\x16\xe1\x15\xaf\xf2q\xc41\xf5-\xcc\xcfj\x94\xce\xc2>\t=\xe5\"a\xde\x18\xd8\xe8', 0x4) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(r0, 0x0, 0x7f, 0x10c03, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) ioctl$auto(r1, 0xe289c66, r0) write$auto(r0, 0x0, 0xfdfffdf1) read$auto(0xffffffffffffffff, 0x0, 0x1ff) r3 = getsid$auto(0xffffffffffffffff) r4 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x3, 0x0, r3, 0x8, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xa, 0x0) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40383d0c, 0x0) waitid$auto_P_ALL(0x0, 0x6, &(0x7f0000000240)={@siginfo_0_0={0xfffffffd, 0x88, 0x66, @_timer={r3, 0x0, @sival_ptr=&(0x7f0000000580)="c2b6dc5a2d1a24a0d1a97d771b9ca0f16fa29e31dd6f7379dfb54316f5fec30bc1aad8b930bee45398acf0c27bdf5cb5544e2d3038c00a18e22858cf46de40fdc237e2e66a85a9d20495", 0xd65}}}, 0x9, &(0x7f00000002c0)={{0x7, 0x40000000000b}, {0x5, 0x1}, 0x8000000000000000, 0x2, 0x3fc, 0x10001, 0x8, 0x100000002, 0x5, 0x2, 0x81, 0x8001, 0x5, 0x4, 0x2, 0x100}) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) semctl$auto_SETALL(0x6, 0x6, 0x11, 0x2) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r4) fcntl$auto_F_GETOWN(r2, 0x9, 0xfffffffffffffff8) sendmsg$auto_TIPC_NL_LINK_GET(r7, &(0x7f0000002640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002600)={&(0x7f0000001280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x180}}, 0x8800) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.982273][ T8168] RAX: ffffffffffffffda RBX: 00007fc486815fa0 RCX: 00007fc48659ce59 [ 204.982282][ T8168] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 204.982291][ T8168] RBP: 00007fc486632d6f R08: 0000000000000000 R09: 0000000000000000 [ 204.982300][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.982308][ T8168] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007ffc59970308 [ 204.982327][ T8168] [ 205.455756][ T8179] FAULT_INJECTION: forcing a failure. [ 205.455756][ T8179] name failslab, interval 1, probability 0, space 0, times 0 [ 205.512894][ T8179] CPU: 0 UID: 0 PID: 8179 Comm: syz.2.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.512920][ T8179] Tainted: [L]=SOFTLOCKUP [ 205.512925][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.512934][ T8179] Call Trace: [ 205.512942][ T8179] [ 205.512948][ T8179] dump_stack_lvl+0x100/0x190 [ 205.512979][ T8179] should_fail_ex.cold+0x5/0xa [ 205.512999][ T8179] should_failslab+0xc2/0x120 [ 205.513017][ T8179] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 205.513040][ T8179] ? mas_preallocate+0x1105/0x14a0 [ 205.513059][ T8179] mas_preallocate+0x1105/0x14a0 [ 205.513077][ T8179] ? __pfx_mas_preallocate+0x10/0x10 [ 205.513096][ T8179] ? anon_vma_name+0x5a/0x250 [ 205.513119][ T8179] __split_vma+0x33d/0xda0 [ 205.513142][ T8179] ? __pfx___split_vma+0x10/0x10 [ 205.513168][ T8179] ? __pfx_mas_prev+0x10/0x10 [ 205.513188][ T8179] ? is_bpf_text_address+0x8a/0x1a0 [ 205.513212][ T8179] vms_gather_munmap_vmas+0x3a5/0x1720 [ 205.513238][ T8179] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 205.513267][ T8179] ? mas_walk+0x6ef/0x9b0 [ 205.513291][ T8179] __mmap_region+0x4aa/0x2dd0 [ 205.513313][ T8179] ? __kasan_slab_free+0x5f/0x80 [ 205.513328][ T8179] ? kfree+0x223/0x6c0 [ 205.513346][ T8179] ? ima_store_measurement+0x522/0x5b0 [ 205.513362][ T8179] ? process_measurement+0x19cc/0x2350 [ 205.513376][ T8179] ? ima_file_mmap+0x1c4/0x1f0 [ 205.513389][ T8179] ? security_mmap_file+0x278/0x9b0 [ 205.513408][ T8179] ? __pfx___mmap_region+0x10/0x10 [ 205.513428][ T8179] ? do_syscall_64+0x115/0x840 [ 205.513447][ T8179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.513490][ T8179] ? process_measurement+0x109c/0x2350 [ 205.513505][ T8179] ? process_measurement+0x109c/0x2350 [ 205.513522][ T8179] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 205.513546][ T8179] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 205.513570][ T8179] ? process_measurement+0x10a9/0x2350 [ 205.513584][ T8179] ? rcu_is_watching+0x12/0xc0 [ 205.513630][ T8179] mmap_region+0x527/0x620 [ 205.513646][ T8179] ? __pfx_mmap_region+0x10/0x10 [ 205.513662][ T8179] ? cap_mmap_addr+0x4b/0x120 [ 205.513676][ T8179] ? bpf_lsm_mmap_addr+0x9/0x30 [ 205.513690][ T8179] ? security_mmap_addr+0x71/0x1e0 [ 205.513717][ T8179] ? __get_unmapped_area+0x255/0x3e0 [ 205.513738][ T8179] do_mmap+0xc63/0x12f0 [ 205.513760][ T8179] ? __pfx_do_mmap+0x10/0x10 [ 205.513779][ T8179] ? __pfx_down_write_killable+0x10/0x10 [ 205.513797][ T8179] vm_mmap_pgoff+0x29e/0x470 [ 205.513821][ T8179] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 205.513839][ T8179] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 205.513869][ T8179] ksys_mmap_pgoff+0x285/0x610 [ 205.513889][ T8179] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 205.513906][ T8179] ? xfd_validate_state+0x129/0x190 [ 205.513925][ T8179] __x64_sys_mmap+0x125/0x190 [ 205.513943][ T8179] do_syscall_64+0x115/0x840 [ 205.513962][ T8179] ? clear_bhb_loop+0x40/0x90 [ 205.513980][ T8179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.513996][ T8179] RIP: 0033:0x7f53e5b9ce59 [ 205.514010][ T8179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.514024][ T8179] RSP: 002b:00007f53e6a72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 205.514039][ T8179] RAX: ffffffffffffffda RBX: 00007f53e5e15fa0 RCX: 00007f53e5b9ce59 [ 205.514049][ T8179] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 205.514058][ T8179] RBP: 00007f53e5c32d6f R08: 0000000000000401 R09: 0000300000000000 [ 205.514067][ T8179] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 205.514076][ T8179] R13: 00007f53e5e16038 R14: 00007f53e5e15fa0 R15: 00007fff58913628 [ 205.514096][ T8179] [ 206.297193][ T8185] FAULT_INJECTION: forcing a failure. [ 206.297193][ T8185] name failslab, interval 1, probability 0, space 0, times 0 [ 206.323953][ T8185] CPU: 0 UID: 0 PID: 8185 Comm: syz.1.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.323980][ T8185] Tainted: [L]=SOFTLOCKUP [ 206.323986][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.323995][ T8185] Call Trace: [ 206.324001][ T8185] [ 206.324007][ T8185] dump_stack_lvl+0x100/0x190 [ 206.324037][ T8185] should_fail_ex.cold+0x5/0xa [ 206.324056][ T8185] should_failslab+0xc2/0x120 [ 206.324075][ T8185] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 206.324098][ T8185] ? ima_inode_get+0x11f/0x580 [ 206.324116][ T8185] ima_inode_get+0x11f/0x580 [ 206.324140][ T8185] process_measurement+0x1213/0x2350 [ 206.324160][ T8185] ? stack_depot_save_flags+0x27/0x9d0 [ 206.324183][ T8185] ? stack_trace_save+0x8e/0xc0 [ 206.324203][ T8185] ? __pfx_process_measurement+0x10/0x10 [ 206.324219][ T8185] ? __lock_acquire+0x4a5/0x2630 [ 206.324241][ T8185] ? __kasan_slab_alloc+0x89/0x90 [ 206.324256][ T8185] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 206.324279][ T8185] ? init_file+0x95/0x480 [ 206.324297][ T8185] ? alloc_empty_file+0x79/0x1c0 [ 206.324317][ T8185] ? alloc_file_pseudo+0x13a/0x230 [ 206.324337][ T8185] ? ksys_mmap_pgoff+0x242/0x610 [ 206.324353][ T8185] ? __x64_sys_mmap+0x125/0x190 [ 206.324367][ T8185] ? do_syscall_64+0x115/0x840 [ 206.324405][ T8185] ? __pfx_aa_file_perm+0x10/0x10 [ 206.324432][ T8185] ima_file_mmap+0x1c4/0x1f0 [ 206.324448][ T8185] ? __pfx_ima_file_mmap+0x10/0x10 [ 206.324469][ T8185] security_mmap_file+0x278/0x9b0 [ 206.324490][ T8185] vm_mmap_pgoff+0xec/0x470 [ 206.324511][ T8185] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 206.324528][ T8185] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 206.324550][ T8185] ? hugetlbfs_get_inode+0x3f5/0x700 [ 206.324577][ T8185] ksys_mmap_pgoff+0x285/0x610 [ 206.324596][ T8185] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 206.324614][ T8185] ? xfd_validate_state+0x129/0x190 [ 206.324632][ T8185] __x64_sys_mmap+0x125/0x190 [ 206.324649][ T8185] do_syscall_64+0x115/0x840 [ 206.324669][ T8185] ? clear_bhb_loop+0x40/0x90 [ 206.324686][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.324702][ T8185] RIP: 0033:0x7fe58a19ce59 [ 206.324715][ T8185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.324729][ T8185] RSP: 002b:00007fe58afc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 206.324744][ T8185] RAX: ffffffffffffffda RBX: 00007fe58a415fa0 RCX: 00007fe58a19ce59 [ 206.324754][ T8185] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 206.324763][ T8185] RBP: 00007fe58a232d6f R08: 0000000000000401 R09: 0000300000000000 [ 206.324773][ T8185] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 206.324782][ T8185] R13: 00007fe58a416038 R14: 00007fe58a415fa0 R15: 00007ffc33d424b8 [ 206.324802][ T8185] [ 206.969550][ T8185] FAULT_INJECTION: forcing a failure. [ 206.969550][ T8185] name failslab, interval 1, probability 0, space 0, times 0 [ 207.022789][ T8185] CPU: 0 UID: 0 PID: 8185 Comm: syz.1.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.022817][ T8185] Tainted: [L]=SOFTLOCKUP [ 207.022822][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.022831][ T8185] Call Trace: [ 207.022837][ T8185] [ 207.022843][ T8185] dump_stack_lvl+0x100/0x190 [ 207.022872][ T8185] should_fail_ex.cold+0x5/0xa [ 207.022891][ T8185] ? tomoyo_realpath_from_path+0xb6/0x690 [ 207.022913][ T8185] should_failslab+0xc2/0x120 [ 207.022931][ T8185] __kmalloc_noprof+0xe0/0x850 [ 207.022944][ T8185] ? kfree+0x1dd/0x6c0 [ 207.022967][ T8185] tomoyo_realpath_from_path+0xb6/0x690 [ 207.022992][ T8185] tomoyo_path_number_perm+0x23c/0x580 [ 207.023010][ T8185] ? tomoyo_path_number_perm+0x22e/0x580 [ 207.023031][ T8185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.023048][ T8185] ? futex_wait+0x11e/0x370 [ 207.023084][ T8185] ? find_held_lock+0x2b/0x80 [ 207.023102][ T8185] ? __fget_files+0x215/0x3d0 [ 207.023118][ T8185] ? hook_file_ioctl_common+0x149/0x410 [ 207.023135][ T8185] ? __fget_files+0x215/0x3d0 [ 207.023155][ T8185] ? __fget_files+0x21f/0x3d0 [ 207.023175][ T8185] security_file_ioctl+0xd3/0x230 [ 207.023194][ T8185] __x64_sys_ioctl+0xb7/0x210 [ 207.023210][ T8185] do_syscall_64+0x115/0x840 [ 207.023230][ T8185] ? clear_bhb_loop+0x40/0x90 [ 207.023248][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.023264][ T8185] RIP: 0033:0x7fe58a19ce59 [ 207.023277][ T8185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.023292][ T8185] RSP: 002b:00007fe58afc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.023306][ T8185] RAX: ffffffffffffffda RBX: 00007fe58a415fa0 RCX: 00007fe58a19ce59 [ 207.023316][ T8185] RDX: 0000000000000000 RSI: 0000000040047440 RDI: 0000000000000009 [ 207.023324][ T8185] RBP: 00007fe58a232d6f R08: 0000000000000000 R09: 0000000000000000 [ 207.023333][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.023341][ T8185] R13: 00007fe58a416038 R14: 00007fe58a415fa0 R15: 00007ffc33d424b8 [ 207.023360][ T8185] [ 207.615754][ T8192] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2679166876 out of range (51000000..2150000000) [ 208.055939][ T8185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.512980][ T1107] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.540830][ T8219] input: jJǸ-9%vJ86 as /devices/virtual/input/input9 [ 209.058107][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.412'. [ 209.369664][ T8242] FAULT_INJECTION: forcing a failure. [ 209.369664][ T8242] name fail_futex, interval 1, probability 0, space 0, times 0 [ 209.434491][ T8242] CPU: 0 UID: 0 PID: 8242 Comm: syz.4.413 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.434517][ T8242] Tainted: [L]=SOFTLOCKUP [ 209.434522][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.434532][ T8242] Call Trace: [ 209.434538][ T8242] [ 209.434544][ T8242] dump_stack_lvl+0x100/0x190 [ 209.434573][ T8242] should_fail_ex.cold+0x5/0xa [ 209.434593][ T8242] get_futex_key+0x1d2/0x1510 [ 209.434619][ T8242] ? __pfx_get_futex_key+0x10/0x10 [ 209.434642][ T8242] ? do_mmap+0x93f/0x12f0 [ 209.434660][ T8242] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 209.434685][ T8242] futex_wake+0xea/0x530 [ 209.434705][ T8242] ? __pfx_futex_wake+0x10/0x10 [ 209.434730][ T8242] do_futex+0x32b/0x350 [ 209.434745][ T8242] ? __pfx_do_futex+0x10/0x10 [ 209.434762][ T8242] ? fput+0x79/0x100 [ 209.434783][ T8242] __x64_sys_futex+0x34f/0x4d0 [ 209.434801][ T8242] ? __pfx___x64_sys_futex+0x10/0x10 [ 209.434819][ T8242] ? rcu_is_watching+0x12/0xc0 [ 209.434838][ T8242] do_syscall_64+0x115/0x840 [ 209.434858][ T8242] ? clear_bhb_loop+0x40/0x90 [ 209.434876][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.434891][ T8242] RIP: 0033:0x7fc48659ce59 [ 209.434904][ T8242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.434918][ T8242] RSP: 002b:00007fc4874ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 209.434932][ T8242] RAX: ffffffffffffffda RBX: 00007fc486815fa8 RCX: 00007fc48659ce59 [ 209.434942][ T8242] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc486815fac [ 209.434951][ T8242] RBP: 00007fc486815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 209.434959][ T8242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.434968][ T8242] R13: 00007fc486816038 R14: 00007ffc59970220 R15: 00007ffc59970308 [ 209.434986][ T8242] [ 210.564607][ T8250] random: crng reseeded on system resumption [ 211.707616][ T8271] ubi0: attaching mtd0 [ 211.731717][ T8271] ubi0: scanning is finished [ 211.763825][ T8271] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 211.951009][ T8277] random: crng reseeded on system resumption [ 211.977872][ T8271] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 212.037453][ T8275] size and base must be multiples of 4 kiB [ 212.062083][ T8275] CPU: 0 UID: 0 PID: 8275 Comm: syz.2.