last executing test programs: 6.252301685s ago: executing program 2 (id=681): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 5.758462325s ago: executing program 1 (id=682): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x1ff, 0x7c9, 0x2a, 0x4909b6f2, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x6, 0x3, 0x4000b5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x9, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4000000000, 0x1, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x3, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2c62, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0xb, 0xa505}, 0x800}, 0x7, 0x4008) pwrite64$auto(0xc8, 0x0, 0xfded, 0x4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x2004c012) r1 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r1, 0x0, 0x3b8b, 0x800) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/power/runtime_active_time\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000200)='5', 0x1) ioctl$auto_SNAPSHOT_FREE(r3, 0x3305, 0x0) 5.438004151s ago: executing program 1 (id=684): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x9, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0x8c0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121742, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5a) lsetxattr$auto(0x0, &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000001340), 0x2, 0x0) 5.211167395s ago: executing program 2 (id=685): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7fffffffffffffff) shmget$auto(0x5, 0x7, 0xfffffff7) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fcntl$auto_F_SETSIG(r0, 0xa, 0x80000001) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x20013, 0x101, &(0x7f0000000000)=@ethernet={0x6, @local}, 0x1c) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(0x0, r5) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="59030000", @ANYRES16=r7, @ANYBLOB], 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) sendmsg$auto_NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_INDOOR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f0000000500)={0x10e8, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0xbf, 0xfa, "f0f711997ed5caeafbfa545ef911239d4ebd156dec731010eba919b0aadbe1ede667fcf08de47c2f3f96ed6ec8ed80245fd0d3276c9ea86a2b79dd19b204f616f4ea3c7248d4de13ff93473bc1586c2e44f8db0d657fdc191fb889ec7828eab1742b49fc24c6b0d2bdfbf95c0fcd952c944f46aa22807368e9dbaf1aab8e424d013f85bdbd3331a23e675b0a8c24eebb9084b9d96d15a92eab8bdff8f481227d33bb0b24b3d3806c25610d48480ce96455a7c67684601418229ece"}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xff4, 0xcd, "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"}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}]}, 0x10e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) listen$auto(0x3, 0x81) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x7, 0x2) mincore$auto(0x1000, 0x3fffffe, 0x0) write$auto_rb_simple_fops_trace(r3, &(0x7f0000000400)="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", 0xfc) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) getsockopt$auto(0xffffffffffffffff, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) 5.078979765s ago: executing program 1 (id=686): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) connect$auto(r0, &(0x7f0000000000)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x54) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x4206, r1, 0x0, 0x200005) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r2, 0x0, 0x6051) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000000)='#.&\x00', 0xc1) ioctl$auto(0x3, 0xc0184d03, 0xffffffffffffffff) ioctl$auto_I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)) 5.062222364s ago: executing program 0 (id=687): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) io_uring_setup$auto(0x1d, 0x0) accept$auto(0xffffffffffffffff, 0x0, 0x0) landlock_create_ruleset$auto(0x0, 0x9, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(r1, 0x0, 0x81) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(r0, 0x7c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x40, r3, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0xc, 0x0, 0x1, [@nested={0x6, 0x9, 0x0, 0x1, [@generic="0100"]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) mmap$auto(0x8000, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) timer_settime$auto(0xde66, 0xffff8000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.136343661s ago: executing program 0 (id=689): r0 = socket(0xa, 0x80000, 0x84) getsockopt$auto(r0, 0x84, 0x11, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0xc0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/msr/parameters/allow_writes\x00', 0xa0302, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ffff000) 3.835691361s ago: executing program 1 (id=690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, r1, 0x8000) r2 = socket(0x15, 0x5, 0x0) r3 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r3, 0x29, 0x21, 0x0, 0x18000113) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, "ede41b087481e75e592316ed5089f6f63b404f907f6cb57712b8d5003ecf9cbb50"}, 0x38}, 0x1, 0x0, 0x0, 0x12}, 0x2000c006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0203, 0x0) ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0x7fffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)='5', 0x1) r5 = socket(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r5) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r6, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000006440)={&(0x7f0000004e80)=ANY=[@ANYBLOB=' A\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf25260000000c0006004000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r8 = setfsuid$auto(0xee00) r9 = setfsuid$auto(0xee01) setresuid$auto(r8, r9, r8) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000001c0)={{0x0, 0xee01, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x9}, &(0x7f0000000140)=0x3, &(0x7f0000000180)=0x5, 0x3, 0x565, 0xc, 0x5ea, 0x5591ca8, 0x89ca, 0x1, 0x6}) r11 = waitid$auto_P_ALL(0x0, 0x0, &(0x7f00000002c0)={@_si_pad}, 0x8001, &(0x7f0000000340)={{0x7, 0x5}, {0x1, 0x7}, 0x1ff, 0x0, 0x81, 0x7fff, 0x2, 0x8001, 0x1, 0x9, 0x10001, 0x84, 0x7fff, 0x7, 0x9, 0x7}) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000400)={0xfa0b, 0x0, 0x2, 0x40, 0x5, 0xffffffffffffffff}) r13 = set_tid_address$auto(&(0x7f0000000440)=0x24) r14 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r14, &(0x7f0000000200)='\xfdde\xef\xe7audio1\x00', 0xa3d9) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)={{0x0, 0x0, 0xee00, 0x70a1, 0x4, 0x36a, 0x3}, 0x8, 0x5, 0x1000, 0x9, @inferred, @inferred, 0x9, 0x0, &(0x7f0000000480)="36ff4b28a31e79d0e9551fe6fd3f3fc521275978bd90bbf45c764e4a42c70fa75ccd43b052a152745d37a18ae8e20571", &(0x7f00000004c0)="90b2fba434e09a5694f2c026abf7036b11195b535b6f74cef83f9a46a910366c9863a1066923eced05a53c1e00b022dcb2030839e7ea22977d71290e65383b076ec815206f5f44152951f97c5aacd2a12a2819fdcd0010700d41ca4f612d9e178b35078027a7fc668ad8fbca6cfa9e721c09ee114e76aba0ac4eab1a1d8d1757b8f226c99819b537c7977db67a50f39a1c32bcc1245b3a180c5104ec75418ef328c01be9047dd5be5585e7"}) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r7, @ANYBLOB="00042abd7000fedbdf252100000008001600030000002f023080700022800400278020b011d64638130826b3f42be12608aa8918fb8e4648f5f433e85b56e55050979bbd5afce493374fbccd915eb914f0888594eabbf49e3aa0a091e96894a48f7eb593fbf2cf19ab1443bdfeb9b62ca20c6d6a1751e994ff32040001800400f00008003d00", @ANYRES32=r8, @ANYBLOB='\b\x00K\x00', @ANYRES32=r10, @ANYBLOB="aa00038008004400", @ANYRES32=r11, @ANYBLOB="df85e389491ea4349ce0f6b6911ee38987a472f8a0a55e3baae21c95b79de60322194c58bd547f4ccfb101b6b8c8d815c9d6274bc5a18a09ae39a970254e8d4d2e0a81d47154e5ce8ccf6227ed1ff55c088e3fa8fa75fab4e3e0a4439d67cc1815c7a900000000000020001be537dd9d7a896aa23b621721a06954dbca9de952ad597238c12514d8e125855195ee5923ba7bc91491e6dd1d48eedc2c9f3e5e31eb9d47a2eed342b35dea34923f2b0a22f7f456a903000014009a00ff0100000000000000000000000000010c00038004004380", @ANYRES32=r12, @ANYBLOB="a910b5d0752613d64504f23354c9dc9fa236c577cc308a7c2750ff29e4217ed6456da8affc740b288aa70b6daaa0fb54bd559a16392c6eca1a6acc7908301a57d3dbc3bcda6f32a6156264d48211dcd97a78422fa69394517a27df487ea26be405c2e25d3a4936483eb918883a871771708a9be6aa6959aad49231bb78e3fdad806d91cfdf3e6e9b1d052c59eb07acc70256217d0f8cf2f37823329c5cf6c591ec35f2680fcb3a6dbc76a1b6b7a2c3b9a6a09fb2cf7f7f5446702be94243b3e106a0ebf1587176225ec6be6b4bde7366626752d4d1e69113c2879979719e8b002e0002002f70726f632f7379732f6e65742f697076362f6e656967682f76657468312f756e7265735f716c656e000000050025008200000027062f804700d6007c77768e47aa486cc396c60e12cd37fd277f799df422e3e8b91e8aa68db06f6cff4c7755b87ffe7a21764f039ceddda0207fb3464d4ce6f56d3463fe3558285665dd57006a01cf80e9383446ed5c2684d47a1fd77ed989af2a09180ee26b98ee9230ca646c66e982dfb96407a5d569919945e2de83b53639bbd2c1b227188071a2f01ed55ee8f50517d285acaf091a20d2e2e78dff1b8a165d95b4854abdfd5f1a6db7d3dbbbbc24ada510404b940938b212ca5b1a7be411653164b81a466fe3f240388b8839fa6049641224a9a0de1d9f71845f462b7aea70b4df6193fdba636206cfafd40e156378b300eb0036906eb93feef922f3829c513c7eda9f184ffb50db0fb8fe1a67009dc5e59cef1e20d20defa989e1a4368e399e68f018d13f75ba714283b946d5397ae4978d5ae45c37814c1090ccbb46a77606718fcbab64b80b4f863de6e637bdb456c1f42a6c90abee2a679bb738c6260a4097a3ae6406d67a0841f203e96e3400d97a60e172110c87c4d2b246d0bd4fefe0f817af240054259e3abb5732d8447db3daafcd1b9b1b7a36592ec0e6f49a4b251734000400808024f1056367be987ad2acc937c5000008002200ac14141004008c004eac86cdaaa4f37f33adcc72d20a1c232a4c1fee8203c796c31247f1b662060fed0d855e240c35c64f32421ec69071c071723ad6766966457404284deec4f0066321b230235a15d51a349418165f44bdbc912f23f45e3162069c3a4c453662f504a71d2ac2e8103a6c1049ed064139ac6254bb4ad3acf4498beb54e973a30a85cdd11321b942df53d77aad96f026b9be567882636953ed0b21dd799ae095b85e586dba3fe6a9cef2a817365ef4076b08a1af0994496ad67935fcb7336933050c001b800800ae00", @ANYRES32=r13, @ANYBLOB="1602748008001700", @ANYRES32, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="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"], 0x8c8}}, 0x4000) getsockopt$auto(r2, 0x114, 0x2711, 0xfffffffffffffffc, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/neigh/veth1/unres_qlen\x00', 0x382, 0x0) 3.369204338s ago: executing program 2 (id=691): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r1, 0x4004af07, r0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async, rerun: 64) close_range$auto(0x2, r0, 0x7ff) (async, rerun: 64) unshare$auto(0x40000080) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0) r2 = open(0x0, 0x80400, 0xb5d1af1605322ddc) open_by_handle_at$auto(r2, &(0x7f0000001280)={0x0, 0x2}, 0x6) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) (async) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x1d, 0x0, 0x1ff) 3.208854619s ago: executing program 0 (id=693): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 3.032786246s ago: executing program 1 (id=694): mmap$auto(0x0, 0x8020009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x68b82, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000001480)={0x3, [0x5c20f0b6, 0x5, 0x1, 0x6, 0x69f7]}) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x20004000) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/README\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2000c, 0x8, 0x11, r1, 0x4) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000001200)={0x2, 0x7, 0x8000, 0xffffff14, "ccd94d01f805f3b9774ecc4abfd6d683fd8717be96fe9fea83365d9c1863238c"}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890b, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r3 = io_uring_setup$auto(0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000040)={0x8001, 0x6, 0x9, @raw=0x5, &(0x7f0000000000)={@raw=0x7, 0x1, 0x5b, 0x6, "24ff2c34b756ed449ac1824329cc0d20805da92b52ac27d36c08905804fc5ed876c67808a9168c1dcf7ec67e", @raw=0xffff}, "d24ca3747bc9aee135c46e7941fd3a45fe05be1303d3e9ce9444a47eed5d5931819908376976ffc55fae931847b37aa22318"}) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r5, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 2.810582875s ago: executing program 3 (id=695): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x9, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0x8c0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121742, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5a) lsetxattr$auto(0x0, &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000001340), 0x2, 0x0) 2.39300668s ago: executing program 3 (id=696): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x00\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\xf9y\xc7p\xf1w\xbe\xde\xe8\xc3\x01#\xcc\tF\xb6\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1\xd5\x1e\x8f\t\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x85\x00\x00\x00\xe2E\x00\x00-a\xb6n\xbc\xb4=\xf8\xce\x01\x1f]\x85|\xce\xd7\xff\xff\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\x00\x80\x00\x00\xe9e\xe5\x80\x1c\x02\"\xa7&8U\xfd\xdc\x15\xae\xfa5\xb8}\x0e\xb4:\x91\xbb5\xd3{\xb2\xd0\xc0\x93=\xf8E\xceO\x1e\xd5\x8f\xdf\xaa\x1c\xfd\xb0h\xd8\xbc\xecA\xa6\xde\xd1=\xfd)d\x8f\vk\x1c+\xf7, \xf8]\xb3\xe9B\x02\f\'\xcf0\x06', 0x1ff) socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.304084521s ago: executing program 2 (id=697): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setpriority$auto_PRIO_USER(0x2, 0x0, 0x5) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) sendfile$auto(0x3, r0, 0x0, 0x2) madvise$auto(0x0, 0x2003f0, 0x2) 2.137122135s ago: executing program 0 (id=698): r0 = socket(0x2, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/mm/lru_gen/enabled\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000000c0)='Y\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xe21\xdeD\x82\xed\xdbJ\xda^\xceY\xa4\xbe\x06\x7fKE\xa2\xa5\v\"e\xe4\xb9\xe2\t\a_\xe5\xd0\xfd\xbb\xdb\xba{4\xba\x85\x85\x18\xbbQ\x85\xfeG<\xdd\xb1XS\xc3\xaa\xce\xf9\x87\xc1\x18\xb48\x7f\xec\x94\\5\x98\x1fl\x9d\xe0m\'\xc2v9\xce\x14d3\xf4M\xe3\xf9\x1bY\x9c\xbei|\xd0\xa7Q\x03?\x97(b\xb9\x8bK$\x96%\x9aBUw\xd9\f\xd8h\x96u\xe8\xf4@\xdb\xc7\xfe\xd7\xa0\n0\xbc\x82\xea', 0x7) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @local}, 0x6a) chmod$auto(&(0x7f0000000040)=':,\x00', 0x3adc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x1ff, 0x200) io_uring_register$auto(0xffffffffffffffff, 0x25, 0x0, 0x80000001) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/kexec_load_limit_reboot\x00', 0x22400, 0x0) lseek$auto(r0, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r0, 0x0, 0x40010) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 1.856315583s ago: executing program 0 (id=699): mmap$auto(0x0, 0x8020009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x68b82, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000001480)={0x3, [0x5c20f0b6, 0x5, 0x1, 0x6, 0x69f7]}) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x20004000) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/README\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2000c, 0x8, 0x11, r1, 0x4) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000001200)={0x2, 0x7, 0x8000, 0xffffff14, "ccd94d01f805f3b9774ecc4abfd6d683fd8717be96fe9fea83365d9c1863238c"}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890b, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r3 = io_uring_setup$auto(0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000040)={0x8001, 0x6, 0x9, @raw=0x5, &(0x7f0000000000)={@raw=0x7, 0x1, 0x5b, 0x6, "24ff2c34b756ed449ac1824329cc0d20805da92b52ac27d36c08905804fc5ed876c67808a9168c1dcf7ec67e", @raw=0xffff}, "d24ca3747bc9aee135c46e7941fd3a45fe05be1303d3e9ce9444a47eed5d5931819908376976ffc55fae931847b37aa22318"}) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r5, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 1.689908183s ago: executing program 1 (id=700): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7fffffffffffffff) shmget$auto(0x5, 0x7, 0xfffffff7) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fcntl$auto_F_SETSIG(r0, 0xa, 0x80000001) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x20013, 0x101, &(0x7f0000000000)=@ethernet={0x6, @local}, 0x1c) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(0x0, r5) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="59030000", @ANYRES16=r7, @ANYBLOB], 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) sendmsg$auto_NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_INDOOR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f0000000500)={0x10e8, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0xbf, 0xfa, "f0f711997ed5caeafbfa545ef911239d4ebd156dec731010eba919b0aadbe1ede667fcf08de47c2f3f96ed6ec8ed80245fd0d3276c9ea86a2b79dd19b204f616f4ea3c7248d4de13ff93473bc1586c2e44f8db0d657fdc191fb889ec7828eab1742b49fc24c6b0d2bdfbf95c0fcd952c944f46aa22807368e9dbaf1aab8e424d013f85bdbd3331a23e675b0a8c24eebb9084b9d96d15a92eab8bdff8f481227d33bb0b24b3d3806c25610d48480ce96455a7c67684601418229ece"}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xff4, 