last executing test programs: 5.118842076s ago: executing program 0 (id=1109): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, 0x0, 0x0, 0x2}, 0xe3c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0) 5.04082318s ago: executing program 0 (id=1110): r0 = socket(0x10, 0x2, 0x9) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/8/smp_affinity_list\x00', 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptyud\x00', 0x169900, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x88000, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x106) (async) io_uring_setup$auto(0x6, 0x0) (async) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r1, 0x0) (async) socket(0xa, 0x2, 0x3a) (async) io_uring_setup$auto(0x52, 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) (async) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040028fd7000637a8dd7ee8482fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x538, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x521, 0x2, 0x0, 0x1, [@nested={0x2a3, 0x138, 0x0, 0x1, [@nested={0x4, 0xf2}, @generic="902397397d37c4c2ae512ec004399fd1b31a49f05196e4504a0d8b94352e91461922a887c9", @generic="d83bfecf38ec714dabc7ea7f647227c470af537e8820b1f3e0f5c27853d0ddc14bd8ffbbca288f42ba7b66cf793b92d6f1408b9bd3a1d5d641229777376278fdc69e2b418ab04eadd7dfed3b67a8a30768af9db8de4bdccf39469ee7275f6baba71a1d5dfbefb258c3a93f93504f7024fd5316d56e2d", @typed={0x8, 0x5c, 0x0, 0x0, @uid}, @typed={0xc, 0x101, 0x0, 0x0, @u64=0x800}, @generic="f40abc4256fe9f50d361b60f7ba6108a835057ab11248e18cc3e3bb647bc43523141d146d4e0eb9b8588cc96b5cc1113a8ffcd001f09bb5e0a5c6e", @generic="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", @generic="5dddceeeba9a711b3276f745ba2e4348e0d544c17f20a5f4ea4d6d00d78f0924c7b08dce112a3b21cfbf51e55e576ad696bd1e3fbd3f70fb968cbaf8b648dcad0fcf48fc315bb67f3d83151e1541ab1215f6167b3ec9692ba4c0d7c57598b28cfa46efed5c7c36c9652f2964983f7df65cebb10ea59a9b37455f7819305b78c1048c62236679ed5cda0fb76490f11441e894317e35bae91064252f0f045a247440f1f1b8eb3198d01756326d7c0fe4e91c615339432fd9"]}, @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}}, @nested={0xed, 0x134, 0x0, 0x1, [@nested={0x4, 0x119}, @nested={0x4, 0x126}, @nested={0x4, 0x111}, @generic="d5fa3580db8551262e82e5316079875a", @nested={0x4, 0x13f}, @generic="2fc722a05228b080b589dce74be9edbed33945189f6dc017516282e633f44d6ab19c93211d52017170fe11b6d07778557e3e147362dbe15ba43129b79e473f732971b032ab0f8bb8bcc08bf228f644e84579ae6e38d495a1d5ac6e34cf728ec6044546f85a20422105649e5100fc8925223c9570c8dd2646a3823e73ac5af9b785f1b85d8084e4bf7fb8bca27f79fd0fe245789a29e7ae86c7552c1d5361d113ef83b977d781c75a842b0314e6b2096f44e6291cae298918be60a22c10095d5215c4419b46", @nested={0x4, 0x157}]}, @generic="e0210e3c6f8c83aecfa4772c2c1f89be12f7b87a507f4115643066bc24d2b600797f0734dceba0016a4f2a7298ad56d10f967ecac81b68be9a1ce8ba8879244daabbd86f799495eea332e6cdd2485c4dab3767dc52eb9d54f36a0a4382146fa917298fb4f2d6c74def64ef8539f5725031ca9bf6164c5b2d958cf9a16cba9008efd10ad9", @nested={0x60, 0xcf, 0x0, 0x1, [@nested={0x4, 0x102}, @generic="ec1e6f1cdcb5785f0060766035debaf4406effeaa54010da58a15a017cf6c1780ff93003ce5397002288e8e46162563f73a794d273e019d40a02fd1f924d7cc66a526d7a156289906cf4206248735ecb3acabca72ea9114d"]}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@private2}, @generic="25e6d8b115443ae95ab77491df01284b37a49113239c9f19b4e91a45ba47f5eb4bf49c4cce8c9d20395159459dc2d5397a1f114594ab74f5c47f4bbc6294", @generic="35502fd60e3b3a6b9eafe9291d988a1ba34dc4b6d38bcb20d1ea1d85b986ad260f5cc86139cc751a4c94a50c0c31c84f1c393ef2ed62066d7fe627f84b734d"]}]}, 0x538}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b8") (async) r4 = inotify_init1$auto(0x3000000000000) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="1235015049bf97c3e69367a7e995ea5d93d33e4d72943b6c92bef36e1dda40b820", 0x21) (async) inotify_add_watch$auto(r4, 0x0, 0x1000e6e) 4.81573294s ago: executing program 0 (id=1113): r0 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read$auto_null_fops_mem(r0, &(0x7f00000000c0)=""/146, 0x92) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xd, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x2, 0x6, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x10000, 0x0, 0x3b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb89e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x200c) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x5, 0x3, 0x4, 0x5, 0x7) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x0, 0x22, 0x0, 0xffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x28, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x811}, 0x24000802) futex$auto(0x0, 0x10d, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x0, 0x5) 4.55208145s ago: executing program 3 (id=1115): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd11\x00', 0x4040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={"ed65ce0000cf8100000000000300", 0x3fe, 0x408, 0xfff, 0x400004, 0x200000000040000d}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000004ec0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_NOOP(r1, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000004f00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8043, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x458080, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) close_range$auto(0x2, r0, 0x102) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r9}, 0x6a) sendto$auto(r8, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f000000c380)={0x60, 0x1, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x6, 0x2}) 4.470943035s ago: executing program 1 (id=1116): mmap$auto(0x0, 0x3, 0xdf, 0x19, 0x401, 0x2) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x8200, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000100)) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) pidfd_open$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x84) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x40900, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) write$auto(r1, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x10001, 0x1, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0ef1, 0xffffdfffffffff81, 0x4]}, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.28302876s ago: executing program 0 (id=1117): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0x541b, 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54) getsockopt$auto(r0, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x4bb) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x4, 0x20009, 0xdf, 0x20000000000e31, r1, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0x14, 0x1, 0x5, 0x7fff, 0x1}, 0x4, 0x5, "fe8d9b558f71bf52c1b007f84f7613372ff6d08364797a3112971fcd943ca423f77d0c05bd7f9f2c7bd6f1fd3d73a184a65187d0716561a9be0c6637289c6a3c", "aa566f34addfb0091f7eb985bb325551f92a91b3e6e9f586a536da8de4242191aa523dea21503fe4a2c398b447f23392dbf57acbf61d22c3a8510b967db8959ee607340c28138e6ab55dd9d1ba1908e6", 0x8, 0x3, 0x0, 0xfff, 0x8, "c6c4df5c17cb06bdee801def8d4b20e329cb3ef4257a57c7170f8d1ba48d9497"}) madvise$auto(0x0, 0xffffffffffff0006, 0x17) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/hwflags\x00', 0x80240, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r3, 0x0, 0x7fff, 0x4cbd5d) ioctl$auto_SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000040)="936c4952060076ffe426b6f0824c158080cbf1c0712783b7a68e220f80f20fd685579692e1b5125f5bf8fa41a6753f48ce271cc59bf1b2b69ef525a985cd28554d85031ee1c40f47401d1a8d3be4173c93855c140b7974c7f5d4ed2ad2042f3ce6be3b2628a0ee2ef19f25c2929190a2b84bcfadb62709fc627a03c7603a816662ffb40551c82ca1cdc4d3f060c719417581be7a2c8e96a811ee3e6d0d2fbb47ecf7ece69d24d7e30427f840c2d15a441d1d109bf8cdfe2c4b6b9c") read$auto_hwflags_ops_debugfs(r2, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) getsockopt$auto_SO_REUSEADDR(r0, 0x5, 0x2, &(0x7f0000000240)='/proc/thread-self/fail-nth\x00', &(0x7f0000000280)=0x7) socket(0xa, 0x1, 0x100) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r4, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 3.855749265s ago: executing program 3 (id=1118): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r2 = socket(0xa, 0x2, 0x73) r3 = io_uring_setup$auto(0x9, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) close_range$auto(0x2, r3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x742, 0x0) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r4, &(0x7f0000000240)="4a0200000001040000000000000000000700924d1b3c5d2e00000000fdd2adc245a4fe3a61af156016d2e122228118b0", 0x30) setsockopt$auto_SO_BINDTOIFINDEX(r2, 0x6, 0x3e, &(0x7f0000000080)='/dev/sda1\x00', 0xac8) acct$auto(&(0x7f0000000040)='/dev/sda1\x00') r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r3) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x50, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_THRESHOLD={0xc, 0x18, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @fd=r2}]}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0xffffffff}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0x1}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x46a}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x1000}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x1ff}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x34}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20044894) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x94) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) ioctl$auto_FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x5) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/uid_map\x00', 0x22042, 0x0) r7 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f000002ad40), 0xa8002, 0x0) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r8, 0x0, 0x81) write$auto(0x3, 0x0, 0x100082) write$auto(r7, 0x0, 0xa0000000) 3.807151471s ago: executing program 2 (id=1119): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/vhci_hcd.2/usb13/serial\x00', 0x0, 0x0) r1 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc\x00', 0x101002, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x03\x00\x00\x00\xc7\xd9\x88t?$\xe4W\x88Q\xe6e\xb2\xa5\xbbZ$\xc9\xa4@\xfb\xca|I\xb9\xdf\xb9\x81K\x02\xcb\t\x9f\x80\x187\xab\b\xd22\x14\xacj\x11\xd0\xa5E\x14\xc4n\xb7\xa4C\xb2C\x02\xb5L!\xc9_8\xe0r\xa8\a\x1d\x03/\xb0x\x83\xd8\x1d\xd3\x1e\xd0\xdd\x131\xca\x98\x96\xbc`\x06\a,\x88\x9dhT\xc6\x88\xa1\xd7\xe0\xb7\n\xbc\xbc\xf3\xd6\xf4g&\xed\xc2n\xee\x89\xfc\xf7F@\xf2\xddW;/%@\x185\x1ab\xf4*\xb8\x9a`D\xa3\xd0\xc3\x10\xff>\x87(\xba\xb4\xa0\x84\x89n9\x85\xa1\x8a\xce\x00'/176, 0x100081) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) fcntl$auto(0xff80000000000000, 0x406, 0x1) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x42, 0x1, 0x0, 0x1, 0x0) socket(0xb, 0x2, 0x5) mmap$auto(0x400000, 0x400008, 0xdf, 0x17, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x200200, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/input/event0\x00', 0x0, 0x0) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000400)={0x7, 0x0, [{0xc0000103, 0x2, 0x3}]}) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec3\x00', 0xc100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) 3.311111888s ago: executing program 3 (id=1120): openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) (async) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) (async) mq_notify$auto(0xffffffffffffffff, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) (async) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) (async) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async, rerun: 64) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0x8, 0xb0, @raw=0xfffff01c}}) (async, rerun: 64) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.3/usb4/ep_00/bLength\x00', 0x181000, 0x0) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0xe40, 0x0) (async) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) read$auto(0x3, 0x0, 0x7fffffff) readv$auto(r4, &(0x7f00000003c0)={&(0x7f0000000440), 0x5}, 0x7) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xd, 0x3ff, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x9, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_ratio\x00', 0x2, 0x0) sendfile$auto(r5, r5, 0x0, 0x7fffe000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) setsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x8001, 0x10, &(0x7f0000000140)='-\x00', 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.997881331s ago: executing program 0 (id=1121): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) (async) listen$auto(0x3, 0x83) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0x5, 0x0) sendmsg$auto_HSR_C_GET_NODE_LIST(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0600060001800000"], 0x24}}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x800000001}, 0xfffffffffffffffe, 0x0, 0x7f}, 0xa00}, 0xc, 0xa) ioctl$auto(0x3, 0xae41, r4) (async) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) ioctl$auto(0x3, 0x5418, 0xfffffffffffff4e0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xdf) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) unshare$auto(0x40000080) 2.736866172s ago: executing program 3 (id=1122): mmap$auto(0xffffffffffffffff, 0x37, 0xdd, 0xeb1, 0x401, 0x8000) socket(0x10, 0x80000, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x50042, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="640295004b6be606ffff8791106a5f88bf6bc28aa5af3be7277dcd14aa38a09e0ba9a2fa1cd925df124b72492686e22419acff850dd7a6f82cda4f80d63c0feaac5c9ec52d834b5daef81f", @ANYRES16=0x0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRESOCT], 0x264}}, 0x40040) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0x3, 0x0, 0x7fffffff) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1a, 0x0, 0x1) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00', 0x181000, 0x0) read$auto(r2, &(0x7f0000000080)='+%@\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) io_uring_setup$auto(0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000000)="b206b4dc238a6682330beb44e37a7b390ab21171387828ffdafceadd142063c8b76230a5f8b1662b085d86527b6cd897a35782260a7b5f1b80826555") r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x8000, 0x800000000002) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 2.628993424s ago: executing program 2 (id=1123): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000240)={@siginfo_0_0={0x1, 0x8, 0xe08, @_sigfault={&(0x7f0000000100)="0b0bf7a4a0c81ae74c1c09676485e63306e6544413cc8c3f2e51c8359b6b3825fc3fc16ee3f253b72f7b3390cc0ae896b4f621657c42fab26c5e3bd83f2aa2a5f0d197505a87d23393592c7e38a7d2514a735964968998206e26f11f2e8cec85d17c1f158f77e02357d10b4b4892c1dc418868d731c65e40f04d72395617e636c7311545d7d10789a2231c80d68ddde53515c56677c121cbf068f7b58c81316971feb8c40348c995cb24356ef0a4068d641e29edf7958fc4cd68e679d21abcb420c86679ca2c2f3fda47a63620134077da671933100c267b077fcaa39de6ec0e6cd3a4568688dcf7229c3d47ff9273c07c", @_addr_pkey={"ce20137e76372ffa"}}}}, 0xff, &(0x7f00000002c0)={{0x5, 0x5}, {0x4, 0x5}, 0x3, 0x1, 0x9, 0x5529f384, 0x81, 0x81, 0xddd, 0x0, 0x7d2d08c1, 0x0, 0xfffffffffffffffa, 0x8000, 0x8001, 0x1000}) r1 = setfsuid$auto(0xee00) setresuid$auto(r1, 0x0, r1) capget$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) 2.414637138s ago: executing program 2 (id=1124): mmap$auto(0x0, 0x202000b, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2a, 0x2, 0x1) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)='xE`') mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000f80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000002c00)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r3, @ANYBLOB="00052cbd7000fadbdf255500000004007d80050053000100000004009100a0007f002775f0f854c0418f5a05b3777d57e9e926b3fcaaad8b09850eeb937b040cc4e9f838295522b79a337d88a20d6eaab6043434dc13e001c37bad3a6d52d749a6ec5f2a623396768d75d4e7a5f2879ab12e9159ff9ff00cc36a49bacf4cbc5462118f42f600c65a760b5d00000000dc1ed1143e2752bcb071712a528a49330affab5d6a829e88f3ceaa309ddc1ca87b17834b9b8cbb2d82e96f4efbe057e1bca70600480002"], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x22004880) mount$auto(0x0, &(0x7f0000000440)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f0000000140)='nfsd\x00', 0x1010000, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) ioctl$auto_SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000200)="f0") write$auto(r0, 0x0, 0xfffffdf1) mmap$auto(0xfff, 0x3, 0x7, 0xffffffffffffffd0, r1, 0x100) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x20000804) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.6/usb7/7-0:1.0/ep_81/direction\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x4081}, 0x8800) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x201, 0xc000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) ioctl$auto(0x3, 0x5410, 0x38) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x500, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) 2.393201555s ago: executing program 3 (id=1125): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r0, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) getsockopt$auto_SO_BUF_LOCK(r1, 0x0, 0x48, &(0x7f00000001c0)='!!