last executing test programs: 9.506092727s ago: executing program 1 (id=1389): r0 = socket(0x21, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0xb) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xff80}, 0x7, 0x0, 0x4, 0xb}, 0x8}, 0x5, 0x7fffffff) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) r2 = socket(0x2, 0x3, 0x100) splice$auto(r1, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x9) ioctl$auto_EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) madvise$auto(0x20000000, 0xffffffffffff0405, 0x3) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.861302414s ago: executing program 2 (id=1398): r0 = waitid$auto(0x3, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000180)={{0x9, 0x7}, {0xff, 0x10}, 0xfffffffffffffff8, 0x6, 0x465, 0x5f, 0x78, 0x4, 0xcb1, 0x9, 0xffc0000000000, 0xc, 0x8, 0x80, 0x7f, 0x6}) prctl$auto_PR_SET_MM_ARG_START(0x9, 0x8, r0, 0x7, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r2, 0x64c6, 0x1e2) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x141241, 0x0) pwrite64$auto(r3, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000000001) clone$auto(0x8ffe, 0xbc2, 0xffffffffffffffff, 0xfffffffffffffffc, 0x400) select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x3, 0x1, 0xdd, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) shutdown$auto(0x200000003, 0x2) 6.094928252s ago: executing program 0 (id=1399): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39) 5.812859426s ago: executing program 3 (id=1400): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe, 0x9, 0x2, 0xfffffffffffffffd, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f00000000c0), r0) sendmsg$auto_NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1602c000}, 0x4000) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/ns/cgroup\x00', 0x200000, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.663479971s ago: executing program 1 (id=1401): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram4\x00', 0x14be02, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x3, 0x2) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) socket(0x11, 0x2, 0x73) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) fanotify_init$auto(0x5, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x40401, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x400455c8, 0x0) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa8042, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 5.60117295s ago: executing program 2 (id=1402): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create$auto(0x803, 0x0, 0x0) epoll_create$auto(0x3e) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40d1}, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) 4.433969928s ago: executing program 2 (id=1403): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) read$auto(r1, 0x0, 0xf8b) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x22, 0x801, 0x84) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0) 4.159096162s ago: executing program 0 (id=1404): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8881, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\xd3', 0xfdef) 3.633414636s ago: executing program 3 (id=1405): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc8900, 0x0) mmap$auto(0x8000, 0x1, 0xfffffffffffffffe, 0x8009b72, 0xc76, 0x8000) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x8) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x20000, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/nvram\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/213, 0xd5) 3.569518144s ago: executing program 0 (id=1406): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xc048aeca, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) 2.888715352s ago: executing program 2 (id=1407): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r0, 0x0, 0x4b, 0x0, 0x0) sendto$auto(r1, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31fdb70dc8e1742fcffaaf5320703e7538d2d3b504ec3a67c52bf6efbf9e534702706e6a69a3fede118ad99154fc7e5e32bfbee8042e6352c285efc95675ed362f8255371c3422c3232332f10f51ccf72cabaf2fe303f88bf7d5b99b4c4139c4450af0df371", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mlockall$auto(0x7) 2.88739952s ago: executing program 0 (id=1415): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x80003, 0x300) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e1") r6 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x5, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) set_tid_address$auto(&(0x7f0000000500)=0x5) r7 = getpgid$auto(0x0) r8 = socket(0x2, 0x801, 0x106) setsockopt$auto(r8, 0x80, 0x12, 0x0, 0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYRES16=r4, @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb71", @ANYRES32=r5, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a800400", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYBLOB="0800e300", @ANYRES32=r7, @ANYBLOB], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) r9 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) ioctl$auto(r9, 0x80046f45, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) msync$auto(0x1ffff000, 0x18000003f000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r10 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r10, &(0x7f0000000100)="0a1b9a3c3e3e006e163bb154d788", 0xe) 2.885309376s ago: executing program 1 (id=1408): close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x801, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\xd3', 0xfdef) 2.630309049s ago: executing program 3 (id=1409): ioctl$auto_FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) select$auto(0xe, 0x0, 0x0, &(0x7f0000000000)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x100, 0xd08, 0xc, 0x200000000000c, 0x0, 0x6d2f, 0xffffffffffffff00, 0x2, 0x4000000000000d]}, 0x0) socket(0x2c, 0x1, 0x4004) getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setregid$auto(0xee01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x853, 0x2000000000000002, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x201, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/ip6gretap0/accept_source_route\x00', 0x20140, 0x0) read$auto(r2, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), r0) sendmsg$auto_IPVS_CMD_ZERO(r1, &(0x7f0000001600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000015c0)={&(0x7f00000001c0)={0x1358, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x10ed, 0x2, 0x0, 0x1, [@generic="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", @generic="a5c7ad21fa020e68dc8322aca48b55d78e6f1902ced8362170f8b612ed856269a5e9abfef3ab6452065705ada6d47f4bb2129a2fab5f45b027ba5a448d7c619fc1cf29c6ec94e84d2eef2aa864f09e119c449117516bf7702fafd12b2b72c38169e42be5c1985d85ed2c21000ec17218d38b6b4cc7cd3593bd0098240f231172a7", @generic="427acf3d291d7899a82fe0e11a5275149b2486b5c024a27e0261ef49e6595383ad1e2397e107817dc74c0fdb4f7f8388354cf209e96e6e8b8a73f8dcf93506b70925cd5bdb6b50e0798936fd863519e82a56f00b28b48cd314bad772ead2513655336c2f7129a123bc75020ea9876f91ec0caabf66fd543a799ffd6ae96b2b69c2aba45536a11b257a91957d099f28e866d30cf0e8bec24dcde5078bf2dad09bf74952b5af4283792a8b9b9eff9785108b9706bc3a53d57b5832dc190a58a0f5c5c1b025ded1d5fa13ad4027d1d68cad07df5d9af269b1844f33c790", @nested={0x4, 0x13f}, @generic="2a92c24d4e4f0074"]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@nested={0xc, 0x80, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @uid=0xee01}]}, @typed={0x4, 0x129}, @nested={0x3f, 0x147, 0x0, 0x1, [@generic="78dff1645540ea910deb091dffe48b802b90", @generic="7335ce58ccd5e39cb6f63faa1629ac31ae0873c21ebc66fad683dcc59578797884e1ef8a0c", @nested={0x4, 0x11b}]}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb62}, @IPVS_CMD_ATTR_DEST={0xf4, 0x2, 0x0, 0x1, [@typed={0xed, 0x130, 0x0, 0x0, @binary="a9b5eb8b10b1c7a133a7eb65fe866747bae033f097818d01bb021e3d91c8e90d9c58fac7af6d026136af34eb6379d7b0c9dad2c22fe6ef7ff786b015483a1d14165610a40a55fff17cdc9515077e5e67d5b4d59371cf7c6e4c42fb65c6d51baf3a853b064efdb25a949ce092154532cd512fabc664ed90a0775efbdbbb3ac9a841910c37fe8a3599254554e0d2a0300d8a807ed7816ae86d86a9aad664de907640f9538004dda86b30534d60242bdcbe9844f1693e7c2f079239b97a5353caaa47b0a3a200d6b86feb1e014b4b389d1a02e4517a5648d7aa69cc21e674935196f67023bbee1c435587"}]}, @IPVS_CMD_ATTR_DAEMON={0xe6, 0x3, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @u32=0x4}, @generic="0bdaed4d4215efd29121b7bcbd6fc3fefb8319d788db589570b0096a765536fe4008fc92a70ec8fcf8c53e4716f7f73299d92ecbf85bd840991af3d6436c683f398517675d5abc0530f8e062e33c1830fd2fcf8c7425e7cbb7c1e1e1ff4071317166017ed7d901210128f02a93b7171f595652505a5e91b7f31607c865ddecee36c31d4e7e3d5876ada47b2d91c4d3c8d6044356052c63468362f85cbb89a86a44b836bc871e79990e6b6fddc7fc9e20c4429aed7db86bd896387eedfd091d2ab62ea06e86a6c553d2edf7c6e19d919408e4ad59d37f71cc8697"]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x840}, 0x24004000) 2.391065977s ago: executing program 1 (id=1410): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x181, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0c/sub4/info\x00', 0x0, 0x0) getsockopt$auto_SO_TIMESTAMPNS_OLD(r3, 0x0, 0x23, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0xc) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r1, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586ae69caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x5, 0x24b}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) 1.941451696s ago: executing program 2 (id=1411): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, 0x0, 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x64cf, 0x1df) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) getpid() setresuid$auto(0xffffffffffffffff, 0x0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1.324322182s ago: executing program 0 (id=1412): close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x0, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(0x3, 0x48cb, 0x1) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) read$auto(r0, 0x0, 0x5) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x305282, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)={0xdd, 0x0, [{0x8ff, 0x4, 0x20000003}]}) 1.273449108s ago: executing program 3 (id=1413): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) io_uring_setup$auto(0x3, 0x0) open(0x0, 0x22040, 0x80) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x2000c082) open(0x0, 0x149443, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x418040, 0x0) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$auto(r1, 0x0, 0xffffffff) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) 1.211000132s ago: executing program 1 (id=1414): mmap$auto(0x0, 0x2020009, 0x10000043, 0xeb1, 0xffffffffffffffff, 0x5c9) socket(0x3, 0xa, 0x0) r0 = pidfd_open$auto(0x0, 0x0) setns(r0, 0x2000000) ioctl$auto_VHOST_SET_VRING_CALL2(r0, 0x4008af21, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={"25e440c215c391dbf65bc7e7e558ff9f1ba7d50321b3c9c7f4d256662e2c0c6d", 0x9, 0x4, 0x5, 0x0, 0x8, 0xffffffffffffffff}) move_pages$auto(r1, 0x200000003, 0x0, 0x0, 0x0, 0x9128) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r5 = socket(0x1d, 0x5, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r5, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) connect$auto(0x4, 0x0, 0x10) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b47, 0x1) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x800002, 0xb5d1af1605322ddc) ioctl$auto_SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000180)="14768875e594b49cf4a2ec4aaa1934903cc8f8fc4df231eba334a9b0a4dc0ba48b7b5954df55c91a5ff71eae2ae6e42a5baa06732060699f8bde35e9904249e4ee797d656496c9a3c3a5ae2cea0cae015651b7d5e63cbd205e658b16bb16e1fddf21525f45380bd0d9677538d0a055f1b84ab70970320f6348530ca1ac814a7ff8cd26387f15d6dfa28d542bf4b6e0ce5137b84cf796bda9ad") r8 = open_by_handle_at$auto(r7, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r8, r7, 0x0, 0x2) 408.496136ms ago: executing program 3 (id=1416): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0xdda) r1 = getpid() getsockopt$auto_SO_NO_CHECK(0xffffffffffffffff, 0x8, 0xb, &(0x7f0000000100)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x40, 0x0, 0x6f7250c4) close_range$auto(r2, r2, 0x1) socket(0x2, 0x80802, 0x0) ioctl$auto_HDIO_GETGEO(r0, 0x301, &(0x7f0000000180)="3518eb17afeec81587b903918c91d0ea53b5be073947f7f67e4a3dee0c9b0081218945474f7574ec0b4ea3156ecb47f3adc0be82733edee6b4643831b1d55dd87d5580420fdbc3dd08c056f45d527213123d2d0356043d1a9b3536d3bc7aaa97404fb7c4b61121e83576ba18e626b1156758596bf32f387d6791b2633835854d32590f19ac810647a8740a84ed8d28518986708989edd196ae501dcc3129786ca80fb451bd1524d39d1216f7387b4d6920b8f72496566f3f5e767ba0") r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r3, 0x4b66, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) read$auto(r4, 0x0, 0x6) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) 92.289029ms ago: executing program 1 (id=1417): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) lseek$auto(0x3, 0xffffffffff800002, 0x10) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x84) 58.370319ms ago: executing program 3 (id=1418): socket(0x27, 0x2, 0x1fbffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x801, 0x84) fcntl$auto_F_GETFD(r0, 0x1, 0xffffffff) io_uring_setup$auto(0x4, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS1\x00', 0x101e81, 0x0) epoll_create$auto(0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = getpid() r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x1, 0x7, 0x9, 0x4, 0x1}) process_vm_readv$auto(r2, &(0x7f00000001c0)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000100)="6c4bc022f1a924305022a30137693a982a453ee9ff2946c55588f6e6", 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) epoll_create$auto(0x3e) r4 = epoll_create$auto(0x8800001) epoll_ctl$auto(r4, 0x1, r1, 0x0) 42.430136ms ago: executing program 0 (id=1419): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101b00, 0x0) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0xd) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) syz_clone3(&(0x7f0000000400)={0x1000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x0, {}, &(0x7f0000000240)=""/154, 0x9a, &(0x7f0000000300)=""/130, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58) process_madvise$auto_MADV_GUARD_REMOVE(r6, &(0x7f0000000540)={&(0x7f0000000480)="367ba226305bd0199132efd3f567d303301a4b172f75a0a050354d974862f863a93b956636548f65431b5a5c537be4be96bc7f71bf2530c17da5d4b26d3ace89a806094823f138d3a18769456d630b27dc1201ba5f8a9da96b844bec2eeeee7a366d31cef57d1bf620de3da21b6f957b0e8ac11908421e8e09a66a295e45a5fa97f3a93868e74ef14513448a10e04ec7e50e57c48b913d477dc71da5370a6632f9cd750b65b2b2acbe9d5ece50d2a7295269b467", 0xf}, 0xfffffffffffffffd, 0x67, 0x8) r8 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r8, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x1, 0x8, 0xffff, 0xc, 0x2, 0x2]}, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r9 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x3) sendmsg$auto_NL80211_CMD_GET_STATION(r0, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000001180)={0x1624, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x40}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x706}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x3ff}, @NL80211_ATTR_STA_FLAGS={0x139, 0x11, 0x0, 0x1, [@generic="703cc5aca10e53bdf456d0b4b6d59fe4f6b15db23de25a820264a53b170feaffa45f419d5a125dac2bf979182bb088fac0258fdac05438f3e144ee424b60401b9421c57b1bd549024ab2ab", @generic="8b5de0656f419d808cf1978bbd04a9455337e5f15f44e7ea8acc8f416b52d8589327648041c898cd4acb99d620841ac83a1589f4d84903cd4135c6327cdc57d880a02f97cba924c687e71174f87f7966e1c6f876e8949b2e012beeb55ba0435aa556e3734a98f92c57742ae5a3d1249d811a137cfd755ad40860259b4d075a39c5f28b6368409eca42544ad2dfdcfa4a0891dc235111136d8f8c06f7e570c6c9f7695c898541a4e60a5c665fba1e86b724f5785e5a34c2792e7a6521b4d637dcd72f64d0b22992614b1d2d70fd923c31b4c06f5dd0f6af5e181159e514cfe5393023", @typed={0x8, 0xdc, 0x0, 0x0, @fd=r5}]}, @NL80211_ATTR_CQM={0x2c9, 0x5e, 0x0, 0x1, [@nested={0xd3, 0x21, 0x0, 0x1, [@generic="0542017fd0153b1aa7d086305fb39504b744e791f610440590e0f013afcf530a82a9e8672a22b1c42e3bdc1ac3a09014d8c70884c8b628e2c5c6131b4c575ea870e594aa750456b3225e530fd2ac27ae95dc1a6a4d2f37832c445739faee6fdbfc2efc1c0f914f05cc8c8ed34ed4ffd5f3970a2d7e7a6fbec33ad1c03964defe9b63398a92682a67b274feeed5777b5a25ce28270531e5af498efe0563165d0ff532d25b812fa46789d3d3462c962a2b162f0797263f91e9de44bfd0d381cedce78682fea8d342c1f144b5b399d9ff"]}, @generic, @nested={0x4f, 0x64, 0x0, 0x1, [@generic="a4a70a34c121af941fd07126e75eb4255900557564d1b4ed887e9e999154685c2b4eae5c04e831571668243181b6bdf4bb4002dad75d8d3658f5d3c997bdf0543287402e4d47b6", @nested={0x4, 0xc8}]}, @generic, @nested={0xb1, 0x46, 0x0, 0x1, [@generic, @generic="7cc0eaadf5b1afb4d202877592b4fbfa118aa7f5215257872b618a68412ce4bf159e4485bc86ecaa271186164d04f96848a191e8d80d833b5e66c89214605411f4099abfcbb10e8ef1d627bf4755b6266190a33eb039ab43ae79e25514cbc58f69762d6bf7f99fd4f8c4d7ef1766e0841207da5d523a2b216715f3fe22cf1bb159517f1916d45c67f707a6150409b3966a6b7d87ea8c050bb15d2e97eb473dd4f07112db5fbbe98f8262b1e5aa"]}, @typed={0x8, 0x123, 0x0, 0x0, @pid=r7}, @generic="8681cb0d29dbb83572f42a8033eaf528f190fec3d4860575e6c7a6e8062f869cda98147f6a65d11f537b0663fb5aac35f8bd9cb2c98d19b7996780e6d5e0aeaac6eb1293e8a1086e6410e26d986ecdf8d1f87f3df59422b3c6195b331ee37027f9e4f3f62f9daaa37916ac46eecc0807a4ac071421ce9dfc1b1f91955a9d17b33a441b9fa6e98fd8fa4019b60f781bd4136290758598196c839211e058099bdd199bf442f14fe424554ca800c45dbc43966aba6fdb9a11d638df27f4b17e7feacda0493784619b39d7e4f3d9eafa0a346ed3f7a1ef042daefe99bfc8", @generic="daea718f49207fc733"]}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x11ec, 0x131, 0x0, 0x1, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7f}, @NL80211_ATTR_SCAN_FREQUENCIES={0x11d0, 0x2c, 0x0, 0x1, [@generic="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", @nested={0x10d0, 0xdb, 0x0, 