last executing test programs: 10.628001795s ago: executing program 0 (id=3370): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) mmap$auto(0xa70, 0x1, 0xe2, 0x9b72, 0x2, 0x10000000008000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/vhci_hcd.5/usb20/manufacturer\x00', 0x102b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto_F_SETSIG(r0, 0xa, 0x0) getpriority$auto_PRIO_USER(0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x20302, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x7, 0x4, 0xde, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) 8.70067652s ago: executing program 0 (id=3369): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) clock_adjtime$auto(0x17, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=&(0x7f0000000100)="5c7624f721e558be96aadccc7b1815a722552d62bbd3af372e2609e66be2a1c5e85b7fe2a116f15209d2001ac6f63213c58bfc64eca49d5df81d3b3785ee21579b1370f442890c1c2558fb9d569b5b05d0b13777504ffddec2cf69799ec9600049d12264eef9f1cbc27437e5f0c370db838a453c0077d7a53dd6b0dc3d10256637ab3d4031", 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) 7.020607764s ago: executing program 0 (id=3375): mmap$auto(0x0, 0x400008, 0xdf, 0x8009b72, 0x2, 0x9000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(0x0, r0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r1, 0x4, &(0x7f00000001c0)='\x00\x14\x86\x12/\xdd\x1d\xd9iu\xd7_\xd8\xde\x89\xea|d\xac\x11\x06\x9f\t\x9f\x91\xeb\xaf\x8d\x8d$\x19\x13\xa1\x97\xaey\xf9\x1b_g\xb0\x8bN\xe1c[\x01\x10\x97\xcd\xdf\xc1^(\x9b\xd9EC\xb3R\xdfDC\xcdt\x17\xefS\xe1\x85\x8a\x87f\xa3]\xc0\xac\x86\xc8*;\nD\x92\x9f\xf3\x90\xb0\xd8Y\xbep\xb1\x14\x89\xb1\n!b\x10\xedS\xca\x8c&\xbf\xca\x1d\xccnw\xd9T\x044\xc6\x96\xfc\x02j!\x00\x00\x00\x00\x00\x00', &(0x7f0000000140), 0xffffff9c) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x80, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f00000001c0)=""/164, 0xa4) ioctl$auto(r2, 0x540a, 0x0) socket(0xa, 0x5, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x80100, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) 6.296026364s ago: executing program 3 (id=3380): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) readv$auto(r0, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) 5.461050541s ago: executing program 3 (id=3382): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x10) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) userfaultfd$auto(0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x800000000000001, 0xc, 0xffffffffffffffff, 0x15f4da07, 0xe27, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x2000, 0x4f4, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x200fffffdfe, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x1]}, 0x0) read$auto_tracing_total_entries_fops_trace(0xffffffffffffffff, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.197790413s ago: executing program 0 (id=3384): kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=&(0x7f0000000100)="5c7624f721e558be96aadccc7b1815a722552d62bbd3af372e2609e66be2a1c5e85b7fe2a116f15209d2001ac6f63213c58bfc64eca49d5df81d3b3785ee21579b1370f442890c1c2558fb9d569b5b05d0b13777504ffddec2cf69799ec9600049d12264eef9f1cbc27437e5f0c370db838a453c0077d7a53dd6b0dc3d10256637ab3d4031", 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) 4.829277753s ago: executing program 2 (id=3385): socket(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x14, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0xa7}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x4000000) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.174989182s ago: executing program 3 (id=3386): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) write$auto(r0, &(0x7f0000000500)='%[\x05\x00`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa31T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\x00\x00E\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x7) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x10) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x25, 0x4, 0x2) userfaultfd$auto(0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f000000ac80)={0x14, r2, 0x401, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x800000000000001, 0xc, 0xffffffffffffffff, 0x15f4da07, 0xe27, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x2000, 0x4f4]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x1]}, 0x0) read$auto_tracing_total_entries_fops_trace(0xffffffffffffffff, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 4.124758251s ago: executing program 1 (id=3387): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0x5, 0xfff7fffe, 0x6, 0x7fff, 0x0, 0xffffffffffffffff, [0x0, 0x4, 0x2], {0x4, 0x122, 0xb, 0x2de, 0x504, 0x101, 0x101, 0x6, 0x7}, {0xfff7ffff, 0x2, 0x52, 0x5b, 0x8, 0x40, 0x76c5, 0x1, 0x8000000000000000}}) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x40, 0x0, 0x110) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x1, 0x0) process_madvise$auto_MADV_WILLNEED(r0, &(0x7f0000000180)={&(0x7f0000000440)="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", 0x80000001}, 0x3, 0x3, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendto$auto(0x3, 0x0, 0x3f, 0x101, 0x0, 0x1c) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0003"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon13\x00', 0x440, 0x0) socket(0x1e, 0x4, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x20b82, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x2, 0x17) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r5], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc7c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) sendmmsg$auto(r6, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="21002eaaa98e3400068004000480"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$auto(0x3, 0x541b, 0x38) 4.057792185s ago: executing program 2 (id=3388): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xa) keyctl$auto(0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x80003, 0x300) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000080), r0) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ILA_ATTR_IFINDEX={0x8, 0x4, r4}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xf}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfffffffffffffc01}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000814}, 0x20000000) 3.540653778s ago: executing program 1 (id=3389): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20401, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000005c0)={@inferred=r0, "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"}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/devpath\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000540)=""/68, 0x44) r3 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_on\x00', 0x488100, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, r3, 0x28000) shmctl$auto(0x3, 0xc5e, &(0x7f0000000480)={{0x2, 0xee01, 0xffffffffffffffff, 0x0, 0x6, 0x1ff, 0xfff}, 0xd, 0xd, 0x1, 0x9, @inferred=0xffffffffffffffff, @inferred, 0x3, 0x0, &(0x7f00000002c0)="d05aaa92ee7c0bb5155bc66b7057f9a20398ad95deaa0db96f19bd3141d9c07686eab8b9b003d9e75bbf0978b6da7a425685a8a48ccb8ed2ebc3964b63e0ef94ffea356bb0c4fb4593bddbb77ea8654d545df18b352167373c325c410facba59927e042e4bea3d28a0db3a09361aa1cfad43beaf855ebab811fd116a9635ca23abecaefdbed4dc151f5ba459230edddd361d7f6a6d614642b44b2c06cccf382656cc8bbc01048913fb18ee5c519c2732b3482d4d60828f03ea5aecf3ece68a380fde415ab9", &(0x7f0000000400)="56604975342035efb8055535023bbdaa9f9f684cfad8043b2480cdc918f1455ef2352d78a77fa3d9f23aff50a3f6d439ab6f3c94c1e3eab8db0bf6049b1804234c784cdabe258bf11e493e274fa51a993f2f3596da21236699bc6aaeadcc50ccbdca0c539cf27ee46187ad9257268128a923bc4133754c8ca7"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) readv$auto(r4, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) 3.540176961s ago: executing program 2 (id=3390): ioctl$auto_BLKPG(0xffffffffffffffff, 0x1269, 0x0) read$auto_evdev_fops_evdev(0xffffffffffffffff, &(0x7f0000000000)=""/81, 0x51) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x124, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10e, 0x2, 0x0, 0x1, [@generic="cb2d7f2d4e09de96b18b923422f7cc1c1f180a7fa13de944199a9b278d53233ba9de3cd549161870b1f3db03524cbf5cfcf7e840740a5a7d655d673ad1ee0d6be4cdbe362b80bc7de2331c73e4", @generic="60a612a4f79f2b17715a107759eb9bcb5b4181325742984da9726b735fce7bf384502ea3517d5b032f8bdd9c20a0e373eaf4ab704a1864c5c72ac0918f4c788b420f35bbbce8ff13d6926f2d2f67740c8f77af5fd9eacaaeeb9d5290", @typed={0x8, 0x5d, 0x0, 0x0, @u32=0x1000}, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0xfffffffffffffffe}, @generic="7fd1de4b6e1898156af7c5128cfa70f5b87e48ee1b34b4bf8af11076f287dd41725994e157776688c2a582acdcb0b7fb631018a792b2818f69fece9a4932d714bf2101da9b0cda223a124cc2ce"]}]}, 0x124}, 0x1, 0x0, 0x0, 0x801}, 0x4004010) socket(0x26, 0x5, 0x8a) select$auto(0x5, &(0x7f00000002c0)={[0x0, 0xffffffffffffffff, 0x2, 0x10, 0x9, 0x6, 0xe9c, 0x5, 0x7ff, 0x10000, 0x2334, 0xdf, 0x9, 0x2, 0x1, 0x9]}, &(0x7f0000000340)={[0x9, 0xd5a9, 0xe, 0x3, 0x3, 0x1, 0x200, 0x0, 0x6, 0x8000000000000000, 0x2, 0x4, 0x7fffffffffffffff, 0x327b, 0x40, 0xadaa]}, &(0x7f00000003c0)={[0x8, 0x85, 0x9, 0x7fffffffffffffff, 0xf310, 0x9, 0x2, 0x2, 0x16f0, 0x7f, 0x1, 0x2, 0x7, 0x2, 0xffffffff, 0x8]}, &(0x7f0000000440)={0x4, 0x3811}) getsockopt$auto_SO_LOCK_FILTER(r0, 0x4, 0x2c, &(0x7f0000000480)='TIPCv2\x00', &(0x7f00000004c0)=0x200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x6}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0xd6}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x5}, @ETHTOOL_A_FEC_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44880}, 0x8010) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000680)=@query={@target_fd=r2, 0x9, 0x9, 0x132, 0xff, @prog_cnt=0x3, 0x0, 0x6, 0xe3, 0x6, 0x5}, 0x1ff) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x8000000000000000, 0x8e3, 0x3ff, 0xb) ioctl$auto_EVIOCSREP(r5, 0x40084503, &(0x7f0000000740)=[0x4, 0x6]) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r5, 0x80000000, &(0x7f0000000780)={@_si_pad}, 0x4) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000800)={0x0, 0x1, 0xd, 0x0, 0x1ff, "c01ebd4d8cd391c95093dd42"}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000840)='/proc/irq/24/smp_affinity_list\x00', 0xe001, 0x0) r6 = getpgrp(0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f0000001fc0)={&(0x7f0000000880), 0xc, &(0x7f0000001f80)={&(0x7f00000008c0)={0x16a0, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x12f8, 0x1, 0x0, 0x1, [@typed={0xe0, 0x14f, 0x0, 0x0, @binary="2f718bd72804e6f0fe7249d7ce672ed24cc5fc0c9d5818d4f8df74cf3d23fd8deb633b61ed6040b8475c8b7b2115bce947ee5163295352aa3102a5144b341a91283dfdfa1017cf07a4ec3408cbd9b4e567a5c4b439c0dc0efaabfb11789138c6b4fb975a2dddabd36a96c089a9bfdd0552a66027038517b8fc4120f2d6ed13e55977a52a685ab76892f51f26851e692e0a24c3a593627e71f39cc0c9415d4f79d8bb0f8d610edf624e9c68afddfda7b868e43a04cde7bc5ec5f6c67aa80f16a03e4032ee386ca3f5fa8d9801531ad44b5aa1ee400deebcaa39d6eb67"}, @generic="f1e3ef8aca0eaaf6d2c70b070f52c2b9bc72b1fe003e5983631374cb4699b1774a158a81053430d372a9383bb52ba72e1d3c5f96aefbef93455f073ea8e0fec4f8fa0b9d2715061baf15a871ff1d2ccbb3913c77aa0aaad42767a52a1fcabf3ca8cb7c8f4ea3912697a21db77758c6639324274201a1938ee4a92ee419ba4444be40542cc38f326d11461df17be8ccdb4221bae944aecdd31490ffe8d1a36ce9e2456ad6f8401cef1f26a7c54a28ea8fcadeb75bc30b015e7267c0a9fb85a39365c05595782ea990da629d6a4c478ab812afe72e09d57b90a3ae0afc9a9a221d8ae9be6e70f0574f4d6f129d9e33d2ef421fc2fceb9a15740b0e02cb27a923c527c1ec88b7755e1045d224a28b199bbb30b48534fb6f49a646e4fce8244daca72e4ed32af9c05d17d0efe70694962c8fb9862269cf011fbc587c1f8a4fab33e789d85524fa5011fe2c0a391a69bb315cd1f8b0137796dd49adeeaf0b3d176f4b1d5387d7823186961413b916ed523c42df6e5cf2062c33deec6a70ff94a6c9523bbb290d33ff14dd65b3115db7658041515c996c00bc6fa63d4e6a1a7e674b073d3082faa18c0b584e36a6bcd21892bd4c0c99bd812943c2046b5bc1567366e78adaf6866267f836663e40758f622a67489e8031a372daa5a152f4d631014321123f8c9302746b3c194c6de801ed4182448d6fd5266c317842245d2683f8aa7719aa7a7a647d90349a912d6bf932cee76bbb236bf9aa111ed98730731b63d5ab4991c264974a0bb25624e2a3a08d32e6abfc359089bfb7239279fefda7d3d65f7ef2f3c65fca8eb8bdab96f4d5aa4d212897c712cf3426fd66deda48c2447c223fc0837a22218caf10b8f5be5d00d02bbece528716dcb5e9aa89deffaf9fc986586aef622637ffa58724a5252b3cd5e68f9b52d7092393593d6df1b93eb529793c5cfac18207d71fbbe5bf6a38aa33fe997aa72c054c6032bff460c58692553b88c89be7601350da642223d2191dd6f90cb11df728f6f6dcdf95225a30d3a7e9a89ccb44c1d5e0ebecbf436fbefddd8543cc28d041d04780cd19353f8b6dd624c8af636716435c519ee9e9a84f6d877556d1053e8666dc029b5b3a28f09dc633a7c1509b9aa33aeb8176f17cbba51ce75a31c0cb3913daaf6061207c3ec2aabcd06a6aa680e10e0493a5179c3079c2197e41efde61743e9ac7c077be9ef97074e3141f7e872d456ccf8a8065625d00acd7c4f57ee96bc8d3940da11a0b09a7ff7a91f94c4873f486d891907296dc2f830c7bd3bf6346f35721a7aff5d15e235ebfe4bf4c271a22bf6377875b756f11fb71ec7071575f50840e6af0fd81a7f6505221512a5e8ce27445790b4e18c2d535a9e5bba21393f13c45d521b879e36f11b535be50f73cd45c90f0f3d9bfb015f8464209cb01317b1d3a56dac2d709051ab5c5c7ca5c4c2896b673d508581e2b2330616ce591590560bcf9aa401bb555114f4c5868a67e9d4241dcd1ca8b1b050ed228f2f30e7448dc3d754c237efec72e26e6c4c33fa54ff4fccd4922698045ee493f3f9113b2595029f0cb9a94dbf1dcc3f9bb545bf1a8d92bf42b71f16ce0db2f06801929994b1ef3fffe9cc93708493e99298dc9f51d1ff776b141a73df053fbb022820bff9787ffd78e37456d3bad75ff42338af2feb103b89b859f1e804cf686f78e814e18889d3dc049a0f19251bcf4669293e40e603d03294efd51d3b51ea4a8680713758dfd2479bbeee2492d9f9947e2d912397861eafa4df44ecafead070dc8748a9511c982aa328fe929515440038bd3d8513702fac1136d0a079f945df2cd16bc7fe88b17395b9aad59b3ebcb48ccf8e1346a82e0ccc45df2ae62c26d44805e9c5b7cd86436029e3204aeab9d6cb4c9ee60359c81e40b205b830bfb4eb7069387251d0d310dd58f40a40e9dada656d46f03f73a13981a081c5047aec93742ba38f44435651d1c0eb79f879c80a21abc6484cc95e57cb941e51e627aff6563a0a4a57e8017f3f00452f9c0bd6556a2631a042a2c1673beb10886baee64dda3a8c98cc5717a76397e0f93636015057fbbc6bae8121ea322a6a09e6916b17350fd5bb7a36ede1e3557a5504d4718f0f0dbfc994e1f8d9610981d6555a97359aa28cd6a5a1f10dfcbab18ad89e36c5435e3964af98850dd20a1a0e49b3dc4b25bea235d5fa2f3f742bb645b59c0e6885059f931c4629766521e6fe20398a76d5c60e91e793fa49845a8cd04649781bd3bbc32f8ec6dcb3df5b2b32b4bf0b5686ee5450b9b8c7644bb14267539d1c3181453bb1edc90e23965f3ba63d56f099237afdad0c0f1e553b4cf5d2e9f940631ddc0577a35210730a83813c671af8f73b18f0541c242e208fab8091445493fc2a509f098a14cc93a5d704a414300fdf76955bd6b2d1af7b00899a2e54ab3aab9399551a2b7ba9dec68a65febc36ae12f2e1807e5ade711ba6c5aafeadc03403f3c461b7aaf191f20c67348f94cfd699afcf073839826aec5dc7ed3cadb55eba6e39c277e6d13bb957fea2b64a310dafbd583fb1ee837489a7e1134f2a08fa4574540f9849a62cc41f5948f197afe684e8f63cf862fe8dc525434679d829ddf8a476f99617f6339f18c9372cbb16ca54a32c65244c16e18fecddedc047f8bf4403b46367d0e954d8ab1c61bc60996c3902fd1d2a4a9f3c93ed4134d6e4fa0b7d68a19e34453a0bdaab1a67ebff00cd886907a1cd453995709cedb3cc2720e1c433d9fef3add4326ed29553c140f930145552c2f0da6d2599ec99d1558def0a653cbd958b4a540b312b824eae99313eaec73718995d81dd7bafa1f45e688430cfbeb939dd47b9364cbfc52781264db68a4e0e0eb99fbc70c0f24186d08b6b1540cfe16f49dafae996d76e5058eb940338f4fac29edf0e889f5148f7d8ec5b9155ab79c3de33106db6b411eaf9d095202f454a1f89cf2798101999ae5dd6092ee592a8cfc1da6bc7fecea729abd46f5f68ab214d9f4819043059da541fcae1ec0da2dc8104ccc124c389f6dc37742443d4f2b5fa4961f018c904516217586ef1f13ea2802970641591b5c43f65107f70e143773375c84f73902527faae35772ca1443c37208421fd74dbc810688b227778a2983ab8ac65487e20250cb75e5d3ac1598114a0b9e880cbe928401eac7e882de02a6a919a68a9467e11652897e9945c8accbecbeb6e04d80f20ee6b79617b7bd8af0d45f165d9b5e830566be5ca49e0dadd0798ce5c401697f6f59b009b4a8bd61bc8121b8a65fa20718ca4f4163f96d24a04fe0a78ed5f29b737b41f8a6e84473bf81ebcb43c147c5f0088ca049913f3b701ca7b611994775e19331dbca2dea499d0f944354825c6abe3d7613329cd927da9347073d26c3f0c809e40c8919965d28e7f98415acca4ad4606307e69b839025e33ff8ec438124d4309b73ef3eae76b9ae3180e293ae50c4e078eee6815583d0d5b7c0bee9c696c54a5b4ffdbcfcdb960734765a1da42c99868613a668b3d16000ba2014de39a91d16d50ca863dbe76ab5f4fe67c7e0d2e0f2508b7fbf0cf7e6ebfcba6334450d60d643965720d542c8a040580ee91b5c2fd058c6b35bf45d7a2bb1a23d4bc5b4c01a76515de9f33adcde1f5f3f63ca0795c738a1b0077497ba7126616cb817c7f1025d632c4f6ddfad3528fe7f48d011e15a038405a2d3d71093fc7e2f0ebd9a3e036d6809ed72202609176ec320be60e2ea4ae32fd62c013d3bbe43ddc1f842704cf6b646c1eb8650c7833091323a526d57cf9d21e4d0329b0c19ff5f80ede9fa7169b60adaf02488c1d6b87aeddc1c0ab1902d6249683a73d654ee00cf7e20ea81276de47133695cc5564704c3866bd7c1f97910d7eac5ece3d346c393bd12ef11c8cb51f6931375f620bbaca4234fca939dc52bbc4d03e902bc3558832324c831f9479993f6802e436ff4f36686c5b8432eb6616c6498b5d1e25f2f5ba59d62b7837f3e3e85770905f1052a204d157f35004afe73820585e77ca86cfdf64f087f8f21238e0a1b40d317b0f5d39a2d1a7a80f7a8f5fb38cc6cec084bff3adef799f11b3bc32cc4ab6faa5a1a8e92c301fc5f1206179b429ab3efdc6f2ca02dba93f3fe8ced37e8825ff365a280c8100dbf8e59b0b4e68bd6316e120583ceaecdaf50768665578fb486d75cc1a746def28712b3474a1560412f78e752c163beb03b8c5b5b4d92054a071aa9705c3a3d5d60945a0abe980dfda4cc936ec7b34f75bccd8393a63512ade567e9f38dde91725318ae67d486b9f7b5ef0cff2ec8f87f66068c03da3307b21b829fc906d4e8054020e0c9ef16c755e5032eddb9fd4b0f13932b735e48faa0e9473d7dd3883e23e9ca29e7f210e578c32506e463c96b2c5442a9adda5aedba7ae6e46f4dcfd642590a0ee03086f0063d8e7be53be1fb045e11d8187e37c4d90cc4faf1675b69af4f5fa4773020a7ef5c12e7a6e04252de784ebdfbfa517721b9132e3f3a3435f5f234a3060184f259a8c05f1db947b9136a22baa81d9393c1fe30ed5ad595af08d13356185a3c6723b105076a7f4184e160ef1ca1b96a3c6a589d3b08102245a9fa1fbc31874ed040084af86a699faa895417db1bf545e9d580d45ec6a91a21a6445aee6764d8d01ec6e5c669e077d803dc09238858f90e7bcd6d69fadc4ad3aa109468d56b15a6dd070a826e4827bf692cae0452fc58738cab2d07f26425d50c098ca3035d2334dd74300ad13ae67750ebb51b207b0586dc987ed2aa08b393ffc9196e65fbde44ef77b03f68937198083ba1a4a1d7b0b533763281e26b00993f321572447c17ec95bb6cf4569705be2033cf9de3fca829ace1623d07f4f5c188dec24d317effd75f9d627f2c36893cb584145732101cc5c67159b633b8e762349462cbafa4565f00ad067ced94b48c48f9ec6f19451ee8d7ce0b2095fd4343814072f6333cfc05ef5a340d68a93edcd89df9aba9696fd02f346ded78337aac6a17adc78f02811b1b4493dae19457e7d0f7bbe054bef48c57f623a66dafbe695f1590516d9eb83a3df3b5c02b5d9afa0f376cefb568715fadf8b07adea9858520fe86b8c3eb0a5617593f9ccfa6b39a91da8c20493870d11a455d2398afcc59cb68991cf0a634fc3bcba47e00730033f905551d489803905f711679463c7b76d8281c6a93b89f059b37a5103be0b710add25d88d08c77b7d6ddf9eac8ded628a8eb5cb790f4e220ecd2e746a1d1602216ca8770278b6bba514682d1ccfc0ccb96c092f588b901230254ec3ef115b4ebc0456c7a4ae7692f6cc4a8f8e448fe64dca89e639f3aec0e44eab6b200d74f21bbcffe6ef185b41ebe028974479cdf33cf0c41ffac2e5cc978ef948ba6c0ec8d178cd256e5229643194b32edaf764460b8044dd33a9026173d5cfd8d26af34a0c94f31310bd8db2392db2ebed14da243f52ef39d760438b268f8f01be47d530fd937d9a2ae09d4e0d6ebb70645e9c75adfebc8f38422098f97ff0bc6040f88cf35d48b2274e9b5b0caa9359f5a4b46ab448d6e2b885e3ee09869f384c26dfbe5a3862d6e67ec2b2cb1c93f977460b5c4193a7661e6f4c1542b06e8ca24ae5626145d077d33957abeb86ba4914f55645feb3039ed6c05d05b310185ea653e941507376434cc386f359a35d6cfaaf2aff31dd5b8b0f661d3ffebd9b9ff90e9071e97ac46825f486499efa727bea6f699d7ff7d1c2fecf15c14bb2182b5abd1d994b8e364730fc9f3223ad2a6c8438e222121795881", @nested={0x211, 0xd0, 0x0, 0x1, [@generic="a57366185978fee6497c928b69f2b5e03b46656e08ddcb7ec7e897670f2a7be1eeda9d07e6d468e6d5e5684e5e2abd2687ff68a43024f0246ac5999b9dd098519acc1db278af6085baa67976c378e8e5c626f9c12d23f2a37f69", @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}, @generic="3ff15971424385f1650e3d27fb469ea65abf9956c5db99882a8079f007218fae7af7236892b68a5deaa5", @generic="5e65404d82856f9630cd487bcb27e1b56d3d24a1f8ed6b3e0a6c3f4512af61025cc67b5d893d6d19aadce4c381dd6612af09f463d6774268506bd7eec98f0718b0a287ed44bb58acad5b3ef34fb2b79d70554ad8ec2d11edf677261097ddf87ae2678df4a268656bef5b9919ab6880c8df36f90813a00467bde89cfc7d6ada8aae85dfaa38ea2326", @nested={0x4, 0x79}, @typed={0x4, 0xe1}, @generic="8b3a733e3c5657750fdffd899d9f6d06aed890edbc8348cd29aa63423817f731d19d51b6ced23d3aaf9f383b83d64ef328ccac26e5c964c8508156cc54bdcdeefa2e52192e3df8aaf70582da326799dee2a3e55ddba54f2e8f02c03df61bd1eee1d8185d5fc0fc44f04bfbccecd46cd6e0c4502e9ac1cc3d3923c659f36b9308e41997f0d4abd6b97264261c973cdd447dfec245b1c5aee82f348d260c1071966cf10121bc0f693d1ef36603e0db745a4a8bb4deaee028588e46cda5a7b97fa5259c46872b4df6ba8a8deb97b81f3eeb043c6457c91498a9956f9f608c7c7c685b049e5765", @typed={0x8, 