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.062107][ T8275] Tainted: [L]=SOFTLOCKUP [ 212.062112][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.062121][ T8275] Call Trace: [ 212.062127][ T8275] [ 212.062133][ T8275] dump_stack_lvl+0x100/0x190 [ 212.062162][ T8275] mtrr_add.cold+0x74/0x87 [ 212.062179][ T8275] mtrr_ioctl+0x25a/0xcf0 [ 212.062201][ T8275] ? __pfx_mtrr_ioctl+0x10/0x10 [ 212.062227][ T8275] ? find_held_lock+0x2b/0x80 [ 212.062250][ T8275] ? __fget_files+0x21f/0x3d0 [ 212.062268][ T8275] ? __pfx_mtrr_ioctl+0x10/0x10 [ 212.062290][ T8275] proc_reg_unlocked_ioctl+0x229/0x320 [ 212.062308][ T8275] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 212.062327][ T8275] __x64_sys_ioctl+0x18e/0x210 [ 212.062343][ T8275] do_syscall_64+0x115/0x840 [ 212.062363][ T8275] ? clear_bhb_loop+0x40/0x90 [ 212.062380][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.062395][ T8275] RIP: 0033:0x7f53e5b9ce59 [ 212.062408][ T8275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.062422][ T8275] RSP: 002b:00007f53e6a72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.062436][ T8275] RAX: ffffffffffffffda RBX: 00007f53e5e15fa0 RCX: 00007f53e5b9ce59 [ 212.062446][ T8275] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000007 [ 212.062455][ T8275] RBP: 00007f53e5c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 212.062463][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.062471][ T8275] R13: 00007f53e5e16038 R14: 00007f53e5e15fa0 R15: 00007fff58913628 [ 212.062490][ T8275] [ 212.486825][ T8280] ubi0: attaching mtd0 [ 212.504877][ T8280] ubi0: scanning is finished [ 212.518252][ T8280] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 212.639333][ T8280] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 212.668136][ T8280] random: crng reseeded on system resumption [ 213.509550][ T5649] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 213.518172][ T5649] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 214.151180][ T8293] Process accounting paused [ 214.876884][ T5815] Process accounting resumed [ 215.525640][ T8341] Process accounting resumed [ 220.881171][ T8423] FAULT_INJECTION: forcing a failure. [ 220.881171][ T8423] name failslab, interval 1, probability 0, space 0, times 0 [ 220.955195][ T8423] CPU: 0 UID: 0 PID: 8423 Comm: syz.4.445 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.955221][ T8423] Tainted: [L]=SOFTLOCKUP [ 220.955226][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.955235][ T8423] Call Trace: [ 220.955240][ T8423] [ 220.955246][ T8423] dump_stack_lvl+0x100/0x190 [ 220.955276][ T8423] should_fail_ex.cold+0x5/0xa [ 220.955295][ T8423] should_failslab+0xc2/0x120 [ 220.955320][ T8423] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 220.955343][ T8423] ? vm_area_alloc+0x1f/0x160 [ 220.955363][ T8423] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.955386][ T8423] vm_area_alloc+0x1f/0x160 [ 220.955407][ T8423] __mmap_region+0x104d/0x2dd0 [ 220.955430][ T8423] ? process_measurement+0x19cc/0x2350 [ 220.955444][ T8423] ? ima_file_mmap+0x1c4/0x1f0 [ 220.955457][ T8423] ? security_mmap_file+0x278/0x9b0 [ 220.955476][ T8423] ? __pfx___mmap_region+0x10/0x10 [ 220.955497][ T8423] ? do_syscall_64+0x115/0x840 [ 220.955516][ T8423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.955559][ T8423] ? process_measurement+0x109c/0x2350 [ 220.955573][ T8423] ? process_measurement+0x109c/0x2350 [ 220.955598][ T8423] ? process_measurement+0x10a9/0x2350 [ 220.955612][ T8423] ? rcu_is_watching+0x12/0xc0 [ 220.955658][ T8423] mmap_region+0x527/0x620 [ 220.955674][ T8423] ? __pfx_mmap_region+0x10/0x10 [ 220.955690][ T8423] ? cap_mmap_addr+0x4b/0x120 [ 220.955704][ T8423] ? bpf_lsm_mmap_addr+0x9/0x30 [ 220.955717][ T8423] ? security_mmap_addr+0x71/0x1e0 [ 220.955736][ T8423] ? __get_unmapped_area+0x255/0x3e0 [ 220.955757][ T8423] do_mmap+0xc63/0x12f0 [ 220.955778][ T8423] ? __pfx_do_mmap+0x10/0x10 [ 220.955796][ T8423] ? __pfx_down_write_killable+0x10/0x10 [ 220.955814][ T8423] vm_mmap_pgoff+0x29e/0x470 [ 220.955836][ T8423] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 220.955853][ T8423] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 220.955883][ T8423] ksys_mmap_pgoff+0x285/0x610 [ 220.955902][ T8423] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 220.955919][ T8423] ? xfd_validate_state+0x129/0x190 [ 220.955938][ T8423] __x64_sys_mmap+0x125/0x190 [ 220.955955][ T8423] do_syscall_64+0x115/0x840 [ 220.955975][ T8423] ? clear_bhb_loop+0x40/0x90 [ 220.955992][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.956007][ T8423] RIP: 0033:0x7fc48659ce59 [ 220.956021][ T8423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.956034][ T8423] RSP: 002b:00007fc4874ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 220.956049][ T8423] RAX: ffffffffffffffda RBX: 00007fc486815fa0 RCX: 00007fc48659ce59 [ 220.956058][ T8423] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 220.956067][ T8423] RBP: 00007fc486632d6f R08: 0000000000000401 R09: 0000300000000000 [ 220.956076][ T8423] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 220.956084][ T8423] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007ffc59970308 [ 220.956104][ T8423] [ 222.794869][ T8440] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2 out of range (51000000..2150000000) [ 223.350933][ T8448] FAULT_INJECTION: forcing a failure. [ 223.350933][ T8448] name fail_futex, interval 1, probability 0, space 0, times 0 [ 223.587889][ T8448] CPU: 0 UID: 0 PID: 8448 Comm: syz.3.450 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.587915][ T8448] Tainted: [L]=SOFTLOCKUP [ 223.587920][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.587929][ T8448] Call Trace: [ 223.587934][ T8448] [ 223.587941][ T8448] dump_stack_lvl+0x100/0x190 [ 223.587971][ T8448] should_fail_ex.cold+0x5/0xa [ 223.587991][ T8448] get_futex_key+0x1d2/0x1510 [ 223.588017][ T8448] ? __pfx_get_futex_key+0x10/0x10 [ 223.588039][ T8448] ? do_mmap+0x93f/0x12f0 [ 223.588057][ T8448] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 223.588079][ T8448] futex_wake+0xea/0x530 [ 223.588099][ T8448] ? __pfx_futex_wake+0x10/0x10 [ 223.588124][ T8448] do_futex+0x32b/0x350 [ 223.588139][ T8448] ? __pfx_do_futex+0x10/0x10 [ 223.588156][ T8448] ? fput+0x79/0x100 [ 223.588177][ T8448] __x64_sys_futex+0x34f/0x4d0 [ 223.588194][ T8448] ? __pfx___x64_sys_futex+0x10/0x10 [ 223.588213][ T8448] ? rcu_is_watching+0x12/0xc0 [ 223.588232][ T8448] do_syscall_64+0x115/0x840 [ 223.588253][ T8448] ? clear_bhb_loop+0x40/0x90 [ 223.588271][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.588286][ T8448] RIP: 0033:0x7fd63199ce59 [ 223.588300][ T8448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.588313][ T8448] RSP: 002b:00007fd6327c80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 223.588328][ T8448] RAX: ffffffffffffffda RBX: 00007fd631c15fa8 RCX: 00007fd63199ce59 [ 223.588337][ T8448] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd631c15fac [ 223.588346][ T8448] RBP: 00007fd631c15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 223.588355][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.588363][ T8448] R13: 00007fd631c16038 R14: 00007ffc22c89ec0 R15: 00007ffc22c89fa8 [ 223.588382][ T8448] [ 224.265575][ T8460] FAULT_INJECTION: forcing a failure. [ 224.265575][ T8460] name failslab, interval 1, probability 0, space 0, times 0 [ 224.350826][ T8460] CPU: 0 UID: 0 PID: 8460 Comm: syz.3.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.350853][ T8460] Tainted: [L]=SOFTLOCKUP [ 224.350858][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.350867][ T8460] Call Trace: [ 224.350872][ T8460] [ 224.350879][ T8460] dump_stack_lvl+0x100/0x190 [ 224.350910][ T8460] should_fail_ex.cold+0x5/0xa [ 224.350929][ T8460] should_failslab+0xc2/0x120 [ 224.350952][ T8460] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 224.350975][ T8460] ? alloc_empty_file+0x5b/0x1c0 [ 224.351000][ T8460] alloc_empty_file+0x5b/0x1c0 [ 224.351021][ T8460] alloc_file_pseudo+0x13a/0x230 [ 224.351044][ T8460] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 224.351066][ T8460] ? hugetlbfs_get_inode+0x3f5/0x700 [ 224.351089][ T8460] hugetlb_file_setup+0x2a8/0x5b0 [ 224.351112][ T8460] ksys_mmap_pgoff+0x242/0x610 [ 224.351132][ T8460] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 224.351149][ T8460] ? xfd_validate_state+0x129/0x190 [ 224.351168][ T8460] __x64_sys_mmap+0x125/0x190 [ 224.351186][ T8460] do_syscall_64+0x115/0x840 [ 224.351205][ T8460] ? clear_bhb_loop+0x40/0x90 [ 224.351223][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.351239][ T8460] RIP: 0033:0x7fd63199ce59 [ 224.351252][ T8460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.351265][ T8460] RSP: 002b:00007fd6327c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 224.351280][ T8460] RAX: ffffffffffffffda RBX: 00007fd631c15fa0 RCX: 00007fd63199ce59 [ 224.351290][ T8460] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 224.351298][ T8460] RBP: 00007fd631a32d6f R08: 0000000000000401 R09: 0000300000000000 [ 224.351307][ T8460] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 224.351315][ T8460] R13: 00007fd631c16038 R14: 00007fd631c15fa0 R15: 00007ffc22c89fa8 [ 224.351335][ T8460] [ 224.937995][ T8449] FAULT_INJECTION: forcing a failure. [ 224.937995][ T8449] name failslab, interval 1, probability 0, space 0, times 0 [ 225.041667][ T8449] CPU: 0 UID: 0 PID: 8449 Comm: syz.1.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.041691][ T8449] Tainted: [L]=SOFTLOCKUP [ 225.041696][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.041705][ T8449] Call Trace: [ 225.041710][ T8449] [ 225.041722][ T8449] dump_stack_lvl+0x100/0x190 [ 225.041751][ T8449] should_fail_ex.cold+0x5/0xa [ 225.041770][ T8449] should_failslab+0xc2/0x120 [ 225.041787][ T8449] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 225.041811][ T8449] ? taskstats_exit+0x67b/0xc10 [ 225.041830][ T8449] ? rcu_is_watching+0x12/0xc0 [ 225.041850][ T8449] taskstats_exit+0x67b/0xc10 [ 225.041869][ T8449] ? __pfx_acct_update_integrals+0x10/0x10 [ 225.041890][ T8449] ? __pfx_taskstats_exit+0x10/0x10 [ 225.041911][ T8449] ? rcu_read_lock_any_held+0x6a/0xa0 [ 225.041928][ T8449] ? exit_signals+0x395/0xaf0 [ 225.041948][ T8449] do_exit+0x65c/0x2af0 [ 225.041972][ T8449] ? __pfx_do_exit+0x10/0x10 [ 225.041993][ T8449] ? do_raw_spin_lock+0x128/0x260 [ 225.042013][ T8449] ? find_held_lock+0x2b/0x80 [ 225.042031][ T8449] ? get_signal+0x7e5/0x2210 [ 225.042050][ T8449] do_group_exit+0xd5/0x2a0 [ 225.042072][ T8449] get_signal+0x20ff/0x2210 [ 225.042097][ T8449] ? __pfx_get_signal+0x10/0x10 [ 225.042116][ T8449] ? do_futex+0x192/0x350 [ 225.042133][ T8449] arch_do_signal_or_restart+0x91/0x7a0 [ 225.042154][ T8449] ? irqentry_exit+0x24d/0x970 [ 225.042175][ T8449] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 225.042203][ T8449] ? rcu_is_watching+0x12/0xc0 [ 225.042221][ T8449] exit_to_user_mode_loop+0x98/0x670 [ 225.042244][ T8449] ? rcu_is_watching+0x12/0xc0 [ 225.042262][ T8449] do_syscall_64+0x652/0x840 [ 225.042282][ T8449] ? clear_bhb_loop+0x40/0x90 [ 225.042300][ T8449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.042315][ T8449] RIP: 0033:0x7fe58a19ce59 [ 225.042327][ T8449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.042341][ T8449] RSP: 002b:00007fe58afa70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.042355][ T8449] RAX: fffffffffffffe00 RBX: 00007fe58a416098 RCX: 00007fe58a19ce59 [ 225.042364][ T8449] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe58a416098 [ 225.042373][ T8449] RBP: 00007fe58a416090 R08: 0000000000000000 R09: 0000000000000000 [ 225.042382][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.042390][ T8449] R13: 00007fe58a416128 R14: 00007ffc33d423d0 R15: 00007ffc33d424b8 [ 225.042408][ T8449] [ 228.296465][ T8505] random: crng reseeded on system resumption [ 230.516313][ T8534] input: jJǸ-9%vJ86 as /devices/virtual/input/input10 [ 231.802654][ T8554] FAULT_INJECTION: forcing a failure. [ 231.802654][ T8554] name failslab, interval 1, probability 0, space 0, times 0 [ 231.835258][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.4.469 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.835283][ T8554] Tainted: [L]=SOFTLOCKUP [ 231.835289][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.835298][ T8554] Call Trace: [ 231.835304][ T8554] [ 231.835309][ T8554] dump_stack_lvl+0x100/0x190 [ 231.835339][ T8554] should_fail_ex.cold+0x5/0xa [ 231.835359][ T8554] should_failslab+0xc2/0x120 [ 231.835377][ T8554] __kmalloc_cache_noprof+0x7a/0x6f0 [ 231.835397][ T8554] ? loopback_open+0xa0a/0x13f0 [ 231.835417][ T8554] loopback_open+0xa0a/0x13f0 [ 231.835437][ T8554] snd_pcm_open_substream+0xa76/0x1850 [ 231.835454][ T8554] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 231.835470][ T8554] ? rcu_is_watching+0x12/0xc0 [ 231.835491][ T8554] snd_pcm_open+0x2a3/0x710 [ 231.835507][ T8554] ? __pfx_snd_pcm_open+0x10/0x10 [ 231.835524][ T8554] ? __pfx_default_wake_function+0x10/0x10 [ 231.835548][ T8554] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 231.835563][ T8554] snd_pcm_playback_open+0x86/0xe0 [ 231.835578][ T8554] snd_open+0x201/0x450 [ 231.835598][ T8554] ? __pfx_snd_open+0x10/0x10 [ 231.835618][ T8554] chrdev_open+0x234/0x6a0 [ 231.835637][ T8554] ? __pfx_apparmor_file_open+0x10/0x10 [ 231.835654][ T8554] ? __pfx_chrdev_open+0x10/0x10 [ 231.835681][ T8554] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 231.835706][ T8554] do_dentry_open+0x6ab/0x14d0 [ 231.835724][ T8554] ? __pfx_chrdev_open+0x10/0x10 [ 231.835746][ T8554] vfs_open+0x82/0x3f0 [ 231.835769][ T8554] path_openat+0x208c/0x31a0 [ 231.835795][ T8554] ? __pfx_path_openat+0x10/0x10 [ 231.835820][ T8554] do_file_open+0x20e/0x430 [ 231.835839][ T8554] ? __pfx_do_file_open+0x10/0x10 [ 231.835871][ T8554] ? alloc_fd+0x476/0x790 [ 231.835891][ T8554] ? do_getname+0x191/0x390 [ 231.835913][ T8554] do_sys_openat2+0x10d/0x1e0 [ 231.835935][ T8554] ? __pfx_do_sys_openat2+0x10/0x10 [ 231.835959][ T8554] ? __fget_files+0x21f/0x3d0 [ 231.835979][ T8554] __x64_sys_openat+0x12d/0x210 [ 231.836002][ T8554] ? __pfx___x64_sys_openat+0x10/0x10 [ 231.836028][ T8554] ? rcu_is_watching+0x12/0xc0 [ 231.836047][ T8554] do_syscall_64+0x115/0x840 [ 231.836067][ T8554] ? clear_bhb_loop+0x40/0x90 [ 231.836085][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.836101][ T8554] RIP: 0033:0x7fc48659ce59 [ 231.836114][ T8554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.836128][ T8554] RSP: 002b:00007fc4874ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 231.836143][ T8554] RAX: ffffffffffffffda RBX: 00007fc486815fa0 RCX: 00007fc48659ce59 [ 231.836153][ T8554] RDX: 0000000000002100 RSI: 0000200000004ec0 RDI: ffffffffffffff9c [ 231.836162][ T8554] RBP: 00007fc486632d6f R08: 0000000000000000 R09: 0000000000000000 [ 231.836171][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.836180][ T8554] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007ffc59970308 [ 231.836200][ T8554] [ 232.585565][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.469'. [ 232.648925][ T8558] FAULT_INJECTION: forcing a failure. [ 232.648925][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 232.727376][ T8558] CPU: 0 UID: 0 PID: 8558 Comm: syz.1.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.727402][ T8558] Tainted: [L]=SOFTLOCKUP [ 232.727408][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.727417][ T8558] Call Trace: [ 232.727422][ T8558] [ 232.727429][ T8558] dump_stack_lvl+0x100/0x190 [ 232.727459][ T8558] should_fail_ex.cold+0x5/0xa [ 232.727478][ T8558] should_failslab+0xc2/0x120 [ 232.727496][ T8558] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 232.727519][ T8558] ? vm_area_dup+0x27/0x8e0 [ 232.727543][ T8558] vm_area_dup+0x27/0x8e0 [ 232.727565][ T8558] __split_vma+0x18c/0xda0 [ 232.727589][ T8558] ? __pfx___split_vma+0x10/0x10 [ 232.727614][ T8558] ? __pfx_mas_prev+0x10/0x10 [ 232.727636][ T8558] ? is_bpf_text_address+0x8a/0x1a0 [ 232.727660][ T8558] vms_gather_munmap_vmas+0x3a5/0x1720 [ 232.727689][ T8558] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 232.727717][ T8558] ? mas_walk+0x6ef/0x9b0 [ 232.727742][ T8558] __mmap_region+0x4aa/0x2dd0 [ 232.727764][ T8558] ? __kasan_slab_free+0x5f/0x80 [ 232.727779][ T8558] ? kfree+0x223/0x6c0 [ 232.727797][ T8558] ? ima_store_measurement+0x522/0x5b0 [ 232.727813][ T8558] ? process_measurement+0x19cc/0x2350 [ 232.727827][ T8558] ? ima_file_mmap+0x1c4/0x1f0 [ 232.727840][ T8558] ? security_mmap_file+0x278/0x9b0 [ 232.727859][ T8558] ? __pfx___mmap_region+0x10/0x10 [ 232.727879][ T8558] ? do_syscall_64+0x115/0x840 [ 232.727898][ T8558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.727949][ T8558] ? process_measurement+0x109c/0x2350 [ 232.727964][ T8558] ? process_measurement+0x109c/0x2350 [ 232.727982][ T8558] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 232.728008][ T8558] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.728032][ T8558] ? process_measurement+0x10a9/0x2350 [ 232.728047][ T8558] ? rcu_is_watching+0x12/0xc0 [ 232.728098][ T8558] mmap_region+0x527/0x620 [ 232.728114][ T8558] ? __pfx_mmap_region+0x10/0x10 [ 232.728131][ T8558] ? cap_mmap_addr+0x4b/0x120 [ 232.728146][ T8558] ? bpf_lsm_mmap_addr+0x9/0x30 [ 232.728161][ T8558] ? security_mmap_addr+0x71/0x1e0 [ 232.728181][ T8558] ? __get_unmapped_area+0x255/0x3e0 [ 232.728202][ T8558] do_mmap+0xc63/0x12f0 [ 232.728223][ T8558] ? __pfx_do_mmap+0x10/0x10 [ 232.728241][ T8558] ? __pfx_down_write_killable+0x10/0x10 [ 232.728259][ T8558] vm_mmap_pgoff+0x29e/0x470 [ 232.728281][ T8558] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 232.728298][ T8558] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 232.728328][ T8558] ksys_mmap_pgoff+0x285/0x610 [ 232.728348][ T8558] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 232.728365][ T8558] ? xfd_validate_state+0x129/0x190 [ 232.728384][ T8558] __x64_sys_mmap+0x125/0x190 [ 232.728402][ T8558] do_syscall_64+0x115/0x840 [ 232.728421][ T8558] ? clear_bhb_loop+0x40/0x90 [ 232.728439][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.728454][ T8558] RIP: 0033:0x7fe58a19ce59 [ 232.728467][ T8558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.728481][ T8558] RSP: 002b:00007fe58afc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 232.728495][ T8558] RAX: ffffffffffffffda RBX: 00007fe58a415fa0 RCX: 00007fe58a19ce59 [ 232.728505][ T8558] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 232.728514][ T8558] RBP: 00007fe58a232d6f R08: 0000000000000401 R09: 0000300000000000 [ 232.728523][ T8558] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 232.728532][ T8558] R13: 00007fe58a416038 R14: 00007fe58a415fa0 R15: 00007ffc33d424b8 [ 232.728552][ T8558] [ 233.828018][ T8586] FAULT_INJECTION: forcing a failure. [ 233.828018][ T8586] name failslab, interval 1, probability 0, space 0, times 0 [ 233.929199][ T8586] CPU: 0 UID: 0 PID: 8586 Comm: syz.4.