0x1, [@generic="eece2456a00d27df5c15f43210d31905b560861d63fa1852d46d611b9d84528aa794939bbc67ddc43f4a3bba0200c5513e92e5f471d54ba873aeab31905c13c89f21161ad5260a1cc0bced1e650874846600158c7bbc46456286372e1b9b01c11e006238cef1593b9b604db3f16b10dfec42fe3789c005aa32514c478c378db8b633999280d2043a21aab42e31707881da4dfd03621dda3967fffb946d178d5a8690bfa6084c523722e054541a0e3720b2096bc1fdf38aa88bda4db75889e49c1a5219b64ea4f4d1ad699e0975517522722c4bd866c15826d0f81ca6039c825ecbe6cdb41b9a7ff14b00c770f9893577de1758ba9af1f348a372400bd56e4dab38f95ef7ed5541ac4f1fddd49e7b0ab9dbd89cc59fd891897a95edd826e9be130fe9cf591504ea1d80836bfbda66db3d94827f052b05885d8b7319f00fbadf9ec70b98c6f3a844924bb00ae304d757e2cb27a672e7630306f91e6f593f6216bf067aaf793961142bbcf21eb0d04814ff6a727ff525211ec8179a79bff6e0f9bd1aa7a0fa7f315e40812a58fe77b8f48868d7cd64050a0c4c65d5f2a2fd0e829b10e5fcac20ccc72affa2ef1562434066cb2e60ed2bbee23e9e0e2bd75eca74dd45517fac5d4254bda1585f2149b692e33def3739f1fbace7ec741a28ac167e18588b7cd5caff20e9bd5483c69cef55194c796fdd11be9aad7f86bfa28936cb17e8bb215514a5d2291c441e8302a58098204241eecaf066ad2e390499ef23d584cb6f23be77dd18b1aae07fd34b0b99cfcd6174f4536e367e615e6b15d848a9147cb2282e0724c5d6484ba087795d359666543f7e2c06e68e364128913c3f3346b0f07d477f0f425f1cee51802d5967cb208c98127352b3e9981e0dbc3422d3bb94fe0e3c5c03e55e1352557cbfbc313850009b11d0cadad2ee2d5be95a8a8194aa7ff1a28b0f26cc0853f358aa7292e99c2571776966112ab036d00bb164045e672e662fdf85fa7e9eecc21d436fa9611f4488086c62ed860eed9feb58d76f4917d782b70bf535ce92a0a24b9924985965568fdff2a53988e8b8e9f0dd2a49dca90b1f782a63f5bc8dd4dad9b1c1577e21547c1e499f4d5e0369fc770ce7419aeb39f89092bfc11316cd4379ea644647b017488a7fd004e9aac7878370cd6a64b69b16908ed360817e28ce659f0dc0882bd56cc320fa6c6949895675f6c7096d8fc54b2dd36db335ae1316c60c47f90e1f4cb51d1f1098bdf40ac67769eb6c77b5efe6ad175e70336c0419e8230f60673d13033942e56071d12d4265369f5bf844e8c68fb9145d2682f91060c0b26c4cbb51f1d9068e1620eb78ac33bac03298644c9eabd87e91ce1ccfe7a053c5646fd1e7238c50fe4e111918abb8fd3c2dc408c03f083acba36fb167eb16a44d5fd820e43b87c217419ba38442a0591cc0a83e6102afabb9cf382ad8ce4c331d90140b09f84b360ca193cab9ac39a4269f9dcfa000d9619e5ceeb6638a462d9fca7f8a2272ea8c3fa6ad8831f5ef8f697c9fd32dec138a9fb9c13d2d8d2472c5e6b6dd2578274e2980e0073dcb589c6a24a9434c2b8168f32489ae670c591b775f29b0d1b3161d3a1be16fb2ac05eae1cbc47e420a2dfb37c2439e74dd118303ba3ad929e43a1b4edcd192d819f130cd24dd1a66410a5d07bba9bc71b4bcc36c35c24c8367f3969fa39467aa8a4c9ff3f81d3c399870e948ed320e3cf8d98c228b5225fc5f12fe8c672aec298b1bc32781f86ddf23808f365c62636e956b752f747ec4a4d10fd2149d929c0c5046a125e10a571287c797e8e449ee97dcec12ec055ccdb0d96c15bde3806ffae37fb1387cf8437138d8d1308b40808cd7efa94d88bfe158a86c3c4f256bdb564ee31e9de8e1570cda7ddfc10e384e2b7c8f1427c2e2f5620cdeb8c328a27a271d6a4fbba18fc1fc9ea28b43e50eb4e2177d1af3e945fdc06b7521b55127f2abde19405c124b63a96146d5df4d32aeb22b976a30297cdcc7cd8afdff206c0a25f74edeed6770d5efb9720d7ccf5bfa603db8fef0554fb287296205ca71043313e7ab83cddac48798b03b6049d551a87e7196949802186af156b7818105e23cd5b461c4f99941420ca977716ec0d42e0512af2b238ebf0c71196565f0a82d8fa6d4cb0ad128b9668b348b24303a208bac6c11f80e719c5b48ec8d55ad09d0c29bca97ac458569a96c5cb2eaa78c0050569b374415a74edf67fe89d61f41a4592c45d52cd612917f2160e238e0bed6d3c66df3307e7509c693949d95215db2bd90cbd6abd4d00143f811b89788fb527a48735188e0d0ad98ba47d4af2dd6b0c8601bbba4b991b8e6fd99cd137ea4088b7df20cb80bdc9c6ed593ed857b8dd663a4a2bb01e7cffcaac8da5729b7c15e9a974a6913c5a345964e17079b8e5cd798c5b9d923239a989cdd0992552953206c406c0222e3f68a963aaece757c2b450354835c785f5d805a751f51ef43c5a4561ae737647f33736b2646c5c54d3f52ac47f7427c5000a9254d7b776d2199649f446297373f93753cce7eca2bc7c4a2cb16f90c04f12baed5f4b9d5d642df180dba7557b93898ab65087f5a3e52d1782adc725e5ec60d152e02e88dc03382a512ee97bb04a154d735513033f7d6725be2240c0e181188cc1b4d5a2c857a6b4c499a7ddec3b1319eb21d6426767b096b4d5ec7248a05d8131fd19319053a6e573d9f50c4092c7872118e6ad61c38e97f5eda6110a9a1ed33a9495372af94b4db01e034b6e3c3c9c45fb6a6931b52593b86b8029925b554654135f0a24a819c11b9b043d3cd0c69975808522a48a75146cb4b59ac5f342e5933f88083adc3aedaf82eecee8ca2dc394828ff1c5110b0d0ca4e68c525ccf008622499544294a839b3ea00f633d1a0b3304faf8141df25cd7887efe56411041a0ded09df1400196c203dad8da5060995a02cac3a57dc251cedc11c3950537adab70f7ff0c8ff26007e3c8b9d82ed85198647684e7d6861114ce7baa18c2c5abb626adc556331f6fe074f35051c8aaee41508dbafd98f4b2de714322923481ada0b0ecf4fce027c59c1e8960c3a3253b77a1d5b693847dec78383747d9b1bbdf7937171a2b6da0ebd46cccd918e1faab3c73de6e9940d46726bcdb7df8bb3c50dbd706f3e1c17a4d383f90a8b79f562ed20890a9fd021316471d56be78c5ec54f94f2d566a9ecafdcc4bd5712b83cd09d2fc7e606ff3a99127f9ae9edd55c9f8602237f29d3126f4a6814b77c8bc81187567a2c35e39f6c41ff6cc42319cd6a3d913ae105aa95ff910ee48911c95b9c9a55bcbb7e5b3f461cc1a49926ed0287640abf7d9b7e1d807b37d4f981b983c6e501fed5443e0751d348757f08ee8396ab6702bfd66f17cd0055ae7ef1e11fa19789e035071d28d3c214015b3af7483883d9cedeb1f2b9a758e75c6beb62bbf380e38a680da19f7ba6353347f4d2474782ba63aa1b9cbbedf1b61b3e781feff2f348c4a468782835f1e153dae5a317ecc60121696c64ff598f0de8ab7a90bc52772a2197e5ba2582f1324b1e9490520981bfb3a20fda3e796f04c199751404d1d6defec9f19e926c0eb625ce01b3a57079e6833a969ab4159af3b351cdb19e21fe3da8b69a7b2c4df5026aaedd31df2e53bc471d77b780b025f1433f91308365c245e4652aacfcdbcadc6791e945f7b5d093d53f69410a1a3e4bae9225c8ca3ccf8c0adcceac2eed4ac99f9a1e4da98c290a9b5318d9e64105bd486cb3da8e37c7fa178301b594e445884594e303e53aaf8492c049083695f3ffc18f004001ded8af8509368e17d6941a0396bc3edc96aa90637a310dc89ff9e2c1d1cae25861ceca23b12783fdcc39d870bccaa57aab555d251a089a6f263d411658f77051fb01cedcd143fbaf2c40a44012cfc2ab975d86f97165e8367f43dac85858c7e409849e1a1ddb57b805fcf2783f3491d2fc654750a07fccad4fb2da84b75d205e5837b7cc6ccea3e0278167aa93dc8077abde6face7d3b11f00d1ef0cf627d294cd4fddc6e7ed99e8e521fb5d2bcbf0f5d2f9b51b4a0e175cd89f88347a49251595e49779dc3fa3db1c99d8359c678268513ef20c33b0e11b79555f811b25e75e30e3a336d136b745284171826c868144cbc801dc1d2e96b426f22a11565d3ea0808f6b40111b894e53569799e77d03c865e9982d2187530e920d6813844f3f05c298a966a7b8395f9be76f62c9bf4e7903c9d089f9203e51fe22e857629eea47113436932d37316d313b3f9d50503fa9d5d5d0ad8ec3fca207149d0f2b758bb52b7ae7ef07120563dcb57622bd2aa00f67c4e74935b99644aabc1730f15e2484c54529ecb818a8029f3106b56a5a740c2459582139d0cdfc70356a13252399d3efd5ff0692a2f83311321d0da18779dc168c0280d6c12b1257e9e394d23fd0c1cbb1f77e0ce8a0836b8fc557352eef958f7b68d10f77f3b975104c2a024e06a3668ee7a9a7afdd2e117bc00d5e4d0516b2ed2ac0ae88b7676b1984b0139d09e60711ac6607ca2a717f035abbfb9b55f4701365aba95325a38d9e0529bfb0474098f2f374fccdb640595cac0332d2f9cc2ecc34fc7e819f7b645930dc15a34d8540fee0548aafb5239786677d3a668324f696c7f6dc366ec66131fcce9d91511d81855adae31cdad237211834cc6a522260bcdd622014daa55dbf7648ed9f8302dd31e79870b9b7637d822cd4fb97d8d0d9236b44f55288cf40e0475eaddaac700ef33629643480f93d15757ce2e8cf303076cf706c7bd87877ecfa7566696b8360b5a61f5c2d7a310f4a6222c96311cd26130198fed996f03646137cb4558c47cd4748d59fb2581b3adcbadf0683c5b181d63bce7c58cfdd000088b63531e2d2658fb411ad47719c886677af7c0492dcdfbc2cf6751e2603110837d50521b1ebd9078d41ea4d2e423c66d4a1914118987e8bfe2724dde92f96b8dec82819312aafd102053335c6c7bcd5db9c6296e8194e42dafe822164dc16c198bedb790604b362d6d9116685c21df8cbe44ba15ab6071ab27b61362b6de0a0359c830b6f14ba0a22851a5a73768dcd2140083c1886cbaebbe1b9af0bb58666da8f72e5dee9050fb6987c26c0ba0a7f7d98afed838145dea0c4ed61d6870edb25a1f26d9efbaa1765d68371deb52dee0fb7a00778d34847fedcd9f37124ed267a5381eee7d71350ffbab1a6db35223cfc7ed72962b1a1256881a66cafc950a5f0e0039f56b58781dccd71758ce1101d0e2a3daf0df85e68108ad2d95ac9856cfb49ef4dc55e8dd73b39df16a19293d75f6d03f4b7416641d89cb8de06a4528990d6f097e47f266635a5d6010cfaab56c53d162d2fe317d992b18dea9d32e14186ef396b7def2afaa9e1c8ad93e4df707c935a316d7618180d802d3709126122228a9492e1f2a9fa8eae48187785ca8da3676f7dd89de0ee06a106b9d5d7d0bda937e456c15984ac0245916ed3a23bede314f5f60ad57fcd0593cfeaec21eb074d1b2a000a05069fb984e1c7340ea9260ff10b4490feb7887986ea5e173c75a336fd572309560430e06f959056efa71afb76ea59bec0fa7e94f40d39751c15699ba958849970a5d74fccb62666eddec522d2c8d2d0862b56f2494849ed04cd0b937593a9326dad05886cb84d0a6913e78fc5ac001aec728e6f39127506d8d8a75314c3903b8488af16784f11f941810d68975ab54966556135b1fea5df0dfa340dfa6ff8ff9573cbeb40f9ff87269958f003f3cc475cac56", @typed={0x8, 0xec, 0x0, 0x0, @fd=r9}, @generic="b3cbad2b607ea821b38c31480e3da955cb80a0a7876fe3f43ad7cd8191adac5a0bcdcc6f109c5faa8466f64be963d3acbe8efbfbbe3756a617f954ad0919b6eb98bd84b7121fb91b1abb0d3514aedec393fd7b584a09da0d94e05ed4a40a97e43e3970a9d505bf12991fa045dc5681a96e5cc943c3cfb117101acdf3809b93024a96dc06df4f459c3c2e8dad74c80367144066cd7b9e902c75ba27ff1af2ddc3337c0c7c7bb5ace1615f2a72f8908e3b10b393d72e3c714920dfeeaa2815d4252b3d2541"]}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}]}]}, 0x1624}, 0x1, 0x0, 0x0, 0x8050}, 0x4004) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r1, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) r10 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x200000, 0x0) ioctl$auto_NS_GET_PID_IN_PIDNS(r10, 0x8004b708, &(0x7f0000000040)=0x7) write$auto(0x3, 0x0, 0x100082) 0s ago: executing program 2 (id=1420): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r3 = prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) ioctl$auto_BLKROSET(r3, 0x125d, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af83, &(0x7f0000000000)={0x6}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x6, 0x1, 0x7fffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) kernel console output (not intermixed with test programs): 9][ T9017] can: request_module (can-proto-0) failed. [ 267.624039][ T9023] FAULT_INJECTION: forcing a failure. [ 267.624039][ T9023] name failslab, interval 1, probability 0, space 0, times 0 [ 267.679137][ T9023] CPU: 0 UID: 0 PID: 9023 Comm: syz.2.722 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 267.679173][ T9023] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 267.679181][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.679190][ T9023] Call Trace: [ 267.679195][ T9023] [ 267.679201][ T9023] dump_stack_lvl+0x100/0x190 [ 267.679228][ T9023] should_fail_ex.cold+0x5/0xa [ 267.679253][ T9023] should_failslab+0xc2/0x120 [ 267.679269][ T9023] __kmalloc_cache_noprof+0x7a/0x6f0 [ 267.679289][ T9023] ? snd_virmidi_input_open+0xc8/0x4d0 [ 267.679304][ T9023] ? __kasan_kmalloc+0xaa/0xb0 [ 267.679328][ T9023] snd_virmidi_input_open+0xc8/0x4d0 [ 267.679346][ T9023] open_substream+0x480/0x9e0 [ 267.679367][ T9023] rawmidi_open_priv+0x524/0x6f0 [ 267.679388][ T9023] snd_rawmidi_open+0x4c9/0xba0 [ 267.679410][ T9023] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 267.679430][ T9023] ? __pfx_default_wake_function+0x10/0x10 [ 267.679446][ T9023] ? soundcore_open+0x231/0x5a0 [ 267.679459][ T9023] ? soundcore_open+0x231/0x5a0 [ 267.679474][ T9023] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 267.679494][ T9023] soundcore_open+0x2e3/0x5a0 [ 267.679509][ T9023] ? __pfx_soundcore_open+0x10/0x10 [ 267.679523][ T9023] chrdev_open+0x234/0x6a0 [ 267.679538][ T9023] ? __pfx_apparmor_file_open+0x10/0x10 [ 267.679560][ T9023] ? __pfx_chrdev_open+0x10/0x10 [ 267.679576][ T9023] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 267.679595][ T9023] do_dentry_open+0x6d8/0x1660 [ 267.679610][ T9023] ? __pfx_chrdev_open+0x10/0x10 [ 267.679629][ T9023] vfs_open+0x82/0x3f0 [ 267.679650][ T9023] path_openat+0x208c/0x31a0 [ 267.679671][ T9023] ? __pfx_path_openat+0x10/0x10 [ 267.679693][ T9023] do_file_open+0x20e/0x430 [ 267.679709][ T9023] ? __pfx_do_file_open+0x10/0x10 [ 267.679737][ T9023] ? alloc_fd+0x476/0x790 [ 267.679754][ T9023] ? do_getname+0x191/0x390 [ 267.679773][ T9023] do_sys_openat2+0x10d/0x1e0 [ 267.679791][ T9023] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.679811][ T9023] ? __fget_files+0x21f/0x3d0 [ 267.679828][ T9023] __x64_sys_openat+0x12d/0x210 [ 267.679847][ T9023] ? __pfx___x64_sys_openat+0x10/0x10 [ 267.679873][ T9023] do_syscall_64+0x106/0xf80 [ 267.679893][ T9023] ? clear_bhb_loop+0x40/0x90 [ 267.679910][ T9023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.679925][ T9023] RIP: 0033:0x7fa1d039c799 [ 267.679938][ T9023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.679952][ T9023] RSP: 002b:00007fa1d11d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 267.679966][ T9023] RAX: ffffffffffffffda RBX: 00007fa1d0615fa0 RCX: 00007fa1d039c799 [ 267.679975][ T9023] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 267.679984][ T9023] RBP: 00007fa1d0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 267.679993][ T9023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.680001][ T9023] R13: 00007fa1d0616038 R14: 00007fa1d0615fa0 R15: 00007fff5f72f788 [ 267.680021][ T9023] [ 268.415317][ T9029] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 271.838673][ T9081] FAULT_INJECTION: forcing a failure. [ 271.838673][ T9081] name fail_futex, interval 1, probability 0, space 0, times 1 [ 271.901827][ T9081] CPU: 1 UID: 0 PID: 9081 Comm: syz.3.738 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 271.901897][ T9081] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 271.901912][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.901925][ T9081] Call Trace: [ 271.901934][ T9081] [ 271.901944][ T9081] dump_stack_lvl+0x100/0x190 [ 271.901990][ T9081] should_fail_ex.cold+0x5/0xa [ 271.902022][ T9081] get_futex_key+0x1d2/0x1620 [ 271.902060][ T9081] ? __pfx_get_futex_key+0x10/0x10 [ 271.902105][ T9081] futex_wait_setup+0x83/0x510 [ 271.902155][ T9081] __futex_wait+0x19f/0x300 [ 271.902197][ T9081] ? __pfx___futex_wait+0x10/0x10 [ 271.902235][ T9081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 271.902283][ T9081] ? __pfx_futex_wake_mark+0x10/0x10 [ 271.902326][ T9081] ? futex_hash+0x2c5/0x380 [ 271.902367][ T9081] futex_wait+0xed/0x380 [ 271.902405][ T9081] ? __pfx_futex_wait+0x10/0x10 [ 271.902441][ T9081] ? tty_ioctl+0x1236/0x1690 [ 271.902486][ T9081] ? ldsem_up_read+0x4e/0x90 [ 271.902511][ T9081] ? tty_ioctl+0x345/0x1690 [ 271.902554][ T9081] do_futex+0x1ef/0x350 [ 271.902588][ T9081] ? __pfx_do_futex+0x10/0x10 [ 271.902625][ T9081] ? find_held_lock+0x2b/0x80 [ 271.902655][ T9081] __x64_sys_futex+0x34f/0x4d0 [ 271.902693][ T9081] ? __fget_files+0x21f/0x3d0 [ 271.902720][ T9081] ? __pfx___x64_sys_futex+0x10/0x10 [ 271.902764][ T9081] do_syscall_64+0x106/0xf80 [ 271.902801][ T9081] ? clear_bhb_loop+0x40/0x90 [ 271.902831][ T9081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.902855][ T9081] RIP: 0033:0x7f1d2bf9c799 [ 271.902887][ T9081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.902913][ T9081] RSP: 002b:00007f1d2ce0f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 271.902939][ T9081] RAX: ffffffffffffffda RBX: 00007f1d2c215fa8 RCX: 00007f1d2bf9c799 [ 271.902958][ T9081] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1d2c215fa8 [ 271.902975][ T9081] RBP: 00007f1d2c215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 271.902991][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.903004][ T9081] R13: 00007f1d2c216038 R14: 00007ffc1ea914b0 R15: 00007ffc1ea91598 [ 271.903037][ T9081] [ 272.704079][ T9091] FAULT_INJECTION: forcing a failure. [ 272.704079][ T9091] name failslab, interval 1, probability 0, space 0, times 0 [ 272.724551][ T9091] CPU: 1 UID: 0 PID: 9091 Comm: syz.2.742 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 272.724614][ T9091] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 272.724629][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.724644][ T9091] Call Trace: [ 272.724654][ T9091] [ 272.724665][ T9091] dump_stack_lvl+0x100/0x190 [ 272.724713][ T9091] should_fail_ex.cold+0x5/0xa [ 272.724747][ T9091] should_failslab+0xc2/0x120 [ 272.724778][ T9091] __kmalloc_cache_noprof+0x7a/0x6f0 [ 272.724814][ T9091] ? vkms_plane_duplicate_state+0x45/0x130 [ 272.724843][ T9091] ? ww_mutex_lock+0x37/0x160 [ 272.724880][ T9091] ? ww_mutex_lock+0x37/0x160 [ 272.724937][ T9091] vkms_plane_duplicate_state+0x45/0x130 [ 272.724967][ T9091] drm_atomic_get_plane_state+0x279/0x760 [ 272.725005][ T9091] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 272.725046][ T9091] ? trace_contention_end+0x140/0x180 [ 272.725090][ T9091] ? __mutex_lock+0x26a/0x1b90 [ 272.725128][ T9091] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 272.725168][ T9091] ? drm_master_internal_acquire+0x21/0x80 [ 272.725242][ T9091] drm_client_modeset_commit_locked+0x14d/0x580 [ 272.725286][ T9091] drm_client_modeset_commit+0x4f/0x80 [ 272.725325][ T9091] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 272.725368][ T9091] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 272.725408][ T9091] drm_fbdev_client_restore+0x1b/0x30 [ 272.725439][ T9091] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 272.725469][ T9091] drm_client_dev_restore+0x205/0x2a0 [ 272.725514][ T9091] drm_release+0x2c6/0x360 [ 272.725550][ T9091] ? __pfx_drm_release+0x10/0x10 [ 272.725585][ T9091] __fput+0x3ff/0xb40 [ 272.725625][ T9091] task_work_run+0x150/0x240 [ 272.725663][ T9091] ? __pfx_task_work_run+0x10/0x10 [ 272.725713][ T9091] exit_to_user_mode_loop+0x100/0x4a0 [ 272.725754][ T9091] do_syscall_64+0x668/0xf80 [ 272.725790][ T9091] ? clear_bhb_loop+0x40/0x90 [ 272.725826][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.725854][ T9091] RIP: 0033:0x7fa1d039c799 [ 272.725878][ T9091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.725912][ T9091] RSP: 002b:00007fa1d11d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 272.725940][ T9091] RAX: 0000000000000000 RBX: 00007fa1d0615fa0 RCX: 00007fa1d039c799 [ 272.725958][ T9091] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 272.725975][ T9091] RBP: 00007fa1d0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 272.725992][ T9091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.726008][ T9091] R13: 00007fa1d0616038 R14: 00007fa1d0615fa0 R15: 00007fff5f72f788 [ 272.726048][ T9091] [ 273.283392][ T9089] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 273.662813][ T9106] capability: warning: `syz.2.747' uses 32-bit capabilities (legacy support in use) [ 274.815050][ T9113] can: request_module (can-proto-0) failed. [ 275.361114][ T9122] can: request_module (can-proto-0) failed. [ 277.199704][ T9147] can: request_module (can-proto-0) failed. [ 277.637231][ T9154] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 278.378325][ T9164] can: request_module (can-proto-0) failed. [ 279.538561][ T9179] can: request_module (can-proto-0) failed. [ 279.966282][ T9186] FAULT_INJECTION: forcing a failure. [ 279.966282][ T9186] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 279.979685][ T9186] CPU: 1 UID: 0 PID: 9186 Comm: syz.1.766 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 279.979745][ T9186] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 279.979759][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.979773][ T9186] Call Trace: [ 279.979781][ T9186] [ 279.979791][ T9186] dump_stack_lvl+0x100/0x190 [ 279.979831][ T9186] should_fail_ex.cold+0x5/0xa [ 279.979854][ T9186] ? prepare_alloc_pages+0x16d/0x5f0 [ 279.979883][ T9186] should_fail_alloc_page+0xeb/0x140 [ 279.979910][ T9186] prepare_alloc_pages+0x1f0/0x5f0 [ 279.979943][ T9186] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 279.979985][ T9186] ? cpa_flush+0x19c/0x980 [ 279.980008][ T9186] ? __lock_acquire+0x4a5/0x2630 [ 279.980038][ T9186] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 279.980073][ T9186] ? pgprot2cachemode+0x9a/0x130 [ 279.980104][ T9186] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 279.980156][ T9186] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 279.980195][ T9186] ? policy_nodemask+0xed/0x4f0 [ 279.980219][ T9186] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 279.980259][ T9186] ? policy_nodemask+0xed/0x4f0 [ 279.980286][ T9186] alloc_pages_mpol+0x1fb/0x550 [ 279.980312][ T9186] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 279.980339][ T9186] ? alloc_pages_noprof+0x233/0x390 [ 279.980368][ T9186] alloc_pages_noprof+0x131/0x390 [ 279.980394][ T9186] kimage_alloc_pages+0x72/0x380 [ 279.980422][ T9186] kimage_alloc_page+0x232/0x910 [ 279.980453][ T9186] kimage_load_segment+0x507/0xde0 [ 279.980486][ T9186] do_kexec_load+0x58d/0x810 [ 279.980514][ T9186] ? __pfx_do_kexec_load+0x10/0x10 [ 279.980542][ T9186] ? _copy_from_user+0x59/0xd0 [ 279.980572][ T9186] __x64_sys_kexec_load+0x1bf/0x230 [ 279.980600][ T9186] do_syscall_64+0x106/0xf80 [ 279.980631][ T9186] ? clear_bhb_loop+0x40/0x90 [ 279.980668][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.980693][ T9186] RIP: 0033:0x7fa7d5b9c799 [ 279.980714][ T9186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.980737][ T9186] RSP: 002b:00007fa7d6a94028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 279.980759][ T9186] RAX: ffffffffffffffda RBX: 00007fa7d5e15fa0 RCX: 00007fa7d5b9c799 [ 279.980775][ T9186] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 00000000ffffffff [ 279.980791][ T9186] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 279.980805][ T9186] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 279.980819][ T9186] R13: 00007fa7d5e16038 R14: 00007fa7d5e15fa0 R15: 00007ffdaa6360d8 [ 279.980852][ T9186] [ 280.982485][ T9198] netlink: 'syz.2.769': attribute type 1 has an invalid length. [ 281.016178][ T9195] netlink: 'syz.0.767': attribute type 1 has an invalid length. [ 281.695100][ T9205] can: request_module (can-proto-0) failed. [ 281.949432][ T9211] can: request_module (can-proto-0) failed. [ 282.661988][ T9220] can: request_module (can-proto-0) failed. [ 283.101775][ T9228] netlink: 346 bytes leftover after parsing attributes in process `syz.0.775'. [ 284.116963][ T9233] FAULT_INJECTION: forcing a failure. [ 284.116963][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 284.179647][ T9233] CPU: 0 UID: 0 PID: 9233 Comm: syz.0.776 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 284.179707][ T9233] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 284.179723][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.179738][ T9233] Call Trace: [ 284.179747][ T9233] [ 284.179757][ T9233] dump_stack_lvl+0x100/0x190 [ 284.179804][ T9233] should_fail_ex.cold+0x5/0xa [ 284.179838][ T9233] should_failslab+0xc2/0x120 [ 284.179869][ T9233] __kmalloc_cache_node_noprof+0x7d/0x770 [ 284.179910][ T9233] ? __get_vm_area_node+0x101/0x330 [ 284.179938][ T9233] ? register_lock_class+0x40/0x560 [ 284.179978][ T9233] __get_vm_area_node+0x101/0x330 [ 284.180012][ T9233] __vmalloc_node_range_noprof+0x213/0x1530 [ 284.180045][ T9233] ? n_tty_open+0x1a/0x170 [ 284.180069][ T9233] ? do_raw_spin_lock+0x128/0x260 [ 284.180118][ T9233] ? look_up_lock_class+0x64/0x120 [ 284.180162][ T9233] ? n_tty_open+0x1a/0x170 [ 284.180196][ T9233] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.180231][ T9233] ? __ldsem_down_write_nested+0xfd/0x830 [ 284.180258][ T9233] ? __ldsem_down_write_nested+0x10e/0x830 [ 284.180290][ T9233] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 284.180319][ T9233] ? n_tty_open+0x1a/0x170 [ 284.180342][ T9233] __vmalloc_node_noprof+0xad/0xf0 [ 284.180373][ T9233] ? n_tty_open+0x1a/0x170 [ 284.180399][ T9233] ? __pfx_n_tty_open+0x10/0x10 [ 284.180423][ T9233] n_tty_open+0x1a/0x170 [ 284.180450][ T9233] tty_ldisc_open+0xa2/0x120 [ 284.180481][ T9233] tty_ldisc_setup+0x40/0xf0 [ 284.180516][ T9233] tty_init_dev.part.0+0x1b5/0x470 [ 284.180555][ T9233] tty_open+0xa63/0xfa0 [ 284.180600][ T9233] ? __pfx_tty_open+0x10/0x10 [ 284.180636][ T9233] ? chrdev_open+0x589/0x6a0 [ 284.180666][ T9233] ? chrdev_open+0x589/0x6a0 [ 284.180698][ T9233] ? __pfx_tty_open+0x10/0x10 [ 284.180736][ T9233] chrdev_open+0x234/0x6a0 [ 284.180765][ T9233] ? __pfx_chrdev_open+0x10/0x10 [ 284.180795][ T9233] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 284.180831][ T9233] do_dentry_open+0x6d8/0x1660 [ 284.180858][ T9233] ? __pfx_chrdev_open+0x10/0x10 [ 284.180895][ T9233] vfs_open+0x82/0x3f0 [ 284.180933][ T9233] path_openat+0x208c/0x31a0 [ 284.180974][ T9233] ? __pfx_path_openat+0x10/0x10 [ 284.181017][ T9233] do_file_open+0x20e/0x430 [ 284.181047][ T9233] ? __pfx_do_file_open+0x10/0x10 [ 284.181100][ T9233] ? alloc_fd+0x476/0x790 [ 284.181140][ T9233] ? do_getname+0x191/0x390 [ 284.181178][ T9233] do_sys_openat2+0x10d/0x1e0 [ 284.181212][ T9233] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.181260][ T9233] __x64_sys_openat+0x12d/0x210 [ 284.181295][ T9233] ? __pfx___x64_sys_openat+0x10/0x10 [ 284.181343][ T9233] do_syscall_64+0x106/0xf80 [ 284.181379][ T9233] ? clear_bhb_loop+0x40/0x90 [ 284.181411][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.181438][ T9233] RIP: 0033:0x7f8a14f9c799 [ 284.181462][ T9233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.181488][ T9233] RSP: 002b:00007f8a15dae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 284.181514][ T9233] RAX: ffffffffffffffda RBX: 00007f8a15215fa0 RCX: 00007f8a14f9c799 [ 284.181532][ T9233] RDX: 0000000000020080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 284.181550][ T9233] RBP: 00007f8a15032c99 R08: 0000000000000000 R09: 0000000000000000 [ 284.181566][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.181582][ T9233] R13: 00007f8a15216038 R14: 00007f8a15215fa0 R15: 00007ffeb3577938 [ 284.181618][ T9233] [ 284.181916][ T9233] syz.0.776: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 284.574313][ T9233] CPU: 0 UID: 0 PID: 9233 Comm: syz.0.776 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 284.574365][ T9233] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 284.574379][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.574395][ T9233] Call Trace: [ 284.574404][ T9233] [ 284.574413][ T9233] dump_stack_lvl+0x100/0x190 [ 284.574440][ T9233] warn_alloc.cold+0x95/0x1c1 [ 284.574465][ T9233] ? __pfx_warn_alloc+0x10/0x10 [ 284.574485][ T9233] ? trace_kmalloc+0x101/0x130 [ 284.574502][ T9233] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 284.574527][ T9233] ? __kasan_kmalloc+0x8a/0xb0 [ 284.574551][ T9233] ? __get_vm_area_node+0x208/0x330 [ 284.574575][ T9233] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 284.574593][ T9233] ? do_raw_spin_lock+0x128/0x260 [ 284.574614][ T9233] ? look_up_lock_class+0x64/0x120 [ 284.574636][ T9233] ? n_tty_open+0x1a/0x170 [ 284.574656][ T9233] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.574674][ T9233] ? __ldsem_down_write_nested+0xfd/0x830 [ 284.574688][ T9233] ? __ldsem_down_write_nested+0x10e/0x830 [ 284.574705][ T9233] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 284.574722][ T9233] ? n_tty_open+0x1a/0x170 [ 284.574735][ T9233] __vmalloc_node_noprof+0xad/0xf0 [ 284.574752][ T9233] ? n_tty_open+0x1a/0x170 [ 284.574766][ T9233] ? __pfx_n_tty_open+0x10/0x10 [ 284.574779][ T9233] n_tty_open+0x1a/0x170 [ 284.574793][ T9233] tty_ldisc_open+0xa2/0x120 [ 284.574811][ T9233] tty_ldisc_setup+0x40/0xf0 [ 284.574830][ T9233] tty_init_dev.part.0+0x1b5/0x470 [ 284.574853][ T9233] tty_open+0xa63/0xfa0 [ 284.574877][ T9233] ? __pfx_tty_open+0x10/0x10 [ 284.574896][ T9233] ? chrdev_open+0x589/0x6a0 [ 284.574910][ T9233] ? chrdev_open+0x589/0x6a0 [ 284.574927][ T9233] ? __pfx_tty_open+0x10/0x10 [ 284.574946][ T9233] chrdev_open+0x234/0x6a0 [ 284.574961][ T9233] ? __pfx_chrdev_open+0x10/0x10 [ 284.574977][ T9233] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 284.574996][ T9233] do_dentry_open+0x6d8/0x1660 [ 284.575010][ T9233] ? __pfx_chrdev_open+0x10/0x10 [ 284.575029][ T9233] vfs_open+0x82/0x3f0 [ 284.575049][ T9233] path_openat+0x208c/0x31a0 [ 284.575076][ T9233] ? __pfx_path_openat+0x10/0x10 [ 284.575098][ T9233] do_file_open+0x20e/0x430 [ 284.575114][ T9233] ? __pfx_do_file_open+0x10/0x10 [ 284.575142][ T9233] ? alloc_fd+0x476/0x790 [ 284.575159][ T9233] ? do_getname+0x191/0x390 [ 284.575177][ T9233] do_sys_openat2+0x10d/0x1e0 [ 284.575196][ T9233] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.575221][ T9233] __x64_sys_openat+0x12d/0x210 [ 284.575240][ T9233] ? __pfx___x64_sys_openat+0x10/0x10 [ 284.575266][ T9233] do_syscall_64+0x106/0xf80 [ 284.575285][ T9233] ? clear_bhb_loop+0x40/0x90 [ 284.575302][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.575317][ T9233] RIP: 0033:0x7f8a14f9c799 [ 284.575330][ T9233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.575343][ T9233] RSP: 002b:00007f8a15dae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 284.575357][ T9233] RAX: ffffffffffffffda RBX: 00007f8a15215fa0 RCX: 00007f8a14f9c799 [ 284.575366][ T9233] RDX: 0000000000020080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 284.575375][ T9233] RBP: 00007f8a15032c99 R08: 0000000000000000 R09: 0000000000000000 [ 284.575386][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.575400][ T9233] R13: 00007f8a15216038 R14: 00007f8a15215fa0 R15: 00007ffeb3577938 [ 284.575436][ T9233] [ 284.575455][ T9233] Mem-Info: [ 285.002166][ T9240] FAULT_INJECTION: forcing a failure. [ 285.002166][ T9240] name failslab, interval 1, probability 0, space 0, times 0 [ 285.017648][ T9240] CPU: 0 UID: 0 PID: 9240 Comm: syz.2.779 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 285.017711][ T9240] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 285.017726][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.017742][ T9240] Call Trace: [ 285.017751][ T9240] [ 285.017762][ T9240] dump_stack_lvl+0x100/0x190 [ 285.017809][ T9240] should_fail_ex.cold+0x5/0xa [ 285.017843][ T9240] should_failslab+0xc2/0x120 [ 285.017872][ T9240] __kmalloc_cache_noprof+0x7a/0x6f0 [ 285.017909][ T9240] ? mISDN_ioctl+0x40b/0x9a0 [ 285.017958][ T9240] mISDN_ioctl+0x40b/0x9a0 [ 285.018001][ T9240] ? __pfx_mISDN_ioctl+0x10/0x10 [ 285.018044][ T9240] __x64_sys_ioctl+0x18e/0x210 [ 285.018086][ T9240] do_syscall_64+0x106/0xf80 [ 285.018136][ T9240] ? clear_bhb_loop+0x40/0x90 [ 285.018170][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.018198][ T9240] RIP: 0033:0x7fa1d039c799 [ 285.018220][ T9240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.018245][ T9240] RSP: 002b:00007fa1d11d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.018271][ T9240] RAX: ffffffffffffffda RBX: 00007fa1d0615fa0 RCX: 00007fa1d039c799 [ 285.018289][ T9240] RDX: 0000000000000000 RSI: 0000000080044940 RDI: 0000000000000004 [ 285.018306][ T9240] RBP: 00007fa1d0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 285.018323][ T9240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.018339][ T9240] R13: 00007fa1d0616038 R14: 00007fa1d0615fa0 R15: 00007fff5f72f788 [ 285.018378][ T9240] [ 285.434291][ T9233] active_anon:88238 inactive_anon:0 isolated_anon:0 [ 285.434291][ T9233] active_file:21802 inactive_file:40567 isolated_file:0 [ 285.434291][ T9233] unevictable:768 dirty:264 writeback:0 [ 285.434291][ T9233] slab_reclaimable:11336 slab_unreclaimable:92937 [ 285.434291][ T9233] mapped:54461 shmem:74824 pagetables:1369 [ 285.434291][ T9233] sec_pagetables:0 bounce:0 [ 285.434291][ T9233] kernel_misc_reclaimable:0 [ 285.434291][ T9233] free:1231688 free_pcp:18391 free_cma:0 [ 285.644243][ T9233] Node 0 active_anon:358352kB inactive_anon:0kB active_file:87208kB inactive_file:162068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:220144kB dirty:1056kB writeback:0kB shmem:303160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11436kB pagetables:5316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.896524][ T9233] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 286.130284][ T9233] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.274337][ T9233] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 286.282851][ T9233] Node 0 DMA32 free:984804kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:331560kB inactive_anon:0kB active_file:87208kB inactive_file:162068kB unevictable:1536kB writepending:1096kB zspages:0kB present:3129332kB managed:2537384kB mlocked:0kB bounce:0kB free_pcp:82236kB local_pcp:53548kB free_cma:0kB [ 286.424326][ T9233] lowmem_reserve[]: 0 0 1 1 1 [ 286.459319][ T9233] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.524359][ T9233] lowmem_reserve[]: 0 0 0 0 0 [ 286.529152][ T9233] Node 1 Normal free:3938960kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:180kB free_cma:0kB [ 286.654539][ T9233] lowmem_reserve[]: 0 0 0 0 0 [ 286.659324][ T9233] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 286.709263][ T9251] can: request_module (can-proto-0) failed. [ 286.779017][ T9233] Node 0 DMA32: 8796*4kB (UME) 1565*8kB (UME) 530*16kB (UM) 362*32kB (UME) 188*64kB (UME) 210*128kB (UM) 258*256kB (UME) 94*512kB (UME) 34*1024kB (UME) 2*2048kB (UM) 183*4096kB (M) = 1009336kB [ 286.886648][ T9233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 286.964437][ T9233] Node 1 Normal: 5*4kB (UM) 11*8kB (UM) 12*16kB (UM) 9*32kB (UM) 5*64kB (UM) 7*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3938572kB [ 287.077762][ T9233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.128751][ T9233] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.254402][ T9233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.496534][ T9233] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.519951][ T9233] 120494 total pagecache pages [ 287.568224][ T9233] 0 pages in swap cache [ 287.583243][ T9233] Free swap = 124996kB [ 287.611359][ T9233] Total swap = 124996kB [ 287.642558][ T9233] 2097051 pages RAM [ 287.684239][ T9233] 0 pages HighMem/MovableOnly [ 287.715892][ T9233] 430825 pages reserved [ 287.720062][ T9233] 0 pages cma reserved [ 287.754273][ T9233] pty pty177: ldisc open failed (-12), clearing slot 177 [ 287.947561][ T9261] netlink: 86 bytes leftover after parsing attributes in process `syz.3.786'. [ 288.725565][ T9276] can: request_module (can-proto-0) failed. [ 288.737209][ T9274] can: request_module (can-proto-0) failed. [ 288.762667][ T9277] can: request_module (can-proto-0) failed. [ 289.477215][ T9286] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 290.924781][ T9307] can: request_module (can-proto-0) failed. [ 291.703157][ T9324] FAULT_INJECTION: forcing a failure. [ 291.703157][ T9324] name failslab, interval 1, probability 0, space 0, times 0 [ 291.753398][ T9324] CPU: 0 UID: 0 PID: 9324 Comm: syz.3.801 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 291.753460][ T9324] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 291.753476][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.753492][ T9324] Call Trace: [ 291.753501][ T9324] [ 291.753512][ T9324] dump_stack_lvl+0x100/0x190 [ 291.753559][ T9324] should_fail_ex.cold+0x5/0xa [ 291.753605][ T9324] should_failslab+0xc2/0x120 [ 291.753635][ T9324] __kmalloc_cache_noprof+0x7a/0x6f0 [ 291.753672][ T9324] ? alloc_pipe_info+0x10e/0x590 [ 291.753700][ T9324] ? find_held_lock+0x2b/0x80 [ 291.753731][ T9324] alloc_pipe_info+0x10e/0x590 [ 291.753763][ T9324] splice_direct_to_actor+0x78f/0xa30 [ 291.753793][ T9324] ? __lock_acquire+0x4a5/0x2630 [ 291.753824][ T9324] ? __pfx_direct_splice_actor+0x10/0x10 [ 291.753869][ T9324] ? __pfx_aa_file_perm+0x10/0x10 [ 291.753906][ T9324] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 291.753945][ T9324] do_splice_direct+0x174/0x240 [ 291.753973][ T9324] ? __pfx_do_splice_direct+0x10/0x10 [ 291.754002][ T9324] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 291.754050][ T9324] ? rw_verify_area+0xce/0x6d0 [ 291.754090][ T9324] do_sendfile+0xadc/0xe20 [ 291.754137][ T9324] ? __pfx_do_sendfile+0x10/0x10 [ 291.754177][ T9324] ? apparmor_capable+0x1d7/0x4d0 [ 291.754204][ T9324] ? __x64_sys_futex+0x34f/0x4d0 [ 291.754234][ T9324] ? __x64_sys_futex+0x358/0x4d0 [ 291.754269][ T9324] __x64_sys_sendfile64+0x1d8/0x220 [ 291.754299][ T9324] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 291.754336][ T9324] do_syscall_64+0x106/0xf80 [ 291.754372][ T9324] ? clear_bhb_loop+0x40/0x90 [ 291.754405][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.754434][ T9324] RIP: 0033:0x7f1d2bf9c799 [ 291.754458][ T9324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.754486][ T9324] RSP: 002b:00007f1d2ce0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 291.754514][ T9324] RAX: ffffffffffffffda RBX: 00007f1d2c215fa0 RCX: 00007f1d2bf9c799 [ 291.754532][ T9324] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 291.754549][ T9324] RBP: 00007f1d2c032c99 R08: 0000000000000000 R09: 0000000000000000 [ 291.754566][ T9324] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 291.754592][ T9324] R13: 00007f1d2c216038 R14: 00007f1d2c215fa0 R15: 00007ffc1ea91598 [ 291.754629][ T9324] [ 294.224354][ T9364] can: request_module (can-proto-0) failed. [ 296.435740][ T9394] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 296.602497][ T9398] can: request_module (can-proto-0) failed. [ 297.030883][ T9406] FAULT_INJECTION: forcing a failure. [ 297.030883][ T9406] name failslab, interval 1, probability 0, space 0, times 0 [ 297.127271][ T9406] CPU: 1 UID: 0 PID: 9406 Comm: syz.2.821 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 297.127308][ T9406] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 297.127316][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.127325][ T9406] Call Trace: [ 297.127330][ T9406] [ 297.127336][ T9406] dump_stack_lvl+0x100/0x190 [ 297.127368][ T9406] should_fail_ex.cold+0x5/0xa [ 297.127386][ T9406] should_failslab+0xc2/0x120 [ 297.127401][ T9406] __kmalloc_cache_noprof+0x7a/0x6f0 [ 297.127420][ T9406] ? __debugfs_file_get+0x2ac/0x860 [ 297.127444][ T9406] __debugfs_file_get+0x2ac/0x860 [ 297.127462][ T9406] ? __pfx___debugfs_file_get+0x10/0x10 [ 297.127481][ T9406] ? do_raw_spin_lock+0x128/0x260 [ 297.127502][ T9406] ? __pfx_apparmor_file_open+0x10/0x10 [ 297.127524][ T9406] ? path_get+0x61/0x80 [ 297.127542][ T9406] open_proxy_open+0x7e/0x330 [ 297.127564][ T9406] do_dentry_open+0x6d8/0x1660 [ 297.127578][ T9406] ? __pfx_open_proxy_open+0x10/0x10 [ 297.127602][ T9406] vfs_open+0x82/0x3f0 [ 297.127622][ T9406] path_openat+0x208c/0x31a0 [ 297.127642][ T9406] ? __pfx_path_openat+0x10/0x10 [ 297.127664][ T9406] do_file_open+0x20e/0x430 [ 297.127680][ T9406] ? __pfx_do_file_open+0x10/0x10 [ 297.127707][ T9406] ? alloc_fd+0x476/0x790 [ 297.127723][ T9406] ? do_getname+0x191/0x390 [ 297.127742][ T9406] do_sys_openat2+0x10d/0x1e0 [ 297.127760][ T9406] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.127785][ T9406] __x64_sys_openat+0x12d/0x210 [ 297.127804][ T9406] ? __pfx___x64_sys_openat+0x10/0x10 [ 297.127830][ T9406] do_syscall_64+0x106/0xf80 [ 297.127857][ T9406] ? clear_bhb_loop+0x40/0x90 [ 297.127876][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.127892][ T9406] RIP: 0033:0x7fa1d039c799 [ 297.127906][ T9406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.127920][ T9406] RSP: 002b:00007fa1d11d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 297.127935][ T9406] RAX: ffffffffffffffda RBX: 00007fa1d0615fa0 RCX: 00007fa1d039c799 [ 297.127944][ T9406] RDX: 0000000000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 297.127953][ T9406] RBP: 00007fa1d0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 297.127961][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.127969][ T9406] R13: 00007fa1d0616038 R14: 00007fa1d0615fa0 R15: 00007fff5f72f788 [ 297.127988][ T9406] [ 297.795135][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 298.016723][ T9423] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 298.054864][ T9423] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 298.094012][ T9423] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 298.134501][ T9423] page_type: f5(slab) [ 298.149292][ T9423] raw: 00fff00000000040 ffff88813fe543c0 dead000000000100 dead000000000122 [ 298.185083][ T9423] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 298.244731][ T9423] head: 00fff00000000040 ffff88813fe543c0 dead000000000100 dead000000000122 [ 298.267787][ T9423] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 298.290993][ T9423] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 298.356689][ T9423] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 298.382285][ T9429] netlink: 330 bytes leftover after parsing attributes in process `syz.3.828'. [ 298.401762][ T9423] page dumped because: unmovable page [ 298.464345][ T9423] page_owner tracks the page as allocated [ 298.471498][ T9423] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5832, tgid 5832 (syz-executor), ts 79040173609, free_ts 47728915994 [ 298.543600][ T9423] post_alloc_hook+0x153/0x170 [ 298.565145][ T9423] get_page_from_freelist+0x111d/0x3140 [ 298.624329][ T9423] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 298.630412][ T9423] new_slab+0xa6/0x6b0 [ 298.673886][ T9423] refill_objects+0x26b/0x400 [ 298.680479][ T9423] __pcs_replace_empty_main+0x1ab/0x660 [ 298.716637][ T9423] __kmalloc_noprof+0x688/0x850 [ 298.737801][ T9423] __register_sysctl_table+0xac/0x1650 [ 298.836031][ T9423] __devinet_sysctl_register+0x1b9/0x360 [ 298.884414][ T9423] devinet_sysctl_register+0x17b/0x210 [ 298.889953][ T9423] inetdev_init+0x2b8/0x570 [ 298.981042][ T9423] inetdev_event+0x7fa/0x17f0 [ 298.986513][ T9423] notifier_call_chain+0x99/0x420 [ 298.993268][ T9423] call_netdevice_notifiers_info+0xbe/0x110 [ 299.034644][ T9423] register_netdevice+0x16e6/0x2210 [ 299.039880][ T9423] register_vlan_dev+0x36c/0x910 [ 299.063550][ T9439] can: request_module (can-proto-0) failed. [ 299.108035][ T9423] page last free pid 5489 tgid 5489 stack trace: [ 299.131134][ T9423] __free_frozen_pages+0x7e1/0x10d0 [ 299.151893][ T9423] qlist_free_all+0x47/0xe0 [ 299.166530][ T9423] kasan_quarantine_reduce+0x1a0/0x1f0 [ 299.188548][ T9423] __kasan_slab_alloc+0x69/0x90 [ 299.205964][ T9423] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 299.225989][ T9423] __alloc_skb+0x140/0x710 [ 299.241355][ T9423] netlink_alloc_large_skb+0x69/0x150 [ 299.260875][ T9423] netlink_sendmsg+0x680/0xda0 [ 299.276517][ T9423] ____sys_sendmsg+0x9e1/0xb70 [ 299.291519][ T9423] ___sys_sendmsg+0x190/0x1e0 [ 299.310999][ T9423] __sys_sendmsg+0x170/0x220 [ 299.325732][ T9423] do_syscall_64+0x106/0xf80 [ 299.343750][ T9423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.610292][ T9449] netlink: 'syz.1.833': attribute type 1 has an invalid length. [ 302.256694][ T9497] can: request_module (can-proto-0) failed. [ 302.331885][ T9500] can: request_module (can-proto-0) failed. [ 303.264476][ T9516] can: request_module (can-proto-0) failed. [ 304.740762][ T9531] can: request_module (can-proto-0) failed. [ 305.535320][ T9551] FAULT_INJECTION: forcing a failure. [ 305.535320][ T9551] name failslab, interval 1, probability 0, space 0, times 0 [ 305.574551][ T9551] CPU: 1 UID: 0 PID: 9551 Comm: syz.2.860 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 305.574612][ T9551] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 305.574627][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 305.574648][ T9551] Call Trace: [ 305.574657][ T9551] [ 305.574668][ T9551] dump_stack_lvl+0x100/0x190 [ 305.574718][ T9551] should_fail_ex.cold+0x5/0xa [ 305.574751][ T9551] should_failslab+0xc2/0x120 [ 305.574781][ T9551] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 305.574820][ T9551] ? __kernfs_new_node+0xd2/0x960 [ 305.574865][ T9551] __kernfs_new_node+0xd2/0x960 [ 305.574902][ T9551] ? find_held_lock+0x2b/0x80 [ 305.574929][ T9551] ? kernfs_add_one+0x583/0x850 [ 305.574970][ T9551] ? __pfx___kernfs_new_node+0x10/0x10 [ 305.575026][ T9551] ? find_held_lock+0x2b/0x80 [ 305.575051][ T9551] ? kernfs_root+0xee/0x2a0 [ 305.575089][ T9551] ? kernfs_root+0xee/0x2a0 [ 305.575135][ T9551] kernfs_new_node+0x11b/0x1a0 [ 305.575184][ T9551] kernfs_create_dir_ns+0x4c/0x1a0 [ 305.575232][ T9551] internal_create_group+0x36f/0xf40 [ 305.575283][ T9551] ? __pfx_internal_create_group+0x10/0x10 [ 305.575330][ T9551] ? kernfs_create_link+0x1bd/0x240 [ 305.575368][ T9551] internal_create_groups+0x9d/0x150 [ 305.575411][ T9551] device_add+0xf5b/0x1950 [ 305.575450][ T9551] ? __pfx_device_add+0x10/0x10 [ 305.575481][ T9551] ? lockdep_init_map_type+0x5c/0x250 [ 305.575518][ T9551] ? __init_waitqueue_head+0xca/0x150 [ 305.575566][ T9551] netdev_register_kobject+0x1a9/0x3d0 [ 305.575615][ T9551] register_netdevice+0x12e0/0x2210 [ 305.575665][ T9551] ? __pfx_register_netdevice+0x10/0x10 [ 305.575717][ T9551] __tun_chr_ioctl+0x1ded/0x47c0 [ 305.575745][ T9551] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 305.575790][ T9551] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 305.575822][ T9551] ? hook_file_ioctl_common+0x146/0x410 [ 305.575862][ T9551] ? __fget_files+0x21f/0x3d0 [ 305.575895][ T9551] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 305.575924][ T9551] __x64_sys_ioctl+0x18e/0x210 [ 305.575965][ T9551] do_syscall_64+0x106/0xf80 [ 305.576011][ T9551] ? clear_bhb_loop+0x40/0x90 [ 305.576048][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.576076][ T9551] RIP: 0033:0x7fa1d039c799 [ 305.576101][ T9551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.576128][ T9551] RSP: 002b:00007fa1d11d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.576161][ T9551] RAX: ffffffffffffffda RBX: 00007fa1d0615fa0 RCX: 00007fa1d039c799 [ 305.576180][ T9551] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 305.576197][ T9551] RBP: 00007fa1d0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 305.576214][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.576231][ T9551] R13: 00007fa1d0616038 R14: 00007fa1d0615fa0 R15: 00007fff5f72f788 [ 305.576270][ T9551] [ 306.504536][ T9560] FAULT_INJECTION: forcing a failure. [ 306.504536][ T9560] name failslab, interval 1, probability 0, space 0, times 0 [ 306.611655][ T9560] CPU: 1 UID: 0 PID: 9560 Comm: syz.0.862 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 306.611720][ T9560] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 306.611735][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.611751][ T9560] Call Trace: [ 306.611761][ T9560] [ 306.611772][ T9560] dump_stack_lvl+0x100/0x190 [ 306.611820][ T9560] should_fail_ex.cold+0x5/0xa [ 306.611853][ T9560] should_failslab+0xc2/0x120 [ 306.611883][ T9560] __kmalloc_cache_noprof+0x7a/0x6f0 [ 306.611917][ T9560] ? landlock_init_hierarchy_log+0xa9/0x820 [ 306.611963][ T9560] landlock_init_hierarchy_log+0xa9/0x820 [ 306.611999][ T9560] ? inherit_tree+0x197/0x2d0 [ 306.612031][ T9560] landlock_merge_ruleset+0x67b/0x830 [ 306.612067][ T9560] __do_sys_landlock_restrict_self+0x2a6/0x9e0 [ 306.612121][ T9560] do_syscall_64+0x106/0xf80 [ 306.612159][ T9560] ? clear_bhb_loop+0x40/0x90 [ 306.612194][ T9560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.612222][ T9560] RIP: 0033:0x7f8a14f9c799 [ 306.612246][ T9560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.612273][ T9560] RSP: 002b:00007f8a15dae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 306.612300][ T9560] RAX: ffffffffffffffda RBX: 00007f8a15215fa0 RCX: 00007f8a14f9c799 [ 306.612318][ T9560] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005 [ 306.612335][ T9560] RBP: 00007f8a15032c99 R08: 0000000000000000 R09: 0000000000000000 [ 306.612352][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.612368][ T9560] R13: 00007f8a15216038 R14: 00007f8a15215fa0 R15: 00007ffeb3577938 [ 306.612413][ T9560] [ 307.762121][ T9577] can: request_module (can-proto-0) failed. [ 309.974099][ T9605] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 310.005113][ T9605] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 310.034450][ T9605] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 310.094830][ T9605] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 310.985528][ T9625] can: request_module (can-proto-0) failed. [ 311.965980][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 312.049753][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 312.055888][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 312.124338][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 312.960036][ T9649] netlink: 17 bytes leftover after parsing attributes in process `syz.1.888'. [ 313.489295][ T9661] can: request_module (can-proto-0) failed. [ 313.511876][ T9660] FAULT_INJECTION: forcing a failure. [ 313.511876][ T9660] name failslab, interval 1, probability 0, space 0, times 0 [ 313.684820][ T9660] CPU: 1 UID: 0 PID: 9660 Comm: syz.3.891 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 313.684882][ T9660] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 313.684896][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.684911][ T9660] Call Trace: [ 313.684920][ T9660] [ 313.684929][ T9660] dump_stack_lvl+0x100/0x190 [ 313.684976][ T9660] should_fail_ex.cold+0x5/0xa [ 313.685009][ T9660] should_failslab+0xc2/0x120 [ 313.685038][ T9660] __kmalloc_node_noprof+0xe6/0x850 [ 313.685079][ T9660] ? mempool_init_node+0x11b/0x6e0 [ 313.685106][ T9660] ? lockdep_init_map_type+0x5c/0x250 [ 313.685146][ T9660] ? __pfx_mempool_free_slab+0x10/0x10 [ 313.685172][ T9660] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 313.685211][ T9660] mempool_init_node+0x11b/0x6e0 [ 313.685240][ T9660] ? __pfx_xa_load+0x10/0x10 [ 313.685287][ T9660] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 313.685314][ T9660] ? __pfx_mempool_free_slab+0x10/0x10 [ 313.685343][ T9660] mempool_init_noprof+0x3a/0x50 [ 313.685376][ T9660] bioset_init+0x37e/0x8a0 [ 313.685406][ T9660] ? __pfx_bioset_init+0x10/0x10 [ 313.685450][ T9660] __alloc_disk_node+0x83/0x6b0 [ 313.685485][ T9660] __blk_mq_alloc_disk+0x89/0x120 [ 313.685527][ T9660] loop_add+0x498/0xb60 [ 313.685563][ T9660] ? __pfx_loop_add+0x10/0x10 [ 313.685617][ T9660] ? find_held_lock+0x2b/0x80 [ 313.685642][ T9660] ? __fget_files+0x215/0x3d0 [ 313.685671][ T9660] loop_control_ioctl+0xae/0x620 [ 313.685708][ T9660] ? __pfx_loop_control_ioctl+0x10/0x10 [ 313.685751][ T9660] ? __pfx_loop_control_ioctl+0x10/0x10 [ 313.685790][ T9660] __x64_sys_ioctl+0x18e/0x210 [ 313.685832][ T9660] do_syscall_64+0x106/0xf80 [ 313.685868][ T9660] ? clear_bhb_loop+0x40/0x90 [ 313.685902][ T9660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.685931][ T9660] RIP: 0033:0x7f1d2bf9c799 [ 313.685954][ T9660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.685980][ T9660] RSP: 002b:00007f1d2ce0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.686007][ T9660] RAX: ffffffffffffffda RBX: 00007f1d2c215fa0 RCX: 00007f1d2bf9c799 [ 313.686025][ T9660] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 313.686043][ T9660] RBP: 00007f1d2c032c99 R08: 0000000000000000 R09: 0000000000000000 [ 313.686059][ T9660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.686075][ T9660] R13: 00007f1d2c216038 R14: 00007f1d2c215fa0 R15: 00007ffc1ea91598 [ 313.686112][ T9660] [ 315.123830][ T9678] can: request_module (can-proto-0) failed. [ 315.135091][ T9673] netlink: 'syz.3.895': attribute type 1 has an invalid length. [ 315.717530][ T9683] FAULT_INJECTION: forcing a failure. [ 315.717530][ T9683] name failslab, interval 1, probability 0, space 0, times 0 [ 315.824619][ T9683] CPU: 1 UID: 0 PID: 9683 Comm: syz.1.898 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 315.824683][ T9683] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 315.824699][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.824716][ T9683] Call Trace: [ 315.824725][ T9683] [ 315.824736][ T9683] dump_stack_lvl+0x100/0x190 [ 315.824785][ T9683] should_fail_ex.cold+0x5/0xa [ 315.824815][ T9683] should_failslab+0xc2/0x120 [ 315.824847][ T9683] __kmalloc_cache_noprof+0x7a/0x6f0 [ 315.824884][ T9683] ? dummy_hrtimer_create+0x45/0x170 [ 315.824925][ T9683] dummy_hrtimer_create+0x45/0x170 [ 315.824960][ T9683] ? __pfx_dummy_hrtimer_create+0x10/0x10 [ 315.824992][ T9683] dummy_pcm_open+0xc1/0x5b0 [ 315.825025][ T9683] snd_pcm_open_substream+0xa76/0x1850 [ 315.825065][ T9683] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 315.825114][ T9683] ? rcu_is_watching+0x12/0xc0 [ 315.825163][ T9683] snd_pcm_open+0x2a3/0x710 [ 315.825206][ T9683] ? __pfx_snd_pcm_open+0x10/0x10 [ 315.825248][ T9683] ? __pfx_default_wake_function+0x10/0x10 [ 315.825290][ T9683] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 315.825325][ T9683] snd_pcm_playback_open+0x86/0xe0 [ 315.825362][ T9683] snd_open+0x22d/0x4c0 [ 315.825390][ T9683] ? __pfx_snd_open+0x10/0x10 [ 315.825419][ T9683] chrdev_open+0x234/0x6a0 [ 315.825446][ T9683] ? __pfx_apparmor_file_open+0x10/0x10 [ 315.825490][ T9683] ? __pfx_chrdev_open+0x10/0x10 [ 315.825520][ T9683] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 315.825559][ T9683] do_dentry_open+0x6d8/0x1660 [ 315.825586][ T9683] ? __pfx_chrdev_open+0x10/0x10 [ 315.825622][ T9683] vfs_open+0x82/0x3f0 [ 315.825663][ T9683] path_openat+0x208c/0x31a0 [ 315.825705][ T9683] ? __pfx_path_openat+0x10/0x10 [ 315.825747][ T9683] do_file_open+0x20e/0x430 [ 315.825778][ T9683] ? __pfx_do_file_open+0x10/0x10 [ 315.825834][ T9683] ? alloc_fd+0x476/0x790 [ 315.825866][ T9683] ? do_getname+0x191/0x390 [ 315.825903][ T9683] do_sys_openat2+0x10d/0x1e0 [ 315.825937][ T9683] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.825986][ T9683] __x64_sys_openat+0x12d/0x210 [ 315.826024][ T9683] ? __pfx___x64_sys_openat+0x10/0x10 [ 315.826076][ T9683] do_syscall_64+0x106/0xf80 [ 315.826121][ T9683] ? clear_bhb_loop+0x40/0x90 [ 315.826156][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.826184][ T9683] RIP: 0033:0x7fa7d5b9c799 [ 315.826207][ T9683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.826234][ T9683] RSP: 002b:00007fa7d6a94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.826261][ T9683] RAX: ffffffffffffffda RBX: 00007fa7d5e15fa0 RCX: 00007fa7d5b9c799 [ 315.826280][ T9683] RDX: 0000000000040002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 315.826299][ T9683] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 315.826316][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.826332][ T9683] R13: 00007fa7d5e16038 R14: 00007fa7d5e15fa0 R15: 00007ffdaa6360d8 [ 315.826370][ T9683] [ 317.090490][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.097029][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.204722][ T9715] can: request_module (can-proto-0) failed. [ 319.623968][ T9730] can: request_module (can-proto-0) failed. [ 322.094361][ T9763] can: request_module (can-proto-0) failed. [ 323.598465][ T9783] FAULT_INJECTION: forcing a failure. [ 323.598465][ T9783] name failslab, interval 1, probability 0, space 0, times 0 [ 323.651534][ T9783] CPU: 1 UID: 0 PID: 9783 Comm: syz.1.925 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 323.651595][ T9783] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 323.651610][ T9783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.651624][ T9783] Call Trace: [ 323.651633][ T9783] [ 323.651642][ T9783] dump_stack_lvl+0x100/0x190 [ 323.651688][ T9783] should_fail_ex.cold+0x5/0xa [ 323.651719][ T9783] should_failslab+0xc2/0x120 [ 323.651748][ T9783] __kmalloc_cache_noprof+0x7a/0x6f0 [ 323.651784][ T9783] ? alloc_fs_context+0x57/0xf40 [ 323.651816][ T9783] ? lockdep_hardirqs_on+0x78/0x100 [ 323.651858][ T9783] alloc_fs_context+0x57/0xf40 [ 323.651896][ T9783] __x64_sys_fsopen+0xed/0x220 [ 323.651933][ T9783] do_syscall_64+0x106/0xf80 [ 323.651967][ T9783] ? clear_bhb_loop+0x40/0x90 [ 323.651997][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.652022][ T9783] RIP: 0033:0x7fa7d5b9c799 [ 323.652043][ T9783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.652068][ T9783] RSP: 002b:00007fa7d6a94028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 323.652094][ T9783] RAX: ffffffffffffffda RBX: 00007fa7d5e15fa0 RCX: 00007fa7d5b9c799 [ 323.652112][ T9783] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 323.652126][ T9783] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 323.652143][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.652159][ T9783] R13: 00007fa7d5e16038 R14: 00007fa7d5e15fa0 R15: 00007ffdaa6360d8 [ 323.652203][ T9783] [ 324.557868][ T9800] can: request_module (can-proto-0) failed. [ 326.250241][ T9830] binder: 9829:9830 ioctl c0405665 34 returned -22 [ 326.676301][ T9838] netlink: 'syz.3.940': attribute type 33 has an invalid length. [ 326.717208][ T9841] can: request_module (can-proto-0) failed. [ 326.731872][ T9838] netlink: 'syz.3.940': attribute type 33 has an invalid length. [ 327.044884][ T9852] can: request_module (can-proto-0) failed. [ 327.444381][ T9854] can: request_module (can-proto-0) failed. [ 330.493185][ T9910] can: request_module (can-proto-0) failed. [ 330.569728][ T9914] netlink: zone id is out of range [ 331.463287][ T9927] FAULT_INJECTION: forcing a failure. [ 331.463287][ T9927] name failslab, interval 1, probability 0, space 0, times 0 [ 331.477035][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: syz.1.962 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 331.477094][ T9927] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 331.477109][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.477126][ T9927] Call Trace: [ 331.477136][ T9927] [ 331.477147][ T9927] dump_stack_lvl+0x100/0x190 [ 331.477192][ T9927] should_fail_ex.cold+0x5/0xa [ 331.477223][ T9927] should_failslab+0xc2/0x120 [ 331.477245][ T9927] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 331.477267][ T9927] ? mas_alloc_nodes+0x280/0x390 [ 331.477288][ T9927] mas_alloc_nodes+0x280/0x390 [ 331.477308][ T9927] mas_preallocate+0x39c/0xf10 [ 331.477332][ T9927] ? __pfx_mas_preallocate+0x10/0x10 [ 331.477358][ T9927] ? anon_vma_name+0x5a/0x250 [ 331.477378][ T9927] __split_vma+0x33d/0xd90 [ 331.477400][ T9927] ? __pfx___split_vma+0x10/0x10 [ 331.477418][ T9927] ? finish_task_switch.isra.0+0x200/0xb80 [ 331.477438][ T9927] ? lockdep_hardirqs_on+0x78/0x100 [ 331.477463][ T9927] vma_modify+0x1121/0x2250 [ 331.477487][ T9927] ? __pfx_vma_modify+0x10/0x10 [ 331.477514][ T9927] vma_modify_flags+0x257/0x3d0 [ 331.477535][ T9927] ? __pfx_vma_modify_flags+0x10/0x10 [ 331.477563][ T9927] ? mtree_range_walk+0x6ce/0xcd0 [ 331.477587][ T9927] mlock_fixup+0x302/0xf00 [ 331.477608][ T9927] ? __pfx_mlock_fixup+0x10/0x10 [ 331.477633][ T9927] apply_vma_lock_flags+0x256/0x370 [ 331.477663][ T9927] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 331.477691][ T9927] ? __pfx___might_resched+0x10/0x10 [ 331.477716][ T9927] ? __pfx_down_write_killable+0x10/0x10 [ 331.477740][ T9927] ? do_futex+0x192/0x350 [ 331.477760][ T9927] do_mlock+0x261/0x7f0 [ 331.477782][ T9927] ? __pfx_do_mlock+0x10/0x10 [ 331.477800][ T9927] ? __x64_sys_futex+0x34f/0x4d0 [ 331.477817][ T9927] ? __x64_sys_futex+0x358/0x4d0 [ 331.477837][ T9927] ? xfd_validate_state+0x129/0x190 [ 331.477864][ T9927] __x64_sys_mlock+0x59/0x80 [ 331.477885][ T9927] do_syscall_64+0x106/0xf80 [ 331.477904][ T9927] ? clear_bhb_loop+0x40/0x90 [ 331.477922][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.477937][ T9927] RIP: 0033:0x7fa7d5b9c799 [ 331.477950][ T9927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.477964][ T9927] RSP: 002b:00007fa7d6a94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 331.477980][ T9927] RAX: ffffffffffffffda RBX: 00007fa7d5e15fa0 RCX: 00007fa7d5b9c799 [ 331.478008][ T9927] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112 [ 331.478025][ T9927] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 331.478041][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.478057][ T9927] R13: 00007fa7d5e16038 R14: 00007fa7d5e15fa0 R15: 00007ffdaa6360d8 [ 331.478078][ T9927] [ 332.134418][ T9931] can: request_module (can-proto-0) failed. [ 332.499594][ T9944] can: request_module (can-proto-0) failed. [ 333.634165][ T9963] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 334.507399][ T9986] FAULT_INJECTION: forcing a failure. [ 334.507399][ T9986] name failslab, interval 1, probability 0, space 0, times 0 [ 334.520335][ T9986] CPU: 1 UID: 0 PID: 9986 Comm: syz.1.972 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 334.520393][ T9986] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 334.520406][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.520419][ T9986] Call Trace: [ 334.520428][ T9986] [ 334.520437][ T9986] dump_stack_lvl+0x100/0x190 [ 334.520481][ T9986] should_fail_ex.cold+0x5/0xa [ 334.520514][ T9986] should_failslab+0xc2/0x120 [ 334.520540][ T9986] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 334.520579][ T9986] ? __kernfs_new_node+0xd2/0x960 [ 334.520634][ T9986] __kernfs_new_node+0xd2/0x960 [ 334.520676][ T9986] ? __pfx___kernfs_new_node+0x10/0x10 [ 334.520718][ T9986] ? find_held_lock+0x2b/0x80 [ 334.520741][ T9986] ? kernfs_root+0xee/0x2a0 [ 334.520773][ T9986] ? kernfs_root+0xee/0x2a0 [ 334.520826][ T9986] kernfs_new_node+0x11b/0x1a0 [ 334.520870][ T9986] __kernfs_create_file+0x53/0x350 [ 334.520905][ T9986] sysfs_add_file_mode_ns+0x207/0x3c0 [ 334.520947][ T9986] internal_create_group+0x593/0xf40 [ 334.520995][ T9986] ? __pfx_internal_create_group+0x10/0x10 [ 334.521049][ T9986] sysfs_slab_add+0x1a4/0x1f0 [ 334.521077][ T9986] do_kmem_cache_create+0x472/0x540 [ 334.521107][ T9986] __kmem_cache_create_args+0x386/0x420 [ 334.521146][ T9986] mon_text_open+0x333/0x510 [ 334.521170][ T9986] ? __pfx_mon_text_open+0x10/0x10 [ 334.521196][ T9986] ? __pfx_mon_text_ctor+0x10/0x10 [ 334.521218][ T9986] ? find_held_lock+0x2b/0x80 [ 334.521241][ T9986] ? __pfx_apparmor_file_open+0x10/0x10 [ 334.521279][ T9986] ? lockdown_is_locked_down+0x3d/0x140 [ 334.521312][ T9986] ? bpf_lsm_locked_down+0x9/0x10 [ 334.521341][ T9986] ? __pfx_mon_text_open+0x10/0x10 [ 334.521362][ T9986] full_proxy_open_regular+0x1b6/0x370 [ 334.521401][ T9986] do_dentry_open+0x6d8/0x1660 [ 334.521424][ T9986] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 334.521467][ T9986] vfs_open+0x82/0x3f0 [ 334.521499][ T9986] path_openat+0x208c/0x31a0 [ 334.521535][ T9986] ? __pfx_path_openat+0x10/0x10 [ 334.521572][ T9986] do_file_open+0x20e/0x430 [ 334.521599][ T9986] ? __pfx_do_file_open+0x10/0x10 [ 334.521654][ T9986] ? alloc_fd+0x476/0x790 [ 334.521683][ T9986] ? do_getname+0x191/0x390 [ 334.521716][ T9986] do_sys_openat2+0x10d/0x1e0 [ 334.521749][ T9986] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.521793][ T9986] __x64_sys_openat+0x12d/0x210 [ 334.521825][ T9986] ? __pfx___x64_sys_openat+0x10/0x10 [ 334.521869][ T9986] do_syscall_64+0x106/0xf80 [ 334.521901][ T9986] ? clear_bhb_loop+0x40/0x90 [ 334.521930][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.521954][ T9986] RIP: 0033:0x7fa7d5b9c799 [ 334.521975][ T9986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.522000][ T9986] RSP: 002b:00007fa7d6a94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 334.522024][ T9986] RAX: ffffffffffffffda RBX: 00007fa7d5e15fa0 RCX: 00007fa7d5b9c799 [ 334.522040][ T9986] RDX: 0000000000022202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 334.522056][ T9986] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 334.522070][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.522085][ T9986] R13: 00007fa7d5e16038 R14: 00007fa7d5e15fa0 R15: 00007ffdaa6360d8 [ 334.522119][ T9986] [ 334.523363][ T9986] SLUB: Unable to add cache mon_text_ffff888032962000 to sysfs [ 335.238893][ T5828] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 335.246411][ T5828] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 335.275055][T10001] binder: 9998:10001 ioctl c0306201 200000000000 returned -11 [ 335.303356][ T9996] can: request_module (can-proto-0) failed. [ 335.463148][T10008] FAULT_INJECTION: forcing a failure. [ 335.463148][T10008] name failslab, interval 1, probability 0, space 0, times 0 [ 335.481586][T10008] CPU: 1 UID: 0 PID: 10008 Comm: syz.0.978 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 335.481622][T10008] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 335.481631][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.481640][T10008] Call Trace: [ 335.481645][T10008] [ 335.481651][T10008] dump_stack_lvl+0x100/0x190 [ 335.481679][T10008] should_fail_ex.cold+0x5/0xa [ 335.481697][T10008] should_failslab+0xc2/0x120 [ 335.481713][T10008] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 335.481735][T10008] ? vm_area_dup+0x27/0x8e0 [ 335.481758][T10008] vm_area_dup+0x27/0x8e0 [ 335.481778][T10008] __split_vma+0x18c/0xd90 [ 335.481800][T10008] ? __pfx___split_vma+0x10/0x10 [ 335.481823][T10008] ? __pfx_mas_prev+0x10/0x10 [ 335.481850][T10008] vms_gather_munmap_vmas+0x39f/0x1500 [ 335.481868][T10008] ? find_held_lock+0x2b/0x80 [ 335.481888][T10008] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 335.481908][T10008] ? move_page_tables+0xe1d/0x4500 [ 335.481938][T10008] do_vmi_align_munmap+0x287/0x5f0 [ 335.481961][T10008] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 335.482016][T10008] do_vmi_munmap+0x1f8/0x3e0 [ 335.482040][T10008] move_vma+0xd99/0x1890 [ 335.482065][T10008] ? __pfx_move_vma+0x10/0x10 [ 335.482088][T10008] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 335.482113][T10008] ? vrm_set_new_addr+0x204/0x290 [ 335.482135][T10008] mremap_to+0x1b7/0x450 [ 335.482157][T10008] do_mremap+0xb76/0x2130 [ 335.482185][T10008] ? __pfx_do_mremap+0x10/0x10 [ 335.482209][T10008] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.482237][T10008] __do_sys_mremap+0x126/0x170 [ 335.482258][T10008] ? __pfx___do_sys_mremap+0x10/0x10 [ 335.482284][T10008] ? __x64_sys_futex+0x34f/0x4d0 [ 335.482314][T10008] do_syscall_64+0x106/0xf80 [ 335.482333][T10008] ? clear_bhb_loop+0x40/0x90 [ 335.482351][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.482366][T10008] RIP: 0033:0x7f8a14f9c799 [ 335.482379][T10008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.482393][T10008] RSP: 002b:00007f8a15dae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 335.482408][T10008] RAX: ffffffffffffffda RBX: 00007f8a15215fa0 RCX: 00007f8a14f9c799 [ 335.482418][T10008] RDX: 0000000000000037 RSI: 0000000000000008 RDI: 0000200000001000 [ 335.482427][T10008] RBP: 00007f8a15032c99 R08: 000000110c230000 R09: 0000000000000000 [ 335.482436][T10008] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 335.482445][T10008] R13: 00007f8a15216038 R14: 00007f8a15215fa0 R15: 00007ffeb3577938 [ 335.482465][T10008] [ 336.144393][T10010] can: request_module (can-proto-0) failed. [ 337.336784][T10037] can: request_module (can-proto-0) failed. [ 338.449584][T10050] sp0: Synchronizing with TNC [ 338.604789][T10051] can: request_module (can-proto-0) failed. [ 341.124337][T10092] can: request_module (can-proto-0) failed. [ 341.912333][T10107] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1000'. [ 342.353335][T10112] can: request_module (can-proto-0) failed. [ 342.960149][T10127] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 343.308333][T10133] sp0: Synchronizing with TNC [ 344.037603][T10148] can: request_module (can-proto-0) failed. [ 344.282587][T10153] serio: Serial port pty6 [ 344.773495][T10160] can: request_module (can-proto-0) failed. [ 345.107023][T10165] can: request_module (can-proto-0) failed. [ 345.504305][T10174] can: request_module (can-proto-0) failed. [ 345.741307][T10183] FAULT_INJECTION: forcing a failure. [ 345.741307][T10183] name failslab, interval 1, probability 0, space 0, times 0 [ 345.755051][T10183] CPU: 0 UID: 0 PID: 10183 Comm: syz.2.1022 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 345.755109][T10183] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 345.755119][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 345.755128][T10183] Call Trace: [ 345.755134][T10183] [ 345.755140][T10183] dump_stack_lvl+0x100/0x190 [ 345.755167][T10183] should_fail_ex.cold+0x5/0xa [ 345.755185][T10183] should_failslab+0xc2/0x120 [ 345.755201][T10183] __kmalloc_cache_noprof+0x7a/0x6f0 [ 345.755220][T10183] ? nfc_allocate_device+0x15b/0x5e0 [ 345.755244][T10183] nfc_allocate_device+0x15b/0x5e0 [ 345.755264][T10183] ? __init_swait_queue_head+0xca/0x150 [ 345.755287][T10183] nci_allocate_device+0x23b/0x410 [ 345.755305][T10183] virtual_ncidev_open+0x6f/0x220 [ 345.755326][T10183] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 345.755345][T10183] misc_open+0x26d/0x450 [ 345.755362][T10183] ? __pfx_misc_open+0x10/0x10 [ 345.755378][T10183] chrdev_open+0x234/0x6a0 [ 345.755394][T10183] ? __pfx_chrdev_open+0x10/0x10 [ 345.755410][T10183] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 345.755429][T10183] do_dentry_open+0x6d8/0x1660 [ 345.755444][T10183] ? __pfx_chrdev_open+0x10/0x10 [ 345.755463][T10183] vfs_open+0x82/0x3f0 [ 345.755482][T10183] path_openat+0x208c/0x31a0 [ 345.755504][T10183] ? __pfx_path_openat+0x10/0x10 [ 345.755534][T10183] do_file_open+0x20e/0x430 [ 345.755551][T10183] ? __pfx_do_file_open+0x10/0x10 [ 345.755580][T10183] ? alloc_fd+0x476/0x790 [ 345.755598][T10183] ? do_getname+0x191/0x390 [ 345.755617][T10183] do_sys_openat2+0x10d/0x1e0 [ 345.755636][T10183] ? __pfx_do_sys_openat2+0x10/0x10 [ 345.755662][T10183] __x64_sys_openat+0x12d/0x210 [ 345.755681][T10183] ? __pfx___x64_sys_openat+0x10/0x10 [ 345.755707][T10183] do_syscall_64+0x106/0xf80 [ 345.755726][T10183] ? clear_bhb_loop+0x40/0x90 [ 345.755743][T10183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.755759][T10183] RIP: 0033:0x7fa1d039c799 [ 345.755772][T10183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.755787][T10183] RSP: 002b:00007fa1d11d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 345.755801][T10183] RAX: ffffffffffffffda RBX: 00007fa1d0615fa0 RCX: 00007fa1d039c799 [ 345.755811][T10183] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 345.755821][T10183] RBP: 00007fa1d0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 345.755830][T10183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.755838][T10183] R13: 00007fa1d0616038 R14: 00007fa1d0615fa0 R15: 00007fff5f72f788 [ 345.755858][T10183] [ 345.763137][ T5828] Bluetooth: hci3: Malformed LE Event: 0x1b [ 346.276863][T10187] FAULT_INJECTION: forcing a failure. [ 346.276863][T10187] name failslab, interval 1, probability 0, space 0, times 0 [ 346.325680][T10187] CPU: 1 UID: 0 PID: 10187 Comm: syz.1.1023 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 346.325744][T10187] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 346.325761][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.325777][T10187] Call Trace: [ 346.325785][T10187] [ 346.325795][T10187] dump_stack_lvl+0x100/0x190 [ 346.325840][T10187] should_fail_ex.cold+0x5/0xa [ 346.325873][T10187] should_failslab+0xc2/0x120 [ 346.325904][T10187] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 346.325946][T10187] ? __d_alloc+0x34/0xa80 [ 346.325985][T10187] __d_alloc+0x34/0xa80 [ 346.326019][T10187] d_alloc_pseudo+0x1c/0xc0 [ 346.326057][T10187] alloc_file_pseudo+0xcf/0x230 [ 346.326092][T10187] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 346.326135][T10187] __anon_inode_getfile+0xe8/0x280 [ 346.326167][T10187] ? kasan_save_track+0x14/0x30 [ 346.326212][T10187] sync_file_alloc+0x65/0x160 [ 346.326239][T10187] sync_file_create+0x17/0xf0 [ 346.326267][T10187] sw_sync_ioctl+0x849/0xf80 [ 346.326303][T10187] ? find_held_lock+0x2b/0x80 [ 346.326330][T10187] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 346.326374][T10187] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 346.326406][T10187] __x64_sys_ioctl+0x18e/0x210 [ 346.326447][T10187] do_syscall_64+0x106/0xf80 [ 346.326484][T10187] ? clear_bhb_loop+0x40/0x90 [ 346.326520][T10187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.326548][T10187] RIP: 0033:0x7fa7d5b9c799 [ 346.326581][T10187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.326609][T10187] RSP: 002b:00007fa7d6a94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.326637][T10187] RAX: ffffffffffffffda RBX: 00007fa7d5e15fa0 RCX: 00007fa7d5b9c799 [ 346.326655][T10187] RDX: 0000000000000000 RSI: 00000000c0285700 RDI: 0000000000000005 [ 346.326671][T10187] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 346.326688][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.326704][T10187] R13: 00007fa7d5e16038 R14: 00007fa7d5e15fa0 R15: 00007ffdaa6360d8 [ 346.326741][T10187] [ 346.776729][T10194] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 347.446608][T10205] can: request_module (can-proto-0) failed. [ 348.210142][T10220] netlink: 'syz.3.1032': attribute type 10 has an invalid length. [ 348.234491][T10220] netlink: 'syz.3.1032': attribute type 13 has an invalid length. [ 348.655433][T10221] sp0: Synchronizing with TNC [ 349.322155][T10236] netlink: 'syz.3.1035': attribute type 1 has an invalid length. [ 350.234422][T10248] netlink: 'syz.2.1037': attribute type 1 has an invalid length. [ 352.275099][T10267] can: request_module (can-proto-0) failed. [ 353.250430][T10278] can: request_module (can-proto-0) failed. [ 353.309180][T10276] can: request_module (can-proto-0) failed. [ 353.392120][T10275] sp0: Synchronizing with TNC [ 353.960087][T10284] FAULT_INJECTION: forcing a failure. [ 353.960087][T10284] name failslab, interval 1, probability 0, space 0, times 0 [ 353.974452][T10284] CPU: 1 UID: 0 PID: 10284 Comm: syz.1.1046 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 353.974510][T10284] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 353.974525][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.974541][T10284] Call Trace: [ 353.974551][T10284] [ 353.974561][T10284] dump_stack_lvl+0x100/0x190 [ 353.974609][T10284] should_fail_ex.cold+0x5/0xa [ 353.974643][T10284] should_failslab+0xc2/0x120 [ 353.974672][T10284] __kmalloc_cache_noprof+0x7a/0x6f0 [ 353.974707][T10284] ? trace_pid_list_alloc+0x2fe/0x480 [ 353.974757][T10284] trace_pid_list_alloc+0x2fe/0x480 [ 353.974803][T10284] trace_pid_write+0x110/0x460 [ 353.974846][T10284] ? __pfx_trace_pid_write+0x10/0x10 [ 353.974912][T10284] event_pid_write.isra.0+0x1e4/0x800 [ 353.974959][T10284] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 353.975014][T10284] vfs_write+0x2aa/0x1070 [ 353.975043][T10284] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 353.975089][T10284] ? __pfx_vfs_write+0x10/0x10 [ 353.975131][T10284] ? __fget_files+0x215/0x3d0 [ 353.975166][T10284] ? __fget_files+0x21f/0x3d0 [ 353.975214][T10284] ksys_write+0x12a/0x250 [ 353.975240][T10284] ? __pfx_ksys_write+0x10/0x10 [ 353.975278][T10284] do_syscall_64+0x106/0xf80 [ 353.975316][T10284] ? clear_bhb_loop+0x40/0x90 [ 353.975352][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.975380][T10284] RIP: 0033:0x7fa7d5b9c799 [ 353.975404][T10284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.975432][T10284] RSP: 002b:00007fa7d6a94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.975458][T10284] RAX: ffffffffffffffda RBX: 00007fa7d5e15fa0 RCX: 00007fa7d5b9c799 [ 353.975478][T10284] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 353.975495][T10284] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 353.975512][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.975529][T10284] R13: 00007fa7d5e16038 R14: 00007fa7d5e15fa0 R15: 00007ffdaa6360d8 [ 353.975569][T10284] [ 354.847880][T10292] netlink: 'syz.1.1047': attribute type 1 has an invalid length. [ 355.169063][T10299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1050'. [ 358.025486][T10318] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 358.108096][T10321] netlink: 'syz.1.1057': attribute type 16 has an invalid length. [ 358.167915][T10321] netlink: 294 bytes leftover after parsing attributes in process `syz.1.1057'. [ 358.208413][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.244826][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.376625][T10329] netlink: 'syz.0.1060': attribute type 1 has an invalid length. [ 359.402530][T10333] FAULT_INJECTION: forcing a failure. [ 359.402530][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 359.424991][T10333] CPU: 1 UID: 0 PID: 10333 Comm: syz.1.1069 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 359.425045][T10333] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 359.425055][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.425065][T10333] Call Trace: [ 359.425070][T10333] [ 359.425076][T10333] dump_stack_lvl+0x100/0x190 [ 359.425103][T10333] should_fail_ex.cold+0x5/0xa [ 359.425121][T10333] should_failslab+0xc2/0x120 [ 359.425137][T10333] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 359.425161][T10333] ? __kernfs_new_node+0xd2/0x960 [ 359.425185][T10333] __kernfs_new_node+0xd2/0x960 [ 359.425208][T10333] ? __pfx___kernfs_new_node+0x10/0x10 [ 359.425232][T10333] ? find_held_lock+0x2b/0x80 [ 359.425246][T10333] ? kernfs_root+0xee/0x2a0 [ 359.425265][T10333] ? kernfs_root+0xee/0x2a0 [ 359.425289][T10333] kernfs_new_node+0x11b/0x1a0 [ 359.425313][T10333] __kernfs_create_file+0x53/0x350 [ 359.425332][T10333] sysfs_add_file_mode_ns+0x207/0x3c0 [ 359.425356][T10333] internal_create_group+0x593/0xf40 [ 359.425381][T10333] ? __pfx_internal_create_group+0x10/0x10 [ 359.425404][T10333] ? kernfs_create_link+0x1bd/0x240 [ 359.425423][T10333] internal_create_groups+0x9d/0x150 [ 359.425446][T10333] device_add+0x77a/0x1950 [ 359.425465][T10333] ? __pfx_device_add+0x10/0x10 [ 359.425488][T10333] input_register_device+0x7d2/0xe20 [ 359.425513][T10333] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 359.425531][T10333] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 359.425552][T10333] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 359.425574][T10333] ? find_held_lock+0x2b/0x80 [ 359.425587][T10333] ? __fget_files+0x215/0x3d0 [ 359.425610][T10333] ? __pfx_uinput_ioctl+0x10/0x10 [ 359.425627][T10333] __x64_sys_ioctl+0x18e/0x210 [ 