0xcd, "bce5bc64bf4fa7daec052495685eb004a58256df5d2e08750bb41bd7d35baf43e8c94ae19e931e724dda762ad70d76fd2efe87cd8557c467b50c29514b1a60806a597aa3c3c1939eaf27b6ea20302620824db52f0f931f7dfe449def3dfbf0f0ec9448cc4d8256af2b5d20fac58f72e9a15afaf06f1c949c3e85c7fb7707d0d18046e28f803b6b06a860054e372d0fc628bedfe4f4a32dd1ec7e840178086f7cfbe9e4fbc20d7fcf2e8000913a1a0b3f7996c71095178f91745552d9cb675e8822ed918a333d62539d992d0a2482f9c4002fa4f66b350089a4d4da21a833254a8332b474bd6f810ef6851ff253d145281be6fb0bf431dad5ba1b62f7c46c65179823004a57c9840df467010e187f11c9a3708bd0e721b63722b047dafd7389f5ef2205f652d4b8846dada34e413d5d044578f07cc0ba330f5148a089932c3fe284057a85813bbe8eaa847214c847dd959fe74ce2397e29d4e07d6753d9d893705b8adbe22dace42f419b048741fd551983f7161c5909921240caef96c56e242aeb033ac8904c5988ea24c357cdabed73cb713ef329fe1035f0a45a59ac313e3364767bf552e1173ee2d7279db122e35069e251e1eb50f1fcff6d17ee0003088b63d8679b3701b637fba0cf2ff37d6c549f17d7cefd7c1141679d2c7445e6db65f244288004d0b5dca2c48d640e215b0ffbf75efd71e13632e0b381194e639fdb54af3542b516b14d3ea4f711116ffaa8649963850715fdb5b033ce5c18a5a3ff8533f545a955376065cd3b26d3f2f5ab7322de101a06a739f1920eb096894947699b1fb6f2441a482774e66fd80c7570cb4d0b1eeeb93e679fc9e6acccdeea997a5c4b0b31e15815da0413cfb28adc38f3b16939103521f0e45c72d7e3f0403de2ced9b5af787be0ecb7f4c7a33c6c532973d0c01f54b30e9514760f712d2c58cc461401b5bc9cc05da78e7b89d351c1811aa58b88715f15837fc76499a112d0e5b2ae9e6441001d5a2068dc7d73eda9e65ec8d7b7cb9ef4bcc39c4736c34fec9b81a657096883b9a26ceb64a255ad0323d2291d2332a2a15a26c5056c7e9d57f9e0f2210bf1b164b3e145bb3459a318721cbfcb5945a726a3907ec3796ff71c95f62497c36a699b4fdd3df3de1269a32f292a607aa9dedc3440efe45af93c78de27979b809c149dbe10846282dcb1642d64a713e7cd1ad5648a6baadc3d230e94cc9762e872c632cea1d7ff2cdea78d0a052d322de8187ac622df11433b80cc5af9a8bb0dc9ba8e9d87abb31441f486b5d24b996fe387cd288d4087f4e31ef059a3f952fbdee25e9207293f564fc3cb3f18284e7fde917d3ec4fb67531c43ac4b5dfcd3376ca1a0b087070861eeba96c7fcce08a8f75341e849b62e4ba29ed9ac2126582311548818801a69f324361a5dda75d0561a9e735efcc69895e08911799ec77bff3a70847982c4772850cf063a4bc2dd72fcedb0d2cacf45bf3ce506f0dab7f7cd0f7ca3c672c07141e6c497336dc42213d4abd1387c5283d9ba775be858a92f31308680a0c1a5fe05b60938703c25087db6cef5513f2ad3c521b8061463a75d2a991a587a5c9b7c19d6e688a8f7519f78e52876659dfdf0a4cfdd2cc1ff4ad68865487e480249b20338e7f3ee3909c2c1b502ab21ab38423c5e885e22d5883dde8a2cae410efd18946a54ea3e64c2e70b3a45822879b4f51d40e83d288a24592fd8f46c825293adf13054375eb4960d08595d85fd235eebf8a22c9d65a0b27e8024d740f8dc11596ab7f6c74d7de146add71fe99c8f8f8c971f7c026072db2a8cf3dbfb1bec784f6be7a10a2b1f2950ec5e50f30340e75d193b21b4b9e8ea261f731a48d03aa74db9ade5cc64b9b16fc26b04396663baf63490d35f18dac5cd8a978e4d3d24e0f4d986bd9a2e1176cd61d3d2e1a766c7127ca20e0218625d30f92e1b81d696fb5e2c683a2b22d32e00a2d2bfbee9f81f15ec11f37c7ecd8f1509e1817753a390dc020e730d56eb5fc58066417dbf38e6a4ac40b1c51b86d58a5ed552c1bca50dbb1eeec2b5c3cae9700bf95f9038adb9d956b878e8b6d6c7ab5ad16d14230078e0d3c4cef24356bd51424852ba8e6164d7e972fcaf30066fa4d6c3e7fa0ca8d6722ced29e26fb03a226207f100cd3964053d88a74f6b47cfdd249035b2f1c5cee6db5aebbb1b88c15b091e7019bf1753cb6baf93ec6728f261bc8dfe017a0b49484cd4d2e8b187f1921d73b402918768f2ef578792ed8b11d48116f41cb981ccad1b6baa313a8daa1be7290bec4a03bc76d462983739f58c7508d2574c646bddf0624ba9484edb40d02de7dfed4ca6dbbb9a126f2a05dacbfc101f758631a96961fbb0a827e942efa3e9b5b2b9f4a6276a967a6a5b66001a90f607e7e23f6537ec5ab5782102418e52402dcaa401e678d3dcd7f5d6186a27140a2651daecd429d3af3d4020e008753f908348d3b221f01db0b1f18ff28e2d46b78ac79bbcd8146710d066ebe839c93159d96e08a645ea13d0b44c4cb7f8ee19ac8eb6330fca52f9709172e5b42e2eda176a135e2ba5bbeb27c49813463fe2f134fd8af26c53c445fcc0e6f2a1fd35fbba1913fc24d9f641eb78713789630671b6f5b4acdfa3e1d3a9e61ed40fcfd2beaca0ff91ab490d64cc976e0aa315b8370ec22426d8c253285e766cc456634579d359c55b8d4bc9f62b8400623138016043482fb028f3f394687fded4e3b64a8d671458dbe9eba09ef1ce10c102ae107a3a7803f0ddd59a01f15315986ddccd7b64c9e98f480677b38f68b79184607188815baea13afc44a53c160218aa476bc9e6c9e43ad20cea16e5a3b9bfee6f1d7e2111fb9c7743fdf32b24bf487a5154adadf80887d4a37cc0a8c1958171bec42806ac9b2aaeb4000902936a0f16a169f9120c1eefe0c8a3a9b1e87a28bb7cd989ac847f375ea4868faff5b7dc690491243a87b71953d02baeb8f96f16f911a10cbea21420a5fb4b222f155ae0e8c4866879a7f582e644a81e5b5136891bdfacf74fe253f1577a2fe9beb75389926571c1567edce43e2c8ebed8f263d4ed49c40207d25b4066d69415cafe6cb2ea22ca1fd4f74ac13791e6e3ebf012cb60f58bcba45c31125cb698bb099b004a4fadc9f8a345644df49a4c6f638a8a4e8ef951d64ebb154dfa25f7daff38b1056cc4309e6f6149fa4815b7deb8ab4107f375437be95b4f15e43c6de6c78ecba201dd120733d3cbef429ead936d9580254895e24ab594da47ec0b8fd77520e297c200100455d1509c102787dde1f76a83793db5731f64e60bc40a9c53e6f2095b3131bc6a0cf45731584ec13741a184a96a974a48af012274f267383b7e1ee45850c242fae52dabba65900f1cd77b6112d8d7dd33f630db044c383d19b0cd37eab74ab9c46262407f97136556ae57cb9ac97556a5bee171483802728b7fbee405d122457f1c1acf80195c177f8e3b36f516f094801588a42a64196490c90ac4229b32b4376ca4eddd5b6a1a645277a6a36007e5d8bbc86c3d1047c3aae6d04fe1b2d473252f1316a298c41c235e009be23e6e2573e69f1271ee3caa205e967f25be3d03ab904137390084da5fb5d74fcd5112584d7f37c3a9c4dca09fe7832eed01161146149e23234e64be1e402db267f83488916004738a9855cdc4f4e31014cae4079b3c049fb917ae2081f79fb1f7ca4eafdd7c0791cf745542ed5b01e9fffbbf44f741b789f6186e28e0fd13a0561614ea49a78057596f669a11b0428a77b341d0ef3f1420bbcdf0e1ef012bf6f36790d46649e1999e231da3154b6533359e5a9a902c76fac41964b02a84efd5dd16732e0421313a747b657f4794e91c1eb99c590e280b0a8a6e0d37bfe2ff94e001472a0319c09545578a54d91ca6013909d2c93b5697adaa6a9f069b9c49a43c2b77d77af78a547d782cdae621cab28605088df96b31604a03d51f96107062df1a4909a707c15493ef993fe3fbb5229f7b1b0afc92e485b743104c042971d2bce653ec5f0129eb1e49453ebe57f1331f2c28d3f8f2a9ffbba05033856f35eb038a0e60f0f78c1983f58595e70fc242b3d5dd55e3b047f7d36d22e9b083db263194dd0afa8c1cff7601a7469d01e0ab63562719401af71d6881f7437b091ac604b469b5f0542620e4c56944c8e20b86282423fbe15ba113f1ede455e4b6d00f9ecce9a24a924febed2c519f2f49694826a0586e1431cceca0048a8257c2f5fbf4f597cf4f3e030f57c3ab26e88d19ea4c2bba0c8c655a3f2c58bce00230e740caae5f78881cc7e0e6addd2b8559804f765e71f6f495c60a6ed990ac682257c0c8779988a3810f5bc5636766e9a1d592fd12cf81754bf59faffe09fe925ba15982a760f3c5c5ff2295ff07ba32d4785384905a781b7318cc84e265689dbef3d4718d519cb997051bedf74a71921cef5baa418db9f0322ec61a07cfe54abf5e9094c62e2bd51a74f0bbb00ec1d033b1c82848a5231e98b03f4ddac0c686cab347a397deb87a448e81b5be4ebb385f1a2f91e9bb05f2f4f3df3793e5ea3c6894035176d40077e8ec7087472fd1b0e5a0cf0a5d11e1e3021c46035c54319d43e9c05e3b8ba1159589265b069e9c32994d6daf36c6870f645ebedd48a59b2813840d51ddff21566dfff8624afbd12c68641cdf2449efa5ff178cf94b5e08af742f5e65e98d751725cf3b86d358d741513e767a65d0a8b1ae8c9acad39a2748e835b694453cd29b35e03af63952e21a385cdb6255709c4a5d73a98c3505a2567c79b57efb68d470a6c79545b0bc4b8a677179da791b4b07ebf84f1ec317e182037fcf75f44a35c1b286c2b5b447b3e0ffe1fd0bafd12abeb99f2c34cbfd12eb42056daf7c3404254783cf8893197f1d78fed373cc6ad6ab2443492106f1d42a6d4b1db99f4aacfc7e0e76d4bd28cdfaffab47d92fccb8b1bedfc0deaa31e0548c0cd264e7670b6eff019248aba2f2337dee4c168655cbbc0cb2f2a7524a1aa64c5f512118ecb6db36844384478c6d7d3499ac3175d8e07cf780f1e6479fdf88fc7702e9c9c79382f4ea05b94beb8d5119bc55febe58a1a7e411703f1155af9a374d336c123420e6b5bee35e76f983b562d381e14e52c838f5750d92b21a55130279268ac1cdf8b9123e59566a608bfcd7cbef14eff15c6937b0356fd65d256de1283af17302becd1647bdb28629008257967de24575c081b65135c0bfb2d90e825864a46ba396efbddb352c3b852fe764958afe09f44f773e1408b1edfbb63e114c6f60c468246eb03f31416c7784f11ac8f55e47593ade2b45287ea4a2728c588f3f0e075aa1d326af9b71ec6b01130655341a0a0b85a31f3f4f6d087128bde7c492e4f53fcf0f4a8e68b0f50d8279c07bf03bdd1edeabce15bcd76a32c9d61138eb2306754fc969680838151950c528cc815ffaabab959e3aee610e7c88d03bd91b91895f6d37310a6d76dead8849e7a4fc693299438445749b2b03112296396f255ee070a83637eed7578d8446be771f584bd3b172f8d19f38a5b57210ff2b3631d9a165098139723609c8ad9f77ac58a39fc21bb36c59b111904dad71e9b70d2ac31f1711f661f0476f13a1cd126b5dbab91507eef46267686b31dedcac6019148566de65f53fd359b96e39861eaf8b26e97c0f6f0f66ff5ef4584dfa8770ea3ee9a97d1aed64edfadcc55783716d569befdf31185a7352e4666eff5644197405b04e0e30cd27eec7e286888fa0bbba375f"}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}]}, 0x10e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) listen$auto(0x3, 0x81) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x7, 0x2) mincore$auto(0x1000, 0x3fffffe, 0x0) write$auto_rb_simple_fops_trace(r3, &(0x7f0000000400)="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", 0xfc) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) getsockopt$auto(0xffffffffffffffff, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) 1.227292944s ago: executing program 3 (id=701): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ftruncate$auto(r0, 0xa0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x9c9c, 0xdf, 0x9b72, 0x7, 0x28000) read$auto(r1, 0x0, 0x200000000003) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) bpf$auto(0x17, &(0x7f0000000040)=@bpf_attr_7={@btf_id=0x3, 0xe, 0xed12000}, 0x35) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x1d1440, 0x0) mmap$auto(0x0, 0x81, 0x4010000000df, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000006c0), 0x20040, 0x0) readv$auto(r3, &(0x7f00000007c0)={0x0, 0x5}, 0x5) (async) close_range$auto(r0, r1, 0x0) (async) r4 = socket(0x1d, 0x2, 0x6) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x818) (async) r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r5, 0x541c, r7) (async) r8 = open(0x0, 0x200001, 0xb5d1af1605322dff) (async) mprotect$auto(0x200000000001, 0x806121, 0x4) futex$auto(0x0, 0x9, 0x6, &(0x7f0000000040)={0xb, 0x401}, 0x0, 0x4) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) syz_clone3(&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) (async) io_uring_register$auto_IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0xcd) r9 = socket(0x3, 0x3, 0x3a) close_range$auto(0xffffffffffffffff, r9, 0x0) (async) socket(0x1e, 0xa, 0x0) (async) socket(0x1e, 0x4, 0x0) 845.444368ms ago: executing program 2 (id=702): mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0x6, 0x1, 0x106) r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, 0x0, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) read$auto(r1, 0x0, 0x4) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x85, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2000040080000004, 0x1) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0x103341, 0x0) write$auto(r3, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x68) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x20000000) r4 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r4, &(0x7f0000000240)=@generic={0x11, "0000000000000000d29e006300"}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r5) ioctl$auto_EVIOCGID(r2, 0x80084502, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7}) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x400c0, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x5}, 0x3) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x141000, 0x0) 796.371671ms ago: executing program 3 (id=703): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x48000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(0x0, 0x161340, 0x130) statx$auto(r0, 0x0, 0xb003, 0xda97, 0x0) mmap$auto(0x0, 0x4, 0x4800000001df, 0x19, 0x401, 0x300000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x7000000, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) landlock_create_ruleset$auto(0x0, 0x100, 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 538.872398ms ago: executing program 3 (id=704): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x9, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0x8c0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121742, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5a) lsetxattr$auto(0x0, &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000001340), 0x2, 0x0) 227.698591ms ago: executing program 0 (id=705): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x40080, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(0xffffffffffffffff, 0x17d2, &(0x7f0000000080)='/\x00\x00\x00\x00o\xd46', 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x800040000000ebe, 0xfffffffffffffff6, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xa402, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) mprotect$auto(0x0, 0x8000000000000001, 0x8) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)={0xa, 0x4ccc0000000, 0x3, 0x9}) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)) socket(0xa, 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fb5bdf25020000710800030000000000050004e1100000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/ptp/ptp0/pps_available\x00', 0x0, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x2000, 0x0) pread64$auto(r4, 0x0, 0xff, 0x100000001) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001100)=""/4105, 0x1009) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) 96.40394ms ago: executing program 2 (id=706): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.export/content\x00', 0x2, 0x0) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880) (async) timer_create$auto(0x9, 0x0, 0x0) (async) read$auto(0x3, 0x0, 0x8080) (async) socket(0xa, 0x1, 0x100) (async) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) (async) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) process_mrelease$auto(0xffffffffffffffff, 0xa) write$auto(0x3, 0x0, 0x100082) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vhci_hcd.4/usb18/18-0:1.0/usb18-port3/location\x00', 0x0, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x54) semctl$auto_SETALL(0x9, 0xd, 0x11, 0x8) read$auto(0x3, 0x0, 0x7fffffff) (async) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/163, 0xa3) 0s ago: executing program 3 (id=707): r0 = socket(0x2, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/mm/lru_gen/enabled\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000000c0)='Y\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xe21\xdeD\x82\xed\xdbJ\xda^\xceY\xa4\xbe\x06\x7fKE\xa2\xa5\v\"e\xe4\xb9\xe2\t\a_\xe5\xd0\xfd\xbb\xdb\xba{4\xba\x85\x85\x18\xbbQ\x85\xfeG<\xdd\xb1XS\xc3\xaa\xce\xf9\x87\xc1\x18\xb48\x7f\xec\x94\\5\x98\x1fl\x9d\xe0m\'\xc2v9\xce\x14d3\xf4M\xe3\xf9\x1bY\x9c\xbei|\xd0\xa7Q\x03?\x97(b\xb9\x8bK$\x96%\x9aBUw\xd9\f\xd8h\x96u\xe8\xf4@\xdb\xc7\xfe\xd7\xa0\n0\xbc\x82\xea', 0x7) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @local}, 0x6a) chmod$auto(&(0x7f0000000040)=':,\x00', 0x3adc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = timerfd_create$auto(0x1ff, 0x200) io_uring_register$auto(0xffffffffffffffff, 0x25, 0x0, 0x80000001) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/kexec_load_limit_reboot\x00', 0x22400, 0x0) lseek$auto(r0, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FAMILY={0x5, 0xd, 0xfd}, @GTPA_I_TEI={0x8, 0x8, 0xa}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}}, @GTPA_FAMILY={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) kernel console output (not intermixed with test programs): 89.247048][ T5630] hsr_slave_0: entered promiscuous mode [ 89.253484][ T5630] hsr_slave_1: entered promiscuous mode [ 89.266673][ T5628] hsr_slave_0: entered promiscuous mode [ 89.272990][ T5628] hsr_slave_1: entered promiscuous mode [ 89.279812][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 89.285789][ T5628] Cannot create hsr debugfs directory [ 89.381375][ T5629] hsr_slave_0: entered promiscuous mode [ 89.388016][ T5629] hsr_slave_1: entered promiscuous mode [ 89.394166][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 89.400011][ T5629] Cannot create hsr debugfs directory [ 89.413149][ T5631] hsr_slave_0: entered promiscuous mode [ 89.419733][ T5631] hsr_slave_1: entered promiscuous mode [ 89.426455][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 89.432287][ T5631] Cannot create hsr debugfs directory [ 89.896242][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.910699][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.919113][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.935459][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.943643][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.953706][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.963286][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.974144][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.053495][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.064705][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.072931][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.083585][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.093171][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.105342][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.118495][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.130873][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.220830][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.233304][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.246215][ T5644] Bluetooth: hci3: command tx timeout [ 90.259832][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.271646][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.282007][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.292684][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.301572][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.312399][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.325261][ T5644] Bluetooth: hci0: command tx timeout [ 90.325516][ T4946] Bluetooth: hci2: command tx timeout [ 90.330769][ T50] Bluetooth: hci1: command tx timeout [ 90.432869][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.442955][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.452348][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.462410][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.471273][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.481130][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.497343][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.507587][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.574092][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.637171][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.673848][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.706449][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.731298][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.738895][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.748895][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.756082][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.784168][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.791794][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.826478][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.833635][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.857058][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.891568][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.947876][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.958847][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.991770][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.998942][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.008909][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.016164][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.068220][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.075518][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.085147][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.092377][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.277097][ T9] cfg80211: failed to load regulatory.db [ 92.327266][ T50] Bluetooth: hci3: command tx timeout [ 92.340864][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.405099][ T5644] Bluetooth: hci1: command tx timeout [ 92.405124][ T4946] Bluetooth: hci0: command tx timeout [ 92.417310][ T50] Bluetooth: hci2: command tx timeout [ 92.539104][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.570152][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.582088][ T5628] veth0_vlan: entered promiscuous mode [ 92.603781][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.635183][ T5628] veth1_vlan: entered promiscuous mode [ 92.743687][ T5631] veth0_vlan: entered promiscuous mode [ 92.763638][ T5630] veth0_vlan: entered promiscuous mode [ 92.777299][ T5629] veth0_vlan: entered promiscuous mode [ 92.792296][ T5628] veth0_macvtap: entered promiscuous mode [ 92.807408][ T5631] veth1_vlan: entered promiscuous mode [ 92.818377][ T5629] veth1_vlan: entered promiscuous mode [ 92.828600][ T5628] veth1_macvtap: entered promiscuous mode [ 92.839713][ T5630] veth1_vlan: entered promiscuous mode [ 92.899990][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.922713][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.941825][ T5629] veth0_macvtap: entered promiscuous mode [ 92.980816][ T5629] veth1_macvtap: entered promiscuous mode [ 92.991736][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.002582][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.016231][ T5631] veth0_macvtap: entered promiscuous mode [ 93.030935][ T5630] veth0_macvtap: entered promiscuous mode [ 93.038170][ T3375] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.050329][ T3375] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.062842][ T5631] veth1_macvtap: entered promiscuous mode [ 93.087605][ T5630] veth1_macvtap: entered promiscuous mode [ 93.118029][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.156714][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.172577][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.198253][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.227712][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.240671][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.250338][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.261992][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.277568][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.295841][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.352921][ T146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.362055][ T146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.379084][ T146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.388247][ T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.399151][ T146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.426336][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.430067][ T146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.436181][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.448967][ T146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.473800][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.550274][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.561183][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.612531][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.627433][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.691822][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.715309][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.722958][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.738663][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.756382][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.849268][ T3272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.869393][ T3272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.975609][ T3272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.995590][ T3272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.100357][ T3375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.127767][ T3375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.405448][ T5644] Bluetooth: hci3: command tx timeout [ 94.484322][ T5644] Bluetooth: hci1: command tx timeout [ 94.489983][ T50] Bluetooth: hci2: command tx timeout [ 94.490001][ T4946] Bluetooth: hci0: command tx timeout [ 95.321275][ T5797] FAULT_INJECTION: forcing a failure. [ 95.321275][ T5797] name failslab, interval 1, probability 0, space 0, times 1 [ 95.343596][ T5797] CPU: 1 UID: 0 PID: 5797 Comm: syz.0.5 Not tainted syzkaller #0 PREEMPT(full) [ 95.343637][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.343659][ T5797] Call Trace: [ 95.343669][ T5797] [ 95.343679][ T5797] dump_stack_lvl+0x100/0x190 [ 95.343714][ T5797] should_fail_ex.cold+0x5/0xa [ 95.343739][ T5797] should_failslab+0xc2/0x120 [ 95.343762][ T5797] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 95.343791][ T5797] ? __mpol_dup+0x74/0x390 [ 95.343819][ T5797] __mpol_dup+0x74/0x390 [ 95.343842][ T5797] ? __pfx___mpol_dup+0x10/0x10 [ 95.343872][ T5797] mbind_range+0x2ad/0x550 [ 95.343906][ T5797] do_mbind+0x7dc/0xfd0 [ 95.343937][ T5797] ? __pfx_do_mbind+0x10/0x10 [ 95.343962][ T5797] ? do_sys_openat2+0x1b4/0x1e0 [ 95.344001][ T5797] ? __pfx_get_nodes+0x10/0x10 [ 95.344026][ T5797] kernel_mbind+0x1b7/0x200 [ 95.344053][ T5797] ? __pfx_kernel_mbind+0x10/0x10 [ 95.344081][ T5797] ? rcu_is_watching+0x12/0xc0 [ 95.344107][ T5797] do_syscall_64+0x10b/0xf80 [ 95.344129][ T5797] ? clear_bhb_loop+0x40/0x90 [ 95.344151][ T5797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.344169][ T5797] RIP: 0033:0x7f651719cdd9 [ 95.344190][ T5797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.344213][ T5797] RSP: 002b:00007f651807a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 95.344239][ T5797] RAX: ffffffffffffffda RBX: 00007f6517415fa0 RCX: 00007f651719cdd9 [ 95.344257][ T5797] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 95.344272][ T5797] RBP: 00007f6517232d69 R08: 0000000000000006 R09: 0000000000000002 [ 95.344289][ T5797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.344305][ T5797] R13: 00007f6517416038 R14: 00007f6517415fa0 R15: 00007ffd8b064df8 [ 95.344345][ T5797] [ 95.549672][ T5816] process 'syz.1.7' launched '/dev/fd/7' with NULL argv: empty string added [ 95.772300][ T5820] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.651193][ T5827] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.718521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 98.663099][ T5838] Process accounting resumed [ 101.273019][ T5867] FAULT_INJECTION: forcing a failure. [ 101.273019][ T5867] name fail_futex, interval 1, probability 0, space 0, times 1 [ 101.331767][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: syz.1.16 Not tainted syzkaller #0 PREEMPT(full) [ 101.331796][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.331806][ T5867] Call Trace: [ 101.331813][ T5867] [ 101.331820][ T5867] dump_stack_lvl+0x100/0x190 [ 101.331844][ T5867] should_fail_ex.cold+0x5/0xa [ 101.331868][ T5867] get_futex_key+0x1d2/0x1510 [ 101.331889][ T5867] ? __pfx_get_futex_key+0x10/0x10 [ 101.331906][ T5867] ? find_held_lock+0x2b/0x80 [ 101.331930][ T5867] ? futex_wake+0x456/0x530 [ 101.331958][ T5867] futex_wake+0xea/0x530 [ 101.331985][ T5867] ? __pfx_futex_wake+0x10/0x10 [ 101.332010][ T5867] ? __lock_acquire+0x4a5/0x2630 [ 101.332032][ T5867] do_futex+0x32b/0x350 [ 101.332052][ T5867] ? __pfx_do_futex+0x10/0x10 [ 101.332073][ T5867] ? find_held_lock+0x2b/0x80 [ 101.332099][ T5867] __x64_sys_futex+0x34f/0x4d0 [ 101.332120][ T5867] ? __fget_files+0x21f/0x3d0 [ 101.332141][ T5867] ? __pfx___x64_sys_futex+0x10/0x10 [ 101.332165][ T5867] ? rcu_is_watching+0x12/0xc0 [ 101.332189][ T5867] do_syscall_64+0x10b/0xf80 [ 101.332210][ T5867] ? clear_bhb_loop+0x40/0x90 [ 101.332232][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.332250][ T5867] RIP: 0033:0x7f51b479cdd9 [ 101.332266][ T5867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.332282][ T5867] RSP: 002b:00007f51b56860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.332300][ T5867] RAX: ffffffffffffffda RBX: 00007f51b4a15fa8 RCX: 00007f51b479cdd9 [ 101.332311][ T5867] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f51b4a15fac [ 101.332321][ T5867] RBP: 00007f51b4a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 101.332332][ T5867] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 101.332342][ T5867] R13: 00007f51b4a16038 R14: 00007ffd5fcd8490 R15: 00007ffd5fcd8578 [ 101.332363][ T5867] [ 102.833127][ T5879] FAULT_INJECTION: forcing a failure. [ 102.833127][ T5879] name failslab, interval 1, probability 0, space 0, times 0 [ 102.858267][ T5879] CPU: 0 UID: 0 PID: 5879 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 102.858308][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.858324][ T5879] Call Trace: [ 102.858334][ T5879] [ 102.858344][ T5879] dump_stack_lvl+0x100/0x190 [ 102.858382][ T5879] should_fail_ex.cold+0x5/0xa [ 102.858419][ T5879] should_failslab+0xc2/0x120 [ 102.858453][ T5879] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 102.858496][ T5879] ? taskstats_exit+0x67b/0xc10 [ 102.858534][ T5879] ? rcu_is_watching+0x12/0xc0 [ 102.858575][ T5879] taskstats_exit+0x67b/0xc10 [ 102.858612][ T5879] ? __pfx_acct_update_integrals+0x10/0x10 [ 102.858652][ T5879] ? __pfx_taskstats_exit+0x10/0x10 [ 102.858692][ T5879] ? rcu_read_lock_any_held+0x6a/0xa0 [ 102.858727][ T5879] ? exit_signals+0x395/0xaf0 [ 102.858776][ T5879] do_exit+0x65c/0x2a60 [ 102.858825][ T5879] ? __pfx_do_exit+0x10/0x10 [ 102.858867][ T5879] ? do_raw_spin_lock+0x128/0x260 [ 102.858898][ T5879] ? find_held_lock+0x2b/0x80 [ 102.858930][ T5879] ? get_signal+0x7e0/0x21e0 [ 102.858967][ T5879] do_group_exit+0xd5/0x2a0 [ 102.859010][ T5879] get_signal+0x1ec7/0x21e0 [ 102.859059][ T5879] ? __pfx_get_signal+0x10/0x10 [ 102.859096][ T5879] ? do_futex+0x192/0x350 [ 102.859130][ T5879] arch_do_signal_or_restart+0x91/0x770 [ 102.859172][ T5879] ? find_held_lock+0x2b/0x80 [ 102.859207][ T5879] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 102.859268][ T5879] ? __pfx___x64_sys_futex+0x10/0x10 [ 102.859301][ T5879] ? rcu_is_watching+0x12/0xc0 [ 102.859337][ T5879] exit_to_user_mode_loop+0x86/0x4a0 [ 102.859371][ T5879] ? do_syscall_64+0x519/0xf80 [ 102.859409][ T5879] do_syscall_64+0x6f2/0xf80 [ 102.859442][ T5879] ? clear_bhb_loop+0x40/0x90 [ 102.859478][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.859507][ T5879] RIP: 0033:0x7ffa4af9cdd9 [ 102.859533][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.859567][ T5879] RSP: 002b:00007ffa4bdf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.859597][ T5879] RAX: fffffffffffffe00 RBX: 00007ffa4b215fa8 RCX: 00007ffa4af9cdd9 [ 102.859616][ T5879] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa4b215fa8 [ 102.859634][ T5879] RBP: 00007ffa4b215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 102.859651][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.859668][ T5879] R13: 00007ffa4b216038 R14: 00007ffc3dfd4180 R15: 00007ffc3dfd4268 [ 102.859707][ T5879] [ 103.315559][ T5891] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 103.335802][ T5875] random: crng reseeded on system resumption [ 105.776414][ T5907] FAULT_INJECTION: forcing a failure. [ 105.776414][ T5907] name fail_futex, interval 1, probability 0, space 0, times 0 [ 105.805761][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: syz.1.25 Not tainted syzkaller #0 PREEMPT(full) [ 105.805804][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.805822][ T5907] Call Trace: [ 105.805834][ T5907] [ 105.805845][ T5907] dump_stack_lvl+0x100/0x190 [ 105.805883][ T5907] should_fail_ex.cold+0x5/0xa [ 105.805918][ T5907] get_futex_key+0x1d2/0x1510 [ 105.805952][ T5907] ? __pfx_get_futex_key+0x10/0x10 [ 105.805994][ T5907] futex_wake+0xea/0x530 [ 105.806034][ T5907] ? rcu_is_watching+0x12/0xc0 [ 105.806073][ T5907] ? __pfx_futex_wake+0x10/0x10 [ 105.806117][ T5907] ? putname+0xb1/0x110 [ 105.806154][ T5907] ? kmem_cache_free+0x127/0x6c0 [ 105.806208][ T5907] do_futex+0x32b/0x350 [ 105.806243][ T5907] ? __pfx_do_futex+0x10/0x10 [ 105.806274][ T5907] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.806323][ T5907] ? __fget_files+0x21f/0x3d0 [ 105.806363][ T5907] __x64_sys_futex+0x34f/0x4d0 [ 105.806399][ T5907] ? __x64_sys_openat+0x12d/0x210 [ 105.806446][ T5907] ? __pfx___x64_sys_futex+0x10/0x10 [ 105.806488][ T5907] ? rcu_is_watching+0x12/0xc0 [ 105.806539][ T5907] do_syscall_64+0x10b/0xf80 [ 105.806575][ T5907] ? clear_bhb_loop+0x40/0x90 [ 105.806614][ T5907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.806646][ T5907] RIP: 0033:0x7f51b479cdd9 [ 105.806673][ T5907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.806702][ T5907] RSP: 002b:00007f51b56860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.806733][ T5907] RAX: ffffffffffffffda RBX: 00007f51b4a15fa8 RCX: 00007f51b479cdd9 [ 105.806752][ T5907] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f51b4a15fac [ 105.806770][ T5907] RBP: 00007f51b4a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 105.806788][ T5907] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 105.806806][ T5907] R13: 00007f51b4a16038 R14: 00007ffd5fcd8490 R15: 00007ffd5fcd8578 [ 105.806846][ T5907] [ 111.120862][ T5937] ima: policy update failed [ 111.156626][ T29] audit: type=1802 audit(1777654530.135:2): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.30" res=0 errno=0 [ 111.701061][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 112.418662][ T5949] HfR: entered promiscuous mode [ 112.508569][ T5950] HfR: left promiscuous mode [ 114.636430][ T5991] futex_wake_op: syz.3.38 tries to shift op by -2048; fix this program [ 114.745537][ T5991] futex_wake_op: syz.3.38 tries to shift op by -2048; fix this program [ 114.760125][ T5992] futex_wake_op: syz.3.38 tries to shift op by -2048; fix this program [ 114.873228][ T5985] FAULT_INJECTION: forcing a failure. [ 114.873228][ T5985] name failslab, interval 1, probability 0, space 0, times 0 [ 114.917057][ T5985] CPU: 1 UID: 0 PID: 5985 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT(full) [ 114.917101][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.917119][ T5985] Call Trace: [ 114.917128][ T5985] [ 114.917140][ T5985] dump_stack_lvl+0x100/0x190 [ 114.917182][ T5985] should_fail_ex.cold+0x5/0xa [ 114.917223][ T5985] should_failslab+0xc2/0x120 [ 114.917260][ T5985] __kmalloc_cache_noprof+0x7a/0x6f0 [ 114.917304][ T5985] ? vhost_vsock_dev_open+0x79/0x670 [ 114.917345][ T5985] ? __pfx_vhost_vsock_dev_open+0x10/0x10 [ 114.917382][ T5985] vhost_vsock_dev_open+0x79/0x670 [ 114.917417][ T5985] ? __pfx_vhost_vsock_dev_open+0x10/0x10 [ 114.917454][ T5985] misc_open+0x26d/0x450 [ 114.917492][ T5985] ? __pfx_misc_open+0x10/0x10 [ 114.917525][ T5985] chrdev_open+0x234/0x6a0 [ 114.917558][ T5985] ? __pfx_apparmor_file_open+0x10/0x10 [ 114.917600][ T5985] ? __pfx_chrdev_open+0x10/0x10 [ 114.917651][ T5985] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 114.917699][ T5985] do_dentry_open+0x6d8/0x1660 [ 114.917737][ T5985] ? __pfx_chrdev_open+0x10/0x10 [ 114.917786][ T5985] vfs_open+0x82/0x3f0 [ 114.917835][ T5985] path_openat+0x208c/0x31a0 [ 114.917887][ T5985] ? __pfx_path_openat+0x10/0x10 [ 114.917938][ T5985] do_file_open+0x20e/0x430 [ 114.917977][ T5985] ? __pfx_do_file_open+0x10/0x10 [ 114.918046][ T5985] ? alloc_fd+0x476/0x790 [ 114.918090][ T5985] ? do_getname+0x191/0x390 [ 114.918144][ T5985] do_sys_openat2+0x10d/0x1e0 [ 114.918191][ T5985] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.918242][ T5985] ? __fget_files+0x21f/0x3d0 [ 114.918286][ T5985] __x64_sys_openat+0x12d/0x210 [ 114.918335][ T5985] ? __pfx___x64_sys_openat+0x10/0x10 [ 114.918389][ T5985] ? rcu_is_watching+0x12/0xc0 [ 114.918432][ T5985] do_syscall_64+0x10b/0xf80 [ 114.918471][ T5985] ? clear_bhb_loop+0x40/0x90 [ 114.918510][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.918541][ T5985] RIP: 0033:0x7f51b479cdd9 [ 114.918568][ T5985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.918596][ T5985] RSP: 002b:00007f51b5686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.918637][ T5985] RAX: ffffffffffffffda RBX: 00007f51b4a15fa0 RCX: 00007f51b479cdd9 [ 114.918656][ T5985] RDX: 0000000000141000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 114.918674][ T5985] RBP: 00007f51b4832d69 R08: 0000000000000000 R09: 0000000000000000 [ 114.918691][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.918707][ T5985] R13: 00007f51b4a16038 R14: 00007f51b4a15fa0 R15: 00007ffd5fcd8578 [ 114.918748][ T5985] [ 115.773901][ T5999] vivid-007: ================= START STATUS ================= [ 115.813104][ T5999] vivid-007: Generate PTS: true [ 115.845403][ T5999] vivid-007: Generate SCR: true [ 115.959829][ T5999] tpg source WxH: 320x240 (Y'CbCr) [ 116.005849][ T5999] tpg field: 1 [ 116.026985][ T5999] tpg crop: (0,0)/320x240 [ 116.040512][ T5999] tpg compose: (0,0)/320x240 [ 116.118299][ T5999] tpg colorspace: 8 [ 116.133031][ T5999] tpg transfer function: 0/0 [ 116.153472][ T5999] tpg Y'CbCr encoding: 0/0 [ 116.205886][ T5999] tpg quantization: 0/0 [ 116.265007][ T5999] tpg RGB range: 0/2 [ 116.484294][ T5999] vivid-007: ================== END STATUS ================== [ 119.688123][ T6021] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 124.140741][ T6058] random: crng reseeded on system resumption [ 124.230820][ T6058] Zero length message leads to an empty skb [ 124.422322][ T6054] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.744774][ T6111] FAULT_INJECTION: forcing a failure. [ 127.744774][ T6111] name failslab, interval 1, probability 0, space 0, times 0 [ 127.844371][ T6111] CPU: 1 UID: 0 PID: 6111 Comm: syz.0.56 Not tainted syzkaller #0 PREEMPT(full) [ 127.844412][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.844429][ T6111] Call Trace: [ 127.844438][ T6111] [ 127.844459][ T6111] dump_stack_lvl+0x100/0x190 [ 127.844500][ T6111] should_fail_ex.cold+0x5/0xa [ 127.844540][ T6111] should_failslab+0xc2/0x120 [ 127.844577][ T6111] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 127.844624][ T6111] ? vm_area_alloc+0x1f/0x160 [ 127.844666][ T6111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.844722][ T6111] vm_area_alloc+0x1f/0x160 [ 127.844760][ T6111] __mmap_region+0x104d/0x2da0 [ 127.844813][ T6111] ? __pfx___mmap_region+0x10/0x10 [ 127.844857][ T6111] ? find_held_lock+0x2b/0x80 [ 127.844903][ T6111] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 127.844963][ T6111] ? __lock_acquire+0x4a5/0x2630 [ 127.845012][ T6111] ? __lock_acquire+0x4a5/0x2630 [ 127.845052][ T6111] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 127.845103][ T6111] ? find_held_lock+0x2b/0x80 [ 127.845159][ T6111] ? __kernel_text_address+0xd/0x30 [ 127.845190][ T6111] ? unwind_get_return_address+0x59/0xa0 [ 127.845228][ T6111] ? arch_stack_walk+0xa6/0xf0 [ 127.845333][ T6111] mmap_region+0x35d/0x620 [ 127.845366][ T6111] ? __pfx_mmap_region+0x10/0x10 [ 127.845399][ T6111] ? cap_mmap_addr+0x4b/0x120 [ 127.845440][ T6111] ? bpf_lsm_mmap_addr+0x9/0x30 [ 127.845478][ T6111] ? security_mmap_addr+0x71/0x1e0 [ 127.845511][ T6111] ? __get_unmapped_area+0x255/0x3e0 [ 127.845554][ T6111] do_mmap+0xc63/0x12f0 [ 127.845598][ T6111] ? __pfx_do_mmap+0x10/0x10 [ 127.845634][ T6111] ? __pfx_down_write_killable+0x10/0x10 [ 127.845681][ T6111] vm_mmap_pgoff+0x29e/0x470 [ 127.845728][ T6111] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 127.845764][ T6111] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 127.845829][ T6111] ksys_mmap_pgoff+0x285/0x610 [ 127.845871][ T6111] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 127.845907][ T6111] ? xfd_validate_state+0x129/0x190 [ 127.845948][ T6111] __x64_sys_mmap+0x125/0x190 [ 127.845987][ T6111] do_syscall_64+0x10b/0xf80 [ 127.846021][ T6111] ? clear_bhb_loop+0x40/0x90 [ 127.846059][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.846090][ T6111] RIP: 0033:0x7f651719cdd9 [ 127.846116][ T6111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.846145][ T6111] RSP: 002b:00007f651807a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 127.846174][ T6111] RAX: ffffffffffffffda RBX: 00007f6517415fa0 RCX: 00007f651719cdd9 [ 127.846195][ T6111] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 127.846212][ T6111] RBP: 00007f6517232d69 R08: 000000000000000d R09: 0000300000000000 [ 127.846230][ T6111] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 127.846248][ T6111] R13: 00007f6517416038 R14: 00007f6517415fa0 R15: 00007ffd8b064df8 [ 127.846290][ T6111] [ 130.240754][ T6143] ======================================================= [ 130.240754][ T6143] WARNING: The