*\x00', &(0x7f0000000240)=0xd11) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 2.184425723s ago: executing program 1 (id=1126): sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x101, 0x0, 0x1c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r2) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, 0x0, 0x50) fsopen$auto(&(0x7f0000000080)='$\x92^-\x00', 0x4) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0x\x113\a\xc7\x91\x92@\xb2P', 0x8081) close_range$auto(0x2, 0x8, 0x0) 1.152846573s ago: executing program 1 (id=1127): r0 = openat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8000000000000001, 0x815, 0x1}, 0x1ff) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r2}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r3}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x7}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r4}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r5}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x1249}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x10000}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x9}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x989e76b}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r6}]}, 0x64}}, 0x40080) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000340), r0) write$auto_dfs_sched_itmt_fops_itmt(r0, &(0x7f0000000380)="afe5b33c2cbccfe2915fea162c52ba5ef2b554b73c7b646deeb4ed7184ee8cea2f8abd9f595f40ff03be2456ce13c5d2b419b973d1232e0cf93718aa6cef61463060d239db5af510460dd9861d5442f0734c29387eaacb5363e6", 0x5a) setsockopt$auto(r0, 0xfffffffa, 0xfffffff9, &(0x7f0000000400)='syz_tun\x00', 0x3) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000440)=0x4) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000004c0), r0) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r7, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x72}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x5}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xffff}]}, 0x2c}}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000005c0), r0) r9 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000640), r0) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0xf, 0x3, 'net-shaper\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x43}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}, @SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4804) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/ieee80211/phy18/queues\x00', 0x604102, 0x0) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(r8, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x72}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r10 = socket$auto(0x0, 0xf9be, 0x4) r11 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000900), r0) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r11, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008085}, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000a40), r10) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r12, &(0x7f0000000b40)={&(0x7f0000000a00), 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r13, 0x8, 0x70bd2a, 0xa523, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x48081) r14 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000b80), 0x8080, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r14, 0x4008af03, &(0x7f0000000bc0)={0x614a, 0x0, [{0xffffffffc14ad383, 0x7}, {0x1, 0x85, 0x1}, {0x6, 0xffffffffffffffff, 0x400}, {0x2, 0x2000000000000, 0x1}, {0x0, 0xffffffffffff40d6, 0x7}]}) ioctl$auto_XFS_IOC_SWAPEXT(r10, 0xc0c0586d, &(0x7f0000000cc0)={0xda1, @raw=0x401, @raw=0x1, 0x7, 0x450e, '\x00', {0x5, 0x3, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x7, {0x4, 0x5}, {0x1, 0xfffffffa}, {0x4}, 0x1, 0x5, 0x7f8, 0x9, 0x400, 0x9, 0x8ae3, 0xbf, 0x2, 0x4, '\x00', 0x81, 0x0, 0x81, 0x8}}) statx$auto(r10, &(0x7f0000000c80)='./file0\x00', 0x8, 0xfffffff3, &(0x7f0000000d80)={0x0, 0x1ff, 0x6, 0x7, 0xee00, r15, 0x2, 0xb, 0x3, 0x2, 0xab1, 0xf, {0x1, 0xfffffff9}, {0x7, 0x30b}, {}, {0xffffffffffffffff, 0x8}, 0x8001, 0x80, 0x4, 0x2, 0xff, 0x8, 0x4, 0x7, 0x7, 0x6, 0xd, 0x7ff, [0x6, 0x7, 0x1, 0x80, 0x9, 0x7e, 0x3, 0x80000000, 0x200]}) 1.076940236s ago: executing program 0 (id=1128): mmap$auto(0x0, 0x20009, 0xe7, 0x100000eb1, 0x40000000000a1, 0x808000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8001) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'pimreg1\x00', 0x0}) r5 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f00000002c0)={@_si_pad}, 0x1, &(0x7f0000000400)={{0xf, 0x1}, {0x0, 0x6}, 0x0, 0x0, 0x2, 0x767c, 0x10001, 0x9, 0xff, 0x400, 0x7, 0x6, 0x1ec, 0x0, 0x101, 0x2}) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="b0030000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf250600000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8b0309801bde49470820f6e827f2e3986574ea4a157e5f5520a320c1d0dfd3b4a0ee346b20348462abc4d2869b9ec4f8211a91d2a0f19f03ec6cc6986137aa33a95f288e27376d1a3e004df442270e47000000000000093ef7d743732937d5636eb266753c74b0a1812ad09c85c7cadffb5c56a26815e02bd38e5d3e20fb39793a938fbc14001c800400f6800400358008008f00", @ANYRES32=r5, @ANYBLOB="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"], 0x3b0}, 0x1, 0x0, 0x0, 0x40001}, 0x200048d0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100002, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8101, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 979.087043ms ago: executing program 1 (id=1129): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r2 = socket(0xa, 0x2, 0x73) r3 = io_uring_setup$auto(0x9, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) close_range$auto(0x2, r3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x742, 0x0) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r4, &(0x7f0000000240)="4a0200000001040000000000000000000700924d1b3c5d2e00000000fdd2adc245a4fe3a61af156016d2e122228118b0", 0x30) setsockopt$auto_SO_BINDTOIFINDEX(r2, 0x6, 0x3e, &(0x7f0000000080)='/dev/sda1\x00', 0xac8) acct$auto(&(0x7f0000000040)='/dev/sda1\x00') r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r3) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x50, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_THRESHOLD={0xc, 0x18, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @fd=r2}]}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0xffffffff}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0x1}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x46a}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x1000}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x1ff}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x34}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20044894) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x94) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) ioctl$auto_FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x5) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/uid_map\x00', 0x22042, 0x0) r7 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f000002ad40), 0xa8002, 0x0) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r8, 0x0, 0x81) write$auto(0x3, 0x0, 0x100082) write$auto(r7, 0x0, 0xa0000000) 641.542308ms ago: executing program 3 (id=1130): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r2 = socket(0xa, 0x2, 0x73) r3 = io_uring_setup$auto(0x9, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) close_range$auto(0x2, r3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x742, 0x0) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r4, &(0x7f0000000240)="4a0200000001040000000000000000000700924d1b3c5d2e00000000fdd2adc245a4fe3a61af156016d2e122228118b0", 0x30) setsockopt$auto_SO_BINDTOIFINDEX(r2, 0x6, 0x3e, &(0x7f0000000080)='/dev/sda1\x00', 0xac8) acct$auto(&(0x7f0000000040)='/dev/sda1\x00') r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r3) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x48, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_THRESHOLD={0xc, 0x18, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @fd=r2}]}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0xffffffff}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0x1}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x46a}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x1000}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x1ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20044894) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x94) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) ioctl$auto_FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x5) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/uid_map\x00', 0x22042, 0x0) r7 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f000002ad40), 0xa8002, 0x0) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r8, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) write$auto(r7, 0x0, 0xa0000000) 640.333428ms ago: executing program 2 (id=1131): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/erofs/features/fragments\x00', 0x115801, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002740)=""/4083, 0xff3) setsockopt$auto(0x3, 0x81, 0x20000008, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r1) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) socket(0x2b, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) keyctl$auto(0x753348f6, 0x0, 0x0, 0xee01, 0x4) r6 = socket(0xa, 0x801, 0x84) getsockopt$auto(r6, 0x84, 0xc, 0x0, 0x0) r7 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r7, 0x720, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf2501000000100007800c00018008002380000000000c0002000600000000000100010000000000000000"], 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) wait4$auto(0x0, 0x0, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="08060000", @ANYRES16=r3], 0x608}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r1) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) 583.247001ms ago: executing program 1 (id=1132): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x82942, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x24008890) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x24008890) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2062, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) write$auto(r2, &(0x7f0000000440)='+\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r5 = socket(0x2, 0x1, 0x0) setsockopt$auto(r5, 0x6, 0x1b, 0x0, 0x3d) (async) setsockopt$auto(r5, 0x6, 0x1b, 0x0, 0x3d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd96502000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x200000c4) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd96502000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x200000c4) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f0000000a40)="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", 0x2f5) (async) write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f0000000a40)="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", 0x2f5) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008805) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) (async) sendmmsg$auto(r7, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/dev/cdrom/lock\x00', 0x183102, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r8, &(0x7f0000000240)="92de", 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40280, 0x0) ioctl$auto_EXT4_IOC_SETVERSION(r1, 0x40086604, &(0x7f0000000000)=0x86) 205.991867ms ago: executing program 2 (id=1133): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000240)={@siginfo_0_0={0x1, 0x8, 0xe08, @_sigfault={&(0x7f0000000100)="0b0bf7a4a0c81ae74c1c09676485e63306e6544413cc8c3f2e51c8359b6b3825fc3fc16ee3f253b72f7b3390cc0ae896b4f621657c42fab26c5e3bd83f2aa2a5f0d197505a87d23393592c7e38a7d2514a735964968998206e26f11f2e8cec85d17c1f158f77e02357d10b4b4892c1dc418868d731c65e40f04d72395617e636c7311545d7d10789a2231c80d68ddde53515c56677c121cbf068f7b58c81316971feb8c40348c995cb24356ef0a4068d641e29edf7958fc4cd68e679d21abcb420c86679ca2c2f3fda47a63620134077da671933100c267b077fcaa39de6ec0e6cd3a4568688dcf7229c3d47ff9273c07c", @_addr_pkey={"ce20137e76372ffa"}}}}, 0xff, &(0x7f00000002c0)={{0x5, 0x5}, {0x4, 0x5}, 0x3, 0x1, 0x9, 0x5529f384, 0x81, 0x81, 0xddd, 0x0, 0x7d2d08c1, 0x0, 0xfffffffffffffffa, 0x8000, 0x8001, 0x1000}) r1 = setfsuid$auto(0xee01) setresuid$auto(0x0, r1, 0x0) capget$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) 100.745001ms ago: executing program 1 (id=1134): close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) mmap$auto(0xa000000, 0x20009, 0xdf, 0x410, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4b71, 0x1) r2 = fcntl$getown(r1, 0x9) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x27, 0x1, 0x80005) get_robust_list$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r4 = socket(0x23, 0x5, 0x0) r5 = getsockopt$auto(r4, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r5, r5, 0x8) bind$auto(r3, &(0x7f0000000180)=@llc={0x1a, 0x206, 0x1, 0x6, 0x4, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x8) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r8 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r8, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000002c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x3, 0xfff, 0x400004, 0x200000008040000d, r2}) r10 = wait4$auto(r9, &(0x7f0000000240)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffff9, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x2c937589, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000a000200458d0101000000000000b85c09000000fd84f2", @ANYRES32=r10, @ANYRES8=r0], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r10}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r10, 0xc, 0x7) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/8/smp_affinity_list\x00', 0x0, 0x0) ioctl$auto_NS_GET_PID_FROM_PIDNS(r0, 0x8004b706, &(0x7f0000000080)=0x9) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) setgroups$auto(0xe32, 0x0) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_VHOST_SET_VRING_ENDIAN2(r1, 0x4008af13, &(0x7f0000000280)={0xb7, 0x6}) 0s ago: executing program 2 (id=1135): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/140, 0x8c) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) r2 = prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x4) ioctl$auto_OSS_ALSAEMULVER2(r2, 0x80044df9, &(0x7f0000000140)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a98771027980621afb68e30cd1a743be112689b01bd28d4291d50886e8572fbf84d3b2e8227219201631b266ff59d1b9f5e0eb4d") mmap$auto(0xc8, 0x4000000e2, 0x3, 0xeb1, r0, 0x28fcdcaa) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x1f, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x9, 0x7ff) ptrace$auto(0xd, r4, 0x9, 0xfffffffffffff6de) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f00000000c0)="2f637086360b957b9257656923722abfae3e93fbd5a1b57e4ed41c65552f2b891fded2dcda9de238be70099dfc9922b3c38cac46e930fc71a8b387cc4494c8368312a3a0bbd015b4b62f6647182e33ca13d0246b8dfaae1b7463fb4ec79c0a2b4f7c3850e93f", 0x66) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5) ioctl$auto(r6, 0x4008af20, r5) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x119280, 0x0) getpid() r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r7, 0x4c01, 0x0) kernel console output (not intermixed with test programs): 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.760775][ T6606] RSP: 002b:00007f21686d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.760800][ T6606] RAX: ffffffffffffffda RBX: 00007f2167a15fa0 RCX: 00007f216779ce59 [ 132.760817][ T6606] RDX: 00002000000001c0 RSI: fffffffffffffd02 RDI: 0000000000000004 [ 132.760833][ T6606] RBP: 00007f21686d5090 R08: 0000000000000000 R09: 0000000000000000 [ 132.760848][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.760862][ T6606] R13: 00007f2167a16038 R14: 00007f2167a15fa0 R15: 00007ffcfc509508 [ 132.760896][ T6606] [ 132.792489][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.330219][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.724312][ T29] audit: type=1107 audit(1781084703.469:4): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 133.793810][ T6623] FAULT_INJECTION: forcing a failure. [ 133.793810][ T6623] name failslab, interval 1, probability 0, space 0, times 0 [ 133.861306][ T6623] CPU: 0 UID: 0 PID: 6623 Comm: syz.2.136 Not tainted syzkaller #0 PREEMPT(full) [ 133.861347][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.861364][ T6623] Call Trace: [ 133.861375][ T6623] [ 133.861387][ T6623] dump_stack_lvl+0x100/0x190 [ 133.861647][ T6623] should_fail_ex.cold+0x5/0xa [ 133.861691][ T6623] should_failslab+0xc2/0x120 [ 133.861732][ T6623] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 133.861779][ T6623] ? security_inode_alloc+0x3b/0x2c0 [ 133.861812][ T6623] ? lockdep_init_map_type+0x5c/0x250 [ 133.861873][ T6623] security_inode_alloc+0x3b/0x2c0 [ 133.861908][ T6623] inode_init_always_gfp+0xc77/0xfb0 [ 133.861953][ T6623] alloc_inode+0x8e/0x250 [ 133.861998][ T6623] new_inode+0x22/0x1c0 [ 133.862040][ T6623] ? trace_kmem_cache_alloc+0xd5/0x100 [ 133.862079][ T6623] shmem_get_inode+0x1e3/0xfb0 [ 133.862124][ T6623] ? __pfx_shmem_get_inode+0x10/0x10 [ 133.862176][ T6623] __shmem_file_setup+0x382/0x460 [ 133.862213][ T6623] ? __pfx___shmem_file_setup+0x10/0x10 [ 133.862549][ T6623] ? vm_area_alloc+0x1f/0x160 [ 133.862633][ T6623] shmem_zero_setup+0x96/0x1b0 [ 133.862670][ T6623] __mmap_region+0x2509/0x2dd0 [ 133.862723][ T6623] ? __pfx___mmap_region+0x10/0x10 [ 133.862779][ T6623] ? __lock_acquire+0x4a5/0x2630 [ 133.862853][ T6623] ? do_raw_spin_lock+0x128/0x260 [ 133.862909][ T6623] ? do_raw_spin_lock+0x128/0x260 [ 133.862940][ T6623] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 133.862985][ T6623] ? hrtimer_start_range_ns+0x860/0x1a50 [ 133.863020][ T6623] ? find_held_lock+0x2b/0x80 [ 133.863050][ T6623] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 133.863147][ T6623] mmap_region+0x35d/0x620 [ 133.863176][ T6623] ? rcu_is_watching+0x12/0xc0 [ 133.863210][ T6623] ? __pfx_mmap_region+0x10/0x10 [ 133.863242][ T6623] ? cap_mmap_addr+0x4b/0x120 [ 133.863269][ T6623] ? bpf_lsm_mmap_addr+0x9/0x30 [ 133.863295][ T6623] ? security_mmap_addr+0x71/0x1e0 [ 133.863330][ T6623] ? __get_unmapped_area+0x255/0x3e0 [ 133.863370][ T6623] do_mmap+0xc63/0x12f0 [ 133.863418][ T6623] ? __pfx_do_mmap+0x10/0x10 [ 133.863452][ T6623] ? __pfx_down_write_killable+0x10/0x10 [ 133.863505][ T6623] vm_mmap_pgoff+0x29e/0x470 [ 133.863554][ T6623] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 133.863599][ T6623] ? do_futex+0x192/0x350 [ 133.863630][ T6623] ? __pfx_do_futex+0x10/0x10 [ 133.863660][ T6623] ? do_raw_spin_lock+0x128/0x260 [ 133.863696][ T6623] ksys_mmap_pgoff+0xe4/0x610 [ 133.863732][ T6623] ? __x64_sys_futex+0x358/0x4d0 [ 133.863759][ T6623] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 133.863788][ T6623] ? xfd_validate_state+0x129/0x190 [ 133.863837][ T6623] __x64_sys_mmap+0x125/0x190 [ 133.863881][ T6623] do_syscall_64+0x115/0x840 [ 133.863921][ T6623] ? clear_bhb_loop+0x40/0x90 [ 133.863957][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.863986][ T6623] RIP: 0033:0x7f5dcb39ce59 [ 133.864013][ T6623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.864052][ T6623] RSP: 002b:00007f5dcc17b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 133.864079][ T6623] RAX: ffffffffffffffda RBX: 00007f5dcb615fa0 RCX: 00007f5dcb39ce59 [ 133.864098][ T6623] RDX: 00000000000000e3 RSI: 0000000000020009 RDI: 0000000000000000 [ 133.864115][ T6623] RBP: 00007f5dcb432d6f R08: 00040000000000a1 R09: 0000000000008000 [ 133.864141][ T6623] R10: 0000000100000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 133.864158][ T6623] R13: 00007f5dcb616038 R14: 00007f5dcb615fa0 R15: 00007fff3b2f7008 [ 133.864197][ T6623] [ 134.583795][ T6627] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(6.0.4294967293), cmd(2) [ 135.347204][ T6638] hub 1-0:1.0: USB hub found [ 135.386319][ T6638] hub 1-0:1.0: 1 port detected [ 135.812420][ T6637] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.849661][ T6637] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.869631][ T6637] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.887623][ T6637] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.941038][ T6637] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.671229][ T5634] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 136.937826][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.067260][ T6665] netlink: 342 bytes leftover after parsing attributes in process `syz.3.145'. [ 137.608750][ T6689] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.898075][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.977342][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.001254][ T6693] KVM: debugfs: duplicate directory 6693-3 [ 138.364477][ T6703] FAULT_INJECTION: forcing a failure. [ 138.364477][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 138.392761][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(full) [ 138.392802][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.392819][ T6703] Call Trace: [ 138.392828][ T6703] [ 138.392840][ T6703] dump_stack_lvl+0x100/0x190 [ 138.392896][ T6703] should_fail_ex.cold+0x5/0xa [ 138.392933][ T6703] ? sd_pr_read_keys+0xc6/0x300 [ 138.392973][ T6703] should_failslab+0xc2/0x120 [ 138.393009][ T6703] __kmalloc_noprof+0xe0/0x850 [ 138.393075][ T6703] sd_pr_read_keys+0xc6/0x300 [ 138.393120][ T6703] blkdev_common_ioctl+0x1bc8/0x2b80 [ 138.393169][ T6703] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 138.393223][ T6703] ? do_vfs_ioctl+0x226/0x13e0 [ 138.393254][ T6703] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 138.393278][ T6703] ? find_held_lock+0x2b/0x80 [ 138.393296][ T6703] ? __fget_files+0x215/0x3d0 [ 138.393316][ T6703] blkdev_ioctl+0x43b/0x6f0 [ 138.393337][ T6703] ? __pfx_blkdev_ioctl+0x10/0x10 [ 138.393361][ T6703] ? __pfx_blkdev_ioctl+0x10/0x10 [ 138.393383][ T6703] __x64_sys_ioctl+0x18e/0x210 [ 138.393399][ T6703] do_syscall_64+0x115/0x840 [ 138.393420][ T6703] ? clear_bhb_loop+0x40/0x90 [ 