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.929224][ T8586] Tainted: [L]=SOFTLOCKUP [ 233.929229][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.929240][ T8586] Call Trace: [ 233.929245][ T8586] [ 233.929251][ T8586] dump_stack_lvl+0x100/0x190 [ 233.929281][ T8586] should_fail_ex.cold+0x5/0xa [ 233.929301][ T8586] should_failslab+0xc2/0x120 [ 233.929319][ T8586] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 233.929341][ T8586] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 233.929366][ T8586] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 233.929384][ T8586] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 233.929405][ T8586] alloc_inode+0x68/0x250 [ 233.929428][ T8586] new_inode+0x22/0x1c0 [ 233.929451][ T8586] hugetlbfs_get_inode+0x39a/0x700 [ 233.929470][ T8586] ? do_futex+0x192/0x350 [ 233.929487][ T8586] hugetlb_file_setup+0x15b/0x5b0 [ 233.929510][ T8586] ksys_mmap_pgoff+0x242/0x610 [ 233.929530][ T8586] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 233.929547][ T8586] ? xfd_validate_state+0x129/0x190 [ 233.929565][ T8586] __x64_sys_mmap+0x125/0x190 [ 233.929583][ T8586] do_syscall_64+0x115/0x840 [ 233.929603][ T8586] ? clear_bhb_loop+0x40/0x90 [ 233.929620][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.929635][ T8586] RIP: 0033:0x7fc48659ce59 [ 233.929648][ T8586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.929662][ T8586] RSP: 002b:00007fc4874ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 233.929679][ T8586] RAX: ffffffffffffffda RBX: 00007fc486815fa0 RCX: 00007fc48659ce59 [ 233.929689][ T8586] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 233.929697][ T8586] RBP: 00007fc486632d6f R08: 0000000000000401 R09: 0000300000000000 [ 233.929706][ T8586] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 233.929715][ T8586] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007ffc59970308 [ 233.929735][ T8586] [ 236.401403][ T8603] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.409872][ T8603] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.425991][ T8603] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.442267][ T8603] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.684625][ T8637] FAULT_INJECTION: forcing a failure. [ 236.684625][ T8637] name failslab, interval 1, probability 0, space 0, times 0 [ 236.764061][ T8637] CPU: 0 UID: 0 PID: 8637 Comm: syz.2.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.764088][ T8637] Tainted: [L]=SOFTLOCKUP [ 236.764094][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.764103][ T8637] Call Trace: [ 236.764108][ T8637] [ 236.764114][ T8637] dump_stack_lvl+0x100/0x190 [ 236.764145][ T8637] should_fail_ex.cold+0x5/0xa [ 236.764165][ T8637] should_failslab+0xc2/0x120 [ 236.764183][ T8637] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 236.764209][ T8637] ? security_inode_alloc+0x3b/0x2c0 [ 236.764227][ T8637] ? lockdep_init_map_type+0x5c/0x250 [ 236.764254][ T8637] security_inode_alloc+0x3b/0x2c0 [ 236.764272][ T8637] inode_init_always_gfp+0xc77/0xfb0 [ 236.764293][ T8637] alloc_inode+0x8e/0x250 [ 236.764315][ T8637] new_inode+0x22/0x1c0 [ 236.764338][ T8637] hugetlbfs_get_inode+0x39a/0x700 [ 236.764358][ T8637] ? do_futex+0x192/0x350 [ 236.764376][ T8637] hugetlb_file_setup+0x15b/0x5b0 [ 236.764399][ T8637] ksys_mmap_pgoff+0x242/0x610 [ 236.764419][ T8637] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 236.764436][ T8637] ? xfd_validate_state+0x129/0x190 [ 236.764456][ T8637] __x64_sys_mmap+0x125/0x190 [ 236.764473][ T8637] do_syscall_64+0x115/0x840 [ 236.764494][ T8637] ? clear_bhb_loop+0x40/0x90 [ 236.764512][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.764538][ T8637] RIP: 0033:0x7f53e5b9ce59 [ 236.764551][ T8637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.764571][ T8637] RSP: 002b:00007f53e6a72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 236.764587][ T8637] RAX: ffffffffffffffda RBX: 00007f53e5e15fa0 RCX: 00007f53e5b9ce59 [ 236.764598][ T8637] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 236.764607][ T8637] RBP: 00007f53e5c32d6f R08: 0000000000000401 R09: 0000300000000000 [ 236.764616][ T8637] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 236.764625][ T8637] R13: 00007f53e5e16038 R14: 00007f53e5e15fa0 R15: 00007fff58913628 [ 236.764645][ T8637] [ 237.230021][ T5649] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.260163][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 237.978982][ T8659] aoe: can't write to that file. [ 238.033257][ T8659] aoe: can't write to that file. [ 238.080542][ T8659] aoe: can't write to that file. [ 238.108878][ T8659] aoe: can't write to that file. [ 238.141846][ T8659] aoe: can't write to that file. [ 238.167543][ T8659] aoe: can't write to that file. [ 238.188361][ T8659] aoe: can't write to that file. [ 238.209456][ T8659] aoe: can't write to that file. [ 238.256780][ T8659] aoe: can't write to that file. [ 238.281595][ T8659] aoe: can't write to that file. [ 238.313604][ T8659] aoe: can't write to that file. [ 238.342680][ T8659] aoe: can't write to that file. [ 238.365575][ T8659] aoe: can't write to that file. [ 238.386535][ T8659] aoe: can't write to that file. [ 238.398898][ T8672] random: crng reseeded on system resumption [ 238.413875][ T5649] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.419967][ T8659] aoe: can't write to that file. [ 238.494421][ T5649] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.501327][ T5654] Bluetooth: hci4: command 0x0c1a tx timeout [ 238.816122][ T8672] hub 1-0:1.0: USB hub found [ 238.848395][ T8672] hub 1-0:1.0: 1 port detected [ 239.868187][ T8700] FAULT_INJECTION: forcing a failure. [ 239.868187][ T8700] name failslab, interval 1, probability 0, space 0, times 0 [ 239.958524][ T8700] CPU: 0 UID: 0 PID: 8700 Comm: syz.2.499 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.958548][ T8700] Tainted: [L]=SOFTLOCKUP [ 239.958553][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.958565][ T8700] Call Trace: [ 239.958570][ T8700] [ 239.958576][ T8700] dump_stack_lvl+0x100/0x190 [ 239.958605][ T8700] should_fail_ex.cold+0x5/0xa [ 239.958625][ T8700] should_failslab+0xc2/0x120 [ 239.958643][ T8700] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 239.958666][ T8700] ? alloc_empty_file+0x5b/0x1c0 [ 239.958692][ T8700] alloc_empty_file+0x5b/0x1c0 [ 239.958714][ T8700] alloc_file_pseudo+0x13a/0x230 [ 239.958737][ T8700] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 239.958764][ T8700] __shmem_file_setup+0x205/0x460 [ 239.958786][ T8700] ? __pfx___shmem_file_setup+0x10/0x10 [ 239.958808][ T8700] ? vm_area_alloc+0x1f/0x160 [ 239.958831][ T8700] shmem_zero_setup+0x96/0x1b0 [ 239.958848][ T8700] __mmap_region+0x2509/0x2dd0 [ 239.958874][ T8700] ? __pfx___mmap_region+0x10/0x10 [ 239.958914][ T8700] ? do_raw_spin_lock+0x128/0x260 [ 239.958942][ T8700] ? do_raw_spin_lock+0x128/0x260 [ 239.958958][ T8700] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 239.958981][ T8700] ? hrtimer_start_range_ns+0x860/0x1a50 [ 239.958999][ T8700] ? find_held_lock+0x2b/0x80 [ 239.959017][ T8700] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 239.959066][ T8700] mmap_region+0x35d/0x620 [ 239.959081][ T8700] ? rcu_is_watching+0x12/0xc0 [ 239.959098][ T8700] ? __pfx_mmap_region+0x10/0x10 [ 239.959114][ T8700] ? cap_mmap_addr+0x4b/0x120 [ 239.959129][ T8700] ? bpf_lsm_mmap_addr+0x9/0x30 [ 239.959143][ T8700] ? security_mmap_addr+0x71/0x1e0 [ 239.959163][ T8700] ? __get_unmapped_area+0x255/0x3e0 [ 239.959183][ T8700] do_mmap+0xc63/0x12f0 [ 239.959205][ T8700] ? __pfx_do_mmap+0x10/0x10 [ 239.959222][ T8700] ? __pfx_down_write_killable+0x10/0x10 [ 239.959241][ T8700] vm_mmap_pgoff+0x29e/0x470 [ 239.959263][ T8700] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 239.959283][ T8700] ? do_futex+0x192/0x350 [ 239.959298][ T8700] ? __pfx_do_futex+0x10/0x10 [ 239.959317][ T8700] ksys_mmap_pgoff+0xe4/0x610 [ 239.959335][ T8700] ? __x64_sys_futex+0x358/0x4d0 [ 239.959351][ T8700] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 239.959368][ T8700] ? xfd_validate_state+0x129/0x190 [ 239.959382][ T8700] ? ksys_write+0x1ac/0x250 [ 239.959402][ T8700] __x64_sys_mmap+0x125/0x190 [ 239.959425][ T8700] do_syscall_64+0x115/0x840 [ 239.959445][ T8700] ? clear_bhb_loop+0x40/0x90 [ 239.959464][ T8700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.959479][ T8700] RIP: 0033:0x7f53e5b9ce59 [ 239.959492][ T8700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.959506][ T8700] RSP: 002b:00007f53e6a51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 239.959523][ T8700] RAX: ffffffffffffffda RBX: 00007f53e5e16090 RCX: 00007f53e5b9ce59 [ 239.959533][ T8700] RDX: 00004000000000db RSI: 0000000000020009 RDI: 0000000000000000 [ 239.959542][ T8700] RBP: 00007f53e5c32d6f R08: 0000000000000401 R09: 0000000000008000 [ 239.959551][ T8700] R10: 0040000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 239.959560][ T8700] R13: 00007f53e5e16128 R14: 00007f53e5e16090 R15: 00007fff58913628 [ 239.959579][ T8700] [ 240.368615][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.500'. [ 240.907544][ T8727] random: crng reseeded on system resumption [ 241.102197][ T8725] hub 1-0:1.0: USB hub found [ 241.154168][ T8725] hub 1-0:1.0: 1 port detected [ 241.313201][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 242.171320][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'. [ 242.631219][ T8756] FAULT_INJECTION: forcing a failure. [ 242.631219][ T8756] name failslab, interval 1, probability 0, space 0, times 0 [ 242.709867][ T8756] CPU: 0 UID: 0 PID: 8756 Comm: syz.2.508 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.709894][ T8756] Tainted: [L]=SOFTLOCKUP [ 242.709900][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.709909][ T8756] Call Trace: [ 242.709915][ T8756] [ 242.709921][ T8756] dump_stack_lvl+0x100/0x190 [ 242.709957][ T8756] should_fail_ex.cold+0x5/0xa [ 242.709977][ T8756] should_failslab+0xc2/0x120 [ 242.709995][ T8756] __kmalloc_cache_noprof+0x7a/0x6f0 [ 242.710016][ T8756] ? drm_file_alloc+0x74/0xb40 [ 242.710039][ T8756] drm_file_alloc+0x74/0xb40 [ 242.710060][ T8756] drm_open_helper+0x1fc/0x540 [ 242.710081][ T8756] drm_open+0x1a0/0x3e0 [ 242.710100][ T8756] ? __pfx_drm_open+0x10/0x10 [ 242.710119][ T8756] drm_stub_open+0x20f/0x380 [ 242.710139][ T8756] ? __pfx_drm_stub_open+0x10/0x10 [ 242.710157][ T8756] chrdev_open+0x234/0x6a0 [ 242.710175][ T8756] ? __pfx_apparmor_file_open+0x10/0x10 [ 242.710192][ T8756] ? __pfx_chrdev_open+0x10/0x10 [ 242.710211][ T8756] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 242.710234][ T8756] do_dentry_open+0x6ab/0x14d0 [ 242.710251][ T8756] ? __pfx_chrdev_open+0x10/0x10 [ 242.710274][ T8756] vfs_open+0x82/0x3f0 [ 242.710297][ T8756] path_openat+0x208c/0x31a0 [ 242.710322][ T8756] ? __pfx_path_openat+0x10/0x10 [ 242.710347][ T8756] do_file_open+0x20e/0x430 [ 242.710366][ T8756] ? __pfx_do_file_open+0x10/0x10 [ 242.710397][ T8756] ? alloc_fd+0x476/0x790 [ 242.710417][ T8756] ? do_getname+0x191/0x390 [ 242.710439][ T8756] do_sys_openat2+0x10d/0x1e0 [ 242.710461][ T8756] ? __pfx_do_sys_openat2+0x10/0x10 [ 242.710489][ T8756] __x64_sys_openat+0x12d/0x210 [ 242.710512][ T8756] ? __pfx___x64_sys_openat+0x10/0x10 [ 242.710533][ T8756] ? exit_to_user_mode_loop+0xf3/0x670 [ 242.710560][ T8756] ? rcu_is_watching+0x12/0xc0 [ 242.710579][ T8756] do_syscall_64+0x115/0x840 [ 242.710599][ T8756] ? clear_bhb_loop+0x40/0x90 [ 242.710617][ T8756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.710633][ T8756] RIP: 0033:0x7f53e5b9ce59 [ 242.710647][ T8756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.710661][ T8756] RSP: 002b:00007f53e6a72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 242.710687][ T8756] RAX: ffffffffffffffda RBX: 00007f53e5e15fa0 RCX: 00007f53e5b9ce59 [ 242.710698][ T8756] RDX: 00000000001a9840 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 242.710708][ T8756] RBP: 00007f53e5c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 242.710716][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.710725][ T8756] R13: 00007f53e5e16038 R14: 00007f53e5e15fa0 R15: 00007fff58913628 [ 242.710745][ T8756] [ 245.306189][ T8781] Process accounting resumed [ 246.031784][ T8813] Process accounting paused [ 246.070913][ T8832] FAULT_INJECTION: forcing a failure. [ 246.070913][ T8832] name fail_futex, interval 1, probability 0, space 0, times 0 [ 246.140324][ T8832] CPU: 0 UID: 0 PID: 8832 Comm: syz.2.