mand mount option has been deprecated and [ 130.240754][ T6143] and is ignored by this kernel. Remove the mand [ 130.240754][ T6143] option from the mount to silence this warning. [ 130.240754][ T6143] ======================================================= [ 132.725899][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'. [ 132.801364][ T6159] ipvlan1: entered promiscuous mode [ 132.808846][ T6159] ipvlan1: entered allmulticast mode [ 132.819934][ T6159] veth0_vlan: entered allmulticast mode [ 133.208351][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.219928][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.882292][ T6208] FAULT_INJECTION: forcing a failure. [ 135.882292][ T6208] name fail_futex, interval 1, probability 0, space 0, times 0 [ 135.964988][ T6208] CPU: 0 UID: 0 PID: 6208 Comm: syz.0.74 Not tainted syzkaller #0 PREEMPT(full) [ 135.965030][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.965047][ T6208] Call Trace: [ 135.965057][ T6208] [ 135.965078][ T6208] dump_stack_lvl+0x100/0x190 [ 135.965117][ T6208] should_fail_ex.cold+0x5/0xa [ 135.965161][ T6208] get_futex_key+0x1d2/0x1510 [ 135.965197][ T6208] ? __pfx_get_futex_key+0x10/0x10 [ 135.965242][ T6208] futex_wake+0xea/0x530 [ 135.965283][ T6208] ? rcu_is_watching+0x12/0xc0 [ 135.965320][ T6208] ? __pfx_futex_wake+0x10/0x10 [ 135.965364][ T6208] ? putname+0xb1/0x110 [ 135.965401][ T6208] ? kmem_cache_free+0x127/0x6c0 [ 135.965455][ T6208] do_futex+0x32b/0x350 [ 135.965490][ T6208] ? __pfx_do_futex+0x10/0x10 [ 135.965520][ T6208] ? __pfx_do_sys_openat2+0x10/0x10 [ 135.965566][ T6208] ? __fget_files+0x21f/0x3d0 [ 135.965603][ T6208] __x64_sys_futex+0x34f/0x4d0 [ 135.965635][ T6208] ? __x64_sys_openat+0x12d/0x210 [ 135.965680][ T6208] ? __pfx___x64_sys_futex+0x10/0x10 [ 135.965718][ T6208] ? rcu_is_watching+0x12/0xc0 [ 135.965757][ T6208] do_syscall_64+0x10b/0xf80 [ 135.965792][ T6208] ? clear_bhb_loop+0x40/0x90 [ 135.965827][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.965858][ T6208] RIP: 0033:0x7f651719cdd9 [ 135.965880][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.965906][ T6208] RSP: 002b:00007f651807a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.965934][ T6208] RAX: ffffffffffffffda RBX: 00007f6517415fa8 RCX: 00007f651719cdd9 [ 135.965953][ T6208] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6517415fac [ 135.965970][ T6208] RBP: 00007f6517415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 135.965986][ T6208] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 135.966001][ T6208] R13: 00007f6517416038 R14: 00007ffd8b064d10 R15: 00007ffd8b064df8 [ 135.966040][ T6208] [ 139.654475][ T6243] random: crng reseeded on system resumption [ 139.697285][ T6237] zswap: compressor not available [ 144.539201][ T6308] kAFS: Invalid Command on /proc/fs/afs/cells file [ 144.615645][ T6308] futex_wake_op: syz.2.92 tries to shift op by -2048; fix this program [ 144.637413][ T6308] futex_wake_op: syz.2.92 tries to shift op by -2048; fix this program [ 144.684444][ T6309] 0x000000000001-0x000000020000 : "" [ 144.727773][ T6309] ftl_cs: FTL header corrupt! [ 145.639632][ T29] audit: type=1804 audit(1777654564.625:3): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.95" name="/newroot/24/file0" dev="tmpfs" ino=145 res=1 errno=0 [ 145.691999][ T29] audit: type=1804 audit(1777654564.625:4): pid=6317 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.95" name="/newroot/24/file0" dev="tmpfs" ino=145 res=1 errno=0 [ 145.784296][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 145.932536][ T6317] bridge0: port 3(geneve1) entered blocking state [ 145.955679][ T6317] bridge0: port 3(geneve1) entered disabled state [ 145.962460][ T6317] geneve1: entered allmulticast mode [ 145.978931][ T6317] geneve1: entered promiscuous mode [ 145.985539][ T6317] bridge0: port 3(geneve1) entered blocking state [ 145.993517][ T6317] bridge0: port 3(geneve1) entered forwarding state [ 148.180182][ T6383] FAULT_INJECTION: forcing a failure. [ 148.180182][ T6383] name fail_futex, interval 1, probability 0, space 0, times 0 [ 148.222275][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.3.106 Not tainted syzkaller #0 PREEMPT(full) [ 148.222318][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.222336][ T6383] Call Trace: [ 148.222353][ T6383] [ 148.222365][ T6383] dump_stack_lvl+0x100/0x190 [ 148.222405][ T6383] should_fail_ex.cold+0x5/0xa [ 148.222443][ T6383] get_futex_key+0x1d2/0x1510 [ 148.222480][ T6383] ? __pfx_get_futex_key+0x10/0x10 [ 148.222523][ T6383] futex_wake+0xea/0x530 [ 148.222563][ T6383] ? rcu_is_watching+0x12/0xc0 [ 148.222601][ T6383] ? __pfx_futex_wake+0x10/0x10 [ 148.222645][ T6383] ? putname+0xb1/0x110 [ 148.222682][ T6383] ? kmem_cache_free+0x127/0x6c0 [ 148.222734][ T6383] do_futex+0x32b/0x350 [ 148.222768][ T6383] ? __pfx_do_futex+0x10/0x10 [ 148.222799][ T6383] ? __pfx_do_sys_openat2+0x10/0x10 [ 148.222846][ T6383] ? __fget_files+0x21f/0x3d0 [ 148.222884][ T6383] __x64_sys_futex+0x34f/0x4d0 [ 148.222919][ T6383] ? __x64_sys_openat+0x12d/0x210 [ 148.222974][ T6383] ? __pfx___x64_sys_futex+0x10/0x10 [ 148.223015][ T6383] ? rcu_is_watching+0x12/0xc0 [ 148.223055][ T6383] do_syscall_64+0x10b/0xf80 [ 148.223090][ T6383] ? clear_bhb_loop+0x40/0x90 [ 148.223127][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.223156][ T6383] RIP: 0033:0x7f301f19cdd9 [ 148.223180][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.223206][ T6383] RSP: 002b:00007f302012c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.223233][ T6383] RAX: ffffffffffffffda RBX: 00007f301f415fa8 RCX: 00007f301f19cdd9 [ 148.223251][ T6383] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f301f415fac [ 148.223267][ T6383] RBP: 00007f301f415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 148.223284][ T6383] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 148.223300][ T6383] R13: 00007f301f416038 R14: 00007ffddc37a330 R15: 00007ffddc37a418 [ 148.223338][ T6383] [ 153.750793][ T6452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 157.485396][ T6478] random: crng reseeded on system resumption [ 159.191602][ T6500] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 160.555269][ T6518] FAULT_INJECTION: forcing a failure. [ 160.555269][ T6518] name fail_futex, interval 1, probability 0, space 0, times 0 [ 160.624394][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT(full) [ 160.624428][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.624439][ T6518] Call Trace: [ 160.624445][ T6518] [ 160.624453][ T6518] dump_stack_lvl+0x100/0x190 [ 160.624478][ T6518] should_fail_ex.cold+0x5/0xa [ 160.624500][ T6518] get_futex_key+0x1d2/0x1510 [ 160.624521][ T6518] ? __pfx_get_futex_key+0x10/0x10 [ 160.624546][ T6518] futex_wake+0xea/0x530 [ 160.624570][ T6518] ? rcu_is_watching+0x12/0xc0 [ 160.624610][ T6518] ? __pfx_futex_wake+0x10/0x10 [ 160.624636][ T6518] ? putname+0xb1/0x110 [ 160.624657][ T6518] ? kmem_cache_free+0x127/0x6c0 [ 160.624690][ T6518] do_futex+0x32b/0x350 [ 160.624710][ T6518] ? __pfx_do_futex+0x10/0x10 [ 160.624740][ T6518] ? __pfx_do_sys_openat2+0x10/0x10 [ 160.624788][ T6518] ? __fget_files+0x21f/0x3d0 [ 160.624824][ T6518] __x64_sys_futex+0x34f/0x4d0 [ 160.624853][ T6518] ? __x64_sys_openat+0x12d/0x210 [ 160.624881][ T6518] ? __pfx___x64_sys_futex+0x10/0x10 [ 160.624904][ T6518] ? rcu_is_watching+0x12/0xc0 [ 160.624929][ T6518] do_syscall_64+0x10b/0xf80 [ 160.624950][ T6518] ? clear_bhb_loop+0x40/0x90 [ 160.624976][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.625000][ T6518] RIP: 0033:0x7ffa4af9cdd9 [ 160.625015][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.625040][ T6518] RSP: 002b:00007ffa4bdf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 160.625064][ T6518] RAX: ffffffffffffffda RBX: 00007ffa4b215fa8 RCX: 00007ffa4af9cdd9 [ 160.625076][ T6518] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffa4b215fac [ 160.625086][ T6518] RBP: 00007ffa4b215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 160.625097][ T6518] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 160.625107][ T6518] R13: 00007ffa4b216038 R14: 00007ffc3dfd4180 R15: 00007ffc3dfd4268 [ 160.625130][ T6518] [ 162.059805][ T6528] random: crng reseeded on system resumption [ 165.046632][ T6565] FAULT_INJECTION: forcing a failure. [ 165.046632][ T6565] name fail_futex, interval 1, probability 0, space 0, times 0 [ 165.101041][ T6565] CPU: 0 UID: 0 PID: 6565 Comm: syz.0.142 Not tainted syzkaller #0 PREEMPT(full) [ 165.101089][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.101112][ T6565] Call Trace: [ 165.101123][ T6565] [ 165.101135][ T6565] dump_stack_lvl+0x100/0x190 [ 165.101176][ T6565] should_fail_ex.cold+0x5/0xa [ 165.101215][ T6565] get_futex_key+0x1d2/0x1510 [ 165.101240][ T6565] ? __pfx_get_futex_key+0x10/0x10 [ 165.101265][ T6565] futex_wake+0xea/0x530 [ 165.101288][ T6565] ? rcu_is_watching+0x12/0xc0 [ 165.101310][ T6565] ? __pfx_futex_wake+0x10/0x10 [ 165.101336][ T6565] ? putname+0xb1/0x110 [ 165.101359][ T6565] ? kmem_cache_free+0x127/0x6c0 [ 165.101391][ T6565] do_futex+0x32b/0x350 [ 165.101411][ T6565] ? __pfx_do_futex+0x10/0x10 [ 165.101428][ T6565] ? __pfx_do_sys_openat2+0x10/0x10 [ 165.101457][ T6565] ? __fget_files+0x21f/0x3d0 [ 165.101480][ T6565] __x64_sys_futex+0x34f/0x4d0 [ 165.101500][ T6565] ? __x64_sys_openat+0x12d/0x210 [ 165.101527][ T6565] ? __pfx___x64_sys_futex+0x10/0x10 [ 165.101551][ T6565] ? rcu_is_watching+0x12/0xc0 [ 165.101575][ T6565] do_syscall_64+0x10b/0xf80 [ 165.101597][ T6565] ? clear_bhb_loop+0x40/0x90 [ 165.101619][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.101637][ T6565] RIP: 0033:0x7f651719cdd9 [ 165.101653][ T6565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.101669][ T6565] RSP: 002b:00007f651807a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.101687][ T6565] RAX: ffffffffffffffda RBX: 00007f6517415fa8 RCX: 00007f651719cdd9 [ 165.101706][ T6565] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6517415fac [ 165.101716][ T6565] RBP: 00007f6517415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 165.101726][ T6565] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 165.101736][ T6565] R13: 00007f6517416038 R14: 00007ffd8b064d10 R15: 00007ffd8b064df8 [ 165.101758][ T6565] [ 165.778330][ T6572] syz.0.143 uses obsolete (PF_INET,SOCK_PACKET) [ 166.285032][ T6580] FAULT_INJECTION: forcing a failure. [ 166.285032][ T6580] name failslab, interval 1, probability 0, space 0, times 0 [ 166.324333][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.2.145 Not tainted syzkaller #0 PREEMPT(full) [ 166.324362][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.324372][ T6580] Call Trace: [ 166.324379][ T6580] [ 166.324386][ T6580] dump_stack_lvl+0x100/0x190 [ 166.324410][ T6580] should_fail_ex.cold+0x5/0xa [ 166.324434][ T6580] should_failslab+0xc2/0x120 [ 166.324456][ T6580] __kmalloc_cache_noprof+0x7a/0x6f0 [ 166.324483][ T6580] ? vhost_vsock_dev_open+0x79/0x670 [ 166.324505][ T6580] ? __pfx_vhost_vsock_dev_open+0x10/0x10 [ 166.324543][ T6580] vhost_vsock_dev_open+0x79/0x670 [ 166.324563][ T6580] ? __pfx_vhost_vsock_dev_open+0x10/0x10 [ 166.324585][ T6580] misc_open+0x26d/0x450 [ 166.324607][ T6580] ? __pfx_misc_open+0x10/0x10 [ 166.324628][ T6580] chrdev_open+0x234/0x6a0 [ 166.324650][ T6580] ? __pfx_apparmor_file_open+0x10/0x10 [ 166.324677][ T6580] ? __pfx_chrdev_open+0x10/0x10 [ 166.324701][ T6580] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 166.324729][ T6580] do_dentry_open+0x6d8/0x1660 [ 166.324750][ T6580] ? __pfx_chrdev_open+0x10/0x10 [ 166.324784][ T6580] vfs_open+0x82/0x3f0 [ 166.324824][ T6580] path_openat+0x208c/0x31a0 [ 166.324863][ T6580] ? __pfx_path_openat+0x10/0x10 [ 166.324893][ T6580] do_file_open+0x20e/0x430 [ 166.324918][ T6580] ? __pfx_do_file_open+0x10/0x10 [ 166.324955][ T6580] ? alloc_fd+0x476/0x790 [ 166.324979][ T6580] ? do_getname+0x191/0x390 [ 166.325007][ T6580] do_sys_openat2+0x10d/0x1e0 [ 166.325034][ T6580] ? __pfx_do_sys_openat2+0x10/0x10 [ 166.325063][ T6580] ? rcu_is_watching+0x12/0xc0 [ 166.325085][ T6580] ? irqentry_exit+0x246/0x790 [ 166.325106][ T6580] ? lockdep_hardirqs_on+0x78/0x100 [ 166.325130][ T6580] __x64_sys_openat+0x12d/0x210 [ 166.325158][ T6580] ? __pfx___x64_sys_openat+0x10/0x10 [ 166.325194][ T6580] do_syscall_64+0x10b/0xf80 [ 166.325215][ T6580] ? clear_bhb_loop+0x40/0x90 [ 166.325237][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.325256][ T6580] RIP: 0033:0x7ffa4af9cdd9 [ 166.325272][ T6580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.325288][ T6580] RSP: 002b:00007ffa4bdf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 166.325306][ T6580] RAX: ffffffffffffffda RBX: 00007ffa4b215fa0 RCX: 00007ffa4af9cdd9 [ 166.325318][ T6580] RDX: 0000000000141000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 166.325328][ T6580] RBP: 00007ffa4b032d69 R08: 0000000000000000 R09: 0000000000000000 [ 166.325339][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.325349][ T6580] R13: 00007ffa4b216038 R14: 00007ffa4b215fa0 R15: 00007ffc3dfd4268 [ 166.325371][ T6580] [ 167.625497][ T29] audit: type=1800 audit(1777654586.595:5): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.143" name="discovery_nqn" dev="configfs" ino=12380 res=0 errno=0 [ 169.429547][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.153'. [ 169.497608][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.603766][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.803951][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'. [ 178.734634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 178.810774][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'. [ 178.857007][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.977278][ T6747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.952923][ T6761] ubi0: attaching mtd0 [ 180.127555][ T6761] ubi0: scanning is finished [ 180.222838][ T6761] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 180.641383][ T6773] FAULT_INJECTION: forcing a failure. [ 180.641383][ T6773] name fail_futex, interval 1, probability 0, space 0, times 0 [ 180.671124][ T6761] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 180.699265][ T6773] CPU: 0 UID: 0 PID: 6773 Comm: syz.3.179 Not tainted syzkaller #0 PREEMPT(full) [ 180.699306][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.699324][ T6773] Call Trace: [ 180.699334][ T6773] [ 180.699345][ T6773] dump_stack_lvl+0x100/0x190 [ 180.699385][ T6773] should_fail_ex.cold+0x5/0xa [ 180.699424][ T6773] get_futex_key+0x1d2/0x1510 [ 180.699459][ T6773] ? __pfx_get_futex_key+0x10/0x10 [ 180.699490][ T6773] ? __pick_eevdf+0x4a9/0x7d0 [ 180.699544][ T6773] futex_wait_setup+0x83/0x510 [ 180.699596][ T6773] __futex_wait+0x19f/0x300 [ 180.699639][ T6773] ? __pfx___futex_wait+0x10/0x10 [ 180.699678][ T6773] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 180.699718][ T6773] ? __pfx_futex_wake_mark+0x10/0x10 [ 180.699773][ T6773] ? find_held_lock+0x2b/0x80 [ 180.699811][ T6773] ? futex_wake+0x456/0x530 [ 180.699859][ T6773] futex_wait+0xe6/0x370 [ 180.699899][ T6773] ? __pfx_futex_wait+0x10/0x10 [ 180.699948][ T6773] ? putname+0xb1/0x110 [ 180.699990][ T6773] ? kmem_cache_free+0x127/0x6c0 [ 180.700045][ T6773] do_futex+0x1ef/0x350 [ 180.700079][ T6773] ? __pfx_do_futex+0x10/0x10 [ 180.700111][ T6773] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.700161][ T6773] ? __fget_files+0x21f/0x3d0 [ 180.700201][ T6773] __x64_sys_futex+0x34f/0x4d0 [ 180.700240][ T6773] ? __pfx___x64_sys_futex+0x10/0x10 [ 180.700281][ T6773] ? rcu_is_watching+0x12/0xc0 [ 180.700323][ T6773] do_syscall_64+0x10b/0xf80 [ 180.700358][ T6773] ? clear_bhb_loop+0x40/0x90 [ 180.700396][ T6773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.700427][ T6773] RIP: 0033:0x7f301f19cdd9 [ 180.700452][ T6773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.700480][ T6773] RSP: 002b:00007f302012c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 180.700509][ T6773] RAX: ffffffffffffffda RBX: 00007f301f415fa8 RCX: 00007f301f19cdd9 [ 180.700527][ T6773] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f301f415fa8 [ 180.700545][ T6773] RBP: 00007f301f415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 180.700563][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.700580][ T6773] R13: 00007f301f416038 R14: 00007ffddc37a330 R15: 00007ffddc37a418 [ 180.700620][ T6773] [ 181.521513][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 181.536295][ T6784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.563217][ T6784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.686609][ T6781] zram: Added device: zram1 [ 182.430763][ T6794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.185'. [ 182.447363][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.562462][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.742657][ T6797] FAULT_INJECTION: forcing a failure. [ 182.742657][ T6797] name fail_futex, interval 1, probability 0, space 0, times 0 [ 182.789642][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT(full) [ 182.789667][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.789677][ T6797] Call Trace: [ 182.789684][ T6797] [ 182.789691][ T6797] dump_stack_lvl+0x100/0x190 [ 182.789715][ T6797] should_fail_ex.cold+0x5/0xa [ 182.789742][ T6797] get_futex_key+0x1d2/0x1510 [ 182.789763][ T6797] ? __pfx_get_futex_key+0x10/0x10 [ 182.789788][ T6797] futex_wake+0xea/0x530 [ 182.789810][ T6797] ? rcu_is_watching+0x12/0xc0 [ 182.789834][ T6797] ? __pfx_futex_wake+0x10/0x10 [ 182.789860][ T6797] ? putname+0xb1/0x110 [ 182.789882][ T6797] ? kmem_cache_free+0x127/0x6c0 [ 182.789914][ T6797] do_futex+0x32b/0x350 [ 182.789934][ T6797] ? __pfx_do_futex+0x10/0x10 [ 182.789951][ T6797] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.789980][ T6797] ? __fget_files+0x21f/0x3d0 [ 182.790003][ T6797] __x64_sys_futex+0x34f/0x4d0 [ 182.790025][ T6797] ? __pfx___x64_sys_futex+0x10/0x10 [ 182.790049][ T6797] ? rcu_is_watching+0x12/0xc0 [ 182.790073][ T6797] do_syscall_64+0x10b/0xf80 [ 182.790094][ T6797] ? clear_bhb_loop+0x40/0x90 [ 182.790116][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.790135][ T6797] RIP: 0033:0x7ffa4af9cdd9 [ 182.790150][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.790166][ T6797] RSP: 002b:00007ffa4bdf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.790183][ T6797] RAX: ffffffffffffffda RBX: 00007ffa4b215fa8 RCX: 00007ffa4af9cdd9 [ 182.790194][ T6797] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffa4b215fac [ 182.790204][ T6797] RBP: 00007ffa4b215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 182.790214][ T6797] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 182.790224][ T6797] R13: 00007ffa4b216038 R14: 00007ffc3dfd4180 R15: 00007ffc3dfd4268 [ 182.790246][ T6797] [ 184.158092][ T6813] zswap: compressor not available [ 187.872330][ T6875] zswap: compressor not available [ 188.626677][ T6899] random: crng reseeded on system resumption [ 188.800880][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.208'. [ 190.073777][ T6935] zswap: compressor not available [ 