last executing test programs: 48.187604207s ago: executing program 1 (id=2442): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x2000c055) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xd, 0x4, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="141fc94af8"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c00", @ANYRES16=r5, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae550f26f7eb", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000001140)={0xb4, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, "13c366f9244357d432f6e44cc4bf4e5878fe5d"}, @NL80211_ATTR_WIPHY_NAME={0x8, 0x2, '/${\x00'}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x45, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e9"}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@typed={0xc, 0x140, 0x0, 0x0, @u64=0x3}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4, 0xffffffffffffffff}, 0xa) r9 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000180), r8) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r9, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x44000) ptrace$auto(0x10, r0, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193) 46.688505144s ago: executing program 1 (id=2447): ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0x200, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x20009, 0x10000000000e3, 0xeb2, 0x401, 0x8000) fcntl$auto(0x8000000000000001, 0x25, 0x8) poll$auto(&(0x7f00000001c0)={r0, 0xffff, 0x29}, 0x3, 0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x40, r2, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x7a, 0x0, 0x0, @u64=0x1}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x40}}, 0x24048084) connect$auto(0x3, 0x0, 0x54) bpf$auto(0x0, 0x0, 0x10) mremap$auto(0x1, 0x4, 0x3, 0x642f, 0x0) 46.478805131s ago: executing program 1 (id=2448): write$auto(0xffffffffffffffff, 0x0, 0x3) unshare$auto(0x40000080) r0 = socket(0x8, 0xa, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = open(&(0x7f0000000000)='./file1\x00', 0x331242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r2, 0x0, 0x62d4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r4, 0x5385b03d7f4df729, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x20004814) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setgroups$auto(0xfffffc01, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x4) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r5, 0xcee1613e3591234a, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$auto(0x3, 0x4, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20005814) userfaultfd$auto(0x1) 45.994516163s ago: executing program 3 (id=2449): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x1d, 0x2, 0x73) r2 = io_uring_setup$auto(0x9, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) close_range$auto(r0, r2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x742, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x94) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x101000000) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140), 0x10201, 0x0) unshare$auto(0x86) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D3\x00', 0x422042, 0x0) r3 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x3, &(0x7f0000000080)={0x7ffffffc, 0x10000, 0x3000, 0x6, 0x20000008, 0x400b, r3, [], {0x6, 0x6, 0x8c48, 0x299, 0x9, 0x4, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x4, 0x24, 0xfe000000, 0x8, 0xffffffffffffffff}}) r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x7, 0x4) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0x2, 0x2, 0x2]}, 0x0) mmap$auto(0x7, 0x2020009, 0x1, 0x40000000000eb1, r1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x1, 0x106) getsockopt$auto(r5, 0x0, 0x33, 0xfffffffffffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x5, 0xffffffffffff0003, 0x1013) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x1, 0xffffffffffff0003, 0x17) 44.839699745s ago: executing program 3 (id=2451): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x0, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, r0, 0x0) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0xffffffffffffffff, 0x0) shutdown$auto(0x200000003, 0x2) 44.403117494s ago: executing program 3 (id=2452): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x65) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getgroups$auto(0x7fd, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) madvise$auto(0x3, 0x80000000, 0x4) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) 41.983545848s ago: executing program 1 (id=2456): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r1, 0x4018620d, 0x9) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = open(0x0, 0x22240, 0x55) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r3) socket(0x2, 0x3, 0xa) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) setrlimit$auto(0xb, 0x0) getpid() mmap$auto(0x7, 0x1000000040009, 0xdf, 0x9b72, r2, 0x28000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe982, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) 41.98306892s ago: executing program 3 (id=2457): ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) socket(0x29, 0x2, 0x0) socket(0x29, 0x2, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/kcm_stats\x00', 0x8282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000180)=""/8, 0x8) socket(0xa, 0x5, 0x84) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x189160, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$auto(r4, 0x0, 0x24, 0x0, 0x9) mmap$auto(0xffff7ffffffffffe, 0x400006, 0x2baa, 0x9b7b, r4, 0x1) mmap$auto(0x80, 0x6, 0x9, 0xf9, r1, 0x1) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b4a, 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x566, 0x80000000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) newfstatat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x9, 0x8d, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x46f, 0x6, 0x36, 0xffffffdffffffff1, 0x4, 0xb, 0x6, 0xe39, 0x3928, 0x80000000}, 0xbbb3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r7) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)=ANY=[@ANYBLOB="28000004", @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf25060000000c00038008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC2\x00', 0xb8182, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 40.301079631s ago: executing program 1 (id=2461): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x0, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = epoll_create$auto(0x4) r1 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(r0, 0x1, r1, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r0, 0x0) shutdown$auto(0x200000003, 0x2) 39.751399888s ago: executing program 1 (id=2463): mmap$auto(0x4, 0x1000000000004, 0x7, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) write$auto(0x3, 0x0, 0x5c8) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9136, 0x8002, 0xa) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01484d386bf1d265f9251900000018000180140000000c00078008000100a7000000"], 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x4000000) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r0, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) 24.104545618s ago: executing program 32 (id=2463): mmap$auto(0x4, 0x1000000000004, 0x7, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) write$auto(0x3, 0x0, 0x5c8) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9136, 0x8002, 0xa) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01484d386bf1d265f9251900000018000180140000000c00078008000100a7000000"], 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x4000000) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r0, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) 11.156458223s ago: executing program 2 (id=2479): r0 = socket(0x22, 0x1, 0xe) move_pages$auto(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) mmap$auto(0x7, 0x20004, 0x1ff, 0x2eb1, r0, 0x200000000008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, 0x54) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fdatasync$auto(r0) waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xfffffffffffffff9, 0xeb1, r1, 0x164) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x5, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x7c559d78, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) writev$auto(r2, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty4\x00', 0x509ec1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyt0\x00', 0x36d182, 0x0) sendfile$auto(r4, r3, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) bpf$auto(0x12, 0x0, 0x200026) mmap$auto(0x0, 0xe97f, 0xdf, 0x16, r2, 0x43) 7.530170113s ago: executing program 0 (id=2482): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop8\x00', 0x14be02, 0x0) preadv2$auto(r1, &(0x7f0000000040)={&(0x7f0000000380), 0x6}, 0x2, 0x1000, 0x3, 0x8) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) r2 = getpid() sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(r2, 0x7, 0x0, 0x0, 0x0, 0x9) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0xffffffff, 0x6, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}}) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0x40942, 0x0) mmap$auto(0x2000, 0x9, 0x8, 0x8000000008011, r4, 0xfffffffffffffffe) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) ioctl$auto_FS_IOC_REMOVE_ENCRYPTION_KEY2(r3, 0xc0406618, &(0x7f00000000c0)={{0x6}, 0x1}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) prctl$auto_PR_SET_ENDIAN(0x14, 0x10, 0x400008001, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video41\x00', 0xe0a80, 0x0) ioctl$auto(r5, 0x8008563f, r5) 7.322328981s ago: executing program 2 (id=2483): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f00000003c0)='//\xad\x13\xff\xda\xba\xf6&\x8c\xffpJ \x9b\xc1\x00\xf5\x9a\xc1S\b\x01\x8d\xafX\xb7\b,\xbb\xfdRc\xfdI\x92\x8cV\xf8\x8a\xb6\xd1w\xfa\xea\xe3?\xbe\xeaV\xf7\xb4\xb5\xee\xbc\xe7?w\x82\xc1\xbc\x99f\x93\xbc\x1d\x82\x1dM\x88\xea6ZdM\x82^\xf0Vtu:\xb8Zc;>\x9d2fv8\x94\x8c\xb8/\xe5\x06\xeb\xfcE^\n\xd9MG2QZ\x04(O\x19\x1b\xc3\xaa/\fm\xfcQ\xb63U \x9d\xd0\xe5J\xcb> \x03p\x1b\xbdaa\xe6\xd0\x14\xa9d\x8d\xe6\xdcJ\x00\x00\xee\x89\xe9\x9e%\x83q\xb3>\xad\xdd\xdf\x8d=G\x8e\xca=B\x1e\xae\x13\x81\x19\xd6\x9f3\xc2b\xab\x06\'1\xb4\xff\xff\xff\xff\xc2\xde\x9b\x1a\xeeJ7\xf0Q\x0e^\xbd\x846\xbc\x97/\xa2\xaa\x8d\xf4Pz\xc1\"H\x9e\x8d\xf6\x00\xa9\xb4{\x908\xbcF%\xf6\x14\x8fl\xc8\xcb\xa1\xd9\xce\xc0+|M\xcc\xc2<\x8cZ\xb9x7\x90\x9d\xe3eI\x8a\x1f\xdb\x8e\xcaM3\xc7}\n\xc7F\xe3\x10I\x97\x1e\xd0|5\x86\xba94\xc7\x8fk\r\x8a+\x81\xad%\n8\x81\x8b\xee\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V]8S\xa4o\xf2\xa9\x11\xc2\xbc\x17m\x10\xf8\xa4\xbf\xedT\x11\x0f$\xef\x98^\xd6j2\xbb\xf0\xd6z\x1c\xa03\xad\xa9#1a\xb0\x89\xf9\xab\xde!\xe0\x1b3<\x1f\xbd\x92\x17\x97:\xcf&\xb1\x9e_\xee\xc5\xdd\x8f \x1at\xec\xad\x85\'\x7f\x81\b=\xa6\xba\td\xea7\x9b=\xf9', 0x1000000009) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r1 = getpid() move_pages$auto(r1, 0xa1, &(0x7f0000000180)=&(0x7f0000000080), &(0x7f00000001c0)=0x100a12, 0x0, 0x0) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/013/001\x00', 0x1102, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3ff6, 0x3, 0x3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) mmap$auto(0xf, 0x20006, 0x4000000000df, 0xebf, 0x4, 0x8000) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) pidfd_open$auto(0x0, 0x945) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_ACCEPTCONN(0xffffffffffffffff, 0x5, 0x1e, &(0x7f00000000c0)='-\x00', &(0x7f0000000200)=0xc14a) 5.875249539s ago: executing program 0 (id=2484): openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0x3000c, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000300)={0xb, 0xffffffff, 0x8, 0x2, 0x2, 0x7ffffffd, "03f8740700", 0xb, 0x3, 0x10, 0x5, 0x2, 0x4, 0x2}) capget$auto(0x0, 0xfffffffffffffffe) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r1, 0x0, 0x5) write$auto(0x3, 0x0, 0xffd8) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) keyctl$auto(0xf, 0xfffffbfffffffffe, 0x2, 0x32, 0x77c) r2 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r2, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) r5 = semctl$auto_GETPID(0xda83, 0x7, 0xb, 0xfff) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000002380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002340)={&(0x7f00000023c0)={0x2288, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x2269, 0x19, 0x0, 0x1, [@typed={0x1004, 0x13e, 0x0, 0x0, @binary="7201928d94df048334d549a3c04756807deeeb73142ed079022df88058c7effd52e4ec5619d1972c469520510f4784206851cce738ad0c0964999e3ae75a27abd174408249640d9c0d03f9cc6614aaeca671ced7549b94f7669ec9346fa5248aaaa0bf0288f964cca1b4ca75d020feecb1511fb7b599fd448d9c48a3e6d4415f2d731aee43bb42be1fde779742ca55f7743b3b9357ed7659f4dcfac6ad3160953aada5d69319edb6fed1a2be0871126a5e0a13729c49e45f8c4e50e844b5abde303f812cd51cc55b75d08040f0a9d80416433006642e0fad0b797365d450153b6ab9966326365111925fe26bb508f909ef878a5ec6b8385a7f0aa2a5aaa3fe25e3e1443428011d18687644f60af6283f4c52ea2c7269b915209b7088f20a3e362f3fd33e608650f5c7c7fd21be87089a65bd5fae34f0ceac00ad553cc7d09c287c5a0c100c2479cea8b823d1e605829b4fc5eeeccb6347058812ca9486fc088bddc2724559f77b79f2869c4876fc969af8e4ed0a9b43fa8aab49761d42afbbee8bf2d5883509205455fec24091b6f15a279a57626953a2e68745484aaf38d198712cd8bac189dc3979d7fdaed578bb3f293660918457ba9a23f0d243ea356e0940994680fe4ee4e4eec482d08bc38e953f36eec4cb7115258e3fe45be0ba00a92d65b39aa82f2de14217565c1e65cc82681476a198023912a808744e4d1c6b3bf3d499e7366158285368a36b2c88435710c7ceac8c4253c415e62b5216dbef3339d18f999bcf8d8bf8e1aa8ece5e89a725bf394fe64f37fef6b1a87f9788c6f22356909919d2cdeae5e91edb747e44f5084081db7e85bb8f03c869388293c7f59de15282cbd0e77bdbd1b58adbdc7c867ac93586732a707ea7ea06f40f66f9e97fe53b06dc326f401fcb9b8665c6d0234058da0d36411385edf339a99ab961c3ce681ca0c776efafe98112ae5e5a2478093f042d55568043d7430c6c54fa0265e0e939e98ae9245b4fed66a364e8221f5b6051fb1afc937181376769a4cd23bb095925317f0d30350406d6262536b174e569f90a881e8821bd3cdd048e7ffb072f0eea09bb85b938e44ac67dc05f87c946074636311ac0e477a350e820d867739692f3a3c9519dc99595271bfceee0057669d7f3c7ab7c98046b467edfe499f460bb225f863760c95dd81c5e889092b579adb55651522d4df5878ec97f73a428d74d74aadd9b9d230648bf732fabd31447870ec5ec85e507174c5aa7951912acc64d08960dc41f3745a40cc57b18005fa6df936ff7abde6fee7408625602ee4c7e4d69e631b010bc3e11c41fae1d54b188bd54e8040e7b77c2b41598aa67e6023b7c845e24d1d073c9748c8368ea94fa4acdf4d42c8473d0a5c50ba8521fd6ae1230e886053b50e86f4378f91f96274b5660bc8e8422f3b87a4c50865ef6cf23a1be23bb93655702f8baebb37c4abf243d909f6f617520dc29b78eb0b32e69c7638c88458415ffafa8f973dcacae6ea7a98456be15de772c087af107d6fc980e6b2a047f23f48cbfaf5bc865e4ac660208d65dba62c04a09d1d2276a7bf3cc85891295ecb8aa7a81b699f3bb52c3cbb4efa5fa00ec3060b30a319ad54f1edf0de5d720aa947910dee9c1da28061fc0386bff9ceee544c215e8ee24a34e410a23b53678ad42c495c4590c507de09af8f78cff28e76bec3f1484a74a47b37612f193db4020b8eb8a5648773ff07527ee60cb7002f888954f775ed0689ce962d314df85d4d0069cc5939b404b716f22431706ec3d1fc818c03edba9ed13b28159f6b37201830474d2dd398cfaafe0836fd862a6eb791214a82f4505263fad7faf9f0e7679295885d16fca8f5af299d54ec427b487a342188681e6106318aad06a7801ceb6d6cb46137c32dfa0163e87717d7764348d9eac164afc8d5f57e4dfb39610f2e019401bf82e54984fe8c902bd128dd049c607788ff12407811393ba366147e349c3528afaf648314d97c430235677bdcae855111215493040ba0c9f1421f38e5f2325460e20ee054cac34e0f784d16b8dcaff70128a4ce8d6d0f184c2cf4400a905820910455c431b79f2878a5a79a1a02da59ef3a1a2a31fd40a88d3b5add40710bca8cc951c6a95e4b4eac17af373f5cb7be50cb307a4a2a1735d6fc2646fd36ecfd9d5fe50a0c99c300732e1b4085b059280eb94914e25a517c686aa54e704104ae28772a3d2888f2a427afa6c024ba6aecc557635d538ad12708360f4103b8dde9200f6c45e0982aed21bc0d8be5d3bf9bffe8ec88265ff0d0daa123b9b20c8f2f5ae0e05e740dca1a304f126af62418f61f822e5e249021733c9209e1516cedb072837eb98e32dc20261e0e59ea15fa2cab60270393823945c3f8e807c3ceedde1d0c2701295256673a11cf75149c2e46f4fe0f21670c7a001668197665845747af1c8233fa42993bc39b2753f019636e3bd1a77f7196b97d2946f31994b34a6b67cdc637dcb25f4cac03fb44ac2ec547fbdb583410ee425bf0d77b16b20379010aa65c05722833c6b54fbc28c563f5b0eed59a69ae87d1343f9c5bdf42813f11dd6340bd13f9acc0526511b57e08ca59a5ae5420b6e71f1fd565a7f41d25142745ff1b68046a7d056878a4c322f04a69fd1dc9fb272bb0407c8ce33da4261afcb9c371bc33145837ce60db9271432dd9a24f4142c27ee5b50431367a0d9bac660d0c2b140d4e2d865f7f1d526b958e661880f484eb08dfd2c7a63af9c746da5b646e8e1115077ab06dab6f3b509da9af32ccc50d0697a05190ab10fd86b89dddd9ea37842fe39c95d14f351e02c5fbe036b16cfa45338e3ca1e8095bf02542030d9054cc58edd9cbb280c2cfc82a045b9cbc60ca338d8c508ecb4cd146de832639facbbcfee43c41d43dee23e3620a8a29bf64e96281308fe3b99fc6b92d9496c544a9dc213db049d9e72665d21ceb2e4bf79d72ba64923a0bad32522679c34722f7750d8ef235bb37749cd750c4e374f2767965922ba043f18ebf920a0fedd7b9e217d694fa2c236e97dd78ee0d4e29b5f2d864069480b09263af5bd375e14640dc8c69cbc5131d54ab015b34788871cd60597eaede7535cc5ec0210b497ebe6574d6e51d15e5f19ec53210cd76d2ca3440e6b47115d8456191652147dfbd0480232b490ad0a1d0a0a31617119faead5ff8386c145156d937eb30968ae0766e63b56aeb3d2153a45aa041e361ea51ed733493f85e8233adb49a88869ea5f82167b3cd8a1c99e4c6625e30616d65257824391c22b978e442a9edb453a84ab9a996bbe36f2bfbbd042b1b1d8fe02c8bc0687cb41b62eabad990dd00bb192c8852fc122f7a3519a14e3e06f1de80ebc1bf228b2b85ebc15e3692a28b5eead9d5fe1b5e7bfb8dd5e26593bda78505ffc0dcbd545bb65e662e6bbfca671ffa2d1f1b8cf6bffc5db354e325b4292d54addf86f4a4fd4350ead4f882fcaf1e8058afce70e8d86de91be3ddbe6121e31155a37bcc2f7ffe00dd56528e81f2d636e8639c8db60d29c8c94da6a63d23d66465b96f53d165edb7f085b611d72d13b2ce05abb98b1c35ba41d7b658553dac2c09469eef584a55f41d042b4a95aa093a4c35b64bf155b90fc942914923d5e91448452aee2cb0d421cceb8561834bc71a0b42ff526bbd3c16561ec591ef0bb719a42ae06b03a63892aa385efc34670db5223f8950bd390cf94ca66d6a53acc8d52d78151f6cdc62f7b16a30098ae848bd0411fbb9fe482a6a2813327480d67ec0e553ffad8037ee7cce55d61f338460a2aa86861157207cf41eb00852d630393ce54b6b032a797a50ffed608058164fa727f4f28e69b28c3596961c7d2fd3ffd373cd9234ea4e6a99896fe56c7e032bf30f2d6d5dd40604f83cf0c4fa5bfae0d38502199f662a03be4989e01a5598f75c55bc0a3bd04b21a2cb1dea611332619c3b4fc31c12f9bb142f77a405187648e5aab7bc03b63d576bda1e92f07ca677701d067a0732a5c6ced80ea422be451dc8d14cd54e0965cba4c3ad8c3877aa6d56b8b8a2e79ac7c18d7d2f56a0c275869790029ea5c5eee359f65e930f3e17d8e8070fa2bdf4b5879f2cea5b07e2ea3b6edd4edfd8ecf6f8fcdc87cc8e49ec45add28c4624c620f1a34e7abd1028d48eb97a9efaab80ff63ea29d270e12cc3648d2e6aef02d5629357aee840d553914955c538477d3294ae83f23e2b778236973b68e7178db9efae5d93cd38bf088eced9a961e8e0b0d5dc407bef039303f3192bc3dbeab1b99a546b1698b09f517bf50df2909f105f5287b7132caf943372ed952becb0af39139c0c87c3a0e70021c2ba3c09b0abe470e2d6f80d2605370b979e991683db73b43e24c23cad14f352ed5fe3b99420045c7e901c8eb4e14684a9837240a0b6a3f71dcc3a79bf53659b5d3b5c54722df3c07203653377abee6e918fee2ef1f6f01bd2f06e119928a94752152dcd5ba403adb540d1ce337eeddc0e83b3f83d0c99b118b5d861e95fda00f650f0c1eea1e2024757b2040c9c1bdfee22e46af9fe51c9920e2278ceb5583a8886ccb7cbac3bd26be00e1c42a4721c7666ddda57a459958c6fee2247b65fcae3ab4d649115c5d449c660c631b995774fb42da90f7928af429aa6520e471774a5b3a259ed31e2369e631b1eeb96cf8ab8da495da3c989c9a377a483bd07ba731a058a2e6b1a61c55932a29430c0cb0ff53687de4e9afa5f1a6c36dd69a418630ea6cbf67467e188ac6b259727090fd42662620d490a5a181ac819fc991a7a3de0ff4f7c8c70f1d5a9e8ea24eac295c727987b2f708527bed4a18b0948902237544c479a32b8244787bd1ef10215cf10b77f2b97d48e59da6c9d5f85e0e1c3fb94dfc0993646626565ec5364aa60fa4757af1993b97979b39fb47708b4df11a2778e358300cfed4523885cb5780cdd21129f966f75b061b37198da5924358ebd8b43b5bdb334ab429268e7bab08192a578c62793996736c77798312de65a9e1430ba43285490688c896c7d27433b0a8bf1c41e915cc2a4759e3d5b6bf44f2818e07e1290dae65e385da5b5dffb4f4e51be82fca1bc150a0012fcffdb53394f89d9ae9860beff60c69f965b3a706d97318ed272b6a82e0235e3c303d6267884f4d22903011d985cd1df2df4c990dc9d67d30cdbf02bb5949dd221bc8b1bfae4587163923bcb55060a85ccaeb11e7fabc9d5ed52db75a66c627c49e9bc15f568ac70ab28cfc7e8dac86a792c146727767d8f0710714fea3d8031a06602c8000c5772b4038bc1bd39fbb704e7feb4a33db32255ad2779f0ebc0358199f5de21442f46305ce203896e270453570dd802118d314f4be2ba5cf5b4086adad11a8a929906699806457b697e1f39ac4dba023a7c3725154d16b659fa9aabe54bdc9b658302ce8bea3d989510559c59ae10765bae8fbe586a45247bea983bd80d865b0a31fd0be78db771f943d683c33194e8a08f3e075797e9d7aeb35135e8698187d23ce5312c6ff89a6490a90ee1ff6ce6033ddf1b76a6ca9762004973a1a1d14b5fb77d5d3b470a8d8afdc084c5ed5bd6fae98ef931d0c6b5b41076bcaa085536e2ba6091d3d733572f18dda1d110b525c99f0ee2a861ca11f0f5807475c52ed165576cce839ce231bfd7791bd540c55dd723fffdd37400e96c1e9d420e209ee6da81ff79ffdfdfae48637d4482ac0b9d320bae61d831606d53dac463d937ffac0da66d01d882292cb25ba05bdf753214c1ea481ffd418fbf2f09328642511ccba4a"}, @typed={0x8, 