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.140349][ T8832] Tainted: [L]=SOFTLOCKUP [ 246.140354][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.140363][ T8832] Call Trace: [ 246.140368][ T8832] [ 246.140374][ T8832] dump_stack_lvl+0x100/0x190 [ 246.140404][ T8832] should_fail_ex.cold+0x5/0xa [ 246.140424][ T8832] get_futex_key+0x1d2/0x1510 [ 246.140450][ T8832] ? __pfx_get_futex_key+0x10/0x10 [ 246.140472][ T8832] ? futex_hash+0x2ad/0x370 [ 246.140494][ T8832] ? futex_hash+0x141/0x370 [ 246.140519][ T8832] futex_wake+0xea/0x530 [ 246.140536][ T8832] ? __pfx_futex_wait+0x10/0x10 [ 246.140555][ T8832] ? __pfx_futex_wake+0x10/0x10 [ 246.140576][ T8832] ? find_held_lock+0x2b/0x80 [ 246.140594][ T8832] ? __fget_files+0x215/0x3d0 [ 246.140613][ T8832] do_futex+0x32b/0x350 [ 246.140628][ T8832] ? __pfx_do_futex+0x10/0x10 [ 246.140648][ T8832] __x64_sys_futex+0x34f/0x4d0 [ 246.140666][ T8832] ? __pfx___x64_sys_futex+0x10/0x10 [ 246.140685][ T8832] ? rcu_is_watching+0x12/0xc0 [ 246.140711][ T8832] do_syscall_64+0x115/0x840 [ 246.140733][ T8832] ? clear_bhb_loop+0x40/0x90 [ 246.140751][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.140767][ T8832] RIP: 0033:0x7f53e5b9ce59 [ 246.140782][ T8832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.140797][ T8832] RSP: 002b:00007f53e6a720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 246.140812][ T8832] RAX: ffffffffffffffda RBX: 00007f53e5e15fa8 RCX: 00007f53e5b9ce59 [ 246.140822][ T8832] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f53e5e15fac [ 246.140831][ T8832] RBP: 00007f53e5e15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 246.140840][ T8832] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 246.140850][ T8832] R13: 00007f53e5e16038 R14: 00007fff58913540 R15: 00007fff58913628 [ 246.140869][ T8832] [ 246.826801][ T8851] netlink: 330 bytes leftover after parsing attributes in process `syz.3.526'. [ 246.882145][ T8852] netlink: 330 bytes leftover after parsing attributes in process `syz.3.526'. [ 247.746679][ T8872] FAULT_INJECTION: forcing a failure. [ 247.746679][ T8872] name failslab, interval 1, probability 0, space 0, times 0 [ 247.817160][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.1.530 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.817187][ T8872] Tainted: [L]=SOFTLOCKUP [ 247.817193][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.817202][ T8872] Call Trace: [ 247.817208][ T8872] [ 247.817214][ T8872] dump_stack_lvl+0x100/0x190 [ 247.817246][ T8872] should_fail_ex.cold+0x5/0xa [ 247.817266][ T8872] ? ima_alloc_init_template+0xb6/0x6d0 [ 247.817283][ T8872] should_failslab+0xc2/0x120 [ 247.817301][ T8872] __kmalloc_noprof+0xe0/0x850 [ 247.817315][ T8872] ? find_held_lock+0x2b/0x80 [ 247.817333][ T8872] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 247.817359][ T8872] ima_alloc_init_template+0xb6/0x6d0 [ 247.817377][ T8872] ? take_dentry_name_snapshot+0x310/0x7c0 [ 247.817409][ T8872] ima_store_measurement+0x1e3/0x5b0 [ 247.817430][ T8872] ? __pfx_ima_store_measurement+0x10/0x10 [ 247.817455][ T8872] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 247.817482][ T8872] process_measurement+0x19cc/0x2350 [ 247.817503][ T8872] ? stack_trace_save+0x8e/0xc0 [ 247.817523][ T8872] ? __pfx_process_measurement+0x10/0x10 [ 247.817539][ T8872] ? __lock_acquire+0x4a5/0x2630 [ 247.817561][ T8872] ? __kasan_slab_alloc+0x89/0x90 [ 247.817577][ T8872] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 247.817600][ T8872] ? init_file+0x95/0x480 [ 247.817618][ T8872] ? alloc_empty_file+0x79/0x1c0 [ 247.817637][ T8872] ? alloc_file_pseudo+0x13a/0x230 [ 247.817658][ T8872] ? ksys_mmap_pgoff+0x242/0x610 [ 247.817674][ T8872] ? __x64_sys_mmap+0x125/0x190 [ 247.817688][ T8872] ? do_syscall_64+0x115/0x840 [ 247.817726][ T8872] ? __pfx_aa_file_perm+0x10/0x10 [ 247.817753][ T8872] ima_file_mmap+0x1c4/0x1f0 [ 247.817769][ T8872] ? __pfx_ima_file_mmap+0x10/0x10 [ 247.817790][ T8872] security_mmap_file+0x278/0x9b0 [ 247.817811][ T8872] vm_mmap_pgoff+0xec/0x470 [ 247.817832][ T8872] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 247.817849][ T8872] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 247.817872][ T8872] ? hugetlbfs_get_inode+0x3f5/0x700 [ 247.817898][ T8872] ksys_mmap_pgoff+0x285/0x610 [ 247.817918][ T8872] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 247.817936][ T8872] ? xfd_validate_state+0x129/0x190 [ 247.817954][ T8872] __x64_sys_mmap+0x125/0x190 [ 247.817971][ T8872] do_syscall_64+0x115/0x840 [ 247.817991][ T8872] ? clear_bhb_loop+0x40/0x90 [ 247.818009][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.818025][ T8872] RIP: 0033:0x7fe58a19ce59 [ 247.818038][ T8872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.818053][ T8872] RSP: 002b:00007fe58afc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 247.818067][ T8872] RAX: ffffffffffffffda RBX: 00007fe58a415fa0 RCX: 00007fe58a19ce59 [ 247.818077][ T8872] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 247.818087][ T8872] RBP: 00007fe58a232d6f R08: 0000000000000401 R09: 0000300000000000 [ 247.818096][ T8872] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 247.818105][ T8872] R13: 00007fe58a416038 R14: 00007fe58a415fa0 R15: 00007ffc33d424b8 [ 247.818125][ T8872] [ 249.226396][ T30] audit: type=1804 audit(1780116371.483:6): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.530" name="anon_hugepage" dev="hugetlbfs" ino=25301 res=0 errno=0 [ 249.276168][ T8872] FAULT_INJECTION: forcing a failure. [ 249.276168][ T8872] name failslab, interval 1, probability 0, space 0, times 0 [ 249.321312][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.1.530 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.321338][ T8872] Tainted: [L]=SOFTLOCKUP [ 249.321343][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.321353][ T8872] Call Trace: [ 249.321358][ T8872] [ 249.321364][ T8872] dump_stack_lvl+0x100/0x190 [ 249.321397][ T8872] should_fail_ex.cold+0x5/0xa [ 249.321417][ T8872] ? tomoyo_realpath_from_path+0xb6/0x690 [ 249.321439][ T8872] should_failslab+0xc2/0x120 [ 249.321456][ T8872] __kmalloc_noprof+0xe0/0x850 [ 249.321470][ T8872] ? kfree+0x1dd/0x6c0 [ 249.321493][ T8872] tomoyo_realpath_from_path+0xb6/0x690 [ 249.321519][ T8872] tomoyo_path_number_perm+0x23c/0x580 [ 249.321536][ T8872] ? tomoyo_path_number_perm+0x22e/0x580 [ 249.321555][ T8872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.321573][ T8872] ? futex_wait+0x11e/0x370 [ 249.321609][ T8872] ? find_held_lock+0x2b/0x80 [ 249.321626][ T8872] ? __fget_files+0x215/0x3d0 [ 249.321643][ T8872] ? hook_file_ioctl_common+0x149/0x410 [ 249.321660][ T8872] ? __fget_files+0x215/0x3d0 [ 249.321680][ T8872] ? __fget_files+0x21f/0x3d0 [ 249.321700][ T8872] security_file_ioctl+0xd3/0x230 [ 249.321719][ T8872] __x64_sys_ioctl+0xb7/0x210 [ 249.321736][ T8872] do_syscall_64+0x115/0x840 [ 249.321756][ T8872] ? clear_bhb_loop+0x40/0x90 [ 249.321775][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.321791][ T8872] RIP: 0033:0x7fe58a19ce59 [ 249.321804][ T8872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.321819][ T8872] RSP: 002b:00007fe58afc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.321834][ T8872] RAX: ffffffffffffffda RBX: 00007fe58a415fa0 RCX: 00007fe58a19ce59 [ 249.321843][ T8872] RDX: 0000000000000000 RSI: 0000000040047440 RDI: 0000000000000008 [ 249.321852][ T8872] RBP: 00007fe58a232d6f R08: 0000000000000000 R09: 0000000000000000 [ 249.321867][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.321876][ T8872] R13: 00007fe58a416038 R14: 00007fe58a415fa0 R15: 00007ffc33d424b8 [ 249.321896][ T8872] [ 249.321910][ T8872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.279956][ T8905] FAULT_INJECTION: forcing a failure. [ 250.279956][ T8905] name failslab, interval 1, probability 0, space 0, times 0 [ 250.367369][ T8905] CPU: 0 UID: 0 PID: 8905 Comm: syz.1.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.367396][ T8905] Tainted: [L]=SOFTLOCKUP [ 250.367402][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.367411][ T8905] Call Trace: [ 250.367417][ T8905] [ 250.367423][ T8905] dump_stack_lvl+0x100/0x190 [ 250.367453][ T8905] should_fail_ex.cold+0x5/0xa [ 250.367474][ T8905] should_failslab+0xc2/0x120 [ 250.367492][ T8905] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 250.367509][ T8905] ? ima_collect_measurement+0x531/0xb30 [ 250.367535][ T8905] krealloc_node_align_noprof+0x321/0x3e0 [ 250.367554][ T8905] ima_collect_measurement+0x531/0xb30 [ 250.367577][ T8905] ? __pfx_ima_collect_measurement+0x10/0x10 [ 250.367606][ T8905] ? process_measurement+0x5ab/0x2350 [ 250.367621][ T8905] ? is_bad_inode+0xd/0x40 [ 250.367637][ T8905] ? xattr_resolve_name+0x27d/0x3f0 [ 250.367658][ T8905] ? vfs_getxattr_alloc+0xec/0x350 [ 250.367680][ T8905] ? ima_get_hash_algo+0x22d/0x400 [ 250.367702][ T8905] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 250.367728][ T8905] ? process_measurement+0xdfe/0x2350 [ 250.367743][ T8905] process_measurement+0xdfe/0x2350 [ 250.367763][ T8905] ? ktime_get+0x9f/0x320 [ 250.367784][ T8905] ? __pfx_process_measurement+0x10/0x10 [ 250.367801][ T8905] ? __lock_acquire+0x4a5/0x2630 [ 250.367824][ T8905] ? __kasan_slab_alloc+0x89/0x90 [ 250.367840][ T8905] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 250.367863][ T8905] ? init_file+0x95/0x480 [ 250.367882][ T8905] ? alloc_empty_file+0x79/0x1c0 [ 250.367902][ T8905] ? alloc_file_pseudo+0x13a/0x230 [ 250.367923][ T8905] ? ksys_mmap_pgoff+0x242/0x610 [ 250.367940][ T8905] ? __x64_sys_mmap+0x125/0x190 [ 250.367954][ T8905] ? do_syscall_64+0x115/0x840 [ 250.367992][ T8905] ? __pfx_aa_file_perm+0x10/0x10 [ 250.368019][ T8905] ima_file_mmap+0x1c4/0x1f0 [ 250.368035][ T8905] ? __pfx_ima_file_mmap+0x10/0x10 [ 250.368056][ T8905] security_mmap_file+0x278/0x9b0 [ 250.368078][ T8905] vm_mmap_pgoff+0xec/0x470 [ 250.368099][ T8905] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 250.368116][ T8905] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 250.368139][ T8905] ? hugetlbfs_get_inode+0x3f5/0x700 [ 250.368175][ T8905] ksys_mmap_pgoff+0x285/0x610 [ 250.368196][ T8905] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 250.368214][ T8905] ? xfd_validate_state+0x129/0x190 [ 250.368234][ T8905] __x64_sys_mmap+0x125/0x190 [ 250.368252][ T8905] do_syscall_64+0x115/0x840 [ 250.368271][ T8905] ? clear_bhb_loop+0x40/0x90 [ 250.368295][ T8905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.368311][ T8905] RIP: 0033:0x7fe58a19ce59 [ 250.368324][ T8905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.368340][ T8905] RSP: 002b:00007fe58afc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 250.368354][ T8905] RAX: ffffffffffffffda RBX: 00007fe58a415fa0 RCX: 00007fe58a19ce59 [ 250.368365][ T8905] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 250.368374][ T8905] RBP: 00007fe58a232d6f R08: 0000000000000401 R09: 0000300000000000 [ 250.368384][ T8905] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 250.368393][ T8905] R13: 00007fe58a416038 R14: 00007fe58a415fa0 R15: 00007ffc33d424b8 [ 250.368413][ T8905] [ 250.826899][ T30] audit: type=1800 audit(1780116372.953:7): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.539" name="anon_hugepage" dev="hugetlbfs" ino=25532 res=0 errno=0 [ 252.011108][ T8950] FAULT_INJECTION: forcing a failure. [ 252.011108][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 252.095286][ T8950] CPU: 0 UID: 0 PID: 8950 Comm: syz.4.548 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.095312][ T8950] Tainted: [L]=SOFTLOCKUP [ 252.095318][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.095327][ T8950] Call Trace: [ 252.095332][ T8950] [ 252.095339][ T8950] dump_stack_lvl+0x100/0x190 [ 252.095369][ T8950] should_fail_ex.cold+0x5/0xa [ 252.095390][ T8950] should_failslab+0xc2/0x120 [ 252.095408][ T8950] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 252.095424][ T8950] ? ima_collect_measurement+0x531/0xb30 [ 252.095446][ T8950] krealloc_node_align_noprof+0x321/0x3e0 [ 252.095464][ T8950] ima_collect_measurement+0x531/0xb30 [ 252.095487][ T8950] ? __pfx_ima_collect_measurement+0x10/0x10 [ 252.095516][ T8950] ? process_measurement+0x5ab/0x2350 [ 252.095532][ T8950] ? is_bad_inode+0xd/0x40 [ 252.095548][ T8950] ? xattr_resolve_name+0x27d/0x3f0 [ 252.095568][ T8950] ? vfs_getxattr_alloc+0xec/0x350 [ 252.095590][ T8950] ? ima_get_hash_algo+0x22d/0x400 [ 252.095611][ T8950] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 252.095637][ T8950] ? process_measurement+0xdfe/0x2350 [ 252.095651][ T8950] process_measurement+0xdfe/0x2350 [ 252.095671][ T8950] ? stack_trace_save+0x8e/0xc0 [ 252.095691][ T8950] ? __pfx_process_measurement+0x10/0x10 [ 252.095707][ T8950] ? __lock_acquire+0x4a5/0x2630 [ 252.095729][ T8950] ? __kasan_slab_alloc+0x89/0x90 [ 252.095744][ T8950] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 252.095767][ T8950] ? init_file+0x95/0x480 [ 252.095785][ T8950] ? alloc_empty_file+0x79/0x1c0 [ 252.095804][ T8950] ? alloc_file_pseudo+0x13a/0x230 [ 252.095825][ T8950] ? ksys_mmap_pgoff+0x242/0x610 [ 252.095841][ T8950] ? __x64_sys_mmap+0x125/0x190 [ 252.095856][ T8950] ? do_syscall_64+0x115/0x840 [ 252.095894][ T8950] ? __pfx_aa_file_perm+0x10/0x10 [ 252.095920][ T8950] ima_file_mmap+0x1c4/0x1f0 [ 252.095936][ T8950] ? __pfx_ima_file_mmap+0x10/0x10 [ 252.095957][ T8950] security_mmap_file+0x278/0x9b0 [ 252.095977][ T8950] vm_mmap_pgoff+0xec/0x470 [ 252.095998][ T8950] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 252.096019][ T8950] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 252.096049][ T8950] ? hugetlbfs_get_inode+0x3f5/0x700 [ 252.096077][ T8950] ksys_mmap_pgoff+0x285/0x610 [ 252.096097][ T8950] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 252.096115][ T8950] ? xfd_validate_state+0x129/0x190 [ 252.096134][ T8950] __x64_sys_mmap+0x125/0x190 [ 252.096151][ T8950] do_syscall_64+0x115/0x840 [ 252.096171][ T8950] ? clear_bhb_loop+0x40/0x90 [ 252.096190][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.096205][ T8950] RIP: 0033:0x7fc48659ce59 [ 252.096218][ T8950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.096233][ T8950] RSP: 002b:00007fc4874ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 252.096248][ T8950] RAX: ffffffffffffffda RBX: 00007fc486815fa0 RCX: 00007fc48659ce59 [ 252.096257][ T8950] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 252.096267][ T8950] RBP: 00007fc486632d6f R08: 0000000000000401 R09: 0000300000000000 [ 252.096277][ T8950] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 252.096286][ T8950] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007ffc59970308 [ 252.096305][ T8950] [ 252.461163][ T30] audit: type=1800 audit(1780116374.683:8): pid=8950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.548" name="anon_hugepage" dev="hugetlbfs" ino=25765 res=0 errno=0 [ 252.562706][ T8958] random: crng reseeded on system resumption [ 252.608627][ T8958] hub 1-0:1.0: USB hub found [ 252.615259][ T8958] hub 1-0:1.0: 1 port detected [ 255.549112][ T9012] FAULT_INJECTION: forcing a failure. [ 255.549112][ T9012] name failslab, interval 1, probability 0, space 0, times 0 [ 255.615880][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.629579][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.780213][ T9012] CPU: 0 UID: 0 PID: 9012 Comm: syz.1.