190.767413][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.220'. [ 191.513318][ T6979] block nbd0: NBD_DISCONNECT [ 191.811271][ T6988] netlink: 'syz.3.225': attribute type 1 has an invalid length. [ 192.198423][ T6987] zswap: compressor not available [ 194.647952][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.659095][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.370989][ T7061] netlink: 342 bytes leftover after parsing attributes in process `syz.0.242'. [ 195.422512][ T7061] netlink: 214 bytes leftover after parsing attributes in process `syz.0.242'. [ 195.644110][ T7051] zswap: compressor not available [ 196.996395][ T7095] random: crng reseeded on system resumption [ 197.309712][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 197.395068][ T7095] FAULT_INJECTION: forcing a failure. [ 197.395068][ T7095] name fail_futex, interval 1, probability 0, space 0, times 0 [ 197.427517][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.3.249 Not tainted syzkaller #0 PREEMPT(full) [ 197.427558][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.427575][ T7095] Call Trace: [ 197.427585][ T7095] [ 197.427596][ T7095] dump_stack_lvl+0x100/0x190 [ 197.427635][ T7095] should_fail_ex.cold+0x5/0xa [ 197.427673][ T7095] get_futex_key+0x1d2/0x1510 [ 197.427709][ T7095] ? __pfx_get_futex_key+0x10/0x10 [ 197.427759][ T7095] futex_wake+0xea/0x530 [ 197.427802][ T7095] ? __pfx_futex_wake+0x10/0x10 [ 197.427847][ T7095] ? errseq_sample+0x51/0x70 [ 197.427894][ T7095] ? file_init_path+0x48e/0x670 [ 197.427942][ T7095] do_futex+0x32b/0x350 [ 197.427976][ T7095] ? __pfx_do_futex+0x10/0x10 [ 197.428008][ T7095] ? fd_install+0x223/0x580 [ 197.428051][ T7095] __x64_sys_futex+0x34f/0x4d0 [ 197.428087][ T7095] ? __sys_socket+0xac/0x260 [ 197.428137][ T7095] ? __pfx___x64_sys_futex+0x10/0x10 [ 197.428179][ T7095] ? rcu_is_watching+0x12/0xc0 [ 197.428222][ T7095] do_syscall_64+0x10b/0xf80 [ 197.428259][ T7095] ? clear_bhb_loop+0x40/0x90 [ 197.428305][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.428336][ T7095] RIP: 0033:0x7f301f19cdd9 [ 197.428361][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.428389][ T7095] RSP: 002b:00007f302012c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 197.428416][ T7095] RAX: ffffffffffffffda RBX: 00007f301f415fa8 RCX: 00007f301f19cdd9 [ 197.428435][ T7095] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f301f415fac [ 197.428452][ T7095] RBP: 00007f301f415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 197.428469][ T7095] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 197.428485][ T7095] R13: 00007f301f416038 R14: 00007ffddc37a330 R15: 00007ffddc37a418 [ 197.428524][ T7095] [ 197.773091][ T7104] can: request_module (can-proto-0) failed. [ 198.896603][ T7129] block nbd0: NBD_DISCONNECT [ 199.207855][ T7139] FAULT_INJECTION: forcing a failure. [ 199.207855][ T7139] name fail_futex, interval 1, probability 0, space 0, times 0 [ 199.237742][ T7139] CPU: 0 UID: 0 PID: 7139 Comm: syz.3.259 Not tainted syzkaller #0 PREEMPT(full) [ 199.237783][ T7139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.237799][ T7139] Call Trace: [ 199.237808][ T7139] [ 199.237819][ T7139] dump_stack_lvl+0x100/0x190 [ 199.237859][ T7139] should_fail_ex.cold+0x5/0xa [ 199.237896][ T7139] get_futex_key+0x1d2/0x1510 [ 199.237930][ T7139] ? __pfx_get_futex_key+0x10/0x10 [ 199.237974][ T7139] futex_wake+0xea/0x530 [ 199.238010][ T7139] ? rcu_is_watching+0x12/0xc0 [ 199.238044][ T7139] ? __pfx_futex_wake+0x10/0x10 [ 199.238085][ T7139] ? putname+0xb1/0x110 [ 199.238119][ T7139] ? kmem_cache_free+0x127/0x6c0 [ 199.238166][ T7139] do_futex+0x32b/0x350 [ 199.238195][ T7139] ? __pfx_do_futex+0x10/0x10 [ 199.238223][ T7139] ? __pfx_do_sys_openat2+0x10/0x10 [ 199.238266][ T7139] ? __fget_files+0x21f/0x3d0 [ 199.238304][ T7139] __x64_sys_futex+0x34f/0x4d0 [ 199.238350][ T7139] ? __x64_sys_openat+0x12d/0x210 [ 199.238394][ T7139] ? __pfx___x64_sys_futex+0x10/0x10 [ 199.238436][ T7139] ? rcu_is_watching+0x12/0xc0 [ 199.238478][ T7139] do_syscall_64+0x10b/0xf80 [ 199.238513][ T7139] ? clear_bhb_loop+0x40/0x90 [ 199.238548][ T7139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.238576][ T7139] RIP: 0033:0x7f301f19cdd9 [ 199.238601][ T7139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.238627][ T7139] RSP: 002b:00007f302012c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 199.238654][ T7139] RAX: ffffffffffffffda RBX: 00007f301f415fa8 RCX: 00007f301f19cdd9 [ 199.238672][ T7139] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f301f415fac [ 199.238689][ T7139] RBP: 00007f301f415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 199.238705][ T7139] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 199.238722][ T7139] R13: 00007f301f416038 R14: 00007ffddc37a330 R15: 00007ffddc37a418 [ 199.238760][ T7139] [ 199.733196][ T7144] FAULT_INJECTION: forcing a failure. [ 199.733196][ T7144] name fail_futex, interval 1, probability 0, space 0, times 0 [ 199.801987][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.0.261 Not tainted syzkaller #0 PREEMPT(full) [ 199.802038][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.802057][ T7144] Call Trace: [ 199.802068][ T7144] [ 199.802082][ T7144] dump_stack_lvl+0x100/0x190 [ 199.802128][ T7144] should_fail_ex.cold+0x5/0xa [ 199.802170][ T7144] get_futex_key+0x1d2/0x1510 [ 199.802358][ T7144] ? __pfx_get_futex_key+0x10/0x10 [ 199.802402][ T7144] futex_wake+0xea/0x530 [ 199.802449][ T7144] ? rcu_is_watching+0x12/0xc0 [ 199.802490][ T7144] ? __pfx_futex_wake+0x10/0x10 [ 199.802541][ T7144] ? putname+0xb1/0x110 [ 199.802578][ T7144] ? kmem_cache_free+0x127/0x6c0 [ 199.802630][ T7144] do_futex+0x32b/0x350 [ 199.802665][ T7144] ? __pfx_do_futex+0x10/0x10 [ 199.802697][ T7144] ? __pfx_do_sys_openat2+0x10/0x10 [ 199.802755][ T7144] ? __fget_files+0x21f/0x3d0 [ 199.802796][ T7144] __x64_sys_futex+0x34f/0x4d0 [ 199.802833][ T7144] ? __x64_sys_openat+0x12d/0x210 [ 199.802883][ T7144] ? __pfx___x64_sys_futex+0x10/0x10 [ 199.802923][ T7144] ? rcu_is_watching+0x12/0xc0 [ 199.802965][ T7144] do_syscall_64+0x10b/0xf80 [ 199.803002][ T7144] ? clear_bhb_loop+0x40/0x90 [ 199.803040][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.803072][ T7144] RIP: 0033:0x7f651719cdd9 [ 199.803101][ T7144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.803129][ T7144] RSP: 002b:00007f651807a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 199.803157][ T7144] RAX: ffffffffffffffda RBX: 00007f6517415fa8 RCX: 00007f651719cdd9 [ 199.803177][ T7144] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6517415fac [ 199.803195][ T7144] RBP: 00007f6517415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 199.803212][ T7144] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 199.803229][ T7144] R13: 00007f6517416038 R14: 00007ffd8b064d10 R15: 00007ffd8b064df8 [ 199.803278][ T7144] [ 200.855581][ T7155] zswap: compressor not available [ 200.906004][ T7174] netlink: 'syz.1.267': attribute type 28 has an invalid length. [ 200.951854][ T7174] netlink: 334 bytes leftover after parsing attributes in process `syz.1.267'. [ 202.447112][ T7200] FAULT_INJECTION: forcing a failure. [ 202.447112][ T7200] name failslab, interval 1, probability 0, space 0, times 0 [ 202.495016][ T7200] CPU: 0 UID: 0 PID: 7200 Comm: syz.1.271 Not tainted syzkaller #0 PREEMPT(full) [ 202.495055][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.495071][ T7200] Call Trace: [ 202.495080][ T7200] [ 202.495092][ T7200] dump_stack_lvl+0x100/0x190 [ 202.495129][ T7200] should_fail_ex.cold+0x5/0xa [ 202.495163][ T7200] should_failslab+0xc2/0x120 [ 202.495196][ T7200] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 202.495238][ T7200] ? taskstats_exit+0x67b/0xc10 [ 202.495288][ T7200] ? rcu_is_watching+0x12/0xc0 [ 202.495329][ T7200] taskstats_exit+0x67b/0xc10 [ 202.495368][ T7200] ? __pfx_acct_update_integrals+0x10/0x10 [ 202.495408][ T7200] ? __pfx_taskstats_exit+0x10/0x10 [ 202.495449][ T7200] ? rcu_read_lock_any_held+0x6a/0xa0 [ 202.495486][ T7200] ? exit_signals+0x395/0xaf0 [ 202.495525][ T7200] do_exit+0x65c/0x2a60 [ 202.495575][ T7200] ? __pfx_do_exit+0x10/0x10 [ 202.495617][ T7200] ? do_raw_spin_lock+0x128/0x260 [ 202.495648][ T7200] ? find_held_lock+0x2b/0x80 [ 202.495684][ T7200] ? get_signal+0x7e0/0x21e0 [ 202.495722][ T7200] do_group_exit+0xd5/0x2a0 [ 202.495768][ T7200] get_signal+0x1ec7/0x21e0 [ 202.495818][ T7200] ? __pfx_get_signal+0x10/0x10 [ 202.495855][ T7200] ? do_futex+0x192/0x350 [ 202.495892][ T7200] arch_do_signal_or_restart+0x91/0x770 [ 202.495934][ T7200] ? find_held_lock+0x2b/0x80 [ 202.495968][ T7200] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 202.496023][ T7200] ? __pfx___x64_sys_futex+0x10/0x10 [ 202.496056][ T7200] ? rcu_is_watching+0x12/0xc0 [ 202.496095][ T7200] exit_to_user_mode_loop+0x86/0x4a0 [ 202.496124][ T7200] ? do_syscall_64+0x519/0xf80 [ 202.496161][ T7200] do_syscall_64+0x6f2/0xf80 [ 202.496193][ T7200] ? clear_bhb_loop+0x40/0x90 [ 202.496229][ T7200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.496338][ T7200] RIP: 0033:0x7f51b479cdd9 [ 202.496366][ T7200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.496391][ T7200] RSP: 002b:00007f51b56650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 202.496419][ T7200] RAX: fffffffffffffe00 RBX: 00007f51b4a16098 RCX: 00007f51b479cdd9 [ 202.496436][ T7200] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f51b4a16098 [ 202.496453][ T7200] RBP: 00007f51b4a16090 R08: 0000000000000000 R09: 0000000000000000 [ 202.496468][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.496484][ T7200] R13: 00007f51b4a16128 R14: 00007ffd5fcd8490 R15: 00007ffd5fcd8578 [ 202.496521][ T7200] [ 203.113248][ T7199] random: crng reseeded on system resumption [ 203.236584][ T7217] nvme_fabrics: missing parameter 'transport=%s' [ 203.247515][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.276'. [ 203.256666][ T7217] nvme_fabrics: missing parameter 'nqn=%s' [ 205.493307][ T7247] zswap: compressor not available [ 205.561363][ T7251] FAULT_INJECTION: forcing a failure. [ 205.561363][ T7251] name failslab, interval 1, probability 0, space 0, times 0 [ 205.659845][ T7251] CPU: 1 UID: 0 PID: 7251 Comm: syz.3.283 Not tainted syzkaller #0 PREEMPT(full) [ 205.659871][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.659881][ T7251] Call Trace: [ 205.659888][ T7251] [ 205.659894][ T7251] dump_stack_lvl+0x100/0x190 [ 205.659921][ T7251] should_fail_ex.cold+0x5/0xa [ 205.659944][ T7251] should_failslab+0xc2/0x120 [ 205.659966][ T7251] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 205.659995][ T7251] ? taskstats_exit+0x67b/0xc10 [ 205.660020][ T7251] ? rcu_is_watching+0x12/0xc0 [ 205.660046][ T7251] taskstats_exit+0x67b/0xc10 [ 205.660072][ T7251] ? __pfx_acct_update_integrals+0x10/0x10 [ 205.660100][ T7251] ? __pfx_taskstats_exit+0x10/0x10 [ 205.660127][ T7251] ? rcu_read_lock_any_held+0x6a/0xa0 [ 205.660151][ T7251] ? exit_signals+0x395/0xaf0 [ 205.660176][ T7251] do_exit+0x65c/0x2a60 [ 205.660208][ T7251] ? __pfx_do_exit+0x10/0x10 [ 205.660236][ T7251] ? do_raw_spin_lock+0x128/0x260 [ 205.660257][ T7251] ? find_held_lock+0x2b/0x80 [ 205.660280][ T7251] ? get_signal+0x7e0/0x21e0 [ 205.660305][ T7251] do_group_exit+0xd5/0x2a0 [ 205.660336][ T7251] get_signal+0x1ec7/0x21e0 [ 205.660367][ T7251] ? __pfx_get_signal+0x10/0x10 [ 205.660391][ T7251] ? do_futex+0x192/0x350 [ 205.660414][ T7251] arch_do_signal_or_restart+0x91/0x770 [ 205.660457][ T7251] ? find_held_lock+0x2b/0x80 [ 205.660480][ T7251] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 205.660515][ T7251] ? __pfx___x64_sys_futex+0x10/0x10 [ 205.660536][ T7251] ? rcu_is_watching+0x12/0xc0 [ 205.660560][ T7251] exit_to_user_mode_loop+0x86/0x4a0 [ 205.660578][ T7251] ? do_syscall_64+0x519/0xf80 [ 205.660602][ T7251] do_syscall_64+0x6f2/0xf80 [ 205.660623][ T7251] ? clear_bhb_loop+0x40/0x90 [ 205.660645][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.660664][ T7251] RIP: 0033:0x7f301f19cdd9 [ 205.660680][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.660697][ T7251] RSP: 002b:00007f302010b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.660714][ T7251] RAX: fffffffffffffe00 RBX: 00007f301f416098 RCX: 00007f301f19cdd9 [ 205.660726][ T7251] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f301f416098 [ 205.660736][ T7251] RBP: 00007f301f416090 R08: 0000000000000000 R09: 0000000000000000 [ 205.660746][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.660756][ T7251] R13: 00007f301f416128 R14: 00007ffddc37a330 R15: 00007ffddc37a418 [ 205.660778][ T7251] [ 206.911058][ T7268] random: crng reseeded on system resumption [ 207.879116][ T7296] FAULT_INJECTION: forcing a failure. [ 207.879116][ T7296] name failslab, interval 1, probability 0, space 0, times 0 [ 207.927607][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz.1.293 Not tainted syzkaller #0 PREEMPT(full) [ 207.927634][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.927644][ T7296] Call Trace: [ 207.927650][ T7296] [ 207.927657][ T7296] dump_stack_lvl+0x100/0x190 [ 207.927682][ T7296] should_fail_ex.cold+0x5/0xa [ 207.927705][ T7296] should_failslab+0xc2/0x120 [ 207.927727][ T7296] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 207.927757][ T7296] ? taskstats_exit+0x67b/0xc10 [ 207.927782][ T7296] ? rcu_is_watching+0x12/0xc0 [ 207.927807][ T7296] taskstats_exit+0x67b/0xc10 [ 207.927833][ T7296] ? __pfx_acct_update_integrals+0x10/0x10 [ 207.927860][ T7296] ? __pfx_taskstats_exit+0x10/0x10 [ 207.927887][ T7296] ? rcu_read_lock_any_held+0x6a/0xa0 [ 207.927911][ T7296] ? exit_signals+0x395/0xaf0 [ 207.927937][ T7296] do_exit+0x65c/0x2a60 [ 207.927968][ T7296] ? __pfx_do_exit+0x10/0x10 [ 207.927997][ T7296] ? do_raw_spin_lock+0x128/0x260 [ 207.928017][ T7296] ? find_held_lock+0x2b/0x80 [ 207.928040][ T7296] ? get_signal+0x7e0/0x21e0 [ 207.928065][ T7296] do_group_exit+0xd5/0x2a0 [ 207.928096][ T7296] get_signal+0x1ec7/0x21e0 [ 207.928132][ T7296] ? __pfx_get_signal+0x10/0x10 [ 207.928157][ T7296] ? do_futex+0x192/0x350 [ 207.928180][ T7296] arch_do_signal_or_restart+0x91/0x770 [ 207.928221][ T7296] ? find_held_lock+0x2b/0x80 [ 207.928245][ T7296] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 207.928279][ T7296] ? __pfx___x64_sys_futex+0x10/0x10 [ 207.928300][ T7296] ? rcu_is_watching+0x12/0xc0 [ 207.928329][ T7296] exit_to_user_mode_loop+0x86/0x4a0 [ 207.928350][ T7296] ? do_syscall_64+0x519/0xf80 [ 207.928374][ T7296] do_syscall_64+0x6f2/0xf80 [ 207.928395][ T7296] ? clear_bhb_loop+0x40/0x90 [ 207.928417][ T7296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.928438][ T7296] RIP: 0033:0x7f51b479cdd9 [ 207.928454][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.928471][ T7296] RSP: 002b:00007f51b56650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 207.928489][ T7296] RAX: fffffffffffffe00 RBX: 00007f51b4a16098 RCX: 00007f51b479cdd9 [ 207.928500][ T7296] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f51b4a16098 [ 207.928512][ T7296] RBP: 00007f51b4a16090 R08: 0000000000000000 R09: 0000000000000000 [ 207.928531][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.928541][ T7296] R13: 00007f51b4a16128 R14: 00007ffd5fcd8490 R15: 00007ffd5fcd8578 [ 207.928564][ T7296] [ 208.224542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 210.688492][ T7330] mmap: syz.2.298 (7330) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 211.316418][ T3375] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.088596][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 212.096323][ T5641] Bluetooth: hci1: command 0x0406 tx timeout [ 212.097891][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 212.108813][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 212.858066][ T7363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 213.568187][ T7381] zswap: compressor not available [ 216.718985][ T7440] netlink: 342 bytes leftover after parsing attributes in process `syz.0.323'. [ 217.206133][ T7454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.327'. [ 217.541466][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 217.607153][ T7460] netlink: 354 bytes leftover after parsing attributes in process `syz.3.329'. [ 218.202188][ T7478] netlink: 342 bytes leftover after parsing attributes in process `syz.0.333'. [ 218.507144][ T7486] FAULT_INJECTION: forcing a failure. [ 218.507144][ T7486] name fail_futex, interval 1, probability 0, space 0, times 0 [ 218.554701][ T7486] CPU: 1 UID: 0 PID: 7486 Comm: syz.2.338 Not tainted syzkaller #0 PREEMPT(full) [ 218.554742][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.554760][ T7486] Call Trace: [ 218.554770][ T7486] [ 218.554781][ T7486] dump_stack_lvl+0x100/0x190 [ 218.554822][ T7486] should_fail_ex.cold+0x5/0xa [ 218.554862][ T7486] get_futex_key+0x1d2/0x1510 [ 218.554899][ T7486] ? __pfx_get_futex_key+0x10/0x10 [ 218.554945][ T7486] futex_wake+0xea/0x530 [ 218.554986][ T7486] ? rcu_is_watching+0x12/0xc0 [ 218.555025][ T7486] ? __pfx_futex_wake+0x10/0x10 [ 218.555070][ T7486] ? putname+0xb1/0x110 [ 218.555108][ T7486] ? kmem_cache_free+0x127/0x6c0 [ 218.555162][ T7486] do_futex+0x32b/0x350 [ 218.555197][ T7486] ? __pfx_do_futex+0x10/0x10 [ 218.555227][ T7486] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.555276][ T7486] ? __fget_files+0x21f/0x3d0 [ 218.555316][ T7486] __x64_sys_futex+0x34f/0x4d0 [ 218.555352][ T7486] ? __x64_sys_openat+0x12d/0x210 [ 218.555408][ T7486] ? __pfx___x64_sys_futex+0x10/0x10 [ 218.555448][ T7486] ? rcu_is_watching+0x12/0xc0 [ 218.555490][ T7486] do_syscall_64+0x10b/0xf80 [ 218.555527][ T7486] ? clear_bhb_loop+0x40/0x90 [ 218.555565][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.555595][ T7486] RIP: 0033:0x7ffa4af9cdd9 [ 218.555621][ T7486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.555650][ T7486] RSP: 002b:00007ffa4bdf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 218.555680][ T7486] RAX: ffffffffffffffda RBX: 00007ffa4b215fa8 RCX: 00007ffa4af9cdd9 [ 218.555699][ T7486] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffa4b215fac [ 218.555717][ T7486] RBP: 00007ffa4b215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 218.555735][ T7486] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 218.555753][ T7486] R13: 00007ffa4b216038 R14: 00007ffc3dfd4180 R15: 00007ffc3dfd4268 [ 218.555793][ T7486] [ 219.961293][ T7516] random: crng reseeded on system resumption [ 221.029074][ T7524] random: crng reseeded on system resumption [ 221.394304][ T7542] netlink: 342 bytes leftover after parsing attributes in process `syz.0.355'. [ 221.418991][ T7542] netlink: 342 bytes leftover after parsing attributes in process `syz.0.355'. [ 222.103116][ T7546] zswap: compressor not available [ 223.670019][ T7578] block nbd0: NBD_DISCONNECT [ 224.516303][ T7594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.360'. [ 229.921230][ T7699] netlink: 342 bytes leftover after parsing attributes in process `syz.0.380'. [ 230.710193][ T7703] zswap: compressor not available [ 231.402566][ T7719] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 233.315635][ T7746] netlink: 342 