0x117, 0x0, 0x0, @fd=r2}, @nested={0x10d7, 0x22, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="c66bcf40c066e97853e6c44ae4b9bcefeb9aae60e2a84f7045a8ed707a7941226e8c4210f2ced3f8e8cc902c87f8b318b08c6506a003ddd7ff52c65263e18365894a46f792e41011311b1f6ec802ad4fc5e6c48aa88555babc6af34065ebe4652824cfed4051a39c70a1f16929cedf011c7bd658f27b28b5c9a438ea2046bf176090367fb9e0", @typed={0x8, 0x14, 0x0, 0x0, @pid=r5}, @generic="8294d92a953411669d64621cde0f4fd9c6809b73eb8be5d7c373d43c5271f51e163a685af8", @generic="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", @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x3d}]}, @nested={0x10, 0x8b, 0x0, 0x1, [@typed={0x4, 0xc4}, @nested={0x4, 0x15e}, @nested={0x4, 0x140}]}, @generic="a70ba89377e986dfba22bf0aff0d83122f1b81ea702dc3d019c8981ba01a35d7ecb3f679c21b3ebd953b3ce8d87878630407e5fa674acacadc99fc8085f30e2248b41b9f2d16298f2847c59eb66dd0707c0af3fadb9f6d71ff9b26f1e0a3aca2a47f", @typed={0x8, 0xa7, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x52, 0x0, 0x0, @fd=r2}, @generic="120bbcd2e97fe327f1eaacf409b1b418c991bc1700937b105998bf5c4a0554df4485819a836491a8beba9fa67556413b2d9f4c7328a53814b3ec20a4740a697d1c2d20bfdc3078da1e262a66930d533fc952d9aeef5c037da9d9609623cec86832fcf5dde70e33263a21c4ff3575dbc60e7a6c6f6c161fbb82a284d29e5ff5e7849e023a8ea6ab85128c0da2e9f8a7d6d72aea6da271d7236571efdd85846fe706ada13abd478df2c70093d321dcca0d8679563718463c3a2c095604a3dd3f5bbb7215e9883da06a10f7b3f95663cbce046a5c9c4c7204f2766aa3232d8007b31d069a96ad781833736aa42b0e99c7664b52527e7c2a55", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x93}]}, 0x2288}, 0x1, 0x0, 0x0, 0x404c814}, 0x4000) 5.326396563s ago: executing program 0 (id=2485): ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0x200, 0x0) poll$auto(&(0x7f00000001c0)={r0, 0xffff, 0x29}, 0x3, 0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/kernel/auto_msgmni\x00', 0x101000, 0x0) connect$auto(0x3, 0x0, 0x54) bpf$auto(0x0, 0x0, 0x10) mremap$auto(0x1, 0x4, 0x3, 0x642f, 0x0) 4.890465784s ago: executing program 0 (id=2486): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x0, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = epoll_create$auto(0x4) r1 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(r0, 0x1, r1, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r0, 0x0) shutdown$auto(0x200000003, 0x2) 3.599672121s ago: executing program 2 (id=2487): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) semctl$auto_GETALL(0x0, 0x0, 0xd, 0x7) open(0x0, 0x203002, 0x0) mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r2 = socket(0x18, 0xa, 0x1) connect$auto(r2, 0x0, 0x26) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5) r4 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f00000000c0)=0x4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@inferred=r4, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7ff}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r1, &(0x7f0000001b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000003380)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="08002bbd7000fbdbdf2504000000cc010380c20084800e604800656c890270b487931db96203486dcd08e55679c76103d1b42b9bedf2da9b5e5cd65d44fbfe0274b32d7ac60e78e04950f5f34d0fb306b1fc9223fee6eca23b00f9d48d1492417b874f5f4f0f4dd9497f3a837ca91a845d95155d1e2b3fe21a0e3c7f6cc92bb820fac005fcce7979abf5e30a059a9706690d74dad0ac94a6e2f3e8526661168308005c00", @ANYRES32, @ANYBLOB="0400358014004300fc0200000000000000000000000000010400390004005d8008008800", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="d102098008001500ac1414bb08009300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], 0x1778}, 0x1, 0x0, 0x0, 0x40000}, 0x891) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000200)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') pivot_root$auto(0x0, &(0x7f0000000080)='.\x00') 3.598067069s ago: executing program 0 (id=2488): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask_requested\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fadvise64$auto_POSIX_FADV_RANDOM(r0, 0x7fffffff, 0x7, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x40, 0x0, 0x6f7250c4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r3 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x40009, 0x800000e2, 0x9b75, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) semctl$auto_GETALL(0x0, 0x0, 0xd, 0x7) open(0x0, 0x203002, 0x0) mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r4 = socket(0x18, 0xa, 0x1) connect$auto(r4, 0x0, 0x26) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r3) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000180)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000200)='nfsd\x00', 0xf, 0x0) 3.256660925s ago: executing program 3 (id=2459): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) semctl$auto_GETALL(0x0, 0x0, 0xd, 0x7) open(0x0, 0x203002, 0x0) mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) r1 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) listen$auto(r1, 0x3fb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r2 = socket(0x18, 0xa, 0x1) connect$auto(r2, 0x0, 0x26) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000200)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') pivot_root$auto(0x0, &(0x7f0000000080)='.\x00') 2.806424126s ago: executing program 2 (id=2489): mmap$auto(0x7, 0x4, 0xb, 0x16, 0xffffffffffffffff, 0x4000000000008000) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x101b02, 0x0) r1 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) fstat$auto(0x2, 0x0) r4 = socket(0x28, 0x1, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x8001, &(0x7f0000000080)={&(0x7f00000003c0)="86b6ac823615940b7c9a511cd0342cc990863c956314b71b587863c713fae3bdcd8a12c878a882fb76b77ff478b24b8826622c751c7b9883471317b8ed909ccb5c3c7d437fa45a8eb47871d3aee5c969ccae159ae602e3cc98293bd7619a5b2c73eb521b65762648c99db0b263e0ea20ea4a8c4325e1cad72781f74e8398e4d85004944f558bcd", 0x6}, 0x0, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) syz_open_procfs$namespace(r1, &(0x7f0000000480)='ns/mnt\x00') socket(0x29, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x5}, 0x2}, 0x3, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x5}, 0x40000d0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r3], 0x1ac}}, 0x40000) getsockopt$auto(r4, 0x28, 0x0, 0x0, 0x0) r6 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(r6, 0x0, 0x1005, 0x9) mmap$auto(0x0, 0xe983, 0x3, 0x6b1, 0xffffffffffffffff, 0x8000) setsockopt$auto(r0, 0x4, 0x0, &(0x7f0000000100)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00', 0x10004) mremap$auto(0x0, 0x7e8, 0x3fd9, 0x0, 0x20000020000000) read$auto(0x3, 0x0, 0xfdef) ioctl$auto(r2, 0x4b49, 0x9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x6, 0x7, 0x23e, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x3, 0x2d7d01bf, 0x7, 0x2000, 0x5, 0x0, 0x84, 0x6ef, 0x0, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d3c, 0x200000000000000, 0x8, 0x0, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200d) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) 2.799675313s ago: executing program 0 (id=2496): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(r0, r0, 0xfffffffd) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) semctl$auto_GETALL(0x0, 0x0, 0xd, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/max_active\x00', 0x1ab102, 0x0) write$auto(r1, &(0x7f00000000c0)='\x00', 0x7) open(0x0, 0x203002, 0x0) mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r2 = socket(0x18, 0xa, 0x1) connect$auto(r2, 0x0, 0x26) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000200)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf259700000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) 2.649787834s ago: executing program 3 (id=2490): syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x8904, 0x400000000000004) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x7) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) getrandom$auto(0x0, 0x3, 0x80000001) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x10, 0x1007181, 0x0, 0x62, 0x7, 0x800, 0x0, 0x26, 0x4, 0x200003fffffe, 0xfffffffffffffff5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf, 0x22002, 0x200, 0x0, 0x62f, 0x4, 0x0, 0x0, 0x0, 0xb626, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x40, 0x81, 0x8a0, 0xb, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x800000000000b, 0xbc) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd0c, &(0x7f00000001c0)) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) madvise$auto(0x0, 0xffffffffffff0001, 0x15) msync$auto(0x110c230000, 0x200001, 0x6) 1.850674848s ago: executing program 2 (id=2491): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop8\x00', 0x14be02, 0x0) preadv2$auto(r1, &(0x7f0000000040)={&(0x7f0000000380), 0x6}, 0x2, 0x1000, 0x3, 0x8) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) r2 = getpid() sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(r2, 0x7, 0x0, 0x0, 0x0, 0x9) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0xffffffff, 0x6, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}}) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0x40942, 0x0) mmap$auto(0x2000, 0x9, 0x8, 0x8000000008011, r4, 0xfffffffffffffffe) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) ioctl$auto_FS_IOC_REMOVE_ENCRYPTION_KEY2(r3, 0xc0406618, &(0x7f00000000c0)={{0x6}, 0x1}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) prctl$auto_PR_SET_ENDIAN(0x14, 0x10, 0x400008001, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video41\x00', 0xe0a80, 0x0) ioctl$auto(r5, 0x8008563f, r5) 937.402383ms ago: executing program 4 (id=2473): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x3) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) semctl$auto_GETALL(0x0, 0x0, 0xd, 0x7) open(0x0, 0x203002, 0x0) mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x6) r1 = socket(0x18, 0xa, 0x1) connect$auto(r1, 0x0, 0x26) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r4) close_range$auto(0x2, 0x8, 0x0) 411.480438ms ago: executing program 2 (id=2492): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) mremap$auto(0x4000, 0xfee0, 0x1, 0x7, 0xfffff000) r0 = ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0x200, 0x0) poll$auto(&(0x7f00000001c0)={r1, 0xffff, 0x29}, 0x3, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cpu.weight.nice\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getsockopt$auto_SO_RESERVE_MEM(r1, 0x40, 0x49, &(0x7f0000000640)='\x00\x00\x00\x88 \x00\x00\xbb\x168\xf3\xc7\xa9}\x95\x913\'\xd7K\x9fZ\xbf\xf7', &(0x7f0000000600)=0x1ffffffc) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="86483cf81ef50aa20d6e861cfffb3afb0dc93e1998a84be61cb35a24d6daa08d57fb908e4f1af93f906387a71b194500b44998e07ac2efcabd791c3744775dc7514405b6cbaacbf59656500a", @ANYBLOB="13"], 0x1ac}}, 0x4004) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="2800009932f7c9576d02ca7b744b9615363c0097f343c9f7a2f363601c71ff31b5cfd2b9dcb50eda690d766befbacc00f3f623462dbdf77b53c9285f8eed6c0700e6201e6c8c554bca6f656461b75f42ff3e12cb6e4eeb01c66eabf70f9cfff3b7ac1beb0c8016ef7f2b08c0124da6e490412912ede0e914391ac7ad5e363bf3f48f14631677ba9296a825fcc46c344f6b6d8adece195c07e6e5c5f22b1bea0a749d05879bded3fc206ff12422b6ee2e862c1046279350aa4d1ca12c3f2d0ba8b44293906780b36b02ddf7000000000000000000", @ANYRES16=r4, @ANYBLOB="000127bd7000fedbdf255f00000008000300", @ANYRES32=r5, @ANYBLOB="060095000fb34b2306776251d60700000440df00"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv6/conf/bridge_slave_0/accept_untracked_na\x00', 0xa0180, 0x0) sendmsg$auto_NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x60}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20000800) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x54, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}, @NL80211_ATTR_SAE_PASSWORD={0x23, 0x115, "a727e84455fe5824a5ab15bdbad4091d7ed0ea0360a8ab931a52dd3c1f6de9"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xd}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040000}, 0x1) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) pwrite64$auto(r6, &(0x7f0000000840)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\xc2\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0x100000001, 0xfffffffffffffffc) write$auto_console_fops_tty_io(r8, &(0x7f0000000000)="c80d1b5d399b65", 0xfdef) connect$auto(0x3, 0x0, 0x54) bpf$auto(0x0, 0x0, 0x10) listmount$auto(0x0, 0x0, 0x7fffffffffffffff, 0x0) mremap$auto(0x4, 0x4, 0x3, 0x80642f, 0xfffffffffffffffd) 0s ago: executing program 4 (id=2493): openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x7617, 0x5, 0x100000000000002, 0x40eb3, 0xffffffffffffffff, 0x300000000003) write$auto_tracing_mark_fops_trace(r0, &(0x7f0000000540)="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", 0x157) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x4b41, 0xffffffffffffffff) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39) io_uring_setup$auto(0x800, 0x0) r4 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_uhid_fops_uhid(r4, 0x0, 0xfccd) r5 = socket(0xa, 0x800, 0x401) clock_getres$auto(0x10, 0x0) r6 = getsockopt$auto(r5, 0x0, 0x80, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, r6) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0xffffffffffffffff, 0x6, 0x103, 0x800295f4da0b, 0x2, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x2]}, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2d2500, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x3) setsockopt$auto(0x3, 0x86, 0x4497, 0x0, 0x1000008) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xf, 0x2, 0x948f, 0x1005, 0x206, 0x7, 0x80, 0x7, 0x19, 0x79d, 0x106, 0x100000000000000, 0x7f, 0x20000f]}, 0x0) sendmsg$auto_OVS_METER_CMD_FEATURES(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf2501000000040002080008000100008000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x811) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) kernel console output (not intermixed with test programs): find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 690.966948][T14068] random: crng reseeded on system resumption [ 693.248197][T14092] bridge0: port 3(gretap0) entered blocking state [ 693.336528][T14092] bridge0: port 3(gretap0) entered disabled state [ 693.401948][T14092] gretap0: entered allmulticast mode [ 693.453007][T14092] gretap0: entered promiscuous mode [ 693.510454][T14092] bridge0: port 3(gretap0) entered blocking state [ 693.517166][T14092] bridge0: port 3(gretap0) entered forwarding state [ 694.443989][T14104] FAULT_INJECTION: forcing a failure. [ 694.443989][T14104] name failslab, interval 1, probability 0, space 0, times 0 [ 694.502105][T14104] CPU: 0 UID: 0 PID: 14104 Comm: syz.1.1468 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.502146][T14104] Tainted: [L]=SOFTLOCKUP [ 694.502156][T14104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 694.502171][T14104] Call Trace: [ 694.502179][T14104] [ 694.502189][T14104] dump_stack_lvl+0x100/0x190 [ 694.502226][T14104] should_fail_ex.cold+0x5/0xa [ 694.502269][T14104] should_failslab+0xc2/0x120 [ 694.502305][T14104] kmem_cache_alloc_noprof+0x83/0x780 [ 694.502338][T14104] ? sk_prot_alloc+0x60/0x2a0 [ 694.502375][T14104] ? sk_prot_alloc+0x60/0x2a0 [ 694.502405][T14104] ? find_held_lock+0x2b/0x80 [ 694.502430][T14104] sk_prot_alloc+0x60/0x2a0 [ 694.502465][T14104] sk_alloc+0x36/0xe80 [ 694.502506][T14104] inet_create+0x3a0/0x1060 [ 694.502541][T14104] ? inet_create+0x94/0x1060 [ 694.502580][T14104] __sock_create+0x339/0x860 [ 694.502620][T14104] inet_ctl_sock_create+0x94/0x230 [ 694.502653][T14104] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 694.502686][T14104] ? lockdep_init_map_type+0x5c/0x250 [ 694.502724][T14104] ? lockdep_init_map_type+0x5c/0x250 [ 694.502763][T14104] ? __pfx_igmp_net_init+0x10/0x10 [ 694.502800][T14104] igmp_net_init+0xd0/0x150 [ 694.502836][T14104] ops_init+0x1e2/0x5f0 [ 694.502867][T14104] setup_net+0x118/0x3a0 [ 694.502922][T14104] ? __pfx_setup_net+0x10/0x10 [ 694.502954][T14104] ? lockdep_init_map_type+0x5c/0x250 [ 694.502992][T14104] ? mutex_init_lockep+0x110/0x150 [ 694.503035][T14104] copy_net_ns+0x46f/0x7c0 [ 694.503069][T14104] create_new_namespaces+0x3ea/0xac0 [ 694.503107][T14104] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 694.503141][T14104] ksys_unshare+0x455/0xab0 [ 694.503181][T14104] ? __pfx_ksys_unshare+0x10/0x10 [ 694.503220][T14104] ? xfd_validate_state+0x129/0x190 [ 694.503254][T14104] __x64_sys_unshare+0x31/0x40 [ 694.503292][T14104] do_syscall_64+0xc9/0xf80 [ 694.503331][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.503357][T14104] RIP: 0033:0x7f0cb2b9af79 [ 694.503378][T14104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.503404][T14104] RSP: 002b:00007f0cb39d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 694.503428][T14104] RAX: ffffffffffffffda RBX: 00007f0cb2e15fa0 RCX: 00007f0cb2b9af79 [ 694.503446][T14104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 694.503462][T14104] RBP: 00007f0cb2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 694.503479][T14104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.503495][T14104] R13: 00007f0cb2e16038 R14: 00007f0cb2e15fa0 R15: 00007ffcdf9b4128 [ 694.503527][T14104] [ 694.503581][T14104] Failed to initialize the IGMP autojoin socket (err -12) [ 696.374427][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.381283][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.137721][T14153] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 703.777162][T14246] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 704.205238][T14253] random: crng reseeded on system resumption [ 704.304080][T14253] hub 1-0:1.0: USB hub found [ 704.334420][T14253] hub 1-0:1.0: 1 port detected [ 709.335589][T14336] zswap: compressor not available [ 710.179072][T14320] kexec: Could not allocate control_code_buffer [ 710.978243][T14372] FAULT_INJECTION: forcing a failure. [ 710.978243][T14372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 711.076000][T14372] CPU: 0 UID: 0 PID: 14372 Comm: syz.1.1527 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.076037][T14372] Tainted: [L]=SOFTLOCKUP [ 711.076046][T14372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 711.076061][T14372] Call Trace: [ 711.076069][T14372] [ 711.076078][T14372] dump_stack_lvl+0x100/0x190 [ 711.076113][T14372] should_fail_ex.cold+0x5/0xa [ 711.076149][T14372] ? prepare_alloc_pages+0x16d/0x5f0 [ 711.076188][T14372] should_fail_alloc_page+0xeb/0x140 [ 711.076223][T14372] prepare_alloc_pages+0x1f0/0x5f0 [ 