0x14b, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x49}]}]}, @TIPC_NLA_MON={0x102, 0x9, 0x0, 0x1, [@nested={0x20, 0x16, 0x0, 0x1, [@typed={0x14, 0xfa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @nested={0x4, 0x1d}, @nested={0x4, 0xb9}]}, @generic="9348c89ed475fe844c5691036b17821ec6f208eaa5031c14921c05cbbbdcc821f93836a0dd7d69f900d09eb129777f94fa852c3faa83335ced7a275c1de239b913e16eabc5c2f1fc779a43da5ccddb4528d936551cd5860895feffa78b7ea6b46e8da652cc442e5dfac9e0bc81262aac4f3943b30bc948b16c1164a7b3c6705fa51c8de9b11316a87c581de7413b8c95760fa71ea954ef53f3abc455092e53d9eaaa8cb4541219e6c9efd5f49220b09f6f9fa07e3046b5d9c30f3db5fc103095209c952dc49aae45e33e8dfe2cfd78b0dd5ba2f2a351", @typed={0x8, 0x38, 0x0, 0x0, @pid}]}, @TIPC_NLA_MON={0x17f, 0x9, 0x0, 0x1, [@typed={0xb, 0x133, 0x0, 0x0, @str='TIPCv2\x00'}, @generic="89763139b1ac915d5cccdb69e57345523b73e2053225e77fbfee604f4870554b22bcfa4de52f6ebc998d1a02d098717224b4cb5d22cc7cc496f2db47e57cdcf993675022571ccc408b5adae4b1196348dd2c5cd0df1a7fa0b6021d0ad52a99734c37a675ea6d165c074c7beba5b988733fa1b1043ebf190e5642f368e673009ca7765c519685a9557b5f9d2ad20943a980eef05a267b1b629806ea75c4aa9dce2abac685bfe4ace512199890f7de1190953087733055a3b4a3734908", @typed={0x8, 0x117, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x5e, 0x94, 0x0, 0x1, [@nested={0x4, 0x54}, @generic="cf6dd62b85604cf68731bfe0adc141078694a2eaacc889af8fd11635fe3e736a8a510173a54b1f762cf10a5bc07df6bc6042b543f8e09d814c79696559fc5db6f904348663d099caa138", @nested={0x4, 0xa}, @typed={0x8, 0x51, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x27, 0x0, 0x0, @fd=r2}, @generic="711debb83820e3fdde153e76684c3992ef39d238cf6e7423dc5a66f1a89ab1d5dc704285d5d6ee", @typed={0x8, 0x42, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}]}, @TIPC_NLA_NET={0x10d, 0x7, 0x0, 0x1, [@generic="be8c3864b9cd061e9e30ddd5c38e823d111125dacd209842716a770e6e9c326c6307098b51aaac07ad973a41fb8c56f26707e42054d50c31ed6aa3566e73c14b4501324d9da95781b739b45e0f6dfbafb6a15462b72604428a2af9cf6469942573b33a849a20729e08d310b92572d448e9beaaf435102010e5eb84efb87120f42d3ebb70", @generic="e2482eb5bcf2589febe7dece15f53895acd97c56c6b56766d9c16a8d1d1db97f7d801c45d07e213f6fd2d3970f9fe916e072cbf2aba0e1e4cd0ef0dcd919886954522938fb71b6316800abd25f53d13e0d954f7f1abc06bc7e51a10635611dbc6aca0b461170fd2a6598fe6d211299caca6f899235c942ca82740a0c7a4e7f213de86f4cf1"]}]}, 0x16a0}, 0x1, 0x0, 0x0, 0x40480c4}, 0x4) mmap$auto(0x7, 0x0, 0x6, 0x14, r5, 0x3) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fb0\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000002080), r5) sendmsg$auto_KSMBD_EVENT_STARTING_UP(r2, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x420c6290}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x14, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000002180), r2) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0xb8, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x67, 0xbb, "f254c84f1a0c031819389ea9b199a53d3fbc2319beed2eedc1b58bf09adcf03881da86bd6a53c48b14994a1c2786fa14371c1795b7885f47207878f2322f8fce19ec4c3f66701d937368c0af62784511e84403c62526debe80c82ccbfc84c4e52f378d"}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0xfc}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "cd509a263435419244"}, @NL80211_ATTR_WDEV={0xc}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44008041}, 0x4000000) modify_ldt$auto(0x0, &(0x7f0000002340)="db9086642f57fbdba7e632d3be25a4cf53dc5cedbff76518e7a26aa8b6ff460d7f7f21da6c0d386cf5d64edea2117439ea61d66960380f7452e751ca40772b7c38dccd0486ce2a8b22576c70ecb947d5cda73431625d9e9a26bf1ed6b6ef4ab8ce065afb27ed2404ff9febec1b23ee07fd03d14ba4f647fd888dcdde1cbe2733004893595a", 0x7ff) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002440), r5) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002400), 0xc, &(0x7f00000026c0)={&(0x7f0000002480)={0x224, r8, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x128, 0x75, 0x0, 0x1, [@generic="9c62e29b7f54d56ad4db14dcd9b74939b45932ca365fd069897cbc51c750b7226c48acd7", @nested={0xfd, 0x101, 0x0, 0x1, [@typed={0x7, 0xb7, 0x0, 0x0, @str='\xde^\x00'}, @generic="10b95161", @typed={0x11, 0x6c, 0x0, 0x0, @str='veth0_to_hsr\x00'}, @nested={0x4, 0xcd}, @generic="341a25ef9d4eff36adcbdeb75fcbde90da05313db7037922485cb377f1980809e3d2521729dcd1abba1d65562baa36edf82ef824ba521a247e8b9c689c5cb33651ac2028f5e6174d127d329ed3298dbcfeb0f44f83988f269d8d6c6fff3719bb1dea789b7a1059ad26eabab92d276a44816129a6c33bdcc60055ee09dbfae85bb074081fcf6a080e330324d7ff09a21b1d75b76dc7e869572b095b9d42554fe246e8b1f315baef06e05fb42ed3453d57cbf1b0b56ca114d044f8a7504278f89c2d9e44b37a62978eb05b7bd190", @nested={0x4, 0x149}, @nested={0x4, 0x154}]}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xc6, 0xbb, "7efa590f6dd929a0ab4f2c9ba18c224dac6018261fee895ed05a83f80f0683c34e31309c2797cb3aaf1c157469486264bbee0d858fbe63d87b5934cc866204972ae9cfdabc4b0a55127a4a7f3c652e0711525cfa44d12b420262f450b90754807c753a01f6e912cab8e4d09f9af075bd3a3fae453756c6459f01de83394942272919e1b2194e085ed726997b6126140cdf92ea33137e7a621bf6582d1332a30fc31a2c91231b7889b86cdeb055b496297c5f1476154731444c6fbaf40b5a0922fb15"}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xcf1f}]}, 0x224}, 0x1, 0x0, 0x0, 0x8085}, 0x8050) modify_ldt$auto(0x1, &(0x7f0000002740)="940a505f9f3dc007da80195867cfc847b90a0cb8afb242380f887115d8a958f2547305cecd61d3f6327dd7d2", 0xd028) 3.088818117s ago: executing program 2 (id=3391): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) readv$auto(r0, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) 2.600993287s ago: executing program 3 (id=3392): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20401, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000005c0)={@inferred=r0, "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"}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/devpath\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000540)=""/68, 0x44) r3 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_on\x00', 0x488100, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, r3, 0x28000) shmctl$auto(0x3, 0xc5e, &(0x7f0000000480)={{0x2, 0xee01, 0xffffffffffffffff, 0x0, 0x6, 0x1ff, 0xfff}, 0xd, 0xd, 0x1, 0x9, @inferred=0xffffffffffffffff, @inferred, 0x3, 0x0, &(0x7f00000002c0)="d05aaa92ee7c0bb5155bc66b7057f9a20398ad95deaa0db96f19bd3141d9c07686eab8b9b003d9e75bbf0978b6da7a425685a8a48ccb8ed2ebc3964b63e0ef94ffea356bb0c4fb4593bddbb77ea8654d545df18b352167373c325c410facba59927e042e4bea3d28a0db3a09361aa1cfad43beaf855ebab811fd116a9635ca23abecaefdbed4dc151f5ba459230edddd361d7f6a6d614642b44b2c06cccf382656cc8bbc01048913fb18ee5c519c2732b3482d4d60828f03ea5aecf3ece68a380fde415ab9", &(0x7f0000000400)="56604975342035efb8055535023bbdaa9f9f684cfad8043b2480cdc918f1455ef2352d78a77fa3d9f23aff50a3f6d439ab6f3c94c1e3eab8db0bf6049b1804234c784cdabe258bf11e493e274fa51a993f2f3596da21236699bc6aaeadcc50ccbdca0c539cf27ee46187ad9257268128a923bc4133754c8ca7"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) readv$auto(r4, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) 2.598374764s ago: executing program 1 (id=3400): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) readv$auto(r0, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) 2.331319381s ago: executing program 0 (id=3393): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800, 0x800000d) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/admmidi2\x00', 0x450481, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x5b020f7d7a84fe6e) unshare$auto(0x40000080) socket(0x2, 0x3, 0x100) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74bec700", @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf2554000000050060000000000005001d00dd00000043032a00266588d8804fd89fe7ad92e487f3faa62c3b57331a027d1dfe7b53c02b0ccaeb2ebefde8b1cbc734e5ac5dd332a51da438234e7d570d2bd6ece31410a98c9515fa4ec838636e5f856bb42188e12283079c2799890c0492d7e95e19075904042cbb86ecf69e27efb03ee2e1310ced4e34f6803332bdef77c1c17ba4c5a62f116584ee2e2c1083bf380c23e592b553feee95e9b0e62bb86034b8bbda7662ffba2c30a8434235b37166c06725819d63578bfe042da2e673b32efae8f303f495986c17a9d195da728f784a54607b3bd483c2cee60c2f88238aa1bc3bd9a0db24f3ad1c4df92262b4832474466b401a98eeef3badb53a6f446eb48ce32afe1fe8f9579a37ed9403aa5f9e3e111fd342d23a12c1e0a97ed7c0cdbf7dd8fa8a66053202f3a9d75afbb8e9c6300aea72b209c0e6b13b3b5865f5299c65d060ea3f294f5b9d793f944d4842aa7ad4ac3802eba33f08ce17cd840991f76c2d4f94437245f967e137075649e9c14b17990601c29ac91218251b46cf88c1b4a6394bf31a323256ab9504240f4378682244ad977af34f21c833ae032684d4bc5d0e3f46803862e9daa9972e13db5f3ab727540d34a4791583f203b5c2393095cb01e03e78560cdc34d17aa13a122fb82cec8d033ac3966c17d43f84b4b586d3baa456f4c97e577da851537725de8b2d142d9dcd653fbc7fbfbb5bdd347e2ae5070069f7c49fff8905b36f36415e4eefb4fe5a3c7beea0df89d859088818d9012638d2e9cc6f45d594f9c62fc6c1e8cc48a08ba551772bf11a28c1254426ee77f96efa92d189e412419d2dd63b993dac239638f43dc41c04aa5ffaff1b56fc1a4f75dcafb3a7c9a490a7981d5da978a5ff12d6883e187234bf14510ad366e83d9fd8c413ccadc9881000d7e60e046e6e11796bf110be6a55a429ed124fe52f5c7c33ed3a2d8fed9eea00961c63abf089dde5ef61c987d48a8364b69cc1ebc5be53bf805811605fff027a912aa573781377fc0ecd8cad4c8c0f668e6a18fbd3ab5cf193bd14a047859a44e4c243edc1a9b94c59aaf2b813402e8f7c0cd7599646078a909c88927064c202f00f4f9b3f920b899ecc4f509e03b6a799e3ea6f5937e3b7f2efd4e8064ab11fb2cc9701632e61a274a76d8e3d2ce1c381e9ba677e24a5e87bb098fe0004000b000500c200d20000"], 0x374}, 0x1, 0x0, 0x0, 0x40001}, 0x4008040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40006, 0x1000000000000e2, 0x9372, 0xffffffffffffffff, 0x10000027ffc) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mmap$auto(0x0, 0x400009, 0x200, 0x9b72, 0x2, 0x6) sendmsg$auto_SMC_NETLINK_GET_SYS_INFO(r3, 0x0, 0x18) pread64$auto(r2, 0x0, 0x201, 0xc000) r4 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim6/fib/nexthop_bucket_activity\x00', 0x90000, 0x0) mmap$auto(0x2e, 0x8c, 0x3, 0xfffffffffffffffd, r4, 0x8000) syz_clone3(&(0x7f0000000700)={0x100, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280), {0x1}, &(0x7f0000000640), 0x0, &(0x7f0000000680)=""/38, &(0x7f00000006c0)=[0x0], 0x1}, 0x58) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x400053, 0x9) 2.075518751s ago: executing program 3 (id=3394): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x800, 0x800000d) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/admmidi2\x00', 0x450481, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x5b020f7d7a84fe6e) unshare$auto(0x40000080) socket(0x2, 0x3, 0x100) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74bec700", @ANYRES16=0x0, @ANYBLOB="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"], 0x374}, 0x1, 0x0, 0x0, 0x40001}, 0x4008040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40006, 0x1000000000000e2, 0x9372, 0xffffffffffffffff, 0x10000027ffc) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mmap$auto(0x0, 0x400009, 0x200, 0x9b72, 0x2, 0x6) pread64$auto(r2, 0x0, 0x201, 0xc000) syz_clone3(&(0x7f0000000700)={0x100, &(0x7f0000000080), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x1}, &(0x7f0000000640), 0x0, &(0x7f0000000680)=""/38, &(0x7f00000006c0)}, 0x58) capget$auto(&(0x7f0000000780)={0x1, r3}, &(0x7f00000007c0)={0x58, 0x6, 0x8}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) 2.074880285s ago: executing program 2 (id=3403): kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=&(0x7f0000000100)="5c7624f721e558be96aadccc7b1815a722552d62bbd3af372e2609e66be2a1c5e85b7fe2a116f15209d2001ac6f63213c58bfc64eca49d5df81d3b3785ee21579b1370f442890c1c2558fb9d569b5b05d0b13777504ffddec2cf69799ec9600049d12264eef9f1cbc27437e5f0c370db838a453c0077d7a53dd6b0dc3d10256637ab3d4031", 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) 1.971183973s ago: executing program 1 (id=3395): syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x50, 0x1d, 0xa9, 0x0, 0xc, 0x9, 0x9, 0xb, 0x6}, 0x0) 1.819592619s ago: executing program 1 (id=3396): mmap$auto(0x6, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/vhci_hcd.5/usb20/manufacturer\x00', 0x102b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto_F_SETSIG(r0, 0xa, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121302, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x80, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x15, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 1.393498024s ago: executing program 0 (id=3397): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x800, 0x800000d) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/admmidi2\x00', 0x450481, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x5b020f7d7a84fe6e) unshare$auto(0x40000080) socket(0x2, 0x3, 0x100) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74bec700", @ANYRES16=0x0, @ANYBLOB="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"], 0x374}, 0x1, 0x0, 0x0, 0x40001}, 0x4008040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40006, 0x1000000000000e2, 0x9372, 0xffffffffffffffff, 0x10000027ffc) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mmap$auto(0x0, 0x400009, 0x200, 0x9b72, 0x2, 0x6) pread64$auto(r2, 0x0, 0x201, 0xc000) syz_clone3(&(0x7f0000000700)={0x100, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280), {0x1}, &(0x7f0000000640), 0x0, &(0x7f0000000680)=""/38, &(0x7f00000006c0)=[0x0], 0x1}, 0x58) capget$auto(0x0, &(0x7f00000007c0)={0x58, 0x6, 0x8}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) 236.491608ms ago: executing program 2 (id=3398): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/route/flush\x00', 0x80401, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x2, 0x3, 0x4) ioctl$auto(0x3, 0x800005411, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) settimeofday$auto(&(0x7f0000000080)={0x7fffffff, 0x5}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) fcntl$auto(0xffffffffffffffff, 0xb, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x1, 0x106) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) (async) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x400, 0x0) msync$auto(0x100000000, 0x0, 0x3) r1 = semctl$auto_GETPID(0x1, 0x80, 0xb, 0x8) prctl$auto_PR_SET_MM_ARG_END(0x7, 0x9, r1, 0x8d6, 0x3) 56.60996ms ago: executing program 3 (id=3399): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x27ffe) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) r1 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) timer_create$auto(0xb, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000a40)=""/4096, 0x1000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) listxattr$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0xf) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x364f9cefc8a0a83, 0x0) ioctl$auto_tracing_buffers_fops_trace(r2, 0x5220, 0x0) 0s ago: executing program 1 (id=3401): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x5ac, 0x0, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) bpf$auto(0x15, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) fallocate$auto(r1, 0x7, 0x8, 0xfffffffffffffffd) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, r2, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 21661] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2726'. [ 1146.979056][T21661] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2726'. [ 1148.086818][T21678] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1148.116477][T21678] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1148.145029][T21678] memcg:ffff88802984ff41 [ 1148.149484][T21678] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1148.160061][T21678] page_type: f5(slab) [ 1148.174210][T21678] raw: 00fff00000000040 ffff88813ff30500 dead000000000122 0000000000000000 [ 1148.208923][T21678] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff88802984ff41 [ 1148.279581][T21678] head: 00fff00000000040 ffff88813ff30500 dead000000000122 0000000000000000 [ 1148.309237][T21678] head: 0000000000000000 0000000000040004 00000000f5000000 ffff88802984ff41 [ 1148.473486][T21678] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1148.482534][T21678] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1148.533235][T21678] page dumped because: unmovable page [ 1148.540209][T21678] page_owner tracks the page as allocated [ 1148.548264][T21678] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 21638, tgid 21637 (syz.0.2722), ts 1146299315562, free_ts 1126383191369 [ 1148.570459][T21678] post_alloc_hook+0x1e1/0x250 [ 1148.578084][T21678] get_page_from_freelist+0xe3d/0x2e10 [ 1148.584111][T21678] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1148.664275][T21678] alloc_pages_mpol+0x1fb/0x550 [ 1148.703485][T21678] new_slab+0x2c4/0x440 [ 1148.707951][T21678] ___slab_alloc+0xda3/0x1ca0 [ 1148.712795][T21678] __slab_alloc.isra.0+0x63/0x110 [ 1148.730714][T21678] __kmalloc_cache_noprof+0x531/0x810 [ 1148.736474][T21678] ipv6_add_dev+0x670/0x1520 [ 1148.753967][T21678] addrconf_notify+0x563/0x19c0 [ 1148.759048][T21678] notifier_call_chain+0x99/0x3b0 [ 1148.764386][T21678] call_netdevice_notifiers_info+0xbe/0x110 [ 1148.770856][T21678] register_netdevice+0x16b9/0x21d0 [ 1148.813586][T21678] register_netdev+0x34/0x50 [ 1148.821544][T21678] ip6_tnl_init_net+0x2ff/0x480 [ 1148.862343][T21678] ops_init+0x1e2/0x5f0 [ 1148.871125][T21678] page last free pid 21399 tgid 21396 stack trace: [ 1148.881603][T21678] __free_frozen_pages+0x822/0x1130 [ 1148.887929][T21678] __put_partials+0x127/0x160 [ 1148.900470][T21678] qlist_free_all+0x47/0xe0 [ 1148.923983][T21696] FAULT_INJECTION: forcing a failure. [ 1148.923983][T21696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.943548][T21696] CPU: 0 UID: 0 PID: 21696 Comm: syz.0.2733 Not tainted syzkaller #0 PREEMPT(full) [ 1148.943590][T21696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1148.943615][T21696] Call Trace: [ 1148.943623][T21696] [ 1148.943632][T21696] dump_stack_lvl+0x100/0x190 [ 1148.943665][T21696] should_fail_ex.cold+0x5/0xa [ 1148.943706][T21696] _copy_to_user+0x32/0xd0 [ 1148.943746][T21696] simple_read_from_buffer+0xcb/0x170 [ 1148.943773][T21696] proc_fail_nth_read+0x1af/0x230 [ 1148.943802][T21696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1148.943832][T21696] ? rw_verify_area+0xce/0x6d0 [ 1148.943855][T21696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1148.943884][T21696] vfs_read+0x1e4/0xb30 [ 1148.943914][T21696] ? __pfx_vfs_read+0x10/0x10 [ 1148.943938][T21696] ? find_held_lock+0x2b/0x80 [ 1148.943963][T21696] ? __fget_files+0x215/0x3d0 [ 1148.943995][T21696] ? __fget_files+0x21f/0x3d0 [ 1148.944030][T21696] ksys_read+0x12a/0x250 [ 1148.944057][T21696] ? __pfx_ksys_read+0x10/0x10 [ 1148.944093][T21696] do_syscall_64+0xc9/0xf80 [ 1148.944126][T21696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.944151][T21696] RIP: 0033:0x7fea2635b78e [ 1148.944170][T21696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1148.944194][T21696] RSP: 002b:00007fea271bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1148.944218][T21696] RAX: ffffffffffffffda RBX: 00007fea271bd6c0 RCX: 00007fea2635b78e [ 1148.944235][T21696] RDX: 000000000000000f RSI: 00007fea271bd0a0 RDI: 0000000000000004 [ 1148.944250][T21696] RBP: 00007fea271bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.944265][T21696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.944299][T21696] R13: 00007fea26616128 R14: 00007fea26616090 R15: 00007ffc9b068a68 [ 1148.944329][T21696] [ 1149.004388][T21678] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1149.205869][T21678] __kasan_slab_alloc+0x69/0x90 [ 1149.210839][T21678] __kmalloc_noprof+0x300/0x9c0 [ 1149.243482][T21678] ops_init+0x77/0x5f0 [ 1149.247891][T21678] setup_net+0x118/0x3a0 [ 1149.252776][T21678] copy_net_ns+0x46f/0x7c0 [ 1149.272546][T21678] create_new_namespaces+0x3ea/0xab0 [ 1149.335359][T21678] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1149.342651][T21678] ksys_unshare+0x455/0xab0 [ 1149.347413][T21678] __x64_sys_unshare+0x31/0x40 [ 1149.354579][T21678] do_syscall_64+0xc9/0xf80 [ 