bytes leftover after parsing attributes in process `syz.1.390'. [ 233.587627][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 233.735046][ T7750] random: crng reseeded on system resumption [ 234.072949][ T7751] zswap: compressor not available [ 234.187041][ T7766] netlink: 342 bytes leftover after parsing attributes in process `syz.0.394'. [ 234.774943][ T7771] random: crng reseeded on system resumption [ 235.391098][ T7788] block nbd0: NBD_DISCONNECT [ 237.523774][ T7811] zswap: compressor not available [ 237.939213][ T7829] can: request_module (can-proto-4) failed. [ 239.210613][ T50] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 240.187298][ T7870] zswap: compressor not available [ 241.372878][ T7904] FAULT_INJECTION: forcing a failure. [ 241.372878][ T7904] name fail_futex, interval 1, probability 0, space 0, times 0 [ 241.413793][ T7904] CPU: 1 UID: 0 PID: 7904 Comm: syz.3.423 Not tainted syzkaller #0 PREEMPT(full) [ 241.413843][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.413860][ T7904] Call Trace: [ 241.413869][ T7904] [ 241.413880][ T7904] dump_stack_lvl+0x100/0x190 [ 241.413920][ T7904] should_fail_ex.cold+0x5/0xa [ 241.413957][ T7904] get_futex_key+0x1d2/0x1510 [ 241.413991][ T7904] ? __pfx_get_futex_key+0x10/0x10 [ 241.414035][ T7904] futex_wake+0xea/0x530 [ 241.414074][ T7904] ? rcu_is_watching+0x12/0xc0 [ 241.414107][ T7904] ? __pfx_futex_wake+0x10/0x10 [ 241.414152][ T7904] ? putname+0xb1/0x110 [ 241.414185][ T7904] ? kmem_cache_free+0x127/0x6c0 [ 241.414235][ T7904] do_futex+0x32b/0x350 [ 241.414268][ T7904] ? __pfx_do_futex+0x10/0x10 [ 241.414295][ T7904] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.414341][ T7904] ? __fget_files+0x21f/0x3d0 [ 241.414380][ T7904] __x64_sys_futex+0x34f/0x4d0 [ 241.414416][ T7904] ? __x64_sys_openat+0x12d/0x210 [ 241.414461][ T7904] ? __pfx___x64_sys_futex+0x10/0x10 [ 241.414502][ T7904] ? rcu_is_watching+0x12/0xc0 [ 241.414543][ T7904] do_syscall_64+0x10b/0xf80 [ 241.414579][ T7904] ? clear_bhb_loop+0x40/0x90 [ 241.414615][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.414645][ T7904] RIP: 0033:0x7f301f19cdd9 [ 241.414672][ T7904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.414700][ T7904] RSP: 002b:00007f302012c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 241.414730][ T7904] RAX: ffffffffffffffda RBX: 00007f301f415fa8 RCX: 00007f301f19cdd9 [ 241.414750][ T7904] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f301f415fac [ 241.414769][ T7904] RBP: 00007f301f415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 241.414787][ T7904] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 241.414804][ T7904] R13: 00007f301f416038 R14: 00007ffddc37a330 R15: 00007ffddc37a418 [ 241.414856][ T7904] [ 242.663199][ T7928] netlink: 342 bytes leftover after parsing attributes in process `syz.2.428'. [ 243.444594][ T7949] FAULT_INJECTION: forcing a failure. [ 243.444594][ T7949] name fail_futex, interval 1, probability 0, space 0, times 0 [ 243.531059][ T7949] CPU: 1 UID: 0 PID: 7949 Comm: syz.2.432 Not tainted syzkaller #0 PREEMPT(full) [ 243.531093][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.531104][ T7949] Call Trace: [ 243.531111][ T7949] [ 243.531119][ T7949] dump_stack_lvl+0x100/0x190 [ 243.531144][ T7949] should_fail_ex.cold+0x5/0xa [ 243.531167][ T7949] get_futex_key+0x1d2/0x1510 [ 243.531190][ T7949] ? __pfx_get_futex_key+0x10/0x10 [ 243.531209][ T7949] ? __pick_eevdf+0x4a9/0x7d0 [ 243.531243][ T7949] futex_wait_setup+0x83/0x510 [ 243.531272][ T7949] __futex_wait+0x19f/0x300 [ 243.531297][ T7949] ? __pfx___futex_wait+0x10/0x10 [ 243.531320][ T7949] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 243.531345][ T7949] ? __pfx_futex_wake_mark+0x10/0x10 [ 243.531372][ T7949] ? find_held_lock+0x2b/0x80 [ 243.531394][ T7949] ? futex_wake+0x456/0x530 [ 243.531422][ T7949] futex_wait+0xe6/0x370 [ 243.531446][ T7949] ? __pfx_futex_wait+0x10/0x10 [ 243.531473][ T7949] ? __get_user_nocheck_8+0x20/0x20 [ 243.531492][ T7949] ? do_vfs_ioctl+0x226/0x13e0 [ 243.531511][ T7949] do_futex+0x1ef/0x350 [ 243.531532][ T7949] ? __pfx_do_futex+0x10/0x10 [ 243.531553][ T7949] ? find_held_lock+0x2b/0x80 [ 243.531580][ T7949] __x64_sys_futex+0x34f/0x4d0 [ 243.531602][ T7949] ? __fget_files+0x21f/0x3d0 [ 243.531622][ T7949] ? __pfx___x64_sys_futex+0x10/0x10 [ 243.531645][ T7949] ? rcu_is_watching+0x12/0xc0 [ 243.531671][ T7949] do_syscall_64+0x10b/0xf80 [ 243.531692][ T7949] ? clear_bhb_loop+0x40/0x90 [ 243.531714][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.531732][ T7949] RIP: 0033:0x7ffa4af9cdd9 [ 243.531772][ T7949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.531789][ T7949] RSP: 002b:00007ffa4bdd60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 243.531807][ T7949] RAX: ffffffffffffffda RBX: 00007ffa4b216098 RCX: 00007ffa4af9cdd9 [ 243.531819][ T7949] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa4b216098 [ 243.531830][ T7949] RBP: 00007ffa4b216090 R08: 0000000000000000 R09: 0000000000000000 [ 243.531840][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.531850][ T7949] R13: 00007ffa4b216128 R14: 00007ffc3dfd4180 R15: 00007ffc3dfd4268 [ 243.531873][ T7949] [ 244.429662][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.438'. [ 244.945930][ T7974] zswap: compressor not available [ 246.603189][ T8017] FAULT_INJECTION: forcing a failure. [ 246.603189][ T8017] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 246.636507][ T8017] CPU: 0 UID: 0 PID: 8017 Comm: syz.3.447 Not tainted syzkaller #0 PREEMPT(full) [ 246.636548][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.636564][ T8017] Call Trace: [ 246.636575][ T8017] [ 246.636587][ T8017] dump_stack_lvl+0x100/0x190 [ 246.636625][ T8017] should_fail_ex.cold+0x5/0xa [ 246.636662][ T8017] strncpy_from_user+0x3b/0x2d0 [ 246.636696][ T8017] do_getname+0x78/0x390 [ 246.636742][ T8017] do_sys_openat2+0xc5/0x1e0 [ 246.636786][ T8017] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.636826][ T8017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.636869][ T8017] ? __fget_files+0x21f/0x3d0 [ 246.636909][ T8017] __x64_sys_openat+0x12d/0x210 [ 246.636953][ T8017] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.637002][ T8017] ? ksys_write+0x1ac/0x250 [ 246.637046][ T8017] ? rcu_is_watching+0x12/0xc0 [ 246.637087][ T8017] do_syscall_64+0x10b/0xf80 [ 246.637120][ T8017] ? clear_bhb_loop+0x40/0x90 [ 246.637156][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.637185][ T8017] RIP: 0033:0x7f301f19cdd9 [ 246.637210][ T8017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.637235][ T8017] RSP: 002b:00007f302012c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.637260][ T8017] RAX: ffffffffffffffda RBX: 00007f301f415fa0 RCX: 00007f301f19cdd9 [ 246.637278][ T8017] RDX: 0000000000141000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 246.637295][ T8017] RBP: 00007f302012c090 R08: 0000000000000000 R09: 0000000000000000 [ 246.637311][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.637328][ T8017] R13: 00007f301f416038 R14: 00007f301f415fa0 R15: 00007ffddc37a418 [ 246.637367][ T8017] [ 249.329527][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.460'. [ 250.838134][ T8091] FAULT_INJECTION: forcing a failure. [ 250.838134][ T8091] name failslab, interval 1, probability 0, space 0, times 0 [ 250.892569][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.0.462 Not tainted syzkaller #0 PREEMPT(full) [ 250.892612][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.892629][ T8091] Call Trace: [ 250.892638][ T8091] [ 250.892649][ T8091] dump_stack_lvl+0x100/0x190 [ 250.892688][ T8091] should_fail_ex.cold+0x5/0xa [ 250.892726][ T8091] should_failslab+0xc2/0x120 [ 250.892758][ T8091] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 250.892803][ T8091] ? taskstats_exit+0x67b/0xc10 [ 250.892842][ T8091] ? rcu_is_watching+0x12/0xc0 [ 250.892883][ T8091] taskstats_exit+0x67b/0xc10 [ 250.892933][ T8091] ? __pfx_acct_update_integrals+0x10/0x10 [ 250.892975][ T8091] ? __pfx_taskstats_exit+0x10/0x10 [ 250.893018][ T8091] ? rcu_read_lock_any_held+0x6a/0xa0 [ 250.893056][ T8091] ? exit_signals+0x395/0xaf0 [ 250.893097][ T8091] do_exit+0x65c/0x2a60 [ 250.893147][ T8091] ? __pfx_do_exit+0x10/0x10 [ 250.893191][ T8091] ? do_raw_spin_lock+0x128/0x260 [ 250.893223][ T8091] ? find_held_lock+0x2b/0x80 [ 250.893258][ T8091] ? get_signal+0x7e0/0x21e0 [ 250.893298][ T8091] do_group_exit+0xd5/0x2a0 [ 250.893346][ T8091] get_signal+0x1ec7/0x21e0 [ 250.893398][ T8091] ? __pfx_get_signal+0x10/0x10 [ 250.893443][ T8091] ? do_futex+0x192/0x350 [ 250.893480][ T8091] arch_do_signal_or_restart+0x91/0x770 [ 250.893524][ T8091] ? find_held_lock+0x2b/0x80 [ 250.893560][ T8091] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 250.893614][ T8091] ? __pfx___x64_sys_futex+0x10/0x10 [ 250.893648][ T8091] ? rcu_is_watching+0x12/0xc0 [ 250.893685][ T8091] exit_to_user_mode_loop+0x86/0x4a0 [ 250.893714][ T8091] ? do_syscall_64+0x519/0xf80 [ 250.893752][ T8091] do_syscall_64+0x6f2/0xf80 [ 250.893785][ T8091] ? clear_bhb_loop+0x40/0x90 [ 250.893821][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.893859][ T8091] RIP: 0033:0x7f651719cdd9 [ 250.893885][ T8091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.893919][ T8091] RSP: 002b:00007f65180590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 250.893948][ T8091] RAX: fffffffffffffe00 RBX: 00007f6517416098 RCX: 00007f651719cdd9 [ 250.893965][ T8091] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6517416098 [ 250.893982][ T8091] RBP: 00007f6517416090 R08: 0000000000000000 R09: 0000000000000000 [ 250.893998][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.894014][ T8091] R13: 00007f6517416128 R14: 00007ffd8b064d10 R15: 00007ffd8b064df8 [ 250.894053][ T8091] [ 251.987483][ T8103] block nbd11: NBD_DISCONNECT [ 253.135765][ T8121] FAULT_INJECTION: forcing a failure. [ 253.135765][ T8121] name failslab, interval 1, probability 0, space 0, times 0 [ 253.182193][ T8121] CPU: 1 UID: 0 PID: 8121 Comm: syz.1.471 Not tainted syzkaller #0 PREEMPT(full) [ 253.182233][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.182250][ T8121] Call Trace: [ 253.182259][ T8121] [ 253.182269][ T8121] dump_stack_lvl+0x100/0x190 [ 253.182309][ T8121] should_fail_ex.cold+0x5/0xa [ 253.182346][ T8121] should_failslab+0xc2/0x120 [ 253.182379][ T8121] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 253.182423][ T8121] ? security_file_alloc+0x34/0x2c0 [ 253.182454][ T8121] ? trace_kmem_cache_alloc+0xd5/0x100 [ 253.182494][ T8121] security_file_alloc+0x34/0x2c0 [ 253.182527][ T8121] init_file+0x95/0x480 [ 253.182576][ T8121] alloc_empty_file+0x79/0x1c0 [ 253.182618][ T8121] path_openat+0xe8/0x31a0 [ 253.182650][ T8121] ? kasan_save_stack+0x3f/0x50 [ 253.182676][ T8121] ? kasan_save_stack+0x30/0x50 [ 253.182700][ T8121] ? kasan_save_track+0x14/0x30 [ 253.182726][ T8121] ? __kasan_slab_alloc+0x89/0x90 [ 253.182753][ T8121] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 253.182796][ T8121] ? do_getname+0x35/0x390 [ 253.182832][ T8121] ? do_sys_openat2+0xc5/0x1e0 [ 253.182905][ T8121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.182940][ T8121] ? __pfx_path_openat+0x10/0x10 [ 253.182990][ T8121] do_file_open+0x20e/0x430 [ 253.183029][ T8121] ? __pfx_do_file_open+0x10/0x10 [ 253.183090][ T8121] ? alloc_fd+0x476/0x790 [ 253.183128][ T8121] ? do_getname+0x191/0x390 [ 253.183172][ T8121] do_sys_openat2+0x10d/0x1e0 [ 253.183214][ T8121] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.183252][ T8121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 253.183292][ T8121] ? __fget_files+0x21f/0x3d0 [ 253.183328][ T8121] __x64_sys_openat+0x12d/0x210 [ 253.183369][ T8121] ? __pfx___x64_sys_openat+0x10/0x10 [ 253.183411][ T8121] ? ksys_write+0x1ac/0x250 [ 253.183471][ T8121] ? rcu_is_watching+0x12/0xc0 [ 253.183513][ T8121] do_syscall_64+0x10b/0xf80 [ 253.183547][ T8121] ? clear_bhb_loop+0x40/0x90 [ 253.183583][ T8121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.183613][ T8121] RIP: 0033:0x7f51b479cdd9 [ 253.183639][ T8121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.183671][ T8121] RSP: 002b:00007f51b5686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.183700][ T8121] RAX: ffffffffffffffda RBX: 00007f51b4a15fa0 RCX: 00007f51b479cdd9 [ 253.183719][ T8121] RDX: 0000000000141000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 253.183737][ T8121] RBP: 00007f51b5686090 R08: 0000000000000000 R09: 0000000000000000 [ 253.183754][ T8121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.183771][ T8121] R13: 00007f51b4a16038 R14: 00007f51b4a15fa0 R15: 00007ffd5fcd8578 [ 253.183810][ T8121] [ 254.915179][ T8151] FAULT_INJECTION: forcing a failure. [ 254.915179][ T8151] name failslab, interval 1, probability 0, space 0, times 0 [ 254.937532][ T8151] CPU: 0 UID: 0 PID: 8151 Comm: syz.0.483 Not tainted syzkaller #0 PREEMPT(full) [ 254.937572][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.937588][ T8151] Call Trace: [ 254.937597][ T8151] [ 254.937608][ T8151] dump_stack_lvl+0x100/0x190 [ 254.937646][ T8151] should_fail_ex.cold+0x5/0xa [ 254.937693][ T8151] ? tomoyo_realpath_from_path+0xb6/0x690 [ 254.937729][ T8151] should_failslab+0xc2/0x120 [ 254.937764][ T8151] __kmalloc_noprof+0xe0/0x850 [ 254.937808][ T8151] ? kfree+0x1dd/0x6c0 [ 254.937854][ T8151] tomoyo_realpath_from_path+0xb6/0x690 [ 254.937900][ T8151] tomoyo_check_open_permission+0x2af/0x3c0 [ 254.937932][ T8151] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 254.937977][ T8151] ? hook_file_open+0x24e/0x7a0 [ 254.938036][ T8151] ? path_get+0x61/0x80 [ 254.938081][ T8151] tomoyo_file_open+0x6b/0x90 [ 254.938123][ T8151] security_file_open+0xb5/0x1e0 [ 254.938158][ T8151] do_dentry_open+0x5aa/0x1660 [ 254.938196][ T8151] ? security_inode_permission+0xbf/0x250 [ 254.938233][ T8151] vfs_open+0x82/0x3f0 [ 254.938282][ T8151] path_openat+0x208c/0x31a0 [ 254.938338][ T8151] ? __pfx_path_openat+0x10/0x10 [ 254.938390][ T8151] do_file_open+0x20e/0x430 [ 254.938429][ T8151] ? __pfx_do_file_open+0x10/0x10 [ 254.938496][ T8151] ? alloc_fd+0x476/0x790 [ 254.938536][ T8151] ? do_getname+0x191/0x390 [ 254.938582][ T8151] do_sys_openat2+0x10d/0x1e0 [ 254.938626][ T8151] ? __pfx_do_sys_openat2+0x10/0x10 [ 254.938674][ T8151] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 254.938720][ T8151] ? __fget_files+0x21f/0x3d0 [ 254.938760][ T8151] __x64_sys_openat+0x12d/0x210 [ 254.938804][ T8151] ? __pfx___x64_sys_openat+0x10/0x10 [ 254.938844][ T8151] ? ksys_write+0x1ac/0x250 [ 254.938881][ T8151] ? rcu_is_watching+0x12/0xc0 [ 254.938921][ T8151] do_syscall_64+0x10b/0xf80 [ 254.938953][ T8151] ? clear_bhb_loop+0x40/0x90 [ 254.938988][ T8151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.939018][ T8151] RIP: 0033:0x7f651719cdd9 [ 254.939043][ T8151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.939069][ T8151] RSP: 002b:00007f651807a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 254.939096][ T8151] RAX: ffffffffffffffda RBX: 00007f6517415fa0 RCX: 00007f651719cdd9 [ 254.939115][ T8151] RDX: 0000000000141000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 254.939133][ T8151] RBP: 00007f651807a090 R08: 0000000000000000 R09: 0000000000000000 [ 254.939150][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.939167][ T8151] R13: 00007f6517416038 R14: 00007f6517415fa0 R15: 00007ffd8b064df8 [ 254.939208][ T8151] [ 255.388826][ T8151] ERROR: Out of memory at tomoyo_realpath_from_path. [ 256.087153][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.094031][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.680416][ T8176] phram: not enough arguments [ 256.708763][ T29] audit: type=1804 audit(1777654675.695:6): pid=8176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.479" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=17 res=1 errno=0 [ 256.904559][ T8178] wlan1: mtu less than device minimum [ 257.940100][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.484'. [ 258.459960][ T8193] __vm_enough_memory: pid: 8193, comm: syz.3.482, bytes: 4398046511104 not enough memory for the allocation [ 258.717541][ T8199] FAULT_INJECTION: forcing a failure. [ 258.717541][ T8199] name failslab, interval 1, probability 0, space 0, times 0 [ 258.787646][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.0.487 Not tainted syzkaller #0 PREEMPT(full) [ 258.787686][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.787701][ T8199] Call Trace: [ 258.787711][ T8199] [ 258.787722][ T8199] dump_stack_lvl+0x100/0x190 [ 258.787760][ T8199] should_fail_ex.cold+0x5/0xa [ 258.787796][ T8199] ? tomoyo_encode2+0xfb/0x3c0 [ 258.787837][ T8199] should_failslab+0xc2/0x120 [ 258.787870][ T8199] __kmalloc_noprof+0xe0/0x850 [ 258.787913][ T8199] ? d_absolute_path+0x136/0x1b0 [ 258.787965][ T8199] tomoyo_encode2+0xfb/0x3c0 [ 258.788005][ T8199] tomoyo_encode+0x29/0x50 [ 258.788037][ T8199] tomoyo_realpath_from_path+0x18c/0x690 [ 258.788082][ T8199] tomoyo_check_open_permission+0x2af/0x3c0 [ 258.788113][ T8199] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 258.788158][ T8199] ? hook_file_open+0x24e/0x7a0 [ 258.788217][ T8199] ? path_get+0x61/0x80 [ 258.788265][ T8199] tomoyo_file_open+0x6b/0x90 [ 258.788306][ T8199] security_file_open+0xb5/0x1e0 [ 258.788340][ T8199] do_dentry_open+0x5aa/0x1660 [ 258.788377][ T8199] ? security_inode_permission+0xbf/0x250 [ 258.788413][ T8199] vfs_open+0x82/0x3f0 [ 258.788460][ T8199] path_openat+0x208c/0x31a0 [ 258.788507][ T8199] ? __pfx_path_openat+0x10/0x10 [ 258.788557][ T8199] do_file_open+0x20e/0x430 [ 258.788596][ T8199] ? __pfx_do_file_open+0x10/0x10 [ 258.788662][ T8199] ? alloc_fd+0x476/0x790 [ 258.788700][ T8199] ? do_getname+0x191/0x390 [ 258.788745][ T8199] do_sys_openat2+0x10d/0x1e0 [ 258.788788][ T8199] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.788834][ T8199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 258.788877][ T8199] ? __fget_files+0x21f/0x3d0 [ 258.788916][ T8199] __x64_sys_openat+0x12d/0x210 [ 258.788961][ T8199] ? __pfx___x64_sys_openat+0x10/0x10 [ 258.789004][ T8199] ? ksys_write+0x1ac/0x250 [ 258.789043][ T8199] ? rcu_is_watching+0x12/0xc0 [ 258.789084][ T8199] do_syscall_64+0x10b/0xf80 [ 258.789119][ T8199] ? clear_bhb_loop+0x40/0x90 [ 258.789155][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.789185][ T8199] RIP: 0033:0x7f651719cdd9 [ 258.789210][ T8199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.789236][ T8199] RSP: 002b:00007f651807a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 258.789266][ T8199] RAX: ffffffffffffffda RBX: 00007f6517415fa0 RCX: 00007f651719cdd9 [ 258.789285][ T8199] RDX: 0000000000141000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 258.789303][ T8199] RBP: 00007f651807a090 R08: 0000000000000000 R09: 0000000000000000 [ 258.789321][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.789338][ T8199] R13: 00007f6517416038 R14: 00007f6517415fa0 R15: 00007ffd8b064df8 [ 258.789378][ T8199] [ 259.114244][ T8199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 262.689604][ T8254] FAULT_INJECTION: forcing a failure. [ 