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.780241][ T9012] Tainted: [L]=SOFTLOCKUP [ 255.780246][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.780256][ T9012] Call Trace: [ 255.780261][ T9012] [ 255.780267][ T9012] dump_stack_lvl+0x100/0x190 [ 255.780297][ T9012] should_fail_ex.cold+0x5/0xa [ 255.780318][ T9012] should_failslab+0xc2/0x120 [ 255.780336][ T9012] __kmalloc_cache_noprof+0x7a/0x6f0 [ 255.780357][ T9012] ? ima_calc_file_hash_tfm+0x236/0x350 [ 255.780374][ T9012] ? sha256_init+0xd/0xc0 [ 255.780397][ T9012] ima_calc_file_hash_tfm+0x236/0x350 [ 255.780414][ T9012] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 255.780452][ T9012] ? look_up_lock_class+0x64/0x120 [ 255.780474][ T9012] ? ima_alloc_tfm+0x21a/0x2e0 [ 255.780493][ T9012] ima_calc_file_hash+0x1e3/0x380 [ 255.780510][ T9012] ima_collect_measurement+0x94f/0xb30 [ 255.780532][ T9012] ? __pfx_ima_collect_measurement+0x10/0x10 [ 255.780560][ T9012] ? process_measurement+0x5ab/0x2350 [ 255.780578][ T9012] ? is_bad_inode+0xd/0x40 [ 255.780593][ T9012] ? xattr_resolve_name+0x27d/0x3f0 [ 255.780614][ T9012] ? vfs_getxattr_alloc+0xec/0x350 [ 255.780643][ T9012] ? ima_get_hash_algo+0x22d/0x400 [ 255.780666][ T9012] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 255.780692][ T9012] ? process_measurement+0xdfe/0x2350 [ 255.780706][ T9012] process_measurement+0xdfe/0x2350 [ 255.780726][ T9012] ? stack_trace_save+0x8e/0xc0 [ 255.780747][ T9012] ? __pfx_process_measurement+0x10/0x10 [ 255.780763][ T9012] ? __lock_acquire+0x4a5/0x2630 [ 255.780786][ T9012] ? __kasan_slab_alloc+0x89/0x90 [ 255.780801][ T9012] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 255.780823][ T9012] ? init_file+0x95/0x480 [ 255.780842][ T9012] ? alloc_empty_file+0x79/0x1c0 [ 255.780861][ T9012] ? alloc_file_pseudo+0x13a/0x230 [ 255.780881][ T9012] ? ksys_mmap_pgoff+0x242/0x610 [ 255.780898][ T9012] ? __x64_sys_mmap+0x125/0x190 [ 255.780912][ T9012] ? do_syscall_64+0x115/0x840 [ 255.780952][ T9012] ? __pfx_aa_file_perm+0x10/0x10 [ 255.780980][ T9012] ima_file_mmap+0x1c4/0x1f0 [ 255.780996][ T9012] ? __pfx_ima_file_mmap+0x10/0x10 [ 255.781016][ T9012] security_mmap_file+0x278/0x9b0 [ 255.781037][ T9012] vm_mmap_pgoff+0xec/0x470 [ 255.781058][ T9012] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 255.781075][ T9012] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 255.781098][ T9012] ? hugetlbfs_get_inode+0x3f5/0x700 [ 255.781125][ T9012] ksys_mmap_pgoff+0x285/0x610 [ 255.781144][ T9012] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 255.781162][ T9012] ? xfd_validate_state+0x129/0x190 [ 255.781180][ T9012] __x64_sys_mmap+0x125/0x190 [ 255.781198][ T9012] do_syscall_64+0x115/0x840 [ 255.781218][ T9012] ? clear_bhb_loop+0x40/0x90 [ 255.781236][ T9012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.781251][ T9012] RIP: 0033:0x7fe58a19ce59 [ 255.781265][ T9012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.781279][ T9012] RSP: 002b:00007fe58afc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 255.781294][ T9012] RAX: ffffffffffffffda RBX: 00007fe58a415fa0 RCX: 00007fe58a19ce59 [ 255.781304][ T9012] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 255.781314][ T9012] RBP: 00007fe58a232d6f R08: 0000000000000401 R09: 0000300000000000 [ 255.781323][ T9012] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 255.781332][ T9012] R13: 00007fe58a416038 R14: 00007fe58a415fa0 R15: 00007ffc33d424b8 [ 255.781352][ T9012] [ 256.608414][ T30] audit: type=1800 audit(1780116378.753:9): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.561" name="anon_hugepage" dev="hugetlbfs" ino=25994 res=0 errno=0 [ 257.898349][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 259.622567][ T9038] Process accounting resumed [ 259.675264][ T9089] netlink: 342 bytes leftover after parsing attributes in process `syz.3.577'. [ 259.675284][ T9089] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.675501][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.675583][ T9089] IPv6: NLM_F_CREATE should be set when creating new route [ 259.675600][ T9089] IPv6: NLM_F_CREATE should be set when creating new route [ 259.676099][ T9089] netlink: 342 bytes leftover after parsing attributes in process `syz.3.577'. [ 259.676143][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.676256][ T9089] netlink: 342 bytes leftover after parsing attributes in process `syz.3.577'. [ 259.676293][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.676411][ T9089] netlink: 342 bytes leftover after parsing attributes in process `syz.3.577'. [ 259.709425][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 259.709489][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.709614][ T9089] netlink: 342 bytes leftover after parsing attributes in process `syz.3.577'. [ 259.709652][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.709768][ T9089] netlink: 342 bytes leftover after parsing attributes in process `syz.3.577'. [ 259.709808][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.709918][ T9089] netlink: 342 bytes leftover after parsing attributes in process `syz.3.577'. [ 259.709965][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.710072][ T9089] netlink: 342 bytes leftover after parsing attributes in process `syz.3.577'. [ 259.710108][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.710241][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.710385][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.710516][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.710646][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.710786][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.710917][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.716959][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.717121][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.717257][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.717400][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.717536][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.717669][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.717802][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.717960][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.718092][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.718224][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.718364][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.718496][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.727162][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.727299][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.727439][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.727574][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.727709][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.727851][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.734525][ T9089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.315446][ T9115] FAULT_INJECTION: forcing a failure. [ 261.315446][ T9115] name failslab, interval 1, probability 0, space 0, times 0 [ 261.315476][ T9115] CPU: 0 UID: 0 PID: 9115 Comm: syz.4.583 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.315497][ T9115] Tainted: [L]=SOFTLOCKUP [ 261.315502][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.315512][ T9115] Call Trace: [ 261.315517][ T9115] [ 261.315522][ T9115] dump_stack_lvl+0x100/0x190 [ 261.315551][ T9115] should_fail_ex.cold+0x5/0xa [ 261.315571][ T9115] should_failslab+0xc2/0x120 [ 261.315589][ T9115] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 261.315611][ T9115] ? alloc_empty_file+0x5b/0x1c0 [ 261.315637][ T9115] alloc_empty_file+0x5b/0x1c0 [ 261.315659][ T9115] alloc_file_pseudo+0x13a/0x230 [ 261.315681][ T9115] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 261.315704][ T9115] ? hugetlbfs_get_inode+0x3f5/0x700 [ 261.315728][ T9115] hugetlb_file_setup+0x2a8/0x5b0 [ 261.315751][ T9115] ksys_mmap_pgoff+0x242/0x610 [ 261.315771][ T9115] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 261.315789][ T9115] ? xfd_validate_state+0x129/0x190 [ 261.315808][ T9115] __x64_sys_mmap+0x125/0x190 [ 261.315826][ T9115] do_syscall_64+0x115/0x840 [ 261.315846][ T9115] ? clear_bhb_loop+0x40/0x90 [ 261.315864][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.315879][ T9115] RIP: 0033:0x7fc48659ce59 [ 261.315892][ T9115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.315907][ T9115] RSP: 002b:00007fc4874ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 261.315921][ T9115] RAX: ffffffffffffffda RBX: 00007fc486815fa0 RCX: 00007fc48659ce59 [ 261.315931][ T9115] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 261.315940][ T9115] RBP: 00007fc486632d6f R08: 0000000000000401 R09: 0000300000000000 [ 261.315949][ T9115] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 261.315957][ T9115] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007ffc59970308 [ 261.315976][ T9115] [ 261.967720][ T9129] netlink: 'syz.3.587': attribute type 2 has an invalid length. [ 263.696991][ T9135] Process accounting resumed [ 264.595132][ T9185] FAULT_INJECTION: forcing a failure. [ 264.595132][ T9185] name failslab, interval 1, probability 0, space 0, times 0 [ 264.682269][ T9185] CPU: 0 UID: 0 PID: 9185 Comm: syz.1.598 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.682295][ T9185] Tainted: [L]=SOFTLOCKUP [ 264.682300][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.682310][ T9185] Call Trace: [ 264.682315][ T9185] [ 264.682321][ T9185] dump_stack_lvl+0x100/0x190 [ 264.682352][ T9185] should_fail_ex.cold+0x5/0xa [ 264.682372][ T9185] should_failslab+0xc2/0x120 [ 264.682391][ T9185] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 264.682406][ T9185] ? ima_collect_measurement+0x531/0xb30 [ 264.682428][ T9185] krealloc_node_align_noprof+0x321/0x3e0 [ 264.682446][ T9185] ima_collect_measurement+0x531/0xb30 [ 264.682468][ T9185] ? __pfx_ima_collect_measurement+0x10/0x10 [ 264.682497][ T9185] ? process_measurement+0x5ab/0x2350 [ 264.682512][ T9185] ? is_bad_inode+0xd/0x40 [ 264.682527][ T9185] ? xattr_resolve_name+0x27d/0x3f0 [ 264.682547][ T9185] ? vfs_getxattr_alloc+0xec/0x350 [ 264.682569][ T9185] ? ima_get_hash_algo+0x22d/0x400 [ 264.682590][ T9185] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 264.682616][ T9185] ? process_measurement+0xdfe/0x2350 [ 264.682631][ T9185] process_measurement+0xdfe/0x2350 [ 264.682650][ T9185] ? stack_trace_save+0x8e/0xc0 [ 264.682670][ T9185] ? __pfx_process_measurement+0x10/0x10 [ 264.682686][ T9185] ? __lock_acquire+0x4a5/0x2630 [ 264.682709][ T9185] ? __kasan_slab_alloc+0x89/0x90 [ 264.682724][ T9185] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 264.682747][ T9185] ? init_file+0x95/0x480 [ 264.682767][ T9185] ? alloc_empty_file+0x79/0x1c0 [ 264.682793][ T9185] ? alloc_file_pseudo+0x13a/0x230 [ 264.682814][ T9185] ? ksys_mmap_pgoff+0x242/0x610 [ 264.682831][ T9185] ? __x64_sys_mmap+0x125/0x190 [ 264.682846][ T9185] ? do_syscall_64+0x115/0x840 [ 264.682883][ T9185] ? __pfx_aa_file_perm+0x10/0x10 [ 264.682910][ T9185] ima_file_mmap+0x1c4/0x1f0 [ 264.682926][ T9185] ? __pfx_ima_file_mmap+0x10/0x10 [ 264.682946][ T9185] security_mmap_file+0x278/0x9b0 [ 264.682966][ T9185] vm_mmap_pgoff+0xec/0x470 [ 264.682987][ T9185] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 264.683004][ T9185] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 264.683026][ T9185] ? hugetlbfs_get_inode+0x3f5/0x700 [ 264.683053][ T9185] ksys_mmap_pgoff+0x285/0x610 [ 264.683073][ T9185] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 264.683091][ T9185] ? xfd_validate_state+0x129/0x190 [ 264.683109][ T9185] __x64_sys_mmap+0x125/0x190 [ 264.683127][ T9185] do_syscall_64+0x115/0x840 [ 264.683146][ T9185] ? clear_bhb_loop+0x40/0x90 [ 264.683164][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.683179][ T9185] RIP: 0033:0x7fe58a19ce59 [ 264.683192][ T9185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.683206][ T9185] RSP: 002b:00007fe58afc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 264.683221][ T9185] RAX: ffffffffffffffda RBX: 00007fe58a415fa0 RCX: 00007fe58a19ce59 [ 264.683232][ T9185] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 264.683241][ T9185] RBP: 00007fe58a232d6f R08: 0000000000000401 R09: 0000300000000000 [ 264.683250][ T9185] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 264.683259][ T9185] R13: 00007fe58a416038 R14: 00007fe58a415fa0 R15: 00007ffc33d424b8 [ 264.683280][ T9185] [ 265.363441][ T9182] random: crng reseeded on system resumption [ 266.080691][ T5851] netdevsim netdevsim1335 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.337075][ T30] audit: type=1800 audit(1780116388.593:10): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.598" name="anon_hugepage" dev="hugetlbfs" ino=27020 res=0 errno=0 [ 267.923977][ T9250] ubi0: attaching mtd0 [ 267.978923][ T9250] ubi0: scanning is finished [ 268.034331][ T9250] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 268.215018][ T9252] __nla_validate_parse: 25 callbacks suppressed [ 268.215032][ T9252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.607'. [ 268.520287][ T9250] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 268.916977][ T9270] overlayfs: "check_copy_up" module option is obsolete [ 269.495435][ T9284] netlink: 5 bytes leftover after parsing attributes in process `syz.3.616'. [ 271.144683][ T30] audit: type=1800 audit(1780116393.393:11): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.622" name="members" dev="configfs" ino=27946 res=0 errno=0 [ 271.516642][ T9312] netlink: 'syz.4.622': attribute type 2 has an invalid length. [ 271.623986][ T9312] netlink: 5 bytes leftover after parsing attributes in process `syz.4.622'. syzkaller syzkaller login: [ 274.650442][ T9391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.636'. [ 274.757276][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.801450][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.852986][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.905548][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.119942][ T9412] NFSD: Failed to start, no listeners configured. [ 276.379977][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.645'. [ 276.930109][ T9446] netlink: 342 bytes leftover after parsing attributes in process `syz.1.649'. [ 277.187437][ T9436] random: crng reseeded on system resumption [ 278.123718][ T9475] ubi0: attaching mtd0 [ 278.156889][ T9475] ubi0: scanning is finished [ 278.171707][ T9475] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 278.300740][ T9475] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 278.498716][ T9487] ubi0: attaching mtd0 [ 278.588164][ T9487] ubi0: scanning is finished [ 278.710963][ T9487] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 279.245225][ T9495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.658'. [ 279.367451][ T9487] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 279.519152][ T9508] ubi0: attaching mtd0 [ 279.574828][ T9508] ubi0: scanning is finished [ 279.625235][ T9508] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 279.975915][ T9508] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 280.702850][ T9525] FAULT_INJECTION: forcing a failure. [ 280.702850][ T9525] name failslab, interval 1, probability 0, space 0, times 0 [ 280.824536][ T9525] CPU: 0 UID: 0 PID: 9525 Comm: syz.2.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.824562][ T9525] Tainted: [L]=SOFTLOCKUP [ 280.824568][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.824577][ T9525] Call Trace: [ 280.824583][ T9525] [ 280.824589][ T9525] dump_stack_lvl+0x100/0x190 [ 280.824619][ T9525] should_fail_ex.cold+0x5/0xa [ 280.824639][ T9525] should_failslab+0xc2/0x120 [ 280.824660][ T9525] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 280.824685][ T9525] ? __d_alloc+0x34/0xa40 [ 280.824708][ T9525] __d_alloc+0x34/0xa40 [ 280.824730][ T9525] d_alloc_pseudo+0x1c/0xc0 [ 280.824744][ T9525] alloc_file_pseudo+0xcf/0x230 [ 280.824767][ T9525] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 280.824789][ T9525] ? hugetlbfs_get_inode+0x3f5/0x700 [ 280.824813][ T9525] hugetlb_file_setup+0x2a8/0x5b0 [ 280.824836][ T9525] ksys_mmap_pgoff+0x242/0x610 [ 280.824856][ T9525] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 280.824873][ T9525] ? xfd_validate_state+0x129/0x190 [ 280.824892][ T9525] __x64_sys_mmap+0x125/0x190 [ 280.824909][ T9525] do_syscall_64+0x115/0x840 [ 280.824930][ T9525] ? clear_bhb_loop+0x40/0x90 [ 280.824948][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.824963][ T9525] RIP: 0033:0x7f53e5b9ce59 [ 280.824976][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.824991][ T9525] RSP: 002b:00007f53e6a72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 280.825006][ T9525] RAX: ffffffffffffffda RBX: 00007f53e5e15fa0 RCX: 00007f53e5b9ce59 [ 280.825016][ T9525] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 280.825024][ T9525] RBP: 00007f53e5c32d6f R08: 0000000000000401 R09: 0000300000000000 [ 280.825034][ T9525] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 280.825043][ T9525] R13: 00007f53e5e16038 R14: 00007f53e5e15fa0 R15: 00007fff58913628 [ 280.825062][ T9525] [ 284.475819][ T9627] FAULT_INJECTION: forcing a failure. [ 284.475819][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 284.544486][ T9627] CPU: 0 UID: 0 PID: 9627 Comm: syz.4.