359.425649][T10333] do_syscall_64+0x106/0xf80 [ 359.425678][T10333] ? clear_bhb_loop+0x40/0x90 [ 359.425697][T10333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.425713][T10333] RIP: 0033:0x7fa7d5b9c799 [ 359.425726][T10333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.425741][T10333] RSP: 002b:00007fa7d6a94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.425756][T10333] RAX: ffffffffffffffda RBX: 00007fa7d5e15fa0 RCX: 00007fa7d5b9c799 [ 359.425766][T10333] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 359.425775][T10333] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 359.425784][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.425793][T10333] R13: 00007fa7d5e16038 R14: 00007fa7d5e15fa0 R15: 00007ffdaa6360d8 [ 359.425813][T10333] [ 360.876818][T10349] FAULT_INJECTION: forcing a failure. [ 360.876818][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 360.944344][T10349] CPU: 1 UID: 0 PID: 10349 Comm: syz.1.1065 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 360.944402][T10349] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 360.944416][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.944432][T10349] Call Trace: [ 360.944441][T10349] [ 360.944451][T10349] dump_stack_lvl+0x100/0x190 [ 360.944498][T10349] should_fail_ex.cold+0x5/0xa [ 360.944530][T10349] should_failslab+0xc2/0x120 [ 360.944561][T10349] __kmalloc_cache_noprof+0x7a/0x6f0 [ 360.944599][T10349] ? kernfs_fop_open+0x23d/0xd50 [ 360.944638][T10349] kernfs_fop_open+0x23d/0xd50 [ 360.944676][T10349] do_dentry_open+0x6d8/0x1660 [ 360.944704][T10349] ? __pfx_kernfs_fop_open+0x10/0x10 [ 360.944743][T10349] vfs_open+0x82/0x3f0 [ 360.944782][T10349] path_openat+0x208c/0x31a0 [ 360.944822][T10349] ? __pfx_path_openat+0x10/0x10 [ 360.944866][T10349] do_file_open+0x20e/0x430 [ 360.944899][T10349] ? __pfx_do_file_open+0x10/0x10 [ 360.944956][T10349] ? alloc_fd+0x476/0x790 [ 360.944988][T10349] ? do_getname+0x191/0x390 [ 360.945025][T10349] do_sys_openat2+0x10d/0x1e0 [ 360.945071][T10349] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.945121][T10349] __x64_sys_openat+0x12d/0x210 [ 360.945158][T10349] ? __pfx___x64_sys_openat+0x10/0x10 [ 360.945209][T10349] do_syscall_64+0x106/0xf80 [ 360.945245][T10349] ? clear_bhb_loop+0x40/0x90 [ 360.945280][T10349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.945309][T10349] RIP: 0033:0x7fa7d5b9c799 [ 360.945332][T10349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.945359][T10349] RSP: 002b:00007fa7d6a94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.945386][T10349] RAX: ffffffffffffffda RBX: 00007fa7d5e15fa0 RCX: 00007fa7d5b9c799 [ 360.945405][T10349] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 360.945423][T10349] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 360.945440][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.945456][T10349] R13: 00007fa7d5e16038 R14: 00007fa7d5e15fa0 R15: 00007ffdaa6360d8 [ 360.945496][T10349] [ 361.306130][T10351] FAULT_INJECTION: forcing a failure. [ 361.306130][T10351] name failslab, interval 1, probability 0, space 0, times 0 [ 361.318940][T10351] CPU: 1 UID: 0 PID: 10351 Comm: syz.2.1066 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 361.319009][T10351] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 361.319026][T10351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 361.319045][T10351] Call Trace: [ 361.319055][T10351] [ 361.319066][T10351] dump_stack_lvl+0x100/0x190 [ 361.319114][T10351] should_fail_ex.cold+0x5/0xa [ 361.319149][T10351] should_failslab+0xc2/0x120 [ 361.319179][T10351] __kmalloc_cache_noprof+0x7a/0x6f0 [ 361.319215][T10351] ? loop_add+0xb9/0xb60 [ 361.319256][T10351] loop_add+0xb9/0xb60 [ 361.319292][T10351] ? __pfx_loop_add+0x10/0x10 [ 361.319352][T10351] ? find_held_lock+0x2b/0x80 [ 361.319379][T10351] ? __fget_files+0x215/0x3d0 [ 361.319410][T10351] loop_control_ioctl+0xae/0x620 [ 361.319450][T10351] ? __pfx_loop_control_ioctl+0x10/0x10 [ 361.319492][T10351] ? __pfx_loop_control_ioctl+0x10/0x10 [ 361.319529][T10351] __x64_sys_ioctl+0x18e/0x210 [ 361.319571][T10351] do_syscall_64+0x106/0xf80 [ 361.319608][T10351] ? clear_bhb_loop+0x40/0x90 [ 361.319643][T10351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.319671][T10351] RIP: 0033:0x7fa1d039c799 [ 361.319696][T10351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.319724][T10351] RSP: 002b:00007fa1d11d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.319752][T10351] RAX: ffffffffffffffda RBX: 00007fa1d0615fa0 RCX: 00007fa1d039c799 [ 361.319771][T10351] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000004 [ 361.319789][T10351] RBP: 00007fa1d0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 361.319807][T10351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.319825][T10351] R13: 00007fa1d0616038 R14: 00007fa1d0615fa0 R15: 00007fff5f72f788 [ 361.319865][T10351] [ 361.957246][T10361] can: request_module (can-proto-0) failed. [ 362.196754][T10368] FAULT_INJECTION: forcing a failure. [ 362.196754][T10368] name failslab, interval 1, probability 0, space 0, times 0 [ 362.306725][T10368] CPU: 1 UID: 0 PID: 10368 Comm: syz.3.1072 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 362.306761][T10368] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 362.306770][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 362.306779][T10368] Call Trace: [ 362.306785][T10368] [ 362.306791][T10368] dump_stack_lvl+0x100/0x190 [ 362.306818][T10368] should_fail_ex.cold+0x5/0xa [ 362.306836][T10368] should_failslab+0xc2/0x120 [ 362.306852][T10368] __kmalloc_cache_node_noprof+0x7d/0x770 [ 362.306877][T10368] ? init_rescuer+0x19f/0x550 [ 362.306900][T10368] init_rescuer+0x19f/0x550 [ 362.306919][T10368] ? __pfx_init_rescuer+0x10/0x10 [ 362.306943][T10368] ? wq_adjust_max_active+0x352/0x4a0 [ 362.306965][T10368] __alloc_workqueue+0xc90/0x1880 [ 362.306985][T10368] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 362.307007][T10368] alloc_workqueue_noprof+0xd2/0x200 [ 362.307024][T10368] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 362.307046][T10368] ? __pfx___debug_object_init+0x10/0x10 [ 362.307074][T10368] nci_register_device+0x511/0xb80 [ 362.307091][T10368] ? __pfx_nci_register_device+0x10/0x10 [ 362.307110][T10368] ? lockdep_init_map_type+0x5c/0x250 [ 362.307134][T10368] virtual_ncidev_open+0x141/0x220 [ 362.307154][T10368] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 362.307173][T10368] misc_open+0x26d/0x450 [ 362.307189][T10368] ? __pfx_misc_open+0x10/0x10 [ 362.307204][T10368] chrdev_open+0x234/0x6a0 [ 362.307218][T10368] ? __pfx_apparmor_file_open+0x10/0x10 [ 362.307241][T10368] ? __pfx_chrdev_open+0x10/0x10 [ 362.307257][T10368] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 362.307277][T10368] do_dentry_open+0x6d8/0x1660 [ 362.307291][T10368] ? __pfx_chrdev_open+0x10/0x10 [ 362.307310][T10368] vfs_open+0x82/0x3f0 [ 362.307330][T10368] path_openat+0x208c/0x31a0 [ 362.307352][T10368] ? __pfx_path_openat+0x10/0x10 [ 362.307374][T10368] do_file_open+0x20e/0x430 [ 362.307390][T10368] ? __pfx_do_file_open+0x10/0x10 [ 362.307419][T10368] ? alloc_fd+0x476/0x790 [ 362.307444][T10368] ? do_getname+0x191/0x390 [ 362.307464][T10368] do_sys_openat2+0x10d/0x1e0 [ 362.307483][T10368] ? __pfx_do_sys_openat2+0x10/0x10 [ 362.307510][T10368] __x64_sys_openat+0x12d/0x210 [ 362.307530][T10368] ? __pfx___x64_sys_openat+0x10/0x10 [ 362.307557][T10368] do_syscall_64+0x106/0xf80 [ 362.307576][T10368] ? clear_bhb_loop+0x40/0x90 [ 362.307594][T10368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.307609][T10368] RIP: 0033:0x7f1d2bf9c799 [ 362.307622][T10368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.307637][T10368] RSP: 002b:00007f1d2ce0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.307651][T10368] RAX: ffffffffffffffda RBX: 00007f1d2c215fa0 RCX: 00007f1d2bf9c799 [ 362.307661][T10368] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 362.307671][T10368] RBP: 00007f1d2c032c99 R08: 0000000000000000 R09: 0000000000000000 [ 362.307680][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.307689][T10368] R13: 00007f1d2c216038 R14: 00007f1d2c215fa0 R15: 00007ffc1ea91598 [ 362.307709][T10368] [ 362.307726][T10368] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_tx_wq" [ 364.184758][T10382] FAULT_INJECTION: forcing a failure. [ 364.184758][T10382] name failslab, interval 1, probability 0, space 0, times 0 [ 364.197766][T10382] CPU: 1 UID: 0 PID: 10382 Comm: syz.1.1076 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 364.197801][T10382] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 364.197810][T10382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.197819][T10382] Call Trace: [ 364.197826][T10382] [ 364.197832][T10382] dump_stack_lvl+0x100/0x190 [ 364.197859][T10382] should_fail_ex.cold+0x5/0xa [ 364.197877][T10382] ? ima_write_template_field_data+0x59/0x1d0 [ 364.197896][T10382] should_failslab+0xc2/0x120 [ 364.197911][T10382] __kmalloc_noprof+0xe0/0x850 [ 364.197932][T10382] ? __x64_sys_openat+0x12d/0x210 [ 364.197950][T10382] ? do_syscall_64+0x106/0xf80 [ 364.197973][T10382] ima_write_template_field_data+0x59/0x1d0 [ 364.197995][T10382] ima_eventdigest_init_common+0x158/0x460 [ 364.198015][T10382] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 364.198046][T10382] ? trace_kmalloc+0xb0/0x130 [ 364.198059][T10382] ? __kasan_kmalloc+0xaa/0xb0 [ 364.198081][T10382] ? __kmalloc_noprof+0x320/0x850 [ 364.198105][T10382] ima_alloc_init_template+0x399/0x6d0 [ 364.198125][T10382] ima_store_measurement+0x1e3/0x5b0 [ 364.198142][T10382] ? __pfx_ima_store_measurement+0x10/0x10 [ 364.198165][T10382] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 364.198189][T10382] process_measurement+0x19cc/0x2350 [ 364.198219][T10382] ? __pfx_process_measurement+0x10/0x10 [ 364.198275][T10382] ? seq_open+0x116/0x170 [ 364.198295][T10382] ? inode_to_bdi+0x9e/0x160 [ 364.198312][T10382] ima_file_check+0xcc/0x120 [ 364.198334][T10382] ? __pfx_ima_file_check+0x10/0x10 [ 364.198361][T10382] security_file_post_open+0xc4/0x210 [ 364.198379][T10382] path_openat+0x1418/0x31a0 [ 364.198400][T10382] ? __pfx_path_openat+0x10/0x10 [ 364.198422][T10382] do_file_open+0x20e/0x430 [ 364.198438][T10382] ? __pfx_do_file_open+0x10/0x10 [ 364.198466][T10382] ? alloc_fd+0x476/0x790 [ 364.198483][T10382] ? do_getname+0x191/0x390 [ 364.198502][T10382] do_sys_openat2+0x10d/0x1e0 [ 364.198521][T10382] ? __pfx_do_sys_openat2+0x10/0x10 [ 364.198546][T10382] __x64_sys_openat+0x12d/0x210 [ 364.198565][T10382] ? __pfx___x64_sys_openat+0x10/0x10 [ 364.198591][T10382] do_syscall_64+0x106/0xf80 [ 364.198610][T10382] ? clear_bhb_loop+0x40/0x90 [ 364.198628][T10382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.198643][T10382] RIP: 0033:0x7fa7d5b9c799 [ 364.198656][T10382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.198671][T10382] RSP: 002b:00007fa7d6a73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 364.198685][T10382] RAX: ffffffffffffffda RBX: 00007fa7d5e16090 RCX: 00007fa7d5b9c799 [ 364.198695][T10382] RDX: 0000000000008000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 364.198705][T10382] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 364.198715][T10382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.198723][T10382] R13: 00007fa7d5e16128 R14: 00007fa7d5e16090 R15: 00007ffdaa6360d8 [ 364.198743][T10382] [ 364.254462][ T29] audit: type=1804 audit(668983.010:2): pid=10382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.1076" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=1063 res=0 errno=0 [ 365.299876][T10399] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1080'. [ 366.452755][T10421] can: request_module (can-proto-0) failed. [ 370.058108][T10493] random: crng reseeded on system resumption [ 370.290533][T10495] can: request_module (can-proto-0) failed. [ 371.256899][T10510] can: request_module (can-proto-0) failed. [ 371.264708][T10508] can: request_module (can-proto-0) failed. [ 371.960696][T10525] can: request_module (can-proto-0) failed. [ 373.146719][T10542] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 373.529341][T10549] syz.2.1113 uses obsolete (PF_INET,SOCK_PACKET) [ 374.062816][T10561] can: request_module (can-proto-0) failed. [ 374.915956][T10574] can: request_module (can-proto-0) failed. [ 376.321340][T10590] syz.1.1124 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 376.456504][T10596] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 377.155770][T10601] HfR: entered promiscuous mode [ 377.210307][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 377.331215][T10601] HfR: left promiscuous mode [ 378.528271][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.535662][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.629006][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 378.664979][T10621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.766505][T10621] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 378.811736][T10621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.773157][T10639] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.050638][T10649] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1139'. [ 380.604316][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 380.684303][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 380.765985][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 380.844337][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 383.295646][T10689] can: request_module (can-proto-0) failed. [ 384.080931][T10709] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 384.282766][T10715] bridge0: port 3(team0) entered blocking state [ 384.680791][T10715] bridge0: port 3(team0) entered disabled state [ 384.680924][T10715] team0: entered allmulticast mode [ 384.680942][T10715] team_slave_0: entered allmulticast mode [ 384.681030][T10715] team_slave_1: entered allmulticast mode [ 384.685388][T10715] team0: entered promiscuous mode [ 384.685405][T10715] team_slave_0: entered promiscuous mode [ 384.685558][T10715] team_slave_1: entered promiscuous mode [ 384.686864][T10715] bridge0: port 3(team0) entered blocking state [ 384.686987][T10715] bridge0: port 3(team0) entered forwarding state [ 385.547983][T10725] can: request_module (can-proto-0) failed. [ 385.662310][T10727] netlink: Unknown conntrack attr (type=257, max=9) [ 385.677950][ T29] audit: type=1326 audit(669004.480:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.1157" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a14f9c799 code=0x0 [ 386.581791][T10737] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 386.825493][T10743] can: request_module (can-proto-0) failed. [ 387.042467][T10750] can: request_module (can-proto-0) failed. [ 387.925379][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 389.123496][T10785] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1169'. [ 389.575425][T10788] FAULT_INJECTION: forcing a failure. [ 389.575425][T10788] name failslab, interval 1, probability 0, space 0, times 0 [ 389.588305][T10788] CPU: 0 UID: 0 PID: 10788 Comm: syz.3.1170 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 389.588371][T10788] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 389.588388][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.588406][T10788] Call Trace: [ 389.588416][T10788] [ 389.588427][T10788] dump_stack_lvl+0x100/0x190 [ 389.588476][T10788] should_fail_ex.cold+0x5/0xa [ 389.588510][T10788] ? process_preds+0x4c2/0x1d90 [ 389.588549][T10788] should_failslab+0xc2/0x120 [ 389.588580][T10788] __kmalloc_noprof+0xe0/0x850 [ 389.588630][T10788] process_preds+0x4c2/0x1d90 [ 389.588680][T10788] ? create_filter_start.constprop.0+0x134/0x310 [ 389.588735][T10788] create_filter+0x140/0x210 [ 389.588780][T10788] ? __pfx_create_filter+0x10/0x10 [ 389.588822][T10788] ? find_held_lock+0x2b/0x80 [ 389.588853][T10788] apply_event_filter+0x220/0x500 [ 389.588897][T10788] ? __pfx_apply_event_filter+0x10/0x10 [ 389.588952][T10788] event_filter_write+0x16d/0x290 [ 389.588987][T10788] vfs_write+0x2aa/0x1070 [ 389.589015][T10788] ? __pfx_event_filter_write+0x10/0x10 [ 389.589052][T10788] ? __pfx_vfs_write+0x10/0x10 [ 389.589093][T10788] ? __fget_files+0x215/0x3d0 [ 389.589130][T10788] ? __fget_files+0x21f/0x3d0 [ 389.589168][T10788] ksys_write+0x12a/0x250 [ 389.589194][T10788] ? __pfx_ksys_write+0x10/0x10 [ 389.589232][T10788] do_syscall_64+0x106/0xf80 [ 389.589270][T10788] ? clear_bhb_loop+0x40/0x90 [ 389.589306][T10788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.589335][T10788] RIP: 0033:0x7f1d2bf9c799 [ 389.589360][T10788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.589389][T10788] RSP: 002b:00007f1d2ce0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 389.589416][T10788] RAX: ffffffffffffffda RBX: 00007f1d2c215fa0 RCX: 00007f1d2bf9c799 [ 389.589435][T10788] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 389.589452][T10788] RBP: 00007f1d2c032c99 R08: 0000000000000000 R09: 0000000000000000 [ 389.589470][T10788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.589487][T10788] R13: 00007f1d2c216038 R14: 00007f1d2c215fa0 R15: 00007ffc1ea91598 [ 389.589528][T10788] [ 390.384461][T10797] can: request_module (can-proto-0) failed. [ 391.544565][T10817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1179'. [ 391.762568][T10815] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 392.194612][T10822] netlink: 'syz.1.1188': attribute type 1 has an invalid length. [ 392.548965][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 392.625980][T10840] netlink: 'syz.0.1184': attribute type 1 has an invalid length. [ 392.636991][T10840] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1184'. [ 392.719272][T10840] netlink: 'syz.0.1184': attribute type 1 has an invalid length. [ 393.304962][T10850] can: request_module (can-proto-0) failed. [ 393.403879][T10856] random: crng reseeded on system resumption [ 394.595569][T10863] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 396.148052][T10896] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 396.858651][T10906] FAULT_INJECTION: forcing a failure. [ 396.858651][T10906] name failslab, interval 1, probability 0, space 0, times 0 [ 396.964308][T10906] CPU: 0 UID: 0 PID: 10906 Comm: syz.3.1197 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 396.964349][T10906] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 396.964358][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.964368][T10906] Call Trace: [ 396.964373][T10906] [ 396.964380][T10906] dump_stack_lvl+0x100/0x190 [ 396.964408][T10906] should_fail_ex.cold+0x5/0xa [ 396.964429][T10906] should_failslab+0xc2/0x120 [ 396.964453][T10906] __kmalloc_cache_noprof+0x7a/0x6f0 [ 396.964473][T10906] ? vkms_plane_duplicate_state+0x87/0x130 [ 396.964494][T10906] vkms_plane_duplicate_state+0x87/0x130 [ 396.964510][T10906] drm_atomic_get_plane_state+0x279/0x760 [ 396.964531][T10906] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 396.964553][T10906] ? trace_contention_end+0x140/0x180 [ 396.964577][T10906] ? __mutex_lock+0x26a/0x1b90 [ 396.964598][T10906] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 396.964619][T10906] ? drm_master_internal_acquire+0x21/0x80 [ 396.964656][T10906] drm_client_modeset_commit_locked+0x14d/0x580 [ 396.964679][T10906] drm_client_modeset_commit+0x4f/0x80 [ 396.964700][T10906] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 396.964723][T10906] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 396.964745][T10906] drm_fbdev_client_restore+0x1b/0x30 [ 396.964761][T10906] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 396.964777][T10906] drm_client_dev_restore+0x205/0x2a0 [ 396.964800][T10906] drm_release+0x2c6/0x360 [ 396.964818][T10906] ? __pfx_drm_release+0x10/0x10 [ 396.964836][T10906] __fput+0x3ff/0xb40 [ 396.964857][T10906] task_work_run+0x150/0x240 [ 396.964879][T10906] ? __pfx_task_work_run+0x10/0x10 [ 396.964905][T10906] exit_to_user_mode_loop+0x100/0x4a0 [ 396.964933][T10906] do_syscall_64+0x668/0xf80 [ 396.964954][T10906] ? clear_bhb_loop+0x40/0x90 [ 396.964973][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.964989][T10906] RIP: 0033:0x7f1d2bf9c799 [ 396.965004][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.965019][T10906] RSP: 002b:00007f1d2cdee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 396.965034][T10906] RAX: 0000000000000000 RBX: 00007f1d2c216090 RCX: 00007f1d2bf9c799 [ 396.965044][T10906] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 396.965053][T10906] RBP: 00007f1d2c032c99 R08: 0000000000000000 R09: 0000000000000000 [ 396.965062][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.965070][T10906] R13: 00007f1d2c216128 R14: 00007f1d2c216090 R15: 00007ffc1ea91598 [ 396.965092][T10906] [ 398.075213][T10910] can: request_module (can-proto-0) failed. [ 400.774168][T10930] can: request_module (can-proto-0) failed. [ 402.187543][T10939] can: request_module (can-proto-0) failed. [ 403.696581][T10950] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1208'. [ 404.656873][T10960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 404.685363][T10960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 404.693043][T10960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 404.982753][T10960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.010697][T10960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.076993][T10960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.227202][T10960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.246935][T10960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.403983][T10960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.483835][T10960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.706510][T10974] can: request_module (can-proto-0) failed. [ 406.584661][T10990] can: request_module (can-proto-0) failed. [ 406.614605][ T29] audit: type=1326 audit(669025.