138.393438][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.393453][ T6703] RIP: 0033:0x7f216779ce59 [ 138.393467][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.393482][ T6703] RSP: 002b:00007f21686d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.393497][ T6703] RAX: ffffffffffffffda RBX: 00007f2167a15fa0 RCX: 00007f216779ce59 [ 138.393507][ T6703] RDX: 0000000000000000 RSI: 00000000c01070ce RDI: 0000000000000005 [ 138.393516][ T6703] RBP: 00007f2167832d6f R08: 0000000000000000 R09: 0000000000000000 [ 138.393524][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.393533][ T6703] R13: 00007f2167a16038 R14: 00007f2167a15fa0 R15: 00007ffcfc509508 [ 138.393558][ T6703] [ 139.627950][ T6731] netlink: 174 bytes leftover after parsing attributes in process `syz.2.154'. [ 140.681570][ T6754] mmap: syz.1.158 (6754) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.921583][ T6757] kexec: Could not allocate control_code_buffer [ 142.931086][ T6812] FAULT_INJECTION: forcing a failure. [ 142.931086][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 142.952899][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.2.177 Not tainted syzkaller #0 PREEMPT(full) [ 142.952938][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.952955][ T6812] Call Trace: [ 142.952965][ T6812] [ 142.952976][ T6812] dump_stack_lvl+0x100/0x190 [ 142.953031][ T6812] should_fail_ex.cold+0x5/0xa [ 142.953067][ T6812] should_failslab+0xc2/0x120 [ 142.953106][ T6812] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 142.953149][ T6812] ? alloc_inode+0x68/0x250 [ 142.953196][ T6812] ? simple_start_creating+0xb0/0x110 [ 142.953232][ T6812] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 142.953282][ T6812] alloc_inode+0x68/0x250 [ 142.953325][ T6812] new_inode+0x22/0x1c0 [ 142.953370][ T6812] __debugfs_create_file+0x105/0x4f0 [ 142.953405][ T6812] debugfs_create_file_full+0x41/0x60 [ 142.953438][ T6812] drm_debugfs_clients_add+0xd9/0x210 [ 142.953476][ T6812] drm_file_alloc+0x5c6/0xb40 [ 142.953518][ T6812] drm_open_helper+0x1fc/0x540 [ 142.953565][ T6812] drm_open+0x1a0/0x3e0 [ 142.953601][ T6812] ? __pfx_drm_open+0x10/0x10 [ 142.953635][ T6812] drm_stub_open+0x20f/0x380 [ 142.953673][ T6812] ? __pfx_drm_stub_open+0x10/0x10 [ 142.953708][ T6812] chrdev_open+0x234/0x6a0 [ 142.953743][ T6812] ? __pfx_apparmor_file_open+0x10/0x10 [ 142.953774][ T6812] ? __pfx_chrdev_open+0x10/0x10 [ 142.953813][ T6812] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 142.953855][ T6812] do_dentry_open+0x6ab/0x14d0 [ 142.953886][ T6812] ? __pfx_chrdev_open+0x10/0x10 [ 142.953930][ T6812] vfs_open+0x82/0x3f0 [ 142.953976][ T6812] path_openat+0x208c/0x31a0 [ 142.954025][ T6812] ? __pfx_path_openat+0x10/0x10 [ 142.954075][ T6812] do_file_open+0x20e/0x430 [ 142.954114][ T6812] ? __pfx_do_file_open+0x10/0x10 [ 142.954179][ T6812] ? alloc_fd+0x476/0x790 [ 142.954226][ T6812] ? do_getname+0x191/0x390 [ 142.954272][ T6812] do_sys_openat2+0x10d/0x1e0 [ 142.954313][ T6812] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.954358][ T6812] ? __fget_files+0x21f/0x3d0 [ 142.954400][ T6812] __x64_sys_openat+0x12d/0x210 [ 142.954444][ T6812] ? __pfx___x64_sys_openat+0x10/0x10 [ 142.954495][ T6812] ? rcu_is_watching+0x12/0xc0 [ 142.954533][ T6812] do_syscall_64+0x115/0x840 [ 142.954573][ T6812] ? clear_bhb_loop+0x40/0x90 [ 142.954608][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.954638][ T6812] RIP: 0033:0x7f5dcb39ce59 [ 142.954662][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.954689][ T6812] RSP: 002b:00007f5dcc17b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.954718][ T6812] RAX: ffffffffffffffda RBX: 00007f5dcb615fa0 RCX: 00007f5dcb39ce59 [ 142.954735][ T6812] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 142.954753][ T6812] RBP: 00007f5dcb432d6f R08: 0000000000000000 R09: 0000000000000000 [ 142.954769][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.954785][ T6812] R13: 00007f5dcb616038 R14: 00007f5dcb615fa0 R15: 00007fff3b2f7008 [ 142.954823][ T6812] [ 143.305768][ T6812] debugfs: out of free dentries, can not create file 'proc_info' [ 144.014704][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 145.287380][ T6822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.305323][ T6822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.356981][ T6822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.376994][ T6822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.974127][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.039735][ T6862] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.060152][ T6862] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.082844][ T6862] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.110979][ T6862] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.453259][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.704112][ T6914] random: crng reseeded on system resumption [ 148.764331][ T6914] Restarting kernel threads ... [ 148.797899][ T6914] Done restarting kernel threads. [ 149.092771][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.100184][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.172605][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.403733][ T6918] netlink: 266 bytes leftover after parsing attributes in process `syz.3.197'. [ 149.436427][ T6918] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.182560][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.956070][ T6967] random: crng reseeded on system resumption [ 153.280623][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 154.496319][ T6979] Process accounting resumed [ 154.558459][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 155.624620][ T7010] ima: policy update failed [ 155.666131][ T29] audit: type=1802 audit(1781084725.428:5): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.216" res=0 errno=0 [ 157.064622][ T7044] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5631] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7044] [ 158.246784][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 159.709893][ T7077] syz.0.227 (7077) used greatest stack depth: 18344 bytes left [ 160.823873][ T7110] netlink: 25 bytes leftover after parsing attributes in process `syz.1.235'. [ 160.888561][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 160.914078][ T7103] ubi31: attaching mtd0 [ 160.914120][ T7103] ubi31 error: ubi_attach_mtd_dev: bad VID header (1049088) or data offsets (1049152) [ 162.364714][ T7152] netlink: 342 bytes leftover after parsing attributes in process `syz.0.244'. [ 162.382297][ T29] audit: type=1326 audit(1781084732.141:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.245" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f5dcb39ce59 code=0x0 [ 163.432844][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 163.631974][ T7182] netlink: 342 bytes leftover after parsing attributes in process `syz.2.248'. [ 164.545419][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 166.016965][ T7224] FAULT_INJECTION: forcing a failure. [ 166.016965][ T7224] name failslab, interval 1, probability 0, space 0, times 0 [ 166.063634][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.2.255 Not tainted syzkaller #0 PREEMPT(full) [ 166.063669][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 166.063683][ T7224] Call Trace: [ 166.063690][ T7224] [ 166.063703][ T7224] dump_stack_lvl+0x100/0x190 [ 166.063747][ T7224] should_fail_ex.cold+0x5/0xa [ 166.063789][ T7224] should_failslab+0xc2/0x120 [ 166.063820][ T7224] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 166.063859][ T7224] ? sock_alloc_inode+0x26/0x290 [ 166.063895][ T7224] ? __pfx_sock_alloc_inode+0x10/0x10 [ 166.063927][ T7224] sock_alloc_inode+0x26/0x290 [ 166.063957][ T7224] ? __pfx_sock_alloc_inode+0x10/0x10 [ 166.063986][ T7224] alloc_inode+0x68/0x250 [ 166.064024][ T7224] sock_alloc+0x44/0x280 [ 166.064049][ T7224] ? security_socket_create+0x7f/0x250 [ 166.064079][ T7224] sock_create_lite+0x82/0x120 [ 166.064110][ T7224] __netlink_kernel_create+0xbd/0x750 [ 166.064147][ T7224] ? __pfx___netlink_kernel_create+0x10/0x10 [ 166.064190][ T7224] fib_net_init+0x26d/0x3f0 [ 166.064221][ T7224] ? is_module_address+0x69/0xf0 [ 166.064246][ T7224] ? __pfx_fib_net_init+0x10/0x10 [ 166.064275][ T7224] ? timer_init_key+0x155/0x330 [ 166.064302][ T7224] ? __pfx_nl_fib_input+0x10/0x10 [ 166.064333][ T7224] ? devinet_init_net+0x56c/0x8d0 [ 166.064371][ T7224] ? __pfx_fib_net_init+0x10/0x10 [ 166.064399][ T7224] ops_init+0x1e2/0x5f0 [ 166.064430][ T7224] setup_net+0x118/0x3a0 [ 166.064458][ T7224] ? __pfx_setup_net+0x10/0x10 [ 166.064484][ T7224] ? mutex_init_lockdep+0xf1/0x120 [ 166.064514][ T7224] copy_net_ns+0x46f/0x7c0 [ 166.064547][ T7224] create_new_namespaces+0x3ea/0xac0 [ 166.064587][ T7224] unshare_nsproxy_namespaces+0xf2/0x220 [ 166.064621][ T7224] ksys_unshare+0x438/0xab0 [ 166.064655][ T7224] ? __pfx_ksys_unshare+0x10/0x10 [ 166.064684][ T7224] ? xfd_validate_state+0x129/0x190 [ 166.064721][ T7224] __x64_sys_unshare+0x31/0x40 [ 166.064756][ T7224] do_syscall_64+0x115/0x840 [ 166.064797][ T7224] ? clear_bhb_loop+0x40/0x90 [ 166.064829][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.064855][ T7224] RIP: 0033:0x7f5dcb39ce59 [ 166.064880][ T7224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.064903][ T7224] RSP: 002b:00007f5dc95d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 166.064927][ T7224] RAX: ffffffffffffffda RBX: 00007f5dcb616180 RCX: 00007f5dcb39ce59 [ 166.064944][ T7224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 166.064959][ T7224] RBP: 00007f5dcb432d6f R08: 0000000000000000 R09: 0000000000000000 [ 166.064974][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.064988][ T7224] R13: 00007f5dcb616218 R14: 00007f5dcb616180 R15: 00007fff3b2f7008 [ 166.065019][ T7224] [ 166.703592][ T29] audit: type=1800 audit(1781084736.453:7): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.253" name="features" dev="configfs" ino=14999 res=0 errno=0 [ 167.123354][ T7244] FAULT_INJECTION: forcing a failure. [ 167.123354][ T7244] name failslab, interval 1, probability 0, space 0, times 0 [ 167.166478][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.2.258 Not tainted syzkaller #0 PREEMPT(full) [ 167.166517][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.166532][ T7244] Call Trace: [ 167.166541][ T7244] [ 167.166553][ T7244] dump_stack_lvl+0x100/0x190 [ 167.166609][ T7244] should_fail_ex.cold+0x5/0xa [ 167.166649][ T7244] should_failslab+0xc2/0x120 [ 167.166691][ T7244] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 167.166736][ T7244] ? __proc_create+0x2cb/0x8c0 [ 167.166781][ T7244] __proc_create+0x2cb/0x8c0 [ 167.166818][ T7244] ? __pfx___proc_create+0x10/0x10 [ 167.166858][ T7244] ? _raw_write_unlock+0x28/0x50 [ 167.166893][ T7244] ? proc_register+0x559/0x8a0 [ 167.166935][ T7244] proc_create_reg+0x75/0x170 [ 167.166973][ T7244] ? __pfx_sctp_snmp_seq_show+0x10/0x10 [ 167.167018][ T7244] proc_create_net_single+0x86/0x180 [ 167.167056][ T7244] ? __pfx_proc_create_net_single+0x10/0x10 [ 167.167092][ T7244] ? sctp_defaults_init+0x720/0xd90 [ 167.167131][ T7244] sctp_proc_init+0xaa/0x270 [ 167.167158][ T7244] ? __pfx_sctp_defaults_init+0x10/0x10 [ 167.167183][ T7244] sctp_defaults_init+0x758/0xd90 [ 167.167214][ T7244] ? __pfx_sctp_defaults_init+0x10/0x10 [ 167.167242][ T7244] ops_init+0x1e2/0x5f0 [ 167.167277][ T7244] setup_net+0x118/0x3a0 [ 167.167308][ T7244] ? __pfx_setup_net+0x10/0x10 [ 167.167339][ T7244] ? mutex_init_lockdep+0xf1/0x120 [ 167.167373][ T7244] copy_net_ns+0x46f/0x7c0 [ 167.167411][ T7244] create_new_namespaces+0x3ea/0xac0 [ 167.167456][ T7244] unshare_nsproxy_namespaces+0xf2/0x220 [ 167.167491][ T7244] ksys_unshare+0x438/0xab0 [ 167.167527][ T7244] ? __pfx_ksys_unshare+0x10/0x10 [ 167.167560][ T7244] ? xfd_validate_state+0x129/0x190 [ 167.167595][ T7244] __x64_sys_unshare+0x31/0x40 [ 167.167630][ T7244] do_syscall_64+0x115/0x840 [ 167.167675][ T7244] ? clear_bhb_loop+0x40/0x90 [ 167.167709][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.167737][ T7244] RIP: 0033:0x7f5dcb39ce59 [ 167.167758][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.167782][ T7244] RSP: 002b:00007f5dcc17b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 167.167808][ T7244] RAX: ffffffffffffffda RBX: 00007f5dcb615fa0 RCX: 00007f5dcb39ce59 [ 167.167825][ T7244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 167.167839][ T7244] RBP: 00007f5dcb432d6f R08: 0000000000000000 R09: 0000000000000000 [ 167.167854][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.167868][ T7244] R13: 00007f5dcb616038 R14: 00007f5dcb615fa0 R15: 00007fff3b2f7008 [ 167.167905][ T7244] [ 167.553601][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 167.619698][ T7248] futex_wake_op: syz.1.257 tries to shift op by -2048; fix this program [ 167.667973][ T7247] 0x000000000001-0x000000020000 : "" [ 167.732635][ T7247] ftl_cs: FTL header corrupt! [ 168.432953][ T7264] syz.1.263 uses obsolete (PF_INET,SOCK_PACKET) [ 168.567137][ T7259] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(362716323.2627697170.2153675330), cmd(6) [ 169.542747][ T7258] kexec: Could not allocate control_code_buffer [ 170.141675][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 172.274180][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 176.091814][ T7408] [U] ^H [ 177.204689][ T7428] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(362716323.2627697170.2153675330), cmd(6) [ 178.860870][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 178.882651][ T7463] netlink: 13 bytes leftover after parsing attributes in process `syz.2.303'. [ 179.804239][ T7473] syz.2.306(7473): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 182.067886][ T7506] bond0: option arp_interval: invalid value () [ 182.104561][ T7506] bond0: option arp_interval: allowed values 0 - 2147483647 [ 182.346109][ T4948] Bluetooth: hci2: unexpected event 0x2c length: 1022 > 17 [ 182.346161][ T4948] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 182.678514][ T5634] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 183.534707][ T7560] random: crng reseeded on system resumption [ 186.241566][ T7598] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 187.161348][ T7613] GUP no longer grows the stack in syz.1.328 (7613): 14000-18000 (4000) [ 187.180505][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(full) [ 187.180546][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.180565][ T7613] Call Trace: [ 187.180574][ T7613] [ 187.180585][ T7613] dump_stack_lvl+0x100/0x190 [ 187.180640][ T7613] gup_vma_lookup.cold+0x83/0x96 [ 187.180683][ T7613] __get_user_pages+0x241/0x32a0 [ 187.180729][ T7613] ? down_read_killable+0x307/0x4b0 [ 187.180758][ T7613] ? __pfx___get_user_pages+0x10/0x10 [ 187.180797][ T7613] ? __pfx___schedule+0x10/0x10 [ 187.180833][ T7613] __gup_longterm_locked+0x279/0x16f0 [ 187.180867][ T7613] ? irqentry_exit+0x24d/0x970 [ 187.180905][ T7613] ? __pfx___gup_longterm_locked+0x10/0x10 [ 187.180949][ T7613] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 187.180985][ T7613] gup_fast_fallback+0x16dc/0x2790 [ 187.181045][ T7613] ? __pfx_gup_fast_fallback+0x10/0x10 [ 187.181079][ T7613] ? rcu_read_unlock+0x17/0x60 [ 187.181119][ T7613] ? rcu_is_watching+0x12/0xc0 [ 187.181160][ T7613] pin_user_pages_fast+0xa7/0xf0 [ 187.181195][ T7613] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 187.181229][ T7613] ? io_pin_pages+0xc3/0x1e0 [ 187.181278][ T7613] io_pin_pages+0xe6/0x1e0 [ 187.181312][ T7613] io_sqe_buffer_register+0x1d4/0x19d0 [ 187.181359][ T7613] ? rcu_is_watching+0x12/0xc0 [ 187.181391][ T7613] ? trace_kmalloc+0xe3/0x110 [ 187.181423][ T7613] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 187.181458][ T7613] ? io_rsrc_data_alloc+0x2c/0xa0 [ 187.181502][ T7613] ? copy_iovec_from_user+0x102/0x140 [ 187.181543][ T7613] ? iovec_from_user+0xda/0x140 [ 187.181585][ T7613] io_sqe_buffers_register.cold+0x351/0x4d2 [ 187.181641][ T7613] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 187.181673][ T7613] ? __fget_files+0x215/0x3d0 [ 187.181712][ T7613] ? __fget_files+0x21f/0x3d0 [ 187.181755][ T7613] __do_sys_io_uring_register+0x13e5/0x1bd0 [ 187.181790][ T7613] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 187.181823][ T7613] ? __x64_sys_futex+0x34f/0x4d0 [ 187.181851][ T7613] ? __x64_sys_futex+0x358/0x4d0 [ 187.181882][ T7613] ? xfd_validate_state+0x129/0x190 [ 187.181918][ T7613] ? rcu_is_watching+0x12/0xc0 [ 187.181953][ T7613] do_syscall_64+0x115/0x840 [ 187.181989][ T7613] ? clear_bhb_loop+0x40/0x90 [ 187.182021][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.182048][ T7613] RIP: 0033:0x7fa09d19ce59 [ 187.182073][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.182099][ T7613] RSP: 002b:00007fa09e0d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 187.182126][ T7613] RAX: ffffffffffffffda RBX: 00007fa09d416180 RCX: 00007fa09d19ce59 [ 187.182144][ T7613] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 187.182162][ T7613] RBP: 00007fa09d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 187.182184][ T7613] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 187.182200][ T7613] R13: 00007fa09d416218 R14: 00007fa09d416180 R15: 00007ffc64e18a48 [ 187.182248][ T7613] [ 190.114231][ T5634] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 191.001922][ T7673] zswap: compressor not available [ 191.149134][ T7689] FAULT_INJECTION: forcing a failure. [ 191.149134][ T7689] name failslab, interval 1, probability 0, space 0, times 0 [ 191.198666][ T7689] CPU: 1 UID: 0 PID: 7689 Comm: syz.3.342 Not tainted syzkaller #0 PREEMPT(full) [ 191.198719][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.198735][ T7689] Call Trace: [ 191.198745][ T7689] [ 191.198755][ T7689] dump_stack_lvl+0x100/0x190 [ 191.198809][ T7689] should_fail_ex.cold+0x5/0xa [ 191.198846][ T7689] should_failslab+0xc2/0x120 [ 191.198880][ T7689] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 191.198922][ T7689] ? security_inode_alloc+0x3b/0x2c0 [ 191.198953][ T7689] ? lockdep_init_map_type+0x5c/0x250 [ 191.199004][ T7689] security_inode_alloc+0x3b/0x2c0 [ 191.199035][ T7689] inode_init_always_gfp+0xc77/0xfb0 [ 191.199076][ T7689] alloc_inode+0x8e/0x250 [ 191.199121][ T7689] new_inode+0x22/0x1c0 [ 191.199166][ T7689] debugfs_create_symlink+0xd1/0x220 [ 191.199196][ T7689] drm_debugfs_clients_add+0x199/0x210 [ 191.199232][ T7689] drm_file_alloc+0x5c6/0xb40 [ 191.199267][ T7689] drm_open_helper+0x1fc/0x540 [ 191.199301][ T7689] drm_open+0x1a0/0x3e0 [ 191.199332][ T7689] ? __pfx_drm_open+0x10/0x10 [ 191.199365][ T7689] drm_stub_open+0x20f/0x380 [ 191.199401][ T7689] ? __pfx_drm_stub_open+0x10/0x10 [ 191.199444][ T7689] chrdev_open+0x234/0x6a0 [ 191.199477][ T7689] ? __pfx_apparmor_file_open+0x10/0x10 [ 191.199507][ T7689] ? __pfx_chrdev_open+0x10/0x10 [ 191.199540][ T7689] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 191.199579][ T7689] do_dentry_open+0x6ab/0x14d0 [ 191.199608][ T7689] ? __pfx_chrdev_open+0x10/0x10 [ 191.199639][ T7689] vfs_open+0x82/0x3f0 [ 191.199683][ T7689] path_openat+0x208c/0x31a0 [ 191.199729][ T7689] ? __pfx_path_openat+0x10/0x10 [ 191.199777][ T7689] do_file_open+0x20e/0x430 [ 191.199812][ T7689] ? __pfx_do_file_open+0x10/0x10 [ 191.199870][ T7689] ? alloc_fd+0x476/0x790 [ 191.199905][ T7689] ? do_getname+0x191/0x390 [ 191.199946][ T7689] do_sys_openat2+0x10d/0x1e0 [ 191.199988][ T7689] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.200031][ T7689] ? __fget_files+0x21f/0x3d0 [ 191.200072][ T7689] __x64_sys_openat+0x12d/0x210 [ 191.200115][ T7689] ? __pfx___x64_sys_openat+0x10/0x10 [ 191.200165][ T7689] ? rcu_is_watching+0x12/0xc0 [ 191.200202][ T7689] do_syscall_64+0x115/0x840 [ 191.200240][ T7689] ? clear_bhb_loop+0x40/0x90 [ 191.200276][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.200304][ T7689] RIP: 0033:0x7f216779ce59 [ 191.200328][ T7689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.200355][ T7689] RSP: 002b:00007f21686d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.200377][ T7689] RAX: ffffffffffffffda RBX: 00007f2167a15fa0 RCX: 00007f216779ce59 [ 191.200396][ T7689] RDX: 0000000000028900 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 191.200414][ T7689] RBP: 00007f2167832d6f R08: 0000000000000000 R09: 0000000000000000 [ 191.200440][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.200456][ T7689] R13: 00007f2167a16038 R14: 00007f2167a15fa0 R15: 00007ffcfc509508 [ 191.200495][ T7689] [ 191.502327][ T7689] debugfs: out of free dentries, can not create symlink 'device' [ 192.851439][ T7705] netlink: 'syz.0.346': attribute type 2 has an invalid length. [ 193.454024][ T7703] syz.3.344: vm.laptop_mode is deprecated. Ignoring setting. [ 194.207829][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.216054][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.450610][ T7731] vivid-007: ================= START STATUS ================= [ 194.491976][ T7731] vivid-007: Generate PTS: true [ 194.523519][ T7731] vivid-007: Generate SCR: true [ 194.588326][ T7731] tpg source WxH: 320x240 (Y'CbCr) [ 194.631835][ T7731] tpg field: 1 [ 194.654894][ T7731] tpg crop: (0,0)/320x240 [ 194.695102][ T7731] tpg compose: (0,0)/320x240 [ 194.704164][ T7731] tpg colorspace: 8 [ 194.709863][ T7731] tpg transfer function: 0/0 [ 194.717610][ T7731] tpg Y'CbCr encoding: 0/0 [ 194.724136][ T7731] tpg quantization: 0/0 [ 194.737630][ T7731] tpg RGB range: 0/2 [ 194.749506][ T7731] vivid-007: ================== END STATUS ================== [ 194.870302][ T7749] FAULT_INJECTION: forcing a failure. [ 194.870302][ T7749] name failslab, interval 1, probability 0, space 0, times 0 [ 194.931049][ T7749] CPU: 1 UID: 0 PID: 7749 Comm: syz.0.353 Not tainted syzkaller #0 PREEMPT(full) [ 194.931073][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.931084][ T7749] Call Trace: [ 194.931089][ T7749] [ 194.931096][ T7749] dump_stack_lvl+0x100/0x190 [ 194.931125][ T7749] should_fail_ex.cold+0x5/0xa [ 194.931146][ T7749] should_failslab+0xc2/0x120 [ 194.931164][ T7749] __kmalloc_cache_node_noprof+0x7d/0x770 [ 194.931181][ T7749] ? __get_vm_area_node+0x101/0x330 [ 194.931202][ T7749] __get_vm_area_node+0x101/0x330 [ 194.931224][ T7749] __vmalloc_node_range_noprof+0x228/0x1630 [ 194.931246][ T7749] ? vhost_task_create+0x1db/0x370 [ 194.931261][ T7749] ? rcu_is_watching+0x12/0xc0 [ 194.931282][ T7749] ? vhost_task_create+0x1db/0x370 [ 194.931301][ T7749] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.931326][ T7749] ? rcu_is_watching+0x12/0xc0 [ 194.931342][ T7749] ? trace_kmem_cache_alloc+0xd5/0x100 [ 194.931361][ T7749] ? vhost_task_create+0x1db/0x370 [ 194.931374][ T7749] __vmalloc_node_noprof+0xad/0xf0 [ 194.931394][ T7749] ? vhost_task_create+0x1db/0x370 [ 194.931414][ T7749] copy_process+0x7fb/0x7ed0 [ 194.931445][ T7749] ? __pfx_copy_process+0x10/0x10 [ 194.931470][ T7749] ? lockdep_init_map_type+0x5c/0x250 [ 194.931494][ T7749] ? lockdep_init_map_type+0x5c/0x250 [ 194.931517][ T7749] ? __pfx_vhost_run_work_list+0x10/0x10 [ 194.931541][ T7749] ? __pfx_vhost_worker_killed+0x10/0x10 [ 194.931563][ T7749] vhost_task_create+0x1db/0x370 [ 194.931577][ T7749] ? __pfx_vhost_task_create+0x10/0x10 [ 194.931606][ T7749] ? __pfx_vhost_task_fn+0x10/0x10 [ 194.931640][ T7749] ? snprintf+0xc7/0x100 [ 194.931663][ T7749] vhost_task_worker_create+0x8d/0x260 [ 194.931681][ T7749] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 194.931696][ T7749] ? lockdep_init_map_type+0x5c/0x250 [ 194.931720][ T7749] ? lockdep_init_map_type+0x5c/0x250 [ 194.931746][ T7749] vhost_worker_create+0x243/0x310 [ 194.931770][ T7749] ? __pfx_vhost_worker_create+0x10/0x10 [ 194.931818][ T7749] vhost_dev_set_owner+0x719/0xa30 [ 194.931856][ T7749] vhost_net_ioctl+0xfa3/0x1910 [ 194.931881][ T7749] ? do_vfs_ioctl+0x226/0x13e0 [ 194.931916][ T7749] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 194.931943][ T7749] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 194.931982][ T7749] ? find_held_lock+0x2b/0x80 [ 194.932017][ T7749] ? __fget_files+0x215/0x3d0 [ 194.932048][ T7749] ? hook_file_ioctl_common+0x149/0x410 [ 194.932089][ T7749] ? __fget_files+0x21f/0x3d0 [ 194.932127][ T7749] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 194.932161][ T7749] __x64_sys_ioctl+0x18e/0x210 [ 194.932194][ T7749] do_syscall_64+0x115/0x840 [ 194.932233][ T7749] ? clear_bhb_loop+0x40/0x90 [ 194.932269][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.932299][ T7749] RIP: 0033:0x7fd74f59ce59 [ 194.932324][ T7749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.932352][ T7749] RSP: 002b:00007fd75050d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.932378][ T7749] RAX: ffffffffffffffda RBX: 00007fd74f815fa0 RCX: 00007fd74f59ce59 [ 194.932396][ T7749] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 194.932411][ T7749] RBP: 00007fd74f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 194.932428][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.932444][ T7749] R13: 00007fd74f816038 R14: 00007fd74f815fa0 R15: 00007ffff58daa38 [ 194.932483][ T7749] [ 194.940111][ T7749] syz.0.353: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 195.334665][ T7749] CPU: 1 UID: 0 PID: 7749 Comm: syz.0.353 Not tainted syzkaller #0 PREEMPT(full) [ 195.334702][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.334718][ T7749] Call Trace: [ 195.334727][ T7749] [ 195.334737][ T7749] dump_stack_lvl+0x100/0x190 [ 195.334788][ T7749] warn_alloc.cold+0x95/0x1c1 [ 195.334817][ T7749] ? __pfx_warn_alloc+0x10/0x10 [ 195.334857][ T7749] ? trace_kmalloc+0xe3/0x110 [ 195.334890][ T7749] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 195.334924][ T7749] ? __kasan_kmalloc+0x8a/0xb0 [ 195.334961][ T7749] ? __get_vm_area_node+0x208/0x330 [ 195.335005][ T7749] __vmalloc_node_range_noprof+0xccd/0x1630 [ 195.335045][ T7749] ? rcu_is_watching+0x12/0xc0 [ 195.335086][ T7749] ? vhost_task_create+0x1db/0x370 [ 195.335126][ T7749] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.335177][ T7749] ? rcu_is_watching+0x12/0xc0 [ 195.335208][ T7749] ? trace_kmem_cache_alloc+0xd5/0x100 [ 195.335245][ T7749] ? vhost_task_create+0x1db/0x370 [ 195.335271][ T7749] __vmalloc_node_noprof+0xad/0xf0 [ 195.335309][ T7749] ? vhost_task_create+0x1db/0x370 [ 195.335340][ T7749] copy_process+0x7fb/0x7ed0 [ 195.335400][ T7749] ? __pfx_copy_process+0x10/0x10 [ 195.335441][ T7749] ? lockdep_init_map_type+0x5c/0x250 [ 195.335485][ T7749] ? lockdep_init_map_type+0x5c/0x250 [ 195.335527][ T7749] ? __pfx_vhost_run_work_list+0x10/0x10 [ 195.335572][ T7749] ? __pfx_vhost_worker_killed+0x10/0x10 [ 195.335614][ T7749] vhost_task_create+0x1db/0x370 [ 195.335642][ T7749] ? __pfx_vhost_task_create+0x10/0x10 [ 195.335680][ T7749] ? __pfx_vhost_task_fn+0x10/0x10 [ 195.335715][ T7749] ? snprintf+0xc7/0x100 [ 195.335754][ T7749] vhost_task_worker_create+0x8d/0x260 [ 195.335783][ T7749] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 195.335811][ T7749] ? lockdep_init_map_type+0x5c/0x250 [ 195.335857][ T7749] ? lockdep_init_map_type+0x5c/0x250 [ 195.335907][ T7749] vhost_worker_create+0x243/0x310 [ 195.335959][ T7749] ? __pfx_vhost_worker_create+0x10/0x10 [ 195.336014][ T7749] vhost_dev_set_owner+0x719/0xa30 [ 195.336056][ T7749] vhost_net_ioctl+0xfa3/0x1910 [ 195.336084][ T7749] ? do_vfs_ioctl+0x226/0x13e0 [ 195.336113][ T7749] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 195.336140][ T7749] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 195.336178][ T7749] ? find_held_lock+0x2b/0x80 [ 195.336211][ T7749] ? __fget_files+0x215/0x3d0 [ 195.336241][ T7749] ? hook_file_ioctl_common+0x149/0x410 [ 195.336283][ T7749] ? __fget_files+0x21f/0x3d0 [ 195.336321][ T7749] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 195.336351][ T7749] __x64_sys_ioctl+0x18e/0x210 [ 195.336381][ T7749] do_syscall_64+0x115/0x840 [ 195.336417][ T7749] ? clear_bhb_loop+0x40/0x90 [ 195.336451][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.336477][ T7749] RIP: 0033:0x7fd74f59ce59 [ 195.336498][ T7749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.336523][ T7749] RSP: 002b:00007fd75050d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.336549][ T7749] RAX: ffffffffffffffda RBX: 00007fd74f815fa0 RCX: 00007fd74f59ce59 [ 195.336567][ T7749] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 195.336583][ T7749] RBP: 00007fd74f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 195.336599][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.336633][ T7749] R13: 00007fd74f816038 R14: 00007fd74f815fa0 R15: 00007ffff58daa38 [ 195.336672][ T7749] [ 195.336739][ T7749] Mem-Info: [ 195.706571][ T7725] Process accounting resumed [ 195.864492][ T7749] active_anon:6663 inactive_anon:0 isolated_anon:0 [ 195.864492][ T7749] active_file:17340 inactive_file:41530 isolated_file:0 [ 195.864492][ T7749] unevictable:787 dirty:349 writeback:0 [ 195.864492][ T7749] slab_reclaimable:10931 slab_unreclaimable:90606 [ 195.864492][ T7749] mapped:30776 shmem:1676 pagetables:1180 [ 195.864492][ T7749] sec_pagetables:0 bounce:0 [ 195.864492][ T7749] kernel_misc_reclaimable:0 [ 195.864492][ T7749] free:1312091 free_pcp:21155 free_cma:0 [ 196.064187][ T7749] Node 0 active_anon:27764kB inactive_anon:0kB active_file:69360kB inactive_file:165872kB unevictable:1612kB isolated(anon):0kB isolated(file):0kB mapped:128388kB dirty:1392kB writeback:0kB shmem:6500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12584kB pagetables:4576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.374121][ T7749] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.416262][ T7727] Process accounting resumed [ 196.669904][ T7749] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.767728][ T7749] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 196.810989][ T7749] Node 0 DMA32 free:1337128kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25216kB inactive_anon:0kB active_file:69408kB inactive_file:165836kB unevictable:1612kB writepending:1620kB zspages:568kB present:3129332kB managed:2537492kB mlocked:76kB bounce:0kB free_pcp:50684kB local_pcp:29212kB free_cma:0kB [ 196.885825][ T7749] lowmem_reserve[]: 0 0 1 1 1 [ 196.897451][ T7749] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1112kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 196.956163][ T7749] lowmem_reserve[]: 0 0 0 0 0 [ 196.964838][ T7749] Node 1 Normal free:3898544kB boost:0kB min:55824kB low:69780kB high:83736kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:40580kB local_pcp:29704kB free_cma:0kB [ 197.067136][ T7772] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.067600][ T7749] lowmem_reserve[]: 0 0 0 0 0 [ 197.149084][ T7749] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.209533][ T7749] Node 0 DMA32: 4963*4kB (UME) 2791*8kB (UME) 1498*16kB (UM) 767*32kB (UM) 504*64kB (UM) 238*128kB (UME) 123*256kB (UM) 68*512kB (UME) 29*1024kB (UM) 15*2048kB (UME) 258*4096kB (M) = 1336900kB [ 197.288922][ T7749] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 197.328443][ T7749] Node 1 Normal: 3*4kB (U) 3*8kB (U) 4*16kB (U) 6*32kB (U) 5*64kB (UM) 3*128kB (UM) 7*256kB (UM) 3*512kB (U) 3*1024kB (U) 0*2048kB 950*4096kB (M) = 3898596kB [ 197.397826][ T7749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.448338][ T7749] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.532620][ T7749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.579706][ T7749] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.621925][ T7749] 60198 total pagecache pages [ 197.634965][ T7749] 32 pages in swap cache [ 197.662782][ T7749] Free swap = 118616kB [ 197.703386][ T7749] Total swap = 124996kB [ 197.741963][ T7749] 2097051 pages RAM [ 197.760469][ T7749] 0 pages HighMem/MovableOnly [ 197.770616][ T7749] 430785 pages reserved [ 197.782994][ T7749] 0 pages cma reserved [ 198.937047][ T7795] zswap: compressor not available [ 198.953713][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.359'. [ 199.443415][ T7825] FAULT_INJECTION: forcing a failure. [ 199.443415][ T7825] name failslab, interval 1, probability 0, space 0, times 0 [ 199.516679][ T7825] CPU: 0 UID: 0 PID: 7825 Comm: syz.3.365 Not tainted syzkaller #0 PREEMPT(full) [ 199.516718][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.516735][ T7825] Call Trace: [ 199.516744][ T7825] [ 199.516754][ T7825] dump_stack_lvl+0x100/0x190 [ 199.516823][ T7825] should_fail_ex.cold+0x5/0xa [ 199.516859][ T7825] ? security_inode_init_security+0x113/0x370 [ 199.516903][ T7825] should_failslab+0xc2/0x120 [ 199.516937][ T7825] __kmalloc_noprof+0xe0/0x850 [ 199.516994][ T7825] security_inode_init_security+0x113/0x370 [ 199.517034][ T7825] ? __pfx_shmem_initxattrs+0x10/0x10 [ 199.517071][ T7825] ? __pfx_security_inode_init_security+0x10/0x10 [ 199.517118][ T7825] ? do_raw_spin_unlock+0x145/0x1e0 [ 199.517151][ T7825] shmem_mknod+0x2ce/0x480 [ 199.517187][ T7825] ? __pfx_shmem_mknod+0x10/0x10 [ 199.517221][ T7825] ? bpf_lsm_inode_create+0x9/0x10 [ 199.517267][ T7825] ? __pfx_shmem_create+0x10/0x10 [ 199.517305][ T7825] lookup_open.isra.0+0xc47/0x11b0 [ 199.517344][ T7825] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 199.517381][ T7825] ? __pfx___might_resched+0x10/0x10 [ 199.517410][ T7825] ? mnt_get_write_access+0x52/0x2f0 [ 199.517460][ T7825] ? __pfx_down_write+0x10/0x10 [ 199.517501][ T7825] ? mnt_get_write_access+0x1e9/0x2f0 [ 199.517551][ T7825] path_openat+0x2291/0x31a0 [ 199.517599][ T7825] ? __pfx_path_openat+0x10/0x10 [ 199.517649][ T7825] do_file_open+0x20e/0x430 [ 199.517688][ T7825] ? __pfx_do_file_open+0x10/0x10 [ 199.517750][ T7825] ? alloc_fd+0x476/0x790 [ 199.517788][ T7825] ? do_getname+0x191/0x390 [ 199.517832][ T7825] do_sys_openat2+0x10d/0x1e0 [ 199.517873][ T7825] ? __pfx_do_sys_openat2+0x10/0x10 [ 199.517928][ T7825] __x64_sys_openat+0x12d/0x210 [ 199.517977][ T7825] ? __pfx___x64_sys_openat+0x10/0x10 [ 199.518022][ T7825] ? rcu_is_watching+0x12/0xc0 [ 199.518060][ T7825] do_syscall_64+0x115/0x840 [ 199.518094][ T7825] ? clear_bhb_loop+0x40/0x90 [ 199.518126][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.518152][ T7825] RIP: 0033:0x7f216779ce59 [ 199.518176][ T7825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.518202][ T7825] RSP: 002b:00007f21686b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 199.518227][ T7825] RAX: ffffffffffffffda RBX: 00007f2167a16090 RCX: 00007f216779ce59 [ 199.518244][ T7825] RDX: 0000000000141440 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 199.518260][ T7825] RBP: 00007f2167832d6f R08: 0000000000000000 R09: 0000000000000000 [ 199.518274][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.518288][ T7825] R13: 00007f2167a16128 R14: 00007f2167a16090 R15: 00007ffcfc509508 [ 199.518322][ T7825] [ 199.927998][ T7826] netlink: 334 bytes leftover after parsing attributes in process `syz.2.364'. [ 199.991548][ T7819] overlayfs: missing 'lowerdir' [ 202.301763][ T7892] netlink: 342 bytes leftover after parsing attributes in process `syz.1.378'. [ 202.376006][ T29] audit: type=1804 audit(1781084772.151:8): pid=7882 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.376" name="/newroot/87/file0" dev="tmpfs" ino=479 res=1 errno=0 [ 202.438648][ T29] audit: type=1804 audit(1781084772.191:9): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.376" name="/newroot/87/file0" dev="tmpfs" ino=479 res=1 errno=0 [ 203.500767][ T7948] netlink: 342 bytes leftover after parsing attributes in process `syz.1.388'. [ 204.300697][ T7970] netlink: 146 bytes leftover after parsing attributes in process `syz.1.393'. [ 204.851121][ T7975] block2mtd: too many arguments [ 207.117396][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 210.832498][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 211.361411][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 211.668900][ T8109] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 211.682282][ T8109] netlink: 13 bytes leftover after parsing attributes in process `syz.1.421'. [ 212.552227][ T8123] netlink: 342 bytes leftover after parsing attributes in process `syz.1.425'. [ 214.323036][ T8147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.331989][ T8147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.338660][ T8147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.360701][ T8147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.764063][ T8168] netlink: 342 bytes leftover after parsing attributes in process `syz.2.434'. [ 215.620472][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 216.341903][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.342070][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.422620][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 218.214403][ T8224] netlink: 342 bytes leftover after parsing attributes in process `syz.2.444'. [ 221.136687][ T8279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.458'. [ 221.747511][ T8295] random: crng reseeded on system resumption [ 222.392813][ T8319] netlink: 330 bytes leftover after parsing attributes in process `syz.1.464'. [ 222.621266][ T8325] kvm: kvm [8324]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x4000007d) = 0x1000 [ 222.971088][ T8332] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 223.182526][ T8332] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 223.648720][ T8331] ima: policy update failed [ 223.699772][ T29] audit: type=1802 audit(1781084793.492:10): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.468" res=0 errno=0 [ 224.249222][ T8360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.474'. [ 224.288595][ T8360] nbd: must specify at least one socket [ 225.725948][ T8337] Process accounting paused [ 226.839677][ T8394] Process accounting paused [ 229.268998][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 229.592391][ T8485] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 230.297565][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 232.423400][ T8545] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 11!phy1!netdev:wlan1!rc_rateid [ 232.595504][ T8548] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 232.606880][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.1.503 Not tainted syzkaller #0 PREEMPT(full) [ 232.606913][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 232.606929][ T8548] Call Trace: [ 232.606938][ T8548] [ 232.606949][ T8548] dump_stack_lvl+0x100/0x190 [ 232.606999][ T8548] sysfs_warn_dup.cold+0x1c/0x28 [ 232.607021][ T8548] sysfs_do_create_link_sd+0x113/0x140 [ 232.607040][ T8548] sysfs_create_link+0x61/0xc0 [ 232.607055][ T8548] device_add+0x675/0x1950 [ 232.607075][ T8548] ? __pfx_device_add+0x10/0x10 [ 232.607090][ T8548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.607112][ T8548] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 232.607140][ T8548] wiphy_register+0x1edd/0x2d90 [ 232.607157][ T8548] ? __rtnl_unlock+0xb9/0xf0 [ 232.607181][ T8548] ? __pfx_wiphy_register+0x10/0x10 [ 232.607200][ T8548] ? __asan_memset+0x23/0x50 [ 232.607222][ T8548] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 232.607252][ T8548] ieee80211_register_hw+0x3055/0x4570 [ 232.607284][ T8548] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 232.607309][ T8548] ? __pfx___debug_object_init+0x10/0x10 [ 232.607332][ T8548] ? find_held_lock+0x2b/0x80 [ 232.607351][ T8548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.607373][ T8548] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 232.607396][ T8548] ? __hrtimer_setup+0x208/0x330 [ 232.607413][ T8548] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 232.607445][ T8548] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 232.607465][ T8548] ? __asan_memcpy+0x3c/0x60 [ 232.607488][ T8548] hwsim_new_radio_nl+0xc5f/0x1370 [ 232.607506][ T8548] ? rcu_is_watching+0x12/0xc0 [ 232.607524][ T8548] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 232.607547][ T8548] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 232.607570][ T8548] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 232.607596][ T8548] genl_family_rcv_msg_doit+0x214/0x300 [ 232.607620][ T8548] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 232.607642][ T8548] ? genl_get_cmd+0x3e7/0x760 [ 232.607668][ T8548] ? bpf_lsm_capable+0x9/0x10 [ 232.607683][ T8548] ? security_capable+0x80/0x260 [ 232.607699][ T8548] ? ns_capable+0xd2/0xf0 [ 232.607717][ T8548] genl_rcv_msg+0x560/0x800 [ 232.607741][ T8548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.607762][ T8548] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 232.607787][ T8548] netlink_rcv_skb+0x159/0x420 [ 232.607815][ T8548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.607838][ T8548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.607866][ T8548] ? netlink_deliver_tap+0x1ae/0xcc0 [ 232.607888][ T8548] genl_rcv+0x28/0x40 [ 232.607909][ T8548] netlink_unicast+0x585/0x850 [ 232.607931][ T8548] ? __pfx_netlink_unicast+0x10/0x10 [ 232.607956][ T8548] netlink_sendmsg+0x8b0/0xda0 [ 232.607978][ T8548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.607996][ T8548] ? __import_iovec+0x1d2/0x640 [ 232.608031][ T8548] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 232.608067][ T8548] ____sys_sendmsg+0x9e1/0xb70 [ 232.608104][ T8548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.608144][ T8548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.608192][ T8548] ? rcu_is_watching+0x12/0xc0 [ 232.608220][ T8548] ? ___sys_sendmsg+0x19d/0x1e0 [ 232.608239][ T8548] ? kfree+0x1dd/0x6c0 [ 232.608264][ T8548] ___sys_sendmsg+0x190/0x1e0 [ 232.608287][ T8548] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.608327][ T8548] ? __pfx___might_resched+0x10/0x10 [ 232.608347][ T8548] __sys_sendmmsg+0x205/0x430 [ 232.608365][ T8548] ? __pfx___sys_sendmmsg+0x10/0x10 [ 232.608379][ T8548] ? do_vfs_ioctl+0x226/0x13e0 [ 232.608399][ T8548] ? __pfx_do_futex+0x10/0x10 [ 232.608423][ T8548] ? xfd_validate_state+0x129/0x190 [ 232.608443][ T8548] __x64_sys_sendmmsg+0x9c/0x100 [ 232.608458][ T8548] ? lockdep_hardirqs_on+0x78/0x100 [ 232.608479][ T8548] do_syscall_64+0x115/0x840 [ 232.608515][ T8548] ? clear_bhb_loop+0x40/0x90 [ 232.608539][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.608555][ T8548] RIP: 0033:0x7fa09d19ce59 [ 232.608568][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.608582][ T8548] RSP: 002b:00007fa09e0f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 232.608597][ T8548] RAX: ffffffffffffffda RBX: 00007fa09d416090 RCX: 00007fa09d19ce59 [ 232.608607][ T8548] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 232.608615][ T8548] RBP: 00007fa09d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 232.608624][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.608633][ T8548] R13: 00007fa09d416128 R14: 00007fa09d416090 R15: 00007ffc64e18a48 [ 232.608653][ T8548] [ 234.469986][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.511'. [ 234.508568][ T29] audit: type=1800 audit(1781084804.307:11): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.509" name="version" dev="configfs" ino=23254 res=0 errno=0 [ 235.404730][ T8604] : Can't lookup blockdev [ 235.434186][ T29] audit: type=1800 audit(1781084805.238:12): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.516" name="features" dev="configfs" ino=23305 res=0 errno=0 [ 236.424526][ T8641] FAULT_INJECTION: forcing a failure. [ 236.424526][ T8641] name failslab, interval 1, probability 0, space 0, times 0 [ 236.424567][ T8641] CPU: 1 UID: 0 PID: 8641 Comm: syz.1.523 Not tainted syzkaller #0 PREEMPT(full) [ 236.424599][ T8641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 236.424613][ T8641] Call Trace: [ 236.424622][ T8641] [ 236.424632][ T8641] dump_stack_lvl+0x100/0x190 [ 236.424684][ T8641] should_fail_ex.cold+0x5/0xa [ 236.424720][ T8641] should_failslab+0xc2/0x120 [ 236.424754][ T8641] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 236.424797][ T8641] ? alloc_empty_file+0x5b/0x1c0 [ 236.424845][ T8641] alloc_empty_file+0x5b/0x1c0 [ 236.424898][ T8641] alloc_file_pseudo+0x13a/0x230 [ 236.424946][ T8641] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 236.424990][ T8641] ? alloc_fd+0x476/0x790 [ 236.425030][ T8641] sock_alloc_file+0x50/0x210 [ 236.425062][ T8641] __sys_socket+0x1c0/0x260 [ 236.425100][ T8641] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 236.425140][ T8641] ? __pfx___sys_socket+0x10/0x10 [ 236.425182][ T8641] ? do_raw_spin_unlock+0x145/0x1e0 [ 236.425220][ T8641] __x64_sys_socket+0x72/0xb0 [ 236.425258][ T8641] ? lockdep_hardirqs_on+0x78/0x100 [ 236.425297][ T8641] do_syscall_64+0x115/0x840 [ 236.425336][ T8641] ? clear_bhb_loop+0x40/0x90 [ 236.425369][ T8641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.425397][ T8641] RIP: 0033:0x7fa09d19ce59 [ 236.425422][ T8641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.425449][ T8641] RSP: 002b:00007fa09e119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 236.425476][ T8641] RAX: ffffffffffffffda RBX: 00007fa09d415fa0 RCX: 00007fa09d19ce59 [ 236.425495][ T8641] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 236.425512][ T8641] RBP: 00007fa09d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 236.425530][ T8641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.425546][ T8641] R13: 00007fa09d416038 R14: 00007fa09d415fa0 R15: 00007ffc64e18a48 [ 236.425585][ T8641] [ 237.773305][ T8659] FAULT_INJECTION: forcing a failure. [ 237.773305][ T8659] name failslab, interval 1, probability 0, space 0, times 0 [ 237.773345][ T8659] CPU: 1 UID: 0 PID: 8659 Comm: syz.3.526 Not tainted syzkaller #0 PREEMPT(full) [ 237.773372][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 237.773386][ T8659] Call Trace: [ 237.773394][ T8659] [ 237.773403][ T8659] dump_stack_lvl+0x100/0x190 [ 237.773448][ T8659] should_fail_ex.cold+0x5/0xa [ 237.773480][ T8659] should_failslab+0xc2/0x120 [ 237.773511][ T8659] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 237.773550][ T8659] ? ioctx_alloc+0x1b9/0x21a0 [ 237.773591][ T8659] ioctx_alloc+0x1b9/0x21a0 [ 237.773624][ T8659] ? __sock_release+0x184/0x260 [ 237.773661][ T8659] ? find_held_lock+0x2b/0x80 [ 237.773693][ T8659] ? __pfx_ioctx_alloc+0x10/0x10 [ 237.773734][ T8659] __x64_sys_io_setup+0xc9/0x220 [ 237.773768][ T8659] do_syscall_64+0x115/0x840 [ 237.773801][ T8659] ? clear_bhb_loop+0x40/0x90 [ 237.773839][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.773864][ T8659] RIP: 0033:0x7f216779ce59 [ 237.773885][ T8659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.773908][ T8659] RSP: 002b:00007f2168651028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 237.773931][ T8659] RAX: ffffffffffffffda RBX: 00007f2167a16360 RCX: 00007f216779ce59 [ 237.773948][ T8659] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 237.773963][ T8659] RBP: 00007f2167832d6f R08: 0000000000000000 R09: 0000000000000000 [ 237.773978][ T8659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.773991][ T8659] R13: 00007f2167a163f8 R14: 00007f2167a16360 R15: 00007ffcfc509508 [ 237.774012][ T8659] [ 240.695048][ T29] audit: type=1800 audit(1781084810.490:13): pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.537" name="features" dev="configfs" ino=23691 res=0 errno=0 [ 242.374223][ T8744] ======================================================= [ 242.374223][ T8744] WARNING: The mand mount option has been deprecated and [ 242.374223][ T8744] and is ignored by this kernel. Remove the mand [ 242.374223][ T8744] option from the mount to silence this warning. [ 242.374223][ T8744] ======================================================= [ 242.458488][ T8744] FAULT_INJECTION: forcing a failure. [ 242.458488][ T8744] name failslab, interval 1, probability 0, space 0, times 0 [ 242.493278][ T8744] CPU: 1 UID: 0 PID: 8744 Comm: syz.3.542 Not tainted syzkaller #0 PREEMPT(full) [ 242.493319][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.493344][ T8744] Call Trace: [ 242.493360][ T8744] [ 242.493371][ T8744] dump_stack_lvl+0x100/0x190 [ 242.493424][ T8744] should_fail_ex.cold+0x5/0xa [ 242.493459][ T8744] should_failslab+0xc2/0x120 [ 242.493493][ T8744] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 242.493536][ T8744] ? __kernfs_new_node+0xd2/0x9f0 [ 242.493571][ T8744] __kernfs_new_node+0xd2/0x9f0 [ 242.493601][ T8744] ? __pfx___kernfs_new_node+0x10/0x10 [ 242.493639][ T8744] ? find_held_lock+0x2b/0x80 [ 242.493670][ T8744] ? kernfs_root+0xee/0x2a0 [ 242.493699][ T8744] ? kernfs_root+0xee/0x2a0 [ 242.493738][ T8744] kernfs_new_node+0x11b/0x1a0 [ 242.493778][ T8744] __kernfs_create_file+0x53/0x350 [ 242.493825][ T8744] sysfs_add_file_mode_ns+0x207/0x3c0 [ 242.493863][ T8744] internal_create_group+0x593/0xfb0 [ 242.493903][ T8744] ? kobject_init_and_add+0x129/0x180 [ 242.493933][ T8744] ? __pfx_internal_create_group+0x10/0x10 [ 242.493964][ T8744] ? __pfx_kobject_init_and_add+0x10/0x10 [ 242.493991][ T8744] ? __x64_sys_ioctl+0x18e/0x210 [ 242.494033][ T8744] internal_create_groups+0x9d/0x150 [ 242.494070][ T8744] netdev_queue_update_kobjects+0x115/0x6f0 [ 242.494120][ T8744] netdev_register_kobject+0x2b3/0x3d0 [ 242.494163][ T8744] register_netdevice+0x151c/0x24b0 [ 242.494204][ T8744] ? __pfx_register_netdevice+0x10/0x10 [ 242.494233][ T8744] ? net_generic+0xea/0x2a0 [ 242.494270][ T8744] ppp_dev_configure+0x986/0xcb0 [ 242.494309][ T8744] ppp_ioctl+0x9d7/0x27c0 [ 242.494342][ T8744] ? find_held_lock+0x2b/0x80 [ 242.494386][ T8744] ? __pfx_ppp_ioctl+0x10/0x10 [ 242.494423][ T8744] ? __fget_files+0x21f/0x3d0 [ 242.494463][ T8744] ? __pfx_ppp_ioctl+0x10/0x10 [ 242.494494][ T8744] __x64_sys_ioctl+0x18e/0x210 [ 242.494526][ T8744] do_syscall_64+0x115/0x840 [ 242.494565][ T8744] ? clear_bhb_loop+0x40/0x90 [ 242.494602][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.494631][ T8744] RIP: 0033:0x7f216779ce59 [ 242.494655][ T8744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.494681][ T8744] RSP: 002b:00007f21686d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.494717][ T8744] RAX: ffffffffffffffda RBX: 00007f2167a15fa0 RCX: 00007f216779ce59 [ 242.494736][ T8744] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 242.494753][ T8744] RBP: 00007f2167832d6f R08: 0000000000000000 R09: 0000000000000000 [ 242.494771][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.494787][ T8744] R13: 00007f2167a16038 R14: 00007f2167a15fa0 R15: 00007ffcfc509508 [ 242.494826][ T8744] [ 244.077824][ T8778] futex_wake_op: syz.1.548 tries to shift op by -2048; fix this program [ 244.116895][ T8770] 0x000000000001-0x000000020000 : "" [ 244.190259][ T8770] ftl_cs: FTL header corrupt! [ 244.662520][ T8785] FAULT_INJECTION: forcing a failure. [ 244.662520][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 244.688334][ T8787] netlink: 342 bytes leftover after parsing attributes in process `syz.3.551'. [ 244.755785][ T8785] CPU: 1 UID: 0 PID: 8785 Comm: syz.0.550 Not tainted syzkaller #0 PREEMPT(full) [ 244.755823][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.755840][ T8785] Call Trace: [ 244.755849][ T8785] [ 244.755859][ T8785] dump_stack_lvl+0x100/0x190 [ 244.755911][ T8785] should_fail_ex.cold+0x5/0xa [ 244.755948][ T8785] should_failslab+0xc2/0x120 [ 244.755981][ T8785] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 244.756021][ T8785] ? mas_preallocate+0x1105/0x14a0 [ 244.756050][ T8785] mas_preallocate+0x1105/0x14a0 [ 244.756082][ T8785] ? __pfx_mas_preallocate+0x10/0x10 [ 244.756115][ T8785] ? vm_area_alloc+0x1f/0x160 [ 244.756153][ T8785] ? lockdep_init_map_type+0x5c/0x250 [ 244.756200][ T8785] __mmap_region+0x124a/0x2dd0 [ 244.756250][ T8785] ? __pfx___mmap_region+0x10/0x10 [ 244.756302][ T8785] ? __lock_acquire+0x4a5/0x2630 [ 244.756346][ T8785] ? __lock_acquire+0x4a5/0x2630 [ 244.756401][ T8785] ? find_held_lock+0x2b/0x80 [ 244.756433][ T8785] ? debug_object_activate+0x331/0x490 [ 244.756466][ T8785] ? debug_object_activate+0x331/0x490 [ 244.756510][ T8785] ? do_raw_spin_unlock+0x145/0x1e0 [ 244.756541][ T8785] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 244.756592][ T8785] ? trace_pelt_se_tp+0x13b/0x190 [ 244.756655][ T8785] ? rcu_is_watching+0x12/0xc0 [ 244.756687][ T8785] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 244.756722][ T8785] ? lockdep_hardirqs_on+0x78/0x100 [ 244.756825][ T8785] mmap_region+0x35d/0x620 [ 244.756852][ T8785] ? rcu_is_watching+0x12/0xc0 [ 244.756884][ T8785] ? __pfx_mmap_region+0x10/0x10 [ 244.756917][ T8785] ? cap_mmap_addr+0x4b/0x120 [ 244.756939][ T8785] ? bpf_lsm_mmap_addr+0x9/0x30 [ 244.756962][ T8785] ? security_mmap_addr+0x71/0x1e0 [ 244.756996][ T8785] ? __get_unmapped_area+0x255/0x3e0 [ 244.757033][ T8785] do_mmap+0xc63/0x12f0 [ 244.757071][ T8785] ? __pfx_do_mmap+0x10/0x10 [ 244.757105][ T8785] ? __pfx_down_write_killable+0x10/0x10 [ 244.757155][ T8785] vm_mmap_pgoff+0x29e/0x470 [ 244.757200][ T8785] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 244.757238][ T8785] ? do_futex+0x192/0x350 [ 244.757266][ T8785] ? __pfx_do_futex+0x10/0x10 [ 244.757299][ T8785] ksys_mmap_pgoff+0xe4/0x610 [ 244.757331][ T8785] ? __x64_sys_futex+0x358/0x4d0 [ 244.757361][ T8785] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 244.757393][ T8785] ? xfd_validate_state+0x129/0x190 [ 244.757428][ T8785] __x64_sys_mmap+0x125/0x190 [ 244.757461][ T8785] do_syscall_64+0x115/0x840 [ 244.757496][ T8785] ? clear_bhb_loop+0x40/0x90 [ 244.757527][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.757552][ T8785] RIP: 0033:0x7fd74f59ce59 [ 244.757575][ T8785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.757600][ T8785] RSP: 002b:00007fd75050d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 244.757627][ T8785] RAX: ffffffffffffffda RBX: 00007fd74f815fa0 RCX: 00007fd74f59ce59 [ 244.757645][ T8785] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 244.757661][ T8785] RBP: 00007fd74f632d6f R08: fffffffffffffffa R09: 0000000000008000 [ 244.757678][ T8785] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 244.757694][ T8785] R13: 00007fd74f816038 R14: 00007fd74f815fa0 R15: 00007ffff58daa38 [ 244.757730][ T8785] [ 246.139568][ T8805] random: crng reseeded on system resumption [ 246.196816][ T8808] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 246.196816][ T8808] M' is too long [ 246.210038][ T8808] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 246.210038][ T8808] W ' is too long [ 247.057097][ T8822] FAULT_INJECTION: forcing a failure. [ 247.057097][ T8822] name failslab, interval 1, probability 0, space 0, times 0 [ 247.114233][ T8822] CPU: 0 UID: 0 PID: 8822 Comm: syz.1.559 Not tainted syzkaller #0 PREEMPT(full) [ 247.114255][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.114265][ T8822] Call Trace: [ 247.114270][ T8822] [ 247.114276][ T8822] dump_stack_lvl+0x100/0x190 [ 247.114306][ T8822] should_fail_ex.cold+0x5/0xa [ 247.114326][ T8822] ? lsm_blob_alloc+0x68/0x90 [ 247.114348][ T8822] should_failslab+0xc2/0x120 [ 247.114366][ T8822] __kmalloc_noprof+0xe0/0x850 [ 247.114390][ T8822] ? trace_kmem_cache_alloc+0xd5/0x100 [ 247.114410][ T8822] lsm_blob_alloc+0x68/0x90 [ 247.114441][ T8822] security_prepare_creds+0x2d/0x290 [ 247.114480][ T8822] prepare_creds+0x5d6/0x950 [ 247.114509][ T8822] join_session_keyring+0x17/0x350 [ 247.114541][ T8822] lookup_user_key+0xbf9/0x1300 [ 247.114572][ T8822] ? __pfx_lookup_user_key+0x10/0x10 [ 247.114594][ T8822] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 247.114620][ T8822] __do_sys_add_key+0x2a6/0x460 [ 247.114644][ T8822] ? __pfx___do_sys_add_key+0x10/0x10 [ 247.114665][ T8822] ? ksys_write+0x1ac/0x250 [ 247.114684][ T8822] ? rcu_is_watching+0x12/0xc0 [ 247.114703][ T8822] do_syscall_64+0x115/0x840 [ 247.114723][ T8822] ? clear_bhb_loop+0x40/0x90 [ 247.114741][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.114755][ T8822] RIP: 0033:0x7fa09d19ce59 [ 247.114769][ T8822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.114784][ T8822] RSP: 002b:00007fa09e119028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 247.114799][ T8822] RAX: ffffffffffffffda RBX: 00007fa09d415fa0 RCX: 00007fa09d19ce59 [ 247.114808][ T8822] RDX: 00002000000004c0 RSI: 0000000000000000 RDI: 0000200000000440 [ 247.114817][ T8822] RBP: 00007fa09d232d6f R08: fffffffffffffffd R09: 0000000000000000 [ 247.114827][ T8822] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000000 [ 247.114835][ T8822] R13: 00007fa09d416038 R14: 00007fa09d415fa0 R15: 00007ffc64e18a48 [ 247.114855][ T8822] [ 247.343111][ T8827] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 252.720939][ T8926] vivid-007: ================= START STATUS ================= [ 252.739286][ T8926] vivid-007: Generate PTS: true [ 252.752642][ T8926] vivid-007: Generate SCR: true [ 252.760139][ T8926] tpg source WxH: 320x240 (Y'CbCr) [ 252.780192][ T8926] tpg field: 1 [ 252.784483][ T8926] tpg crop: (0,0)/320x240 [ 252.789318][ T8926] tpg compose: (0,0)/320x240 [ 252.795862][ T8926] tpg colorspace: 8 [ 252.803314][ T8926] tpg transfer function: 0/0 [ 252.813406][ T8926] tpg Y'CbCr encoding: 0/0 [ 252.821520][ T8926] tpg quantization: 0/0 [ 252.827251][ T8926] tpg RGB range: 0/2 [ 252.831285][ T8926] vivid-007: ================== END STATUS ================== [ 253.369326][ T8957] FAULT_INJECTION: forcing a failure. [ 253.369326][ T8957] name fail_futex, interval 1, probability 0, space 0, times 1 [ 253.412543][ T8957] CPU: 1 UID: 0 PID: 8957 Comm: syz.3.587 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.412588][ T8957] Tainted: [L]=SOFTLOCKUP [ 253.412598][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.412614][ T8957] Call Trace: [ 253.412623][ T8957] [ 253.412633][ T8957] dump_stack_lvl+0x100/0x190 [ 253.412686][ T8957] should_fail_ex.cold+0x5/0xa [ 253.412721][ T8957] get_futex_key+0x1d2/0x1510 [ 253.412770][ T8957] ? __pfx_get_futex_key+0x10/0x10 [ 253.412821][ T8957] ? lockdep_hardirqs_on+0x78/0x100 [ 253.412865][ T8957] ? fcntl_setlk+0x4f4/0xe20 [ 253.412902][ T8957] ? kmem_cache_free+0x127/0x6c0 [ 253.412949][ T8957] futex_wake+0xea/0x530 [ 253.412981][ T8957] ? fcntl_setlk+0x4f9/0xe20 [ 253.413021][ T8957] ? __pfx_futex_wake+0x10/0x10 [ 253.413052][ T8957] ? __pfx_fcntl_setlk+0x10/0x10 [ 253.413094][ T8957] ? __might_fault+0xc5/0x140 [ 253.413135][ T8957] ? __might_fault+0xc5/0x140 [ 253.413184][ T8957] do_futex+0x32b/0x350 [ 253.413212][ T8957] ? __pfx_do_futex+0x10/0x10 [ 253.413239][ T8957] ? do_fcntl+0x811/0x1670 [ 253.413285][ T8957] __x64_sys_futex+0x34f/0x4d0 [ 253.413318][ T8957] ? __pfx___x64_sys_futex+0x10/0x10 [ 253.413347][ T8957] ? tomoyo_file_fcntl+0x6c/0xc0 [ 253.413378][ T8957] ? rcu_is_watching+0x12/0xc0 [ 253.413415][ T8957] do_syscall_64+0x115/0x840 [ 253.413452][ T8957] ? clear_bhb_loop+0x40/0x90 [ 253.413486][ T8957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.413514][ T8957] RIP: 0033:0x7f216779ce59 [ 253.413536][ T8957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.413562][ T8957] RSP: 002b:00007f21686b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 253.413588][ T8957] RAX: ffffffffffffffda RBX: 00007f2167a16098 RCX: 00007f216779ce59 [ 253.413607][ T8957] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2167a1609c [ 253.413624][ T8957] RBP: 00007f2167a16090 R08: 0000000000000001 R09: 0000000000000000 [ 253.413641][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.413658][ T8957] R13: 00007f2167a16128 R14: 00007ffcfc509420 R15: 00007ffcfc509508 [ 253.413695][ T8957] [ 254.219001][ T8966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.251329][ T8966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.279509][ T8966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.291490][ T8966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.870668][ T8981] misc userio: Invalid payload size [ 255.606227][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.616318][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.080096][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 256.108941][ T9010] Process accounting resumed [ 256.320167][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.321247][ T5645] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.332726][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 256.863754][ T9038] Process accounting resumed [ 256.962587][ T4948] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 257.144491][ T9044] synth uevent: /bus/mei: unknown uevent action string [ 257.509346][ T9058] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 258.015610][ T9066] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 258.056697][ T9066] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 259.801164][ T9090] can: request_module (can-proto-5) failed. [ 260.217727][ T9112] FAULT_INJECTION: forcing a failure. [ 260.217727][ T9112] name failslab, interval 1, probability 0, space 0, times 0 [ 260.217805][ T9100] NFSD: Failed to start, no listeners configured. [ 260.252597][ T9112] CPU: 1 UID: 0 PID: 9112 Comm: syz.3.620 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.252621][ T9112] Tainted: [L]=SOFTLOCKUP [ 260.252626][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.252634][ T9112] Call Trace: [ 260.252643][ T9112] [ 260.252649][ T9112] dump_stack_lvl+0x100/0x190 [ 260.252677][ T9112] should_fail_ex.cold+0x5/0xa [ 260.252695][ T9112] should_failslab+0xc2/0x120 [ 260.252713][ T9112] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 260.252728][ T9112] ? kstrdup_const+0x63/0x80 [ 260.252748][ T9112] kstrdup+0x51/0xe0 [ 260.252770][ T9112] kstrdup_const+0x63/0x80 [ 260.252794][ T9112] alloc_vfsmnt+0xe5/0x6a0 [ 260.252830][ T9112] clone_mnt+0x4b/0x930 [ 260.252859][ T9112] copy_tree+0x329/0xbf0 [ 260.252901][ T9112] copy_mnt_ns+0x3fa/0x1180 [ 260.252941][ T9112] ? __pfx_copy_mnt_ns+0x10/0x10 [ 260.252962][ T9112] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 260.252988][ T9112] ? create_new_namespaces+0x30/0xac0 [ 260.253006][ T9112] ? rcu_is_watching+0x12/0xc0 [ 260.253024][ T9112] create_new_namespaces+0xd3/0xac0 [ 260.253040][ T9112] ? bpf_lsm_capable+0x9/0x10 [ 260.253059][ T9112] ? security_capable+0x80/0x260 [ 260.253076][ T9112] copy_namespaces+0x468/0x5e0 [ 260.253102][ T9112] copy_process+0x3531/0x7ed0 [ 260.253131][ T9112] ? __pfx_copy_process+0x10/0x10 [ 260.253154][ T9112] ? _copy_from_user+0x59/0xd0 [ 260.253175][ T9112] kernel_clone+0x176/0x9e0 [ 260.253194][ T9112] ? __pfx_kernel_clone+0x10/0x10 [ 260.253211][ T9112] ? futex_private_hash_put+0x107/0x1c0 [ 260.253238][ T9112] ? __pfx_futex_wake+0x10/0x10 [ 260.253261][ T9112] __do_sys_clone3+0x214/0x290 [ 260.253280][ T9112] ? __pfx___do_sys_clone3+0x10/0x10 [ 260.253318][ T9112] ? rcu_is_watching+0x12/0xc0 [ 260.253335][ T9112] do_syscall_64+0x115/0x840 [ 260.253354][ T9112] ? clear_bhb_loop+0x40/0x90 [ 260.253372][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.253386][ T9112] RIP: 0033:0x7f216779ce59 [ 260.253399][ T9112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.253415][ T9112] RSP: 002b:00007f21686b3ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 260.253430][ T9112] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f216779ce59 [ 260.253439][ T9112] RDX: 00007f21686b3f10 RSI: 0000000000000058 RDI: 00007f21686b3f10 [ 260.253448][ T9112] RBP: 00007f2167832d6f R08: 0000000000000000 R09: 0000000000000058 [ 260.253457][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.253464][ T9112] R13: 00007f2167a16128 R14: 00007f2167a16090 R15: 00007ffcfc509508 [ 260.253483][ T9112] [ 260.876233][ T9120] warning: `syz.0.622' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 261.027171][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.622'. [ 261.174361][ T9120] bond0: (slave bond_slave_0): Releasing backup interface [ 262.267866][ T9137] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 264.012448][ T9187] input: jJǸ-9%vlQ J86hǙn?aԙ/rk [ 264.012448][ T9187] l6x X.=_ as /devices/virtual/input/input9 [ 265.381317][ T9388] random: crng reseeded on system resumption [ 265.391941][ T9390] ima: policy update failed [ 265.396796][ T29] audit: type=1802 audit(1781084835.213:14): pid=9390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.636" res=0 errno=0 [ 265.471591][ T9196] &#$@\]\-: entered promiscuous mode [ 266.398576][ T9385] Process accounting resumed [ 266.531330][ T9402] mmap: syz.2.643 (9402): VmData 37593088 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 266.564289][ T9403] netlink: 322 bytes leftover after parsing attributes in process `syz.3.642'. [ 267.028590][ T5725] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 267.074065][ T5725] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 268.196021][ T9447] cgroup: fork rejected by pids controller in /syz2 [ 268.909163][ T9487] zswap: compressor not available [ 268.976779][ T9489] block2mtd: illegal erase size [ 269.026726][ T9485] block2mtd: error: cannot open device /Eev/audio1 [ 269.817780][ T29] audit: type=1800 audit(1781084839.635:15): pid=9507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.659" name="dbroot" dev="configfs" ino=26485 res=0 errno=0 [ 270.695326][ T9537] FAULT_INJECTION: forcing a failure. [ 270.695326][ T9537] name failslab, interval 1, probability 0, space 0, times 0 [ 270.746875][ T9537] CPU: 1 UID: 0 PID: 9537 Comm: syz.0.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.746918][ T9537] Tainted: [L]=SOFTLOCKUP [ 270.746927][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.746940][ T9537] Call Trace: [ 270.746949][ T9537] [ 270.746959][ T9537] dump_stack_lvl+0x100/0x190 [ 270.747006][ T9537] should_fail_ex.cold+0x5/0xa [ 270.747035][ T9537] ? tomoyo_realpath_from_path+0xb6/0x690 [ 270.747069][ T9537] should_failslab+0xc2/0x120 [ 270.747098][ T9537] __kmalloc_noprof+0xe0/0x850 [ 270.747134][ T9537] ? kfree+0x1dd/0x6c0 [ 270.747171][ T9537] tomoyo_realpath_from_path+0xb6/0x690 [ 270.747209][ T9537] tomoyo_check_open_permission+0x2af/0x3c0 [ 270.747249][ T9537] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 270.747295][ T9537] ? hook_file_open+0x24e/0x7a0 [ 270.747345][ T9537] ? path_get+0x61/0x80 [ 270.747383][ T9537] tomoyo_file_open+0x6b/0x90 [ 270.747409][ T9537] security_file_open+0xb5/0x1e0 [ 270.747441][ T9537] do_dentry_open+0x588/0x14d0 [ 270.747478][ T9537] vfs_open+0x82/0x3f0 [ 270.747518][ T9537] path_openat+0x208c/0x31a0 [ 270.747559][ T9537] ? __pfx_path_openat+0x10/0x10 [ 270.747604][ T9537] do_file_open+0x20e/0x430 [ 270.747638][ T9537] ? __pfx_do_file_open+0x10/0x10 [ 270.747698][ T9537] ? alloc_fd+0x476/0x790 [ 270.747732][ T9537] ? do_getname+0x191/0x390 [ 270.747772][ T9537] do_sys_openat2+0x10d/0x1e0 [ 270.747810][ T9537] ? __pfx_do_sys_openat2+0x10/0x10 [ 270.747863][ T9537] __x64_sys_openat+0x12d/0x210 [ 270.747902][ T9537] ? __pfx___x64_sys_openat+0x10/0x10 [ 270.747939][ T9537] ? ksys_write+0x1ac/0x250 [ 270.747974][ T9537] ? rcu_is_watching+0x12/0xc0 [ 270.748008][ T9537] do_syscall_64+0x115/0x840 [ 270.748043][ T9537] ? clear_bhb_loop+0x40/0x90 [ 270.748075][ T9537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.748101][ T9537] RIP: 0033:0x7fd74f59ce59 [ 270.748122][ T9537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.748146][ T9537] RSP: 002b:00007fd7504ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 270.748169][ T9537] RAX: ffffffffffffffda RBX: 00007fd74f816090 RCX: 00007fd74f59ce59 [ 270.748192][ T9537] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 270.748209][ T9537] RBP: 00007fd74f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 270.748236][ T9537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.748251][ T9537] R13: 00007fd74f816128 R14: 00007fd74f816090 R15: 00007ffff58daa38 [ 270.748294][ T9537] [ 270.853110][ T9537] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.391240][ T9548] capability: warning: `syz.3.665' uses 32-bit capabilities (legacy support in use) [ 271.924187][ T9559] FAULT_INJECTION: forcing a failure. [ 271.924187][ T9559] name failslab, interval 1, probability 0, space 0, times 0 [ 271.948173][ T9559] CPU: 0 UID: 0 PID: 9559 Comm: syz.1.667 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.948218][ T9559] Tainted: [L]=SOFTLOCKUP [ 271.948228][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.948243][ T9559] Call Trace: [ 271.948253][ T9559] [ 271.948263][ T9559] dump_stack_lvl+0x100/0x190 [ 271.948316][ T9559] should_fail_ex.cold+0x5/0xa [ 271.948352][ T9559] should_failslab+0xc2/0x120 [ 271.948386][ T9559] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 271.948430][ T9559] ? __kernfs_new_node+0xd2/0x9f0 [ 271.948471][ T9559] __kernfs_new_node+0xd2/0x9f0 [ 271.948508][ T9559] ? __pfx___kernfs_new_node+0x10/0x10 [ 271.948554][ T9559] ? find_held_lock+0x2b/0x80 [ 271.948589][ T9559] ? kernfs_root+0xee/0x2a0 [ 271.948616][ T9559] ? kernfs_root+0xee/0x2a0 [ 271.948656][ T9559] kernfs_new_node+0x11b/0x1a0 [ 271.948696][ T9559] __kernfs_create_file+0x53/0x350 [ 271.948741][ T9559] sysfs_add_file_mode_ns+0x207/0x3c0 [ 271.948779][ T9559] internal_create_group+0x593/0xfb0 [ 271.948820][ T9559] ? __pfx_internal_create_group+0x10/0x10 [ 271.948859][ T9559] ? kernfs_create_link+0x1bd/0x240 [ 271.948905][ T9559] internal_create_groups+0x9d/0x150 [ 271.948941][ T9559] device_add+0x77a/0x1950 [ 271.948976][ T9559] ? __pfx_device_add+0x10/0x10 [ 271.949005][ T9559] ? trace_kmalloc+0xe3/0x110 [ 271.949035][ T9559] ? __kasan_kmalloc+0xaa/0xb0 [ 271.949061][ T9559] ? lockdep_init_map_type+0x5c/0x250 [ 271.949107][ T9559] ? lockdep_init_map_type+0x5c/0x250 [ 271.949177][ T9559] input_register_device+0x7d2/0xe10 [ 271.949227][ T9559] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 271.949263][ T9559] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 271.949289][ T9559] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 271.949329][ T9559] ? find_held_lock+0x2b/0x80 [ 271.949361][ T9559] ? __fget_files+0x215/0x3d0 [ 271.949412][ T9559] ? __pfx_uinput_ioctl+0x10/0x10 [ 271.949442][ T9559] __x64_sys_ioctl+0x18e/0x210 [ 271.949470][ T9559] do_syscall_64+0x115/0x840 [ 271.949508][ T9559] ? clear_bhb_loop+0x40/0x90 [ 271.949552][ T9559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.949583][ T9559] RIP: 0033:0x7fa09d19ce59 [ 271.949606][ T9559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.949635][ T9559] RSP: 002b:00007fa09e119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.949661][ T9559] RAX: ffffffffffffffda RBX: 00007fa09d415fa0 RCX: 00007fa09d19ce59 [ 271.949679][ T9559] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 271.949697][ T9559] RBP: 00007fa09d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 271.949714][ T9559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.949729][ T9559] R13: 00007fa09d416038 R14: 00007fa09d415fa0 R15: 00007ffc64e18a48 [ 271.949766][ T9559] [ 272.837052][ T9574] FAULT_INJECTION: forcing a failure. [ 272.837052][ T9574] name failslab, interval 1, probability 0, space 0, times 0 [ 272.850310][ T9574] CPU: 0 UID: 0 PID: 9574 Comm: syz.1.670 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.850354][ T9574] Tainted: [L]=SOFTLOCKUP [ 272.850364][ T9574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.850380][ T9574] Call Trace: [ 272.850391][ T9574] [ 272.850401][ T9574] dump_stack_lvl+0x100/0x190 [ 272.850455][ T9574] should_fail_ex.cold+0x5/0xa [ 272.850492][ T9574] should_failslab+0xc2/0x120 [ 272.850526][ T9574] __kvmalloc_node_noprof+0xfa/0xa00 [ 272.850554][ T9574] ? snd_pcm_oss_change_params_locked+0x230e/0x39f0 [ 272.850597][ T9574] ? kfree+0x1dd/0x6c0 [ 272.850643][ T9574] snd_pcm_oss_change_params_locked+0x230e/0x39f0 [ 272.850697][ T9574] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 272.850740][ T9574] ? __pfx___mutex_lock+0x10/0x10 [ 272.850805][ T9574] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 272.850851][ T9574] snd_pcm_oss_sync+0x265/0x840 [ 272.850898][ T9574] snd_pcm_oss_release+0x238/0x300 [ 272.850949][ T9574] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 272.850991][ T9574] __fput+0x3ff/0xb50 [ 272.851042][ T9574] task_work_run+0x150/0x240 [ 272.851073][ T9574] ? __pfx_task_work_run+0x10/0x10 [ 272.851104][ T9574] ? rcu_is_watching+0x12/0xc0 [ 272.851141][ T9574] exit_to_user_mode_loop+0x157/0x670 [ 272.851186][ T9574] ? rcu_is_watching+0x12/0xc0 [ 272.851222][ T9574] do_syscall_64+0x652/0x840 [ 272.851261][ T9574] ? clear_bhb_loop+0x40/0x90 [ 272.851296][ T9574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.851325][ T9574] RIP: 0033:0x7fa09d19ce59 [ 272.851349][ T9574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.851385][ T9574] RSP: 002b:00007fa09e119028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 272.851412][ T9574] RAX: 0000000000000000 RBX: 00007fa09d415fa0 RCX: 00007fa09d19ce59 [ 272.851431][ T9574] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 272.851447][ T9574] RBP: 00007fa09d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 272.851464][ T9574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.851481][ T9574] R13: 00007fa09d416038 R14: 00007fa09d415fa0 R15: 00007ffc64e18a48 [ 272.851520][ T9574] [ 274.177536][ T9606] netlink: 342 bytes leftover after parsing attributes in process `syz.2.676'. [ 275.206335][ T9633] netlink: 25 bytes leftover after parsing attributes in process `syz.2.684'. [ 275.217742][ T9634] kAFS: Invalid Command on /proc/fs/afs/cells file [ 275.641441][ T9645] openvswitch: netlink: Key type 68 is out of range max 32 [ 276.424451][ T9638] Process accounting resumed [ 278.328458][ T9700] FAULT_INJECTION: forcing a failure. [ 278.328458][ T9700] name failslab, interval 1, probability 0, space 0, times 0 [ 278.429034][ T9700] CPU: 1 UID: 0 PID: 9700 Comm: syz.0.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.429059][ T9700] Tainted: [L]=SOFTLOCKUP [ 278.429064][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.429073][ T9700] Call Trace: [ 278.429078][ T9700] [ 278.429085][ T9700] dump_stack_lvl+0x100/0x190 [ 278.429112][ T9700] should_fail_ex.cold+0x5/0xa [ 278.429130][ T9700] should_failslab+0xc2/0x120 [ 278.429148][ T9700] __kmalloc_cache_noprof+0x7a/0x6f0 [ 278.429167][ T9700] ? __do_sys_getcwd+0xe5/0x960 [ 278.429180][ T9700] ? kfree+0x223/0x6c0 [ 278.429201][ T9700] __do_sys_getcwd+0xe5/0x960 [ 278.429218][ T9700] ? __pfx___do_sys_getcwd+0x10/0x10 [ 278.429232][ T9700] ? xfd_validate_state+0x129/0x190 [ 278.429250][ T9700] ? rcu_is_watching+0x12/0xc0 [ 278.429268][ T9700] do_syscall_64+0x115/0x840 [ 278.429287][ T9700] ? clear_bhb_loop+0x40/0x90 [ 278.429305][ T9700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.429320][ T9700] RIP: 0033:0x7fd74f59ce59 [ 278.429333][ T9700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.429348][ T9700] RSP: 002b:00007fd7504cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 278.429363][ T9700] RAX: ffffffffffffffda RBX: 00007fd74f816180 RCX: 00007fd74f59ce59 [ 278.429373][ T9700] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 278.429381][ T9700] RBP: 00007fd74f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 278.429390][ T9700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.429398][ T9700] R13: 00007fd74f816218 R14: 00007fd74f816180 R15: 00007ffff58daa38 [ 278.429416][ T9700] [ 278.822392][ T9698] .^: entered promiscuous mode [ 279.527287][ T9697] kexec: Could not allocate control_code_buffer [ 280.075180][ T4948] Bluetooth: hci3: Malformed LE Event: 0x0b [ 282.434666][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 282.665727][ T9744] Process accounting resumed [ 284.095131][ T9830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.521282][ T9867] Process accounting paused [ 289.111773][ T9918] smpboot: CPU 1 is now offline [ 290.202324][ T9935] kexec: Could not allocate control_code_buffer [ 292.569518][ T4948] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 292.654539][ T9959] Process accounting resumed [ 292.939484][T10016] random: crng reseeded on system resumption [ 295.806500][ T29] audit: type=1804 audit(1781084865.638:16): pid=10066 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.760" name="/newroot/202/file0" dev="tmpfs" ino=1092 res=1 errno=0 [ 295.927680][ T29] audit: type=1804 audit(1781084865.668:17): pid=10076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.760" name="/newroot/202/file0" dev="tmpfs" ino=1092 res=1 errno=0 [ 296.385482][T10044] kexec: Could not allocate control_code_buffer [ 297.531307][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 297.662829][T10112] FAULT_INJECTION: forcing a failure. [ 297.662829][T10112] name failslab, interval 1, probability 0, space 0, times 0 [ 297.765780][T10112] CPU: 0 UID: 0 PID: 10112 Comm: syz.2.769 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.765808][T10112] Tainted: [L]=SOFTLOCKUP [ 297.765813][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.765823][T10112] Call Trace: [ 297.765829][T10112] [ 297.765835][T10112] dump_stack_lvl+0x100/0x190 [ 297.765866][T10112] should_fail_ex.cold+0x5/0xa [ 297.765933][T10112] should_failslab+0xc2/0x120 [ 297.765953][T10112] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 297.765977][T10112] ? __pmd_alloc+0xbf/0x950 [ 297.766000][T10112] __pmd_alloc+0xbf/0x950 [ 297.766020][T10112] __handle_mm_fault+0xa9c/0x2a00 [ 297.766045][T10112] ? mt_find+0x45e/0x8e0 [ 297.766067][T10112] ? __pfx___handle_mm_fault+0x10/0x10 [ 297.766087][T10112] ? __pfx_mt_find+0x10/0x10 [ 297.766123][T10112] handle_mm_fault+0x37b/0xa30 [ 297.766150][T10112] __get_user_pages+0x1178/0x32a0 [ 297.766177][T10112] ? __pfx___get_user_pages+0x10/0x10 [ 297.766201][T10112] populate_vma_page_range+0x267/0x3f0 [ 297.766221][T10112] ? __pfx_populate_vma_page_range+0x10/0x10 [ 297.766240][T10112] ? __pfx_find_vma_intersection+0x10/0x10 [ 297.766258][T10112] ? do_mmap+0x93f/0x12f0 [ 297.766278][T10112] __mm_populate+0x107/0x3a0 [ 297.766298][T10112] ? __pfx___mm_populate+0x10/0x10 [ 297.766318][T10112] ? up_write+0x28c/0x4f0 [ 297.766336][T10112] vm_mmap_pgoff+0x37f/0x470 [ 297.766365][T10112] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 297.766393][T10112] ? do_futex+0x192/0x350 [ 297.766411][T10112] ? __pfx_do_futex+0x10/0x10 [ 297.766430][T10112] ksys_mmap_pgoff+0xe4/0x610 [ 297.766448][T10112] ? __x64_sys_futex+0x358/0x4d0 [ 297.766464][T10112] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 297.766481][T10112] ? xfd_validate_state+0x129/0x190 [ 297.766495][T10112] ? ksys_write+0x1ac/0x250 [ 297.766515][T10112] __x64_sys_mmap+0x125/0x190 [ 297.766533][T10112] do_syscall_64+0x115/0x840 [ 297.766552][T10112] ? clear_bhb_loop+0x40/0x90 [ 