262.689604][ T8254] name failslab, interval 1, probability 0, space 0, times 0 [ 262.759585][ T8254] CPU: 0 UID: 0 PID: 8254 Comm: syz.1.498 Not tainted syzkaller #0 PREEMPT(full) [ 262.759624][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.759640][ T8254] Call Trace: [ 262.759649][ T8254] [ 262.759660][ T8254] dump_stack_lvl+0x100/0x190 [ 262.759698][ T8254] should_fail_ex.cold+0x5/0xa [ 262.759737][ T8254] should_failslab+0xc2/0x120 [ 262.759779][ T8254] __kmalloc_cache_noprof+0x7a/0x6f0 [ 262.759818][ T8254] ? tomoyo_init_log+0x1a0/0x20c0 [ 262.759861][ T8254] tomoyo_init_log+0x1a0/0x20c0 [ 262.759893][ T8254] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.759937][ T8254] ? vsnprintf+0x4ee/0x1240 [ 262.759981][ T8254] ? __pfx_tomoyo_init_log+0x10/0x10 [ 262.760014][ T8254] ? tomoyo_profile+0x47/0x60 [ 262.760050][ T8254] ? tomoyo_domain_quota_is_ok+0x367/0x580 [ 262.760101][ T8254] tomoyo_supervisor+0x506/0x1340 [ 262.760149][ T8254] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 262.760217][ T8254] ? tomoyo_check_path_acl+0x141/0x210 [ 262.760266][ T8254] ? tomoyo_check_acl+0x1f7/0x410 [ 262.760314][ T8254] tomoyo_path_permission+0x270/0x3b0 [ 262.760365][ T8254] tomoyo_check_open_permission+0x37f/0x3c0 [ 262.760402][ T8254] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 262.760445][ T8254] ? hook_file_open+0x24e/0x7a0 [ 262.760498][ T8254] ? path_get+0x61/0x80 [ 262.760539][ T8254] tomoyo_file_open+0x6b/0x90 [ 262.760579][ T8254] security_file_open+0xb5/0x1e0 [ 262.760611][ T8254] do_dentry_open+0x5aa/0x1660 [ 262.760646][ T8254] ? security_inode_permission+0xbf/0x250 [ 262.760680][ T8254] vfs_open+0x82/0x3f0 [ 262.760723][ T8254] path_openat+0x208c/0x31a0 [ 262.760777][ T8254] ? __pfx_path_openat+0x10/0x10 [ 262.760826][ T8254] do_file_open+0x20e/0x430 [ 262.760861][ T8254] ? __pfx_do_file_open+0x10/0x10 [ 262.760922][ T8254] ? alloc_fd+0x476/0x790 [ 262.760958][ T8254] ? do_getname+0x191/0x390 [ 262.760999][ T8254] do_sys_openat2+0x10d/0x1e0 [ 262.761038][ T8254] ? __pfx_do_sys_openat2+0x10/0x10 [ 262.761075][ T8254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.761116][ T8254] ? __fget_files+0x21f/0x3d0 [ 262.761153][ T8254] __x64_sys_openat+0x12d/0x210 [ 262.761194][ T8254] ? __pfx___x64_sys_openat+0x10/0x10 [ 262.761233][ T8254] ? ksys_write+0x1ac/0x250 [ 262.761269][ T8254] ? rcu_is_watching+0x12/0xc0 [ 262.761307][ T8254] do_syscall_64+0x10b/0xf80 [ 262.761337][ T8254] ? clear_bhb_loop+0x40/0x90 [ 262.761370][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.761397][ T8254] RIP: 0033:0x7f51b479cdd9 [ 262.761420][ T8254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.761445][ T8254] RSP: 002b:00007f51b5686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 262.761471][ T8254] RAX: ffffffffffffffda RBX: 00007f51b4a15fa0 RCX: 00007f51b479cdd9 [ 262.761488][ T8254] RDX: 0000000000141000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 262.761505][ T8254] RBP: 00007f51b5686090 R08: 0000000000000000 R09: 0000000000000000 [ 262.761521][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.761535][ T8254] R13: 00007f51b4a16038 R14: 00007f51b4a15fa0 R15: 00007ffd5fcd8578 [ 262.761572][ T8254] [ 271.898905][ T8372] random: crng reseeded on system resumption [ 272.780792][ T8390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.526'. [ 273.589208][ T8406] FAULT_INJECTION: forcing a failure. [ 273.589208][ T8406] name fail_futex, interval 1, probability 0, space 0, times 0 [ 273.603891][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.1.530 Not tainted syzkaller #0 PREEMPT(full) [ 273.603933][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.603951][ T8406] Call Trace: [ 273.603961][ T8406] [ 273.603972][ T8406] dump_stack_lvl+0x100/0x190 [ 273.604011][ T8406] should_fail_ex.cold+0x5/0xa [ 273.604048][ T8406] get_futex_key+0x1d2/0x1510 [ 273.604082][ T8406] ? __pfx_get_futex_key+0x10/0x10 [ 273.604130][ T8406] futex_wake+0xea/0x530 [ 273.604167][ T8406] ? rcu_is_watching+0x12/0xc0 [ 273.604205][ T8406] ? __pfx_futex_wake+0x10/0x10 [ 273.604248][ T8406] ? putname+0xb1/0x110 [ 273.604284][ T8406] ? kmem_cache_free+0x127/0x6c0 [ 273.604334][ T8406] do_futex+0x32b/0x350 [ 273.604364][ T8406] ? __pfx_do_futex+0x10/0x10 [ 273.604403][ T8406] ? __pfx_do_sys_openat2+0x10/0x10 [ 273.604450][ T8406] ? __fget_files+0x21f/0x3d0 [ 273.604490][ T8406] __x64_sys_futex+0x34f/0x4d0 [ 273.604529][ T8406] ? __pfx___x64_sys_futex+0x10/0x10 [ 273.604570][ T8406] ? rcu_is_watching+0x12/0xc0 [ 273.604610][ T8406] do_syscall_64+0x10b/0xf80 [ 273.604644][ T8406] ? clear_bhb_loop+0x40/0x90 [ 273.604681][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.604713][ T8406] RIP: 0033:0x7f51b479cdd9 [ 273.604739][ T8406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.604767][ T8406] RSP: 002b:00007f51b56860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 273.604795][ T8406] RAX: ffffffffffffffda RBX: 00007f51b4a15fa8 RCX: 00007f51b479cdd9 [ 273.604815][ T8406] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f51b4a15fac [ 273.604833][ T8406] RBP: 00007f51b4a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 273.604850][ T8406] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 273.604867][ T8406] R13: 00007f51b4a16038 R14: 00007ffd5fcd8490 R15: 00007ffd5fcd8578 [ 273.604905][ T8406] [ 275.536745][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'. [ 275.577465][ T8438] random: crng reseeded on system resumption [ 280.399088][ T8521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 280.452774][ T8521] random: crng reseeded on system resumption [ 280.504531][ T8521] Restarting kernel threads ... [ 280.516827][ T8521] Done restarting kernel threads. [ 283.021304][ T8550] FAULT_INJECTION: forcing a failure. [ 283.021304][ T8550] name failslab, interval 1, probability 0, space 0, times 0 [ 283.036519][ T8550] CPU: 1 UID: 0 PID: 8550 Comm: syz.1.566 Not tainted syzkaller #0 PREEMPT(full) [ 283.036560][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.036577][ T8550] Call Trace: [ 283.036586][ T8550] [ 283.036609][ T8550] dump_stack_lvl+0x100/0x190 [ 283.036650][ T8550] should_fail_ex.cold+0x5/0xa [ 283.036687][ T8550] should_failslab+0xc2/0x120 [ 283.036721][ T8550] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 283.036768][ T8550] ? xas_split_alloc+0x11c/0x4a0 [ 283.036813][ T8550] xas_split_alloc+0x11c/0x4a0 [ 283.036861][ T8550] __folio_split+0x5e5/0x1690 [ 283.036916][ T8550] ? __pfx___folio_split+0x10/0x10 [ 283.036970][ T8550] ? __pfx___might_resched+0x10/0x10 [ 283.037014][ T8550] madvise_cold_or_pageout_pte_range+0xf8c/0x2620 [ 283.037073][ T8550] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 283.037116][ T8550] ? stack_trace_save+0x8e/0xc0 [ 283.037164][ T8550] ? register_lock_class+0x40/0x560 [ 283.037207][ T8550] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 283.037249][ T8550] walk_pgd_range+0xc1a/0x1dd0 [ 283.037315][ T8550] ? __pfx_walk_pgd_range+0x10/0x10 [ 283.037344][ T8550] ? __pfx___might_resched+0x10/0x10 [ 283.037377][ T8550] ? find_held_lock+0x2b/0x80 [ 283.037413][ T8550] ? process_measurement+0x4c8/0x2350 [ 283.037461][ T8550] __walk_page_range+0x163/0x820 [ 283.037492][ T8550] ? up_write+0x28c/0x4f0 [ 283.037538][ T8550] walk_page_range_vma_unsafe+0x209/0x8f0 [ 283.037576][ T8550] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 283.037615][ T8550] ? find_held_lock+0x2b/0x80 [ 283.037652][ T8550] ? mlock_drain_local+0x254/0x4e0 [ 283.037697][ T8550] ? mlock_drain_local+0x254/0x4e0 [ 283.037749][ T8550] walk_page_range_vma+0x63/0x90 [ 283.037783][ T8550] madvise_pageout+0x259/0x540 [ 283.037825][ T8550] ? __pfx_madvise_pageout+0x10/0x10 [ 283.037861][ T8550] ? rcu_is_watching+0x12/0xc0 [ 283.037914][ T8550] ? mtree_range_walk+0x72b/0xb70 [ 283.037952][ T8550] madvise_vma_behavior+0x4f7/0x2200 [ 283.037996][ T8550] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 283.038047][ T8550] ? find_vma_prev+0xd8/0x150 [ 283.038080][ T8550] ? futex_unqueue+0x133/0x2c0 [ 283.038109][ T8550] ? __pfx_find_vma_prev+0x10/0x10 [ 283.038155][ T8550] ? __futex_wait+0x256/0x300 [ 283.038202][ T8550] madvise_walk_vmas+0x2fe/0xa90 [ 283.038247][ T8550] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 283.038312][ T8550] madvise_do_behavior+0x1ea/0x510 [ 283.038355][ T8550] ? __pfx_madvise_do_behavior+0x10/0x10 [ 283.038403][ T8550] ? down_read+0x13b/0x450 [ 283.038462][ T8550] do_madvise+0x195/0x240 [ 283.038499][ T8550] ? __pfx_do_madvise+0x10/0x10 [ 283.038535][ T8550] ? do_futex+0x192/0x350 [ 283.038575][ T8550] ? __sys_sendmsg+0x18f/0x220 [ 283.038633][ T8550] __x64_sys_madvise+0xa9/0x110 [ 283.038670][ T8550] ? lockdep_hardirqs_on+0x78/0x100 [ 283.038705][ T8550] do_syscall_64+0x10b/0xf80 [ 283.038739][ T8550] ? clear_bhb_loop+0x40/0x90 [ 283.038776][ T8550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.038806][ T8550] RIP: 0033:0x7f51b479cdd9 [ 283.038832][ T8550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.038858][ T8550] RSP: 002b:00007f51b5686028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 283.038887][ T8550] RAX: ffffffffffffffda RBX: 00007f51b4a15fa0 RCX: 00007f51b479cdd9 [ 283.038905][ T8550] RDX: 0000000000000015 RSI: 0000000000000081 RDI: 0000000000000000 [ 283.038921][ T8550] RBP: 00007f51b4832d69 R08: 0000000000000000 R09: 0000000000000000 [ 283.038938][ T8550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.038954][ T8550] R13: 00007f51b4a16038 R14: 00007f51b4a15fa0 R15: 00007ffd5fcd8578 [ 283.038994][ T8550] [ 284.090571][ T8558] random: crng reseeded on system resumption [ 284.176607][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.561'. [ 285.669618][ T8583] netlink: 342 bytes leftover after parsing attributes in process `syz.0.563'. [ 285.713332][ T8583] netlink: 214 bytes leftover after parsing attributes in process `syz.0.563'. [ 286.641911][ T8588] random: crng reseeded on system resumption [ 286.962030][ T8594] FAULT_INJECTION: forcing a failure. [ 286.962030][ T8594] name failslab, interval 1, probability 0, space 0, times 0 [ 287.003822][ T8594] CPU: 0 UID: 0 PID: 8594 Comm: syz.3.567 Not tainted syzkaller #0 PREEMPT(full) [ 287.003866][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.003884][ T8594] Call Trace: [ 287.003893][ T8594] [ 287.003905][ T8594] dump_stack_lvl+0x100/0x190 [ 287.003944][ T8594] should_fail_ex.cold+0x5/0xa [ 287.003983][ T8594] ? lsm_blob_alloc+0x68/0x90 [ 287.004021][ T8594] should_failslab+0xc2/0x120 [ 287.004056][ T8594] __kmalloc_noprof+0xe0/0x850 [ 287.004106][ T8594] ? trace_kmalloc+0xe3/0x110 [ 287.004145][ T8594] lsm_blob_alloc+0x68/0x90 [ 287.004185][ T8594] security_sk_alloc+0x2d/0x290 [ 287.004241][ T8594] sk_prot_alloc+0x12a/0x2a0 [ 287.004282][ T8594] sk_alloc+0x36/0xe80 [ 287.004330][ T8594] __netlink_create+0x5e/0x2c0 [ 287.004359][ T8594] ? __wake_up+0x3f/0x60 [ 287.004404][ T8594] netlink_create+0x29b/0x610 [ 287.004436][ T8594] ? __pfx_genl_bind+0x10/0x10 [ 287.004474][ T8594] ? __pfx_genl_unbind+0x10/0x10 [ 287.004510][ T8594] ? __pfx_genl_release+0x10/0x10 [ 287.004555][ T8594] __sock_create+0x339/0x860 [ 287.004602][ T8594] __sys_socket+0x14d/0x260 [ 287.004643][ T8594] ? __pfx___sys_socket+0x10/0x10 [ 287.004695][ T8594] __x64_sys_socket+0x72/0xb0 [ 287.004733][ T8594] ? lockdep_hardirqs_on+0x78/0x100 [ 287.004770][ T8594] do_syscall_64+0x10b/0xf80 [ 287.004805][ T8594] ? clear_bhb_loop+0x40/0x90 [ 287.004842][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.004873][ T8594] RIP: 0033:0x7f301f19e647 [ 287.004898][ T8594] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.004926][ T8594] RSP: 002b:00007f302012af98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 287.004954][ T8594] RAX: ffffffffffffffda RBX: 00007f301f415fa0 RCX: 00007f301f19e647 [ 287.004973][ T8594] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 287.004990][ T8594] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 287.005006][ T8594] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 287.005023][ T8594] R13: 00007f301f416038 R14: 00007f301f415fa0 R15: 00007ffddc37a418 [ 287.005063][ T8594] [ 287.782569][ T8605] random: crng reseeded on system resumption [ 289.584834][ T8636] random: crng reseeded on system resumption [ 289.617107][ T8636] Restarting kernel threads ... [ 289.624373][ T8636] Done restarting kernel threads. [ 291.367585][ T8665] FAULT_INJECTION: forcing a failure. [ 291.367585][ T8665] name fail_futex, interval 1, probability 0, space 0, times 0 [ 291.407907][ T8665] CPU: 0 UID: 0 PID: 8665 Comm: syz.1.582 Not tainted syzkaller #0 PREEMPT(full) [ 291.407950][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.407968][ T8665] Call Trace: [ 291.407978][ T8665] [ 291.407990][ T8665] dump_stack_lvl+0x100/0x190 [ 291.408032][ T8665] should_fail_ex.cold+0x5/0xa [ 291.408072][ T8665] get_futex_key+0x1d2/0x1510 [ 291.408108][ T8665] ? __pfx_get_futex_key+0x10/0x10 [ 291.408151][ T8665] futex_wake+0xea/0x530 [ 291.408190][ T8665] ? rcu_is_watching+0x12/0xc0 [ 291.408227][ T8665] ? __pfx_futex_wake+0x10/0x10 [ 291.408271][ T8665] ? putname+0xb1/0x110 [ 291.408307][ T8665] ? kmem_cache_free+0x127/0x6c0 [ 291.408363][ T8665] do_futex+0x32b/0x350 [ 291.408398][ T8665] ? __pfx_do_futex+0x10/0x10 [ 291.408429][ T8665] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.408487][ T8665] ? __fget_files+0x21f/0x3d0 [ 291.408526][ T8665] __x64_sys_futex+0x34f/0x4d0 [ 291.408566][ T8665] ? __pfx___x64_sys_futex+0x10/0x10 [ 291.408608][ T8665] ? rcu_is_watching+0x12/0xc0 [ 291.408651][ T8665] do_syscall_64+0x10b/0xf80 [ 291.408687][ T8665] ? clear_bhb_loop+0x40/0x90 [ 291.408726][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.408763][ T8665] RIP: 0033:0x7f51b479cdd9 [ 291.408790][ T8665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.408817][ T8665] RSP: 002b:00007f51b56860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 291.408847][ T8665] RAX: ffffffffffffffda RBX: 00007f51b4a15fa8 RCX: 00007f51b479cdd9 [ 291.408866][ T8665] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f51b4a15fac [ 291.408884][ T8665] RBP: 00007f51b4a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 291.408902][ T8665] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 291.408919][ T8665] R13: 00007f51b4a16038 R14: 00007ffd5fcd8490 R15: 00007ffd5fcd8578 [ 291.408960][ T8665] [ 292.097318][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 292.122272][ T8671] netlink: 5 bytes leftover after parsing attributes in process `syz.1.584'. [ 292.152800][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.584'. [ 293.127523][ T8683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 293.170157][ T8683] random: crng reseeded on system resumption [ 293.203216][ T8683] Restarting kernel threads ... [ 293.226334][ T8683] Done restarting kernel threads. [ 293.912517][ T8680] syz.1.586 (8680) used greatest stack depth: 18536 bytes left [ 295.008347][ T8718] netlink: 342 bytes leftover after parsing attributes in process `syz.3.591'. [ 297.596274][ T8776] FAULT_INJECTION: forcing a failure. [ 297.596274][ T8776] name fail_futex, interval 1, probability 0, space 0, times 0 [ 297.661362][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.2.599 Not tainted syzkaller #0 PREEMPT(full) [ 297.661389][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.661399][ T8776] Call Trace: [ 297.661405][ T8776] [ 297.661412][ T8776] dump_stack_lvl+0x100/0x190 [ 297.661437][ T8776] should_fail_ex.cold+0x5/0xa [ 297.661461][ T8776] get_futex_key+0x1d2/0x1510 [ 297.661482][ T8776] ? __pfx_get_futex_key+0x10/0x10 [ 297.661499][ T8776] ? find_held_lock+0x2b/0x80 [ 297.661523][ T8776] ? futex_wake+0x456/0x530 [ 297.661551][ T8776] futex_wake+0xea/0x530 [ 297.661576][ T8776] ? __pfx_futex_wake+0x10/0x10 [ 297.661601][ T8776] ? __lock_acquire+0x4a5/0x2630 [ 297.661623][ T8776] do_futex+0x32b/0x350 [ 297.661643][ T8776] ? __pfx_do_futex+0x10/0x10 [ 297.661663][ T8776] ? find_held_lock+0x2b/0x80 [ 297.661689][ T8776] __x64_sys_futex+0x34f/0x4d0 [ 297.661710][ T8776] ? __fget_files+0x21f/0x3d0 [ 297.661731][ T8776] ? __pfx___x64_sys_futex+0x10/0x10 [ 297.661754][ T8776] ? rcu_is_watching+0x12/0xc0 [ 297.661779][ T8776] do_syscall_64+0x10b/0xf80 [ 297.661800][ T8776] ? clear_bhb_loop+0x40/0x90 [ 297.661822][ T8776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.661841][ T8776] RIP: 0033:0x7ffa4af9cdd9 [ 297.661856][ T8776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.661873][ T8776] RSP: 002b:00007ffa4bdf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 297.661890][ T8776] RAX: ffffffffffffffda RBX: 00007ffa4b215fa8 RCX: 00007ffa4af9cdd9 [ 297.661902][ T8776] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffa4b215fac [ 297.661912][ T8776] RBP: 00007ffa4b215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 297.661922][ T8776] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 297.661932][ T8776] R13: 00007ffa4b216038 R14: 00007ffc3dfd4180 R15: 00007ffc3dfd4268 [ 297.661954][ T8776] [ 298.077629][ T8781] FAULT_INJECTION: forcing a failure. [ 298.077629][ T8781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.125198][ T8781] CPU: 0 UID: 0 PID: 8781 Comm: syz.1.600 Not tainted syzkaller #0 PREEMPT(full) [ 298.125237][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.125253][ T8781] Call Trace: [ 298.125262][ T8781] [ 298.125272][ T8781] dump_stack_lvl+0x100/0x190 [ 298.125309][ T8781] should_fail_ex.cold+0x5/0xa [ 298.125346][ T8781] _copy_from_user+0x2e/0xd0 [ 298.125393][ T8781] kstrtouint_from_user+0xd6/0x1d0 [ 298.125428][ T8781] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 298.125459][ T8781] ? __lock_acquire+0x4a5/0x2630 [ 298.125499][ T8781] ? lock_acquire+0x1b1/0x370 [ 298.125533][ T8781] proc_fail_nth_write+0x83/0x220 [ 298.125577][ T8781] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 298.125632][ T8781] vfs_write+0x2aa/0x1070 [ 298.125664][ T8781] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 298.125712][ T8781] ? __pfx_vfs_write+0x10/0x10 [ 298.125743][ T8781] ? __fget_files+0x215/0x3d0 [ 298.125784][ T8781] ? __fget_files+0x21f/0x3d0 [ 298.125829][ T8781] ksys_write+0x12a/0x250 [ 298.125862][ T8781] ? __pfx_ksys_write+0x10/0x10 [ 298.125896][ T8781] ? rcu_is_watching+0x12/0xc0 [ 298.125933][ T8781] do_syscall_64+0x10b/0xf80 [ 298.125967][ T8781] ? clear_bhb_loop+0x40/0x90 [ 298.126001][ T8781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.126029][ T8781] RIP: 0033:0x7f51b475d60e [ 298.126053][ T8781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.126088][ T8781] RSP: 002b:00007f51b5685fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.126114][ T8781] RAX: ffffffffffffffda RBX: 00007f51b56866c0 RCX: 00007f51b475d60e [ 298.126132][ T8781] RDX: 0000000000000001 RSI: 00007f51b56860a0 RDI: 000000000000000d [ 298.126148][ T8781] RBP: 00007f51b5686090 R08: 0000000000000000 R09: 0000000000000000 [ 298.126164][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 298.126179][ T8781] R13: 00007f51b4a16038 R14: 00007f51b4a15fa0 R15: 00007ffd5fcd8578 [ 298.126218][ T8781] [ 298.877715][ T8787] random: crng reseeded on system resumption [ 