711.076257][T14372] ? __pfx_css_rstat_updated+0x10/0x10 [ 711.076289][T14372] __alloc_frozen_pages_noprof+0x193/0x2410 [ 711.076322][T14372] ? rcu_is_watching+0x12/0xc0 [ 711.076344][T14372] ? mod_memcg_lruvec_state+0x1a6/0x5d0 [ 711.076384][T14372] ? __mod_zone_page_state+0xe2/0x190 [ 711.076412][T14372] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 711.076458][T14372] ? folios_put_refs+0x66d/0x840 [ 711.076493][T14372] ? __pfx_folios_put_refs+0x10/0x10 [ 711.076528][T14372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 711.076555][T14372] ? policy_nodemask+0xed/0x4f0 [ 711.076590][T14372] alloc_pages_mpol+0x1fb/0x550 [ 711.076624][T14372] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 711.076657][T14372] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 711.076688][T14372] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 711.076726][T14372] folio_alloc_mpol_noprof+0x36/0x340 [ 711.076765][T14372] shmem_alloc_folio+0x135/0x160 [ 711.076789][T14372] shmem_alloc_and_add_folio+0x371/0xd40 [ 711.076824][T14372] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 711.076855][T14372] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 711.076890][T14372] shmem_get_folio_gfp+0x6ab/0x1900 [ 711.076930][T14372] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 711.076960][T14372] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 711.076993][T14372] ? lockdep_hardirqs_on+0x78/0x100 [ 711.077031][T14372] shmem_fault+0x1f9/0xa20 [ 711.077070][T14372] ? __lock_acquire+0x4a5/0x2630 [ 711.077103][T14372] ? __pfx_shmem_fault+0x10/0x10 [ 711.077132][T14372] ? __up_read+0x2c5/0x700 [ 711.077163][T14372] ? __pfx_filemap_map_pages+0x10/0x10 [ 711.077193][T14372] __do_fault+0x10d/0x550 [ 711.077226][T14372] ? __pfx_filemap_map_pages+0x10/0x10 [ 711.077254][T14372] do_fault+0x2db/0x1990 [ 711.077294][T14372] __handle_mm_fault+0x1807/0x2b50 [ 711.077323][T14372] ? mt_find+0x45e/0x8e0 [ 711.077360][T14372] ? __pfx___handle_mm_fault+0x10/0x10 [ 711.077383][T14372] ? __pfx_mt_find+0x10/0x10 [ 711.077433][T14372] ? find_vma+0xbf/0x140 [ 711.077468][T14372] ? __pfx_find_vma+0x10/0x10 [ 711.077503][T14372] handle_mm_fault+0x36d/0xa20 [ 711.077533][T14372] do_user_addr_fault+0x74c/0x12f0 [ 711.077570][T14372] exc_page_fault+0x6f/0xd0 [ 711.077602][T14372] asm_exc_page_fault+0x26/0x30 [ 711.077652][T14372] RIP: 0010:rep_stos_alternative+0x57/0x80 [ 711.077677][T14372] Code: 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 <48> 89 47 30 48 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 [ 711.077699][T14372] RSP: 0018:ffffc90003c97d28 EFLAGS: 00050202 [ 711.077719][T14372] RAX: 0000000000000000 RBX: 000000000080000d RCX: 00000000007aa044 [ 711.077734][T14372] RDX: ffff88802670bc80 RSI: ffffffff82527581 RDI: 0000000000055fc9 [ 711.077749][T14372] RBP: 1ffff92000792fac R08: 0000000000000001 R09: 00000000000001c9 [ 711.077764][T14372] R10: 0000000000000200 R11: 0000000000000000 R12: 00007ffffffff000 [ 711.077779][T14372] R13: 0000000000800004 R14: 0000000000000009 R15: 0000000000000000 [ 711.077802][T14372] ? __might_fault+0x111/0x140 [ 711.077832][T14372] evdev_do_ioctl+0xd09/0x1b60 [ 711.077876][T14372] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 711.077920][T14372] ? find_held_lock+0x2b/0x80 [ 711.077958][T14372] evdev_ioctl+0x16f/0x1a0 [ 711.077995][T14372] ? __pfx_evdev_ioctl+0x10/0x10 [ 711.078034][T14372] __x64_sys_ioctl+0x18e/0x210 [ 711.078075][T14372] do_syscall_64+0xc9/0xf80 [ 711.078111][T14372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.078135][T14372] RIP: 0033:0x7f0cb2b9af79 [ 711.078153][T14372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.078177][T14372] RSP: 002b:00007f0cb39b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 711.078198][T14372] RAX: ffffffffffffffda RBX: 00007f0cb2e16090 RCX: 00007f0cb2b9af79 [ 711.078213][T14372] RDX: 0000200000000000 RSI: 0000000080104592 RDI: 0000000000000005 [ 711.078228][T14372] RBP: 00007f0cb2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 711.078243][T14372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.078257][T14372] R13: 00007f0cb2e16128 R14: 00007f0cb2e16090 R15: 00007ffcdf9b4128 [ 711.078288][T14372] [ 715.003466][T14443] random: crng reseeded on system resumption [ 715.151561][T14443] hub 1-0:1.0: USB hub found [ 715.195762][T14443] hub 1-0:1.0: 1 port detected [ 717.195777][T14493] random: crng reseeded on system resumption [ 717.310487][T14493] hub 1-0:1.0: USB hub found [ 717.335097][T14493] hub 1-0:1.0: 1 port detected [ 718.626564][ T5144] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 719.723199][T14565] random: crng reseeded on system resumption [ 719.876979][T14565] hub 1-0:1.0: USB hub found [ 719.923021][T14565] hub 1-0:1.0: 1 port detected [ 720.290228][T14571] FAULT_INJECTION: forcing a failure. [ 720.290228][T14571] name failslab, interval 1, probability 0, space 0, times 0 [ 720.356132][T14571] CPU: 0 UID: 0 PID: 14571 Comm: syz.0.1569 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.356173][T14571] Tainted: [L]=SOFTLOCKUP [ 720.356182][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 720.356198][T14571] Call Trace: [ 720.356207][T14571] [ 720.356217][T14571] dump_stack_lvl+0x100/0x190 [ 720.356254][T14571] should_fail_ex.cold+0x5/0xa [ 720.356297][T14571] should_failslab+0xc2/0x120 [ 720.356332][T14571] kmem_cache_alloc_noprof+0x83/0x780 [ 720.356366][T14571] ? security_file_alloc+0x34/0x2c0 [ 720.356402][T14571] ? security_file_alloc+0x34/0x2c0 [ 720.356432][T14571] security_file_alloc+0x34/0x2c0 [ 720.356462][T14571] init_file+0x95/0x480 [ 720.356498][T14571] alloc_empty_file+0x73/0x1c0 [ 720.356535][T14571] path_openat+0xe8/0x31a0 [ 720.356563][T14571] ? getname_flags+0x93/0xf0 [ 720.356586][T14571] ? do_sys_openat2+0xc5/0x220 [ 720.356622][T14571] ? __x64_sys_open+0xfe/0x1d0 [ 720.356659][T14571] ? do_syscall_64+0xc9/0xf80 [ 720.356693][T14571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.356734][T14571] ? __pfx_path_openat+0x10/0x10 [ 720.356775][T14571] do_filp_open+0x1f7/0x420 [ 720.356807][T14571] ? __pfx_do_filp_open+0x10/0x10 [ 720.356858][T14571] ? alloc_fd+0x476/0x790 [ 720.356894][T14571] do_sys_openat2+0x12e/0x220 [ 720.356935][T14571] ? __pfx_do_sys_openat2+0x10/0x10 [ 720.356975][T14571] ? __fget_files+0x21f/0x3d0 [ 720.357009][T14571] __x64_sys_open+0xfe/0x1d0 [ 720.357047][T14571] ? __pfx___x64_sys_open+0x10/0x10 [ 720.357084][T14571] ? xfd_validate_state+0x129/0x190 [ 720.357119][T14571] do_syscall_64+0xc9/0xf80 [ 720.357157][T14571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.357182][T14571] RIP: 0033:0x7f34dcd9af79 [ 720.357201][T14571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.357226][T14571] RSP: 002b:00007f34ddc3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 720.357249][T14571] RAX: ffffffffffffffda RBX: 00007f34dd015fa0 RCX: 00007f34dcd9af79 [ 720.357266][T14571] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 720.357283][T14571] RBP: 00007f34dce316e0 R08: 0000000000000000 R09: 0000000000000000 [ 720.357298][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.357314][T14571] R13: 00007f34dd016038 R14: 00007f34dd015fa0 R15: 00007ffe8f1feac8 [ 720.357346][T14571] [ 721.423675][T14595] FAULT_INJECTION: forcing a failure. [ 721.423675][T14595] name failslab, interval 1, probability 0, space 0, times 0 [ 721.453875][T14595] CPU: 0 UID: 0 PID: 14595 Comm: syz.3.1576 Tainted: G L syzkaller #0 PREEMPT(full) [ 721.453917][T14595] Tainted: [L]=SOFTLOCKUP [ 721.453926][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 721.453942][T14595] Call Trace: [ 721.453951][T14595] [ 721.453961][T14595] dump_stack_lvl+0x100/0x190 [ 721.453997][T14595] should_fail_ex.cold+0x5/0xa [ 721.454041][T14595] should_failslab+0xc2/0x120 [ 721.454076][T14595] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 721.454111][T14595] ? d_alloc_parallel+0xb4e/0x14e0 [ 721.454152][T14595] ? proc_alloc_inode+0x25/0x200 [ 721.454192][T14595] ? __pfx_proc_alloc_inode+0x10/0x10 [ 721.454226][T14595] ? proc_alloc_inode+0x25/0x200 [ 721.454260][T14595] proc_alloc_inode+0x25/0x200 [ 721.454295][T14595] alloc_inode+0x68/0x250 [ 721.454332][T14595] new_inode+0x22/0x1c0 [ 721.454372][T14595] proc_pid_make_inode+0x22/0x160 [ 721.454408][T14595] proc_pident_instantiate+0x85/0x310 [ 721.454448][T14595] proc_pident_lookup+0x1e3/0x270 [ 721.454490][T14595] lookup_open.isra.0+0x631/0x11b0 [ 721.454521][T14595] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 721.454587][T14595] ? lookup_fast+0x2da/0x600 [ 721.454614][T14595] path_openat+0xa98/0x31a0 [ 721.454654][T14595] ? __pfx_path_openat+0x10/0x10 [ 721.454696][T14595] do_filp_open+0x1f7/0x420 [ 721.454728][T14595] ? __pfx_do_filp_open+0x10/0x10 [ 721.454768][T14595] ? __pfx_kfree_link+0x10/0x10 [ 721.454816][T14595] ? _raw_spin_unlock+0x28/0x50 [ 721.454846][T14595] ? alloc_fd+0x476/0x790 [ 721.454886][T14595] do_sys_openat2+0x12e/0x220 [ 721.454924][T14595] ? __pfx_do_sys_openat2+0x10/0x10 [ 721.454965][T14595] ? __fget_files+0x21f/0x3d0 [ 721.454998][T14595] __x64_sys_openat+0x12d/0x210 [ 721.455038][T14595] ? __pfx___x64_sys_openat+0x10/0x10 [ 721.455075][T14595] ? xfd_validate_state+0x129/0x190 [ 721.455110][T14595] do_syscall_64+0xc9/0xf80 [ 721.455148][T14595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.455173][T14595] RIP: 0033:0x7f43ca59af79 [ 721.455195][T14595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.455219][T14595] RSP: 002b:00007f43cb407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 721.455244][T14595] RAX: ffffffffffffffda RBX: 00007f43ca815fa0 RCX: 00007f43ca59af79 [ 721.455261][T14595] RDX: 0000000000020000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 721.455279][T14595] RBP: 00007f43ca6316e0 R08: 0000000000000000 R09: 0000000000000000 [ 721.455294][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.455309][T14595] R13: 00007f43ca816038 R14: 00007f43ca815fa0 R15: 00007fff5a8e5818 [ 721.455342][T14595] [ 721.813806][ C0] sd 0:0:1:0: [sda] tag#5171 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 721.824362][ C0] sd 0:0:1:0: [sda] tag#5171 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 723.842939][ T5144] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 723.992924][T14615] hub 3-0:1.0: USB hub found [ 724.096578][T14615] hub 3-0:1.0: 1 port detected [ 724.232593][T14615] usb usb3: authorized to connect [ 727.130568][T14683] FAULT_INJECTION: forcing a failure. [ 727.130568][T14683] name failslab, interval 1, probability 0, space 0, times 0 [ 727.198465][T14683] CPU: 0 UID: 0 PID: 14683 Comm: syz.3.1594 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.198507][T14683] Tainted: [L]=SOFTLOCKUP [ 727.198517][T14683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 727.198533][T14683] Call Trace: [ 727.198542][T14683] [ 727.198552][T14683] dump_stack_lvl+0x100/0x190 [ 727.198589][T14683] should_fail_ex.cold+0x5/0xa [ 727.198634][T14683] should_failslab+0xc2/0x120 [ 727.198669][T14683] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 727.198702][T14683] ? __lock_acquire+0x4a5/0x2630 [ 727.198739][T14683] ? __d_alloc+0x34/0xa80 [ 727.198775][T14683] ? __d_alloc+0x34/0xa80 [ 727.198804][T14683] __d_alloc+0x34/0xa80 [ 727.198834][T14683] ? bpf_lsm_inode_permission+0x9/0x10 [ 727.198870][T14683] d_alloc+0x4a/0x1e0 [ 727.198902][T14683] vfs_tmpfile+0x148/0x9a0 [ 727.198939][T14683] path_openat+0x164e/0x31a0 [ 727.198966][T14683] ? getname_flags+0x93/0xf0 [ 727.198989][T14683] ? do_sys_openat2+0xc5/0x220 [ 727.199032][T14683] ? __x64_sys_open+0xfe/0x1d0 [ 727.199070][T14683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.199103][T14683] ? __pfx_path_openat+0x10/0x10 [ 727.199144][T14683] do_filp_open+0x1f7/0x420 [ 727.199176][T14683] ? __pfx_do_filp_open+0x10/0x10 [ 727.199227][T14683] ? alloc_fd+0x476/0x790 [ 727.199264][T14683] do_sys_openat2+0x12e/0x220 [ 727.199302][T14683] ? __pfx_do_sys_openat2+0x10/0x10 [ 727.199342][T14683] ? __fget_files+0x21f/0x3d0 [ 727.199375][T14683] __x64_sys_open+0xfe/0x1d0 [ 727.199413][T14683] ? __pfx___x64_sys_open+0x10/0x10 [ 727.199450][T14683] ? xfd_validate_state+0x129/0x190 [ 727.199485][T14683] do_syscall_64+0xc9/0xf80 [ 727.199525][T14683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.199551][T14683] RIP: 0033:0x7f43ca59af79 [ 727.199570][T14683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.199596][T14683] RSP: 002b:00007f43cb407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 727.199620][T14683] RAX: ffffffffffffffda RBX: 00007f43ca815fa0 RCX: 00007f43ca59af79 [ 727.199638][T14683] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 727.199655][T14683] RBP: 00007f43ca6316e0 R08: 0000000000000000 R09: 0000000000000000 [ 727.199671][T14683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.199687][T14683] R13: 00007f43ca816038 R14: 00007f43ca815fa0 R15: 00007fff5a8e5818 [ 727.199719][T14683] [ 727.602902][T14696] FAULT_INJECTION: forcing a failure. [ 727.602902][T14696] name failslab, interval 1, probability 0, space 0, times 0 [ 727.616028][T14696] CPU: 0 UID: 0 PID: 14696 Comm: syz.3.1597 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.616102][T14696] Tainted: [L]=SOFTLOCKUP [ 727.616111][T14696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 727.616128][T14696] Call Trace: [ 727.616137][T14696] [ 727.616146][T14696] dump_stack_lvl+0x100/0x190 [ 727.616184][T14696] should_fail_ex.cold+0x5/0xa [ 727.616228][T14696] should_failslab+0xc2/0x120 [ 727.616264][T14696] kmem_cache_alloc_noprof+0x83/0x780 [ 727.616298][T14696] ? __mpol_dup+0x74/0x370 [ 727.616341][T14696] ? __mpol_dup+0x74/0x370 [ 727.616378][T14696] __mpol_dup+0x74/0x370 [ 727.616416][T14696] ? __pfx___mpol_dup+0x10/0x10 [ 727.616463][T14696] mbind_range+0x2ad/0x550 [ 727.616506][T14696] do_mbind+0x7de/0xfd0 [ 727.616534][T14696] ? __might_fault+0xc5/0x140 [ 727.616561][T14696] ? __pfx_do_mbind+0x10/0x10 [ 727.616590][T14696] ? _copy_from_user+0x59/0xd0 [ 727.616623][T14696] ? __pfx_get_nodes+0x10/0x10 [ 727.616661][T14696] kernel_mbind+0x1b7/0x200 [ 727.616686][T14696] ? __pfx_kernel_mbind+0x10/0x10 [ 727.616717][T14696] do_syscall_64+0xc9/0xf80 [ 727.616756][T14696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.616782][T14696] RIP: 0033:0x7f43ca59af79 [ 727.616802][T14696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.616827][T14696] RSP: 002b:00007f43cb407028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 727.616851][T14696] RAX: ffffffffffffffda RBX: 00007f43ca815fa0 RCX: 00007f43ca59af79 [ 727.616868][T14696] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 727.616884][T14696] RBP: 00007f43ca6316e0 R08: 0000000000000003 R09: 0000000000000003 [ 727.616899][T14696] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 727.616924][T14696] R13: 00007f43ca816038 R14: 00007f43ca815fa0 R15: 00007fff5a8e5818 [ 727.616955][T14696] [ 728.114727][T14697] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 728.164126][T14697] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 728.276364][T14697] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 729.376628][ T5144] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 731.373151][T14759] FAULT_INJECTION: forcing a failure. [ 731.373151][T14759] name failslab, interval 1, probability 0, space 0, times 0 [ 731.468356][T14759] CPU: 0 UID: 0 PID: 14759 Comm: syz.0.1612 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.468398][T14759] Tainted: [L]=SOFTLOCKUP [ 731.468407][T14759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 731.468424][T14759] Call Trace: [ 731.468432][T14759] [ 731.468442][T14759] dump_stack_lvl+0x100/0x190 [ 731.468479][T14759] should_fail_ex.cold+0x5/0xa [ 731.468523][T14759] should_failslab+0xc2/0x120 [ 731.468559][T14759] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 731.468594][T14759] ? kstrdup_const+0x63/0x80 [ 731.468641][T14759] ? kstrdup+0x51/0xe0 [ 731.468671][T14759] kstrdup+0x51/0xe0 [ 731.468704][T14759] kstrdup_const+0x63/0x80 [ 731.468736][T14759] __kernfs_new_node+0x9b/0x960 [ 731.468775][T14759] ? __pfx___kernfs_new_node+0x10/0x10 [ 731.468817][T14759] ? find_held_lock+0x2b/0x80 [ 731.468844][T14759] ? kernfs_root+0xee/0x2a0 [ 731.468877][T14759] ? kernfs_root+0xee/0x2a0 [ 731.468917][T14759] kernfs_new_node+0x11b/0x1a0 [ 731.468961][T14759] kernfs_create_link+0xcc/0x240 [ 731.468992][T14759] sysfs_do_create_link_sd+0x90/0x140 [ 731.469028][T14759] sysfs_create_link+0x61/0xc0 [ 731.469062][T14759] device_add+0xb5d/0x1950 [ 731.469089][T14759] ? __pfx_device_add+0x10/0x10 [ 731.469110][T14759] ? __pfx___might_resched+0x10/0x10 [ 731.469134][T14759] ? lockdep_hardirqs_on+0x78/0x100 [ 731.469179][T14759] __add_disk+0x518/0xe40 [ 731.469226][T14759] add_disk_fwnode+0x118/0x5c0 [ 731.469254][T14759] loop_add+0x90b/0xb60 [ 731.469281][T14759] ? __pfx_loop_add+0x10/0x10 [ 731.469326][T14759] ? find_held_lock+0x2b/0x80 [ 731.469351][T14759] ? hook_file_ioctl_common+0x146/0x410 [ 731.469383][T14759] loop_control_ioctl+0xae/0x620 [ 731.469413][T14759] ? __pfx_loop_control_ioctl+0x10/0x10 [ 731.469447][T14759] ? __pfx_loop_control_ioctl+0x10/0x10 [ 731.469478][T14759] __x64_sys_ioctl+0x18e/0x210 [ 731.469521][T14759] do_syscall_64+0xc9/0xf80 [ 731.469559][T14759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.469585][T14759] RIP: 0033:0x7f34dcd9af79 [ 731.469605][T14759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.469635][T14759] RSP: 002b:00007f34ddc3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.469660][T14759] RAX: ffffffffffffffda RBX: 00007f34dd015fa0 RCX: 00007f34dcd9af79 [ 731.469677][T14759] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 731.469694][T14759] RBP: 00007f34dce316e0 R08: 0000000000000000 R09: 0000000000000000 [ 731.469709][T14759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.469725][T14759] R13: 00007f34dd016038 R14: 00007f34dd015fa0 R15: 00007ffe8f1feac8 [ 731.469757][T14759] [ 732.217532][T14773] FAULT_INJECTION: forcing a failure. [ 732.217532][T14773] name failslab, interval 1, probability 0, space 0, times 0 [ 732.245629][T14773] CPU: 0 UID: 0 PID: 14773 Comm: syz.3.1614 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.245672][T14773] Tainted: [L]=SOFTLOCKUP [ 732.245681][T14773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 732.245697][T14773] Call Trace: [ 732.245706][T14773] [ 732.245716][T14773] dump_stack_lvl+0x100/0x190 [ 732.245753][T14773] should_fail_ex.cold+0x5/0xa [ 732.245797][T14773] should_failslab+0xc2/0x120 [ 732.245833][T14773] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 732.245866][T14773] ? __lock_acquire+0x4a5/0x2630 [ 732.245910][T14773] ? __d_alloc+0x34/0xa80 [ 732.245946][T14773] ? __d_alloc+0x34/0xa80 [ 732.245976][T14773] __d_alloc+0x34/0xa80 [ 732.246006][T14773] ? bpf_lsm_inode_permission+0x9/0x10 [ 732.246042][T14773] d_alloc+0x4a/0x1e0 [ 732.246075][T14773] vfs_tmpfile+0x148/0x9a0 [ 732.246112][T14773] path_openat+0x164e/0x31a0 [ 732.246140][T14773] ? getname_flags+0x93/0xf0 [ 732.246163][T14773] ? do_sys_openat2+0xc5/0x220 [ 732.246199][T14773] ? __x64_sys_open+0xfe/0x1d0 [ 732.246236][T14773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.246269][T14773] ? __pfx_path_openat+0x10/0x10 [ 732.246310][T14773] do_filp_open+0x1f7/0x420 [ 732.246342][T14773] ? __pfx_do_filp_open+0x10/0x10 [ 732.246393][T14773] ? alloc_fd+0x476/0x790 [ 732.246429][T14773] do_sys_openat2+0x12e/0x220 [ 732.246480][T14773] ? __pfx_do_sys_openat2+0x10/0x10 [ 732.246520][T14773] ? __fget_files+0x21f/0x3d0 [ 732.246554][T14773] __x64_sys_open+0xfe/0x1d0 [ 732.246593][T14773] ? __pfx___x64_sys_open+0x10/0x10 [ 732.246630][T14773] ? xfd_validate_state+0x129/0x190 [ 