297.766570][T10112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.766585][T10112] RIP: 0033:0x7f5dcb39ce59 [ 297.766599][T10112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.766633][T10112] RSP: 002b:00007f5dcc17b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 297.766648][T10112] RAX: ffffffffffffffda RBX: 00007f5dcb615fa0 RCX: 00007f5dcb39ce59 [ 297.766659][T10112] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 297.766668][T10112] RBP: 00007f5dcb432d6f R08: 0000000000000002 R09: 0000000000008000 [ 297.766677][T10112] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 297.766687][T10112] R13: 00007f5dcb616038 R14: 00007f5dcb615fa0 R15: 00007fff3b2f7008 [ 297.766708][T10112] [ 297.766972][T10115] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 298.077993][T10112] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 298.445199][T10126] FAULT_INJECTION: forcing a failure. [ 298.445199][T10126] name failslab, interval 1, probability 0, space 0, times 0 [ 298.680592][T10126] CPU: 0 UID: 0 PID: 10126 Comm: syz.3.771 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.680617][T10126] Tainted: [L]=SOFTLOCKUP [ 298.680623][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.680631][T10126] Call Trace: [ 298.680637][T10126] [ 298.680643][T10126] dump_stack_lvl+0x100/0x190 [ 298.680671][T10126] should_fail_ex.cold+0x5/0xa [ 298.680690][T10126] should_failslab+0xc2/0x120 [ 298.680707][T10126] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 298.680729][T10126] ? alloc_empty_file+0x5b/0x1c0 [ 298.680749][T10126] ? __pfx_stack_trace_save+0x10/0x10 [ 298.680770][T10126] alloc_empty_file+0x5b/0x1c0 [ 298.680790][T10126] path_openat+0xe8/0x31a0 [ 298.680807][T10126] ? kasan_save_stack+0x3f/0x50 [ 298.680819][T10126] ? kasan_save_stack+0x30/0x50 [ 298.680832][T10126] ? kasan_save_track+0x14/0x30 [ 298.680845][T10126] ? __kasan_slab_alloc+0x89/0x90 [ 298.680859][T10126] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 298.680879][T10126] ? do_getname+0x35/0x390 [ 298.680897][T10126] ? do_sys_openat2+0xc5/0x1e0 [ 298.680917][T10126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.680935][T10126] ? __pfx_path_openat+0x10/0x10 [ 298.680959][T10126] do_file_open+0x20e/0x430 [ 298.680977][T10126] ? __pfx_do_file_open+0x10/0x10 [ 298.681007][T10126] ? alloc_fd+0x476/0x790 [ 298.681025][T10126] ? do_getname+0x191/0x390 [ 298.681047][T10126] do_sys_openat2+0x10d/0x1e0 [ 298.681075][T10126] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.681101][T10126] __x64_sys_openat+0x12d/0x210 [ 298.681122][T10126] ? __pfx___x64_sys_openat+0x10/0x10 [ 298.681142][T10126] ? __task_pid_nr_ns+0x1ca/0x510 [ 298.681165][T10126] ? rcu_is_watching+0x12/0xc0 [ 298.681183][T10126] do_syscall_64+0x115/0x840 [ 298.681202][T10126] ? clear_bhb_loop+0x40/0x90 [ 298.681220][T10126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.681234][T10126] RIP: 0033:0x7f216779ce59 [ 298.681246][T10126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.681260][T10126] RSP: 002b:00007f2168693028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.681281][T10126] RAX: ffffffffffffffda RBX: 00007f2167a16180 RCX: 00007f216779ce59 [ 298.681290][T10126] RDX: 0000000000088282 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 298.681299][T10126] RBP: 00007f2167832d6f R08: 0000000000000000 R09: 0000000000000000 [ 298.681307][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.681315][T10126] R13: 00007f2167a16218 R14: 00007f2167a16180 R15: 00007ffcfc509508 [ 298.681334][T10126] [ 299.488996][T10140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.773'. [ 299.623814][T10140] ipvlan1: entered promiscuous mode [ 299.629265][T10140] ipvlan1: entered allmulticast mode [ 299.634663][T10140] veth0_vlan: entered allmulticast mode [ 299.697707][T10115] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 300.640266][T10147] FAULT_INJECTION: forcing a failure. [ 300.640266][T10147] name failslab, interval 1, probability 0, space 0, times 0 [ 300.705486][T10147] CPU: 0 UID: 0 PID: 10147 Comm: syz.1.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.705513][T10147] Tainted: [L]=SOFTLOCKUP [ 300.705519][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.705528][T10147] Call Trace: [ 300.705534][T10147] [ 300.705540][T10147] dump_stack_lvl+0x100/0x190 [ 300.705570][T10147] should_fail_ex.cold+0x5/0xa [ 300.705593][T10147] should_failslab+0xc2/0x120 [ 300.705611][T10147] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 300.705635][T10147] ? copy_process+0x69a/0x7ed0 [ 300.705653][T10147] ? mark_held_locks+0x40/0x70 [ 300.705678][T10147] copy_process+0x69a/0x7ed0 [ 300.705708][T10147] ? __pfx_copy_process+0x10/0x10 [ 300.705730][T10147] ? lockdep_init_map_type+0x5c/0x250 [ 300.705760][T10147] ? lockdep_init_map_type+0x5c/0x250 [ 300.705784][T10147] ? __pfx_vhost_run_work_list+0x10/0x10 [ 300.705809][T10147] ? __pfx_vhost_worker_killed+0x10/0x10 [ 300.705831][T10147] vhost_task_create+0x1db/0x370 [ 300.705847][T10147] ? __pfx_vhost_task_create+0x10/0x10 [ 300.705868][T10147] ? __pfx_vhost_task_fn+0x10/0x10 [ 300.705888][T10147] ? snprintf+0xc7/0x100 [ 300.705910][T10147] vhost_task_worker_create+0x8d/0x260 [ 300.705926][T10147] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 300.705942][T10147] ? lockdep_init_map_type+0x5c/0x250 [ 300.705966][T10147] ? lockdep_init_map_type+0x5c/0x250 [ 300.705992][T10147] vhost_worker_create+0x243/0x310 [ 300.706016][T10147] ? __pfx_vhost_worker_create+0x10/0x10 [ 300.706043][T10147] vhost_dev_set_owner+0x719/0xa30 [ 300.706065][T10147] vhost_net_ioctl+0xfa3/0x1910 [ 300.706079][T10147] ? do_vfs_ioctl+0x226/0x13e0 [ 300.706094][T10147] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 300.706108][T10147] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 300.706128][T10147] ? find_held_lock+0x2b/0x80 [ 300.706145][T10147] ? __fget_files+0x215/0x3d0 [ 300.706161][T10147] ? hook_file_ioctl_common+0x149/0x410 [ 300.706184][T10147] ? __fget_files+0x21f/0x3d0 [ 300.706203][T10147] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 300.706220][T10147] __x64_sys_ioctl+0x18e/0x210 [ 300.706236][T10147] do_syscall_64+0x115/0x840 [ 300.706257][T10147] ? clear_bhb_loop+0x40/0x90 [ 300.706274][T10147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.706290][T10147] RIP: 0033:0x7fa09d19ce59 [ 300.706303][T10147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.706318][T10147] RSP: 002b:00007fa09e119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.706352][T10147] RAX: ffffffffffffffda RBX: 00007fa09d415fa0 RCX: 00007fa09d19ce59 [ 300.706362][T10147] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 300.706370][T10147] RBP: 00007fa09d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 300.706383][T10147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.706391][T10147] R13: 00007fa09d416038 R14: 00007fa09d415fa0 R15: 00007ffc64e18a48 [ 300.706411][T10147] [ 303.182522][T10174] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 304.463010][T10203] zram0: detected capacity change from 0 to 16 [ 306.556972][T10255] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 308.130589][T10265] Process accounting resumed [ 310.775614][T10341] FAULT_INJECTION: forcing a failure. [ 310.775614][T10341] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.822150][T10341] CPU: 0 UID: 0 PID: 10341 Comm: syz.0.814 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.822178][T10341] Tainted: [L]=SOFTLOCKUP [ 310.822183][T10341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.822193][T10341] Call Trace: [ 310.822198][T10341] [ 310.822204][T10341] dump_stack_lvl+0x100/0x190 [ 310.822236][T10341] should_fail_ex.cold+0x5/0xa [ 310.822253][T10341] ? prepare_alloc_pages+0x16d/0x5f0 [ 310.822273][T10341] should_fail_alloc_page+0xeb/0x140 [ 310.822293][T10341] prepare_alloc_pages+0x1f0/0x5f0 [ 310.822318][T10341] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 310.822346][T10341] ? __lock_acquire+0x4a5/0x2630 [ 310.822371][T10341] ? __lock_acquire+0x4a5/0x2630 [ 310.822391][T10341] ? __css_rstat_updated+0x1ce/0x5a0 [ 310.822414][T10341] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 310.822440][T10341] ? do_raw_spin_lock+0x128/0x260 [ 310.822462][T10341] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.822478][T10341] ? find_held_lock+0x2b/0x80 [ 310.822503][T10341] ? __lock_acquire+0x4a5/0x2630 [ 310.822525][T10341] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.822547][T10341] ? policy_nodemask+0xed/0x4f0 [ 310.822567][T10341] alloc_pages_mpol+0x1fb/0x540 [ 310.822585][T10341] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 310.822603][T10341] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 310.822618][T10341] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 310.822636][T10341] folio_alloc_mpol_noprof+0x36/0x260 [ 310.822663][T10341] shmem_alloc_folio+0x135/0x160 [ 310.822687][T10341] shmem_alloc_and_add_folio+0x371/0xd40 [ 310.822716][T10341] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 310.822742][T10341] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 310.822756][T10341] ? __lock_acquire+0x480/0x2630 [ 310.822783][T10341] shmem_get_folio_gfp+0x6ab/0x1900 [ 310.822802][T10341] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 310.822818][T10341] ? __pfx___might_resched+0x10/0x10 [ 310.822834][T10341] ? noop_dirty_folio+0xfd/0x160 [ 310.822852][T10341] shmem_fallocate+0x6d7/0x1060 [ 310.822875][T10341] ? __pfx_shmem_fallocate+0x10/0x10 [ 310.822889][T10341] ? aa_file_perm+0x7f3/0x14d0 [ 310.822916][T10341] ? __lock_acquire+0x4a5/0x2630 [ 310.822951][T10341] ? __pfx_shmem_fallocate+0x10/0x10 [ 310.822967][T10341] vfs_fallocate+0x576/0x10d0 [ 310.822987][T10341] ? __pfx_vfs_fallocate+0x10/0x10 [ 310.823010][T10341] __x64_sys_fallocate+0xd5/0x140 [ 310.823031][T10341] do_syscall_64+0x115/0x840 [ 310.823051][T10341] ? clear_bhb_loop+0x40/0x90 [ 310.823069][T10341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.823085][T10341] RIP: 0033:0x7fd74f59ce59 [ 310.823099][T10341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.823114][T10341] RSP: 002b:00007fd75050d028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 310.823129][T10341] RAX: ffffffffffffffda RBX: 00007fd74f815fa0 RCX: 00007fd74f59ce59 [ 310.823140][T10341] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000006 [ 310.823149][T10341] RBP: 00007fd74f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 310.823158][T10341] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 310.823168][T10341] R13: 00007fd74f816038 R14: 00007fd74f815fa0 R15: 00007ffff58daa38 [ 310.823188][T10341] [ 311.874952][T10350] netlink: 342 bytes leftover after parsing attributes in process `syz.2.815'. [ 314.008458][T10360] Process accounting paused [ 314.376219][T10400] FAULT_INJECTION: forcing a failure. [ 314.376219][T10400] name failslab, interval 1, probability 0, space 0, times 0 [ 314.487445][T10400] CPU: 0 UID: 0 PID: 10400 Comm: syz.2.824 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.487473][T10400] Tainted: [L]=SOFTLOCKUP [ 314.487479][T10400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.487489][T10400] Call Trace: [ 314.487494][T10400] [ 314.487500][T10400] dump_stack_lvl+0x100/0x190 [ 314.487529][T10400] should_fail_ex.cold+0x5/0xa [ 314.487549][T10400] ? lsm_blob_alloc+0x68/0x90 [ 314.487570][T10400] should_failslab+0xc2/0x120 [ 314.487588][T10400] __kmalloc_noprof+0xe0/0x850 [ 314.487610][T10400] ? trace_kmem_cache_alloc+0xd5/0x100 [ 314.487631][T10400] lsm_blob_alloc+0x68/0x90 [ 314.487653][T10400] security_sk_alloc+0x2d/0x290 [ 314.487670][T10400] sk_prot_alloc+0x1d1/0x2a0 [ 314.487690][T10400] sk_alloc+0x36/0xe80 [ 314.487705][T10400] inet_create+0x3a0/0x1060 [ 314.487728][T10400] ? inet_create+0x94/0x1060 [ 314.487754][T10400] __sock_create+0x339/0x860 [ 314.487777][T10400] udp_sock_create4+0xa6/0x450 [ 314.487796][T10400] ? __pfx_udp_sock_create4+0x10/0x10 [ 314.487817][T10400] ? lockdep_hardirqs_on+0x78/0x100 [ 314.487837][T10400] ? crng_make_state+0x2b0/0x6c0 [ 314.487863][T10400] rxrpc_open_socket+0x4ef/0x6b0 [ 314.487882][T10400] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 314.487917][T10400] ? rcu_is_watching+0x12/0xc0 [ 314.487935][T10400] ? trace_rxrpc_local+0x80/0x250 [ 314.487953][T10400] rxrpc_lookup_local+0xac7/0x1220 [ 314.487974][T10400] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 314.487994][T10400] ? __local_bh_enable_ip+0x9e/0x120 [ 314.488016][T10400] rxrpc_sendmsg+0x34a/0x680 [ 314.488038][T10400] sock_write_iter+0x524/0x5a0 [ 314.488056][T10400] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 314.488074][T10400] ? __pfx_sock_write_iter+0x10/0x10 [ 314.488099][T10400] ? bpf_lsm_file_permission+0x9/0x10 [ 314.488113][T10400] ? security_file_permission+0x76/0x210 [ 314.488132][T10400] ? rw_verify_area+0xce/0x6d0 [ 314.488149][T10400] vfs_write+0x6ac/0x1070 [ 314.488166][T10400] ? __pfx_sock_write_iter+0x10/0x10 [ 314.488186][T10400] ? __pfx_vfs_write+0x10/0x10 [ 314.488202][T10400] ? find_held_lock+0x2b/0x80 [ 314.488232][T10400] ksys_write+0x1f8/0x250 [ 314.488248][T10400] ? __pfx_ksys_write+0x10/0x10 [ 314.488266][T10400] ? rcu_is_watching+0x12/0xc0 [ 314.488285][T10400] do_syscall_64+0x115/0x840 [ 314.488305][T10400] ? clear_bhb_loop+0x40/0x90 [ 314.488322][T10400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.488337][T10400] RIP: 0033:0x7f5dcb39ce59 [ 314.488352][T10400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.488366][T10400] RSP: 002b:00007f5dcc17b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.488381][T10400] RAX: ffffffffffffffda RBX: 00007f5dcb615fa0 RCX: 00007f5dcb39ce59 [ 314.488391][T10400] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 314.488400][T10400] RBP: 00007f5dcb432d6f R08: 0000000000000000 R09: 0000000000000000 [ 314.488410][T10400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.488419][T10400] R13: 00007f5dcb616038 R14: 00007f5dcb615fa0 R15: 00007fff3b2f7008 [ 314.488439][T10400] [ 315.732591][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.738938][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.633430][T10468] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 318.655716][T10470] block2mtd: too many arguments [ 318.854576][T10468] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 318.921052][T10468] pci 0000:00:01.3: PCI INT A: no GSI [ 321.870858][T10540] < [ 324.997937][T10601] netlink: 'syz.3.867': attribute type 22 has an invalid length. [ 325.086655][T10601] netlink: 330 bytes leftover after parsing attributes in process `syz.3.867'. [ 325.262857][T10604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.867'. [ 325.314965][T10604] macvlan0: entered promiscuous mode [ 325.373548][T10604] macvlan0: entered allmulticast mode [ 325.412065][T10604] veth1_vlan: entered allmulticast mode [ 328.711599][T10684] kvm: kvm [10683]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x4000007d) = 0x1000 [ 331.248489][T10734] netlink: 342 bytes leftover after parsing attributes in process `syz.3.890'. [ 332.932289][ T29] audit: type=1800 audit(1781084902.786:18): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.896" name="features" dev="configfs" ino=35848 res=0 errno=0 [ 333.687829][ T4948] Bluetooth: hci1: unexpected event 0x03 length: 43 > 11 [ 334.466307][T10791] FAULT_INJECTION: forcing a failure. [ 334.466307][T10791] name fail_futex, interval 1, probability 0, space 0, times 0 [ 334.466339][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.1.903 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.466359][T10791] Tainted: [L]=SOFTLOCKUP [ 334.466364][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.466373][T10791] Call Trace: [ 334.466378][T10791] [ 334.466384][T10791] dump_stack_lvl+0x100/0x190 [ 334.466412][T10791] should_fail_ex.cold+0x5/0xa [ 334.466431][T10791] get_futex_key+0x1d2/0x1510 [ 334.466463][T10791] ? __pfx_get_futex_key+0x10/0x10 [ 334.466483][T10791] ? futex_hash+0x2ad/0x370 [ 334.466504][T10791] ? futex_hash+0x141/0x370 [ 334.466527][T10791] futex_wake+0xea/0x530 [ 334.466544][T10791] ? __pfx_futex_wait+0x10/0x10 [ 334.466561][T10791] ? __pfx_futex_wake+0x10/0x10 [ 334.466579][T10791] ? ksys_write+0x190/0x250 [ 334.466595][T10791] ? ksys_write+0x190/0x250 [ 334.466613][T10791] do_futex+0x32b/0x350 [ 334.466628][T10791] ? __pfx_do_futex+0x10/0x10 [ 334.466640][T10791] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.466665][T10791] __x64_sys_futex+0x34f/0x4d0 [ 334.466681][T10791] ? __x64_sys_openat+0x12d/0x210 [ 334.466701][T10791] ? __pfx___x64_sys_futex+0x10/0x10 [ 334.466715][T10791] ? ksys_write+0x1ac/0x250 [ 334.466732][T10791] ? rcu_is_watching+0x12/0xc0 [ 334.466751][T10791] do_syscall_64+0x115/0x840 [ 334.466769][T10791] ? clear_bhb_loop+0x40/0x90 [ 334.466789][T10791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.466803][T10791] RIP: 0033:0x7fa09d19ce59 [ 334.466816][T10791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.466830][T10791] RSP: 002b:00007fa09e1190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 334.466844][T10791] RAX: ffffffffffffffda RBX: 00007fa09d415fa8 RCX: 00007fa09d19ce59 [ 334.466853][T10791] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa09d415fac [ 334.466862][T10791] RBP: 00007fa09d415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 334.466870][T10791] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 334.466879][T10791] R13: 00007fa09d416038 R14: 00007ffc64e18960 R15: 00007ffc64e18a48 [ 334.466897][T10791] [ 334.978848][T10801] ima: policy update failed [ 334.984106][ T29] audit: type=1802 audit(1781084904.827:19): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.906" res=0 errno=0 [ 337.276554][T10841] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 337.715670][T10856] usb usb15: usbfs: interface 0 claimed by hub while 'syz.0.918' sets config #0 [ 338.112175][T10866] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 338.165195][T10866] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 339.281765][T10898] : Can't lookup blockdev [ 339.597602][T10900] vivid-008: ================= START STATUS ================= [ 339.635796][T10900] vivid-008: ================== END STATUS ================== [ 340.576796][T10919] sctp: [Deprecated]: syz.2.930 (pid 10919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.576796][T10919] Use struct sctp_sack_info instead [ 343.734983][T10965] openvswitch: netlink: Flow key attribute not present in set flow. [ 344.178689][T10960] Process accounting resumed [ 346.709975][T11023] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 348.566412][T11074] FAULT_INJECTION: forcing a failure. [ 348.566412][T11074] name failslab, interval 1, probability 0, space 0, times 0 [ 348.643338][T11074] CPU: 0 UID: 0 PID: 11074 Comm: syz.2.959 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.643366][T11074] Tainted: [L]=SOFTLOCKUP [ 348.643372][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.643381][T11074] Call Trace: [ 348.643387][T11074] [ 348.643393][T11074] dump_stack_lvl+0x100/0x190 [ 348.643422][T11074] should_fail_ex.cold+0x5/0xa [ 348.643442][T11074] ? lsm_blob_alloc+0x68/0x90 [ 348.643463][T11074] should_failslab+0xc2/0x120 [ 348.643481][T11074] __kmalloc_noprof+0xe0/0x850 [ 348.643507][T11074] ? trace_kmem_cache_alloc+0xd5/0x100 [ 348.643528][T11074] lsm_blob_alloc+0x68/0x90 [ 348.643550][T11074] security_prepare_creds+0x2d/0x290 [ 348.643572][T11074] prepare_creds+0x5d6/0x950 [ 348.643589][T11074] join_session_keyring+0x17/0x350 [ 348.643607][T11074] lookup_user_key+0xbf9/0x1300 [ 348.643626][T11074] ? __pfx_lookup_user_key+0x10/0x10 [ 348.643648][T11074] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 348.643675][T11074] __do_sys_add_key+0x2a6/0x460 [ 348.643698][T11074] ? __pfx___do_sys_add_key+0x10/0x10 [ 348.643719][T11074] ? ksys_write+0x1ac/0x250 [ 348.643738][T11074] ? rcu_is_watching+0x12/0xc0 [ 348.643758][T11074] do_syscall_64+0x115/0x840 [ 348.643777][T11074] ? clear_bhb_loop+0x40/0x90 [ 348.643795][T11074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.643810][T11074] RIP: 0033:0x7f5dcb39ce59 [ 348.643823][T11074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.643838][T11074] RSP: 002b:00007f5dcc17b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 348.643853][T11074] RAX: ffffffffffffffda RBX: 00007f5dcb615fa0 RCX: 00007f5dcb39ce59 [ 348.643863][T11074] RDX: 00002000000004c0 RSI: 0000000000000000 RDI: 0000200000000440 [ 348.643872][T11074] RBP: 00007f5dcb432d6f R08: fffffffffffffffd R09: 0000000000000000 [ 348.643881][T11074] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000000 [ 348.643889][T11074] R13: 00007f5dcb616038 R14: 00007f5dcb615fa0 R15: 00007fff3b2f7008 [ 348.643908][T11074] [ 352.511291][T11147] netlink: 350 bytes leftover after parsing attributes in process `syz.1.977'. [ 355.782271][T11199] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 357.140719][T11239] overlayfs: missing 'lowerdir' [ 359.204636][T11264] netlink: 326 bytes leftover after parsing attributes in process `syz.1.997'. [ 359.702152][T11278] ima: policy update failed [ 359.722770][ T29] audit: type=1802 audit(1781084929.580:20): pid=11278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1002" res=0 errno=0 [ 359.887956][T11286] random: crng reseeded on system resumption [ 364.447730][T11339] random: crng reseeded on system resumption [ 365.917280][ T29] audit: type=1800 audit(1781084935.773:21): pid=11368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1023" name="members" dev="configfs" ino=39542 res=0 errno=0 [ 365.962955][T11368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1023'. [ 366.069927][T11368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.083544][T11368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.112653][T11368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.137198][T11368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.396767][T11392] Process accounting resumed [ 369.570434][T11440] tipc: Started in network mode [ 369.602380][T11440] tipc: Node identity ee00, cluster identity 4711 [ 369.636124][T11440] tipc: Node number set to 60928 [ 370.407904][T11460] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1043'. [ 371.179856][T11477] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1045'. [ 371.402479][T11482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1048'. [ 371.431761][T11483] [U]  [ 371.434786][T11483] [U] [ 371.437484][T11483] [U] [ 371.440175][T11483] [U] [ 371.517495][T11482] veth1_macvtap: left promiscuous mode [ 371.529113][T11483] [U] [ 371.531932][T11483] [U] [ 371.534723][T11483] [U] [ 371.537436][T11483] [U] [ 371.595743][T11489] binder: 11480:11489 ioctl ae41 5 returned -22 [ 371.643459][T11482] macsec0: entered promiscuous mode [ 371.649065][T11483] [U] [ 371.651771][T11483] [U] [ 371.654522][T11483] [U] [ 371.657209][T11483] [U] [ 371.677101][T11482] macsec0: entered allmulticast mode [ 371.753598][T11483] [U] [ 371.756362][T11483] [U] [ 371.759050][T11483] [U] [ 371.761728][T11483] [U] [ 371.807421][T11483] [U] [ 371.810178][T11483] [U] [ 371.812858][T11483] [U] [ 371.815591][T11483] [U] [ 371.859865][T11483] [U] [ 371.862717][T11483] [U] [ 371.865396][T11483] [U] [ 371.868073][T11483] [U] [ 371.907609][T11483] [U] [ 371.910365][T11483] [U] [ 371.913137][T11483] [U] [ 371.915816][T11483] [U] [ 371.961434][T11483] [U] [ 371.964159][T11483] [U] [ 371.966849][T11483] [U] [ 371.969521][T11483] [U] [ 372.010604][T11483] [U] [ 372.013326][T11483] [U] [ 372.016041][T11483] [U] [ 372.018770][T11483] [U] [ 372.059534][T11483] [U] [ 372.062270][T11483] [U] [ 372.064954][T11483] [U] [ 372.067655][T11483] [U] [ 372.100910][T11500] can: request_module (can-proto-5) failed. [ 372.111670][T11483] [U] [ 372.114392][T11483] [U] [ 372.117095][T11483] [U] [ 372.119769][T11483] [U] [ 372.146591][T11483] [U] [ 372.149315][T11483] [U] [ 372.151989][T11483] [U] [ 372.154659][T11483] [U] [ 372.205655][T11483] [U] [ 372.542435][ T5716] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 372.827300][T11523] netlink: 130 bytes leftover after parsing attributes in process `syz.1.1056'. [ 373.168577][T11509] &#$@\]\-: entered promiscuous mode [ 373.415543][T11542] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1059'. [ 373.515834][T11542] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1059'. [ 373.771879][T11546] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1061'. [ 373.817963][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 374.482343][T11568] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 377.264453][T11557] Process accounting paused [ 378.422812][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.429939][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.681147][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1092'. [ 381.043016][T11693] bond0: (slave bond_slave_0): Releasing backup interface [ 381.883175][T11721] tipc: Started in network mode [ 381.905844][T11721] tipc: Node identity ee00, cluster identity 4711 [ 381.952571][T11721] tipc: Node number set to 60928 [ 383.014726][T11744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1105'. [ 383.375857][T11744] bond0: (slave bond_slave_0): Releasing backup interface [ 384.122344][T11723] Process accounting resumed [ 385.708060][T11809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1120'. [ 385.840034][T11809] bridge0: entered promiscuous mode [ 385.845589][T11809] bridge0: entered allmulticast mode [ 386.729225][T11832] FAULT_INJECTION: forcing a failure. [ 386.729225][T11832] name failslab, interval 1, probability 0, space 0, times 0 [ 386.777936][T11832] CPU: 0 UID: 0 PID: 11832 Comm: syz.1.1126 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.777964][T11832] Tainted: [L]=SOFTLOCKUP [ 386.777969][T11832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 386.777979][T11832] Call Trace: [ 386.777985][T11832] [ 386.777992][T11832] dump_stack_lvl+0x100/0x190 [ 386.778023][T11832] should_fail_ex.cold+0x5/0xa [ 386.778043][T11832] should_failslab+0xc2/0x120 [ 386.778062][T11832] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 386.778084][T11832] ? __kernfs_new_node+0xd2/0x9f0 [ 386.778106][T11832] __kernfs_new_node+0xd2/0x9f0 [ 386.778121][T11832] ? kernfs_add_one+0x583/0x850 [ 386.778141][T11832] ? __pfx___kernfs_new_node+0x10/0x10 [ 386.778162][T11832] ? find_held_lock+0x2b/0x80 [ 386.778180][T11832] ? kernfs_root+0xee/0x2a0 [ 386.778195][T11832] ? kernfs_root+0xee/0x2a0 [ 386.778221][T11832] kernfs_new_node+0x11b/0x1a0 [ 386.778243][T11832] __kernfs_create_file+0x53/0x350 [ 386.778268][T11832] sysfs_add_file_mode_ns+0x207/0x3c0 [ 386.778289][T11832] sysfs_create_file_ns+0x145/0x1e0 [ 386.778305][T11832] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 386.778322][T11832] ? __pfx___up_read+0x10/0x10 [ 386.778337][T11832] ? acpi_device_notify+0x464/0x500 [ 386.778359][T11832] ? kobject_put+0xb9/0x640 [ 386.778385][T11832] device_create_file+0xf2/0x1d0 [ 386.778407][T11832] device_add+0x2cb/0x1950 [ 386.778423][T11832] ? __pfx_dev_set_name+0x10/0x10 [ 386.778440][T11832] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 386.778461][T11832] ? __pfx_device_add+0x10/0x10 [ 386.778477][T11832] ? lockdep_init_map_type+0x5c/0x250 [ 386.778500][T11832] ? __init_waitqueue_head+0xca/0x150 [ 386.778521][T11832] netdev_register_kobject+0x1a9/0x3d0 [ 386.778543][T11832] register_netdevice+0x151c/0x24b0 [ 386.778564][T11832] ? __pfx_register_netdevice+0x10/0x10 [ 386.778580][T11832] ? net_generic+0xea/0x2a0 [ 386.778599][T11832] ppp_dev_configure+0x986/0xcb0 [ 386.778619][T11832] ppp_ioctl+0x9d7/0x27c0 [ 386.778636][T11832] ? find_held_lock+0x2b/0x80 [ 386.778653][T11832] ? __pfx_ppp_ioctl+0x10/0x10 [ 386.778672][T11832] ? __fget_files+0x21f/0x3d0 [ 386.778692][T11832] ? __pfx_ppp_ioctl+0x10/0x10 [ 386.778708][T11832] __x64_sys_ioctl+0x18e/0x210 [ 386.778724][T11832] do_syscall_64+0x115/0x840 [ 386.778744][T11832] ? clear_bhb_loop+0x40/0x90 [ 386.778762][T11832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.778777][T11832] RIP: 0033:0x7fa09d19ce59 [ 386.778790][T11832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.778805][T11832] RSP: 002b:00007fa09e119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.778821][T11832] RAX: ffffffffffffffda RBX: 00007fa09d415fa0 RCX: 00007fa09d19ce59 [ 386.778831][T11832] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000004 [ 386.778840][T11832] RBP: 00007fa09d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 386.778849][T11832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.778858][T11832] R13: 00007fa09d416038 R14: 00007fa09d415fa0 R15: 00007ffc64e18a48 [ 386.778878][T11832] [ 388.294373][T11852] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1132'. [ 388.353635][T11851] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1132'. [ 388.401902][T11854] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1132'. [ 388.830242][T11867] FAULT_INJECTION: forcing a failure. [ 388.830242][T11867] name failslab, interval 1, probability 0, space 0, times 0 [ 388.962262][T11867] CPU: 0 UID: 0 PID: 11867 Comm: syz.1.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.962290][T11867] Tainted: [L]=SOFTLOCKUP [ 388.962296][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.962305][T11867] Call Trace: [ 388.962311][T11867] [ 388.962317][T11867] dump_stack_lvl+0x100/0x190 [ 388.962349][T11867] should_fail_ex.cold+0x5/0xa [ 388.962369][T11867] ? tracepoint_add_func+0x3a8/0x1150 [ 388.962390][T11867] should_failslab+0xc2/0x120 [ 388.962407][T11867] __kmalloc_noprof+0xe0/0x850 [ 388.962437][T11867] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 388.962463][T11867] tracepoint_add_func+0x3a8/0x1150 [ 388.962483][T11867] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 388.962513][T11867] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 388.962533][T11867] tracepoint_probe_register+0xc4/0x110 [ 388.962556][T11867] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 388.962578][T11867] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 388.962599][T11867] ? relay_open+0x793/0xa00 [ 388.962620][T11867] blk_register_tracepoints+0x129/0x440 [ 388.962635][T11867] blk_trace_setup_finalize+0x320/0x3a0 [ 388.962652][T11867] blk_trace_setup+0x254/0x440 [ 388.962672][T11867] ? __pfx_blk_trace_setup+0x10/0x10 [ 388.962687][T11867] ? lockdep_hardirqs_on+0x36/0x100 [ 388.962713][T11867] ? __pfx_vsnprintf+0x10/0x10 [ 388.962743][T11867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 388.962764][T11867] ? do_vfs_ioctl+0x226/0x13e0 [ 388.962781][T11867] blk_trace_ioctl+0x245/0x320 [ 388.962799][T11867] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 388.962820][T11867] ? find_held_lock+0x2b/0x80 [ 388.962838][T11867] ? __fget_files+0x215/0x3d0 [ 388.962853][T11867] ? hook_file_ioctl_common+0x149/0x410 [ 388.962875][T11867] blkdev_ioctl+0x17c/0x6f0 [ 388.962898][T11867] ? __pfx_blkdev_ioctl+0x10/0x10 [ 388.962923][T11867] ? __pfx_blkdev_ioctl+0x10/0x10 [ 388.962947][T11867] __x64_sys_ioctl+0x18e/0x210 [ 388.962964][T11867] do_syscall_64+0x115/0x840 [ 388.962984][T11867] ? clear_bhb_loop+0x40/0x90 [ 388.963002][T11867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.963017][T11867] RIP: 0033:0x7fa09d19ce59 [ 388.963031][T11867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.963045][T11867] RSP: 002b:00007fa09e0f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.963060][T11867] RAX: ffffffffffffffda RBX: 00007fa09d416090 RCX: 00007fa09d19ce59 [ 388.963070][T11867] RDX: 00002000000002c0 RSI: 00000000c0481273 RDI: 0000000000000004 [ 388.963079][T11867] RBP: 00007fa09d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 388.963088][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.963097][T11867] R13: 00007fa09d416128 R14: 00007fa09d416090 R15: 00007ffc64e18a48 [ 388.963118][T11867] [ 388.963245][T11867] ------------[ cut here ]------------ [ 389.256175][T11867] ret [ 389.256194][T11867] WARNING: kernel/trace/blktrace.c:1344 at blk_register_tracepoints+0x390/0x440, CPU#0: syz.1.1134/11867 [ 389.270171][T11867] Modules linked in: [ 389.274454][T11867] CPU: 0 UID: 0 PID: 11867 Comm: syz.1.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.285569][T11867] Tainted: [L]=SOFTLOCKUP [ 389.289915][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 389.300091][T11867] RIP: 0010:blk_register_tracepoints+0x390/0x440 [ 389.306503][T11867] Code: 0f 0b 90 e9 47 fd ff ff e8 5d 99 f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 4f 99 f7 ff 90 0f 0b 90 e9 85 fd ff ff e8 41 99 f7 ff 90 <0f> 0b 90 e9 a4 fd ff ff e8 33 99 f7 ff 90 0f 0b 90 e9 c3 fd ff ff [ 389.326219][T11867] RSP: 0018:ffffc90002eafaf8 EFLAGS: 00010283 [ 389.332284][T11867] RAX: 0000000000022ecb RBX: 00000000fffffff4 RCX: ffffc90007612000 [ 389.340854][T11867] RDX: 0000000000080000 RSI: ffffffff8210641f RDI: ffff88803303dd00 [ 389.349387][T11867] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 389.357723][T11867] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000008040000d [ 389.365767][T11867] R13: ffff8880274fa540 R14: ffffc90002eafd98 R15: 0000000000000001 [ 389.373808][T11867] FS: 00007fa09e0f86c0(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 389.382729][T11867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.389640][T11867] CR2: 0000200000ec3000 CR3: 0000000021baa000 CR4: 00000000003526f0 [ 389.397655][T11867] Call Trace: [ 389.400976][T11867] [ 389.403981][T11867] blk_trace_setup_finalize+0x320/0x3a0 [ 389.409544][T11867] blk_trace_setup+0x254/0x440 [ 389.414419][T11867] ? __pfx_blk_trace_setup+0x10/0x10 [ 389.419858][T11867] ? lockdep_hardirqs_on+0x36/0x100 [ 389.425156][T11867] ? __pfx_vsnprintf+0x10/0x10 [ 389.429935][T11867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.435893][T11867] ? do_vfs_ioctl+0x226/0x13e0 [ 389.440669][T11867] blk_trace_ioctl+0x245/0x320 [ 389.445477][T11867] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 389.451286][T11867] ? find_held_lock+0x2b/0x80 [ 389.456381][T11867] ? __fget_files+0x215/0x3d0 [ 389.461095][T11867] ? hook_file_ioctl_common+0x149/0x410 [ 389.466717][T11867] blkdev_ioctl+0x17c/0x6f0 [ 389.471279][T11867] ? __pfx_blkdev_ioctl+0x10/0x10 [ 389.476510][T11867] ? __pfx_blkdev_ioctl+0x10/0x10 [ 389.481553][T11867] __x64_sys_ioctl+0x18e/0x210 [ 389.486431][T11867] do_syscall_64+0x115/0x840 [ 389.491026][T11867] ? clear_bhb_loop+0x40/0x90 [ 389.495763][T11867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.501676][T11867] RIP: 0033:0x7fa09d19ce59 [ 389.506202][T11867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.525891][T11867] RSP: 002b:00007fa09e0f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.534646][T11867] RAX: ffffffffffffffda RBX: 00007fa09d416090 RCX: 00007fa09d19ce59 [ 389.542626][T11867] RDX: 00002000000002c0 RSI: 00000000c0481273 RDI: 0000000000000004 [ 389.551248][T11867] RBP: 00007fa09d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 389.559582][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.567624][T11867] R13: 00007fa09d416128 R14: 00007fa09d416090 R15: 00007ffc64e18a48 [ 389.575658][T11867] [ 389.578681][T11867] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 389.585953][T11867] CPU: 0 UID: 0 PID: 11867 Comm: syz.1.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.596979][T11867] Tainted: [L]=SOFTLOCKUP [ 389.601299][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 389.611339][T11867] Call Trace: [ 389.614613][T11867] [ 389.617588][T11867] dump_stack_lvl+0x100/0x190 [ 389.622277][T11867] vpanic+0x552/0x970 [ 389.626248][T11867] ? __pfx_vpanic+0x10/0x10 [ 389.630740][T11867] panic+0xd1/0xe0 [ 389.634448][T11867] ? __pfx_panic+0x10/0x10 [ 389.638857][T11867] check_panic_on_warn.cold+0x19/0x34 [ 389.644217][T11867] ? blk_register_tracepoints+0x390/0x440 [ 389.649926][T11867] __warn.cold+0x191/0x328 [ 389.654347][T11867] __report_bug+0x296/0x3d0 [ 389.658842][T11867] ? blk_register_tracepoints+0x390/0x440 [ 389.664554][T11867] ? __pfx___report_bug+0x10/0x10 [ 389.669574][T11867] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 389.675207][T11867] ? __kmalloc_noprof+0x320/0x850 [ 389.680232][T11867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 389.686214][T11867] ? blk_register_tracepoints+0x390/0x440 [ 389.691929][T11867] report_bug+0xb2/0x220 [ 389.696349][T11867] ? blk_register_tracepoints+0x390/0x440 [ 389.702081][T11867] handle_bug+0x16a/0x2a0 [ 389.706421][T11867] exc_invalid_op+0x17/0x50 [ 389.710913][T11867] asm_exc_invalid_op+0x1a/0x20 [ 389.715773][T11867] RIP: 0010:blk_register_tracepoints+0x390/0x440 [ 389.722090][T11867] Code: 0f 0b 90 e9 47 fd ff ff e8 5d 99 f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 4f 99 f7 ff 90 0f 0b 90 e9 85 fd ff ff e8 41 99 f7 ff 90 <0f> 0b 90 e9 a4 fd ff ff e8 33 99 f7 ff 90 0f 0b 90 e9 c3 fd ff ff [ 389.741693][T11867] RSP: 0018:ffffc90002eafaf8 EFLAGS: 00010283 [ 389.747772][T11867] RAX: 0000000000022ecb RBX: 00000000fffffff4 RCX: ffffc90007612000 [ 389.755749][T11867] RDX: 0000000000080000 RSI: ffffffff8210641f RDI: ffff88803303dd00 [ 389.763762][T11867] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 389.771833][T11867] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000008040000d [ 389.779797][T11867] R13: ffff8880274fa540 R14: ffffc90002eafd98 R15: 0000000000000001 [ 389.788024][T11867] ? blk_register_tracepoints+0x38f/0x440 [ 389.793747][T11867] ? blk_register_tracepoints+0x38f/0x440 [ 389.799452][T11867] blk_trace_setup_finalize+0x320/0x3a0 [ 389.805017][T11867] blk_trace_setup+0x254/0x440 [ 389.809802][T11867] ? __pfx_blk_trace_setup+0x10/0x10 [ 389.815095][T11867] ? lockdep_hardirqs_on+0x36/0x100 [ 389.820316][T11867] ? __pfx_vsnprintf+0x10/0x10 [ 389.825099][T11867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.831004][T11867] ? do_vfs_ioctl+0x226/0x13e0 [ 389.835791][T11867] blk_trace_ioctl+0x245/0x320 [ 389.840560][T11867] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 389.845953][T11867] ? find_held_lock+0x2b/0x80 [ 389.851167][T11867] ? __fget_files+0x215/0x3d0 [ 389.855955][T11867] ? hook_file_ioctl_common+0x149/0x410 [ 389.862172][T11867] blkdev_ioctl+0x17c/0x6f0 [ 389.866720][T11867] ? __pfx_blkdev_ioctl+0x10/0x10 [ 389.871787][T11867] ? __pfx_blkdev_ioctl+0x10/0x10 [ 389.876834][T11867] __x64_sys_ioctl+0x18e/0x210 [ 389.881619][T11867] do_syscall_64+0x115/0x840 [ 389.886210][T11867] ? clear_bhb_loop+0x40/0x90 [ 389.890889][T11867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.896800][T11867] RIP: 0033:0x7fa09d19ce59 [ 389.901217][T11867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.920823][T11867] RSP: 002b:00007fa09e0f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.929232][T11867] RAX: ffffffffffffffda RBX: 00007fa09d416090 RCX: 00007fa09d19ce59 [ 389.937197][T11867] RDX: 00002000000002c0 RSI: 00000000c0481273 RDI: 0000000000000004 [ 389.945219][T11867] RBP: 00007fa09d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 389.953214][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.961526][T11867] R13: 00007fa09d416128 R14: 00007fa09d416090 R15: 00007ffc64e18a48 [ 389.969500][T11867] [ 389.972595][T11867] Kernel Offset: disabled [ 389.976933][T11867] Rebooting in 86400 seconds..