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.544513][ T9627] Tainted: [L]=SOFTLOCKUP [ 284.544518][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.544527][ T9627] Call Trace: [ 284.544533][ T9627] [ 284.544539][ T9627] dump_stack_lvl+0x100/0x190 [ 284.544572][ T9627] should_fail_ex.cold+0x5/0xa [ 284.544591][ T9627] should_failslab+0xc2/0x120 [ 284.544610][ T9627] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 284.544633][ T9627] ? security_file_alloc+0x34/0x2c0 [ 284.544653][ T9627] ? trace_kmem_cache_alloc+0xd5/0x100 [ 284.544673][ T9627] security_file_alloc+0x34/0x2c0 [ 284.544693][ T9627] init_file+0x95/0x480 [ 284.544721][ T9627] alloc_empty_file+0x79/0x1c0 [ 284.544743][ T9627] alloc_file_pseudo+0x13a/0x230 [ 284.544767][ T9627] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 284.544790][ T9627] ? hugetlbfs_get_inode+0x3f5/0x700 [ 284.544814][ T9627] hugetlb_file_setup+0x2a8/0x5b0 [ 284.544837][ T9627] ksys_mmap_pgoff+0x242/0x610 [ 284.544858][ T9627] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 284.544875][ T9627] ? xfd_validate_state+0x129/0x190 [ 284.544894][ T9627] __x64_sys_mmap+0x125/0x190 [ 284.544911][ T9627] do_syscall_64+0x115/0x840 [ 284.544931][ T9627] ? clear_bhb_loop+0x40/0x90 [ 284.544949][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.544964][ T9627] RIP: 0033:0x7fc48659ce59 [ 284.544977][ T9627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.544992][ T9627] RSP: 002b:00007fc4874ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 284.545006][ T9627] RAX: ffffffffffffffda RBX: 00007fc486815fa0 RCX: 00007fc48659ce59 [ 284.545017][ T9627] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 284.545025][ T9627] RBP: 00007fc486632d6f R08: 0000000000000401 R09: 0000300000000000 [ 284.545034][ T9627] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 284.545043][ T9627] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007ffc59970308 [ 284.545062][ T9627] [ 285.390853][ T9637] bond0: invalid ARP target specified [ 285.445942][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 285.496911][ T9637] nbd: socks must be embedded in a SOCK_ITEM attr [ 285.523560][ T9637] block nbd0: shutting down sockets [ 285.576848][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.678'. [ 287.521674][ T9669] FAULT_INJECTION: forcing a failure. [ 287.521674][ T9669] name failslab, interval 1, probability 0, space 0, times 0 [ 287.739848][ T9669] CPU: 0 UID: 0 PID: 9669 Comm: syz.1.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.739876][ T9669] Tainted: [L]=SOFTLOCKUP [ 287.739882][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.739891][ T9669] Call Trace: [ 287.739896][ T9669] [ 287.739903][ T9669] dump_stack_lvl+0x100/0x190 [ 287.739933][ T9669] should_fail_ex.cold+0x5/0xa [ 287.739954][ T9669] should_failslab+0xc2/0x120 [ 287.739972][ T9669] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 287.739988][ T9669] ? register_pidns_sysctls+0x48/0x1c0 [ 287.740011][ T9669] ? rcu_is_watching+0x12/0xc0 [ 287.740031][ T9669] kmemdup_noprof+0x29/0x60 [ 287.740047][ T9669] register_pidns_sysctls+0x48/0x1c0 [ 287.740069][ T9669] ? __ns_common_init+0x299/0x4b0 [ 287.740098][ T9669] copy_pid_ns+0x680/0x10a0 [ 287.740123][ T9669] ? __pfx_copy_pid_ns+0x10/0x10 [ 287.740147][ T9669] ? __pfx_copy_mnt_ns+0x10/0x10 [ 287.740170][ T9669] ? create_new_namespaces+0x30/0xac0 [ 287.740191][ T9669] create_new_namespaces+0x2aa/0xac0 [ 287.740213][ T9669] unshare_nsproxy_namespaces+0xf2/0x220 [ 287.740233][ T9669] ksys_unshare+0x438/0xab0 [ 287.740254][ T9669] ? __pfx_ksys_unshare+0x10/0x10 [ 287.740274][ T9669] ? xfd_validate_state+0x129/0x190 [ 287.740287][ T9669] ? ksys_write+0x1ac/0x250 [ 287.740310][ T9669] __x64_sys_unshare+0x31/0x40 [ 287.740330][ T9669] do_syscall_64+0x115/0x840 [ 287.740350][ T9669] ? clear_bhb_loop+0x40/0x90 [ 287.740368][ T9669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.740383][ T9669] RIP: 0033:0x7fe58a19ce59 [ 287.740396][ T9669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.740410][ T9669] RSP: 002b:00007fe58afc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 287.740425][ T9669] RAX: ffffffffffffffda RBX: 00007fe58a415fa0 RCX: 00007fe58a19ce59 [ 287.740435][ T9669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 287.740444][ T9669] RBP: 00007fe58a232d6f R08: 0000000000000000 R09: 0000000000000000 [ 287.740453][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.740461][ T9669] R13: 00007fe58a416038 R14: 00007fe58a415fa0 R15: 00007ffc33d424b8 [ 287.740480][ T9669] [ 288.815195][ T9693] FAULT_INJECTION: forcing a failure. [ 288.815195][ T9693] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.896653][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.4.691 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.896679][ T9693] Tainted: [L]=SOFTLOCKUP [ 288.896685][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.896694][ T9693] Call Trace: [ 288.896699][ T9693] [ 288.896705][ T9693] dump_stack_lvl+0x100/0x190 [ 288.896735][ T9693] should_fail_ex.cold+0x5/0xa [ 288.896752][ T9693] ? prepare_alloc_pages+0x16d/0x5f0 [ 288.896773][ T9693] should_fail_alloc_page+0xeb/0x140 [ 288.896792][ T9693] prepare_alloc_pages+0x1f0/0x5f0 [ 288.896817][ T9693] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 288.896842][ T9693] ? rcu_is_watching+0x12/0xc0 [ 288.896862][ T9693] ? __lock_acquire+0x4a5/0x2630 [ 288.896888][ T9693] ? __lock_acquire+0x4a5/0x2630 [ 288.896909][ T9693] ? __css_rstat_updated+0x1ce/0x5a0 [ 288.896932][ T9693] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 288.896958][ T9693] ? do_raw_spin_lock+0x128/0x260 [ 288.896981][ T9693] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 288.896998][ T9693] ? find_held_lock+0x2b/0x80 [ 288.897022][ T9693] ? __lock_acquire+0x4a5/0x2630 [ 288.897045][ T9693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 288.897068][ T9693] ? policy_nodemask+0xed/0x4f0 [ 288.897088][ T9693] alloc_pages_mpol+0x1fb/0x540 [ 288.897106][ T9693] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 288.897124][ T9693] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 288.897144][ T9693] folio_alloc_mpol_noprof+0x36/0x260 [ 288.897165][ T9693] shmem_alloc_folio+0x135/0x160 [ 288.897187][ T9693] shmem_alloc_and_add_folio+0x371/0xd40 [ 288.897215][ T9693] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 288.897240][ T9693] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 288.897259][ T9693] shmem_get_folio_gfp+0x6ab/0x1900 [ 288.897278][ T9693] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 288.897294][ T9693] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 288.897309][ T9693] ? lockdep_hardirqs_on+0x78/0x100 [ 288.897333][ T9693] shmem_fault+0x1f9/0xa20 [ 288.897347][ T9693] ? __lock_acquire+0x4a5/0x2630 [ 288.897370][ T9693] ? __pfx_shmem_fault+0x10/0x10 [ 288.897386][ T9693] ? __up_read+0x2c1/0x6e0 [ 288.897410][ T9693] ? __pfx_filemap_map_pages+0x10/0x10 [ 288.897433][ T9693] __do_fault+0x10b/0x440 [ 288.897448][ T9693] ? find_held_lock+0x2b/0x80 [ 288.897467][ T9693] do_fault+0x2db/0x1750 [ 288.897488][ T9693] __handle_mm_fault+0x187d/0x2a00 [ 288.897513][ T9693] ? mt_find+0x45e/0x8e0 [ 288.897535][ T9693] ? __pfx___handle_mm_fault+0x10/0x10 [ 288.897555][ T9693] ? __pfx_mt_find+0x10/0x10 [ 288.897587][ T9693] ? find_vma+0xbf/0x140 [ 288.897602][ T9693] ? __pfx_find_vma+0x10/0x10 [ 288.897620][ T9693] handle_mm_fault+0x37b/0xa30 [ 288.897646][ T9693] do_user_addr_fault+0x74c/0x12f0 [ 288.897666][ T9693] ? trace_page_fault_kernel+0x7a/0x200 [ 288.897684][ T9693] exc_page_fault+0x6f/0xd0 [ 288.897704][ T9693] asm_exc_page_fault+0x26/0x30 [ 288.897719][ T9693] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 288.897736][ T9693] Code: 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 288.897750][ T9693] RSP: 0018:ffffc900050676e0 EFLAGS: 00050206 [ 288.897763][ T9693] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000ffd [ 288.897773][ T9693] RDX: 0000000000000001 RSI: ffff88802d64e003 RDI: 000000000000b000 [ 288.897782][ T9693] RBP: ffffc90005067d10 R08: 0000000000000000 R09: ffffed1005ac9dff [ 288.897791][ T9693] R10: ffff88802d64efff R11: 0000000000000000 R12: ffff88802d64e000 [ 288.897800][ T9693] R13: 000000000000affd R14: 000000000000affd R15: 0000000000001000 [ 288.897818][ T9693] _copy_to_iter+0x4c5/0x1720 [ 288.897843][ T9693] ? __pfx__copy_to_iter+0x10/0x10 [ 288.897863][ T9693] ? __pfx_debug_object_activate+0x10/0x10 [ 288.897884][ T9693] ? folio_mark_accessed+0xf3/0x1040 [ 288.897901][ T9693] ? __pfx_folio_mark_accessed+0x10/0x10 [ 288.897921][ T9693] copy_page_to_iter+0x285/0x370 [ 288.897943][ T9693] filemap_read+0x7a9/0x10a0 [ 288.897973][ T9693] ? __pfx_filemap_read+0x10/0x10 [ 288.898003][ T9693] ? __pfx_down_read+0x10/0x10 [ 288.898018][ T9693] ? futex_unqueue+0x133/0x2c0 [ 288.898033][ T9693] ? __pfx_aa_file_perm+0x10/0x10 [ 288.898058][ T9693] blkdev_read_iter+0x2c4/0x4f0 [ 288.898086][ T9693] do_iter_readv_writev+0x60d/0x920 [ 288.898103][ T9693] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 288.898122][ T9693] ? bpf_lsm_file_permission+0x9/0x10 [ 288.898136][ T9693] ? security_file_permission+0x76/0x210 [ 288.898156][ T9693] ? rw_verify_area+0xce/0x6d0 [ 288.898172][ T9693] vfs_readv+0x4d3/0x8d0 [ 288.898193][ T9693] ? __pfx_vfs_readv+0x10/0x10 [ 288.898207][ T9693] ? __pfx_futex_wait+0x10/0x10 [ 288.898239][ T9693] ? __fget_files+0x21f/0x3d0 [ 288.898260][ T9693] ? do_preadv+0x1ac/0x270 [ 288.898275][ T9693] do_preadv+0x1ac/0x270 [ 288.898291][ T9693] ? __pfx_do_preadv+0x10/0x10 [ 288.898307][ T9693] ? exit_to_user_mode_loop+0xf3/0x670 [ 288.898333][ T9693] __x64_sys_preadv2+0xef/0x160 [ 288.898353][ T9693] do_syscall_64+0x115/0x840 [ 288.898373][ T9693] ? clear_bhb_loop+0x40/0x90 [ 288.898391][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.898406][ T9693] RIP: 0033:0x7fc48659ce59 [ 288.898419][ T9693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.898433][ T9693] RSP: 002b:00007fc4874ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 288.898447][ T9693] RAX: ffffffffffffffda RBX: 00007fc486815fa0 RCX: 00007fc48659ce59 [ 288.898456][ T9693] RDX: 0000000000000006 RSI: 0000200000000180 RDI: 0000000000000004 [ 288.898465][ T9693] RBP: 00007fc486632d6f R08: 0000000000000005 R09: 000000000000002e [ 288.898474][ T9693] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 288.898483][ T9693] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007ffc59970308 [ 288.898503][ T9693] [ 289.659955][ T9703] __vm_enough_memory: pid: 9703, comm: syz.2.693, bytes: 4398046457856 not enough memory for the allocation [ 290.333341][ T9711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.695'. [ 290.398264][ T9711] hsr_slave_0: left promiscuous mode [ 290.420911][ T9711] hsr_slave_1: left promiscuous mode [ 291.438961][ T9498] Process accounting paused [ 292.345346][ T9737] vhci_hcd vhci_hcd.0: invalid port number 16 [ 293.704106][ T9749] Process accounting paused [ 294.020093][ T30] audit: type=1800 audit(1780116416.273:12): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.708" name="#525" dev="tmpfs" ino=525 res=0 errno=0 [ 294.306038][ T9774] bridge0: port 3(dummy0) entered blocking state [ 294.337790][ T9774] bridge0: port 3(dummy0) entered disabled state [ 294.396111][ T9774] dummy0: entered allmulticast mode [ 294.455220][ T9774] dummy0: entered promiscuous mode [ 294.502110][ T9774] bridge0: port 3(dummy0) entered blocking state [ 294.509420][ T9774] bridge0: port 3(dummy0) entered listening state [ 295.298963][ T9795] hub 1-0:1.0: USB hub found [ 295.336143][ T9795] hub 1-0:1.0: 1 port detected [ 296.029091][ T9815] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 297.887328][ T9840] vivid-007: ================= START STATUS ================= [ 297.956666][ T9840] vivid-007: Generate PTS: true [ 297.984026][ T9840] vivid-007: Generate SCR: true [ 298.000575][ T9840] tpg source WxH: 320x240 (Y'CbCr) [ 298.016294][ T9840] tpg field: 1 [ 298.034863][ T9840] tpg crop: (0,0)/320x240 [ 298.062058][ T9840] tpg compose: (0,0)/320x240 [ 298.111928][ T9840] tpg colorspace: 8 [ 298.125626][ T9851] random: crng reseeded on system resumption [ 298.143795][ T9840] tpg transfer function: 0/0 [ 298.176150][ T9840] tpg Y'CbCr encoding: 0/0 [ 298.205959][ T9840] tpg quantization: 0/0 [ 298.247017][ T9840] tpg RGB range: 0/2 [ 298.312081][ T9840] vivid-007: ================== END STATUS ================== [ 298.661273][ T30] audit: type=1800 audit(1780116420.913:13): pid=9868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.723" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 299.120549][ T9879] FAULT_INJECTION: forcing a failure. [ 299.120549][ T9879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 299.212750][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.1.726 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.212775][ T9879] Tainted: [L]=SOFTLOCKUP [ 299.212780][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.212789][ T9879] Call Trace: [ 299.212795][ T9879] [ 299.212801][ T9879] dump_stack_lvl+0x100/0x190 [ 299.212829][ T9879] should_fail_ex.cold+0x5/0xa [ 299.212847][ T9879] ? prepare_alloc_pages+0x16d/0x5f0 [ 299.212867][ T9879] should_fail_alloc_page+0xeb/0x140 [ 299.212887][ T9879] prepare_alloc_pages+0x1f0/0x5f0 [ 299.212905][ T9879] ? kernel_text_address+0x8d/0x100 [ 299.212922][ T9879] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 299.212954][ T9879] ? copy_splice_read+0x1a3/0xb90 [ 299.212972][ T9879] ? stack_trace_save+0x8e/0xc0 [ 299.212991][ T9879] ? __pfx_stack_trace_save+0x10/0x10 [ 299.213011][ T9879] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 299.213040][ T9879] ? copy_splice_read+0x1a3/0xb90 [ 299.213057][ T9879] ? kasan_save_stack+0x3f/0x50 [ 299.213071][ T9879] ? kasan_save_stack+0x30/0x50 [ 299.213085][ T9879] ? kasan_save_track+0x14/0x30 [ 299.213099][ T9879] ? __kasan_kmalloc+0xaa/0xb0 [ 299.213112][ T9879] ? __kmalloc_noprof+0x301/0x850 [ 299.213125][ T9879] ? copy_splice_read+0x1a3/0xb90 [ 299.213144][ T9879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.213169][ T9879] alloc_pages_bulk_noprof+0x649/0x1360 [ 299.213200][ T9879] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 299.213230][ T9879] ? __kmalloc_noprof+0x320/0x850 [ 299.213254][ T9879] copy_splice_read+0x1e1/0xb90 [ 299.213273][ T9879] ? pipe_lock+0x69/0x80 [ 299.213293][ T9879] ? __pfx_copy_splice_read+0x10/0x10 [ 299.213319][ T9879] ? __fget_files+0x215/0x3d0 [ 299.213338][ T9879] ? __pfx_copy_splice_read+0x10/0x10 [ 299.213356][ T9879] do_splice_read+0x285/0x370 [ 299.213377][ T9879] splice_file_to_pipe+0x82/0x120 [ 299.213398][ T9879] do_sendfile+0x366/0xe20 [ 299.213418][ T9879] ? __pfx_do_sendfile+0x10/0x10 [ 299.213434][ T9879] ? __fget_files+0x21f/0x3d0 [ 299.213456][ T9879] __x64_sys_sendfile64+0x1d8/0x220 [ 299.213475][ T9879] ? ksys_write+0x1ac/0x250 [ 299.213491][ T9879] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 299.213513][ T9879] ? rcu_is_watching+0x12/0xc0 [ 299.213532][ T9879] do_syscall_64+0x115/0x840 [ 299.213553][ T9879] ? clear_bhb_loop+0x40/0x90 [ 299.213571][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.213586][ T9879] RIP: 0033:0x7fe58a19ce59 [ 299.213598][ T9879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.213612][ T9879] RSP: 002b:00007fe58afc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 299.213627][ T9879] RAX: ffffffffffffffda RBX: 00007fe58a415fa0 RCX: 00007fe58a19ce59 [ 299.213637][ T9879] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 299.213645][ T9879] RBP: 00007fe58afc8090 R08: 0000000000000000 R09: 0000000000000000 [ 299.213654][ T9879] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 299.213662][ T9879] R13: 00007fe58a416038 R14: 00007fe58a415fa0 R15: 00007ffc33d424b8 [ 299.213682][ T9879] [ 301.776342][ T9919] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 301.871255][ T9930] netlink: 'syz.4.736': attribute type 2 has an invalid length. [ 301.968669][ T9930] netlink: 'syz.4.736': attribute type 3 has an invalid length. [ 301.997482][ T9930] netlink: 'syz.4.736': attribute type 