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.2.1218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1d039c799 code=0x0 [ 408.894411][T11007] bond0: option arp_validate: invalid value () [ 410.309020][T11029] can: request_module (can-proto-0) failed. [ 412.633813][T11056] FAULT_INJECTION: forcing a failure. [ 412.633813][T11056] name failslab, interval 1, probability 0, space 0, times 0 [ 412.674290][T11056] CPU: 1 UID: 0 PID: 11056 Comm: syz.0.1233 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 412.674354][T11056] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 412.674370][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.674387][T11056] Call Trace: [ 412.674396][T11056] [ 412.674405][T11056] dump_stack_lvl+0x100/0x190 [ 412.674459][T11056] should_fail_ex.cold+0x5/0xa [ 412.674493][T11056] should_failslab+0xc2/0x120 [ 412.674522][T11056] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 412.674562][T11056] ? alloc_vfsmnt+0x23/0x6a0 [ 412.674603][T11056] alloc_vfsmnt+0x23/0x6a0 [ 412.674637][T11056] clone_mnt+0x4b/0x930 [ 412.674676][T11056] copy_tree+0x329/0xbf0 [ 412.674713][T11056] copy_mnt_ns+0x2bd/0xc30 [ 412.674744][T11056] ? create_new_namespaces+0x30/0xac0 [ 412.674772][T11056] ? rcu_is_watching+0x12/0xc0 [ 412.674819][T11056] create_new_namespaces+0xd3/0xac0 [ 412.674846][T11056] ? bpf_lsm_capable+0x9/0x10 [ 412.674873][T11056] ? security_capable+0x80/0x260 [ 412.674919][T11056] copy_namespaces+0x468/0x5e0 [ 412.674951][T11056] copy_process+0x327c/0x7a40 [ 412.675001][T11056] ? __pfx_copy_process+0x10/0x10 [ 412.675034][T11056] ? find_held_lock+0x2b/0x80 [ 412.675076][T11056] kernel_clone+0xfc/0x9a0 [ 412.675105][T11056] ? __pfx_futex_wait+0x10/0x10 [ 412.675146][T11056] ? __pfx_kernel_clone+0x10/0x10 [ 412.675197][T11056] __do_sys_clone+0xd9/0x120 [ 412.675228][T11056] ? __pfx___do_sys_clone+0x10/0x10 [ 412.675284][T11056] do_syscall_64+0x106/0xf80 [ 412.675318][T11056] ? clear_bhb_loop+0x40/0x90 [ 412.675350][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.675377][T11056] RIP: 0033:0x7f8a14f9c799 [ 412.675393][T11056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.675407][T11056] RSP: 002b:00007f8a15dadfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 412.675422][T11056] RAX: ffffffffffffffda RBX: 00007f8a15215fa0 RCX: 00007f8a14f9c799 [ 412.675431][T11056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 412.675447][T11056] RBP: 00007f8a15032c99 R08: 0000000000000000 R09: 0000000000000000 [ 412.675457][T11056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 412.675466][T11056] R13: 00007f8a15216038 R14: 00007f8a15215fa0 R15: 00007ffeb3577938 [ 412.675485][T11056] [ 413.087943][T11065] netlink: 'syz.3.1234': attribute type 1 has an invalid length. [ 413.451054][T11078] netlink: 'syz.0.1238': attribute type 1 has an invalid length. [ 414.033173][T11077] net_ratelimit: 6 callbacks suppressed [ 414.033189][T11077] netlink: Unknown conntrack attr (type=257, max=9) [ 414.137164][T11087] FAULT_INJECTION: forcing a failure. [ 414.137164][T11087] name fail_futex, interval 1, probability 0, space 0, times 0 [ 414.256684][ T29] audit: type=1326 audit(669033.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.1.1237" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7d5b9c799 code=0x0 [ 414.294540][T11087] CPU: 1 UID: 0 PID: 11087 Comm: syz.3.1239 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 414.294600][T11087] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 414.294615][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.294631][T11087] Call Trace: [ 414.294639][T11087] [ 414.294649][T11087] dump_stack_lvl+0x100/0x190 [ 414.294694][T11087] should_fail_ex.cold+0x5/0xa [ 414.294726][T11087] get_futex_key+0x1d2/0x1620 [ 414.294762][T11087] ? __pfx_get_futex_key+0x10/0x10 [ 414.294797][T11087] ? kasan_save_track+0x14/0x30 [ 414.294835][T11087] ? __kasan_kmalloc+0xaa/0xb0 [ 414.294889][T11087] futex_lock_pi+0x1d3/0x7b0 [ 414.294931][T11087] ? preempt_schedule_thunk+0x16/0x30 [ 414.294966][T11087] ? __pfx_futex_lock_pi+0x10/0x10 [ 414.295002][T11087] ? preempt_schedule_common+0x42/0xc0 [ 414.295039][T11087] ? preempt_schedule_thunk+0x16/0x30 [ 414.295087][T11087] ? __pfx_try_to_wake_up+0x10/0x10 [ 414.295125][T11087] ? futex_private_hash_put+0x107/0x1c0 [ 414.295162][T11087] ? __pfx_futex_wake_mark+0x10/0x10 [ 414.295210][T11087] ? __get_user_nocheck_8+0x20/0x20 [ 414.295243][T11087] ? do_vfs_ioctl+0x226/0x13e0 [ 414.295283][T11087] do_futex+0x18a/0x350 [ 414.295317][T11087] ? __pfx_do_futex+0x10/0x10 [ 414.295353][T11087] ? find_held_lock+0x2b/0x80 [ 414.295385][T11087] __x64_sys_futex+0x34f/0x4d0 [ 414.295424][T11087] ? __pfx___x64_sys_futex+0x10/0x10 [ 414.295473][T11087] do_syscall_64+0x106/0xf80 [ 414.295509][T11087] ? clear_bhb_loop+0x40/0x90 [ 414.295542][T11087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.295569][T11087] RIP: 0033:0x7f1d2bf9c799 [ 414.295591][T11087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.295617][T11087] RSP: 002b:00007f1d2cdee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 414.295644][T11087] RAX: ffffffffffffffda RBX: 00007f1d2c216090 RCX: 00007f1d2bf9c799 [ 414.295663][T11087] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 414.295680][T11087] RBP: 00007f1d2c032c99 R08: 0000000000000000 R09: 000000008000fff5 [ 414.295697][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.295713][T11087] R13: 00007f1d2c216128 R14: 00007f1d2c216090 R15: 00007ffc1ea91598 [ 414.295751][T11087] [ 415.594672][T11104] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1244'. [ 420.038843][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'. [ 420.063700][T11159] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 420.469593][T11159] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1258'. [ 420.549713][T11161] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1257'. [ 421.674299][T11176] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1260'. [ 421.695798][T11178] ptp ptp0: new virtual clock ptp1 [ 421.704508][T11178] ptp ptp0: guarantee physical clock free running [ 421.774682][T11178] ptp ptp0: delete virtual clock ptp1 [ 422.402151][T11178] ptp ptp0: only physical clock in use now [ 424.268240][T11199] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 424.501534][T11207] FAULT_INJECTION: forcing a failure. [ 424.501534][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 425.084368][T11207] CPU: 0 UID: 0 PID: 11207 Comm: syz.2.1270 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 425.084427][T11207] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 425.084443][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.084461][T11207] Call Trace: [ 425.084470][T11207] [ 425.084481][T11207] dump_stack_lvl+0x100/0x190 [ 425.084531][T11207] should_fail_ex.cold+0x5/0xa [ 425.084564][T11207] should_failslab+0xc2/0x120 [ 425.084594][T11207] __kmalloc_cache_noprof+0x7a/0x6f0 [ 425.084631][T11207] ? vkms_plane_duplicate_state+0x87/0x130 [ 425.084669][T11207] vkms_plane_duplicate_state+0x87/0x130 [ 425.084700][T11207] drm_atomic_get_plane_state+0x279/0x760 [ 425.084738][T11207] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 425.084781][T11207] ? trace_contention_end+0x140/0x180 [ 425.084824][T11207] ? __mutex_lock+0x26a/0x1b90 [ 425.084865][T11207] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 425.084906][T11207] ? drm_master_internal_acquire+0x21/0x80 [ 425.084979][T11207] drm_client_modeset_commit_locked+0x14d/0x580 [ 425.085025][T11207] drm_client_modeset_commit+0x4f/0x80 [ 425.085065][T11207] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 425.085108][T11207] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 425.085150][T11207] drm_fbdev_client_restore+0x1b/0x30 [ 425.085182][T11207] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 425.085211][T11207] drm_client_dev_restore+0x205/0x2a0 [ 425.085263][T11207] drm_release+0x2c6/0x360 [ 425.085300][T11207] ? __pfx_drm_release+0x10/0x10 [ 425.085336][T11207] __fput+0x3ff/0xb40 [ 425.085379][T11207] task_work_run+0x150/0x240 [ 425.085419][T11207] ? __pfx_task_work_run+0x10/0x10 [ 425.085470][T11207] exit_to_user_mode_loop+0x100/0x4a0 [ 425.085508][T11207] do_syscall_64+0x668/0xf80 [ 425.085543][T11207] ? clear_bhb_loop+0x40/0x90 [ 425.085578][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.085607][T11207] RIP: 0033:0x7fa1d039c799 [ 425.085631][T11207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.085660][T11207] RSP: 002b:00007fa1d11b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 425.085687][T11207] RAX: 0000000000000000 RBX: 00007fa1d0616090 RCX: 00007fa1d039c799 [ 425.085706][T11207] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 425.085723][T11207] RBP: 00007fa1d0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 425.085739][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.085756][T11207] R13: 00007fa1d0616128 R14: 00007fa1d0616090 R15: 00007fff5f72f788 [ 425.085798][T11207] [ 427.575249][T11223] FAULT_INJECTION: forcing a failure. [ 427.575249][T11223] name failslab, interval 1, probability 0, space 0, times 0 [ 428.129087][T11223] CPU: 1 UID: 0 PID: 11223 Comm: syz.2.1274 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 428.129142][T11223] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 428.129155][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.129169][T11223] Call Trace: [ 428.129177][T11223] [ 428.129187][T11223] dump_stack_lvl+0x100/0x190 [ 428.129228][T11223] should_fail_ex.cold+0x5/0xa [ 428.129255][T11223] should_failslab+0xc2/0x120 [ 428.129282][T11223] __kmalloc_cache_noprof+0x7a/0x6f0 [ 428.129316][T11223] ? virtual_ncidev_open+0x49/0x220 [ 428.129357][T11223] virtual_ncidev_open+0x49/0x220 [ 428.129386][T11223] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 428.129413][T11223] misc_open+0x26d/0x450 [ 428.129438][T11223] ? __pfx_misc_open+0x10/0x10 [ 428.129464][T11223] chrdev_open+0x234/0x6a0 [ 428.129488][T11223] ? __pfx_apparmor_file_open+0x10/0x10 [ 428.129526][T11223] ? __pfx_chrdev_open+0x10/0x10 [ 428.129550][T11223] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 428.129580][T11223] do_dentry_open+0x6d8/0x1660 [ 428.129603][T11223] ? __pfx_chrdev_open+0x10/0x10 [ 428.129636][T11223] vfs_open+0x82/0x3f0 [ 428.129670][T11223] path_openat+0x208c/0x31a0 [ 428.129706][T11223] ? __pfx_path_openat+0x10/0x10 [ 428.129744][T11223] do_file_open+0x20e/0x430 [ 428.129776][T11223] ? __pfx_do_file_open+0x10/0x10 [ 428.129840][T11223] ? alloc_fd+0x476/0x790 [ 428.129870][T11223] ? do_getname+0x191/0x390 [ 428.129901][T11223] do_sys_openat2+0x10d/0x1e0 [ 428.129938][T11223] ? __pfx_do_sys_openat2+0x10/0x10 [ 428.129992][T11223] __x64_sys_openat+0x12d/0x210 [ 428.130033][T11223] ? __pfx___x64_sys_openat+0x10/0x10 [ 428.130093][T11223] do_syscall_64+0x106/0xf80 [ 428.130130][T11223] ? clear_bhb_loop+0x40/0x90 [ 428.130158][T11223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.130184][T11223] RIP: 0033:0x7fa1d039c799 [ 428.130207][T11223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.130233][T11223] RSP: 002b:00007fa1d11d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 428.130262][T11223] RAX: ffffffffffffffda RBX: 00007fa1d0615fa0 RCX: 00007fa1d039c799 [ 428.130284][T11223] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 428.130305][T11223] RBP: 00007fa1d0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 428.130325][T11223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.130344][T11223] R13: 00007fa1d0616038 R14: 00007fa1d0615fa0 R15: 00007fff5f72f788 [ 428.130383][T11223] [ 432.148122][T11273] can: request_module (can-proto-0) failed. [ 434.115497][T11286] FAULT_INJECTION: forcing a failure. [ 434.115497][T11286] name failslab, interval 1, probability 0, space 0, times 0 [ 434.168092][T11286] CPU: 1 UID: 0 PID: 11286 Comm: syz.2.1286 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 434.168158][T11286] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 434.168174][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.168190][T11286] Call Trace: [ 434.168199][T11286] [ 434.168210][T11286] dump_stack_lvl+0x100/0x190 [ 434.168255][T11286] should_fail_ex.cold+0x5/0xa [ 434.168274][T11286] should_failslab+0xc2/0x120 [ 434.168296][T11286] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 434.168321][T11286] ? kstrdup_const+0x63/0x80 [ 434.168338][T11286] kstrdup+0x51/0xe0 [ 434.168360][T11286] kstrdup_const+0x63/0x80 [ 434.168373][T11286] alloc_vfsmnt+0xe5/0x6a0 [ 434.168392][T11286] clone_mnt+0x4b/0x930 [ 434.168415][T11286] copy_tree+0x329/0xbf0 [ 434.168434][T11286] copy_mnt_ns+0x2bd/0xc30 [ 434.168451][T11286] ? create_new_namespaces+0x30/0xac0 [ 434.168466][T11286] ? rcu_is_watching+0x12/0xc0 [ 434.168490][T11286] create_new_namespaces+0xd3/0xac0 [ 434.168505][T11286] ? bpf_lsm_capable+0x9/0x10 [ 434.168520][T11286] ? security_capable+0x80/0x260 [ 434.168544][T11286] copy_namespaces+0x468/0x5e0 [ 434.168560][T11286] copy_process+0x327c/0x7a40 [ 434.168587][T11286] ? __pfx_copy_process+0x10/0x10 [ 434.168604][T11286] ? find_held_lock+0x2b/0x80 [ 434.168620][T11286] ? futex_private_hash_put+0x107/0x1c0 [ 434.168641][T11286] kernel_clone+0xfc/0x9a0 [ 434.168658][T11286] ? __pfx_kernel_clone+0x10/0x10 [ 434.168686][T11286] __do_sys_clone+0xd9/0x120 [ 434.168702][T11286] ? __pfx___do_sys_clone+0x10/0x10 [ 434.168735][T11286] do_syscall_64+0x106/0xf80 [ 434.168754][T11286] ? clear_bhb_loop+0x40/0x90 [ 434.168772][T11286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.168791][T11286] RIP: 0033:0x7fa1d039c799 [ 434.168805][T11286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.168819][T11286] RSP: 002b:00007fa1d11d6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 434.168834][T11286] RAX: ffffffffffffffda RBX: 00007fa1d0615fa0 RCX: 00007fa1d039c799 [ 434.168844][T11286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 434.168854][T11286] RBP: 00007fa1d0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 434.168863][T11286] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 434.168871][T11286] R13: 00007fa1d0616038 R14: 00007fa1d0615fa0 R15: 00007fff5f72f788 [ 434.168891][T11286] [ 439.975696][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.984925][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.054007][T11379] serio: Serial port pty6 [ 442.806606][ T29] audit: type=1800 audit(669061.610:6): pid=11416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1315" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 447.664466][T11502] input: f as /devices/virtual/input/input9 [ 447.681184][T11502] FAULT_INJECTION: forcing a failure. [ 447.681184][T11502] name failslab, interval 1, probability 0, space 0, times 0 [ 447.761939][T11502] CPU: 1 UID: 0 PID: 11502 Comm: syz.3.1332 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 447.761976][T11502] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 447.761985][T11502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.761994][T11502] Call Trace: [ 447.762000][T11502] [ 447.762006][T11502] dump_stack_lvl+0x100/0x190 [ 447.762033][T11502] should_fail_ex.cold+0x5/0xa [ 447.762052][T11502] should_failslab+0xc2/0x120 [ 447.762068][T11502] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 447.762089][T11502] ? __kernfs_new_node+0xd2/0x960 [ 447.762113][T11502] __kernfs_new_node+0xd2/0x960 [ 447.762134][T11502] ? __pfx_try_to_wake_up+0x10/0x10 [ 447.762149][T11502] ? __pfx___kernfs_new_node+0x10/0x10 [ 447.762174][T11502] ? find_held_lock+0x2b/0x80 [ 447.762186][T11502] ? kernfs_root+0xee/0x2a0 [ 447.762205][T11502] ? kernfs_root+0xee/0x2a0 [ 447.762228][T11502] kernfs_new_node+0x11b/0x1a0 [ 447.762253][T11502] __kernfs_create_file+0x53/0x350 [ 447.762272][T11502] sysfs_add_file_mode_ns+0x207/0x3c0 [ 447.762295][T11502] sysfs_merge_group+0x194/0x340 [ 447.762315][T11502] ? kernfs_add_one+0x214/0x850 [ 447.762336][T11502] ? __pfx_sysfs_merge_group+0x10/0x10 [ 447.762368][T11502] ? __pfx_dev_add_physical_location+0x10/0x10 [ 447.762386][T11502] ? bus_to_subsys+0x114/0x150 [ 447.762407][T11502] dpm_sysfs_add+0x237/0x280 [ 447.762424][T11502] device_add+0x9ef/0x1950 [ 447.762444][T11502] ? __pfx_device_add+0x10/0x10 [ 447.762464][T11502] ? kobject_get+0xbb/0x150 [ 447.762488][T11502] cdev_device_add+0x12b/0x270 [ 447.762504][T11502] evdev_connect+0x3a8/0x4b0 [ 447.762529][T11502] input_attach_handler.isra.0+0x177/0x1e0 [ 447.762554][T11502] input_register_device.cold+0x139/0x375 [ 447.762575][T11502] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 447.762593][T11502] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 447.762613][T11502] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 447.762635][T11502] ? find_held_lock+0x2b/0x80 [ 447.762649][T11502] ? __fget_files+0x215/0x3d0 [ 447.762671][T11502] ? __pfx_uinput_ioctl+0x10/0x10 [ 447.762688][T11502] __x64_sys_ioctl+0x18e/0x210 [ 447.762710][T11502] do_syscall_64+0x106/0xf80 [ 447.762729][T11502] ? clear_bhb_loop+0x40/0x90 [ 447.762747][T11502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.762762][T11502] RIP: 0033:0x7f1d2bf9c799 [ 447.762775][T11502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.762790][T11502] RSP: 002b:00007f1d2ce0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.762805][T11502] RAX: ffffffffffffffda RBX: 00007f1d2c215fa0 RCX: 00007f1d2bf9c799 [ 447.762815][T11502] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 447.762824][T11502] RBP: 00007f1d2c032c99 R08: 0000000000000000 R09: 0000000000000000 [ 447.762833][T11502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.762841][T11502] R13: 00007f1d2c216038 R14: 00007f1d2c215fa0 R15: 00007ffc1ea91598 [ 447.762861][T11502] [ 448.657177][T11502] input: failed to attach handler evdev to device input9, error: -12 [ 448.947957][T11513] netlink: 'syz.1.1333': attribute type 1 has an invalid length. [ 449.753330][T11514] Process accounting resumed [ 451.690188][T11553] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1341'. [ 453.010284][T11579] netlink: 'syz.3.1346': attribute type 1 has an invalid length. [ 453.256433][T11588] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 454.210090][T11593] FAULT_INJECTION: forcing a failure. [ 454.210090][T11593] name failslab, interval 1, probability 0, space 0, times 0 [ 454.305379][T11593] CPU: 0 UID: 0 PID: 11593 Comm: syz.3.1348 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 454.305416][T11593] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 454.305424][T11593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.305433][T11593] Call Trace: [ 454.305439][T11593] [ 454.305446][T11593] dump_stack_lvl+0x100/0x190 [ 454.305472][T11593] should_fail_ex.cold+0x5/0xa [ 454.305491][T11593] should_failslab+0xc2/0x120 [ 454.305507][T11593] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 454.305528][T11593] ? __anon_vma_prepare+0x344/0x5e0 [ 454.305552][T11593] ? __pfx_filemap_map_pages+0x10/0x10 [ 454.305573][T11593] __anon_vma_prepare+0x344/0x5e0 [ 454.305594][T11593] ? __pfx_filemap_map_pages+0x10/0x10 [ 454.305614][T11593] __vmf_anon_prepare+0x11f/0x250 [ 454.305632][T11593] do_fault+0x152/0x1990 [ 454.305652][T11593] __handle_mm_fault+0x180f/0x2b60 [ 454.305676][T11593] ? __pfx___handle_mm_fault+0x10/0x10 [ 454.305697][T11593] ? pte_offset_map_lock+0x174/0x320 [ 454.305712][T11593] ? find_held_lock+0x2b/0x80 [ 454.305732][T11593] ? follow_page_pte+0x5b3/0x1400 [ 454.305752][T11593] handle_mm_fault+0x36d/0xa20 [ 454.305775][T11593] __get_user_pages+0xf9c/0x34d0 [ 454.305798][T11593] ? __pfx___get_user_pages+0x10/0x10 [ 454.305820][T11593] populate_vma_page_range+0x267/0x3f0 [ 454.305842][T11593] ? __pfx_populate_vma_page_range+0x10/0x10 [ 454.305858][T11593] ? __pfx_find_vma_intersection+0x10/0x10 [ 454.305875][T11593] ? do_mmap+0x93f/0x12f0 [ 454.305892][T11593] __mm_populate+0x107/0x3a0 [ 454.305910][T11593] ? __pfx___mm_populate+0x10/0x10 [ 454.305928][T11593] ? up_write+0x290/0x4f0 [ 454.305949][T11593] vm_mmap_pgoff+0x37f/0x470 [ 454.305969][T11593] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 454.305984][T11593] ? __fget_files+0x215/0x3d0 [ 454.306001][T11593] ? __fget_files+0x21f/0x3d0 [ 454.306018][T11593] ksys_mmap_pgoff+0x3c8/0x650 [ 454.306033][T11593] ? __x64_sys_futex+0x34f/0x4d0 [ 454.306051][T11593] ? __x64_sys_futex+0x358/0x4d0 [ 454.306069][T11593] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 454.306085][T11593] ? xfd_validate_state+0x129/0x190 [ 454.306108][T11593] __x64_sys_mmap+0x125/0x190 [ 454.306131][T11593] do_syscall_64+0x106/0xf80 [ 454.306151][T11593] ? clear_bhb_loop+0x40/0x90 [ 454.306170][T11593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.306185][T11593] RIP: 0033:0x7f1d2bf9c799 [ 454.306199][T11593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.306214][T11593] RSP: 002b:00007f1d2ce0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 454.306228][T11593] RAX: ffffffffffffffda RBX: 00007f1d2c215fa0 RCX: 00007f1d2bf9c799 [ 454.306238][T11593] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 454.306247][T11593] RBP: 00007f1d2c032c99 R08: 0000000000000003 R09: 0000000000008000 [ 454.306256][T11593] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 454.306265][T11593] R13: 00007f1d2c216038 R14: 00007f1d2c215fa0 R15: 00007ffc1ea91598 [ 454.306286][T11593] [ 455.287835][T11603] can: request_module (can-proto-0) failed. [ 457.778951][T11635] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1357'. [ 458.052312][T11635] FAULT_INJECTION: forcing a failure. [ 458.052312][T11635] name failslab, interval 1, probability 0, space 0, times 0 [ 458.162049][T11635] CPU: 1 UID: 0 PID: 11635 Comm: syz.2.1357 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 458.162085][T11635] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 458.162093][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.162103][T11635] Call Trace: [ 458.162109][T11635] [ 458.162115][T11635] dump_stack_lvl+0x100/0x190 [ 458.162142][T11635] should_fail_ex.cold+0x5/0xa [ 458.162161][T11635] should_failslab+0xc2/0x120 [ 458.162177][T11635] __kmalloc_cache_noprof+0x7a/0x6f0 [ 458.162198][T11635] ? call_usermodehelper_setup+0xaf/0x360 [ 458.162224][T11635] ? __pfx_free_modprobe_argv+0x10/0x10 [ 458.162245][T11635] call_usermodehelper_setup+0xaf/0x360 [ 458.162270][T11635] __request_module+0x3c7/0x6c0 [ 458.162290][T11635] ? __pfx___request_module+0x10/0x10 [ 458.162315][T11635] ? __get_fs_type+0x12c/0x170 [ 458.162330][T11635] ? __get_fs_type+0x12c/0x170 [ 458.162353][T11635] get_fs_type+0xd7/0x190 [ 458.162370][T11635] __x64_sys_fsopen+0xca/0x220 [ 458.162398][T11635] do_syscall_64+0x106/0xf80 [ 458.162417][T11635] ? clear_bhb_loop+0x40/0x90 [ 458.162435][T11635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.162450][T11635] RIP: 0033:0x7fa1d039c799 [ 458.162464][T11635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.162479][T11635] RSP: 002b:00007fa1d11d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 458.162492][T11635] RAX: ffffffffffffffda RBX: 00007fa1d0615fa0 RCX: 00007fa1d039c799 [ 458.162502][T11635] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 458.162511][T11635] RBP: 00007fa1d0432c99 R08: 0000000000000000 R09: 0000000000000000 [ 458.162519][T11635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.162528][T11635] R13: 00007fa1d0616038 R14: 00007fa1d0615fa0 R15: 00007fff5f72f788 [ 458.162546][T11635] [ 459.223558][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1361'. [ 460.694365][T11660] sd 0:0:1:0: PR command failed: 1026 [ 460.704416][T11660] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 460.836910][T11660] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 462.531022][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'. [ 462.541107][T11692] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1371'. [ 464.166322][T11712] rtc_cmos 00:00: Alarms can be up to one day in the future [ 465.155716][T11705] bond0: option arp_validate: invalid value () [ 467.418507][T11752] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 467.466042][T11752] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 467.472245][T11752] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 467.478460][T11752] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.224676][T11766] random: crng reseeded on system resumption [ 468.347454][T11759] netlink: 'syz.0.1386': attribute type 1 has an invalid length. Ijn9_UVQ8j@:Un M%Ux[ 469.484302][T11445] Bluetooth: hci0: command 0x0c1a tx timeout [ 469.526379][T11783] can: request_module (can-proto-0) failed. [ 469.566314][T11445] Bluetooth: hci3: command 0x0c1a tx timeout [ 469.572406][T11438] Bluetooth: hci2: command 0x0c1a tx timeout [ 469.581874][T11445] Bluetooth: hci1: command 0x0c1a tx timeout [ 470.496149][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1396'. [ 473.871458][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 473.912795][T11846] netlink: 'syz.0.1404': attribute type 2 has an invalid length. [ 473.940928][T11846] netlink: 'syz.0.1404': attribute type 3 has an invalid length. [ 474.011355][T11846] netlink: 51505 bytes leftover after parsing attributes in process `syz.0.1404'. [ 474.444295][T11798] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 475.150548][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 475.161261][T11865] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 475.291910][T11865] netlink: 51505 bytes leftover after parsing attributes in process `syz.1.1408'. [ 475.436779][T11867] netlink: 'syz.0.1415': attribute type 1 has an invalid length. [ 475.971153][T11887] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 476.964834][T11889] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 477.078948][T11899] can: request_module (can-proto-0) failed. [ 478.022477][T11913] Console: switching to colour VGA+ 80x25 [ 478.163872][T11913] ================================================================== [ 478.163896][T11913] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 478.163936][T11913] Read of size 26 at addr ffff88807da407ea by task syz.1.1417/11913 [ 478.163962][T11913] [ 478.163980][T11913] CPU: 1 UID: 0 PID: 11913 Comm: syz.1.1417 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 478.164039][T11913] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 478.164055][T11913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.164072][T11913] Call Trace: [ 478.164081][T11913] [ 478.164091][T11913] dump_stack_lvl+0x100/0x190 [ 478.164131][T11913] print_report+0x156/0x4c9 [ 478.164171][T11913] ? __virt_addr_valid+0x81/0x620 [ 478.164202][T11913] ? __phys_addr+0xe8/0x180 [ 478.164233][T11913] ? fbcon_prepare_logo+0x94e/0xc60 [ 478.164257][T11913] kasan_report+0xdf/0x1e0 [ 478.164284][T11913] ? fbcon_prepare_logo+0x94e/0xc60 [ 478.164316][T11913] kasan_check_range+0x10f/0x1e0 [ 478.164345][T11913] __asan_memcpy+0x23/0x60 [ 478.164390][T11913] fbcon_prepare_logo+0x94e/0xc60 [ 478.164424][T11913] fbcon_init+0x10a0/0x1820 [ 478.164456][T11913] visual_init+0x320/0x620 [ 478.164488][T11913] do_bind_con_driver.isra.0+0x636/0x9c0 [ 478.164529][T11913] store_bind+0x609/0x730 [ 478.164567][T11913] ? __pfx_store_bind+0x10/0x10 [ 478.164600][T11913] dev_attr_store+0x58/0x80 [ 478.164629][T11913] ? __pfx_dev_attr_store+0x10/0x10 [ 478.164658][T11913] sysfs_kf_write+0xf2/0x150 [ 478.164692][T11913] kernfs_fop_write_iter+0x3e0/0x5f0 [ 478.164720][T11913] ? __pfx_sysfs_kf_write+0x10/0x10 [ 478.164754][T11913] vfs_write+0x6ac/0x1070 [ 478.164779][T11913] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 478.164809][T11913] ? __pfx_vfs_write+0x10/0x10 [ 478.164860][T11913] ksys_write+0x12a/0x250 [ 478.164885][T11913] ? __pfx_ksys_write+0x10/0x10 [ 478.164914][T11913] do_syscall_64+0x106/0xf80 [ 478.164951][T11913] ? clear_bhb_loop+0x40/0x90 [ 478.164983][T11913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.165011][T11913] RIP: 0033:0x7fa7d5b9c799 [ 478.165034][T11913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.165061][T11913] RSP: 002b:00007fa7d6a94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 478.165086][T11913] RAX: ffffffffffffffda RBX: 00007fa7d5e15fa0 RCX: 00007fa7d5b9c799 [ 478.165105][T11913] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000003 [ 478.165122][T11913] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 478.165139][T11913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.165155][T11913] R13: 00007fa7d5e16038 R14: 00007fa7d5e15fa0 R15: 00007ffdaa6360d8 [ 478.165184][T11913] [ 478.165194][T11913] [ 478.165201][T11913] Allocated by task 11920: [ 478.165221][T11913] kasan_save_stack+0x30/0x50 [ 478.165261][T11913] kasan_save_track+0x14/0x30 [ 478.165299][T11913] __kasan_kmalloc+0xaa/0xb0 [ 478.165337][T11913] loopback_open+0x145/0x1370 [ 478.165377][T11913] snd_pcm_open_substream+0xa76/0x1850 [ 478.165414][T11913] snd_pcm_oss_open+0x735/0x1390 [ 478.165439][T11913] soundcore_open+0x2e3/0x5a0 [ 478.165462][T11913] chrdev_open+0x234/0x6a0 [ 478.165483][T11913] do_dentry_open+0x6d8/0x1660 [ 478.165503][T11913] vfs_open+0x82/0x3f0 [ 478.165527][T11913] path_openat+0x208c/0x31a0 [ 478.165549][T11913] do_file_open+0x20e/0x430 [ 478.165569][T11913] do_sys_openat2+0x10d/0x1e0 [ 478.165596][T11913] __x64_sys_openat+0x12d/0x210 [ 478.165623][T11913] do_syscall_64+0x106/0xf80 [ 478.165651][T11913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.165674][T11913] [ 478.165679][T11913] The buggy address belongs to the object at ffff88807da40700 [ 478.165679][T11913] which belongs to the cache kmalloc-192 of size 192 [ 478.165698][T11913] The buggy address is located 66 bytes to the right of [ 478.165698][T11913] allocated 168-byte region [ffff88807da40700, ffff88807da407a8) [ 478.165722][T11913] [ 478.165728][T11913] The buggy address belongs to the physical page: [ 478.165738][T11913] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7da40 [ 478.165765][T11913] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 478.165784][T11913] page_type: f5(slab) [ 478.165806][T11913] raw: 00fff00000000000 ffff88813fe3c3c0 dead000000000100 dead000000000122 [ 478.165831][T11913] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 478.165846][T11913] page dumped because: kasan: bad access detected [ 478.165865][T11913] page_owner tracks the page as allocated [ 478.165873][T11913] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8305, tgid 8298 (syz.2.549), ts 220164930806, free_ts 219874742697 [ 478.165913][T11913] post_alloc_hook+0x153/0x170 [ 478.165942][T11913] get_page_from_freelist+0x111d/0x3140 [ 478.165974][T11913] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 478.166008][T11913] new_slab+0xa6/0x6b0 [ 478.166033][T11913] refill_objects+0x26b/0x400 [ 478.166062][T11913] __pcs_replace_empty_main+0x1ab/0x660 [ 478.166094][T11913] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 478.166129][T11913] kmemdup_noprof+0x29/0x60 [ 478.166161][T11913] neigh_parms_alloc+0x85/0x5e0 [ 478.166191][T11913] ipv6_add_dev+0x3f7/0x1520 [ 478.166219][T11913] addrconf_notify+0x563/0x19c0 [ 478.166240][T11913] notifier_call_chain+0x99/0x420 [ 478.166268][T11913] call_netdevice_notifiers_info+0xbe/0x110 [ 478.166304][T11913] register_netdevice+0x16e6/0x2210 [ 478.166335][T11913] __ip_tunnel_create+0x52b/0x670 [ 478.166372][T11913] ip_tunnel_init_net+0x230/0x780 [ 478.166406][T11913] page last free pid 8318 tgid 8318 stack trace: [ 478.166419][T11913] __free_frozen_pages+0x7e1/0x10d0 [ 478.166447][T11913] tlb_remove_table_rcu+0x2cf/0x380 [ 478.166474][T11913] rcu_core+0x5a2/0x10d0 [ 478.166502][T11913] handle_softirqs+0x1eb/0x9e0 [ 478.166524][T11913] __irq_exit_rcu+0xef/0x150 [ 478.166545][T11913] irq_exit_rcu+0x9/0x30 [ 478.166566][T11913] sysvec_apic_timer_interrupt+0x56/0xc0 [ 478.166594][T11913] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 478.166619][T11913] [ 478.166624][T11913] Memory state around the buggy address: [ 478.166636][T11913] ffff88807da40680: 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc fc [ 478.166652][T11913] ffff88807da40700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.166668][T11913] >ffff88807da40780: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 478.166681][T11913] ^ [ 478.166695][T11913] ffff88807da40800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 478.166711][T11913] ffff88807da40880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 478.166724][T11913] ================================================================== [ 478.184957][T11913] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 478.184983][T11913] CPU: 1 UID: 0 PID: 11913 Comm: syz.1.1417 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 478.185043][T11913] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 478.185059][T11913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.185077][T11913] Call Trace: [ 478.185086][T11913] [ 478.185097][T11913] dump_stack_lvl+0x100/0x190 [ 478.185143][T11913] vpanic+0x552/0x970 [ 478.185170][T11913] ? __pfx_vpanic+0x10/0x10 [ 478.185201][T11913] ? fbcon_prepare_logo+0x94e/0xc60 [ 478.185230][T11913] panic+0xd1/0xe0 [ 478.185256][T11913] ? __pfx_panic+0x10/0x10 [ 478.185284][T11913] ? fbcon_prepare_logo+0x94e/0xc60 [ 478.185312][T11913] ? preempt_schedule_common+0x42/0xc0 [ 478.185361][T11913] check_panic_on_warn.cold+0x19/0x34 [ 478.185393][T11913] end_report.part.0+0x3a/0x90 [ 478.185436][T11913] kasan_report.cold+0xe/0x18 [ 478.185475][T11913] ? fbcon_prepare_logo+0x94e/0xc60 [ 478.185508][T11913] kasan_check_range+0x10f/0x1e0 [ 478.185542][T11913] __asan_memcpy+0x23/0x60 [ 478.185584][T11913] fbcon_prepare_logo+0x94e/0xc60 [ 478.185621][T11913] fbcon_init+0x10a0/0x1820 [ 478.185653][T11913] visual_init+0x320/0x620 [ 478.185685][T11913] do_bind_con_driver.isra.0+0x636/0x9c0 [ 478.185727][T11913] store_bind+0x609/0x730 [ 478.185767][T11913] ? __pfx_store_bind+0x10/0x10 [ 478.185800][T11913] dev_attr_store+0x58/0x80 [ 478.185830][T11913] ? __pfx_dev_attr_store+0x10/0x10 [ 478.185860][T11913] sysfs_kf_write+0xf2/0x150 [ 478.185895][T11913] kernfs_fop_write_iter+0x3e0/0x5f0 [ 478.185922][T11913] ? __pfx_sysfs_kf_write+0x10/0x10 [ 478.185960][T11913] vfs_write+0x6ac/0x1070 [ 478.185986][T11913] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 478.186014][T11913] ? __pfx_vfs_write+0x10/0x10 [ 478.186067][T11913] ksys_write+0x12a/0x250 [ 478.186092][T11913] ? __pfx_ksys_write+0x10/0x10 [ 478.186122][T11913] do_syscall_64+0x106/0xf80 [ 478.186159][T11913] ? clear_bhb_loop+0x40/0x90 [ 478.186190][T11913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.186218][T11913] RIP: 0033:0x7fa7d5b9c799 [ 478.186240][T11913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.186269][T11913] RSP: 002b:00007fa7d6a94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 478.186296][T11913] RAX: ffffffffffffffda RBX: 00007fa7d5e15fa0 RCX: 00007fa7d5b9c799 [ 478.186316][T11913] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000003 [ 478.186335][T11913] RBP: 00007fa7d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 478.186361][T11913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.186379][T11913] R13: 00007fa7d5e16038 R14: 00007fa7d5e15fa0 R15: 00007ffdaa6360d8 [ 478.186408][T11913] [ 478.186669][T11913] Kernel Offset: disabled