732.246665][T14773] do_syscall_64+0xc9/0xf80 [ 732.246705][T14773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.246730][T14773] RIP: 0033:0x7f43ca59af79 [ 732.246750][T14773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.246775][T14773] RSP: 002b:00007f43cb407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 732.246799][T14773] RAX: ffffffffffffffda RBX: 00007f43ca815fa0 RCX: 00007f43ca59af79 [ 732.246816][T14773] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 732.246832][T14773] RBP: 00007f43ca6316e0 R08: 0000000000000000 R09: 0000000000000000 [ 732.246848][T14773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.246864][T14773] R13: 00007f43ca816038 R14: 00007f43ca815fa0 R15: 00007fff5a8e5818 [ 732.246901][T14773] [ 734.792079][T14803] FAULT_INJECTION: forcing a failure. [ 734.792079][T14803] name failslab, interval 1, probability 0, space 0, times 0 [ 734.792120][T14803] CPU: 0 UID: 0 PID: 14803 Comm: syz.1.1622 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.792156][T14803] Tainted: [L]=SOFTLOCKUP [ 734.792166][T14803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 734.792181][T14803] Call Trace: [ 734.792190][T14803] [ 734.792199][T14803] dump_stack_lvl+0x100/0x190 [ 734.792235][T14803] should_fail_ex.cold+0x5/0xa [ 734.792279][T14803] should_failslab+0xc2/0x120 [ 734.792319][T14803] __kmalloc_cache_noprof+0x80/0x810 [ 734.792346][T14803] ? yama_ptracer_add+0x48/0x590 [ 734.792380][T14803] ? find_get_task_by_vpid+0x19e/0x310 [ 734.792424][T14803] ? yama_ptracer_add+0x48/0x590 [ 734.792456][T14803] yama_ptracer_add+0x48/0x590 [ 734.792491][T14803] yama_task_prctl+0xf4/0x1c0 [ 734.792525][T14803] security_task_prctl+0xc2/0x160 [ 734.792566][T14803] __do_sys_prctl+0x9b/0x21a0 [ 734.792591][T14803] ? __pfx___do_sys_prctl+0x10/0x10 [ 734.792632][T14803] do_syscall_64+0xc9/0xf80 [ 734.792671][T14803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.792697][T14803] RIP: 0033:0x7f0cb2b9af79 [ 734.792716][T14803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.792742][T14803] RSP: 002b:00007f0cb39d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 734.792766][T14803] RAX: ffffffffffffffda RBX: 00007f0cb2e15fa0 RCX: 00007f0cb2b9af79 [ 734.792784][T14803] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000059616d61 [ 734.792800][T14803] RBP: 00007f0cb2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 734.792816][T14803] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 734.792831][T14803] R13: 00007f0cb2e16038 R14: 00007f0cb2e15fa0 R15: 00007ffcdf9b4128 [ 734.792863][T14803] [ 740.379303][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 747.407672][T15005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1671'. [ 752.552343][T15093] Invalid ELF header magic: != ELF [ 754.993327][T15128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1694'. [ 757.364342][T15179] hub 1-0:1.0: USB hub found [ 757.409643][T15179] hub 1-0:1.0: 1 port detected [ 757.646207][T15185] netlink: get zone limit has 8 unknown bytes [ 757.853963][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.877365][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.310561][T15234] hub 1-0:1.0: USB hub found [ 760.349177][T15234] hub 1-0:1.0: 1 port detected [ 761.174471][T15229] kexec: Could not allocate control_code_buffer [ 764.050964][T15283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1723'. [ 764.649847][T15293] FAULT_INJECTION: forcing a failure. [ 764.649847][T15293] name failslab, interval 1, probability 0, space 0, times 0 [ 764.718390][T15293] CPU: 0 UID: 0 PID: 15293 Comm: syz.0.1725 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.718431][T15293] Tainted: [L]=SOFTLOCKUP [ 764.718441][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 764.718458][T15293] Call Trace: [ 764.718466][T15293] [ 764.718476][T15293] dump_stack_lvl+0x100/0x190 [ 764.718514][T15293] should_fail_ex.cold+0x5/0xa [ 764.718558][T15293] should_failslab+0xc2/0x120 [ 764.718594][T15293] __kmalloc_cache_noprof+0x80/0x810 [ 764.718620][T15293] ? usb_control_msg+0xbc/0x4a0 [ 764.718655][T15293] ? __pfx___mutex_lock+0x10/0x10 [ 764.718697][T15293] ? usb_control_msg+0xbc/0x4a0 [ 764.718729][T15293] usb_control_msg+0xbc/0x4a0 [ 764.718765][T15293] ? __pfx_usb_control_msg+0x10/0x10 [ 764.718809][T15293] hub_ext_port_status+0x152/0x600 [ 764.718863][T15293] hub_activate+0x6d8/0x1d50 [ 764.718898][T15293] ? trace_contention_end+0xd6/0x110 [ 764.718944][T15293] ? __pfx_hub_activate+0x10/0x10 [ 764.718977][T15293] ? find_held_lock+0x2b/0x80 [ 764.719004][T15293] ? usb_generic_driver_resume+0x70/0xa0 [ 764.719038][T15293] ? usb_generic_driver_resume+0x70/0xa0 [ 764.719081][T15293] hub_resume+0xb0/0x400 [ 764.719117][T15293] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 764.719156][T15293] ? __pfx_hub_resume+0x10/0x10 [ 764.719192][T15293] ? __pfx_hcd_bus_resume+0x10/0x10 [ 764.719228][T15293] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 764.719258][T15293] usb_resume_both+0x237/0x9a0 [ 764.719284][T15293] ? __pfx_usb_resume_both+0x10/0x10 [ 764.719309][T15293] ? mark_held_locks+0x40/0x70 [ 764.719346][T15293] ? __pfx_usb_runtime_resume+0x10/0x10 [ 764.719375][T15293] __rpm_callback+0xc8/0x620 [ 764.719408][T15293] ? read_tsc+0x9/0x20 [ 764.719442][T15293] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 764.719472][T15293] ? __pfx_usb_runtime_resume+0x10/0x10 [ 764.719502][T15293] rpm_callback+0x16a/0x1b0 [ 764.719534][T15293] ? __pfx_usb_runtime_resume+0x10/0x10 [ 764.719565][T15293] rpm_resume+0xcec/0x12f0 [ 764.719607][T15293] ? __pfx_rpm_resume+0x10/0x10 [ 764.719642][T15293] ? do_raw_spin_lock+0x128/0x260 [ 764.719666][T15293] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 764.719697][T15293] rpm_resume+0x721/0x12f0 [ 764.719738][T15293] ? __pfx_rpm_resume+0x10/0x10 [ 764.719770][T15293] ? do_raw_spin_lock+0x128/0x260 [ 764.719794][T15293] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 764.719828][T15293] __pm_runtime_resume+0xb6/0x170 [ 764.719875][T15293] usb_autopm_get_interface+0x20/0xe0 [ 764.719903][T15293] disable_store+0x1ca/0x450 [ 764.719945][T15293] ? __pfx_disable_store+0x10/0x10 [ 764.719984][T15293] ? find_held_lock+0x2b/0x80 [ 764.720010][T15293] ? sysfs_file_kobj+0xe4/0x290 [ 764.720038][T15293] ? sysfs_file_kobj+0xe4/0x290 [ 764.720074][T15293] ? __pfx_disable_store+0x10/0x10 [ 764.720112][T15293] dev_attr_store+0x58/0x80 [ 764.720152][T15293] ? __pfx_dev_attr_store+0x10/0x10 [ 764.720192][T15293] sysfs_kf_write+0xf2/0x150 [ 764.720224][T15293] kernfs_fop_write_iter+0x3e0/0x5f0 [ 764.720248][T15293] ? __pfx_sysfs_kf_write+0x10/0x10 [ 764.720281][T15293] vfs_write+0x6ac/0x1070 [ 764.720310][T15293] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 764.720339][T15293] ? __pfx_vfs_write+0x10/0x10 [ 764.720365][T15293] ? find_held_lock+0x2b/0x80 [ 764.720411][T15293] ksys_write+0x12a/0x250 [ 764.720438][T15293] ? __pfx_ksys_write+0x10/0x10 [ 764.720475][T15293] do_syscall_64+0xc9/0xf80 [ 764.720513][T15293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.720540][T15293] RIP: 0033:0x7f34dcd9af79 [ 764.720560][T15293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.720586][T15293] RSP: 002b:00007f34ddc3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 764.720612][T15293] RAX: ffffffffffffffda RBX: 00007f34dd015fa0 RCX: 00007f34dcd9af79 [ 764.720629][T15293] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 764.720645][T15293] RBP: 00007f34dce316e0 R08: 0000000000000000 R09: 0000000000000000 [ 764.720661][T15293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.720677][T15293] R13: 00007f34dd016038 R14: 00007f34dd015fa0 R15: 00007ffe8f1feac8 [ 764.720711][T15293] [ 766.683920][T15293] hub 2-0:1.0: hub_ext_port_status failed (err = -12) [ 767.179115][T15347] netlink: 'syz.1.1734': attribute type 1 has an invalid length. [ 767.658186][T15345] Invalid ELF header magic: != ELF [ 767.754122][T15362] random: crng reseeded on system resumption [ 768.768607][T15366] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1740'. [ 769.412262][T15368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1739'. [ 770.651275][T15384] FAULT_INJECTION: forcing a failure. [ 770.651275][T15384] name failslab, interval 1, probability 0, space 0, times 0 [ 770.712806][T15384] CPU: 0 UID: 0 PID: 15384 Comm: syz.3.1743 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.712847][T15384] Tainted: [L]=SOFTLOCKUP [ 770.712856][T15384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 770.712872][T15384] Call Trace: [ 770.712880][T15384] [ 770.712890][T15384] dump_stack_lvl+0x100/0x190 [ 770.712928][T15384] should_fail_ex.cold+0x5/0xa [ 770.712973][T15384] should_failslab+0xc2/0x120 [ 770.713009][T15384] __kmalloc_cache_noprof+0x80/0x810 [ 770.713036][T15384] ? usb_control_msg+0xbc/0x4a0 [ 770.713076][T15384] ? __pfx___mutex_lock+0x10/0x10 [ 770.713118][T15384] ? usb_control_msg+0xbc/0x4a0 [ 770.713156][T15384] usb_control_msg+0xbc/0x4a0 [ 770.713193][T15384] ? __pfx_usb_control_msg+0x10/0x10 [ 770.713285][T15384] ? timestamp_truncate+0x22e/0x2f0 [ 770.713321][T15384] hub_ext_port_status+0x152/0x600 [ 770.713364][T15384] hub_activate+0x6d8/0x1d50 [ 770.713399][T15384] ? trace_contention_end+0xd6/0x110 [ 770.713444][T15384] ? __pfx_hub_activate+0x10/0x10 [ 770.713478][T15384] ? find_held_lock+0x2b/0x80 [ 770.713504][T15384] ? usb_generic_driver_resume+0x70/0xa0 [ 770.713538][T15384] ? usb_generic_driver_resume+0x70/0xa0 [ 770.713581][T15384] hub_resume+0xb0/0x400 [ 770.713617][T15384] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 770.713656][T15384] ? __pfx_hub_resume+0x10/0x10 [ 770.713692][T15384] ? __pfx_hcd_bus_resume+0x10/0x10 [ 770.713728][T15384] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 770.713757][T15384] usb_resume_both+0x237/0x9a0 [ 770.713784][T15384] ? __pfx_usb_resume_both+0x10/0x10 [ 770.713810][T15384] ? mark_held_locks+0x40/0x70 [ 770.713846][T15384] ? __pfx_usb_runtime_resume+0x10/0x10 [ 770.713876][T15384] __rpm_callback+0xc8/0x620 [ 770.713910][T15384] ? read_tsc+0x9/0x20 [ 770.713943][T15384] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 770.713974][T15384] ? __pfx_usb_runtime_resume+0x10/0x10 [ 770.714003][T15384] rpm_callback+0x16a/0x1b0 [ 770.714036][T15384] ? __pfx_usb_runtime_resume+0x10/0x10 [ 770.714066][T15384] rpm_resume+0xcec/0x12f0 [ 770.714108][T15384] ? __pfx_rpm_resume+0x10/0x10 [ 770.714143][T15384] ? do_raw_spin_lock+0x128/0x260 [ 770.714166][T15384] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 770.714197][T15384] rpm_resume+0x721/0x12f0 [ 770.714237][T15384] ? __lock_acquire+0x4a5/0x2630 [ 770.714278][T15384] ? __pfx_rpm_resume+0x10/0x10 [ 770.714311][T15384] ? do_raw_spin_lock+0x128/0x260 [ 770.714334][T15384] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 770.714369][T15384] __pm_runtime_resume+0xb6/0x170 [ 770.714407][T15384] usb_autopm_get_interface+0x20/0xe0 [ 770.714436][T15384] disable_store+0x1ca/0x450 [ 770.714478][T15384] ? __pfx_disable_store+0x10/0x10 [ 770.714517][T15384] ? find_held_lock+0x2b/0x80 [ 770.714543][T15384] ? sysfs_file_kobj+0xe4/0x290 [ 770.714572][T15384] ? sysfs_file_kobj+0xe4/0x290 [ 770.714602][T15384] ? __pfx_disable_store+0x10/0x10 [ 770.714640][T15384] dev_attr_store+0x58/0x80 [ 770.714680][T15384] ? __pfx_dev_attr_store+0x10/0x10 [ 770.714720][T15384] sysfs_kf_write+0xf2/0x150 [ 770.714752][T15384] kernfs_fop_write_iter+0x3e0/0x5f0 [ 770.714776][T15384] ? __pfx_sysfs_kf_write+0x10/0x10 [ 770.714809][T15384] vfs_write+0x6ac/0x1070 [ 770.714837][T15384] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 770.714866][T15384] ? __pfx_vfs_write+0x10/0x10 [ 770.714892][T15384] ? find_held_lock+0x2b/0x80 [ 770.714938][T15384] ksys_write+0x12a/0x250 [ 770.714966][T15384] ? __pfx_ksys_write+0x10/0x10 [ 770.715002][T15384] do_syscall_64+0xc9/0xf80 [ 770.715041][T15384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.715067][T15384] RIP: 0033:0x7f43ca59af79 [ 770.715088][T15384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.715114][T15384] RSP: 002b:00007f43cb407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 770.715138][T15384] RAX: ffffffffffffffda RBX: 00007f43ca815fa0 RCX: 00007f43ca59af79 [ 770.715155][T15384] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 770.715171][T15384] RBP: 00007f43ca6316e0 R08: 0000000000000000 R09: 0000000000000000 [ 770.715187][T15384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.715203][T15384] R13: 00007f43ca816038 R14: 00007f43ca815fa0 R15: 00007fff5a8e5818 [ 770.715243][T15384] [ 772.278657][T15384] hub 2-0:1.0: hub_ext_port_status failed (err = -12) [ 773.175922][T15429] random: crng reseeded on system resumption [ 773.282893][T15432] hub 1-0:1.0: USB hub found [ 773.358668][T15432] hub 1-0:1.0: 1 port detected [ 778.150961][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 778.199700][T15516] program syz.0.1773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 779.395095][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 780.722562][T15554] random: crng reseeded on system resumption [ 780.876589][T15556] hub 1-0:1.0: USB hub found [ 780.922984][T15556] hub 1-0:1.0: 1 port detected [ 781.883366][T15572] random: crng reseeded on system resumption [ 781.924786][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1785'. [ 782.439392][T15577] can: request_module (can-proto-0) failed. [ 783.562543][T15604] random: crng reseeded on system resumption [ 783.636338][T15604] hub 1-0:1.0: USB hub found [ 783.671647][T15604] hub 1-0:1.0: 1 port detected [ 784.159014][T15614] netlink: zone id is out of range [ 784.214235][T15614] netlink: zone id is out of range [ 784.241851][T15614] netlink: zone id is out of range [ 784.274706][T15614] netlink: zone id is out of range [ 784.296890][T15614] netlink: zone id is out of range [ 784.332824][T15614] netlink: zone id is out of range [ 784.372348][T15614] netlink: zone id is out of range [ 784.414608][T15614] netlink: zone id is out of range [ 784.455912][T15614] netlink: zone id is out of range [ 784.496287][T15614] netlink: zone id is out of range [ 785.521766][T15633] Bluetooth: hci1: command 0x0406 tx timeout [ 787.121452][ T5824] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 787.885678][T15674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1806'. [ 787.947395][T15674] veth1_macvtap: left promiscuous mode [ 790.214911][T15713] random: crng reseeded on system resumption [ 795.277009][T15787] program syz.0.1829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 797.039257][T15824] Invalid ELF header magic: != ELF [ 806.032668][T15941] Invalid ELF header magic: != ELF [ 807.228115][T15955] kAFS: Invalid Command on /proc/fs/afs/cells file [ 807.278497][ T30] audit: type=1800 audit(1770725929.021:18): pid=15955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1868" name="dbroot" dev="configfs" ino=66447 res=0 errno=0 [ 807.563278][T15955] syz.0.1868 (15955): attempted to duplicate a private mapping with mremap. This is not supported. [ 812.621658][T16045] random: crng reseeded on system resumption [ 813.085339][T16045] hub 1-0:1.0: USB hub found [ 813.103117][T16045] hub 1-0:1.0: 1 port detected [ 813.558507][T16067] usb usb14: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 815.682365][T16096] FAULT_INJECTION: forcing a failure. [ 815.682365][T16096] name fail_futex, interval 1, probability 0, space 0, times 0 [ 815.816264][T16096] CPU: 0 UID: 0 PID: 16096 Comm: syz.3.1895 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.816307][T16096] Tainted: [L]=SOFTLOCKUP [ 815.816317][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 815.816333][T16096] Call Trace: [ 815.816342][T16096] [ 815.816352][T16096] dump_stack_lvl+0x100/0x190 [ 815.816391][T16096] should_fail_ex.cold+0x5/0xa [ 815.816431][T16096] ? rcu_is_watching+0x12/0xc0 [ 815.816458][T16096] get_futex_key+0x1d2/0x1620 [ 815.816493][T16096] ? __pfx_get_futex_key+0x10/0x10 [ 815.816537][T16096] futex_wake+0xea/0x530 [ 815.816579][T16096] ? __pfx_futex_wake+0x10/0x10 [ 815.816618][T16096] ? perf_event_namespaces+0x1ad/0x200 [ 815.816665][T16096] do_futex+0x32b/0x350 [ 815.816699][T16096] ? __pfx_do_futex+0x10/0x10 [ 815.816733][T16096] ? ksys_unshare+0x6a7/0xab0 [ 815.816777][T16096] __x64_sys_futex+0x34f/0x4d0 [ 815.816815][T16096] ? __pfx___x64_sys_futex+0x10/0x10 [ 815.816849][T16096] ? xfd_validate_state+0x129/0x190 [ 815.816884][T16096] do_syscall_64+0xc9/0xf80 [ 815.816922][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.816949][T16096] RIP: 0033:0x7f43ca59af79 [ 815.816970][T16096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.816996][T16096] RSP: 002b:00007f43cb3e60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 815.817020][T16096] RAX: ffffffffffffffda RBX: 00007f43ca816098 RCX: 00007f43ca59af79 [ 815.817038][T16096] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f43ca81609c [ 815.817054][T16096] RBP: 00007f43ca816090 R08: 0000000000000000 R09: 0000000000000000 [ 815.817069][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.817085][T16096] R13: 00007f43ca816128 R14: 00007fff5a8e5730 R15: 00007fff5a8e5818 [ 815.817117][T16096] [ 816.497856][T16106] input: ¶š9ã%v”ûJ,6Ö‘ as /devices/virtual/input/input15 [ 817.647818][T16128] tc_dump_action: action bad kind [ 819.304509][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.312507][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 822.275782][T16213] FAULT_INJECTION: forcing a failure. [ 822.275782][T16213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.405986][T16213] CPU: 0 UID: 0 PID: 16213 Comm: syz.1.1920 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.406025][T16213] Tainted: [L]=SOFTLOCKUP [ 822.406033][T16213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 822.406048][T16213] Call Trace: [ 822.406056][T16213] [ 822.406065][T16213] dump_stack_lvl+0x100/0x190 [ 822.406100][T16213] should_fail_ex.cold+0x5/0xa [ 822.406142][T16213] _copy_from_user+0x2e/0xd0 [ 822.406169][T16213] copy_mnt_id_req+0x108/0x350 [ 822.406208][T16213] __do_sys_statmount+0xe5/0x2440 [ 822.406243][T16213] ? fput+0x79/0x100 [ 822.406274][T16213] ? __pfx___do_sys_statmount+0x10/0x10 [ 822.406298][T16213] ? ksys_write+0x1ac/0x250 [ 822.406334][T16213] do_syscall_64+0xc9/0xf80 [ 822.406371][T16213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.406396][T16213] RIP: 0033:0x7f0cb2b9af79 [ 822.406414][T16213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.406437][T16213] RSP: 002b:00007f0cb39b8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c9 [ 822.406461][T16213] RAX: ffffffffffffffda RBX: 00007f0cb2e16090 RCX: 00007f0cb2b9af79 [ 822.406477][T16213] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: 0000200000000040 [ 822.406492][T16213] RBP: 00007f0cb39b8090 R08: 0000000000000000 R09: 0000000000000000 [ 822.406508][T16213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.406521][T16213] R13: 00007f0cb2e16128 R14: 00007f0cb2e16090 R15: 00007ffcdf9b4128 [ 822.406551][T16213] [ 824.603474][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1931'. [ 830.708119][T16333] kexec: Could not allocate control_code_buffer [ 833.695166][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 841.163944][T16510] : entered promiscuous mode [ 843.175231][T16537] __vm_enough_memory: pid: 16537, comm: syz.1.1985, bytes: 4398046511104 not enough memory for the allocation [ 848.096590][T16605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1997'. [ 848.157027][T16605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.191418][T16605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.233077][T16605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.262053][T16605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.263365][T16635] random: crng reseeded on system resumption [ 850.514420][T16633] hub 1-0:1.0: USB hub found [ 850.563316][T16633] hub 1-0:1.0: 1 port detected [ 859.076821][T16725] bond0: invalid ARP target specified [ 859.331050][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2020'. [ 859.462532][T16717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.502726][T16717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.712789][T16717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.790333][T16717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.271542][T16754] random: crng reseeded on system resumption [ 861.552266][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2035'. [ 864.462498][T16807] bond0: invalid ARP target specified [ 864.838230][T16799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2040'. [ 864.951421][T16799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.031766][T16799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.272775][T16799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.399000][T16799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.229651][T16832] random: crng reseeded on system resumption [ 866.372093][T16832] hub 1-0:1.0: USB hub found [ 866.397698][T16832] hub 1-0:1.0: 1 port detected [ 870.174055][T16899] qrtr: Invalid version 0 [ 871.490599][T16915] FAULT_INJECTION: forcing a failure. [ 871.490599][T16915] name failslab, interval 1, probability 0, space 0, times 0 [ 871.573695][T16915] CPU: 0 UID: 0 PID: 16915 Comm: syz.1.2065 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.573739][T16915] Tainted: [L]=SOFTLOCKUP [ 871.573749][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 871.573766][T16915] Call Trace: [ 871.573775][T16915] [ 871.573786][T16915] dump_stack_lvl+0x100/0x190 [ 871.573825][T16915] should_fail_ex.cold+0x5/0xa [ 871.573871][T16915] should_failslab+0xc2/0x120 [ 871.573909][T16915] kmem_cache_alloc_noprof+0x83/0x780 [ 871.573944][T16915] ? vm_area_alloc+0x1f/0x160 [ 871.573975][T16915] ? vm_area_alloc+0x1f/0x160 [ 871.574000][T16915] vm_area_alloc+0x1f/0x160 [ 871.574026][T16915] __mmap_region+0x101e/0x2820 [ 871.574061][T16915] ? __pfx___mmap_region+0x10/0x10 [ 871.574112][T16915] ? finish_task_switch.isra.0+0x204/0xb70 [ 871.574144][T16915] ? lockdep_hardirqs_on+0x78/0x100 [ 871.574181][T16915] ? finish_task_switch.isra.0+0x204/0xb70 [ 871.574287][T16915] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 871.574329][T16915] ? rcu_is_watching+0x12/0xc0 [ 871.574361][T16915] mmap_region+0x180/0x3e0 [ 871.574403][T16915] do_mmap+0xc63/0x12f0 [ 871.574447][T16915] ? __pfx_do_mmap+0x10/0x10 [ 871.574486][T16915] ? __pfx_down_write_killable+0x10/0x10 [ 871.574529][T16915] ? rcu_read_lock_any_held+0x6a/0xa0 [ 871.574562][T16915] vm_mmap_pgoff+0x29e/0x470 [ 871.574607][T16915] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 871.574647][T16915] ? __do_sys_close_range+0x230/0x740 [ 871.574683][T16915] ? __x64_sys_futex+0x34f/0x4d0 [ 871.574718][T16915] ? __x64_sys_futex+0x358/0x4d0 [ 871.574758][T16915] ksys_mmap_pgoff+0x7d/0x5b0 [ 871.574795][T16915] ? syscall_user_dispatch+0x76/0x130 [ 871.574838][T16915] __x64_sys_mmap+0x125/0x190 [ 871.574869][T16915] do_syscall_64+0xc9/0xf80 [ 871.574908][T16915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.574935][T16915] RIP: 0033:0x7f0cb2b9af79 [ 871.574956][T16915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.574983][T16915] RSP: 002b:00007f0cb39d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 871.575008][T16915] RAX: ffffffffffffffda RBX: 00007f0cb2e15fa0 RCX: 00007f0cb2b9af79 [ 871.575027][T16915] RDX: 0100001000000004 RSI: 0000000000000061 RDI: 0000000000000000 [ 871.575044][T16915] RBP: 00007f0cb2c316e0 R08: 0000000000000400 R09: 0000000000008000 [ 871.575060][T16915] R10: 000000000000fa31 R11: 0000000000000246 R12: 0000000000000000 [ 871.575077][T16915] R13: 00007f0cb2e16038 R14: 00007f0cb2e15fa0 R15: 00007ffcdf9b4128 [ 871.575111][T16915] [ 876.492451][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2079'. [ 879.234511][T17036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2090'. [ 879.419514][T17036] veth0_macvtap: left promiscuous mode [ 880.772920][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.781772][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.623209][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 881.997283][T17076] ovs_: entered promiscuous mode [ 883.616601][T17113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2111'. [ 896.467500][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 897.399876][T17348] netlink: 'syz.3.2160': attribute type 1 has an invalid length. [ 897.464426][T17353] FAULT_INJECTION: forcing a failure. [ 897.464426][T17353] name failslab, interval 1, probability 0, space 0, times 0 [ 897.604335][T17353] CPU: 0 UID: 0 PID: 17353 Comm: syz.3.2160 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.604377][T17353] Tainted: [L]=SOFTLOCKUP [ 897.604386][T17353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 897.604400][T17353] Call Trace: [ 897.604408][T17353] [ 897.604417][T17353] dump_stack_lvl+0x100/0x190 [ 897.604452][T17353] should_fail_ex.cold+0x5/0xa [ 897.604493][T17353] should_failslab+0xc2/0x120 [ 897.604527][T17353] ? tomoyo_realpath_from_path+0xb6/0x690 [ 897.604559][T17353] __kmalloc_noprof+0xf6/0x9c0 [ 897.604590][T17353] ? tomoyo_realpath_from_path+0xb6/0x690 [ 897.604620][T17353] tomoyo_realpath_from_path+0xb6/0x690 [ 897.604659][T17353] tomoyo_path_number_perm+0x23c/0x580 [ 897.604684][T17353] ? tomoyo_path_number_perm+0x22e/0x580 [ 897.604712][T17353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 897.604738][T17353] ? futex_wait+0x125/0x380 [ 897.604803][T17353] ? find_held_lock+0x2b/0x80 [ 897.604828][T17353] ? hook_file_ioctl_common+0x146/0x410 [ 897.604855][T17353] ? __fget_files+0x215/0x3d0 [ 897.604886][T17353] ? __fget_files+0x21f/0x3d0 [ 897.604917][T17353] security_file_ioctl+0xd3/0x230 [ 897.604945][T17353] __x64_sys_ioctl+0xb7/0x210 [ 897.604985][T17353] do_syscall_64+0xc9/0xf80 [ 897.605023][T17353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.605048][T17353] RIP: 0033:0x7f43ca59af79 [ 897.605067][T17353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.605091][T17353] RSP: 002b:00007f43cb3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.605121][T17353] RAX: ffffffffffffffda RBX: 00007f43ca816270 RCX: 00007f43ca59af79 [ 897.605137][T17353] RDX: 0000000000000000 RSI: 0000000080044944 RDI: 0000000000000026 [ 897.605152][T17353] RBP: 00007f43ca6316e0 R08: 0000000000000000 R09: 0000000000000000 [ 897.605166][T17353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.605181][T17353] R13: 00007f43ca816308 R14: 00007f43ca816270 R15: 00007fff5a8e5818 [ 897.605211][T17353] [ 897.605220][T17353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 903.915161][T17441] FAULT_INJECTION: forcing a failure. [ 903.915161][T17441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 904.015289][T17441] CPU: 0 UID: 0 PID: 17441 Comm: syz.3.2175 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.015342][T17441] Tainted: [L]=SOFTLOCKUP [ 904.015354][T17441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 904.015376][T17441] Call Trace: [ 904.015387][T17441] [ 904.015397][T17441] dump_stack_lvl+0x100/0x190 [ 904.015435][T17441] should_fail_ex.cold+0x5/0xa [ 904.015476][T17441] ? prepare_alloc_pages+0x16d/0x5f0 [ 904.015519][T17441] should_fail_alloc_page+0xeb/0x140 [ 904.015580][T17441] prepare_alloc_pages+0x1f0/0x5f0 [ 904.015620][T17441] ? rcu_is_watching+0x12/0xc0 [ 904.015649][T17441] __alloc_frozen_pages_noprof+0x193/0x2410 [ 904.015687][T17441] ? kasan_save_stack+0x3f/0x50 [ 904.015727][T17441] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 904.015763][T17441] ? lru_gen_add_folio+0x20f/0x13e0 [ 904.015806][T17441] ? lock_acquire+0x17c/0x330 [ 904.015844][T17441] ? find_held_lock+0x2b/0x80 [ 904.015871][T17441] ? page_table_check_set+0x49a/0xa10 [ 904.015901][T17441] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 904.015931][T17441] ? policy_nodemask+0xed/0x4f0 [ 904.015970][T17441] alloc_pages_mpol+0x1fb/0x550 [ 904.016012][T17441] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 904.016047][T17441] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 904.016087][T17441] folio_alloc_mpol_noprof+0x36/0x340 [ 904.016131][T17441] vma_alloc_folio_noprof+0xed/0x1d0 [ 904.016173][T17441] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 904.016225][T17441] do_anonymous_page+0xb10/0x1f40 [ 904.016263][T17441] __handle_mm_fault+0x1d3a/0x2b50 [ 904.016299][T17441] ? __pfx___handle_mm_fault+0x10/0x10 [ 904.016329][T17441] ? __pte_offset_map_lock+0x174/0x320 [ 904.016367][T17441] ? find_held_lock+0x2b/0x80 [ 904.016404][T17441] ? follow_page_pte+0x5b4/0x1410 [ 904.016449][T17441] handle_mm_fault+0x36d/0xa20 [ 904.016483][T17441] __get_user_pages+0xf9c/0x34d0 [ 904.016542][T17441] ? __pfx___get_user_pages+0x10/0x10 [ 904.016598][T17441] populate_vma_page_range+0x267/0x3f0 [ 904.016643][T17441] ? __pfx_populate_vma_page_range+0x10/0x10 [ 904.016685][T17441] ? __pfx_find_vma_intersection+0x10/0x10 [ 904.016725][T17441] ? do_mmap+0x93f/0x12f0 [ 904.016768][T17441] __mm_populate+0x107/0x3a0 [ 904.016810][T17441] ? __pfx___mm_populate+0x10/0x10 [ 904.016853][T17441] ? up_write+0x290/0x4f0 [ 904.016898][T17441] vm_mmap_pgoff+0x37f/0x470 [ 904.016940][T17441] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 904.016985][T17441] ? __x64_sys_futex+0x34f/0x4d0 [ 904.017025][T17441] ? __x64_sys_futex+0x358/0x4d0 [ 904.017064][T17441] ksys_mmap_pgoff+0x7d/0x5b0 [ 904.017107][T17441] __x64_sys_mmap+0x125/0x190 [ 904.017137][T17441] do_syscall_64+0xc9/0xf80 [ 904.017178][T17441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.017204][T17441] RIP: 0033:0x7f43ca59af79 [ 904.017226][T17441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.017252][T17441] RSP: 002b:00007f43cb3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 904.017278][T17441] RAX: ffffffffffffffda RBX: 00007f43ca816090 RCX: 00007f43ca59af79 [ 904.017297][T17441] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 904.017314][T17441] RBP: 00007f43ca6316e0 R08: 0000000000000002 R09: 0000000000008000 [ 904.017330][T17441] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 904.017346][T17441] R13: 00007f43ca816128 R14: 00007f43ca816090 R15: 00007fff5a8e5818 [ 904.017380][T17441] [ 905.405046][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 905.438652][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 905.467478][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 905.500940][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 905.511049][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 907.581570][ T5144] Bluetooth: hci4: command tx timeout [ 908.198742][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'. [ 908.789035][T17454] chnl_net:caif_netlink_parms(): no params data found [ 909.239147][T17454] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.268129][T17454] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.304745][T17454] bridge_slave_0: entered allmulticast mode [ 909.339860][T17454] bridge_slave_0: entered promiscuous mode [ 909.376694][T17454] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.411840][T17454] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.444090][T17454] bridge_slave_1: entered allmulticast mode [ 909.479374][T17454] bridge_slave_1: entered promiscuous mode [ 909.623548][T17454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.645204][T17511] FAULT_INJECTION: forcing a failure. [ 909.645204][T17511] name failslab, interval 1, probability 0, space 0, times 0 [ 909.663530][ T5144] Bluetooth: hci4: command tx timeout [ 909.784277][T17454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.833421][T17511] CPU: 0 UID: 0 PID: 17511 Comm: syz.0.2185 Tainted: G L syzkaller #0 PREEMPT(full) [ 909.833461][T17511] Tainted: [L]=SOFTLOCKUP [ 909.833470][T17511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 909.833486][T17511] Call Trace: [ 909.833495][T17511] [ 909.833504][T17511] dump_stack_lvl+0x100/0x190 [ 909.833542][T17511] should_fail_ex.cold+0x5/0xa [ 909.833587][T17511] should_failslab+0xc2/0x120 [ 909.833623][T17511] ? drm_atomic_state_init+0x183/0x540 [ 909.833659][T17511] __kmalloc_noprof+0xf6/0x9c0 [ 909.833693][T17511] ? drm_atomic_state_init+0x183/0x540 [ 909.833729][T17511] drm_atomic_state_init+0x183/0x540 [ 909.833766][T17511] ? kasan_save_track+0x14/0x30 [ 909.833799][T17511] drm_atomic_state_alloc+0xd3/0x120 [ 909.833838][T17511] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 909.833882][T17511] ? trace_contention_end+0xd6/0x110 [ 909.833921][T17511] ? __mutex_lock+0x26a/0x1b90 [ 909.833960][T17511] ? __mutex_lock+0x26a/0x1b90 [ 909.833998][T17511] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 909.834041][T17511] ? drm_master_internal_acquire+0x21/0x80 [ 909.834111][T17511] drm_client_modeset_commit_locked+0x14d/0x580 [ 909.834159][T17511] drm_client_modeset_commit+0x4f/0x80 [ 909.834202][T17511] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 909.834249][T17511] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 909.834294][T17511] drm_fbdev_client_restore+0x1b/0x30 [ 909.834430][T17511] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 909.834466][T17511] drm_client_dev_restore+0x205/0x2a0 [ 909.834516][T17511] drm_release+0x2c6/0x360 [ 909.834557][T17511] ? __pfx_drm_release+0x10/0x10 [ 909.834596][T17511] __fput+0x3ff/0xb40 [ 909.834639][T17511] task_work_run+0x150/0x240 [ 909.834666][T17511] ? __pfx_task_work_run+0x10/0x10 [ 909.834700][T17511] exit_to_user_mode_loop+0x100/0x4b0 [ 909.834737][T17511] ? rcu_is_watching+0x12/0xc0 [ 909.834763][T17511] do_syscall_64+0x4ea/0xf80 [ 909.834804][T17511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.834830][T17511] RIP: 0033:0x7f34dcd9af79 [ 909.834851][T17511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.834877][T17511] RSP: 002b:00007f34ddc1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 909.834901][T17511] RAX: 0000000000000000 RBX: 00007f34dd016090 RCX: 00007f34dcd9af79 [ 909.834919][T17511] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 909.834934][T17511] RBP: 00007f34dce316e0 R08: 0000000000000000 R09: 0000000000000000 [ 909.834950][T17511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.834967][T17511] R13: 00007f34dd016128 R14: 00007f34dd016090 R15: 00007ffe8f1feac8 [ 909.835001][T17511] [ 911.297642][T17454] team0: Port device team_slave_0 added [ 911.329776][T17454] team0: Port device team_slave_1 added [ 911.531883][T17454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.555125][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.682674][T17454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.746433][ T5144] Bluetooth: hci4: command tx timeout [ 911.863512][T17454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.903689][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.053824][T17454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.668622][T17454] hsr_slave_0: entered promiscuous mode [ 912.699993][T17454] hsr_slave_1: entered promiscuous mode [ 912.726162][T17454] debugfs: 'hsr0' already exists in 'hsr' [ 912.759662][T17454] Cannot create hsr debugfs directory [ 913.825120][ T5144] Bluetooth: hci4: command tx timeout [ 913.887422][T17454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.479521][T17454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.663837][T17550] FAULT_INJECTION: forcing a failure. [ 914.663837][T17550] name failslab, interval 1, probability 0, space 0, times 0 [ 914.831850][T17454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.908291][T17550] CPU: 0 UID: 0 PID: 17550 Comm: syz.3.2193 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.908332][T17550] Tainted: [L]=SOFTLOCKUP [ 914.908342][T17550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 914.908358][T17550] Call Trace: [ 914.908367][T17550] [ 914.908377][T17550] dump_stack_lvl+0x100/0x190 [ 914.908414][T17550] should_fail_ex.cold+0x5/0xa [ 914.908458][T17550] should_failslab+0xc2/0x120 [ 914.908494][T17550] kmem_cache_alloc_noprof+0x83/0x780 [ 914.908527][T17550] ? __proc_create+0xc2/0x8c0 [ 914.908564][T17550] ? __proc_create+0x2cb/0x8c0 [ 914.908609][T17550] ? __proc_create+0x2cb/0x8c0 [ 914.908646][T17550] __proc_create+0x2cb/0x8c0 [ 914.908686][T17550] ? __pfx___proc_create+0x10/0x10 [ 914.908725][T17550] ? __lock_acquire+0x4a5/0x2630 [ 914.908761][T17550] ? proc_register+0x559/0x8a0 [ 914.908808][T17550] proc_create_reg+0x75/0x170 [ 914.908833][T17550] proc_create_data+0x86/0x110 [ 914.908864][T17550] ? __pfx_proc_create_data+0x10/0x10 [ 914.908888][T17550] ? net_generic+0xea/0x2a0 [ 914.908931][T17550] gss_svc_init_net+0x233/0x640 [ 914.908968][T17550] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 914.908997][T17550] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 914.909037][T17550] ops_init+0x1e2/0x5f0 [ 914.909069][T17550] setup_net+0x118/0x3a0 [ 914.909097][T17550] ? __pfx_setup_net+0x10/0x10 [ 914.909123][T17550] ? lockdep_init_map_type+0x5c/0x250 [ 914.909161][T17550] ? mutex_init_lockep+0x110/0x150 [ 914.909204][T17550] copy_net_ns+0x46f/0x7c0 [ 914.909237][T17550] create_new_namespaces+0x3ea/0xac0 [ 914.909275][T17550] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 914.909308][T17550] ksys_unshare+0x455/0xab0 [ 914.909349][T17550] ? __pfx_ksys_unshare+0x10/0x10 [ 914.909387][T17550] ? xfd_validate_state+0x129/0x190 [ 914.909421][T17550] __x64_sys_unshare+0x31/0x40 [ 914.909459][T17550] do_syscall_64+0xc9/0xf80 [ 914.909497][T17550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.909524][T17550] RIP: 0033:0x7f43ca59af79 [ 914.909544][T17550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.909569][T17550] RSP: 002b:00007f43cb407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 914.909593][T17550] RAX: ffffffffffffffda RBX: 00007f43ca815fa0 RCX: 00007f43ca59af79 [ 914.909611][T17550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 914.909627][T17550] RBP: 00007f43ca6316e0 R08: 0000000000000000 R09: 0000000000000000 [ 914.909643][T17550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.909660][T17550] R13: 00007f43ca816038 R14: 00007f43ca815fa0 R15: 00007fff5a8e5818 [ 914.909692][T17550] [ 915.860707][T17558] can: request_module (can-proto-3) failed. [ 916.227862][T17454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.564133][T17454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 916.591365][T17454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 916.614072][T17454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 916.638014][T17454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 917.007852][T17454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.086099][T17454] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.173730][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.181172][ T7672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.278039][T15163] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.285331][T15163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.633889][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'. [ 918.228515][T17454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.468519][T17454] veth0_vlan: entered promiscuous mode [ 918.537398][T17454] veth1_vlan: entered promiscuous mode [ 918.662953][T17454] veth0_macvtap: entered promiscuous mode [ 918.714560][T17454] veth1_macvtap: entered promiscuous mode [ 