1149.393517][T21678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.227846][T21727] zswap: compressor not available [ 1151.241940][T21730] FAULT_INJECTION: forcing a failure. [ 1151.241940][T21730] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.257600][T21730] CPU: 0 UID: 0 PID: 21730 Comm: syz.1.2742 Not tainted syzkaller #0 PREEMPT(full) [ 1151.257641][T21730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1151.257661][T21730] Call Trace: [ 1151.257672][T21730] [ 1151.257685][T21730] dump_stack_lvl+0x100/0x190 [ 1151.257732][T21730] should_fail_ex.cold+0x5/0xa [ 1151.257786][T21730] should_failslab+0xc2/0x120 [ 1151.257832][T21730] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1151.257866][T21730] __kmalloc_noprof+0xf6/0x9c0 [ 1151.257898][T21730] ? iter_file_splice_write+0x1d3/0x10a0 [ 1151.257940][T21730] ? rcu_is_watching+0x12/0xc0 [ 1151.257972][T21730] ? iter_file_splice_write+0x1d3/0x10a0 [ 1151.258020][T21730] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1151.258053][T21730] kernfs_fop_write_iter+0x26a/0x5f0 [ 1151.258093][T21730] iter_file_splice_write+0x82b/0x10a0 [ 1151.258164][T21730] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1151.258213][T21730] ? __pfx_copy_splice_read+0x10/0x10 [ 1151.258274][T21730] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1151.258330][T21730] direct_splice_actor+0x192/0x6c0 [ 1151.258375][T21730] splice_direct_to_actor+0x345/0xa30 [ 1151.258415][T21730] ? __pfx_direct_splice_actor+0x10/0x10 [ 1151.258462][T21730] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1151.258512][T21730] do_splice_direct+0x174/0x240 [ 1151.258551][T21730] ? __pfx_do_splice_direct+0x10/0x10 [ 1151.258584][T21730] ? common_file_perm+0x1ab/0x4f0 [ 1151.258638][T21730] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1151.258681][T21730] ? rw_verify_area+0xce/0x6d0 [ 1151.258719][T21730] do_sendfile+0xadc/0xe20 [ 1151.258763][T21730] ? __pfx_do_sendfile+0x10/0x10 [ 1151.258800][T21730] ? __fget_files+0x21f/0x3d0 [ 1151.258865][T21730] __x64_sys_sendfile64+0x1d8/0x220 [ 1151.258912][T21730] ? ksys_write+0x1ac/0x250 [ 1151.258949][T21730] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1151.259009][T21730] do_syscall_64+0xc9/0xf80 [ 1151.259056][T21730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.259090][T21730] RIP: 0033:0x7f649739aeb9 [ 1151.259123][T21730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.259157][T21730] RSP: 002b:00007f649823c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1151.259190][T21730] RAX: ffffffffffffffda RBX: 00007f6497616090 RCX: 00007f649739aeb9 [ 1151.259213][T21730] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1151.259234][T21730] RBP: 00007f649823c090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.259255][T21730] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 1151.259276][T21730] R13: 00007f6497616128 R14: 00007f6497616090 R15: 00007ffe3aac3b88 [ 1151.259322][T21730] [ 1152.850698][T21756] nvme_fcloop: unknown parameter or missing value '7' [ 1153.079161][T21762] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1154.469764][T21784] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1154.481401][T21784] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1159.019557][T21856] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1159.039771][T21856] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1159.877996][T21830] kexec: Could not allocate control_code_buffer [ 1160.040079][T21864] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2764'. [ 1160.049989][T21864] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2764'. [ 1160.674340][T21886] FAULT_INJECTION: forcing a failure. [ 1160.674340][T21886] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.743093][T21886] CPU: 1 UID: 0 PID: 21886 Comm: syz.2.2770 Not tainted syzkaller #0 PREEMPT(full) [ 1160.743132][T21886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1160.743147][T21886] Call Trace: [ 1160.743156][T21886] [ 1160.743165][T21886] dump_stack_lvl+0x100/0x190 [ 1160.743199][T21886] should_fail_ex.cold+0x5/0xa [ 1160.743239][T21886] should_failslab+0xc2/0x120 [ 1160.743275][T21886] ? copy_splice_read+0x1a3/0xb90 [ 1160.743300][T21886] __kmalloc_noprof+0xf6/0x9c0 [ 1160.743363][T21886] ? copy_splice_read+0x1a3/0xb90 [ 1160.743397][T21886] copy_splice_read+0x1a3/0xb90 [ 1160.743441][T21886] ? __pfx_copy_splice_read+0x10/0x10 [ 1160.743470][T21886] ? look_up_lock_class+0x55/0x120 [ 1160.743504][T21886] ? lockdep_init_map_type+0x5c/0x250 [ 1160.743539][T21886] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1160.743568][T21886] ? __pfx_copy_splice_read+0x10/0x10 [ 1160.743593][T21886] do_splice_read+0x285/0x370 [ 1160.743622][T21886] splice_direct_to_actor+0x2a1/0xa30 [ 1160.743651][T21886] ? __pfx_direct_splice_actor+0x10/0x10 [ 1160.743684][T21886] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1160.743719][T21886] do_splice_direct+0x174/0x240 [ 1160.743747][T21886] ? __pfx_do_splice_direct+0x10/0x10 [ 1160.743772][T21886] ? common_file_perm+0x1ab/0x4f0 [ 1160.743808][T21886] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1160.743840][T21886] ? rw_verify_area+0xce/0x6d0 [ 1160.743865][T21886] do_sendfile+0xadc/0xe20 [ 1160.743896][T21886] ? __pfx_do_sendfile+0x10/0x10 [ 1160.743922][T21886] ? __fget_files+0x21f/0x3d0 [ 1160.743956][T21886] __x64_sys_sendfile64+0x1d8/0x220 [ 1160.743988][T21886] ? ksys_write+0x1ac/0x250 [ 1160.744023][T21886] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1160.744064][T21886] do_syscall_64+0xc9/0xf80 [ 1160.744096][T21886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.744125][T21886] RIP: 0033:0x7f69bdf9aeb9 [ 1160.744144][T21886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.744167][T21886] RSP: 002b:00007f69bee78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1160.744189][T21886] RAX: ffffffffffffffda RBX: 00007f69be215fa0 RCX: 00007f69bdf9aeb9 [ 1160.744205][T21886] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1160.744219][T21886] RBP: 00007f69bee78090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.744233][T21886] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1160.744248][T21886] R13: 00007f69be216038 R14: 00007f69be215fa0 R15: 00007ffe9a9d57d8 [ 1160.744278][T21886] [ 1161.034536][T21870] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2767'. [ 1161.046118][T21870] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2767'. [ 1164.457217][T21930] FAULT_INJECTION: forcing a failure. [ 1164.457217][T21930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.478719][T21925] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2777'. [ 1164.549108][T21930] CPU: 0 UID: 0 PID: 21930 Comm: syz.1.2778 Not tainted syzkaller #0 PREEMPT(full) [ 1164.549155][T21930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1164.549177][T21930] Call Trace: [ 1164.549189][T21930] [ 1164.549204][T21930] dump_stack_lvl+0x100/0x190 [ 1164.549255][T21930] should_fail_ex.cold+0x5/0xa [ 1164.549315][T21930] _copy_from_user+0x2e/0xd0 [ 1164.549368][T21930] copy_msghdr_from_user+0x9f/0x4f0 [ 1164.549413][T21930] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1164.549463][T21930] ? futex_unqueue+0x133/0x2c0 [ 1164.549507][T21930] ? futex_unqueue+0x133/0x2c0 [ 1164.549563][T21930] ___sys_sendmsg+0x106/0x1e0 [ 1164.549608][T21930] ? __pfx____sys_sendmsg+0x10/0x10 [ 1164.549650][T21930] ? __pfx___futex_wait+0x10/0x10 [ 1164.549720][T21930] ? __pfx___might_resched+0x10/0x10 [ 1164.549782][T21930] __sys_sendmmsg+0x205/0x430 [ 1164.549838][T21930] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1164.549887][T21930] ? __local_bh_enable_ip+0x9e/0x120 [ 1164.549951][T21930] ? __pfx_do_futex+0x10/0x10 [ 1164.550018][T21930] ? xfd_validate_state+0x129/0x190 [ 1164.550083][T21930] __x64_sys_sendmmsg+0x9c/0x100 [ 1164.550141][T21930] ? lockdep_hardirqs_on+0x78/0x100 [ 1164.550184][T21930] do_syscall_64+0xc9/0xf80 [ 1164.550228][T21930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.550263][T21930] RIP: 0033:0x7f649739aeb9 [ 1164.550291][T21930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.550326][T21930] RSP: 002b:00007f649825d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1164.550357][T21930] RAX: ffffffffffffffda RBX: 00007f6497615fa0 RCX: 00007f649739aeb9 [ 1164.550379][T21930] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1164.550399][T21930] RBP: 00007f6497408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1164.550420][T21930] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 1164.550440][T21930] R13: 00007f6497616038 R14: 00007f6497615fa0 R15: 00007ffe3aac3b88 [ 1164.550482][T21930] [ 1164.556376][T21934] netlink: 'syz.0.2779': attribute type 33 has an invalid length. [ 1164.864330][T21934] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2779'. [ 1165.276653][T21934] netlink: 'syz.0.2779': attribute type 33 has an invalid length. [ 1165.298986][T21934] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2779'. [ 1165.535663][T21946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2782'. [ 1165.595327][T21946] veth1_macvtap: left promiscuous mode [ 1166.993567][T21915] kexec: Could not allocate control_code_buffer [ 1167.909465][T21973] FAULT_INJECTION: forcing a failure. [ 1167.909465][T21973] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.993515][T21973] CPU: 0 UID: 0 PID: 21973 Comm: syz.3.2787 Not tainted syzkaller #0 PREEMPT(full) [ 1167.993562][T21973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1167.993584][T21973] Call Trace: [ 1167.993596][T21973] [ 1167.993610][T21973] dump_stack_lvl+0x100/0x190 [ 1167.993669][T21973] should_fail_ex.cold+0x5/0xa [ 1167.993739][T21973] should_failslab+0xc2/0x120 [ 1167.993809][T21973] kmem_cache_alloc_noprof+0x83/0x780 [ 1167.993856][T21973] ? __pfx_map_id_range_down+0x10/0x10 [ 1167.993893][T21973] ? security_inode_alloc+0x3b/0x2c0 [ 1167.993952][T21973] ? security_inode_alloc+0x3b/0x2c0 [ 1167.994000][T21973] security_inode_alloc+0x3b/0x2c0 [ 1167.994047][T21973] inode_init_always_gfp+0xced/0x1040 [ 1167.994089][T21973] alloc_inode+0x8e/0x250 [ 1167.994135][T21973] sock_alloc+0x44/0x280 [ 1167.994162][T21973] ? security_socket_create+0x7f/0x250 [ 1167.994203][T21973] __sock_create+0xc2/0x860 [ 1167.994239][T21973] ? lockdep_init_map_type+0x5c/0x250 [ 1167.994286][T21973] smc_create+0x163/0x290 [ 1167.994323][T21973] __sock_create+0x339/0x860 [ 1167.994365][T21973] __sys_socket+0x14d/0x260 [ 1167.994412][T21973] ? fput+0x79/0x100 [ 1167.994451][T21973] ? __pfx___sys_socket+0x10/0x10 [ 1167.994485][T21973] ? xfd_validate_state+0x129/0x190 [ 1167.994541][T21973] __x64_sys_socket+0x72/0xb0 [ 1167.994576][T21973] ? lockdep_hardirqs_on+0x78/0x100 [ 1167.994611][T21973] do_syscall_64+0xc9/0xf80 [ 1167.994668][T21973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.994701][T21973] RIP: 0033:0x7f4de5d9aeb9 [ 1167.994726][T21973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.994754][T21973] RSP: 002b:00007f4de6bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1167.994782][T21973] RAX: ffffffffffffffda RBX: 00007f4de6015fa0 RCX: 00007f4de5d9aeb9 [ 1167.994803][T21973] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 1167.994821][T21973] RBP: 00007f4de5e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1167.994839][T21973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.994856][T21973] R13: 00007f4de6016038 R14: 00007f4de6015fa0 R15: 00007ffc6f386e48 [ 1167.994893][T21973] [ 1167.995080][T21973] socket: no more sockets [ 1169.526662][T21992] nvme_fabrics: missing parameter 'transport=%s' [ 1169.533222][T21992] nvme_fabrics: missing parameter 'nqn=%s' [ 1170.064409][T22004] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2793'. [ 1170.455461][T22006] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2794'. [ 1170.690772][T22014] NFSD: Failed to start, no listeners configured. [ 1171.105844][T22023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2798'. [ 1171.114954][T22023] openvswitch: netlink: Flow key attr not present in new flow. [ 1174.904424][T22062] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1174.920932][T22062] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1175.546718][T22067] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2806'. [ 1175.556815][T22067] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2806'. [ 1175.959682][T22073] NFSD: Failed to start, no listeners configured. [ 1176.618365][T22088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2807'. [ 1176.649779][T22088] veth1_macvtap: left promiscuous mode [ 1178.761539][T22127] syz.1.2819 (22127): /proc/22126/oom_adj is deprecated, please use /proc/22126/oom_score_adj instead. [ 1183.471306][T22206] ubi0: attaching mtd0 [ 1183.478040][T22206] ubi0: scanning is finished [ 1183.631736][T22206] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1183.661207][T22206] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1183.726558][T22206] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1183.775000][T22206] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1183.814742][T22206] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1183.821695][T22206] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1183.840148][T22206] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2556954844 [ 1183.885015][T22206] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1183.936656][T22209] ubi0: detaching mtd0 [ 1183.940889][T22211] ubi0: background thread "ubi_bgt0d" started, PID 22211 [ 1184.017832][T22209] ubi0: mtd0 is detached [ 1184.332109][T22221] FAULT_INJECTION: forcing a failure. [ 1184.332109][T22221] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.413493][T22221] CPU: 0 UID: 0 PID: 22221 Comm: syz.1.2842 Not tainted syzkaller #0 PREEMPT(full) [ 1184.413535][T22221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1184.413555][T22221] Call Trace: [ 1184.413566][T22221] [ 1184.413579][T22221] dump_stack_lvl+0x100/0x190 [ 1184.413624][T22221] should_fail_ex.cold+0x5/0xa [ 1184.413680][T22221] should_failslab+0xc2/0x120 [ 1184.413726][T22221] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1184.413760][T22221] __kmalloc_noprof+0xf6/0x9c0 [ 1184.413806][T22221] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1184.413840][T22221] kernfs_fop_write_iter+0x26a/0x5f0 [ 1184.413881][T22221] vfs_write+0x6ac/0x1070 [ 1184.413921][T22221] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1184.413962][T22221] ? __pfx_vfs_write+0x10/0x10 [ 1184.413997][T22221] ? find_held_lock+0x2b/0x80 [ 1184.414059][T22221] ksys_write+0x12a/0x250 [ 1184.414098][T22221] ? __pfx_ksys_write+0x10/0x10 [ 1184.414147][T22221] do_syscall_64+0xc9/0xf80 [ 1184.414202][T22221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.414237][T22221] RIP: 0033:0x7f649739aeb9 [ 1184.414263][T22221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.414296][T22221] RSP: 002b:00007f649825d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1184.414327][T22221] RAX: ffffffffffffffda RBX: 00007f6497615fa0 RCX: 00007f649739aeb9 [ 1184.414350][T22221] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1184.414371][T22221] RBP: 00007f649825d090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.414392][T22221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.414413][T22221] R13: 00007f6497616038 R14: 00007f6497615fa0 R15: 00007ffe3aac3b88 [ 1184.414458][T22221] [ 1186.118625][T22249] random: crng reseeded on system resumption [ 1186.515819][T22254] ubi0: attaching mtd0 [ 1186.521480][T22254] ubi0: scanning is finished [ 1186.783931][T22254] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1186.827147][T22254] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1186.866803][T22254] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1186.935547][T22254] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1186.985466][T22254] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1187.012017][T22254] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1187.038043][T22254] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2556954844 [ 1187.095594][T22254] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1187.137289][T22261] ubi0: background thread "ubi_bgt0d" started, PID 22261 [ 1187.144691][T22259] ubi0: detaching mtd0 [ 1187.175162][T22259] ubi0: mtd0 is detached [ 1187.708610][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.720887][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1191.469709][T22331] FAULT_INJECTION: forcing a failure. [ 1191.469709][T22331] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.482687][T22331] CPU: 0 UID: 0 PID: 22331 Comm: syz.1.2868 Not tainted syzkaller #0 PREEMPT(full) [ 1191.482718][T22331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1191.482733][T22331] Call Trace: [ 1191.482743][T22331] [ 1191.482753][T22331] dump_stack_lvl+0x100/0x190 [ 1191.482785][T22331] should_fail_ex.cold+0x5/0xa [ 1191.482825][T22331] should_failslab+0xc2/0x120 [ 1191.482860][T22331] ? copy_splice_read+0x1a3/0xb90 [ 1191.482885][T22331] __kmalloc_noprof+0xf6/0x9c0 [ 1191.482918][T22331] ? copy_splice_read+0x1a3/0xb90 [ 1191.482942][T22331] copy_splice_read+0x1a3/0xb90 [ 1191.482968][T22331] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1191.483002][T22331] ? __pfx_copy_splice_read+0x10/0x10 [ 1191.483031][T22331] ? look_up_lock_class+0x55/0x120 [ 1191.483068][T22331] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1191.483098][T22331] ? __pfx_filemap_splice_read+0x10/0x10 [ 1191.483133][T22331] do_splice_read+0x2bd/0x370 [ 1191.483163][T22331] splice_direct_to_actor+0x2a1/0xa30 [ 1191.483192][T22331] ? __pfx_direct_splice_actor+0x10/0x10 [ 1191.483225][T22331] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1191.483261][T22331] do_splice_direct+0x174/0x240 [ 1191.483289][T22331] ? __pfx_do_splice_direct+0x10/0x10 [ 1191.483319][T22331] ? common_file_perm+0x1ab/0x4f0 [ 1191.483401][T22331] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1191.483445][T22331] ? bpf_lsm_file_permission+0x9/0x10 [ 1191.483479][T22331] ? security_file_permission+0x76/0x210 [ 1191.483517][T22331] ? rw_verify_area+0xce/0x6d0 [ 1191.483542][T22331] do_sendfile+0xadc/0xe20 [ 1191.483572][T22331] ? __pfx_do_sendfile+0x10/0x10 [ 1191.483603][T22331] ? __fget_files+0x21f/0x3d0 [ 1191.483636][T22331] __x64_sys_sendfile64+0x1d8/0x220 [ 1191.483667][T22331] ? ksys_write+0x1ac/0x250 [ 1191.483693][T22331] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1191.483733][T22331] do_syscall_64+0xc9/0xf80 [ 1191.483763][T22331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.483787][T22331] RIP: 0033:0x7f649739aeb9 [ 1191.483806][T22331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.483829][T22331] RSP: 002b:00007f649823c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1191.483851][T22331] RAX: ffffffffffffffda RBX: 00007f6497616090 RCX: 00007f649739aeb9 [ 1191.483866][T22331] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1191.483879][T22331] RBP: 00007f649823c090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.483893][T22331] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1191.483907][T22331] R13: 00007f6497616128 R14: 00007f6497616090 R15: 00007ffe3aac3b88 [ 1191.483936][T22331] [ 1193.485707][T22371] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1193.546443][T22371] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1193.632538][T22371] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1193.682551][T22371] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1195.543579][T21187] Bluetooth: hci4: command 0x0c1a tx timeout [ 1195.623496][T21187] Bluetooth: hci3: command 0x0c1a tx timeout [ 1195.767530][T21187] Bluetooth: hci1: command 0x0c1a tx timeout [ 1195.773701][T21187] Bluetooth: hci0: command 0x0c1a tx timeout [ 1199.426271][T22496] forcing mempool usage for bvec_alloc+0x197/0x210 [ 1199.559973][ T30] audit: type=1804 audit(4093.980:202): pid=22491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2897" name="/newroot/128/file0" dev="tmpfs" ino=674 res=1 errno=0 [ 1199.664302][ T30] audit: type=1804 