2 has an invalid length. [ 302.028624][ T9930] netlink: 'syz.4.736': attribute type 2 has an invalid length. [ 302.065353][ T9930] netlink: 'syz.4.736': attribute type 3 has an invalid length. [ 302.090998][ T9930] netlink: 86 bytes leftover after parsing attributes in process `syz.4.736'. [ 302.863788][ T9956] smc: net device dummy0 applied user defined pnetid DU [ 303.286542][ T9962] cgroup: fork rejected by pids controller in /syz2 [ 303.952413][ T9960] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780000e0 pfn:0x78000 [ 304.102208][ T9960] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 304.169756][ T9960] raw: 00fff00000000000 dead000000000040 ffff888029aef000 0000000000000000 [ 304.269759][ T9960] raw: ffff8880780000e0 0000000000000001 00000001ffffffff 0000000000000000 [ 304.354086][ T9960] page dumped because: unmovable page [ 304.404892][ T9960] page_owner tracks the page as allocated [ 304.457504][ T9960] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5299, tgid 5299 (dhcpcd), ts 52480360034, free_ts 47757929603 [ 304.606411][ T9960] post_alloc_hook+0xfd/0x120 [ 304.646760][ T9960] get_page_from_freelist+0x11a6/0x3410 [ 304.696983][ T9960] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 304.755306][ T9960] alloc_pages_bulk_noprof+0x649/0x1360 [ 304.808798][ T9960] __page_pool_alloc_netmems_slow+0x1c6/0xa60 [ 304.876284][ T9960] page_pool_alloc_netmems+0xc4/0x1a0 [ 304.927414][ T9960] page_pool_alloc_frag_netmem+0x21d/0xa00 [ 304.981784][ T9960] try_fill_recv+0x909/0x2950 [ 305.031499][ T9960] virtnet_open+0x2d5/0x9a0 [ 305.091637][ T9960] __dev_open+0x3ad/0x8f0 [ 305.125394][ T9960] __dev_change_flags+0x596/0x850 [ 305.172801][ T9960] netif_change_flags+0x8d/0x160 [ 305.224744][ T9960] dev_change_flags+0xba/0x260 [ 305.277376][ T9960] devinet_ioctl+0x110b/0x1f10 [ 305.326037][ T9960] inet_ioctl+0x3aa/0x3f0 [ 305.369377][ T9960] sock_do_ioctl+0x118/0x280 [ 305.425963][ T9960] page last free pid 5016 tgid 5016 stack trace: [ 305.501836][ T9960] __free_frozen_pages+0x794/0x10a0 [ 305.568935][ T9960] qlist_free_all+0x47/0xf0 [ 305.621579][ T9960] kasan_quarantine_reduce+0x1a0/0x1f0 [ 305.671935][ T9960] __kasan_slab_alloc+0x69/0x90 [ 305.718610][ T9960] __kvmalloc_node_noprof+0x316/0xa00 [ 305.766870][ T9960] seq_read_iter+0x819/0x1270 [ 305.786641][ T9960] kernfs_fop_read_iter+0x46c/0x610 [ 305.819044][ T9960] vfs_read+0x825/0xb30 [ 305.853902][ T9960] ksys_read+0x12a/0x250 [ 305.884361][ T9960] do_syscall_64+0x115/0x840 [ 305.918657][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.370387][T10178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.752'. [ 306.459367][T10178] nbd: must specify at least one socket [ 306.865086][ T5654] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 306.893623][T10183] vivid-008: ================= START STATUS ================= [ 306.986221][T10183] vivid-008: ================== END STATUS ================== [ 307.521077][ T30] audit: type=1800 audit(1780116429.773:14): pid=10199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.754" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 307.573321][T10200] netlink: 342 bytes leftover after parsing attributes in process `syz.4.755'. [ 308.651090][ T5654] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 308.651114][ T5654] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 308.896162][ T5649] Bluetooth: hci0: command 0x0c1a tx timeout [ 309.452759][T10235] futex_wake_op: syz.1.761 tries to shift op by -2048; fix this program [ 309.726360][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 310.015388][ C0] bridge0: port 3(dummy0) entered learning state [ 310.887701][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.769'. [ 310.974870][T10264] Bluetooth: hci0: command 0x0c1a tx timeout [ 311.718126][T10301] random: crng reseeded on system resumption [ 312.324622][T10264] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 314.002312][T10339] capability: warning: `syz.4.781' uses deprecated v2 capabilities in a way that may be insecure [ 314.413616][T10319] Bluetooth: hci4: command 0x0c1a tx timeout [ 315.756108][T10380] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780000e0 pfn:0x78000 [ 315.827368][T10380] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 315.880903][T10380] raw: 00fff00000000000 dead000000000040 ffff888029aef000 0000000000000000 [ 315.933895][T10380] raw: ffff8880780000e0 0000000000000001 00000001ffffffff 0000000000000000 [ 315.980803][T10380] page dumped because: unmovable page [ 316.012226][T10380] page_owner tracks the page as allocated [ 316.043340][T10380] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5299, tgid 5299 (dhcpcd), ts 52480360034, free_ts 47757929603 [ 316.127319][T10380] post_alloc_hook+0xfd/0x120 [ 316.161309][T10380] get_page_from_freelist+0x11a6/0x3410 [ 316.216507][T10380] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 316.252915][T10380] alloc_pages_bulk_noprof+0x649/0x1360 [ 316.286744][T10380] __page_pool_alloc_netmems_slow+0x1c6/0xa60 [ 316.317730][T10380] page_pool_alloc_netmems+0xc4/0x1a0 [ 316.339882][T10380] page_pool_alloc_frag_netmem+0x21d/0xa00 [ 316.368588][T10380] try_fill_recv+0x909/0x2950 [ 316.385544][T10380] virtnet_open+0x2d5/0x9a0 [ 316.403230][T10380] __dev_open+0x3ad/0x8f0 [ 316.415265][T10380] __dev_change_flags+0x596/0x850 [ 316.433327][T10380] netif_change_flags+0x8d/0x160 [ 316.443902][T10380] dev_change_flags+0xba/0x260 [ 316.455245][T10380] devinet_ioctl+0x110b/0x1f10 [ 316.465892][T10380] inet_ioctl+0x3aa/0x3f0 [ 316.482637][T10380] sock_do_ioctl+0x118/0x280 [ 316.494695][T10319] Bluetooth: hci4: command 0x0c1a tx timeout [ 316.505665][T10380] page last free pid 5016 tgid 5016 stack trace: [ 316.524750][T10380] __free_frozen_pages+0x794/0x10a0 [ 316.538253][T10380] qlist_free_all+0x47/0xf0 [ 316.548566][T10380] kasan_quarantine_reduce+0x1a0/0x1f0 [ 316.559900][T10380] __kasan_slab_alloc+0x69/0x90 [ 316.577395][T10380] __kvmalloc_node_noprof+0x316/0xa00 [ 316.590580][T10380] seq_read_iter+0x819/0x1270 [ 316.601958][T10380] kernfs_fop_read_iter+0x46c/0x610 [ 316.613224][T10380] vfs_read+0x825/0xb30 [ 316.622099][T10380] ksys_read+0x12a/0x250 [ 316.632608][T10380] do_syscall_64+0x115/0x840 [ 316.649297][T10380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.062397][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.072842][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.693019][T10417] bridge0: port 3(team0) entered blocking state [ 317.727069][T10417] bridge0: port 3(team0) entered disabled state [ 317.749772][T10417] team0: entered allmulticast mode [ 317.771434][T10417] team_slave_0: entered allmulticast mode [ 317.800912][T10417] team_slave_1: entered allmulticast mode [ 317.838900][T10417] team0: entered promiscuous mode [ 317.860806][T10417] team_slave_0: entered promiscuous mode [ 317.885147][T10417] team_slave_1: entered promiscuous mode [ 317.915123][T10417] bridge0: port 3(team0) entered blocking state [ 317.921503][T10417] bridge0: port 3(team0) entered forwarding state [ 318.378774][T10429] netlink: 338 bytes leftover after parsing attributes in process `syz.1.799'. [ 321.757844][T10469] Process accounting resumed [ 322.260610][ T30] audit: type=1800 audit(1780116444.513:15): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.812" name=04 dev="tmpfs" ino=700 res=0 errno=0 [ 322.297424][T10496] FAULT_INJECTION: forcing a failure. [ 322.297424][T10496] name failslab, interval 1, probability 0, space 0, times 0 [ 322.337956][T10496] CPU: 0 UID: 0 PID: 10496 Comm: syz.1.813 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.337981][T10496] Tainted: [L]=SOFTLOCKUP [ 322.337987][T10496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.337996][T10496] Call Trace: [ 322.338002][T10496] [ 322.338008][T10496] dump_stack_lvl+0x100/0x190 [ 322.338038][T10496] should_fail_ex.cold+0x5/0xa [ 322.338058][T10496] ? tomoyo_realpath_from_path+0xb6/0x690 [ 322.338079][T10496] should_failslab+0xc2/0x120 [ 322.338097][T10496] __kmalloc_noprof+0xe0/0x850 [ 322.338111][T10496] ? kfree+0x1dd/0x6c0 [ 322.338134][T10496] tomoyo_realpath_from_path+0xb6/0x690 [ 322.338159][T10496] tomoyo_path_number_perm+0x23c/0x580 [ 322.338177][T10496] ? tomoyo_path_number_perm+0x22e/0x580 [ 322.338196][T10496] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 322.338213][T10496] ? futex_wait+0x11e/0x370 [ 322.338249][T10496] ? find_held_lock+0x2b/0x80 [ 322.338267][T10496] ? __fget_files+0x215/0x3d0 [ 322.338283][T10496] ? hook_file_ioctl_common+0x149/0x410 [ 322.338301][T10496] ? __fget_files+0x215/0x3d0 [ 322.338321][T10496] ? __fget_files+0x21f/0x3d0 [ 322.338341][T10496] security_file_ioctl+0xd3/0x230 [ 322.338360][T10496] __x64_sys_ioctl+0xb7/0x210 [ 322.338377][T10496] do_syscall_64+0x115/0x840 [ 322.338397][T10496] ? clear_bhb_loop+0x40/0x90 [ 322.338416][T10496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.338431][T10496] RIP: 0033:0x7fe58a19ce59 [ 322.338445][T10496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.338462][T10496] RSP: 002b:00007fe58afa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.338478][T10496] RAX: ffffffffffffffda RBX: 00007fe58a416090 RCX: 00007fe58a19ce59 [ 322.338488][T10496] RDX: 0000000000000000 RSI: 0000000040047440 RDI: 0000000000000008 [ 322.338497][T10496] RBP: 00007fe58a232d6f R08: 0000000000000000 R09: 0000000000000000 [ 322.338506][T10496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.338515][T10496] R13: 00007fe58a416128 R14: 00007fe58a416090 R15: 00007ffc33d424b8 [ 322.338535][T10496] [ 322.339000][T10496] ERROR: Out of memory at tomoyo_realpath_from_path. [ 323.734534][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'. [ 323.801083][ T30] audit: type=1800 audit(1780116446.053:16): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.818" name="lu_gp_id" dev="configfs" ino=33634 res=0 errno=0 [ 323.830427][T10533] kstrtoul() returned -22 for lu_gp_id [ 325.056973][T10531] Process accounting resumed [ 325.297886][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 325.373138][ C0] bridge0: port 3(dummy0) entered forwarding state [ 325.379706][ C0] bridge0: topology change detected, propagating [ 325.838795][T10584] netlink: 330 bytes leftover after parsing attributes in process `syz.2.827'. [ 329.416942][T10656] program syz.1.842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.002907][T10692] netlink: 338 bytes leftover after parsing attributes in process `syz.3.848'. [ 332.537701][T10712] sd 0:0:1:0: PR command failed: 1026 [ 332.584083][T10712] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 332.651014][T10712] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 334.901034][T10758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.862'. [ 335.055018][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 335.272983][T10775] netlink: 330 bytes leftover after parsing attributes in process `syz.2.866'. [ 336.770980][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 336.938435][T10804] FAULT_INJECTION: forcing a failure. [ 336.938435][T10804] name failslab, interval 1, probability 0, space 0, times 0 [ 337.011349][T10804] CPU: 0 UID: 0 PID: 10804 Comm: syz.4.873 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.011375][T10804] Tainted: [L]=SOFTLOCKUP [ 337.011381][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.011390][T10804] Call Trace: [ 337.011395][T10804] [ 337.011401][T10804] dump_stack_lvl+0x100/0x190 [ 337.011439][T10804] should_fail_ex.cold+0x5/0xa [ 337.011459][T10804] should_failslab+0xc2/0x120 [ 337.011477][T10804] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 337.011500][T10804] ? __proc_create+0x2cb/0x8c0 [ 337.011523][T10804] __proc_create+0x2cb/0x8c0 [ 337.011542][T10804] ? __pfx___proc_create+0x10/0x10 [ 337.011560][T10804] ? proc_register+0x554/0x8a0 [ 337.011581][T10804] ? _raw_write_unlock+0x28/0x50 [ 337.011604][T10804] proc_create_reg+0x75/0x170 [ 337.011625][T10804] proc_create_net_data+0x8e/0x1c0 [ 337.011645][T10804] ? __pfx_proc_create_net_data+0x10/0x10 [ 337.011665][T10804] ? __pfx_proc_create_net_data+0x10/0x10 [ 337.011684][T10804] ? __pfx_uevent_net_rcv+0x10/0x10 [ 337.011704][T10804] ? __pfx_dev_proc_net_init+0x10/0x10 [ 337.011719][T10804] dev_proc_net_init+0x5e/0x230 [ 337.011735][T10804] ops_init+0x1e2/0x5f0 [ 337.011755][T10804] setup_net+0x118/0x3a0 [ 337.011772][T10804] ? __pfx_setup_net+0x10/0x10 [ 337.011788][T10804] ? mutex_init_lockdep+0xf1/0x120 [ 337.011807][T10804] copy_net_ns+0x46f/0x7c0 [ 337.011826][T10804] create_new_namespaces+0x3ea/0xac0 [ 337.011849][T10804] unshare_nsproxy_namespaces+0xf2/0x220 [ 337.011869][T10804] ksys_unshare+0x438/0xab0 [ 337.011891][T10804] ? __pfx_ksys_unshare+0x10/0x10 [ 337.011911][T10804] ? xfd_validate_state+0x129/0x190 [ 337.011925][T10804] ? exit_to_user_mode_loop+0xf3/0x670 [ 337.011954][T10804] __x64_sys_unshare+0x31/0x40 [ 337.011974][T10804] do_syscall_64+0x115/0x840 [ 337.011993][T10804] ? clear_bhb_loop+0x40/0x90 [ 337.012011][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.012026][T10804] RIP: 0033:0x7fc48659ce59 [ 337.012040][T10804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.012055][T10804] RSP: 002b:00007fc48748b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 337.012070][T10804] RAX: ffffffffffffffda RBX: 00007fc486816090 RCX: 00007fc48659ce59 [ 337.012080][T10804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 337.012088][T10804] RBP: 00007fc486632d6f R08: 0000000000000000 R09: 0000000000000000 [ 337.012097][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.012107][T10804] R13: 00007fc486816128 R14: 00007fc486816090 R15: 00007ffc59970308 [ 337.012127][T10804] [ 338.908984][T10816] syz.4.875 (10816): /proc/10815/oom_adj is deprecated, please use /proc/10815/oom_score_adj instead. [ 339.046388][T10820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.875'. [ 339.124293][T10820] virt_wifi0: entered allmulticast mode [ 339.211820][T10825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.877'. [ 340.105816][T10842] sd 0:0:1:0: PR command failed: 1026 [ 340.126636][T10842] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 340.154125][T10842] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 342.147483][T10877] Process accounting resumed [ 343.005414][T10897] FAULT_INJECTION: forcing a failure. [ 343.005414][T10897] name failslab, interval 1, probability 0, space 0, times 0 [ 343.100507][T10897] CPU: 0 UID: 0 PID: 10897 Comm: syz.4.889 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.100535][T10897] Tainted: [L]=SOFTLOCKUP [ 343.100541][T10897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.100561][T10897] Call Trace: [ 343.100567][T10897] [ 343.100573][T10897] dump_stack_lvl+0x100/0x190 [ 343.100605][T10897] should_fail_ex.cold+0x5/0xa [ 343.100625][T10897] should_failslab+0xc2/0x120 [ 343.100643][T10897] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 343.100666][T10897] ? security_inode_alloc+0x3b/0x2c0 [ 343.100683][T10897] ? lockdep_init_map_type+0x5c/0x250 [ 343.100709][T10897] security_inode_alloc+0x3b/0x2c0 [ 343.100727][T10897] inode_init_always_gfp+0xc77/0xfb0 [ 343.100749][T10897] alloc_inode+0x8e/0x250 [ 343.100771][T10897] path_from_stashed+0x25b/0x750 [ 343.100790][T10897] ? do_raw_spin_unlock+0x145/0x1e0 [ 343.100810][T10897] ns_get_path+0x60/0x80 [ 343.100829][T10897] proc_ns_get_link+0x121/0x230 [ 343.100846][T10897] ? __pfx_proc_ns_get_link+0x10/0x10 [ 343.100864][T10897] ? atime_needs_update+0x8b/0x6b0 [ 343.100880][T10897] pick_link+0xd17/0x13c0 [ 343.100895][T10897] ? __pfx_proc_ns_get_link+0x10/0x10 [ 343.100914][T10897] step_into_slowpath+0x9ba/0xf90 [ 