918.801493][T17454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.860701][T17454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.940109][ T7672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.961516][ T7672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.018550][ T7672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.055099][ T7672] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.586181][ T7672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.622513][ T7672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.772527][ T8322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.828697][ T8322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.310570][T17616] vhci_hcd vhci_hcd.2: invalid port number 16 [ 920.339227][T17616] vhci_hcd vhci_hcd.2: invalid port number 16 [ 921.374755][T17631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2207'. [ 924.950343][ T5144] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 927.289394][T17735] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 929.444777][T17789] syz.3.2235 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 930.703103][T17811] FAULT_INJECTION: forcing a failure. [ 930.703103][T17811] name fail_futex, interval 1, probability 0, space 0, times 0 [ 930.737793][T17811] CPU: 0 UID: 0 PID: 17811 Comm: syz.0.2240 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.737835][T17811] Tainted: [L]=SOFTLOCKUP [ 930.737844][T17811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 930.737860][T17811] Call Trace: [ 930.737869][T17811] [ 930.737879][T17811] dump_stack_lvl+0x100/0x190 [ 930.737916][T17811] should_fail_ex.cold+0x5/0xa [ 930.737955][T17811] ? kasan_save_stack+0x3f/0x50 [ 930.737989][T17811] get_futex_key+0x1d2/0x1620 [ 930.738025][T17811] ? __pfx_get_futex_key+0x10/0x10 [ 930.738067][T17811] futex_wait_setup+0x81/0x500 [ 930.738115][T17811] __futex_wait+0x19f/0x300 [ 930.738158][T17811] ? __pfx___futex_wait+0x10/0x10 [ 930.738203][T17811] ? __pfx_futex_wake_mark+0x10/0x10 [ 930.738257][T17811] ? futex_hash+0x2c5/0x380 [ 930.738297][T17811] futex_wait+0xed/0x380 [ 930.738338][T17811] ? __pfx_futex_wait+0x10/0x10 [ 930.738387][T17811] ? do_vfs_ioctl+0x226/0x13e0 [ 930.738431][T17811] do_futex+0x1ef/0x350 [ 930.738466][T17811] ? __pfx_do_futex+0x10/0x10 [ 930.738501][T17811] ? find_held_lock+0x2b/0x80 [ 930.738533][T17811] __x64_sys_futex+0x34f/0x4d0 [ 930.738571][T17811] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 930.738601][T17811] ? __pfx___x64_sys_futex+0x10/0x10 [ 930.738636][T17811] ? pipe_ioctl+0x226/0x2c0 [ 930.738664][T17811] ? fput+0x79/0x100 [ 930.738701][T17811] do_syscall_64+0xc9/0xf80 [ 930.738740][T17811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.738766][T17811] RIP: 0033:0x7f34dcd9af79 [ 930.738786][T17811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.738811][T17811] RSP: 002b:00007f34ddc3f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 930.738835][T17811] RAX: ffffffffffffffda RBX: 00007f34dd015fa8 RCX: 00007f34dcd9af79 [ 930.738853][T17811] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f34dd015fa8 [ 930.738869][T17811] RBP: 00007f34dd015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 930.738885][T17811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.738901][T17811] R13: 00007f34dd016038 R14: 00007ffe8f1fe9e0 R15: 00007ffe8f1feac8 [ 930.738932][T17811] [ 932.881653][ T9] usb usb40-port2: attempt power cycle [ 933.529097][ T9] usb usb40-port2: unable to enumerate USB device [ 935.436142][ T5824] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 936.297339][T17874] dlm: non-version read from control device 255 [ 937.866074][T17904] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2259'. [ 938.659615][T17909] FAULT_INJECTION: forcing a failure. [ 938.659615][T17909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.688319][T17879] queue_state_write: unsupported operation '' [ 938.696025][T17879] queue_state_write: use 'run', 'start' or 'kick' [ 938.731523][T17909] CPU: 0 UID: 0 PID: 17909 Comm: syz.0.2261 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.731563][T17909] Tainted: [L]=SOFTLOCKUP [ 938.731572][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 938.731588][T17909] Call Trace: [ 938.731596][T17909] [ 938.731605][T17909] dump_stack_lvl+0x100/0x190 [ 938.731655][T17909] should_fail_ex.cold+0x5/0xa [ 938.731705][T17909] _copy_from_user+0x2e/0xd0 [ 938.731747][T17909] get_timespec64+0x8b/0x1b0 [ 938.731784][T17909] ? __pfx_get_timespec64+0x10/0x10 [ 938.731811][T17909] ? ktime_get+0x200/0x300 [ 938.731846][T17909] __x64_sys_futex+0x21a/0x4d0 [ 938.731882][T17909] ? __pfx___x64_sys_futex+0x10/0x10 [ 938.731915][T17909] ? xfd_validate_state+0x129/0x190 [ 938.731949][T17909] do_syscall_64+0xc9/0xf80 [ 938.731986][T17909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.732012][T17909] RIP: 0033:0x7f34dcd9af79 [ 938.732031][T17909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.732056][T17909] RSP: 002b:00007ffe8f1fec28 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 938.732081][T17909] RAX: ffffffffffffffda RBX: 00000000000e51f2 RCX: 00007f34dcd9af79 [ 938.732098][T17909] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f34dd01609c [ 938.732113][T17909] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 938.732128][T17909] R10: 00007ffe8f1fed30 R11: 0000000000000246 R12: 00007ffe8f1fed50 [ 938.732143][T17909] R13: 00007f34dd01609c R14: 00000000000e5224 R15: 00007ffe8f1fed30 [ 938.732174][T17909] [ 942.007907][T17948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2269'. [ 942.257323][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.265152][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 950.447522][ T30] audit: type=1800 audit(1770726072.119:19): pid=18060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2296" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 951.073197][ T30] audit: type=1326 audit(1770726072.739:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18069 comm="syz.3.2298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43ca59af79 code=0x0 [ 954.188516][T18103] FAULT_INJECTION: forcing a failure. [ 954.188516][T18103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.374891][T18103] CPU: 0 UID: 0 PID: 18103 Comm: syz.2.2304 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.374934][T18103] Tainted: [L]=SOFTLOCKUP [ 954.374943][T18103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 954.374960][T18103] Call Trace: [ 954.374969][T18103] [ 954.374980][T18103] dump_stack_lvl+0x100/0x190 [ 954.375019][T18103] should_fail_ex.cold+0x5/0xa [ 954.375065][T18103] _copy_from_iter+0x1f4/0x1690 [ 954.375101][T18103] ? __pfx__copy_from_iter+0x10/0x10 [ 954.375128][T18103] ? sctp_addto_chunk+0xfa/0x2a0 [ 954.375177][T18103] ? __asan_memcpy+0x3c/0x60 [ 954.375205][T18103] ? sctp_make_datafrag_empty+0x1a4/0x230 [ 954.375247][T18103] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 954.375293][T18103] sctp_user_addto_chunk+0x84/0x240 [ 954.375339][T18103] sctp_datamsg_from_user+0x60b/0x1360 [ 954.375390][T18103] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 954.375425][T18103] ? __lock_sock+0x1fc/0x270 [ 954.375453][T18103] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 954.375481][T18103] ? __pfx_autoremove_wake_function+0x10/0x10 [ 954.375524][T18103] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 954.375571][T18103] sctp_sendmsg+0x1185/0x22b0 [ 954.375610][T18103] ? __pfx_sctp_sendmsg+0x10/0x10 [ 954.375640][T18103] ? find_held_lock+0x2b/0x80 [ 954.375666][T18103] ? aa_file_perm+0x268/0x1540 [ 954.375705][T18103] ? aa_sk_perm+0x2de/0xb40 [ 954.375737][T18103] ? __pfx_aa_sk_perm+0x10/0x10 [ 954.375774][T18103] ? __pfx_sctp_sendmsg+0x10/0x10 [ 954.375807][T18103] inet_sendmsg+0x11c/0x140 [ 954.375843][T18103] sock_write_iter+0x509/0x610 [ 954.375879][T18103] ? __pfx_sock_write_iter+0x10/0x10 [ 954.375924][T18103] ? bpf_lsm_file_permission+0x9/0x10 [ 954.375961][T18103] ? security_file_permission+0x76/0x210 [ 954.375994][T18103] ? rw_verify_area+0xce/0x6d0 [ 954.376021][T18103] vfs_write+0x6ac/0x1070 [ 954.376051][T18103] ? __pfx_sock_write_iter+0x10/0x10 [ 954.376088][T18103] ? __pfx_vfs_write+0x10/0x10 [ 954.376115][T18103] ? find_held_lock+0x2b/0x80 [ 954.376168][T18103] ksys_write+0x1f8/0x250 [ 954.376196][T18103] ? __pfx_ksys_write+0x10/0x10 [ 954.376234][T18103] do_syscall_64+0xc9/0xf80 [ 954.376275][T18103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.376302][T18103] RIP: 0033:0x7f08ced9af79 [ 954.376324][T18103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.376351][T18103] RSP: 002b:00007f08cfbc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 954.376377][T18103] RAX: ffffffffffffffda RBX: 00007f08cf016180 RCX: 00007f08ced9af79 [ 954.376395][T18103] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 954.376411][T18103] RBP: 00007f08cee316e0 R08: 0000000000000000 R09: 0000000000000000 [ 954.376428][T18103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.376444][T18103] R13: 00007f08cf016218 R14: 00007f08cf016180 R15: 00007fffd11f0d18 [ 954.376477][T18103] [ 957.677927][T18138] queue_state_write: unsupported operation '' [ 957.809291][T18138] queue_state_write: use 'run', 'start' or 'kick' [ 958.217634][ T30] audit: type=1804 audit(1770726079.886:21): pid=18169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2320" name="/newroot/563/file0" dev="tmpfs" ino=2928 res=1 errno=0 [ 958.361504][ T30] audit: type=1804 audit(1770726079.936:22): pid=18170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2320" name="/newroot/563/file0" dev="tmpfs" ino=2928 res=1 errno=0 [ 960.109678][T18199] netlink: 226 bytes leftover after parsing attributes in process `syz.3.2329'. [ 963.347124][T18332] blktrace: Concurrent blktraces are not allowed on loop2 [ 963.853510][T18341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2340'. [ 967.080976][T18374] aoe: invalid device specification [ 968.402144][T18389] FAULT_INJECTION: forcing a failure. [ 968.402144][T18389] name failslab, interval 1, probability 0, space 0, times 0 [ 968.490608][T18389] CPU: 0 UID: 0 PID: 18389 Comm: syz.1.2360 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.490649][T18389] Tainted: [L]=SOFTLOCKUP [ 968.490658][T18389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 968.490675][T18389] Call Trace: [ 968.490683][T18389] [ 968.490693][T18389] dump_stack_lvl+0x100/0x190 [ 968.490730][T18389] should_fail_ex.cold+0x5/0xa [ 968.490775][T18389] should_failslab+0xc2/0x120 [ 968.490810][T18389] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 968.490845][T18389] ? find_held_lock+0x2b/0x80 [ 968.490872][T18389] ? alloc_inode+0x183/0x250 [ 968.490922][T18389] ? alloc_inode+0x183/0x250 [ 968.490959][T18389] alloc_inode+0x183/0x250 [ 968.490996][T18389] path_from_stashed+0x25b/0x750 [ 968.491033][T18389] pidfs_alloc_file+0xf8/0x290 [ 968.491060][T18389] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 968.491124][T18389] pidfd_prepare+0x129/0x200 [ 968.491162][T18389] __x64_sys_pidfd_open+0x105/0x1a0 [ 968.491204][T18389] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 968.491248][T18389] ? rcu_is_watching+0x12/0xc0 [ 968.491274][T18389] do_syscall_64+0xc9/0xf80 [ 968.491312][T18389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.491338][T18389] RIP: 0033:0x7f0cb2b9af79 [ 968.491357][T18389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.491382][T18389] RSP: 002b:00007f0cb39d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 968.491406][T18389] RAX: ffffffffffffffda RBX: 00007f0cb2e15fa0 RCX: 00007f0cb2b9af79 [ 968.491424][T18389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 968.491439][T18389] RBP: 00007f0cb2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 968.491455][T18389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.491471][T18389] R13: 00007f0cb2e16038 R14: 00007f0cb2e15fa0 R15: 00007ffcdf9b4128 [ 968.491502][T18389] [ 969.924402][T18409] kexec: Could not allocate control_code_buffer [ 970.440248][T18419] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2359'. [ 971.559935][T18441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2363'. [ 971.770617][T18441] veth0_macvtap: left promiscuous mode [ 977.258217][T18522] FAULT_INJECTION: forcing a failure. [ 977.258217][T18522] name failslab, interval 1, probability 0, space 0, times 0 [ 977.336500][T18522] CPU: 0 UID: 0 PID: 18522 Comm: syz.3.2377 Tainted: G L syzkaller #0 PREEMPT(full) [ 977.336541][T18522] Tainted: [L]=SOFTLOCKUP [ 977.336551][T18522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 977.336566][T18522] Call Trace: [ 977.336577][T18522] [ 977.336589][T18522] dump_stack_lvl+0x100/0x190 [ 977.336625][T18522] should_fail_ex.cold+0x5/0xa [ 977.336670][T18522] should_failslab+0xc2/0x120 [ 977.336705][T18522] kmem_cache_alloc_noprof+0x83/0x780 [ 977.336738][T18522] ? mas_wr_store_type+0xb21/0x2200 [ 977.336771][T18522] ? mas_alloc_nodes+0x280/0x390 [ 977.336806][T18522] ? mas_alloc_nodes+0x280/0x390 [ 977.336833][T18522] mas_alloc_nodes+0x280/0x390 [ 977.336866][T18522] mas_preallocate+0x39c/0xf10 [ 977.336909][T18522] ? __pfx_mas_preallocate+0x10/0x10 [ 977.336956][T18522] ? __pfx_mt_find+0x10/0x10 [ 977.336998][T18522] vma_link+0x12c/0x750 [ 977.337032][T18522] ? __pfx_vma_link+0x10/0x10 [ 977.337075][T18522] insert_vm_struct+0xf4/0x2d0 [ 977.337109][T18522] create_init_stack_vma+0x2e1/0x700 [ 977.337146][T18522] alloc_bprm+0x405/0x710 [ 977.337181][T18522] do_execveat_common.isra.0+0x1d0/0x5b0 [ 977.337214][T18522] __x64_sys_execve+0x8e/0xb0 [ 977.337241][T18522] do_syscall_64+0xc9/0xf80 [ 977.337280][T18522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.337307][T18522] RIP: 0033:0x7f43ca59af79 [ 977.337326][T18522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.337352][T18522] RSP: 002b:00007f43cb407028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 977.337376][T18522] RAX: ffffffffffffffda RBX: 00007f43ca815fa0 RCX: 00007f43ca59af79 [ 977.337394][T18522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 977.337410][T18522] RBP: 00007f43ca6316e0 R08: 0000000000000000 R09: 0000000000000000 [ 977.337427][T18522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.337443][T18522] R13: 00007f43ca816038 R14: 00007f43ca815fa0 R15: 00007fff5a8e5818 [ 977.337475][T18522] [ 978.047703][T18528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2379'. [ 980.299722][ T30] audit: type=1326 audit(1770726101.965:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18560 comm="syz.2.2387" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08ced9af79 code=0x0 [ 981.133123][T18579] zswap: compressor not available [ 984.314420][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'. [ 984.542160][T18640] FAULT_INJECTION: forcing a failure. [ 984.542160][T18640] name failslab, interval 1, probability 0, space 0, times 0 [ 984.587236][T18640] CPU: 0 UID: 0 PID: 18640 Comm: syz.1.2405 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.587277][T18640] Tainted: [L]=SOFTLOCKUP [ 984.587298][T18640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 984.587315][T18640] Call Trace: [ 984.587324][T18640] [ 984.587335][T18640] dump_stack_lvl+0x100/0x190 [ 984.587375][T18640] should_fail_ex.cold+0x5/0xa [ 984.587420][T18640] should_failslab+0xc2/0x120 [ 984.587457][T18640] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 984.587491][T18640] ? do_raw_spin_lock+0x128/0x260 [ 984.587515][T18640] ? find_held_lock+0x2b/0x80 [ 984.587543][T18640] ? __d_alloc+0x34/0xa80 [ 984.587580][T18640] ? __d_alloc+0x34/0xa80 [ 984.587610][T18640] __d_alloc+0x34/0xa80 [ 984.587645][T18640] d_alloc_pseudo+0x1c/0xc0 [ 984.587686][T18640] alloc_file_pseudo+0xcf/0x230 [ 984.587726][T18640] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 984.587780][T18640] ? alloc_fd+0x476/0x790 [ 984.587814][T18640] sock_alloc_file+0x50/0x210 [ 984.587845][T18640] __sys_socket+0x1c0/0x260 [ 984.587880][T18640] ? fdget_pos+0x2c0/0x380 [ 984.587911][T18640] ? __pfx___sys_socket+0x10/0x10 [ 984.587947][T18640] ? xfd_validate_state+0x129/0x190 [ 984.587980][T18640] __x64_sys_socket+0x72/0xb0 [ 984.588016][T18640] ? lockdep_hardirqs_on+0x78/0x100 [ 984.588052][T18640] do_syscall_64+0xc9/0xf80 [ 984.588091][T18640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.588119][T18640] RIP: 0033:0x7f0cb2b9af79 [ 984.588140][T18640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.588167][T18640] RSP: 002b:00007f0cb39d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 984.588193][T18640] RAX: ffffffffffffffda RBX: 00007f0cb2e15fa0 RCX: 00007f0cb2b9af79 [ 984.588211][T18640] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 984.588228][T18640] RBP: 00007f0cb2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 984.588245][T18640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.588261][T18640] R13: 00007f0cb2e16038 R14: 00007f0cb2e15fa0 R15: 00007ffcdf9b4128 [ 984.588294][T18640] [ 984.833675][T18643] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2405'. [ 984.846071][T18643] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2405'. [ 985.136827][T18649] FAULT_INJECTION: forcing a failure. [ 985.136827][T18649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.154743][T18649] CPU: 0 UID: 0 PID: 18649 Comm: syz.3.2408 Tainted: G L syzkaller #0 PREEMPT(full) [ 985.154782][T18649] Tainted: [L]=SOFTLOCKUP [ 985.154790][T18649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 985.154804][T18649] Call Trace: [ 985.154812][T18649] [ 985.154823][T18649] dump_stack_lvl+0x100/0x190 [ 985.154858][T18649] should_fail_ex.cold+0x5/0xa [ 985.154900][T18649] _copy_to_user+0x32/0xd0 [ 985.154927][T18649] semctl_main+0xa59/0x2b10 [ 985.154959][T18649] ? __pfx_semctl_main+0x10/0x10 [ 985.155026][T18649] ? __mutex_unlock_slowpath+0x15c/0x790 [ 985.155063][T18649] ? __fget_files+0x215/0x3d0 [ 985.155092][T18649] ksys_semctl.constprop.0+0x201/0x2e0 [ 985.155118][T18649] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 985.155162][T18649] do_syscall_64+0xc9/0xf80 [ 985.155198][T18649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.155223][T18649] RIP: 0033:0x7f43ca59af79 [ 985.155242][T18649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.155273][T18649] RSP: 002b:00007f43cb407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 985.155296][T18649] RAX: ffffffffffffffda RBX: 00007f43ca815fa0 RCX: 00007f43ca59af79 [ 985.155312][T18649] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 985.155327][T18649] RBP: 00007f43cb407090 R08: 0000000000000000 R09: 0000000000000000 [ 985.155341][T18649] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 985.155356][T18649] R13: 00007f43ca816038 R14: 00007f43ca815fa0 R15: 00007fff5a8e5818 [ 985.155386][T18649] [ 987.037563][T18678] FAULT_INJECTION: forcing a failure. [ 987.037563][T18678] name failslab, interval 1, probability 0, space 0, times 0 [ 987.103622][T18678] CPU: 0 UID: 0 PID: 18678 Comm: syz.1.2415 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.103666][T18678] Tainted: [L]=SOFTLOCKUP [ 987.103675][T18678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 987.103691][T18678] Call Trace: [ 987.103700][T18678] [ 987.103710][T18678] dump_stack_lvl+0x100/0x190 [ 987.103750][T18678] should_fail_ex.cold+0x5/0xa [ 987.103795][T18678] should_failslab+0xc2/0x120 [ 987.103853][T18678] __kmalloc_cache_noprof+0x80/0x810 [ 987.103879][T18678] ? __vb2_init_fileio+0x18f/0xff0 [ 987.103912][T18678] ? __vb2_init_fileio+0x18f/0xff0 [ 987.103938][T18678] __vb2_init_fileio+0x18f/0xff0 [ 987.103968][T18678] ? lockdep_hardirqs_on+0x78/0x100 [ 987.104020][T18678] ? __pollwait+0x276/0x470 [ 