audit(4094.010:203): pid=22498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2897" name="/newroot/128/file0" dev="tmpfs" ino=674 res=1 errno=0 [ 1200.704667][T22520] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2902'. [ 1212.543168][T22679] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2935'. [ 1214.972640][T22703] FAULT_INJECTION: forcing a failure. [ 1214.972640][T22703] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.986047][T22703] CPU: 0 UID: 0 PID: 22703 Comm: syz.3.2939 Not tainted syzkaller #0 PREEMPT(full) [ 1214.986089][T22703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1214.986110][T22703] Call Trace: [ 1214.986121][T22703] [ 1214.986134][T22703] dump_stack_lvl+0x100/0x190 [ 1214.986179][T22703] should_fail_ex.cold+0x5/0xa [ 1214.986233][T22703] should_failslab+0xc2/0x120 [ 1214.986280][T22703] __kmalloc_cache_noprof+0x80/0x810 [ 1214.986317][T22703] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 1214.986369][T22703] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 1214.986413][T22703] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 1214.986459][T22703] ? rcu_is_watching+0x12/0xc0 [ 1214.986492][T22703] ? trace_contention_end+0xd6/0x110 [ 1214.986546][T22703] ? __mutex_lock+0x26a/0x1b90 [ 1214.986585][T22703] ? snd_pcm_oss_write+0x49a/0xa30 [ 1214.986625][T22703] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1214.986673][T22703] ? __pfx___mutex_lock+0x10/0x10 [ 1214.986728][T22703] ? get_pid_task+0xfc/0x250 [ 1214.986773][T22703] ? get_pid_task+0xfc/0x250 [ 1214.986821][T22703] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1214.986866][T22703] snd_pcm_oss_write+0x4bb/0xa30 [ 1214.986910][T22703] ? bpf_lsm_file_permission+0x9/0x10 [ 1214.986955][T22703] ? security_file_permission+0x76/0x210 [ 1214.987016][T22703] vfs_write+0x2aa/0x1070 [ 1214.987053][T22703] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1214.987097][T22703] ? __pfx_vfs_write+0x10/0x10 [ 1214.987132][T22703] ? find_held_lock+0x2b/0x80 [ 1214.987163][T22703] ? __fget_files+0x215/0x3d0 [ 1214.987198][T22703] ? __fget_files+0x215/0x3d0 [ 1214.987241][T22703] ? __fget_files+0x21f/0x3d0 [ 1214.987287][T22703] ksys_write+0x12a/0x250 [ 1214.987324][T22703] ? __pfx_ksys_write+0x10/0x10 [ 1214.987363][T22703] ? do_user_addr_fault+0x8d6/0x12f0 [ 1214.987409][T22703] do_syscall_64+0xc9/0xf80 [ 1214.987453][T22703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.987486][T22703] RIP: 0033:0x7f4de5d9aeb9 [ 1214.987518][T22703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.987546][T22703] RSP: 002b:00007f4de3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1214.987576][T22703] RAX: ffffffffffffffda RBX: 00007f4de6016270 RCX: 00007f4de5d9aeb9 [ 1214.987597][T22703] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1214.987616][T22703] RBP: 00007f4de3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.987636][T22703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.987655][T22703] R13: 00007f4de6016308 R14: 00007f4de6016270 R15: 00007ffc6f386e48 [ 1214.987697][T22703] [ 1216.937644][T22711] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2950'. [ 1218.759125][T22742] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1218.784008][T22742] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1218.845681][T22742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2949'. [ 1219.001695][T22738] zswap: compressor û not available [ 1219.008341][T22741] Setting dangerous option i915.mitigations - tainting kernel [ 1219.412814][T22737] zswap: compressor û not available [ 1219.418519][T22745] Setting dangerous option i915.mitigations - tainting kernel [ 1219.437987][T22736] Setting dangerous option i915.mitigations - tainting kernel [ 1221.306269][T22784] FAULT_INJECTION: forcing a failure. [ 1221.306269][T22784] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.321751][T22784] CPU: 1 UID: 0 PID: 22784 Comm: syz.2.2957 Tainted: G U syzkaller #0 PREEMPT(full) [ 1221.321813][T22784] Tainted: [U]=USER [ 1221.321826][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1221.321846][T22784] Call Trace: [ 1221.321857][T22784] [ 1221.321871][T22784] dump_stack_lvl+0x100/0x190 [ 1221.321919][T22784] should_fail_ex.cold+0x5/0xa [ 1221.321978][T22784] should_failslab+0xc2/0x120 [ 1221.322028][T22784] ? copy_splice_read+0x1a3/0xb90 [ 1221.322065][T22784] __kmalloc_noprof+0xf6/0x9c0 [ 1221.322098][T22784] ? splice_from_pipe_next+0x1ec/0x5a0 [ 1221.322156][T22784] ? copy_splice_read+0x1a3/0xb90 [ 1221.322192][T22784] copy_splice_read+0x1a3/0xb90 [ 1221.322230][T22784] ? __pfx_pipe_to_null+0x10/0x10 [ 1221.322293][T22784] ? __pfx_copy_splice_read+0x10/0x10 [ 1221.322337][T22784] ? __pfx_splice_from_pipe+0x10/0x10 [ 1221.322386][T22784] ? aa_file_perm+0x268/0x1540 [ 1221.322420][T22784] ? aa_file_perm+0x268/0x1540 [ 1221.322458][T22784] ? __pfx_copy_splice_read+0x10/0x10 [ 1221.322498][T22784] do_splice_read+0x285/0x370 [ 1221.322541][T22784] splice_direct_to_actor+0x2a1/0xa30 [ 1221.322584][T22784] ? __pfx_direct_splice_actor+0x10/0x10 [ 1221.322634][T22784] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1221.322687][T22784] do_splice_direct+0x174/0x240 [ 1221.322728][T22784] ? __pfx_do_splice_direct+0x10/0x10 [ 1221.322790][T22784] ? common_file_perm+0x1ab/0x4f0 [ 1221.322844][T22784] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1221.322887][T22784] ? bpf_lsm_file_permission+0x9/0x10 [ 1221.322937][T22784] ? security_file_permission+0x76/0x210 [ 1221.322997][T22784] ? rw_verify_area+0xce/0x6d0 [ 1221.323036][T22784] do_sendfile+0xadc/0xe20 [ 1221.323082][T22784] ? __pfx_do_sendfile+0x10/0x10 [ 1221.323127][T22784] ? __x64_sys_futex+0x34f/0x4d0 [ 1221.323175][T22784] ? __x64_sys_futex+0x358/0x4d0 [ 1221.323228][T22784] __x64_sys_sendfile64+0x1d8/0x220 [ 1221.323278][T22784] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1221.323339][T22784] do_syscall_64+0xc9/0xf80 [ 1221.323384][T22784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.323421][T22784] RIP: 0033:0x7f69bdf9aeb9 [ 1221.323449][T22784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.323485][T22784] RSP: 002b:00007f69bee57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1221.323519][T22784] RAX: ffffffffffffffda RBX: 00007f69be216090 RCX: 00007f69bdf9aeb9 [ 1221.323542][T22784] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 1221.323563][T22784] RBP: 00007f69be008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1221.323584][T22784] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1221.323606][T22784] R13: 00007f69be216128 R14: 00007f69be216090 R15: 00007ffe9a9d57d8 [ 1221.323650][T22784] [ 1225.495801][T22849] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2968'. [ 1225.954847][T21187] Bluetooth: hci4: unexpected event 0x32 length: 727 > 9 [ 1226.017822][T22851] netlink: set zone limit has 8 unknown bytes [ 1226.681408][T22863] FAULT_INJECTION: forcing a failure. [ 1226.681408][T22863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1226.707786][T22863] CPU: 1 UID: 0 PID: 22863 Comm: syz.3.2969 Tainted: G U syzkaller #0 PREEMPT(full) [ 1226.707841][T22863] Tainted: [U]=USER [ 1226.707852][T22863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1226.707872][T22863] Call Trace: [ 1226.707883][T22863] [ 1226.707897][T22863] dump_stack_lvl+0x100/0x190 [ 1226.707946][T22863] should_fail_ex.cold+0x5/0xa [ 1226.707997][T22863] ? prepare_alloc_pages+0x16d/0x5f0 [ 1226.708053][T22863] should_fail_alloc_page+0xeb/0x140 [ 1226.708106][T22863] prepare_alloc_pages+0x1f0/0x5f0 [ 1226.708168][T22863] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1226.708208][T22863] ? stack_trace_save+0x8e/0xc0 [ 1226.708244][T22863] ? __pfx_stack_trace_save+0x10/0x10 [ 1226.708293][T22863] ? do_raw_spin_lock+0x128/0x260 [ 1226.708352][T22863] ? stack_depot_save_flags+0x27/0x9c0 [ 1226.708409][T22863] ? find_held_lock+0x2b/0x80 [ 1226.708443][T22863] ? debug_check_no_obj_freed+0x31f/0x630 [ 1226.708504][T22863] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1226.708548][T22863] ? kasan_save_track+0x14/0x30 [ 1226.708591][T22863] ? __kmalloc_noprof+0x347/0x9c0 [ 1226.708627][T22863] ? do_splice_read+0x285/0x370 [ 1226.708661][T22863] ? splice_direct_to_actor+0x2a1/0xa30 [ 1226.708699][T22863] ? do_splice_direct+0x174/0x240 [ 1226.708735][T22863] ? do_sendfile+0xadc/0xe20 [ 1226.708770][T22863] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1226.708816][T22863] ? do_syscall_64+0xc9/0xf80 [ 1226.708857][T22863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.708922][T22863] alloc_pages_bulk_noprof+0x777/0x1500 [ 1226.708982][T22863] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1226.709027][T22863] ? copy_splice_read+0x1a3/0xb90 [ 1226.709067][T22863] ? copy_splice_read+0x1a3/0xb90 [ 1226.709121][T22863] copy_splice_read+0x1e1/0xb90 [ 1226.709167][T22863] ? __pfx_copy_splice_read+0x10/0x10 [ 1226.709209][T22863] ? __pfx_splice_from_pipe+0x10/0x10 [ 1226.709262][T22863] ? splice_from_pipe+0x1c/0x140 [ 1226.709304][T22863] ? __pfx_copy_splice_read+0x10/0x10 [ 1226.709343][T22863] do_splice_read+0x285/0x370 [ 1226.709385][T22863] splice_direct_to_actor+0x2a1/0xa30 [ 1226.709428][T22863] ? __pfx_direct_splice_actor+0x10/0x10 [ 1226.709485][T22863] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1226.709534][T22863] do_splice_direct+0x174/0x240 [ 1226.709569][T22863] ? __pfx_do_splice_direct+0x10/0x10 [ 1226.709601][T22863] ? common_file_perm+0x1ab/0x4f0 [ 1226.709648][T22863] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1226.709682][T22863] ? bpf_lsm_file_permission+0x9/0x10 [ 1226.709724][T22863] ? security_file_permission+0x76/0x210 [ 1226.709772][T22863] ? rw_verify_area+0xce/0x6d0 [ 1226.709804][T22863] do_sendfile+0xadc/0xe20 [ 1226.709841][T22863] ? __pfx_do_sendfile+0x10/0x10 [ 1226.709877][T22863] ? __x64_sys_futex+0x34f/0x4d0 [ 1226.709917][T22863] ? __x64_sys_futex+0x358/0x4d0 [ 1226.709961][T22863] __x64_sys_sendfile64+0x1d8/0x220 [ 1226.710002][T22863] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1226.710052][T22863] do_syscall_64+0xc9/0xf80 [ 1226.710090][T22863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.710120][T22863] RIP: 0033:0x7f4de5d9aeb9 [ 1226.710142][T22863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.710171][T22863] RSP: 002b:00007f4de6b9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1226.710200][T22863] RAX: ffffffffffffffda RBX: 00007f4de6016090 RCX: 00007f4de5d9aeb9 [ 1226.710219][T22863] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 1226.710237][T22863] RBP: 00007f4de5e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1226.710255][T22863] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1226.710274][T22863] R13: 00007f4de6016128 R14: 00007f4de6016090 R15: 00007ffc6f386e48 [ 1226.710311][T22863] [ 1229.534988][T22905] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2981'. [ 1233.412757][T22942] binder: 22941:22942 ioctl c018620c 0 returned -1 [ 1235.698038][T22987] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1236.501012][T22995] zswap: compressor not available [ 1237.914696][T23029] netlink: 350 bytes leftover after parsing attributes in process `syz.1.3009'. [ 1238.517620][T23033] zswap: compressor not available [ 1238.523203][T23035] FAULT_INJECTION: forcing a failure. [ 1238.523203][T23035] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.543527][T23035] CPU: 1 UID: 0 PID: 23035 Comm: syz.1.3010 Tainted: G U syzkaller #0 PREEMPT(full) [ 1238.543580][T23035] Tainted: [U]=USER [ 1238.543593][T23035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1238.543613][T23035] Call Trace: [ 1238.543625][T23035] [ 1238.543638][T23035] dump_stack_lvl+0x100/0x190 [ 1238.543684][T23035] should_fail_ex.cold+0x5/0xa [ 1238.543740][T23035] should_failslab+0xc2/0x120 [ 1238.543785][T23035] ? copy_splice_read+0x1a3/0xb90 [ 1238.543820][T23035] __kmalloc_noprof+0xf6/0x9c0 [ 1238.543866][T23035] ? copy_splice_read+0x1a3/0xb90 [ 1238.543901][T23035] copy_splice_read+0x1a3/0xb90 [ 1238.543936][T23035] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1238.543984][T23035] ? __pfx_copy_splice_read+0x10/0x10 [ 1238.544035][T23035] ? find_held_lock+0x2b/0x80 [ 1238.544076][T23035] ? __pfx_copy_splice_read+0x10/0x10 [ 1238.544112][T23035] do_splice_read+0x285/0x370 [ 1238.544151][T23035] splice_direct_to_actor+0x2a1/0xa30 [ 1238.544189][T23035] ? __pfx_direct_splice_actor+0x10/0x10 [ 1238.544231][T23035] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1238.544278][T23035] do_splice_direct+0x174/0x240 [ 1238.544325][T23035] ? __pfx_do_splice_direct+0x10/0x10 [ 1238.544359][T23035] ? common_file_perm+0x1ab/0x4f0 [ 1238.544409][T23035] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1238.544452][T23035] ? rw_verify_area+0xce/0x6d0 [ 1238.544488][T23035] do_sendfile+0xadc/0xe20 [ 1238.544534][T23035] ? __pfx_do_sendfile+0x10/0x10 [ 1238.544571][T23035] ? __fget_files+0x21f/0x3d0 [ 1238.544614][T23035] __x64_sys_sendfile64+0x1d8/0x220 [ 1238.544657][T23035] ? ksys_write+0x1ac/0x250 [ 1238.544691][T23035] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1238.544742][T23035] do_syscall_64+0xc9/0xf80 [ 1238.544785][T23035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.544818][T23035] RIP: 0033:0x7f649739aeb9 [ 1238.544844][T23035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.544877][T23035] RSP: 002b:00007f649823c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1238.544906][T23035] RAX: ffffffffffffffda RBX: 00007f6497616090 RCX: 00007f649739aeb9 [ 1238.544928][T23035] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1238.544948][T23035] RBP: 00007f649823c090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.544968][T23035] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 1238.544988][T23035] R13: 00007f6497616128 R14: 00007f6497616090 R15: 00007ffe3aac3b88 [ 1238.545031][T23035] [ 1238.957054][T23001] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1239.234791][T23047] FAULT_INJECTION: forcing a failure. [ 1239.234791][T23047] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1239.283404][T23047] CPU: 1 UID: 0 PID: 23047 Comm: syz.3.3011 Tainted: G U syzkaller #0 PREEMPT(full) [ 1239.283463][T23047] Tainted: [U]=USER [ 1239.283474][T23047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1239.283494][T23047] Call Trace: [ 1239.283505][T23047] [ 1239.283517][T23047] dump_stack_lvl+0x100/0x190 [ 1239.283560][T23047] should_fail_ex.cold+0x5/0xa [ 1239.283606][T23047] ? prepare_alloc_pages+0x16d/0x5f0 [ 1239.283661][T23047] should_fail_alloc_page+0xeb/0x140 [ 1239.283711][T23047] prepare_alloc_pages+0x1f0/0x5f0 [ 1239.283763][T23047] ? rcu_is_watching+0x12/0xc0 [ 1239.283802][T23047] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1239.283867][T23047] ? find_held_lock+0x2b/0x80 [ 1239.283898][T23047] ? xa_load+0x149/0x2c0 [ 1239.283939][T23047] ? xa_load+0x149/0x2c0 [ 1239.283983][T23047] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1239.284033][T23047] ? __lock_acquire+0x4a5/0x2630 [ 1239.284079][T23047] ? __lock_acquire+0x4a5/0x2630 [ 1239.284130][T23047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1239.284170][T23047] ? policy_nodemask+0xed/0x4f0 [ 1239.284220][T23047] alloc_pages_mpol+0x1fb/0x550 [ 1239.284269][T23047] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1239.284315][T23047] ? swap_entry_swapped+0x1df/0x290 [ 1239.284360][T23047] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1239.284417][T23047] folio_alloc_mpol_noprof+0x36/0x340 [ 1239.284474][T23047] __read_swap_cache_async+0x20a/0x610 [ 1239.284515][T23047] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1239.284555][T23047] ? __pfx_get_swap_device+0x10/0x10 [ 1239.284597][T23047] ? mpol_shared_policy_lookup+0xf6/0x150 [ 1239.284643][T23047] ? __pfx_shmem_get_policy+0x10/0x10 [ 1239.284696][T23047] read_swap_cache_async+0xdc/0x480 [ 1239.284735][T23047] ? __pfx_read_swap_cache_async+0x10/0x10 [ 1239.284774][T23047] ? find_held_lock+0x2b/0x80 [ 1239.284806][T23047] ? madvise_vma_behavior+0x1d9e/0x2a40 [ 1239.284857][T23047] ? madvise_vma_behavior+0x1d9e/0x2a40 [ 1239.284916][T23047] madvise_vma_behavior+0x1dda/0x2a40 [ 1239.284972][T23047] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1239.285025][T23047] ? mas_prev+0x9b/0xf0 [ 1239.285083][T23047] ? __pfx_find_vma_prev+0x10/0x10 [ 1239.285131][T23047] ? __pfx__kstrtoull+0x10/0x10 [ 1239.285190][T23047] madvise_walk_vmas+0x2fe/0xa90 [ 1239.285248][T23047] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1239.285329][T23047] madvise_do_behavior+0x1ea/0x510 [ 1239.285387][T23047] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1239.285452][T23047] ? down_read+0x13b/0x460 [ 1239.285518][T23047] do_madvise+0x195/0x240 [ 1239.285569][T23047] ? __pfx_do_madvise+0x10/0x10 [ 1239.285618][T23047] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1239.285689][T23047] ? ksys_write+0x1ac/0x250 [ 1239.285728][T23047] ? __pfx_ksys_write+0x10/0x10 [ 1239.285767][T23047] ? do_user_addr_fault+0x8d6/0x12f0 [ 1239.285810][T23047] __x64_sys_madvise+0xa9/0x110 [ 1239.285861][T23047] ? lockdep_hardirqs_on+0x78/0x100 [ 1239.285902][T23047] do_syscall_64+0xc9/0xf80 [ 1239.285945][T23047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.285980][T23047] RIP: 0033:0x7f4de5d9aeb9 [ 1239.286007][T23047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.286040][T23047] RSP: 002b:00007f4de6b9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1239.286072][T23047] RAX: ffffffffffffffda RBX: 00007f4de6016090 RCX: 00007f4de5d9aeb9 [ 1239.286094][T23047] RDX: 0000000100000003 RSI: 0000000001010001 RDI: 0000000000000000 [ 1239.286114][T23047] RBP: 00007f4de6b9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.286147][T23047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1239.286167][T23047] R13: 00007f4de6016128 R14: 00007f4de6016090 R15: 00007ffc6f386e48 [ 1239.286214][T23047] [ 1239.696253][T23046] Invalid ELF header magic: != ELF [ 1239.716494][T23047] binder: 23037:23047 ioctl c018620c 0 returned -1 [ 1240.514522][T23065] FAULT_INJECTION: forcing a failure. [ 1240.514522][T23065] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.563367][T23065] CPU: 1 UID: 0 PID: 23065 Comm: syz.2.3017 Tainted: G U syzkaller #0 PREEMPT(full) [ 1240.563418][T23065] Tainted: [U]=USER [ 1240.563429][T23065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1240.563450][T23065] Call Trace: [ 1240.563461][T23065] [ 1240.563474][T23065] dump_stack_lvl+0x100/0x190 [ 1240.563523][T23065] should_fail_ex.cold+0x5/0xa [ 1240.563576][T23065] should_failslab+0xc2/0x120 [ 1240.563624][T23065] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1240.563658][T23065] __kmalloc_noprof+0xf6/0x9c0 [ 1240.563690][T23065] ? iter_file_splice_write+0x1d3/0x10a0 [ 1240.563731][T23065] ? rcu_is_watching+0x12/0xc0 [ 1240.563764][T23065] ? iter_file_splice_write+0x1d3/0x10a0 [ 1240.563812][T23065] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1240.563844][T23065] kernfs_fop_write_iter+0x26a/0x5f0 [ 1240.563885][T23065] iter_file_splice_write+0x82b/0x10a0 [ 1240.563946][T23065] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1240.563996][T23065] ? __pfx_copy_splice_read+0x10/0x10 [ 1240.564056][T23065] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1240.564100][T23065] direct_splice_actor+0x192/0x6c0 [ 1240.564152][T23065] splice_direct_to_actor+0x345/0xa30 [ 1240.564194][T23065] ? __pfx_direct_splice_actor+0x10/0x10 [ 1240.564240][T23065] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1240.564289][T23065] do_splice_direct+0x174/0x240 [ 1240.564326][T23065] ? __pfx_do_splice_direct+0x10/0x10 [ 1240.564361][T23065] ? common_file_perm+0x1ab/0x4f0 [ 1240.564412][T23065] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1240.564456][T23065] ? rw_verify_area+0xce/0x6d0 [ 1240.564492][T23065] do_sendfile+0xadc/0xe20 [ 1240.564535][T23065] ? __pfx_do_sendfile+0x10/0x10 [ 1240.564571][T23065] ? __fget_files+0x21f/0x3d0 [ 1240.564620][T23065] __x64_sys_sendfile64+0x1d8/0x220 [ 1240.564661][T23065] ? ksys_write+0x1ac/0x250 [ 1240.564698][T23065] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1240.564755][T23065] do_syscall_64+0xc9/0xf80 [ 