343.100933][T10897] ? __pfx_step_into_slowpath+0x10/0x10 [ 343.100952][T10897] ? find_held_lock+0x2b/0x80 [ 343.100976][T10897] path_openat+0xf95/0x31a0 [ 343.101000][T10897] ? __pfx_path_openat+0x10/0x10 [ 343.101031][T10897] do_file_open+0x20e/0x430 [ 343.101052][T10897] ? __pfx_do_file_open+0x10/0x10 [ 343.101085][T10897] ? alloc_fd+0x476/0x790 [ 343.101105][T10897] ? do_getname+0x191/0x390 [ 343.101128][T10897] do_sys_openat2+0x10d/0x1e0 [ 343.101151][T10897] ? __pfx_do_sys_openat2+0x10/0x10 [ 343.101174][T10897] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.101196][T10897] __x64_sys_openat+0x12d/0x210 [ 343.101219][T10897] ? __pfx___x64_sys_openat+0x10/0x10 [ 343.101245][T10897] ? rcu_is_watching+0x12/0xc0 [ 343.101266][T10897] do_syscall_64+0x115/0x840 [ 343.101285][T10897] ? clear_bhb_loop+0x40/0x90 [ 343.101303][T10897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.101318][T10897] RIP: 0033:0x7fc48655d68e [ 343.101332][T10897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 343.101346][T10897] RSP: 002b:00007fc4874abec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 343.101361][T10897] RAX: ffffffffffffffda RBX: 00007fc4874ac6c0 RCX: 00007fc48655d68e [ 343.101371][T10897] RDX: 0000000000000002 RSI: 00007fc4874abf90 RDI: ffffffffffffff9c [ 343.101380][T10897] RBP: 00007fc486632d6f R08: 0000000000000000 R09: 0000000000000000 [ 343.101389][T10897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.101399][T10897] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007ffc59970308 [ 343.101418][T10897] [ 344.173464][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 345.322135][T10906] Process accounting resumed [ 347.753762][T10979] sg_write: data in/out 262108/258 bytes for SCSI command 0x61-- guessing data in; [ 347.753762][T10979] program syz.4.907 not setting count and/or reply_len properly [ 348.670671][T10991] netlink: 342 bytes leftover after parsing attributes in process `syz.2.908'. [ 349.420360][T11008] netlink: 252 bytes leftover after parsing attributes in process `syz.3.911'. [ 351.073117][T10264] Bluetooth: hci1: unknown advertising packet type: 0xea [ 351.526554][T11078] netlink: 330 bytes leftover after parsing attributes in process `syz.3.923'. [ 352.440880][T11109] vcan0: tx drop: invalid da for name 0x000000000000efff [ 354.034481][T11152] kernel profiling enabled (shift: 3) [ 355.385444][T11182] batadv_slave_1: entered promiscuous mode [ 355.877753][T11178] batadv_slave_1: left promiscuous mode [ 356.623486][T11172] Process accounting paused [ 356.924085][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 357.366057][T11226] netlink: 330 bytes leftover after parsing attributes in process `syz.4.941'. [ 359.392551][T11257] FAULT_INJECTION: forcing a failure. [ 359.392551][T11257] name failslab, interval 1, probability 0, space 0, times 0 [ 359.416090][T11264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.950'. [ 359.447505][T11257] CPU: 0 UID: 0 PID: 11257 Comm: syz.1.948 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.447531][T11257] Tainted: [L]=SOFTLOCKUP [ 359.447536][T11257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 359.447545][T11257] Call Trace: [ 359.447622][T11257] [ 359.447649][T11257] dump_stack_lvl+0x100/0x190 [ 359.447721][T11257] should_fail_ex.cold+0x5/0xa [ 359.447752][T11257] ? __register_sysctl_table+0xac/0x1650 [ 359.447787][T11257] should_failslab+0xc2/0x120 [ 359.447815][T11257] __kmalloc_noprof+0xe0/0x850 [ 359.447837][T11257] __register_sysctl_table+0xac/0x1650 [ 359.447857][T11257] ? is_module_address+0x5f/0xf0 [ 359.447886][T11257] ? __pfx___register_sysctl_table+0x10/0x10 [ 359.447908][T11257] ? is_module_address+0x69/0xf0 [ 359.447922][T11257] ? register_net_sysctl_sz+0x222/0x430 [ 359.448026][T11257] __addrconf_sysctl_register+0x1a2/0x360 [ 359.448092][T11257] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 359.448116][T11257] ? __asan_memcpy+0x3c/0x60 [ 359.448141][T11257] addrconf_init_net+0x5dd/0x8e0 [ 359.448169][T11257] ? __pfx_addrconf_init_net+0x10/0x10 [ 359.448187][T11257] ops_init+0x1e2/0x5f0 [ 359.448244][T11257] setup_net+0x118/0x3a0 [ 359.448261][T11257] ? __pfx_setup_net+0x10/0x10 [ 359.448278][T11257] ? mutex_init_lockdep+0xf1/0x120 [ 359.448307][T11257] copy_net_ns+0x46f/0x7c0 [ 359.448327][T11257] create_new_namespaces+0x3ea/0xac0 [ 359.448357][T11257] unshare_nsproxy_namespaces+0xf2/0x220 [ 359.448377][T11257] ksys_unshare+0x438/0xab0 [ 359.448403][T11257] ? __pfx_ksys_unshare+0x10/0x10 [ 359.448422][T11257] ? xfd_validate_state+0x129/0x190 [ 359.448447][T11257] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 359.448470][T11257] ? syscall_user_dispatch+0x76/0x130 [ 359.448488][T11257] __x64_sys_unshare+0x31/0x40 [ 359.448510][T11257] do_syscall_64+0x115/0x840 [ 359.448561][T11257] ? clear_bhb_loop+0x40/0x90 [ 359.448587][T11257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.448604][T11257] RIP: 0033:0x7fe58a19ce59 [ 359.448617][T11257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.448632][T11257] RSP: 002b:00007fe58afc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 359.448648][T11257] RAX: ffffffffffffffda RBX: 00007fe58a415fa0 RCX: 00007fe58a19ce59 [ 359.448658][T11257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 359.448667][T11257] RBP: 00007fe58a232d6f R08: 0000000000000000 R09: 0000000000000000 [ 359.448676][T11257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.448685][T11257] R13: 00007fe58a416038 R14: 00007fe58a415fa0 R15: 00007ffc33d424b8 [ 359.448705][T11257] [ 361.134807][T11296] sctp: [Deprecated]: syz.3.958 (pid 11296) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.134807][T11296] Use struct sctp_sack_info instead [ 362.028459][T11317] FAULT_INJECTION: forcing a failure. [ 362.028459][T11317] name failslab, interval 1, probability 0, space 0, times 0 [ 362.078819][T11317] CPU: 0 UID: 0 PID: 11317 Comm: syz.2.964 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.078845][T11317] Tainted: [L]=SOFTLOCKUP [ 362.078851][T11317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 362.078861][T11317] Call Trace: [ 362.078866][T11317] [ 362.078872][T11317] dump_stack_lvl+0x100/0x190 [ 362.078910][T11317] should_fail_ex.cold+0x5/0xa [ 362.078931][T11317] ? ima_alloc_init_template+0x19d/0x6d0 [ 362.079040][T11317] should_failslab+0xc2/0x120 [ 362.079059][T11317] __kmalloc_noprof+0xe0/0x850 [ 362.079073][T11317] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 362.079109][T11317] ima_alloc_init_template+0x19d/0x6d0 [ 362.079127][T11317] ? take_dentry_name_snapshot+0x310/0x7c0 [ 362.079153][T11317] ima_store_measurement+0x1e3/0x5b0 [ 362.079173][T11317] ? __pfx_ima_store_measurement+0x10/0x10 [ 362.079198][T11317] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 362.079246][T11317] process_measurement+0x19cc/0x2350 [ 362.079268][T11317] ? stack_trace_save+0x8e/0xc0 [ 362.079289][T11317] ? __pfx_process_measurement+0x10/0x10 [ 362.079306][T11317] ? __lock_acquire+0x4a5/0x2630 [ 362.079329][T11317] ? __kasan_slab_alloc+0x89/0x90 [ 362.079344][T11317] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 362.079367][T11317] ? init_file+0x95/0x480 [ 362.079390][T11317] ? alloc_empty_file+0x79/0x1c0 [ 362.079410][T11317] ? alloc_file_pseudo+0x13a/0x230 [ 362.079430][T11317] ? ksys_mmap_pgoff+0x242/0x610 [ 362.079446][T11317] ? __x64_sys_mmap+0x125/0x190 [ 362.079461][T11317] ? do_syscall_64+0x115/0x840 [ 362.079499][T11317] ? __pfx_aa_file_perm+0x10/0x10 [ 362.079563][T11317] ima_file_mmap+0x1c4/0x1f0 [ 362.079580][T11317] ? __pfx_ima_file_mmap+0x10/0x10 [ 362.079601][T11317] security_mmap_file+0x278/0x9b0 [ 362.079700][T11317] vm_mmap_pgoff+0xec/0x470 [ 362.079730][T11317] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 362.079748][T11317] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 362.079771][T11317] ? hugetlbfs_get_inode+0x3f5/0x700 [ 362.079812][T11317] ksys_mmap_pgoff+0x285/0x610 [ 362.079832][T11317] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 362.079850][T11317] ? xfd_validate_state+0x129/0x190 [ 362.079869][T11317] __x64_sys_mmap+0x125/0x190 [ 362.079895][T11317] do_syscall_64+0x115/0x840 [ 362.079915][T11317] ? clear_bhb_loop+0x40/0x90 [ 362.079934][T11317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.079950][T11317] RIP: 0033:0x7f53e5b9ce59 [ 362.079963][T11317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.079978][T11317] RSP: 002b:00007f53e6a72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 362.079993][T11317] RAX: ffffffffffffffda RBX: 00007f53e5e15fa0 RCX: 00007f53e5b9ce59 [ 362.080004][T11317] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 362.080013][T11317] RBP: 00007f53e5c32d6f R08: 0000000000000401 R09: 0000300000000000 [ 362.080023][T11317] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 362.080032][T11317] R13: 00007f53e5e16038 R14: 00007f53e5e15fa0 R15: 00007fff58913628 [ 362.080051][T11317] [ 362.631544][ T30] audit: type=1804 audit(1780116484.853:17): pid=11317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.964" name="anon_hugepage" dev="hugetlbfs" ino=38644 res=0 errno=0 [ 362.750377][T11328] QAT: failed to copy from user cfg_data. [ 362.811544][T10264] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 363.708880][T11354] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 363.786546][T11354] net gretap0: uevent: failed to send synthetic uevent: -22 [ 364.822015][T11371] sd 0:0:1:0: PR command failed: 1026 [ 364.832152][T11371] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 364.847391][T11371] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 365.737776][T11356] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.807225][T11356] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.836030][T11356] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 365.873366][T11356] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.893409][T10264] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.331502][T11423] sd 0:0:1:0: PR command failed: 1026 [ 367.357778][T11423] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 367.393889][T11423] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 367.797577][T11437] synth uevent: /module/null_blk: unknown uevent action string [ 367.854691][T10264] Bluetooth: hci4: command 0x0c1a tx timeout [ 367.860774][T10319] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.868661][ T808] ================================================================== [ 367.868678][ T808] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 367.868771][ T808] Write of size 8 at addr ffffc90004909ba0 by task kworker/0:2/808 [ 367.868784][ T808] [ 367.868793][ T808] CPU: 0 UID: 0 PID: 808 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.868814][ T808] Tainted: [L]=SOFTLOCKUP [ 367.868819][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.868832][ T808] Workqueue: events_power_efficient fb_flashcursor [ 367.868879][ T808] Call Trace: [ 367.868884][ T808] [ 367.868890][ T808] dump_stack_lvl+0x100/0x190 [ 367.868915][ T808] print_report+0x13d/0x4b0 [ 367.868935][ T808] ? _raw_spin_lock_irqsave+0x52/0x60 [ 367.869010][ T808] ? sys_imageblit+0x19fb/0x1d60 [ 367.869028][ T808] kasan_report+0xdf/0x1d0 [ 367.869045][ T808] ? sys_imageblit+0x19fb/0x1d60 [ 367.869065][ T808] sys_imageblit+0x19fb/0x1d60 [ 367.869084][ T808] ? __pfx_sys_imageblit+0x10/0x10 [ 367.869105][ T808] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 367.869195][ T808] soft_cursor+0x524/0xa10 [ 367.869212][ T808] bit_cursor+0xca1/0x1490 [ 367.869229][ T808] ? __pfx_bit_cursor+0x10/0x10 [ 367.869245][ T808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.869274][ T808] ? get_color+0x1da/0x450 [ 367.869294][ T808] ? __pfx_bit_cursor+0x10/0x10 [ 367.869307][ T808] fb_flashcursor+0x338/0x430 [ 367.869328][ T808] process_one_work+0xa0e/0x1980 [ 367.869353][ T808] ? __pfx_process_one_work+0x10/0x10 [ 367.869369][ T808] ? __pfx_fb_flashcursor+0x10/0x10 [ 367.869391][ T808] worker_thread+0x5ef/0xe50 [ 367.869406][ T808] ? __pfx_worker_thread+0x10/0x10 [ 367.869420][ T808] ? kthread+0x13a/0x450 [ 367.869440][ T808] ? __pfx_worker_thread+0x10/0x10 [ 367.869452][ T808] kthread+0x370/0x450 [ 367.869473][ T808] ? __pfx_kthread+0x10/0x10 [ 367.869494][ T808] ret_from_fork+0x72b/0xd50 [ 367.869509][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 367.869524][ T808] ? __switch_to+0x800/0x1100 [ 367.869547][ T808] ? __switch_to_asm+0x39/0x70 [ 367.869565][ T808] ? __pfx_kthread+0x10/0x10 [ 367.869586][ T808] ret_from_fork_asm+0x1a/0x30 [ 367.869608][ T808] [ 367.869613][ T808] [ 367.869617][ T808] The buggy address belongs to a vmalloc virtual mapping [ 367.869628][ T808] Memory state around the buggy address: [ 367.869638][ T808] ffffc90004909a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 367.869649][ T808] ffffc90004909b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 367.869659][ T808] >ffffc90004909b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 367.869666][ T808] ^ [ 367.869674][ T808] ffffc90004909c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 367.869684][ T808] ffffc90004909c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 367.869695][ T808] ================================================================== [ 367.870290][ T808] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 367.870304][ T808] CPU: 0 UID: 0 PID: 808 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.870325][ T808] Tainted: [L]=SOFTLOCKUP [ 367.870331][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.870347][ T808] Workqueue: events_power_efficient fb_flashcursor [ 367.870371][ T808] Call Trace: [ 367.870376][ T808] [ 367.870382][ T808] dump_stack_lvl+0x100/0x190 [ 367.870406][ T808] vpanic+0x552/0x970 [ 367.870420][ T808] ? __pfx_vpanic+0x10/0x10 [ 367.870434][ T808] ? mark_held_locks+0x40/0x70 [ 367.870458][ T808] ? sys_imageblit+0x19fb/0x1d60 [ 367.870475][ T808] panic+0xd1/0xe0 [ 367.870488][ T808] ? __pfx_panic+0x10/0x10 [ 367.870502][ T808] ? sys_imageblit+0x19fb/0x1d60 [ 367.870519][ T808] ? preempt_schedule_common+0x42/0xc0 [ 367.870573][ T808] ? check_panic_on_warn+0x1f/0x90 [ 367.870596][ T808] check_panic_on_warn.cold+0x19/0x34 [ 367.870612][ T808] end_report.part.0+0x3a/0x90 [ 367.870632][ T808] kasan_report.cold+0xe/0x18 [ 367.870653][ T808] ? sys_imageblit+0x19fb/0x1d60 [ 367.870673][ T808] sys_imageblit+0x19fb/0x1d60 [ 367.870693][ T808] ? __pfx_sys_imageblit+0x10/0x10 [ 367.870715][ T808] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 367.870741][ T808] soft_cursor+0x524/0xa10 [ 367.870758][ T808] bit_cursor+0xca1/0x1490 [ 367.870775][ T808] ? __pfx_bit_cursor+0x10/0x10 [ 367.870792][ T808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.870813][ T808] ? get_color+0x1da/0x450 [ 367.870833][ T808] ? __pfx_bit_cursor+0x10/0x10 [ 367.870847][ T808] fb_flashcursor+0x338/0x430 [ 367.870868][ T808] process_one_work+0xa0e/0x1980 [ 367.870886][ T808] ? __pfx_process_one_work+0x10/0x10 [ 367.870902][ T808] ? __pfx_fb_flashcursor+0x10/0x10 [ 367.870923][ T808] worker_thread+0x5ef/0xe50 [ 367.870939][ T808] ? __pfx_worker_thread+0x10/0x10 [ 367.870956][ T808] ? kthread+0x13a/0x450 [ 367.870976][ T808] ? __pfx_worker_thread+0x10/0x10 [ 367.870989][ T808] kthread+0x370/0x450 [ 367.871010][ T808] ? __pfx_kthread+0x10/0x10 [ 367.871031][ T808] ret_from_fork+0x72b/0xd50 [ 367.871046][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 367.871061][ T808] ? __switch_to+0x800/0x1100 [ 367.871080][ T808] ? __switch_to_asm+0x39/0x70 [ 367.871098][ T808] ? __pfx_kthread+0x10/0x10 [ 367.871119][ T808] ret_from_fork_asm+0x1a/0x30 [ 367.871141][ T808] [ 367.871195][ T808] Kernel Offset: disabled