987.104050][T18678] vb2_core_poll+0x611/0x740 [ 987.104078][T18678] vb2_poll+0x4b/0xe0 [ 987.104117][T18678] vb2_fop_poll+0x10e/0x350 [ 987.104175][T18678] ? __pfx_vb2_fop_poll+0x10/0x10 [ 987.104214][T18678] v4l2_poll+0x15f/0x220 [ 987.104251][T18678] ? __pfx_v4l2_poll+0x10/0x10 [ 987.104292][T18678] do_sys_poll+0x6e5/0xeb0 [ 987.104329][T18678] ? __pfx_do_sys_poll+0x10/0x10 [ 987.104385][T18678] ? __lock_acquire+0x4a5/0x2630 [ 987.104420][T18678] ? __pfx___pollwait+0x10/0x10 [ 987.104448][T18678] ? __pfx_pollwake+0x10/0x10 [ 987.104520][T18678] ? ktime_get_ts64+0x2d2/0x3f0 [ 987.104551][T18678] ? read_tsc+0x9/0x20 [ 987.104584][T18678] ? ktime_get_ts64+0x256/0x3f0 [ 987.104623][T18678] __x64_sys_poll+0x1b3/0x420 [ 987.104651][T18678] ? __pfx___x64_sys_poll+0x10/0x10 [ 987.104687][T18678] do_syscall_64+0xc9/0xf80 [ 987.104726][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.104751][T18678] RIP: 0033:0x7f0cb2b9af79 [ 987.104772][T18678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.104798][T18678] RSP: 002b:00007f0cb39d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 987.104823][T18678] RAX: ffffffffffffffda RBX: 00007f0cb2e15fa0 RCX: 00007f0cb2b9af79 [ 987.104841][T18678] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 00002000000001c0 [ 987.104857][T18678] RBP: 00007f0cb39d9090 R08: 0000000000000000 R09: 0000000000000000 [ 987.104873][T18678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.104889][T18678] R13: 00007f0cb2e16038 R14: 00007f0cb2e15fa0 R15: 00007ffcdf9b4128 [ 987.104922][T18678] [ 988.724663][T18690] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2418'. [ 988.810276][T18692] FAULT_INJECTION: forcing a failure. [ 988.810276][T18692] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 988.881893][T18692] CPU: 0 UID: 0 PID: 18692 Comm: syz.1.2419 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.881932][T18692] Tainted: [L]=SOFTLOCKUP [ 988.881941][T18692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 988.881955][T18692] Call Trace: [ 988.881963][T18692] [ 988.881972][T18692] dump_stack_lvl+0x100/0x190 [ 988.882011][T18692] should_fail_ex.cold+0x5/0xa [ 988.882048][T18692] ? prepare_alloc_pages+0x16d/0x5f0 [ 988.882088][T18692] should_fail_alloc_page+0xeb/0x140 [ 988.882123][T18692] prepare_alloc_pages+0x1f0/0x5f0 [ 988.882171][T18692] __alloc_frozen_pages_noprof+0x193/0x2410 [ 988.882205][T18692] ? __update_page_owner_handle+0x3c7/0x550 [ 988.882244][T18692] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 988.882271][T18692] ? __page_table_check_zero+0x333/0x410 [ 988.882299][T18692] ? __page_table_check_zero+0x333/0x410 [ 988.882339][T18692] ? prep_compound_page+0x266/0x530 [ 988.882363][T18692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 988.882390][T18692] ? policy_nodemask+0xed/0x4f0 [ 988.882426][T18692] alloc_pages_mpol+0x1fb/0x550 [ 988.882460][T18692] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 988.882509][T18692] alloc_pages_noprof+0x131/0x390 [ 988.882543][T18692] __pmd_alloc+0x3b/0x9c0 [ 988.882583][T18692] __handle_mm_fault+0xa99/0x2b50 [ 988.882611][T18692] ? mt_find+0x45e/0x8e0 [ 988.882648][T18692] ? __pfx___handle_mm_fault+0x10/0x10 [ 988.882671][T18692] ? __pfx_mt_find+0x10/0x10 [ 988.882721][T18692] ? find_vma+0xbf/0x140 [ 988.882751][T18692] ? __pfx_find_vma+0x10/0x10 [ 988.882786][T18692] handle_mm_fault+0x36d/0xa20 [ 988.882816][T18692] do_user_addr_fault+0x74c/0x12f0 [ 988.882853][T18692] exc_page_fault+0x6f/0xd0 [ 988.882886][T18692] asm_exc_page_fault+0x26/0x30 [ 988.882910][T18692] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 988.882937][T18692] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 988.882961][T18692] RSP: 0018:ffffc900042afa60 EFLAGS: 00050202 [ 988.882981][T18692] RAX: 0000000000000001 RBX: 0000000000005c94 RCX: 0000000000005c94 [ 988.882996][T18692] RDX: 0000000000000001 RSI: ffff888039d78000 RDI: 0000000000000007 [ 988.883011][T18692] RBP: 0000000000000007 R08: 0000000000000000 R09: ffffed10073afb92 [ 988.883026][T18692] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888039d78000 [ 988.883041][T18692] R13: 0000000000005c9b R14: 00007ffffffff000 R15: 0000000000000000 [ 988.883070][T18692] _copy_to_user+0xa4/0xd0 [ 988.883098][T18692] semctl_main+0xa59/0x2b10 [ 988.883130][T18692] ? __pfx_semctl_main+0x10/0x10 [ 988.883203][T18692] ? __mutex_unlock_slowpath+0x15c/0x790 [ 988.883240][T18692] ? __fget_files+0x215/0x3d0 [ 988.883269][T18692] ksys_semctl.constprop.0+0x201/0x2e0 [ 988.883295][T18692] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 988.883339][T18692] do_syscall_64+0xc9/0xf80 [ 988.883375][T18692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.883398][T18692] RIP: 0033:0x7f0cb2b9af79 [ 988.883416][T18692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.883439][T18692] RSP: 002b:00007f0cb39d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 988.883460][T18692] RAX: ffffffffffffffda RBX: 00007f0cb2e15fa0 RCX: 00007f0cb2b9af79 [ 988.883476][T18692] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 988.883490][T18692] RBP: 00007f0cb39d9090 R08: 0000000000000000 R09: 0000000000000000 [ 988.883505][T18692] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 988.883519][T18692] R13: 00007f0cb2e16038 R14: 00007f0cb2e15fa0 R15: 00007ffcdf9b4128 [ 988.883550][T18692] [ 990.162122][T18706] FAULT_INJECTION: forcing a failure. [ 990.162122][T18706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 990.205382][T18706] CPU: 0 UID: 0 PID: 18706 Comm: syz.2.2422 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.205424][T18706] Tainted: [L]=SOFTLOCKUP [ 990.205433][T18706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 990.205449][T18706] Call Trace: [ 990.205457][T18706] [ 990.205467][T18706] dump_stack_lvl+0x100/0x190 [ 990.205522][T18706] should_fail_ex.cold+0x5/0xa [ 990.205562][T18706] ? prepare_alloc_pages+0x16d/0x5f0 [ 990.205603][T18706] should_fail_alloc_page+0xeb/0x140 [ 990.205641][T18706] prepare_alloc_pages+0x1f0/0x5f0 [ 990.205685][T18706] __alloc_frozen_pages_noprof+0x193/0x2410 [ 990.205721][T18706] ? stack_trace_save+0x8e/0xc0 [ 990.205748][T18706] ? __pfx_stack_trace_save+0x10/0x10 [ 990.205776][T18706] ? stack_depot_save_flags+0x27/0x9c0 [ 990.205813][T18706] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 990.205843][T18706] ? __lock_acquire+0x4a5/0x2630 [ 990.205879][T18706] ? css_rstat_updated+0x1ce/0x5a0 [ 990.205910][T18706] ? __pfx_css_rstat_updated+0x10/0x10 [ 990.205944][T18706] ? __lock_acquire+0x4a5/0x2630 [ 990.205981][T18706] ? rcu_is_watching+0x12/0xc0 [ 990.206012][T18706] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 990.206042][T18706] ? policy_nodemask+0xed/0x4f0 [ 990.206079][T18706] alloc_pages_mpol+0x1fb/0x550 [ 990.206116][T18706] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 990.206160][T18706] alloc_pages_noprof+0x131/0x390 [ 990.206198][T18706] pgd_alloc+0x4d/0x640 [ 990.206231][T18706] ? mutex_init_lockep+0x110/0x150 [ 990.206273][T18706] mm_init+0x6da/0x10d0 [ 990.206308][T18706] mm_alloc+0x97/0xd0 [ 990.206340][T18706] alloc_bprm+0x2af/0x710 [ 990.206368][T18706] do_execveat_common.isra.0+0x1d0/0x5b0 [ 990.206400][T18706] __x64_sys_execve+0x8e/0xb0 [ 990.206427][T18706] do_syscall_64+0xc9/0xf80 [ 990.206466][T18706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.206492][T18706] RIP: 0033:0x7f08ced9af79 [ 990.206512][T18706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.206538][T18706] RSP: 002b:00007f08cfc0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 990.206562][T18706] RAX: ffffffffffffffda RBX: 00007f08cf015fa0 RCX: 00007f08ced9af79 [ 990.206579][T18706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 990.206595][T18706] RBP: 00007f08cee316e0 R08: 0000000000000000 R09: 0000000000000000 [ 990.206611][T18706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.206627][T18706] R13: 00007f08cf016038 R14: 00007f08cf015fa0 R15: 00007fffd11f0d18 [ 990.206658][T18706] [ 990.935904][T18709] FAULT_INJECTION: forcing a failure. [ 990.935904][T18709] name failslab, interval 1, probability 0, space 0, times 0 [ 990.973930][T18709] CPU: 0 UID: 0 PID: 18709 Comm: syz.3.2423 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.973978][T18709] Tainted: [L]=SOFTLOCKUP [ 990.973987][T18709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 990.974002][T18709] Call Trace: [ 990.974010][T18709] [ 990.974019][T18709] dump_stack_lvl+0x100/0x190 [ 990.974054][T18709] should_fail_ex.cold+0x5/0xa [ 990.974096][T18709] should_failslab+0xc2/0x120 [ 990.974129][T18709] kmem_cache_alloc_noprof+0x83/0x780 [ 990.974160][T18709] ? __pfx_acct_collect+0x10/0x10 [ 990.974197][T18709] ? taskstats_exit+0x650/0xbd0 [ 990.974226][T18709] ? taskstats_exit+0x650/0xbd0 [ 990.974246][T18709] taskstats_exit+0x650/0xbd0 [ 990.974268][T18709] ? __pfx_acct_update_integrals+0x10/0x10 [ 990.974294][T18709] ? __pfx_taskstats_exit+0x10/0x10 [ 990.974319][T18709] ? rcu_read_lock_any_held+0x6a/0xa0 [ 990.974344][T18709] ? exit_signals+0x395/0xaf0 [ 990.974377][T18709] do_exit+0x5ca/0x2a30 [ 990.974420][T18709] ? __pfx_do_exit+0x10/0x10 [ 990.974456][T18709] ? do_raw_spin_lock+0x128/0x260 [ 990.974478][T18709] ? find_held_lock+0x2b/0x80 [ 990.974502][T18709] ? get_signal+0x7e0/0x21e0 [ 990.974534][T18709] do_group_exit+0xd5/0x2a0 [ 990.974557][T18709] get_signal+0x1ec7/0x21e0 [ 990.974597][T18709] ? __pfx_get_signal+0x10/0x10 [ 990.974628][T18709] ? do_futex+0x192/0x350 [ 990.974662][T18709] arch_do_signal_or_restart+0x91/0x770 [ 990.974698][T18709] ? down_write_killable+0x152/0x250 [ 990.974736][T18709] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 990.974779][T18709] ? __pfx___x64_sys_futex+0x10/0x10 [ 990.974810][T18709] ? xfd_validate_state+0x129/0x190 [ 990.974839][T18709] exit_to_user_mode_loop+0x86/0x4b0 [ 990.974872][T18709] ? rcu_is_watching+0x12/0xc0 [ 990.974896][T18709] do_syscall_64+0x4ea/0xf80 [ 990.974933][T18709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.974957][T18709] RIP: 0033:0x7f43ca59af79 [ 990.974981][T18709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.975004][T18709] RSP: 002b:00007f43cb3e60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 990.975028][T18709] RAX: fffffffffffffe00 RBX: 00007f43ca816098 RCX: 00007f43ca59af79 [ 990.975044][T18709] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f43ca816098 [ 990.975059][T18709] RBP: 00007f43ca816090 R08: 0000000000000000 R09: 0000000000000000 [ 990.975075][T18709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.975090][T18709] R13: 00007f43ca816128 R14: 00007fff5a8e5730 R15: 00007fff5a8e5818 [ 990.975120][T18709] [ 994.240276][T18757] FAULT_INJECTION: forcing a failure. [ 994.240276][T18757] name fail_futex, interval 1, probability 0, space 0, times 0 [ 994.325290][T18757] CPU: 0 UID: 0 PID: 18757 Comm: syz.3.2433 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.325331][T18757] Tainted: [L]=SOFTLOCKUP [ 994.325340][T18757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 994.325356][T18757] Call Trace: [ 994.325364][T18757] [ 994.325374][T18757] dump_stack_lvl+0x100/0x190 [ 994.325412][T18757] should_fail_ex.cold+0x5/0xa [ 994.325455][T18757] get_futex_key+0x1d2/0x1620 [ 994.325491][T18757] ? __pfx_get_futex_key+0x10/0x10 [ 994.325537][T18757] futex_wake+0xea/0x530 [ 994.325578][T18757] ? __pfx_futex_wake+0x10/0x10 [ 994.325616][T18757] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 994.325661][T18757] ? kmem_cache_free+0x48f/0x720 [ 994.325691][T18757] do_futex+0x32b/0x350 [ 994.325726][T18757] ? __pfx_do_futex+0x10/0x10 [ 994.325779][T18757] ? __pfx___might_resched+0x10/0x10 [ 994.325802][T18757] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 994.325854][T18757] __x64_sys_futex+0x34f/0x4d0 [ 994.325891][T18757] ? __pfx_task_work_run+0x10/0x10 [ 994.325915][T18757] ? __pfx___x64_sys_futex+0x10/0x10 [ 994.325961][T18757] do_syscall_64+0xc9/0xf80 [ 994.326005][T18757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.326031][T18757] RIP: 0033:0x7f43ca59af79 [ 994.326051][T18757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.326075][T18757] RSP: 002b:00007f43cb4070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 994.326100][T18757] RAX: ffffffffffffffda RBX: 00007f43ca815fa8 RCX: 00007f43ca59af79 [ 994.326117][T18757] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f43ca815fac [ 994.326133][T18757] RBP: 00007f43ca815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 994.326149][T18757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.326165][T18757] R13: 00007f43ca816038 R14: 00007fff5a8e5730 R15: 00007fff5a8e5818 [ 994.326196][T18757] [ 994.866050][T18767] FAULT_INJECTION: forcing a failure. [ 994.866050][T18767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 994.962247][T18767] CPU: 0 UID: 0 PID: 18767 Comm: syz.1.2435 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.962288][T18767] Tainted: [L]=SOFTLOCKUP [ 994.962298][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 994.962320][T18767] Call Trace: [ 994.962331][T18767] [ 994.962341][T18767] dump_stack_lvl+0x100/0x190 [ 994.962379][T18767] should_fail_ex.cold+0x5/0xa [ 994.962419][T18767] ? prepare_alloc_pages+0x16d/0x5f0 [ 994.962460][T18767] should_fail_alloc_page+0xeb/0x140 [ 994.962498][T18767] prepare_alloc_pages+0x1f0/0x5f0 [ 994.962543][T18767] __alloc_frozen_pages_noprof+0x193/0x2410 [ 994.962592][T18767] ? __lock_acquire+0x4a5/0x2630 [ 994.962628][T18767] ? css_rstat_updated+0x1ce/0x5a0 [ 994.962659][T18767] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 994.962701][T18767] ? __lock_acquire+0x4a5/0x2630 [ 994.962737][T18767] ? find_held_lock+0x2b/0x80 [ 994.962763][T18767] ? local_lock_release+0x99/0x130 [ 994.962801][T18767] ? local_lock_release+0x99/0x130 [ 994.962838][T18767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 994.962866][T18767] ? policy_nodemask+0xed/0x4f0 [ 994.962903][T18767] alloc_pages_mpol+0x1fb/0x550 [ 994.962939][T18767] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 994.962983][T18767] alloc_pages_noprof+0x131/0x390 [ 994.963020][T18767] pgd_alloc+0x4d/0x640 [ 994.963053][T18767] ? mutex_init_lockep+0x110/0x150 [ 994.963095][T18767] mm_init+0x6da/0x10d0 [ 994.963130][T18767] mm_alloc+0x97/0xd0 [ 994.963163][T18767] alloc_bprm+0x2af/0x710 [ 994.963191][T18767] do_execveat_common.isra.0+0x1d0/0x5b0 [ 994.963224][T18767] __x64_sys_execve+0x8e/0xb0 [ 994.963250][T18767] do_syscall_64+0xc9/0xf80 [ 994.963290][T18767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.963316][T18767] RIP: 0033:0x7f0cb2b9af79 [ 994.963335][T18767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.963361][T18767] RSP: 002b:00007f0cb39d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 994.963385][T18767] RAX: ffffffffffffffda RBX: 00007f0cb2e15fa0 RCX: 00007f0cb2b9af79 [ 994.963403][T18767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 994.963420][T18767] RBP: 00007f0cb2c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 994.963456][T18767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.963471][T18767] R13: 00007f0cb2e16038 R14: 00007f0cb2e15fa0 R15: 00007ffcdf9b4128 [ 994.963504][T18767] [ 996.333253][T18797] FAULT_INJECTION: forcing a failure. [ 996.333253][T18797] name fail_futex, interval 1, probability 0, space 0, times 0 [ 996.411271][T18797] CPU: 0 UID: 0 PID: 18797 Comm: syz.2.2443 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.411313][T18797] Tainted: [L]=SOFTLOCKUP [ 996.411323][T18797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 996.411338][T18797] Call Trace: [ 996.411347][T18797] [ 996.411356][T18797] dump_stack_lvl+0x100/0x190 [ 996.411398][T18797] should_fail_ex.cold+0x5/0xa [ 996.411442][T18797] get_futex_key+0x1d2/0x1620 [ 996.411478][T18797] ? __pfx_get_futex_key+0x10/0x10 [ 996.411527][T18797] futex_wake+0xea/0x530 [ 996.411569][T18797] ? __pfx_futex_wake+0x10/0x10 [ 996.411606][T18797] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 996.411652][T18797] ? kmem_cache_free+0x48f/0x720 [ 996.411681][T18797] do_futex+0x32b/0x350 [ 996.411716][T18797] ? __pfx_do_futex+0x10/0x10 [ 996.411750][T18797] ? __pfx___might_resched+0x10/0x10 [ 996.411773][T18797] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 996.411815][T18797] __x64_sys_futex+0x34f/0x4d0 [ 996.411851][T18797] ? __pfx_task_work_run+0x10/0x10 [ 996.411875][T18797] ? __pfx___x64_sys_futex+0x10/0x10 [ 996.411921][T18797] do_syscall_64+0xc9/0xf80 [ 996.411959][T18797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.411985][T18797] RIP: 0033:0x7f08ced9af79 [ 996.412005][T18797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.412030][T18797] RSP: 002b:00007f08cfc0b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 996.412055][T18797] RAX: ffffffffffffffda RBX: 00007f08cf015fa8 RCX: 00007f08ced9af79 [ 996.412072][T18797] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f08cf015fac [ 996.412089][T18797] RBP: 00007f08cf015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 996.412105][T18797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.412120][T18797] R13: 00007f08cf016038 R14: 00007fffd11f0c30 R15: 00007fffd11f0d18 [ 996.412153][T18797] [ 1000.347005][T18847] FAULT_INJECTION: forcing a failure. [ 1000.347005][T18847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1000.464840][T18847] CPU: 0 UID: 0 PID: 18847 Comm: syz.0.2454 Tainted: G L syzkaller #0 PREEMPT(full) [ 1000.464879][T18847] Tainted: [L]=SOFTLOCKUP [ 1000.464887][T18847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1000.464902][T18847] Call Trace: [ 1000.464910][T18847] [ 1000.464920][T18847] dump_stack_lvl+0x100/0x190 [ 1000.464956][T18847] should_fail_ex.cold+0x5/0xa [ 1000.464992][T18847] ? prepare_alloc_pages+0x16d/0x5f0 [ 1000.465031][T18847] should_fail_alloc_page+0xeb/0x140 [ 1000.465066][T18847] prepare_alloc_pages+0x1f0/0x5f0 [ 1000.465107][T18847] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1000.465138][T18847] ? stack_trace_save+0x8e/0xc0 [ 1000.465164][T18847] ? __pfx_stack_trace_save+0x10/0x10 [ 1000.465196][T18847] ? stack_depot_save_flags+0x27/0x9c0 [ 1000.465229][T18847] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1000.465257][T18847] ? __kasan_slab_alloc+0x89/0x90 [ 1000.465287][T18847] ? __pmd_alloc+0xbf/0x9c0 [ 1000.465322][T18847] ? handle_mm_fault+0x36d/0xa20 [ 1000.465345][T18847] ? do_user_addr_fault+0x74c/0x12f0 [ 1000.465372][T18847] ? exc_page_fault+0x6f/0xd0 [ 1000.465403][T18847] ? asm_exc_page_fault+0x26/0x30 [ 1000.465425][T18847] ? rep_movs_alternative+0x4a/0x90 [ 1000.465448][T18847] ? _copy_to_user+0xa4/0xd0 [ 1000.465470][T18847] ? semctl_main+0xa59/0x2b10 [ 1000.465503][T18847] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1000.465530][T18847] ? policy_nodemask+0xed/0x4f0 [ 1000.465566][T18847] alloc_pages_mpol+0x1fb/0x550 [ 1000.465607][T18847] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1000.465648][T18847] ? __pfx_filemap_map_pages+0x10/0x10 [ 1000.465677][T18847] alloc_pages_noprof+0x131/0x390 [ 1000.465712][T18847] pte_alloc_one+0x1e/0x3e0 [ 1000.465745][T18847] __do_fault+0x359/0x550 [ 1000.465779][T18847] ? __pfx_filemap_map_pages+0x10/0x10 [ 1000.465807][T18847] do_fault+0x2db/0x1990 [ 1000.465842][T18847] ? __pmd_alloc+0x6aa/0x9c0 [ 1000.465880][T18847] __handle_mm_fault+0x1807/0x2b50 [ 1000.465909][T18847] ? mt_find+0x45e/0x8e0 [ 1000.465946][T18847] ? __pfx___handle_mm_fault+0x10/0x10 [ 1000.465970][T18847] ? __pfx_mt_find+0x10/0x10 [ 1000.466020][T18847] ? find_vma+0xbf/0x140 [ 1000.466050][T18847] ? __pfx_find_vma+0x10/0x10 [ 1000.466085][T18847] handle_mm_fault+0x36d/0xa20 [ 1000.466115][T18847] do_user_addr_fault+0x74c/0x12f0 [ 1000.466151][T18847] exc_page_fault+0x6f/0xd0 [ 1000.466187][T18847] asm_exc_page_fault+0x26/0x30 [ 1000.466210][T18847] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1000.466236][T18847] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1000.466259][T18847] RSP: 0018:ffffc900045afa60 EFLAGS: 00050202 [ 1000.466278][T18847] RAX: 0000000000000001 RBX: 0000000000005c94 RCX: 0000000000005c94 [ 1000.466294][T18847] RDX: 0000000000000001 RSI: ffff8880783b8000 RDI: 0000000000000007 [ 1000.466309][T18847] RBP: 0000000000000007 R08: 0000000000000000 R09: ffffed100f077b92 [ 1000.466325][T18847] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880783b8000 [ 1000.466340][T18847] R13: 0000000000005c9b R14: 00007ffffffff000 R15: 0000000000000000 [ 1000.466369][T18847] _copy_to_user+0xa4/0xd0 [ 1000.466395][T18847] semctl_main+0xa59/0x2b10 [ 1000.466427][T18847] ? __pfx_semctl_main+0x10/0x10 [ 1000.466495][T18847] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1000.466532][T18847] ? __fget_files+0x215/0x3d0 [ 1000.466562][T18847] ksys_semctl.constprop.0+0x201/0x2e0 [ 1000.466588][T18847] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 1000.466631][T18847] do_syscall_64+0xc9/0xf80 [ 1000.466667][T18847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.466691][T18847] RIP: 0033:0x7f34dcd9af79 [ 1000.466710][T18847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.466733][T18847] RSP: 002b:00007f34ddc3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1000.466754][T18847] RAX: ffffffffffffffda RBX: 00007f34dd015fa0 RCX: 00007f34dcd9af79 [ 1000.466770][T18847] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 1000.466785][T18847] RBP: 00007f34ddc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.466799][T18847] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1000.466814][T18847] R13: 00007f34dd016038 R14: 00007f34dd015fa0 R15: 00007ffe8f1feac8 [ 1000.466844][T18847] [ 1003.641762][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1003.657123][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1003.665866][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1003.676241][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1003.685040][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1003.719373][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.726024][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1005.710871][ T5824] Bluetooth: hci2: command tx timeout [ 1007.792993][ T5824] Bluetooth: hci2: command tx timeout [ 1008.002224][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.068731][T18885] chnl_net:caif_netlink_parms(): no params data found [ 1008.087617][T18908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2465'. [ 1008.207190][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.493094][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.873598][ T5824] Bluetooth: hci2: command tx timeout [ 1010.054351][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.327900][T18918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2467'. [ 1011.837027][T18885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.873719][T18885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.894642][T18885] bridge_slave_0: entered allmulticast mode [ 1011.925151][T18885] bridge_slave_0: entered promiscuous mode [ 1011.957768][ T5824] Bluetooth: hci2: command tx timeout [ 1011.984818][T18885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.016308][T18885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.059539][T18885] bridge_slave_1: entered allmulticast mode [ 1012.094457][T18885] bridge_slave_1: entered promiscuous mode [ 1012.309748][ T59] team0: left allmulticast mode [ 1012.326230][ T59] team_slave_0: left allmulticast mode [ 1012.331764][ T59] team_slave_1: left allmulticast mode [ 1012.362735][ T59] team0: left promiscuous mode [ 1012.384787][ T59] team_slave_0: left promiscuous mode [ 1012.408189][ T59] team_slave_1: left promiscuous mode [ 1012.428141][ T59] bridge0: port 3(team0) entered disabled state [ 1012.461277][ T59] bridge_slave_1: left allmulticast mode [ 1012.495565][ T59] bridge_slave_1: left promiscuous mode [ 1012.512060][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.543998][ T59] bridge_slave_0: left allmulticast mode [ 1012.562342][ T59] bridge_slave_0: left promiscuous mode [ 1012.584184][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.995544][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.036426][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.074866][ T59] bond0 (unregistering): Released all slaves [ 1014.106702][T18885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.176173][T18885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.681445][T18885] team0: Port device team_slave_0 added [ 1014.808373][T18885] team0: Port device team_slave_1 added [ 1015.546345][T18885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.576617][T18885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.695875][T18885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.782757][T18885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.805547][T18885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.914402][T18885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.493099][T18885] hsr_slave_0: entered promiscuous mode [ 1017.640159][T18885] hsr_slave_1: entered promiscuous mode [ 1017.735600][T18885] debugfs: 'hsr0' already exists in 'hsr' [ 1018.047434][T18885] Cannot create hsr debugfs directory [ 1020.034532][ T59] hsr_slave_0: left promiscuous mode [ 1020.261378][ T59] hsr_slave_1: left promiscuous mode [ 1020.356825][ T59] veth1_macvtap: left promiscuous mode [ 1020.389435][ T59] veth0_macvtap: left promiscuous mode [ 1020.540871][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1020.558242][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1020.566772][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1020.582634][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1020.591027][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1022.307188][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1022.445435][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1022.680014][ T5824] Bluetooth: hci3: command tx timeout [ 1024.761888][ T5824] Bluetooth: hci3: command tx timeout [ 1026.842010][ T5824] Bluetooth: hci3: command tx timeout [ 1026.931315][T18983] chnl_net:caif_netlink_parms(): no params data found [ 1027.142912][T19013] netlink: 'syz.0.2476': attribute type 11 has an invalid length. [ 1028.437611][T18983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.672297][T18983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.679621][T18983] bridge_slave_0: entered allmulticast mode [ 1028.922949][ T5824] Bluetooth: hci3: command tx timeout [ 1029.020966][T18983] bridge_slave_0: entered promiscuous mode [ 1029.141633][T18983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.213323][T18983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.416245][T18983] bridge_slave_1: entered allmulticast mode [ 1029.587596][T18983] bridge_slave_1: entered promiscuous mode [ 1029.674156][T18885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1029.755961][T18885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1030.905730][T18885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1031.233063][T18885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1031.406160][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 1031.639250][T18983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.701325][T18983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.977861][T18983] team0: Port device team_slave_0 added [ 1032.018150][T18983] team0: Port device team_slave_1 added [ 1032.328079][T18983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.368446][T18983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.504505][T18983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.554059][T18983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.561232][T18983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.646955][T18983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.009874][T18983] hsr_slave_0: entered promiscuous mode [ 1033.061197][T18983] hsr_slave_1: entered promiscuous mode [ 1033.098395][T18983] debugfs: 'hsr0' already exists in 'hsr' [ 1033.362278][T18983] Cannot create hsr debugfs directory [ 1034.372171][T18885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.222453][T18885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.304134][T19083] ubi0: attaching mtd0 [ 1035.334976][T19083] ubi0: scanning is finished [ 1035.375920][T19083] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1035.594388][T17781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.601698][T17781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.770239][T19083] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1035.784417][T17773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.791789][T17773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.086759][T18885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1036.504238][T18983] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1036.611005][T18983] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1036.700300][T18983] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1036.810241][T18983] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1037.467969][T18983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.564930][T18885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.660893][T18983] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.747883][T17773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.755184][T17773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.890719][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.898014][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.988249][ T30] audit: type=1800 audit(1770726159.616:24): pid=19124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2484" name="lu_gp_id" dev="configfs" ino=83589 res=0 errno=0 [ 1038.085248][T19124] kstrtoul() returned -22 for lu_gp_id [ 1038.144412][T18983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1038.256878][T18983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1038.405076][T18885] veth0_vlan: entered promiscuous mode [ 1038.482635][T18885] veth1_vlan: entered promiscuous mode [ 1038.674712][T18885] veth0_macvtap: entered promiscuous mode [ 1038.745523][T18885] veth1_macvtap: entered promiscuous mode [ 1038.886782][T18885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.037962][T18885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.124505][T17773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.191177][T17773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.266869][T17773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.542008][T17773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.797179][T18983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.930680][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.982345][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.174505][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.233504][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.490231][T19152] snd_virmidi snd_virmidi.0: control 61678:131081:3:yª:2047 is already present [ 1041.191394][T19166] ubi0: attaching mtd0 [ 1041.243606][T19166] ubi0: scanning is finished [ 1041.275964][T19166] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1041.330917][T18983] veth0_vlan: entered promiscuous mode [ 1041.431740][T18983] veth1_vlan: entered promiscuous mode [ 1041.572075][T18983] veth0_macvtap: entered promiscuous mode [ 1041.597106][T19166] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1041.632190][T18983] veth1_macvtap: entered promiscuous mode [ 1041.707896][T18983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.781190][T18983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.864306][ T7676] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.913607][ T7676] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.000392][ T7676] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.045067][ T7676] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.355439][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.420804][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.536398][ T7676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.562559][ T7676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.684982][T19187] netlink: 'syz.2.2492': attribute type 11 has an invalid length. [ 1043.806942][T19187] ================================================================== [ 1043.806980][T19187] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 1043.807018][T19187] Write of size 8 at addr ffffc90003679540 by task syz.2.2492/19187 [ 1043.807040][T19187] [ 1043.807059][T19187] CPU: 0 UID: 0 PID: 19187 Comm: syz.2.2492 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.807095][T19187] Tainted: [L]=SOFTLOCKUP [ 1043.807105][T19187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1043.807122][T19187] Call Trace: [ 1043.807130][T19187] [ 1043.807140][T19187] dump_stack_lvl+0x100/0x190 [ 1043.807172][T19187] print_report+0x156/0x4c9 [ 1043.807206][T19187] ? __virt_addr_valid+0x81/0x620 [ 1043.807248][T19187] ? sys_imageblit+0x19fb/0x1d60 [ 1043.807277][T19187] kasan_report+0xdf/0x1a0 [ 1043.807312][T19187] ? sys_imageblit+0x19fb/0x1d60 [ 1043.807351][T19187] sys_imageblit+0x19fb/0x1d60 [ 1043.807385][T19187] ? __pfx_sys_imageblit+0x10/0x10 [ 1043.807416][T19187] ? prb_read_valid+0x78/0xa0 [ 1043.807453][T19187] ? __pfx_prb_read_valid+0x10/0x10 [ 1043.807492][T19187] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1043.807526][T19187] soft_cursor+0x524/0xa10 [ 1043.807552][T19187] ? fb_get_color_depth+0x120/0x250 [ 1043.807592][T19187] bit_cursor+0xe58/0x16f0 [ 1043.807618][T19187] ? __pfx_bit_cursor+0x10/0x10 [ 1043.807640][T19187] ? __lock_acquire+0x4a5/0x2630 [ 1043.807679][T19187] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1043.807711][T19187] ? get_color+0x1da/0x450 [ 1043.807745][T19187] ? __pfx_bit_cursor+0x10/0x10 [ 1043.807767][T19187] fbcon_cursor+0x43c/0x5e0 [ 1043.807803][T19187] ? add_softcursor+0x140/0x290 [ 1043.807843][T19187] set_cursor+0x1db/0x250 [ 1043.807880][T19187] con_write+0x89/0xb0 [ 1043.807906][T19187] n_tty_write+0x44f/0x12d0 [ 1043.807946][T19187] ? __pfx_n_tty_write+0x10/0x10 [ 1043.807979][T19187] ? __pfx_woken_wake_function+0x10/0x10 [ 1043.808005][T19187] ? file_tty_write.isra.0+0x64e/0x890 [ 1043.808033][T19187] ? __pfx_n_tty_write+0x10/0x10 [ 1043.808066][T19187] file_tty_write.isra.0+0x4d2/0x890 [ 1043.808096][T19187] redirected_tty_write+0xd4/0x120 [ 1043.808123][T19187] vfs_write+0x6ac/0x1070 [ 1043.808150][T19187] ? __pfx_redirected_tty_write+0x10/0x10 [ 1043.808178][T19187] ? __pfx_vfs_write+0x10/0x10 [ 1043.808204][T19187] ? find_held_lock+0x2b/0x80 [ 1043.808241][T19187] ksys_write+0x12a/0x250 [ 1043.808312][T19187] ? __pfx_ksys_write+0x10/0x10 [ 1043.808350][T19187] do_syscall_64+0xc9/0xf80 [ 1043.808388][T19187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.808414][T19187] RIP: 0033:0x7f08ced9af79 [ 1043.808434][T19187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.808459][T19187] RSP: 002b:00007f08cfc0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1043.808484][T19187] RAX: ffffffffffffffda RBX: 00007f08cf015fa0 RCX: 00007f08ced9af79 [ 1043.808502][T19187] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 1043.808518][T19187] RBP: 00007f08cee316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1043.808534][T19187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.808551][T19187] R13: 00007f08cf016038 R14: 00007f08cf015fa0 R15: 00007fffd11f0d18 [ 1043.808576][T19187] [ 1043.808586][T19187] [ 1043.808598][T19187] The buggy address belongs to a vmalloc virtual mapping [ 1043.808616][T19187] Memory state around the buggy address: [ 1043.808630][T19187] ffffc90003679400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1043.808651][T19187] ffffc90003679480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1043.808670][T19187] >ffffc90003679500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1043.808685][T19187] ^ [ 1043.808700][T19187] ffffc90003679580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1043.808718][T19187] ffffc90003679600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1043.808733][T19187] ================================================================== [ 1043.808767][T19187] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1043.808787][T19187] CPU: 0 UID: 0 PID: 19187 Comm: syz.2.2492 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.808824][T19187] Tainted: [L]=SOFTLOCKUP [ 1043.808833][T19187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1043.808849][T19187] Call Trace: [ 1043.808857][T19187] [ 1043.808867][T19187] dump_stack_lvl+0x100/0x190 [ 1043.808899][T19187] vpanic+0x20d/0x630 [ 1043.808940][T19187] panic+0xd1/0xd1 [ 1043.808963][T19187] ? __pfx_panic+0x10/0x10 [ 1043.808993][T19187] check_panic_on_warn.cold+0x19/0x34 [ 1043.809019][T19187] end_report.part.0+0x3a/0x90 [ 1043.809054][T19187] kasan_report.cold+0xe/0x18 [ 1043.809089][T19187] ? sys_imageblit+0x19fb/0x1d60 [ 1043.809122][T19187] sys_imageblit+0x19fb/0x1d60 [ 1043.809156][T19187] ? __pfx_sys_imageblit+0x10/0x10 [ 1043.809187][T19187] ? prb_read_valid+0x78/0xa0 [ 1043.809225][T19187] ? __pfx_prb_read_valid+0x10/0x10 [ 1043.809264][T19187] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1043.809298][T19187] soft_cursor+0x524/0xa10 [ 1043.809329][T19187] ? fb_get_color_depth+0x120/0x250 [ 1043.809375][T19187] bit_cursor+0xe58/0x16f0 [ 1043.809401][T19187] ? __pfx_bit_cursor+0x10/0x10 [ 1043.809424][T19187] ? __lock_acquire+0x4a5/0x2630 [ 1043.809467][T19187] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1043.809494][T19187] ? get_color+0x1da/0x450 [ 1043.809529][T19187] ? __pfx_bit_cursor+0x10/0x10 [ 1043.809550][T19187] fbcon_cursor+0x43c/0x5e0 [ 1043.809587][T19187] ? add_softcursor+0x140/0x290 [ 1043.809627][T19187] set_cursor+0x1db/0x250 [ 1043.809665][T19187] con_write+0x89/0xb0 [ 1043.809691][T19187] n_tty_write+0x44f/0x12d0 [ 1043.809747][T19187] ? __pfx_n_tty_write+0x10/0x10 [ 1043.809781][T19187] ? __pfx_woken_wake_function+0x10/0x10 [ 1043.809807][T19187] ? file_tty_write.isra.0+0x64e/0x890 [ 1043.809835][T19187] ? __pfx_n_tty_write+0x10/0x10 [ 1043.809868][T19187] file_tty_write.isra.0+0x4d2/0x890 [ 1043.809899][T19187] redirected_tty_write+0xd4/0x120 [ 1043.809925][T19187] vfs_write+0x6ac/0x1070 [ 1043.809953][T19187] ? __pfx_redirected_tty_write+0x10/0x10 [ 1043.809982][T19187] ? __pfx_vfs_write+0x10/0x10 [ 1043.810008][T19187] ? find_held_lock+0x2b/0x80 [ 1043.810045][T19187] ksys_write+0x12a/0x250 [ 1043.810072][T19187] ? __pfx_ksys_write+0x10/0x10 [ 1043.810104][T19187] do_syscall_64+0xc9/0xf80 [ 1043.810141][T19187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.810168][T19187] RIP: 0033:0x7f08ced9af79 [ 1043.810186][T19187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.810212][T19187] RSP: 002b:00007f08cfc0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1043.810236][T19187] RAX: ffffffffffffffda RBX: 00007f08cf015fa0 RCX: 00007f08ced9af79 [ 1043.810254][T19187] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 1043.810271][T19187] RBP: 00007f08cee316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1043.810288][T19187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.810305][T19187] R13: 00007f08cf016038 R14: 00007f08cf015fa0 R15: 00007fffd11f0d18 [ 1043.810336][T19187] [ 1043.810404][T19187] Kernel Offset: disabled