1240.564800][T23065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.564833][T23065] RIP: 0033:0x7f69bdf9aeb9 [ 1240.564859][T23065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.564889][T23065] RSP: 002b:00007f69bee78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1240.564919][T23065] RAX: ffffffffffffffda RBX: 00007f69be215fa0 RCX: 00007f69bdf9aeb9 [ 1240.564940][T23065] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1240.564959][T23065] RBP: 00007f69bee78090 R08: 0000000000000000 R09: 0000000000000000 [ 1240.564978][T23065] R10: 0000000000002001 R11: 0000000000000246 R12: 0000000000000001 [ 1240.564998][T23065] R13: 00007f69be216038 R14: 00007f69be215fa0 R15: 00007ffe9a9d57d8 [ 1240.565039][T23065] [ 1241.491056][T23083] ptrace attach of "./syz-executor exec"[19521] was attempted by "./syz-executor exec"[23083] [ 1243.371034][T21187] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 1243.689679][T23080] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1243.724640][ T30] audit: type=1800 audit(4138.100:204): pid=23125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3033" name="lu_gp_id" dev="configfs" ino=96919 res=0 errno=0 [ 1246.089939][T23157] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3041'. [ 1246.447144][T23162] program syz.2.3043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1247.010707][T23161] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3042'. [ 1249.088131][ T30] audit: type=1800 audit(4143.490:205): pid=23206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3051" name="lu_gp_id" dev="configfs" ino=97894 res=0 errno=0 [ 1249.148757][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.156191][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.286885][T23209] FAULT_INJECTION: forcing a failure. [ 1249.286885][T23209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1249.323709][T23209] CPU: 1 UID: 0 PID: 23209 Comm: syz.0.3052 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1249.323763][T23209] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1249.323776][T23209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1249.323797][T23209] Call Trace: [ 1249.323810][T23209] [ 1249.323823][T23209] dump_stack_lvl+0x100/0x190 [ 1249.323869][T23209] should_fail_ex.cold+0x5/0xa [ 1249.323922][T23209] _copy_to_user+0x32/0xd0 [ 1249.323975][T23209] simple_read_from_buffer+0xcb/0x170 [ 1249.324014][T23209] proc_fail_nth_read+0x1af/0x230 [ 1249.324054][T23209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1249.324097][T23209] ? rw_verify_area+0xce/0x6d0 [ 1249.324128][T23209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1249.324169][T23209] vfs_read+0x1e4/0xb30 [ 1249.324211][T23209] ? __pfx_vfs_read+0x10/0x10 [ 1249.324246][T23209] ? find_held_lock+0x2b/0x80 [ 1249.324281][T23209] ? __fget_files+0x215/0x3d0 [ 1249.324332][T23209] ? __fget_files+0x21f/0x3d0 [ 1249.324381][T23209] ksys_read+0x12a/0x250 [ 1249.324416][T23209] ? __pfx_ksys_read+0x10/0x10 [ 1249.324466][T23209] do_syscall_64+0xc9/0xf80 [ 1249.324510][T23209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.324544][T23209] RIP: 0033:0x7fea2635b78e [ 1249.324570][T23209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1249.324603][T23209] RSP: 002b:00007fea271ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1249.324633][T23209] RAX: ffffffffffffffda RBX: 00007fea271de6c0 RCX: 00007fea2635b78e [ 1249.324655][T23209] RDX: 000000000000000f RSI: 00007fea271de0a0 RDI: 0000000000000003 [ 1249.324677][T23209] RBP: 00007fea271de090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.324698][T23209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.324719][T23209] R13: 00007fea26616038 R14: 00007fea26615fa0 R15: 00007ffc9b068a68 [ 1249.324764][T23209] [ 1249.533411][T23206] ALUA LU Group already has a valid ID, ignoring request [ 1251.011627][T23223] Invalid ELF header magic: != ELF [ 1251.206469][T23229] FAULT_INJECTION: forcing a failure. [ 1251.206469][T23229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1251.219894][T23229] CPU: 1 UID: 0 PID: 23229 Comm: syz.1.3057 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1251.219934][T23229] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1251.219944][T23229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1251.219959][T23229] Call Trace: [ 1251.219970][T23229] [ 1251.219980][T23229] dump_stack_lvl+0x100/0x190 [ 1251.220013][T23229] should_fail_ex.cold+0x5/0xa [ 1251.220053][T23229] _copy_from_user+0x2e/0xd0 [ 1251.220092][T23229] get_timespec64+0x8b/0x1b0 [ 1251.220125][T23229] ? __pfx_get_timespec64+0x10/0x10 [ 1251.220169][T23229] __x64_sys_futex+0x21a/0x4d0 [ 1251.220208][T23229] ? __pfx___x64_sys_futex+0x10/0x10 [ 1251.220254][T23229] do_syscall_64+0xc9/0xf80 [ 1251.220288][T23229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.220313][T23229] RIP: 0033:0x7f649739aeb9 [ 1251.220332][T23229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.220355][T23229] RSP: 002b:00007ffe3aac3ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1251.220377][T23229] RAX: ffffffffffffffda RBX: 0000000000131765 RCX: 00007f649739aeb9 [ 1251.220395][T23229] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6497615fac [ 1251.220410][T23229] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 1251.220423][T23229] R10: 00007ffe3aac3df0 R11: 0000000000000246 R12: 00007ffe3aac3e10 [ 1251.220438][T23229] R13: 00007f6497615fac R14: 0000000000131797 R15: 00007ffe3aac3df0 [ 1251.220468][T23229] [ 1252.859106][T23254] FAULT_INJECTION: forcing a failure. [ 1252.859106][T23254] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.916645][T23254] CPU: 0 UID: 0 PID: 23254 Comm: syz.1.3060 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1252.916699][T23254] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1252.916711][T23254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1252.916729][T23254] Call Trace: [ 1252.916739][T23254] [ 1252.916752][T23254] dump_stack_lvl+0x100/0x190 [ 1252.916795][T23254] should_fail_ex.cold+0x5/0xa [ 1252.916848][T23254] should_failslab+0xc2/0x120 [ 1252.916895][T23254] __kmalloc_cache_noprof+0x80/0x810 [ 1252.916930][T23254] ? sctp_association_new+0xbb/0x2990 [ 1252.916969][T23254] ? sctp_association_new+0xbb/0x2990 [ 1252.917000][T23254] sctp_association_new+0xbb/0x2990 [ 1252.917039][T23254] sctp_connect_new_asoc+0x1a8/0x770 [ 1252.917075][T23254] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1252.917114][T23254] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1252.917152][T23254] sctp_sendmsg+0x171a/0x22b0 [ 1252.917206][T23254] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1252.917245][T23254] ? aa_sk_perm+0x2de/0xb40 [ 1252.917299][T23254] ? __pfx_aa_sk_perm+0x10/0x10 [ 1252.917343][T23254] ? __might_fault+0xc5/0x140 [ 1252.917387][T23254] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1252.917421][T23254] inet_sendmsg+0x11c/0x140 [ 1252.917458][T23254] __sys_sendto+0x467/0x520 [ 1252.917503][T23254] ? __pfx___sys_sendto+0x10/0x10 [ 1252.917578][T23254] ? ksys_write+0x1ac/0x250 [ 1252.917615][T23254] ? __pfx_ksys_write+0x10/0x10 [ 1252.917657][T23254] __x64_sys_sendto+0xe0/0x1c0 [ 1252.917700][T23254] ? do_syscall_64+0x94/0xf80 [ 1252.917738][T23254] ? lockdep_hardirqs_on+0x78/0x100 [ 1252.917778][T23254] do_syscall_64+0xc9/0xf80 [ 1252.917820][T23254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.917853][T23254] RIP: 0033:0x7f649739aeb9 [ 1252.917878][T23254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.917910][T23254] RSP: 002b:00007f649823c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1252.917941][T23254] RAX: ffffffffffffffda RBX: 00007f6497616090 RCX: 00007f649739aeb9 [ 1252.917964][T23254] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000008 [ 1252.917983][T23254] RBP: 00007f649823c090 R08: 0000200000000000 R09: 000000000000001c [ 1252.918004][T23254] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1252.918024][T23254] R13: 00007f6497616128 R14: 00007f6497616090 R15: 00007ffe3aac3b88 [ 1252.918068][T23254] [ 1253.727006][T23270] FAULT_INJECTION: forcing a failure. [ 1253.727006][T23270] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.743470][T23270] CPU: 1 UID: 0 PID: 23270 Comm: syz.3.3066 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1253.743528][T23270] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1253.743542][T23270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1253.743563][T23270] Call Trace: [ 1253.743575][T23270] [ 1253.743587][T23270] dump_stack_lvl+0x100/0x190 [ 1253.743653][T23270] should_fail_ex.cold+0x5/0xa [ 1253.743712][T23270] should_failslab+0xc2/0x120 [ 1253.743764][T23270] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1253.743813][T23270] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1253.743854][T23270] ? sock_alloc_inode+0x25/0x1c0 [ 1253.743907][T23270] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1253.743942][T23270] ? sock_alloc_inode+0x25/0x1c0 [ 1253.743975][T23270] ? apparmor_socket_create+0x59/0x310 [ 1253.744021][T23270] sock_alloc_inode+0x25/0x1c0 [ 1253.744054][T23270] alloc_inode+0x68/0x250 [ 1253.744105][T23270] sock_alloc+0x44/0x280 [ 1253.744134][T23270] ? security_socket_create+0x7f/0x250 [ 1253.744180][T23270] __sock_create+0xc2/0x860 [ 1253.744218][T23270] ? lockdep_init_map_type+0x5c/0x250 [ 1253.744270][T23270] smc_create+0x163/0x290 [ 1253.744314][T23270] __sock_create+0x339/0x860 [ 1253.744361][T23270] __sys_socket+0x14d/0x260 [ 1253.744400][T23270] ? fput+0x79/0x100 [ 1253.744443][T23270] ? __pfx___sys_socket+0x10/0x10 [ 1253.744481][T23270] ? xfd_validate_state+0x129/0x190 [ 1253.744546][T23270] __x64_sys_socket+0x72/0xb0 [ 1253.744586][T23270] ? lockdep_hardirqs_on+0x78/0x100 [ 1253.744627][T23270] do_syscall_64+0xc9/0xf80 [ 1253.744672][T23270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.744707][T23270] RIP: 0033:0x7f4de5d9aeb9 [ 1253.744734][T23270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.744769][T23270] RSP: 002b:00007f4de6bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1253.744803][T23270] RAX: ffffffffffffffda RBX: 00007f4de6015fa0 RCX: 00007f4de5d9aeb9 [ 1253.744826][T23270] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 1253.744848][T23270] RBP: 00007f4de5e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1253.744869][T23270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.744904][T23270] R13: 00007f4de6016038 R14: 00007f4de6015fa0 R15: 00007ffc6f386e48 [ 1253.744949][T23270] [ 1253.744967][T23270] socket: no more sockets [ 1255.704860][T23317] FAULT_INJECTION: forcing a failure. [ 1255.704860][T23317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.762427][T23317] CPU: 0 UID: 0 PID: 23317 Comm: syz.0.3075 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1255.762480][T23317] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1255.762493][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1255.762513][T23317] Call Trace: [ 1255.762523][T23317] [ 1255.762535][T23317] dump_stack_lvl+0x100/0x190 [ 1255.762579][T23317] should_fail_ex.cold+0x5/0xa [ 1255.762633][T23317] _copy_to_user+0x32/0xd0 [ 1255.762686][T23317] simple_read_from_buffer+0xcb/0x170 [ 1255.762723][T23317] proc_fail_nth_read+0x1af/0x230 [ 1255.762766][T23317] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1255.762817][T23317] ? rw_verify_area+0xce/0x6d0 [ 1255.762848][T23317] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1255.762888][T23317] vfs_read+0x1e4/0xb30 [ 1255.762931][T23317] ? __pfx_vfs_read+0x10/0x10 [ 1255.762963][T23317] ? find_held_lock+0x2b/0x80 [ 1255.762998][T23317] ? __fget_files+0x215/0x3d0 [ 1255.763043][T23317] ? __fget_files+0x21f/0x3d0 [ 1255.763092][T23317] ksys_read+0x12a/0x250 [ 1255.763129][T23317] ? __pfx_ksys_read+0x10/0x10 [ 1255.763178][T23317] do_syscall_64+0xc9/0xf80 [ 1255.763224][T23317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.763258][T23317] RIP: 0033:0x7fea2635b78e [ 1255.763284][T23317] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1255.763319][T23317] RSP: 002b:00007fea271ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1255.763350][T23317] RAX: ffffffffffffffda RBX: 00007fea271de6c0 RCX: 00007fea2635b78e [ 1255.763371][T23317] RDX: 000000000000000f RSI: 00007fea271de0a0 RDI: 0000000000000004 [ 1255.763390][T23317] RBP: 00007fea271de090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.763409][T23317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.763428][T23317] R13: 00007fea26616038 R14: 00007fea26615fa0 R15: 00007ffc9b068a68 [ 1255.763471][T23317] [ 1256.610429][T23323] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3077'. [ 1256.825229][T23328] random: crng reseeded on system resumption [ 1257.252948][T23330] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3078'. [ 1257.552294][T23333] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3081'. [ 1258.075190][T23340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1258.097859][T23342] FAULT_INJECTION: forcing a failure. [ 1258.097859][T23342] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1258.122166][T23342] CPU: 1 UID: 0 PID: 23342 Comm: syz.2.3085 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1258.122224][T23342] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1258.122238][T23342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1258.122260][T23342] Call Trace: [ 1258.122271][T23342] [ 1258.122284][T23342] dump_stack_lvl+0x100/0x190 [ 1258.122332][T23342] should_fail_ex.cold+0x5/0xa [ 1258.122390][T23342] get_futex_key+0x1d2/0x1620 [ 1258.122441][T23342] ? __pfx_get_futex_key+0x10/0x10 [ 1258.122500][T23342] futex_wake+0xea/0x530 [ 1258.122554][T23342] ? trace_kmem_cache_alloc+0x80/0xb0 [ 1258.122622][T23342] ? __pfx_futex_wake+0x10/0x10 [ 1258.122685][T23342] ? errseq_sample+0x51/0x70 [ 1258.122738][T23342] ? file_init_path+0x48e/0x670 [ 1258.122801][T23342] do_futex+0x32b/0x350 [ 1258.122851][T23342] ? __pfx_do_futex+0x10/0x10 [ 1258.122900][T23342] ? fd_install+0x223/0x580 [ 1258.122946][T23342] __x64_sys_futex+0x34f/0x4d0 [ 1258.122999][T23342] ? __sys_socket+0xac/0x260 [ 1258.123043][T23342] ? __pfx___x64_sys_futex+0x10/0x10 [ 1258.123092][T23342] ? xfd_validate_state+0x129/0x190 [ 1258.123162][T23342] do_syscall_64+0xc9/0xf80 [ 1258.123208][T23342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.123244][T23342] RIP: 0033:0x7f69bdf9aeb9 [ 1258.123271][T23342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.123311][T23342] RSP: 002b:00007f69bee780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1258.123344][T23342] RAX: ffffffffffffffda RBX: 00007f69be215fa8 RCX: 00007f69bdf9aeb9 [ 1258.123366][T23342] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f69be215fac [ 1258.123386][T23342] RBP: 00007f69be215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.123408][T23342] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1258.123429][T23342] R13: 00007f69be216038 R14: 00007ffe9a9d56f0 R15: 00007ffe9a9d57d8 [ 1258.123495][T23342] [ 1260.595131][T23382] ubi0: attaching mtd0 [ 1260.606658][T23382] ubi0: scanning is finished [ 1260.848570][T23382] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1260.861740][T23382] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1260.883915][T23382] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1260.915573][T23382] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1260.932377][T23382] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1260.943495][T23382] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1260.951700][T23382] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2556954844 [ 1261.113660][T23382] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1261.132810][T23388] ubi0: detaching mtd0 [ 1261.198060][T23390] ubi0: background thread "ubi_bgt0d" started, PID 23390 [ 1261.257811][T23388] ubi0: mtd0 is detached [ 1262.132616][T23405] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3102'. [ 1263.552409][T23437] futex_wake_op: syz.1.3109 tries to shift op by -2048; fix this program [ 1264.099841][T23445] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3112'. [ 1264.489595][T23459] random: crng reseeded on system resumption [ 1264.496515][T23452] FAULT_INJECTION: forcing a failure. [ 1264.496515][T23452] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.570750][T23452] CPU: 1 UID: 0 PID: 23452 Comm: syz.2.3115 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1264.570809][T23452] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1264.570823][T23452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1264.570845][T23452] Call Trace: [ 1264.570857][T23452] [ 1264.570870][T23452] dump_stack_lvl+0x100/0x190 [ 1264.570949][T23452] should_fail_ex.cold+0x5/0xa [ 1264.571012][T23452] should_failslab+0xc2/0x120 [ 1264.571063][T23452] kmem_cache_alloc_noprof+0x83/0x780 [ 1264.571110][T23452] ? sk_prot_alloc+0x60/0x2a0 [ 1264.571153][T23452] ? sk_prot_alloc+0x60/0x2a0 [ 1264.571187][T23452] sk_prot_alloc+0x60/0x2a0 [ 1264.571225][T23452] sk_alloc+0x36/0xe80 [ 1264.571276][T23452] inet_create+0x3a0/0x1060 [ 1264.571318][T23452] ? inet_create+0x94/0x1060 [ 1264.571365][T23452] __sock_create+0x339/0x860 [ 1264.571411][T23452] __sys_socket+0x14d/0x260 [ 1264.571450][T23452] ? __fget_files+0x21f/0x3d0 [ 1264.571488][T23452] ? __pfx___sys_socket+0x10/0x10 [ 1264.571528][T23452] ? xfd_validate_state+0x129/0x190 [ 1264.571591][T23452] __x64_sys_socket+0x72/0xb0 [ 1264.571631][T23452] ? lockdep_hardirqs_on+0x78/0x100 [ 1264.571673][T23452] do_syscall_64+0xc9/0xf80 [ 1264.571719][T23452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.571755][T23452] RIP: 0033:0x7f69bdf9aeb9 [ 1264.571781][T23452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.571814][T23452] RSP: 002b:00007f69bee78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1264.571847][T23452] RAX: ffffffffffffffda RBX: 00007f69be215fa0 RCX: 00007f69bdf9aeb9 [ 1264.571871][T23452] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 1264.571891][T23452] RBP: 00007f69be008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1264.571913][T23452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.571933][T23452] R13: 00007f69be216038 R14: 00007f69be215fa0 R15: 00007ffe9a9d57d8 [ 1264.571977][T23452] [ 1265.674517][T23472] FAULT_INJECTION: forcing a failure. [ 1265.674517][T23472] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.694880][T23472] CPU: 0 UID: 0 PID: 23472 Comm: syz.3.3118 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1265.694955][T23472] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1265.694965][T23472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1265.694979][T23472] Call Trace: [ 1265.694988][T23472] [ 1265.694997][T23472] dump_stack_lvl+0x100/0x190 [ 1265.695030][T23472] should_fail_ex.cold+0x5/0xa [ 1265.695071][T23472] should_failslab+0xc2/0x120 [ 1265.695105][T23472] ? constrain_params_by_rules+0x175/0xcc0 [ 1265.695139][T23472] __kmalloc_noprof+0xf6/0x9c0 [ 1265.695163][T23472] ? kernel_text_address+0x8d/0x100 [ 1265.695201][T23472] ? process_measurement+0x1ea/0x2400 [ 1265.695231][T23472] ? __kernel_text_address+0xd/0x30 [ 1265.695274][T23472] ? constrain_params_by_rules+0x175/0xcc0 [ 1265.695307][T23472] constrain_params_by_rules+0x175/0xcc0 [ 1265.695348][T23472] ? stack_trace_save+0x8e/0xc0 [ 1265.695379][T23472] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1265.695419][T23472] ? __kasan_kmalloc+0xaa/0xb0 [ 1265.695447][T23472] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 1265.695478][T23472] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1265.695507][T23472] ? snd_pcm_oss_write+0x4bb/0xa30 [ 1265.695544][T23472] ? rcu_is_watching+0x12/0xc0 [ 1265.695568][T23472] ? snd_interval_refine+0x2d0/0x580 [ 1265.695594][T23472] snd_pcm_hw_refine+0x7e7/0xad0 [ 1265.695633][T23472] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1265.695675][T23472] ? __asan_memset+0x23/0x50 [ 1265.695701][T23472] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 1265.695734][T23472] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 1265.695776][T23472] ? snd_pcm_oss_write+0x49a/0xa30 [ 1265.695806][T23472] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1265.695841][T23472] ? __pfx___mutex_lock+0x10/0x10 [ 1265.695882][T23472] ? get_pid_task+0xfc/0x250 [ 1265.695919][T23472] ? get_pid_task+0xfc/0x250 [ 1265.695955][T23472] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1265.695988][T23472] snd_pcm_oss_write+0x4bb/0xa30 [ 1265.696019][T23472] ? bpf_lsm_file_permission+0x9/0x10 [ 1265.696053][T23472] ? security_file_permission+0x76/0x210 [ 1265.696098][T23472] vfs_write+0x2aa/0x1070 [ 1265.696127][T23472] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1265.696160][T23472] ? __pfx_vfs_write+0x10/0x10 [ 1265.696185][T23472] ? find_held_lock+0x2b/0x80 [ 1265.696209][T23472] ? __fget_files+0x215/0x3d0 [ 1265.696235][T23472] ? __fget_files+0x215/0x3d0 [ 1265.696266][T23472] ? __fget_files+0x21f/0x3d0 [ 1265.696300][T23472] ksys_write+0x12a/0x250 [ 1265.696327][T23472] ? __pfx_ksys_write+0x10/0x10 [ 1265.696363][T23472] do_syscall_64+0xc9/0xf80 [ 1265.696396][T23472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.696420][T23472] RIP: 0033:0x7f4de5d9aeb9 [ 1265.696440][T23472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.696464][T23472] RSP: 002b:00007f4de6bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1265.696487][T23472] RAX: ffffffffffffffda RBX: 00007f4de6015fa0 RCX: 00007f4de5d9aeb9 [ 1265.696503][T23472] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1265.696517][T23472] RBP: 00007f4de6bbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.696532][T23472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.696546][T23472] R13: 00007f4de6016038 R14: 00007f4de6015fa0 R15: 00007ffc6f386e48 [ 1265.696576][T23472] [ 1267.702802][T23486] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3122'. [ 1269.485324][T23516] FAULT_INJECTION: forcing a failure. [ 1269.485324][T23516] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1269.498421][T23516] CPU: 1 UID: 0 PID: 23516 Comm: syz.2.3129 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1269.498462][T23516] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1269.498473][T23516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1269.498489][T23516] Call Trace: [ 1269.498497][T23516] [ 1269.498506][T23516] dump_stack_lvl+0x100/0x190 [ 1269.498547][T23516] should_fail_ex.cold+0x5/0xa [ 1269.498591][T23516] should_fail_futex+0x4c/0x60 [ 1269.498623][T23516] futex_lock_pi_atomic+0xe7/0xaf0 [ 1269.498671][T23516] futex_lock_pi+0x246/0x7b0 [ 1269.498715][T23516] ? __pfx_futex_lock_pi+0x10/0x10 [ 1269.498758][T23516] ? __pfx___futex_wait+0x10/0x10 [ 1269.498809][T23516] ? __pfx_futex_wake_mark+0x10/0x10 [ 1269.498859][T23516] ? ksys_write+0x190/0x250 [ 1269.498887][T23516] ? ksys_write+0x190/0x250 [ 1269.498921][T23516] do_futex+0x18a/0x350 [ 1269.498956][T23516] ? __pfx_do_futex+0x10/0x10 [ 1269.498999][T23516] __x64_sys_futex+0x34f/0x4d0 [ 1269.499038][T23516] ? fput+0x79/0x100 [ 1269.499072][T23516] ? __pfx___x64_sys_futex+0x10/0x10 [ 1269.499107][T23516] ? xfd_validate_state+0x129/0x190 [ 1269.499157][T23516] do_syscall_64+0xc9/0xf80 [ 1269.499192][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.499218][T23516] RIP: 0033:0x7f69bdf9aeb9 [ 1269.499237][T23516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.499263][T23516] RSP: 002b:00007f69bee78028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1269.499287][T23516] RAX: ffffffffffffffda RBX: 00007f69be215fa0 RCX: 00007f69bdf9aeb9 [ 1269.499304][T23516] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 1269.499320][T23516] RBP: 00007f69be008c1f R08: 0000000000000000 R09: 000000008000fff5 [ 1269.499335][T23516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.499351][T23516] R13: 00007f69be216038 R14: 00007f69be215fa0 R15: 00007ffe9a9d57d8 [ 1269.499382][T23516] [ 1270.130583][T23536] FAULT_INJECTION: forcing a failure. [ 1270.130583][T23536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1270.218418][T23536] CPU: 0 UID: 0 PID: 23536 Comm: syz.3.3132 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1270.218458][T23536] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1270.218467][T23536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1270.218482][T23536] Call Trace: [ 1270.218490][T23536] [ 1270.218500][T23536] dump_stack_lvl+0x100/0x190 [ 1270.218532][T23536] should_fail_ex.cold+0x5/0xa [ 1270.218572][T23536] _copy_from_user+0x2e/0xd0 [ 1270.218610][T23536] copy_msghdr_from_user+0x9f/0x4f0 [ 1270.218641][T23536] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1270.218674][T23536] ? _kstrtoull+0x13c/0x1f0 [ 1270.218714][T23536] ? __pfx__kstrtoull+0x10/0x10 [ 1270.218746][T23536] ___sys_sendmsg+0x106/0x1e0 [ 1270.218775][T23536] ? __pfx____sys_sendmsg+0x10/0x10 [ 1270.218830][T23536] ? __pfx___might_resched+0x10/0x10 [ 1270.218873][T23536] __sys_sendmmsg+0x205/0x430 [ 1270.218914][T23536] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1270.218958][T23536] ? __fget_files+0x215/0x3d0 [ 1270.218985][T23536] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1270.219028][T23536] ? fput+0x79/0x100 [ 1270.219062][T23536] ? ksys_write+0x1ac/0x250 [ 1270.219089][T23536] ? __pfx_ksys_write+0x10/0x10 [ 1270.219121][T23536] __x64_sys_sendmmsg+0x9c/0x100 [ 1270.219157][T23536] ? lockdep_hardirqs_on+0x78/0x100 [ 1270.219185][T23536] do_syscall_64+0xc9/0xf80 [ 1270.219217][T23536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.219241][T23536] RIP: 0033:0x7f4de5d9aeb9 [ 1270.219260][T23536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.219283][T23536] RSP: 002b:00007f4de6b9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1270.219306][T23536] RAX: ffffffffffffffda RBX: 00007f4de6016090 RCX: 00007f4de5d9aeb9 [ 1270.219322][T23536] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1270.219337][T23536] RBP: 00007f4de6b9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.219352][T23536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1270.219367][T23536] R13: 00007f4de6016128 R14: 00007f4de6016090 R15: 00007ffc6f386e48 [ 1270.219398][T23536] [ 1270.949821][T23542] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3135'. [ 1272.134767][T23549] FAULT_INJECTION: forcing a failure. [ 1272.134767][T23549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1272.181720][T23549] CPU: 1 UID: 0 PID: 23549 Comm: syz.0.3136 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1272.181763][T23549] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1272.181774][T23549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1272.181789][T23549] Call Trace: [ 1272.181797][T23549] [ 1272.181807][T23549] dump_stack_lvl+0x100/0x190 [ 1272.181841][T23549] should_fail_ex.cold+0x5/0xa [ 1272.181880][T23549] ? prepare_alloc_pages+0x16d/0x5f0 [ 1272.181922][T23549] should_fail_alloc_page+0xeb/0x140 [ 1272.181961][T23549] prepare_alloc_pages+0x1f0/0x5f0 [ 1272.182001][T23549] ? rcu_is_watching+0x12/0xc0 [ 1272.182030][T23549] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1272.182064][T23549] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1272.182095][T23549] ? is_bpf_text_address+0x94/0x1a0 [ 1272.182119][T23549] ? kernel_text_address+0x8d/0x100 [ 1272.182166][T23549] ? is_bpf_text_address+0x94/0x1a0 [ 1272.182189][T23549] ? __kernel_text_address+0xd/0x30 [ 1272.182230][T23549] ? unwind_get_return_address+0x59/0xa0 [ 1272.182263][T23549] ? arch_stack_walk+0xa6/0xf0 [ 1272.182294][T23549] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1272.182336][T23549] ? __pfx_stack_trace_save+0x10/0x10 [ 1272.182364][T23549] ? stack_trace_save+0x8e/0xc0 [ 1272.182392][T23549] ? stack_depot_save_flags+0x27/0x9c0 [ 1272.182433][T23549] ? stack_depot_save_flags+0x27/0x9c0 [ 1272.182474][T23549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1272.182504][T23549] ? policy_nodemask+0xed/0x4f0 [ 1272.182543][T23549] alloc_pages_mpol+0x1fb/0x550 [ 1272.182587][T23549] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1272.182632][T23549] alloc_pages_noprof+0x131/0x390 [ 1272.182672][T23549] kimage_alloc_pages+0x72/0x380 [ 1272.182703][T23549] kimage_alloc_control_pages+0x157/0xa20 [ 1272.182740][T23549] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1272.182779][T23549] do_kexec_load+0x275/0x810 [ 1272.182811][T23549] ? __pfx_do_kexec_load+0x10/0x10 [ 1272.182844][T23549] ? _copy_from_user+0x59/0xd0 [ 1272.182886][T23549] __x64_sys_kexec_load+0x1bf/0x230 [ 1272.182919][T23549] do_syscall_64+0xc9/0xf80 [ 1272.182954][T23549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.182980][T23549] RIP: 0033:0x7fea2639aeb9 [ 1272.183000][T23549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.183025][T23549] RSP: 002b:00007fea2719c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1272.183050][T23549] RAX: ffffffffffffffda RBX: 00007fea26616180 RCX: 00007fea2639aeb9 [ 1272.183067][T23549] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000000000ff [ 1272.183083][T23549] RBP: 00007fea26408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1272.183098][T23549] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1272.183114][T23549] R13: 00007fea26616218 R14: 00007fea26616180 R15: 00007ffc9b068a68 [ 1272.183146][T23549] [ 1272.183217][T23549] kexec: Could not allocate control_code_buffer [ 1277.303920][T23635] futex_wake_op: syz.3.3154 tries to shift op by -2048; fix this program [ 1277.338528][T23635] futex_wake_op: syz.3.3154 tries to shift op by -2048; fix this program [ 1277.493711][ T30] audit: type=1804 audit(4171.920:206): pid=23636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3152" name="/newroot/195/file0" dev="tmpfs" ino=1022 res=1 errno=0 [ 1277.538884][ T30] audit: type=1804 audit(4171.950:207): pid=23638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3152" name="/newroot/195/file0" dev="tmpfs" ino=1022 res=1 errno=0 [ 1279.239965][T23662] FAULT_INJECTION: forcing a failure. [ 1279.239965][T23662] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.261911][T23662] CPU: 0 UID: 0 PID: 23662 Comm: syz.1.3158 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1279.261955][T23662] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1279.261965][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1279.261987][T23662] Call Trace: [ 1279.261996][T23662] [ 1279.262006][T23662] dump_stack_lvl+0x100/0x190 [ 1279.262041][T23662] should_fail_ex.cold+0x5/0xa [ 1279.262084][T23662] should_failslab+0xc2/0x120 [ 1279.262120][T23662] ? lsm_blob_alloc+0x68/0x90 [ 1279.262147][T23662] __kmalloc_noprof+0xf6/0x9c0 [ 1279.262175][T23662] ? sk_prot_alloc+0x10b/0x2a0 [ 1279.262203][T23662] ? rcu_is_watching+0x12/0xc0 [ 1279.262227][T23662] ? sk_prot_alloc+0x10b/0x2a0 [ 1279.262258][T23662] ? lsm_blob_alloc+0x68/0x90 [ 1279.262284][T23662] lsm_blob_alloc+0x68/0x90 [ 1279.262312][T23662] security_sk_alloc+0x2d/0x290 [ 1279.262347][T23662] sk_prot_alloc+0x12a/0x2a0 [ 1279.262377][T23662] sk_alloc+0x36/0xe80 [ 1279.262413][T23662] tun_chr_open+0x82/0x5e0 [ 1279.262450][T23662] ? __pfx_tun_chr_open+0x10/0x10 [ 1279.262487][T23662] misc_open+0x26d/0x450 [ 1279.262518][T23662] ? __pfx_misc_open+0x10/0x10 [ 1279.262547][T23662] chrdev_open+0x234/0x6a0 [ 1279.262579][T23662] ? __pfx_apparmor_file_open+0x10/0x10 [ 1279.262613][T23662] ? __pfx_chrdev_open+0x10/0x10 [ 1279.262647][T23662] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1279.262685][T23662] do_dentry_open+0x73e/0x1570 [ 1279.262715][T23662] ? __pfx_chrdev_open+0x10/0x10 [ 1279.262748][T23662] ? security_inode_permission+0xbf/0x250 [ 1279.262791][T23662] vfs_open+0x82/0x3f0 [ 1279.262833][T23662] path_openat+0x21dc/0x3120 [ 1279.262874][T23662] ? __pfx_path_openat+0x10/0x10 [ 1279.262915][T23662] do_filp_open+0x1f7/0x420 [ 1279.262948][T23662] ? __pfx_do_filp_open+0x10/0x10 [ 1279.263005][T23662] ? _raw_spin_unlock+0x28/0x50 [ 1279.263032][T23662] ? alloc_fd+0x476/0x790 [ 1279.263070][T23662] do_sys_openat2+0x12e/0x220 [ 1279.263110][T23662] ? __pfx_do_sys_openat2+0x10/0x10 [ 1279.263153][T23662] ? __fget_files+0x21f/0x3d0 [ 1279.263187][T23662] __x64_sys_openat+0x12d/0x210 [ 1279.263229][T23662] ? __pfx___x64_sys_openat+0x10/0x10 [ 1279.263268][T23662] ? xfd_validate_state+0x129/0x190 [ 1279.263363][T23662] do_syscall_64+0xc9/0xf80 [ 1279.263411][T23662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.263438][T23662] RIP: 0033:0x7f649739aeb9 [ 1279.263458][T23662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.263484][T23662] RSP: 002b:00007f649825d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1279.263508][T23662] RAX: ffffffffffffffda RBX: 00007f6497615fa0 RCX: 00007f649739aeb9 [ 1279.263525][T23662] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1279.263542][T23662] RBP: 00007f6497408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1279.263558][T23662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.263573][T23662] R13: 00007f6497616038 R14: 00007f6497615fa0 R15: 00007ffe3aac3b88 [ 1279.263606][T23662] [ 1280.120155][T23668] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3159'. [ 1283.510030][T23703] synth uevent: /bus/mei: unknown uevent action string [ 1283.564633][T23709] synth uevent: /bus/mei: unknown uevent action string [ 1285.080573][T23719] FAULT_INJECTION: forcing a failure. [ 1285.080573][T23719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1285.172933][T23719] CPU: 1 UID: 0 PID: 23719 Comm: syz.2.3171 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1285.172991][T23719] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1285.173005][T23719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1285.173027][T23719] Call Trace: [ 1285.173038][T23719] [ 1285.173051][T23719] dump_stack_lvl+0x100/0x190 [ 1285.173099][T23719] should_fail_ex.cold+0x5/0xa [ 1285.173151][T23719] ? prepare_alloc_pages+0x16d/0x5f0 [ 1285.173218][T23719] should_fail_alloc_page+0xeb/0x140 [ 1285.173270][T23719] prepare_alloc_pages+0x1f0/0x5f0 [ 1285.173328][T23719] ? rcu_is_watching+0x12/0xc0 [ 1285.173367][T23719] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1285.173412][T23719] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1285.173455][T23719] ? is_bpf_text_address+0x94/0x1a0 [ 1285.173488][T23719] ? kernel_text_address+0x8d/0x100 [ 1285.173541][T23719] ? is_bpf_text_address+0x94/0x1a0 [ 1285.173573][T23719] ? __kernel_text_address+0xd/0x30 [ 1285.173629][T23719] ? unwind_get_return_address+0x59/0xa0 [ 1285.173675][T23719] ? arch_stack_walk+0xa6/0xf0 [ 1285.173715][T23719] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1285.173775][T23719] ? __pfx_stack_trace_save+0x10/0x10 [ 1285.173813][T23719] ? stack_trace_save+0x8e/0xc0 [ 1285.173850][T23719] ? stack_depot_save_flags+0x27/0x9c0 [ 1285.173906][T23719] ? stack_depot_save_flags+0x27/0x9c0 [ 1285.173962][T23719] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1285.174004][T23719] ? policy_nodemask+0xed/0x4f0 [ 1285.174057][T23719] alloc_pages_mpol+0x1fb/0x550 [ 1285.174107][T23719] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1285.174168][T23719] alloc_pages_noprof+0x131/0x390 [ 1285.174229][T23719] kimage_alloc_pages+0x72/0x380 [ 1285.174272][T23719] kimage_alloc_control_pages+0x157/0xa20 [ 1285.174324][T23719] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1285.174379][T23719] do_kexec_load+0x275/0x810 [ 1285.174425][T23719] ? __pfx_do_kexec_load+0x10/0x10 [ 1285.174471][T23719] ? _copy_from_user+0x59/0xd0 [ 1285.174528][T23719] __x64_sys_kexec_load+0x1bf/0x230 [ 1285.174575][T23719] do_syscall_64+0xc9/0xf80 [ 1285.174621][T23719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.174655][T23719] RIP: 0033:0x7f69bdf9aeb9 [ 1285.174682][T23719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.174717][T23719] RSP: 002b:00007f69bee78028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1285.174750][T23719] RAX: ffffffffffffffda RBX: 00007f69be215fa0 RCX: 00007f69bdf9aeb9 [ 1285.174773][T23719] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000000000ff [ 1285.174794][T23719] RBP: 00007f69be008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1285.174816][T23719] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1285.174836][T23719] R13: 00007f69be216038 R14: 00007f69be215fa0 R15: 00007ffe9a9d57d8 [ 1285.174878][T23719] [ 1285.653744][T23719] kexec: Could not allocate control_code_buffer [ 1286.447394][T23736] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3174'. [ 1287.486076][T23772] FAULT_INJECTION: forcing a failure. [ 1287.486076][T23772] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.556382][T23772] CPU: 0 UID: 0 PID: 23772 Comm: syz.3.3181 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1287.556426][T23772] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1287.556436][T23772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1287.556452][T23772] Call Trace: [ 1287.556461][T23772] [ 1287.556472][T23772] dump_stack_lvl+0x100/0x190 [ 1287.556506][T23772] should_fail_ex.cold+0x5/0xa [ 1287.556549][T23772] should_failslab+0xc2/0x120 [ 1287.556586][T23772] kmem_cache_alloc_noprof+0x83/0x780 [ 1287.556620][T23772] ? aa_file_perm+0x277/0x1540 [ 1287.556645][T23772] ? locks_get_lock_context+0x217/0x3e0 [ 1287.556688][T23772] ? locks_get_lock_context+0x217/0x3e0 [ 1287.556724][T23772] locks_get_lock_context+0x217/0x3e0 [ 1287.556764][T23772] posix_lock_inode+0xcc/0x23e0 [ 1287.556800][T23772] ? __pfx_posix_lock_inode+0x10/0x10 [ 1287.556829][T23772] ? common_file_perm+0x1ab/0x4f0 [ 1287.556871][T23772] vfs_lock_file+0xfb/0x150 [ 1287.556897][T23772] fcntl_setlk+0x469/0xde0 [ 1287.556939][T23772] ? __pfx_fcntl_setlk+0x10/0x10 [ 1287.557007][T23772] ? rep_movs_alternative+0x30/0x90 [ 1287.557069][T23772] do_fcntl+0xf39/0x1670 [ 1287.557113][T23772] ? __pfx_do_fcntl+0x10/0x10 [ 1287.557148][T23772] ? __fget_files+0x215/0x3d0 [ 1287.557187][T23772] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1287.557223][T23772] __x64_sys_fcntl+0x163/0x200 [ 1287.557264][T23772] do_syscall_64+0xc9/0xf80 [ 1287.557298][T23772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.557324][T23772] RIP: 0033:0x7f4de5d9aeb9 [ 1287.557357][T23772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.557393][T23772] RSP: 002b:00007f4de6bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1287.557428][T23772] RAX: ffffffffffffffda RBX: 00007f4de6015fa0 RCX: 00007f4de5d9aeb9 [ 1287.557456][T23772] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 0000000000000008 [ 1287.557473][T23772] RBP: 00007f4de5e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1287.557489][T23772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1287.557504][T23772] R13: 00007f4de6016038 R14: 00007f4de6015fa0 R15: 00007ffc6f386e48 [ 1287.557537][T23772] [ 1289.643530][T23792] netlink: 'syz.1.3185': attribute type 11 has an invalid length. [ 1291.158499][T23797] FAULT_INJECTION: forcing a failure. [ 1291.158499][T23797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1291.250289][T23797] CPU: 0 UID: 0 PID: 23797 Comm: syz.1.3186 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1291.250347][T23797] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1291.250361][T23797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1291.250384][T23797] Call Trace: [ 1291.250394][T23797] [ 1291.250404][T23797] dump_stack_lvl+0x100/0x190 [ 1291.250438][T23797] should_fail_ex.cold+0x5/0xa [ 1291.250476][T23797] ? prepare_alloc_pages+0x16d/0x5f0 [ 1291.250519][T23797] should_fail_alloc_page+0xeb/0x140 [ 1291.250559][T23797] prepare_alloc_pages+0x1f0/0x5f0 [ 1291.250598][T23797] ? rcu_is_watching+0x12/0xc0 [ 1291.250627][T23797] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1291.250661][T23797] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1291.250693][T23797] ? is_bpf_text_address+0x94/0x1a0 [ 1291.250717][T23797] ? kernel_text_address+0x8d/0x100 [ 1291.250757][T23797] ? is_bpf_text_address+0x94/0x1a0 [ 1291.250780][T23797] ? __kernel_text_address+0xd/0x30 [ 1291.250820][T23797] ? unwind_get_return_address+0x59/0xa0 [ 1291.250853][T23797] ? arch_stack_walk+0xa6/0xf0 [ 1291.250883][T23797] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1291.250932][T23797] ? __pfx_stack_trace_save+0x10/0x10 [ 1291.250962][T23797] ? stack_depot_save_flags+0x27/0x9c0 [ 1291.251005][T23797] ? stack_depot_save_flags+0x27/0x9c0 [ 1291.251046][T23797] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1291.251076][T23797] ? policy_nodemask+0xed/0x4f0 [ 1291.251115][T23797] alloc_pages_mpol+0x1fb/0x550 [ 1291.251153][T23797] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1291.251198][T23797] alloc_pages_noprof+0x131/0x390 [ 1291.251237][T23797] kimage_alloc_pages+0x72/0x380 [ 1291.251275][T23797] kimage_alloc_control_pages+0x157/0xa20 [ 1291.251312][T23797] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1291.251351][T23797] do_kexec_load+0x275/0x810 [ 1291.251383][T23797] ? __pfx_do_kexec_load+0x10/0x10 [ 1291.251417][T23797] ? _copy_from_user+0x59/0xd0 [ 1291.251459][T23797] __x64_sys_kexec_load+0x1bf/0x230 [ 1291.251493][T23797] do_syscall_64+0xc9/0xf80 [ 1291.251528][T23797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.251555][T23797] RIP: 0033:0x7f649739aeb9 [ 1291.251575][T23797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.251601][T23797] RSP: 002b:00007f649825d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1291.251626][T23797] RAX: ffffffffffffffda RBX: 00007f6497615fa0 RCX: 00007f649739aeb9 [ 1291.251644][T23797] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000000000ff [ 1291.251659][T23797] RBP: 00007f6497408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1291.251675][T23797] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1291.251691][T23797] R13: 00007f6497616038 R14: 00007f6497615fa0 R15: 00007ffe3aac3b88 [ 1291.251723][T23797] [ 1291.251787][T23797] kexec: Could not allocate control_code_buffer [ 1292.127216][T23821] FAULT_INJECTION: forcing a failure. [ 1292.127216][T23821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1292.140652][T23821] CPU: 0 UID: 0 PID: 23821 Comm: syz.0.3192 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1292.140690][T23821] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1292.140700][T23821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1292.140714][T23821] Call Trace: [ 1292.140722][T23821] [ 1292.140731][T23821] dump_stack_lvl+0x100/0x190 [ 1292.140765][T23821] should_fail_ex.cold+0x5/0xa [ 1292.140805][T23821] _copy_from_user+0x2e/0xd0 [ 1292.140843][T23821] snd_pcm_oss_write2+0x1c2/0x400 [ 1292.140875][T23821] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1292.140905][T23821] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1292.140949][T23821] snd_pcm_oss_write+0x729/0xa30 [ 1292.140981][T23821] ? security_file_permission+0x76/0x210 [ 1292.141038][T23821] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1292.141066][T23821] vfs_writev+0x5ea/0xe10 [ 1292.141090][T23821] ? get_pid_task+0x106/0x250 [ 1292.141128][T23821] ? __pfx_vfs_writev+0x10/0x10 [ 1292.141154][T23821] ? find_held_lock+0x2b/0x80 [ 1292.141193][T23821] ? __fget_files+0x21f/0x3d0 [ 1292.141227][T23821] ? do_writev+0x13e/0x340 [ 1292.141249][T23821] do_writev+0x13e/0x340 [ 1292.141274][T23821] ? __pfx_do_writev+0x10/0x10 [ 1292.141306][T23821] do_syscall_64+0xc9/0xf80 [ 1292.141337][T23821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.141361][T23821] RIP: 0033:0x7fea2639aeb9 [ 1292.141380][T23821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.141402][T23821] RSP: 002b:00007fea271de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1292.141425][T23821] RAX: ffffffffffffffda RBX: 00007fea26615fa0 RCX: 00007fea2639aeb9 [ 1292.141441][T23821] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1292.141456][T23821] RBP: 00007fea271de090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.141471][T23821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1292.141485][T23821] R13: 00007fea26616038 R14: 00007fea26615fa0 R15: 00007ffc9b068a68 [ 1292.141515][T23821] [ 1292.576328][T23809] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3189'. [ 1293.269138][T23830] FAULT_INJECTION: forcing a failure. [ 1293.269138][T23830] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.313421][T23830] CPU: 1 UID: 0 PID: 23830 Comm: syz.1.3195 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1293.313483][T23830] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1293.313498][T23830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1293.313521][T23830] Call Trace: [ 1293.313533][T23830] [ 1293.313547][T23830] dump_stack_lvl+0x100/0x190 [ 1293.313597][T23830] should_fail_ex.cold+0x5/0xa [ 1293.313656][T23830] should_failslab+0xc2/0x120 [ 1293.313718][T23830] kmem_cache_alloc_noprof+0x83/0x780 [ 1293.313774][T23830] ? sk_prot_alloc+0x60/0x2a0 [ 1293.313820][T23830] ? sk_prot_alloc+0x60/0x2a0 [ 1293.313856][T23830] ? net_generic+0xea/0x2a0 [ 1293.313892][T23830] sk_prot_alloc+0x60/0x2a0 [ 1293.313934][T23830] sk_alloc+0x36/0xe80 [ 1293.313985][T23830] kcm_create+0xfc/0x6a0 [ 1293.314030][T23830] __sock_create+0x339/0x860 [ 1293.314077][T23830] __sys_socket+0x14d/0x260 [ 1293.314117][T23830] ? __fget_files+0x21f/0x3d0 [ 1293.314156][T23830] ? __pfx___sys_socket+0x10/0x10 [ 1293.314197][T23830] ? xfd_validate_state+0x129/0x190 [ 1293.314265][T23830] __x64_sys_socket+0x72/0xb0 [ 1293.314306][T23830] ? lockdep_hardirqs_on+0x78/0x100 [ 1293.314348][T23830] do_syscall_64+0xc9/0xf80 [ 1293.314396][T23830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.314433][T23830] RIP: 0033:0x7f649739aeb9 [ 1293.314462][T23830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.314497][T23830] RSP: 002b:00007f649825d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1293.314531][T23830] RAX: ffffffffffffffda RBX: 00007f6497615fa0 RCX: 00007f649739aeb9 [ 1293.314555][T23830] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 1293.314578][T23830] RBP: 00007f6497408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1293.314600][T23830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1293.314623][T23830] R13: 00007f6497616038 R14: 00007f6497615fa0 R15: 00007ffe3aac3b88 [ 1293.314669][T23830] [ 1293.595616][T23830] ovs_: entered promiscuous mode [ 1294.869376][T23852] FAULT_INJECTION: forcing a failure. [ 1294.869376][T23852] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.932186][T23852] CPU: 0 UID: 0 PID: 23852 Comm: syz.3.3200 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1294.932243][T23852] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1294.932258][T23852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1294.932279][T23852] Call Trace: [ 1294.932304][T23852] [ 1294.932317][T23852] dump_stack_lvl+0x100/0x190 [ 1294.932365][T23852] should_fail_ex.cold+0x5/0xa [ 1294.932421][T23852] should_failslab+0xc2/0x120 [ 1294.932469][T23852] __kmalloc_cache_noprof+0x80/0x810 [ 1294.932497][T23852] ? kernfs_iop_get_link+0x65/0x16a0 [ 1294.932532][T23852] ? kernfs_iop_get_link+0x65/0x16a0 [ 1294.932563][T23852] kernfs_iop_get_link+0x65/0x16a0 [ 1294.932596][T23852] ? atime_needs_update+0x8b/0x6b0 [ 1294.932640][T23852] pick_link+0xd17/0x13c0 [ 1294.932664][T23852] ? __pfx_kernfs_iop_get_link+0x10/0x10 [ 1294.932697][T23852] step_into_slowpath+0x6c2/0xf50 [ 1294.932728][T23852] ? __pfx_step_into_slowpath+0x10/0x10 [ 1294.932755][T23852] ? __pfx___up_read+0x10/0x10 [ 1294.932794][T23852] ? path_openat+0x1654/0x3120 [ 1294.932824][T23852] ? lookup_fast+0x2da/0x600 [ 1294.932852][T23852] path_openat+0xf95/0x3120 [ 1294.932891][T23852] ? __pfx_path_openat+0x10/0x10 [ 1294.932933][T23852] do_filp_open+0x1f7/0x420 [ 1294.932966][T23852] ? __pfx_do_filp_open+0x10/0x10 [ 1294.933017][T23852] ? _raw_spin_unlock+0x28/0x50 [ 1294.933042][T23852] ? alloc_fd+0x476/0x790 [ 1294.933079][T23852] do_sys_openat2+0x12e/0x220 [ 1294.933119][T23852] ? __pfx_do_sys_openat2+0x10/0x10 [ 1294.933170][T23852] __x64_sys_openat+0x12d/0x210 [ 1294.933211][T23852] ? __pfx___x64_sys_openat+0x10/0x10 [ 1294.933250][T23852] ? xfd_validate_state+0x129/0x190 [ 1294.933342][T23852] do_syscall_64+0xc9/0xf80 [ 1294.933397][T23852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.933423][T23852] RIP: 0033:0x7f4de5d9aeb9 [ 1294.933442][T23852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.933466][T23852] RSP: 002b:00007f4de6bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1294.933489][T23852] RAX: ffffffffffffffda RBX: 00007f4de6015fa0 RCX: 00007f4de5d9aeb9 [ 1294.933506][T23852] RDX: 0000000000000100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1294.933523][T23852] RBP: 00007f4de5e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1294.933538][T23852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1294.933553][T23852] R13: 00007f4de6016038 R14: 00007f4de6015fa0 R15: 00007ffc6f386e48 [ 1294.933584][T23852] [ 1298.775383][T23910] FAULT_INJECTION: forcing a failure. [ 1298.775383][T23910] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.828634][T23910] CPU: 1 UID: 0 PID: 23910 Comm: syz.1.3212 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1298.828693][T23910] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1298.828707][T23910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1298.828729][T23910] Call Trace: [ 1298.828739][T23910] [ 1298.828753][T23910] dump_stack_lvl+0x100/0x190 [ 1298.828800][T23910] should_fail_ex.cold+0x5/0xa [ 1298.828859][T23910] should_failslab+0xc2/0x120 [ 1298.828909][T23910] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1298.828969][T23910] ? __d_alloc+0x34/0xa80 [ 1298.829020][T23910] ? __d_alloc+0x34/0xa80 [ 1298.829062][T23910] __d_alloc+0x34/0xa80 [ 1298.829112][T23910] d_alloc_parallel+0x111/0x14e0 [ 1298.829156][T23910] ? find_held_lock+0x2b/0x80 [ 1298.829190][T23910] ? __d_lookup+0x25c/0x4a0 [ 1298.829222][T23910] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1298.829262][T23910] ? __d_lookup+0x266/0x4a0 [ 1298.829303][T23910] lookup_open.isra.0+0x633/0x1890 [ 1298.829337][T23910] ? __pfx___up_read+0x10/0x10 [ 1298.829386][T23910] ? kernfs_iop_permission+0x10/0xc0 [ 1298.829438][T23910] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1298.829497][T23910] ? lookup_fast+0x2da/0x600 [ 1298.829536][T23910] path_openat+0xa9b/0x3120 [ 1298.829592][T23910] ? __pfx_path_openat+0x10/0x10 [ 1298.829649][T23910] do_filp_open+0x1f7/0x420 [ 1298.829695][T23910] ? __pfx_do_filp_open+0x10/0x10 [ 1298.829753][T23910] ? __pfx_kfree_link+0x10/0x10 [ 1298.829811][T23910] ? _raw_spin_unlock+0x28/0x50 [ 1298.829848][T23910] ? alloc_fd+0x476/0x790 [ 1298.829900][T23910] do_sys_openat2+0x12e/0x220 [ 1298.829963][T23910] ? __pfx_do_sys_openat2+0x10/0x10 [ 1298.830030][T23910] __x64_sys_openat+0x12d/0x210 [ 1298.830092][T23910] ? __pfx___x64_sys_openat+0x10/0x10 [ 1298.830144][T23910] ? xfd_validate_state+0x129/0x190 [ 1298.830212][T23910] do_syscall_64+0xc9/0xf80 [ 1298.830257][T23910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.830293][T23910] RIP: 0033:0x7f649739aeb9 [ 1298.830321][T23910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.830356][T23910] RSP: 002b:00007f649825d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1298.830389][T23910] RAX: ffffffffffffffda RBX: 00007f6497615fa0 RCX: 00007f649739aeb9 [ 1298.830413][T23910] RDX: 0000000000000100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1298.830435][T23910] RBP: 00007f6497408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1298.830458][T23910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.830478][T23910] R13: 00007f6497616038 R14: 00007f6497615fa0 R15: 00007ffe3aac3b88 [ 1298.830524][T23910] [ 1299.564471][T23929] FAULT_INJECTION: forcing a failure. [ 1299.564471][T23929] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.580478][T23929] CPU: 1 UID: 0 PID: 23929 Comm: syz.0.3215 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1299.580518][T23929] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1299.580528][T23929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1299.580543][T23929] Call Trace: [ 1299.580550][T23929] [ 1299.580560][T23929] dump_stack_lvl+0x100/0x190 [ 1299.580593][T23929] should_fail_ex.cold+0x5/0xa [ 1299.580634][T23929] should_failslab+0xc2/0x120 [ 1299.580668][T23929] ? constrain_params_by_rules+0x175/0xcc0 [ 1299.580702][T23929] __kmalloc_noprof+0xf6/0x9c0 [ 1299.580725][T23929] ? kernel_text_address+0x8d/0x100 [ 1299.580764][T23929] ? __kernel_text_address+0xd/0x30 [ 1299.580808][T23929] ? constrain_params_by_rules+0x175/0xcc0 [ 1299.580840][T23929] constrain_params_by_rules+0x175/0xcc0 [ 1299.580883][T23929] ? stack_trace_save+0x8e/0xc0 [ 1299.580915][T23929] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1299.580957][T23929] ? __kasan_kmalloc+0xaa/0xb0 [ 1299.580986][T23929] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 1299.581017][T23929] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1299.581047][T23929] ? snd_pcm_oss_sync+0x265/0x840 [ 1299.581086][T23929] ? snd_interval_refine+0x2d0/0x580 [ 1299.581113][T23929] snd_pcm_hw_refine+0x7e7/0xad0 [ 1299.581158][T23929] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1299.581205][T23929] ? snd_interval_refine+0x2d0/0x580 [ 1299.581231][T23929] snd_pcm_oss_change_params_locked+0xdb3/0x39f0 [ 1299.581275][T23929] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1299.581328][T23929] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1299.581360][T23929] snd_pcm_oss_sync+0x265/0x840 [ 1299.581394][T23929] snd_pcm_oss_release+0x238/0x300 [ 1299.581424][T23929] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1299.581455][T23929] __fput+0x3ff/0xb40 [ 1299.581495][T23929] task_work_run+0x150/0x240 [ 1299.581532][T23929] ? __pfx_task_work_run+0x10/0x10 [ 1299.581577][T23929] exit_to_user_mode_loop+0x100/0x4b0 [ 1299.581612][T23929] ? rcu_is_watching+0x12/0xc0 [ 1299.581638][T23929] do_syscall_64+0x4ea/0xf80 [ 1299.581671][T23929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.581696][T23929] RIP: 0033:0x7fea2639aeb9 [ 1299.581714][T23929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.581737][T23929] RSP: 002b:00007fea271de028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1299.581760][T23929] RAX: 0000000000000000 RBX: 00007fea26615fa0 RCX: 00007fea2639aeb9 [ 1299.581776][T23929] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1299.581791][T23929] RBP: 00007fea271de090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.581806][T23929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1299.581820][T23929] R13: 00007fea26616038 R14: 00007fea26615fa0 R15: 00007ffc9b068a68 [ 1299.581851][T23929] [ 1301.945768][T23964] Invalid ELF header magic: != ELF [ 1301.962398][T23934] kexec: Could not allocate control_code_buffer [ 1304.034947][T23991] FAULT_INJECTION: forcing a failure. [ 1304.034947][T23991] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.048820][T23991] CPU: 0 UID: 0 PID: 23991 Comm: syz.0.3225 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1304.048886][T23991] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1304.048901][T23991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1304.048923][T23991] Call Trace: [ 1304.048935][T23991] [ 1304.048949][T23991] dump_stack_lvl+0x100/0x190 [ 1304.048999][T23991] should_fail_ex.cold+0x5/0xa [ 1304.049055][T23991] should_failslab+0xc2/0x120 [ 1304.049106][T23991] kmem_cache_alloc_noprof+0x83/0x780 [ 1304.049152][T23991] ? __pfx_map_id_range_down+0x10/0x10 [ 1304.049189][T23991] ? security_inode_alloc+0x3b/0x2c0 [ 1304.049242][T23991] ? security_inode_alloc+0x3b/0x2c0 [ 1304.049286][T23991] security_inode_alloc+0x3b/0x2c0 [ 1304.049336][T23991] inode_init_always_gfp+0xced/0x1040 [ 1304.049393][T23991] alloc_inode+0x8e/0x250 [ 1304.049446][T23991] iget_locked+0x1d9/0x6d0 [ 1304.049500][T23991] ? __pfx_iget_locked+0x10/0x10 [ 1304.049551][T23991] ? kernfs_root+0xee/0x2a0 [ 1304.049599][T23991] ? kernfs_root+0xee/0x2a0 [ 1304.049656][T23991] kernfs_get_inode+0x46/0x470 [ 1304.049704][T23991] kernfs_iop_lookup+0x1a7/0x2d0 [ 1304.049759][T23991] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 1304.049809][T23991] lookup_open.isra.0+0x486/0x1890 [ 1304.049862][T23991] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1304.049924][T23991] ? lookup_fast+0x2da/0x600 [ 1304.049961][T23991] path_openat+0xa9b/0x3120 [ 1304.050011][T23991] ? __pfx_path_openat+0x10/0x10 [ 1304.050060][T23991] do_filp_open+0x1f7/0x420 [ 1304.050097][T23991] ? __pfx_do_filp_open+0x10/0x10 [ 1304.050145][T23991] ? __pfx_kfree_link+0x10/0x10 [ 1304.050200][T23991] ? _raw_spin_unlock+0x28/0x50 [ 1304.050230][T23991] ? alloc_fd+0x476/0x790 [ 1304.050273][T23991] do_sys_openat2+0x12e/0x220 [ 1304.050319][T23991] ? __pfx_do_sys_openat2+0x10/0x10 [ 1304.050378][T23991] __x64_sys_openat+0x12d/0x210 [ 1304.050425][T23991] ? __pfx___x64_sys_openat+0x10/0x10 [ 1304.050470][T23991] ? xfd_validate_state+0x129/0x190 [ 1304.050529][T23991] do_syscall_64+0xc9/0xf80 [ 1304.050567][T23991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.050598][T23991] RIP: 0033:0x7fea2639aeb9 [ 1304.050621][T23991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.050649][T23991] RSP: 002b:00007fea271de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1304.050678][T23991] RAX: ffffffffffffffda RBX: 00007fea26615fa0 RCX: 00007fea2639aeb9 [ 1304.050697][T23991] RDX: 0000000000000100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1304.050716][T23991] RBP: 00007fea26408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1304.050734][T23991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.050752][T23991] R13: 00007fea26616038 R14: 00007fea26615fa0 R15: 00007ffc9b068a68 [ 1304.050790][T23991] [ 1305.733529][ T30] audit: type=1800 audit(4200.090:208): pid=24022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3234" name="#896" dev="tmpfs" ino=896 res=0 errno=0 [ 1305.890628][ T30] audit: type=1800 audit(4200.090:209): pid=24022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3234" name="#896" dev="tmpfs" ino=896 res=0 errno=0 [ 1309.498673][T24078] Invalid ELF header magic: != ELF [ 1310.146816][ T30] audit: type=1800 audit(4204.560:210): pid=24093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3252" name="#1283" dev="tmpfs" ino=1283 res=0 errno=0 [ 1310.216804][ T30] audit: type=1800 audit(4204.560:211): pid=24093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3252" name="#1283" dev="tmpfs" ino=1283 res=0 errno=0 [ 1310.588203][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.594910][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.901304][T24105] binder: 24104:24105 ioctl c018620c 0 returned -1 [ 1312.458493][T24126] zswap: compressor not available [ 1313.178552][T21187] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1313.834883][T24159] FAULT_INJECTION: forcing a failure. [ 1313.834883][T24159] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.847743][T24159] CPU: 1 UID: 0 PID: 24159 Comm: syz.2.3266 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1313.847786][T24159] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1313.847796][T24159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1313.847812][T24159] Call Trace: [ 1313.847821][T24159] [ 1313.847832][T24159] dump_stack_lvl+0x100/0x190 [ 1313.847867][T24159] should_fail_ex.cold+0x5/0xa [ 1313.847910][T24159] should_failslab+0xc2/0x120 [ 1313.847946][T24159] ? ops_init+0x77/0x5f0 [ 1313.847984][T24159] __kmalloc_noprof+0xf6/0x9c0 [ 1313.848008][T24159] ? kasan_save_track+0x14/0x30 [ 1313.848040][T24159] ? lockdep_init_map_type+0x5c/0x250 [ 1313.848083][T24159] ? ops_init+0x77/0x5f0 [ 1313.848119][T24159] ops_init+0x77/0x5f0 [ 1313.848162][T24159] setup_net+0x118/0x3a0 [ 1313.848185][T24159] ? __pfx_setup_net+0x10/0x10 [ 1313.848206][T24159] ? lockdep_init_map_type+0x5c/0x250 [ 1313.848242][T24159] ? mutex_init_lockep+0x110/0x150 [ 1313.848283][T24159] copy_net_ns+0x46f/0x7c0 [ 1313.848312][T24159] create_new_namespaces+0x3ea/0xab0 [ 1313.848348][T24159] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1313.848380][T24159] ksys_unshare+0x455/0xab0 [ 1313.848420][T24159] ? __pfx_ksys_unshare+0x10/0x10 [ 1313.848457][T24159] ? xfd_validate_state+0x129/0x190 [ 1313.848507][T24159] __x64_sys_unshare+0x31/0x40 [ 1313.848543][T24159] do_syscall_64+0xc9/0xf80 [ 1313.848578][T24159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.848604][T24159] RIP: 0033:0x7f69bdf9aeb9 [ 1313.848632][T24159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.848659][T24159] RSP: 002b:00007f69bee57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1313.848683][T24159] RAX: ffffffffffffffda RBX: 00007f69be216090 RCX: 00007f69bdf9aeb9 [ 1313.848701][T24159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1313.848717][T24159] RBP: 00007f69be008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1313.848733][T24159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1313.848748][T24159] R13: 00007f69be216128 R14: 00007f69be216090 R15: 00007ffe9a9d57d8 [ 1313.848781][T24159] [ 1314.391348][T24135] kexec: Could not allocate control_code_buffer [ 1315.084909][T24168] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1315.200359][T24164] Invalid ELF header magic: != ELF [ 1316.607883][ T30] audit: type=1800 audit(4211.030:212): pid=24198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3274" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1322.334931][T24253] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3286'. [ 1326.176821][T24301] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3299'. [ 1327.596797][T24316] binder: 24312:24316 ioctl c018620c 0 returned -1 [ 1330.478458][T24349] netlink: 350 bytes leftover after parsing attributes in process `syz.3.3309'. [ 1330.835774][ T30] audit: type=1800 audit(4225.250:213): pid=24363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3312" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1333.429171][T24378] binder: 24377:24378 ioctl c018620c 0 returned -1 [ 1334.446025][T24396] zswap: compressor not available [ 1334.889270][T24399] NFSD: Failed to start, no listeners configured. [ 1336.104777][T24404] kexec: Could not allocate control_code_buffer [ 1336.125014][T24422] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3320'. [ 1338.465150][T24459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3330'. [ 1339.095079][T24471] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006600 pfn:0x78000 [ 1339.114238][T24471] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1339.134122][T24471] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1339.146768][T24467] FAULT_INJECTION: forcing a failure. [ 1339.146768][T24467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.193957][T24467] CPU: 0 UID: 0 PID: 24467 Comm: syz.2.3331 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1339.194011][T24467] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1339.194024][T24467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1339.194044][T24467] Call Trace: [ 1339.194056][T24467] [ 1339.194069][T24467] dump_stack_lvl+0x100/0x190 [ 1339.194115][T24467] should_fail_ex.cold+0x5/0xa [ 1339.194169][T24467] _copy_to_user+0x32/0xd0 [ 1339.194225][T24467] simple_read_from_buffer+0xcb/0x170 [ 1339.194263][T24467] proc_fail_nth_read+0x1af/0x230 [ 1339.194310][T24467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1339.194354][T24467] ? rw_verify_area+0xce/0x6d0 [ 1339.194387][T24467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1339.194437][T24467] vfs_read+0x1e4/0xb30 [ 1339.194480][T24467] ? __pfx_vfs_read+0x10/0x10 [ 1339.194513][T24467] ? find_held_lock+0x2b/0x80 [ 1339.194548][T24467] ? __fget_files+0x215/0x3d0 [ 1339.194592][T24467] ? __fget_files+0x21f/0x3d0 [ 1339.194640][T24467] ksys_read+0x12a/0x250 [ 1339.194678][T24467] ? __pfx_ksys_read+0x10/0x10 [ 1339.194727][T24467] do_syscall_64+0xc9/0xf80 [ 1339.194771][T24467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.194805][T24467] RIP: 0033:0x7f69bdf5b78e [ 1339.194831][T24467] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1339.194863][T24467] RSP: 002b:00007f69bee35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1339.194894][T24467] RAX: ffffffffffffffda RBX: 00007f69bee366c0 RCX: 00007f69bdf5b78e [ 1339.194915][T24467] RDX: 000000000000000f RSI: 00007f69bee360a0 RDI: 0000000000000004 [ 1339.194934][T24467] RBP: 00007f69bee36090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.194954][T24467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.194973][T24467] R13: 00007f69be216218 R14: 00007f69be216180 R15: 00007ffe9a9d57d8 [ 1339.195014][T24467] [ 1339.413723][T24471] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1339.599626][T24471] raw: ffff888078006600 0000000000000000 00000016ffffffff 0000000000000000 [ 1339.656999][T24471] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1339.673470][T24471] head: ffff888078006600 0000000000000000 00000016ffffffff 0000000000000000 [ 1339.682292][T24471] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1339.691132][T24471] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1339.703200][T24471] page dumped because: unmovable page [ 1339.712096][T24471] page_owner tracks the page as allocated [ 1339.752569][T24471] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5813, tgid 5813 (syz-executor), ts 1322201298588, free_ts 1321658950669 [ 1339.832628][T24471] post_alloc_hook+0x1e1/0x250 [ 1339.851765][T24471] get_page_from_freelist+0xe3d/0x2e10 [ 1339.867764][T24471] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1339.882537][T24471] alloc_pages_mpol+0x1fb/0x550 [ 1339.888991][T24471] alloc_pages_noprof+0x131/0x390 [ 1339.900979][T24471] skb_page_frag_refill+0x365/0x5b0 [ 1339.910755][T24471] try_fill_recv+0x7f1/0x2950 [ 1339.924317][T24471] virtnet_poll+0x1502/0x3a70 [ 1339.931046][T24471] __napi_poll.constprop.0+0xaf/0x450 [ 1339.941922][T24471] net_rx_action+0xa40/0xf20 [ 1339.947091][T24471] handle_softirqs+0x1ea/0x910 [ 1339.952101][T24471] __irq_exit_rcu+0xef/0x150 [ 1339.959165][T24471] irq_exit_rcu+0x9/0x30 [ 1339.966495][T24471] common_interrupt+0xbe/0xe0 [ 1339.972531][T24471] asm_common_interrupt+0x26/0x40 [ 1339.980085][T24471] page last free pid 24202 tgid 24202 stack trace: [ 1339.987033][T24471] __free_frozen_pages+0x822/0x1130 [ 1339.992934][T24471] __folio_put+0x3b4/0x540 [ 1339.997980][T24471] put_netmem+0x294/0x320 [ 1340.003072][T24471] skb_release_data+0x4b2/0x700 [ 1340.013249][T24471] __kfree_skb+0x4f/0x70 [ 1340.018029][T24471] tcp_ack+0x1e83/0x6040 [ 1340.027362][T24471] tcp_rcv_established+0x7b1/0x36c0 [ 1340.042313][T24471] tcp_v4_do_rcv+0xc64/0x10a0 [ 1340.047395][T24471] tcp_v4_rcv+0x30fd/0x4d50 [ 1340.053217][T24471] ip_protocol_deliver_rcu+0xba/0x4d0 [ 1340.059237][T24471] ip_local_deliver_finish+0x3f2/0x6e0 [ 1340.066705][T24471] ip_local_deliver+0x19a/0x1f0 [ 1340.071699][T24471] ip_list_rcv_finish+0xbee/0x1240 [ 1340.080382][T24471] ip_list_rcv+0x338/0x450 [ 1340.086996][T24471] __netif_receive_skb_list_core+0x74c/0x940 [ 1340.097625][T24471] netif_receive_skb_list_internal+0x722/0xd40 [ 1340.739917][T24485] NFSD: Failed to start, no listeners configured. [ 1345.484455][T24547] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1345.741883][T24557] NFSD: Failed to start, no listeners configured. [ 1346.702782][T24577] futex_wake_op: syz.0.3354 tries to shift op by -2048; fix this program [ 1346.711683][T24577] futex_wake_op: syz.0.3354 tries to shift op by -2048; fix this program [ 1346.725568][T24577] 0x000000000001-0x000000020000 : "" [ 1346.759622][T24577] ftl_cs: FTL header corrupt! [ 1346.786752][T24576] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006600 pfn:0x78000 [ 1346.813600][T24576] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1346.853548][T24576] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1346.871664][T24576] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1346.933791][T24576] raw: ffff888078006600 0000000000000000 00000016ffffffff 0000000000000000 [ 1346.946297][T24576] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1346.958925][T24576] head: ffff888078006600 0000000000000000 00000016ffffffff 0000000000000000 [ 1346.968286][T24576] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1346.977411][T24576] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1346.986885][T24576] page dumped because: unmovable page [ 1346.992372][T24576] page_owner tracks the page as allocated [ 1347.000941][T24576] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5813, tgid 5813 (syz-executor), ts 1322201298588, free_ts 1321658950669 [ 1347.023483][T24576] post_alloc_hook+0x1e1/0x250 [ 1347.093843][T24576] get_page_from_freelist+0xe3d/0x2e10 [ 1347.135512][T24576] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1347.173478][T24576] alloc_pages_mpol+0x1fb/0x550 [ 1347.190569][T24576] alloc_pages_noprof+0x131/0x390 [ 1347.208831][T24576] skb_page_frag_refill+0x365/0x5b0 [ 1347.214535][T24576] try_fill_recv+0x7f1/0x2950 [ 1347.220581][T24576] virtnet_poll+0x1502/0x3a70 [ 1347.227114][T24576] __napi_poll.constprop.0+0xaf/0x450 [ 1347.238123][T24576] net_rx_action+0xa40/0xf20 [ 1347.242944][T24576] handle_softirqs+0x1ea/0x910 [ 1347.251455][T24576] __irq_exit_rcu+0xef/0x150 [ 1347.258092][T24576] irq_exit_rcu+0x9/0x30 [ 1347.267833][T24576] common_interrupt+0xbe/0xe0 [ 1347.273672][T24576] asm_common_interrupt+0x26/0x40 [ 1347.279020][T24576] page last free pid 24202 tgid 24202 stack trace: [ 1347.290420][T24576] __free_frozen_pages+0x822/0x1130 [ 1347.297508][T24576] __folio_put+0x3b4/0x540 [ 1347.302188][T24576] put_netmem+0x294/0x320 [ 1347.313405][T24576] skb_release_data+0x4b2/0x700 [ 1347.320695][T24576] __kfree_skb+0x4f/0x70 [ 1347.327981][T24576] tcp_ack+0x1e83/0x6040 [ 1347.333732][T24576] tcp_rcv_established+0x7b1/0x36c0 [ 1347.339260][T24576] tcp_v4_do_rcv+0xc64/0x10a0 [ 1347.347232][T24576] tcp_v4_rcv+0x30fd/0x4d50 [ 1347.353159][T24576] ip_protocol_deliver_rcu+0xba/0x4d0 [ 1347.380744][T24576] ip_local_deliver_finish+0x3f2/0x6e0 [ 1347.395823][T24576] ip_local_deliver+0x19a/0x1f0 [ 1347.401855][T24576] ip_list_rcv_finish+0xbee/0x1240 [ 1347.409864][T24576] ip_list_rcv+0x338/0x450 [ 1347.415735][T24576] __netif_receive_skb_list_core+0x74c/0x940 [ 1347.422788][T24576] netif_receive_skb_list_internal+0x722/0xd40 [ 1347.770830][T24596] FAULT_INJECTION: forcing a failure. [ 1347.770830][T24596] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.794810][T24596] CPU: 0 UID: 0 PID: 24596 Comm: syz.1.3360 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1347.794864][T24596] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1347.794876][T24596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1347.794895][T24596] Call Trace: [ 1347.794906][T24596] [ 1347.794919][T24596] dump_stack_lvl+0x100/0x190 [ 1347.794971][T24596] should_fail_ex.cold+0x5/0xa [ 1347.795024][T24596] should_failslab+0xc2/0x120 [ 1347.795066][T24596] ? copy_splice_read+0x1a3/0xb90 [ 1347.795097][T24596] __kmalloc_noprof+0xf6/0x9c0 [ 1347.795138][T24596] ? copy_splice_read+0x1a3/0xb90 [ 1347.795171][T24596] copy_splice_read+0x1a3/0xb90 [ 1347.795206][T24596] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1347.795253][T24596] ? __pfx_copy_splice_read+0x10/0x10 [ 1347.795311][T24596] ? find_held_lock+0x2b/0x80 [ 1347.795353][T24596] ? __pfx_copy_splice_read+0x10/0x10 [ 1347.795388][T24596] do_splice_read+0x285/0x370 [ 1347.795430][T24596] splice_direct_to_actor+0x2a1/0xa30 [ 1347.795471][T24596] ? __pfx_direct_splice_actor+0x10/0x10 [ 1347.795517][T24596] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1347.795565][T24596] do_splice_direct+0x174/0x240 [ 1347.795605][T24596] ? __pfx_do_splice_direct+0x10/0x10 [ 1347.795640][T24596] ? common_file_perm+0x1ab/0x4f0 [ 1347.795695][T24596] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1347.795740][T24596] ? rw_verify_area+0xce/0x6d0 [ 1347.795776][T24596] do_sendfile+0xadc/0xe20 [ 1347.795819][T24596] ? __pfx_do_sendfile+0x10/0x10 [ 1347.795856][T24596] ? __fget_files+0x21f/0x3d0 [ 1347.795904][T24596] __x64_sys_sendfile64+0x1d8/0x220 [ 1347.795948][T24596] ? ksys_write+0x1ac/0x250 [ 1347.795992][T24596] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1347.796054][T24596] do_syscall_64+0xc9/0xf80 [ 1347.796102][T24596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.796136][T24596] RIP: 0033:0x7f649739aeb9 [ 1347.796162][T24596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.796192][T24596] RSP: 002b:00007f649825d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1347.796223][T24596] RAX: ffffffffffffffda RBX: 00007f6497615fa0 RCX: 00007f649739aeb9 [ 1347.796244][T24596] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1347.796264][T24596] RBP: 00007f649825d090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.796284][T24596] R10: 0000000000002001 R11: 0000000000000246 R12: 0000000000000001 [ 1347.796305][T24596] R13: 00007f6497616038 R14: 00007f6497615fa0 R15: 00007ffe3aac3b88 [ 1347.796348][T24596] [ 1349.382033][T24624] netlink: 472 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1349.398573][T24617] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1349.890838][T24633] netlink: 306 bytes leftover after parsing attributes in process `syz.2.3364'. [ 1350.342000][T24639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 1350.420182][T24639] i: entered promiscuous mode [ 1350.450107][T24640] HfR: entered promiscuous mode [ 1350.731633][T24647] zswap: compressor not available [ 1351.324711][T24662] netlink: set zone limit has 8 unknown bytes [ 1352.170333][T24642] kexec: Could not allocate control_code_buffer [ 1354.542576][T24711] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1354.557445][T24711] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1354.870282][T24711] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1354.917844][T24711] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1355.062353][T24717] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3385'. [ 1356.583449][T19132] Bluetooth: hci4: command 0x0c1a tx timeout [ 1356.589619][T21187] Bluetooth: hci3: command 0x0c1a tx timeout [ 1356.822847][T24715] kexec: Could not allocate control_code_buffer [ 1356.912325][T21187] Bluetooth: hci0: command 0x0c1a tx timeout [ 1356.983833][T21187] Bluetooth: hci1: command 0x0c1a tx timeout [ 1358.893021][T24748] kexec: Could not allocate control_code_buffer [ 1359.361937][T24780] ------------[ cut here ]------------ [ 1359.368113][T24780] !reader [ 1359.368134][T24780] WARNING: kernel/trace/ring_buffer.c:7363 at ring_buffer_map_get_reader+0x659/0x880, CPU#1: syz.3.3399/24780 [ 1359.382744][T24780] Modules linked in: [ 1359.387411][T24780] CPU: 1 UID: 0 PID: 24780 Comm: syz.3.3399 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1359.398469][T24780] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1359.403674][T24780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1359.413760][T24780] RIP: 0010:ring_buffer_map_get_reader+0x659/0x880 [ 1359.420324][T24780] Code: ff e8 4b e1 fb ff 48 8d 3d f4 db b0 0e 4c 89 fe 67 48 0f b9 3a e9 e0 fc ff ff 4c 8b 7c 24 58 4c 8b 74 24 60 e8 28 e1 fb ff 90 <0f> 0b 90 e8 1f e1 fb ff 48 89 df 31 db e8 85 13 fe ff 48 8b 74 24 [ 1359.440066][T24780] RSP: 0018:ffffc90004a5fd98 EFLAGS: 00010087 [ 1359.446203][T24780] RAX: 00000000000007a0 RBX: ffff88813fe28800 RCX: ffffc9000cc3d000 [ 1359.454206][T24780] RDX: 0000000000080000 RSI: ffffffff820a6d38 RDI: ffff88802ea95b80 [ 1359.462210][T24780] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1359.470212][T24780] R10: 0000000000000000 R11: ffff88813fe288b0 R12: ffff88813fe288b0 [ 1359.478242][T24780] R13: dffffc0000000000 R14: ffff88813fe28990 R15: ffff88813fe28818 [ 1359.486247][T24780] FS: 00007f4de6bbe6c0(0000) GS:ffff8881246e2000(0000) knlGS:0000000000000000 [ 1359.495222][T24780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1359.501953][T24780] CR2: 0000001b33008ff8 CR3: 000000005b402000 CR4: 00000000003526f0 [ 1359.509967][T24780] Call Trace: [ 1359.513276][T24780] [ 1359.516262][T24780] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 1359.522551][T24780] ? __fget_files+0x21f/0x3d0 [ 1359.527291][T24780] tracing_buffers_ioctl+0x30d/0x400 [ 1359.532629][T24780] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 1359.538483][T24780] __x64_sys_ioctl+0x18e/0x210 [ 1359.543300][T24780] do_syscall_64+0xc9/0xf80 [ 1359.547849][T24780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.553779][T24780] RIP: 0033:0x7f4de5d9aeb9 [ 1359.558233][T24780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.577883][T24780] RSP: 002b:00007f4de6bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1359.586374][T24780] RAX: ffffffffffffffda RBX: 00007f4de6015fa0 RCX: 00007f4de5d9aeb9 [ 1359.594386][T24780] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000008 [ 1359.602426][T24780] RBP: 00007f4de5e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1359.610431][T24780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1359.618434][T24780] R13: 00007f4de6016038 R14: 00007f4de6015fa0 R15: 00007ffc6f386e48 [ 1359.626459][T24780] [ 1359.629511][T24780] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1359.636849][T24780] CPU: 1 UID: 0 PID: 24780 Comm: syz.3.3399 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1359.648023][T24780] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1359.653245][T24780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1359.663341][T24780] Call Trace: [ 1359.666653][T24780] [ 1359.669619][T24780] dump_stack_lvl+0x100/0x190 [ 1359.674437][T24780] vpanic+0x20d/0x630 [ 1359.678453][T24780] panic+0xd1/0xd1 [ 1359.682208][T24780] ? __pfx_panic+0x10/0x10 [ 1359.686717][T24780] check_panic_on_warn.cold+0x19/0x34 [ 1359.692131][T24780] ? ring_buffer_map_get_reader+0x659/0x880 [ 1359.698065][T24780] __warn.cold+0x191/0x2f8 [ 1359.702525][T24780] __report_bug+0x296/0x3d0 [ 1359.707071][T24780] ? ring_buffer_map_get_reader+0x659/0x880 [ 1359.713014][T24780] ? __pfx___report_bug+0x10/0x10 [ 1359.718160][T24780] ? check_noncircular+0x97/0x160 [ 1359.723232][T24780] ? add_lock_to_list+0x99/0x110 [ 1359.728217][T24780] ? lockdep_unlock+0x5a/0xc0 [ 1359.733018][T24780] ? rb_set_head_page+0x1e6/0x2f0 [ 1359.738089][T24780] ? ring_buffer_map_get_reader+0x659/0x880 [ 1359.744371][T24780] report_bug+0xb2/0x220 [ 1359.748685][T24780] ? ring_buffer_map_get_reader+0x659/0x880 [ 1359.754627][T24780] handle_bug+0x166/0x2a0 [ 1359.759007][T24780] exc_invalid_op+0x17/0x50 [ 1359.763561][T24780] asm_exc_invalid_op+0x1a/0x20 [ 1359.768445][T24780] RIP: 0010:ring_buffer_map_get_reader+0x659/0x880 [ 1359.774992][T24780] Code: ff e8 4b e1 fb ff 48 8d 3d f4 db b0 0e 4c 89 fe 67 48 0f b9 3a e9 e0 fc ff ff 4c 8b 7c 24 58 4c 8b 74 24 60 e8 28 e1 fb ff 90 <0f> 0b 90 e8 1f e1 fb ff 48 89 df 31 db e8 85 13 fe ff 48 8b 74 24 [ 1359.794831][T24780] RSP: 0018:ffffc90004a5fd98 EFLAGS: 00010087 [ 1359.800940][T24780] RAX: 00000000000007a0 RBX: ffff88813fe28800 RCX: ffffc9000cc3d000 [ 1359.808973][T24780] RDX: 0000000000080000 RSI: ffffffff820a6d38 RDI: ffff88802ea95b80 [ 1359.816981][T24780] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1359.824983][T24780] R10: 0000000000000000 R11: ffff88813fe288b0 R12: ffff88813fe288b0 [ 1359.833007][T24780] R13: dffffc0000000000 R14: ffff88813fe28990 R15: ffff88813fe28818 [ 1359.841114][T24780] ? ring_buffer_map_get_reader+0x658/0x880 [ 1359.847097][T24780] ? ring_buffer_map_get_reader+0x658/0x880 [ 1359.853041][T24780] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 1359.859324][T24780] ? __fget_files+0x21f/0x3d0 [ 1359.864045][T24780] tracing_buffers_ioctl+0x30d/0x400 [ 1359.869386][T24780] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 1359.875234][T24780] __x64_sys_ioctl+0x18e/0x210 [ 1359.880045][T24780] do_syscall_64+0xc9/0xf80 [ 1359.884594][T24780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.890531][T24780] RIP: 0033:0x7f4de5d9aeb9 [ 1359.894972][T24780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.914625][T24780] RSP: 002b:00007f4de6bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1359.923086][T24780] RAX: ffffffffffffffda RBX: 00007f4de6015fa0 RCX: 00007f4de5d9aeb9 [ 1359.931180][T24780] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000008 [ 1359.939184][T24780] RBP: 00007f4de5e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1359.947181][T24780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1359.955178][T24780] R13: 00007f4de6016038 R14: 00007f4de6015fa0 R15: 00007ffc6f386e48 [ 1359.963214][T24780] [ 1359.966857][T24780] Kernel Offset: disabled [ 1359.971203][T24780] Rebooting in 86400 seconds..