299.172757][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.605'. [ 300.872795][ T8836] netlink: 330 bytes leftover after parsing attributes in process `syz.0.612'. [ 301.291017][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 301.346384][ T8854] random: crng reseeded on system resumption [ 301.359540][ T8838] zswap: compressor not available [ 301.390635][ T8854] Restarting kernel threads ... [ 301.419852][ T8854] Done restarting kernel threads. [ 301.579718][ T8849] random: crng reseeded on system resumption [ 302.864545][ T8906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.627'. [ 302.939921][ T8908] random: crng reseeded on system resumption [ 302.988521][ T8908] Restarting kernel threads ... [ 303.011281][ T8908] Done restarting kernel threads. [ 303.929808][ T8926] random: crng reseeded on system resumption [ 305.354385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 305.646243][ T8957] zswap: compressor not available [ 305.667546][ T8973] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 306.194608][ T8980] random: crng reseeded on system resumption [ 306.918695][ T8990] block2mtd: illegal erase size [ 307.449279][ T9002] FAULT_INJECTION: forcing a failure. [ 307.449279][ T9002] name failslab, interval 1, probability 0, space 0, times 0 [ 307.518926][ T9002] CPU: 1 UID: 0 PID: 9002 Comm: syz.0.648 Not tainted syzkaller #0 PREEMPT(full) [ 307.518980][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.518999][ T9002] Call Trace: [ 307.519010][ T9002] [ 307.519021][ T9002] dump_stack_lvl+0x100/0x190 [ 307.519063][ T9002] should_fail_ex.cold+0x5/0xa [ 307.519105][ T9002] should_failslab+0xc2/0x120 [ 307.519140][ T9002] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 307.519185][ T9002] ? security_file_alloc+0x34/0x2c0 [ 307.519215][ T9002] ? trace_kmem_cache_alloc+0xd5/0x100 [ 307.519258][ T9002] security_file_alloc+0x34/0x2c0 [ 307.519292][ T9002] init_file+0x95/0x480 [ 307.519335][ T9002] alloc_empty_file+0x79/0x1c0 [ 307.519382][ T9002] path_openat+0xe8/0x31a0 [ 307.519418][ T9002] ? kasan_save_stack+0x3f/0x50 [ 307.519447][ T9002] ? kasan_save_stack+0x30/0x50 [ 307.519475][ T9002] ? kasan_save_track+0x14/0x30 [ 307.519503][ T9002] ? __kasan_slab_alloc+0x89/0x90 [ 307.519533][ T9002] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 307.519579][ T9002] ? do_getname+0x35/0x390 [ 307.519620][ T9002] ? do_sys_openat2+0xc5/0x1e0 [ 307.519664][ T9002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.519702][ T9002] ? __pfx_path_openat+0x10/0x10 [ 307.519755][ T9002] do_file_open+0x20e/0x430 [ 307.519798][ T9002] ? __pfx_do_file_open+0x10/0x10 [ 307.519864][ T9002] ? alloc_fd+0x476/0x790 [ 307.519907][ T9002] ? do_getname+0x191/0x390 [ 307.519970][ T9002] do_sys_openat2+0x10d/0x1e0 [ 307.520017][ T9002] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.520067][ T9002] ? __fget_files+0x21f/0x3d0 [ 307.520110][ T9002] __x64_sys_openat+0x12d/0x210 [ 307.520159][ T9002] ? __pfx___x64_sys_openat+0x10/0x10 [ 307.520213][ T9002] ? rcu_is_watching+0x12/0xc0 [ 307.520255][ T9002] do_syscall_64+0x10b/0xf80 [ 307.520293][ T9002] ? clear_bhb_loop+0x40/0x90 [ 307.520331][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.520364][ T9002] RIP: 0033:0x7f651719cdd9 [ 307.520392][ T9002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.520422][ T9002] RSP: 002b:00007f6518059028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.520454][ T9002] RAX: ffffffffffffffda RBX: 00007f6517416090 RCX: 00007f651719cdd9 [ 307.520474][ T9002] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 307.520493][ T9002] RBP: 00007f6517232d69 R08: 0000000000000000 R09: 0000000000000000 [ 307.520512][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.520530][ T9002] R13: 00007f6517416128 R14: 00007f6517416090 R15: 00007ffd8b064df8 [ 307.520571][ T9002] [ 307.834561][ T29] audit: type=1800 audit(1843104523.420:7): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.649" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 310.314769][ T9044] zswap: compressor not available [ 312.316861][ T9080] FAULT_INJECTION: forcing a failure. [ 312.316861][ T9080] name failslab, interval 1, probability 0, space 0, times 0 [ 312.348306][ T9078] ubi31: attaching mtd0 [ 312.358420][ T9080] CPU: 0 UID: 0 PID: 9080 Comm: syz.1.664 Not tainted syzkaller #0 PREEMPT(full) [ 312.358446][ T9080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.358457][ T9080] Call Trace: [ 312.358463][ T9080] [ 312.358470][ T9080] dump_stack_lvl+0x100/0x190 [ 312.358498][ T9080] should_fail_ex.cold+0x5/0xa [ 312.358522][ T9080] ? copy_splice_read+0x1a3/0xb90 [ 312.358544][ T9080] should_failslab+0xc2/0x120 [ 312.358565][ T9080] __kmalloc_noprof+0xe0/0x850 [ 312.358599][ T9080] copy_splice_read+0x1a3/0xb90 [ 312.358626][ T9080] ? __pfx_copy_splice_read+0x10/0x10 [ 312.358651][ T9080] ? look_up_lock_class+0x55/0x120 [ 312.358686][ T9080] ? lockdep_init_map_type+0x5c/0x250 [ 312.358706][ T9080] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 312.358728][ T9080] ? __pfx_copy_splice_read+0x10/0x10 [ 312.358751][ T9080] do_splice_read+0x285/0x370 [ 312.358775][ T9080] splice_direct_to_actor+0x2a1/0xa30 [ 312.358803][ T9080] ? __pfx_direct_splice_actor+0x10/0x10 [ 312.358830][ T9080] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 312.358860][ T9080] do_splice_direct+0x174/0x240 [ 312.358887][ T9080] ? __pfx_do_splice_direct+0x10/0x10 [ 312.358910][ T9080] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 312.358936][ T9080] ? rw_verify_area+0xce/0x6d0 [ 312.358956][ T9080] do_sendfile+0xadc/0xe20 [ 312.358979][ T9080] ? __pfx_do_sendfile+0x10/0x10 [ 312.358999][ T9080] ? __fget_files+0x21f/0x3d0 [ 312.359025][ T9080] __x64_sys_sendfile64+0x1d8/0x220 [ 312.359049][ T9080] ? ksys_write+0x1ac/0x250 [ 312.359070][ T9080] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 312.359097][ T9080] ? rcu_is_watching+0x12/0xc0 [ 312.359122][ T9080] do_syscall_64+0x10b/0xf80 [ 312.359151][ T9080] ? clear_bhb_loop+0x40/0x90 [ 312.359173][ T9080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.359192][ T9080] RIP: 0033:0x7f51b479cdd9 [ 312.359208][ T9080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.359225][ T9080] RSP: 002b:00007f51b5644028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 312.359243][ T9080] RAX: ffffffffffffffda RBX: 00007f51b4a16180 RCX: 00007f51b479cdd9 [ 312.359255][ T9080] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 312.359265][ T9080] RBP: 00007f51b5644090 R08: 0000000000000000 R09: 0000000000000000 [ 312.359276][ T9080] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 312.359287][ T9080] R13: 00007f51b4a16218 R14: 00007f51b4a16180 R15: 00007ffd5fcd8578 [ 312.359309][ T9080] [ 312.758385][ T9078] ubi31: scanning is finished [ 312.790417][ T9073] zswap: compressor not available [ 312.828673][ T9078] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 313.105771][ T9085] FAULT_INJECTION: forcing a failure. [ 313.105771][ T9085] name fail_futex, interval 1, probability 0, space 0, times 0 [ 313.137758][ T9085] CPU: 1 UID: 0 PID: 9085 Comm: syz.3.665 Not tainted syzkaller #0 PREEMPT(full) [ 313.137801][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.137819][ T9085] Call Trace: [ 313.137830][ T9085] [ 313.137842][ T9085] dump_stack_lvl+0x100/0x190 [ 313.137881][ T9085] should_fail_ex.cold+0x5/0xa [ 313.137921][ T9085] get_futex_key+0x1d2/0x1510 [ 313.137958][ T9085] ? __pfx_get_futex_key+0x10/0x10 [ 313.138004][ T9085] futex_wake+0xea/0x530 [ 313.138051][ T9085] ? rcu_is_watching+0x12/0xc0 [ 313.138090][ T9085] ? __pfx_futex_wake+0x10/0x10 [ 313.138339][ T9085] ? putname+0xb1/0x110 [ 313.138378][ T9085] ? kmem_cache_free+0x127/0x6c0 [ 313.138434][ T9085] do_futex+0x32b/0x350 [ 313.138471][ T9085] ? __pfx_do_futex+0x10/0x10 [ 313.138502][ T9085] ? __pfx_do_sys_openat2+0x10/0x10 [ 313.138553][ T9085] ? __fget_files+0x21f/0x3d0 [ 313.138590][ T9085] __x64_sys_futex+0x34f/0x4d0 [ 313.138624][ T9085] ? __x64_sys_openat+0x12d/0x210 [ 313.138672][ T9085] ? __pfx___x64_sys_futex+0x10/0x10 [ 313.138711][ T9085] ? rcu_is_watching+0x12/0xc0 [ 313.138753][ T9085] do_syscall_64+0x10b/0xf80 [ 313.138791][ T9085] ? clear_bhb_loop+0x40/0x90 [ 313.138830][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.138862][ T9085] RIP: 0033:0x7f301f19cdd9 [ 313.138890][ T9085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.138919][ T9085] RSP: 002b:00007f302012c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 313.138946][ T9085] RAX: ffffffffffffffda RBX: 00007f301f415fa8 RCX: 00007f301f19cdd9 [ 313.138962][ T9085] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f301f415fac [ 313.138977][ T9085] RBP: 00007f301f415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 313.138992][ T9085] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 313.139011][ T9085] R13: 00007f301f416038 R14: 00007ffddc37a330 R15: 00007ffddc37a418 [ 313.139053][ T9085] [ 313.476375][ T9078] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 313.598670][ T9094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.668'. [ 313.670946][ T9094] random: crng reseeded on system resumption [ 313.700490][ T9094] Restarting kernel threads ... [ 313.716755][ T9094] Done restarting kernel threads. [ 315.291947][ T9118] netlink: 342 bytes leftover after parsing attributes in process `syz.3.674'. [ 315.481290][ T9134] FAULT_INJECTION: forcing a failure. [ 315.481290][ T9134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.513994][ T9134] CPU: 1 UID: 0 PID: 9134 Comm: syz.2.676 Not tainted syzkaller #0 PREEMPT(full) [ 315.514047][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 315.514064][ T9134] Call Trace: [ 315.514073][ T9134] [ 315.514088][ T9134] dump_stack_lvl+0x100/0x190 [ 315.514125][ T9134] should_fail_ex.cold+0x5/0xa [ 315.514157][ T9134] ? prepare_alloc_pages+0x16d/0x5f0 [ 315.514195][ T9134] should_fail_alloc_page+0xeb/0x140 [ 315.514232][ T9134] prepare_alloc_pages+0x1f0/0x5f0 [ 315.514267][ T9134] ? kernel_text_address+0x8d/0x100 [ 315.514311][ T9134] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 315.514372][ T9134] ? copy_splice_read+0x1a3/0xb90 [ 315.514406][ T9134] ? stack_trace_save+0x8e/0xc0 [ 315.514444][ T9134] ? __pfx_stack_trace_save+0x10/0x10 [ 315.514484][ T9134] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 315.514530][ T9134] ? copy_splice_read+0x1a3/0xb90 [ 315.514557][ T9134] ? kasan_save_stack+0x3f/0x50 [ 315.514581][ T9134] ? kasan_save_stack+0x30/0x50 [ 315.514604][ T9134] ? kasan_save_track+0x14/0x30 [ 315.514628][ T9134] ? __kasan_kmalloc+0xaa/0xb0 [ 315.514650][ T9134] ? __kmalloc_noprof+0x301/0x850 [ 315.514689][ T9134] ? copy_splice_read+0x1a3/0xb90 [ 315.514724][ T9134] ? do_syscall_64+0x10b/0xf80 [ 315.514755][ T9134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.514806][ T9134] alloc_pages_bulk_noprof+0x657/0x1390 [ 315.514872][ T9134] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 315.514930][ T9134] ? __kmalloc_noprof+0x320/0x850 [ 315.514978][ T9134] copy_splice_read+0x1e1/0xb90 [ 315.515021][ T9134] ? __pfx_copy_splice_read+0x10/0x10 [ 315.515055][ T9134] ? look_up_lock_class+0x55/0x120 [ 315.515090][ T9134] ? lockdep_init_map_type+0x5c/0x250 [ 315.515119][ T9134] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 315.515149][ T9134] ? __pfx_copy_splice_read+0x10/0x10 [ 315.515178][ T9134] do_splice_read+0x285/0x370 [ 315.515213][ T9134] splice_direct_to_actor+0x2a1/0xa30 [ 315.515245][ T9134] ? __pfx_direct_splice_actor+0x10/0x10 [ 315.515282][ T9134] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 315.515329][ T9134] do_splice_direct+0x174/0x240 [ 315.515362][ T9134] ? __pfx_do_splice_direct+0x10/0x10 [ 315.515399][ T9134] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 315.515438][ T9134] ? rw_verify_area+0xce/0x6d0 [ 315.515469][ T9134] do_sendfile+0xadc/0xe20 [ 315.515506][ T9134] ? __pfx_do_sendfile+0x10/0x10 [ 315.515535][ T9134] ? __fget_files+0x21f/0x3d0 [ 315.515575][ T9134] __x64_sys_sendfile64+0x1d8/0x220 [ 315.515612][ T9134] ? ksys_write+0x1ac/0x250 [ 315.515643][ T9134] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 315.515686][ T9134] ? rcu_is_watching+0x12/0xc0 [ 315.515726][ T9134] do_syscall_64+0x10b/0xf80 [ 315.515758][ T9134] ? clear_bhb_loop+0x40/0x90 [ 315.515793][ T9134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.515822][ T9134] RIP: 0033:0x7ffa4af9cdd9 [ 315.515846][ T9134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.515881][ T9134] RSP: 002b:00007ffa4bdb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 315.515909][ T9134] RAX: ffffffffffffffda RBX: 00007ffa4b216180 RCX: 00007ffa4af9cdd9 [ 315.515927][ T9134] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 315.515942][ T9134] RBP: 00007ffa4bdb5090 R08: 0000000000000000 R09: 0000000000000000 [ 315.515958][ T9134] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 315.515976][ T9134] R13: 00007ffa4b216218 R14: 00007ffa4b216180 R15: 00007ffc3dfd4268 [ 315.516014][ T9134] [ 316.045267][ T9126] zswap: compressor not available [ 317.298933][ T9144] zswap: compressor not available [ 317.529949][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.537409][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.560492][ T9162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.682'. [ 317.594862][ T9162] random: crng reseeded on system resumption [ 317.613336][ T9162] Restarting kernel threads ... [ 317.620936][ T9162] Done restarting kernel threads. [ 318.903194][ T9175] No such timeout policy "" [ 318.913008][ T9175] netlink: Failed to associated timeout policy '' [ 319.746221][ T9195] zswap: compressor not available [ 321.104703][ T50] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 321.104745][ T50] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 321.120109][ T50] Bluetooth: hci0: Dropping invalid advertising data [ 321.129849][ T50] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 321.129894][ T50] Bluetooth: hci0: Dropping invalid advertising data [ 321.146398][ T50] Bluetooth: hci0: Malformed LE Event: 0x02 [ 323.353009][ T9284] ================================================================== [ 323.361377][ T9284] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 323.369385][ T9284] Read of size 8 at addr ffff888037c4b800 by task syz.2.706/9284 [ 323.377284][ T9284] [ 323.379674][ T9284] CPU: 1 UID: 0 PID: 9284 Comm: syz.2.706 Not tainted syzkaller #0 PREEMPT(full) [ 323.379700][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.379711][ T9284] Call Trace: [ 323.379720][ T9284] [ 323.379728][ T9284] dump_stack_lvl+0x100/0x190 [ 323.379751][ T9284] print_report+0x13d/0x4b0 [ 323.379785][ T9284] ? __virt_addr_valid+0x239/0x430 [ 323.379816][ T9284] ? cache_seq_start_rcu+0x3fe/0x420 [ 323.379842][ T9284] kasan_report+0xdf/0x1d0 [ 323.379862][ T9284] ? cache_seq_start_rcu+0x3fe/0x420 [ 323.379890][ T9284] cache_seq_start_rcu+0x3fe/0x420 [ 323.379917][ T9284] seq_read_iter+0x2c1/0x1270 [ 323.379940][ T9284] seq_read+0x33b/0x4c0 [ 323.379958][ T9284] ? __pfx_seq_read+0x10/0x10 [ 323.379977][ T9284] ? lock_acquire+0x1b1/0x370 [ 323.379997][ T9284] ? __pfx_seq_read+0x10/0x10 [ 323.380015][ T9284] proc_reg_read+0x240/0x330 [ 323.380039][ T9284] ? __pfx_proc_reg_read+0x10/0x10 [ 323.380063][ T9284] vfs_read+0x1e4/0xb30 [ 323.380083][ T9284] ? __pfx_vfs_read+0x10/0x10 [ 323.380109][ T9284] ? __fget_files+0x215/0x3d0 [ 323.380131][ T9284] ? __fget_files+0x21f/0x3d0 [ 323.380153][ T9284] ksys_read+0x12a/0x250 [ 323.380173][ T9284] ? __pfx_ksys_read+0x10/0x10 [ 323.380193][ T9284] ? rcu_is_watching+0x12/0xc0 [ 323.380215][ T9284] do_syscall_64+0x10b/0xf80 [ 323.380237][ T9284] ? clear_bhb_loop+0x40/0x90 [ 323.380257][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.380277][ T9284] RIP: 0033:0x7ffa4af9cdd9 [ 323.380292][ T9284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.380311][ T9284] RSP: 002b:00007ffa4bdd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.380329][ T9284] RAX: ffffffffffffffda RBX: 00007ffa4b216090 RCX: 00007ffa4af9cdd9 [ 323.380341][ T9284] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 323.380353][ T9284] RBP: 00007ffa4b032d69 R08: 0000000000000000 R09: 0000000000000000 [ 323.380368][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.380386][ T9284] R13: 00007ffa4b216128 R14: 00007ffa4b216090 R15: 00007ffc3dfd4268 [ 323.380411][ T9284] [ 323.380420][ T9284] [ 323.598289][ T9284] Allocated by task 5631: [ 323.602640][ T9284] kasan_save_stack+0x30/0x50 [ 323.607336][ T9284] kasan_save_track+0x14/0x30 [ 323.612027][ T9284] __kasan_kmalloc+0xaa/0xb0 [ 323.616626][ T9284] __kmalloc_noprof+0x301/0x850 [ 323.621500][ T9284] cache_create_net+0xa2/0x1f0 [ 323.626293][ T9284] nfsd_export_init+0x62/0x250 [ 323.631084][ T9284] nfsd_net_init+0x69/0x3e0 [ 323.635637][ T9284] ops_init+0x1e2/0x5f0 [ 323.639813][ T9284] setup_net+0x118/0x3a0 [ 323.644248][ T9284] copy_net_ns+0x46f/0x7c0 [ 323.648680][ T9284] create_new_namespaces+0x3ea/0xac0 [ 323.653986][ T9284] unshare_nsproxy_namespaces+0xf2/0x220 [ 323.659637][ T9284] ksys_unshare+0x438/0xab0 [ 323.664167][ T9284] __x64_sys_unshare+0x31/0x40 [ 323.668961][ T9284] do_syscall_64+0x10b/0xf80 [ 323.673575][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.679484][ T9284] [ 323.681852][ T9284] The buggy address belongs to the object at ffff888037c4b000 [ 323.681852][ T9284] which belongs to the cache kmalloc-2k of size 2048 [ 323.696182][ T9284] The buggy address is located 0 bytes to the right of [ 323.696182][ T9284] allocated 2048-byte region [ffff888037c4b000, ffff888037c4b800) [ 323.711212][ T9284] [ 323.713550][ T9284] The buggy address belongs to the physical page: [ 323.720144][ T9284] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37c48 [ 323.728924][ T9284] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 323.737438][ T9284] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 323.744999][ T9284] page_type: f5(slab) [ 323.748997][ T9284] raw: 00fff00000000040 ffff88813fe2f000 dead000000000100 dead000000000122 [ 323.757773][ T9284] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 323.766459][ T9284] head: 00fff00000000040 ffff88813fe2f000 dead000000000100 dead000000000122 [ 323.775453][ T9284] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 323.784142][ T9284] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 323.792843][ T9284] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 323.801520][ T9284] page dumped because: kasan: bad access detected [ 323.807943][ T9284] page_owner tracks the page as allocated [ 323.813765][ T9284] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5628, tgid 5628 (syz-executor), ts 87033458693, free_ts 86935342655 [ 323.835680][ T9284] post_alloc_hook+0x153/0x170 [ 323.840477][ T9284] get_page_from_freelist+0x11a6/0x33b0 [ 323.846054][ T9284] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 323.851988][ T9284] new_slab+0xa6/0x6c0 [ 323.856078][ T9284] refill_objects+0x277/0x420 [ 323.860872][ T9284] __pcs_replace_empty_main+0x375/0x650 [ 323.866450][ T9284] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 323.873145][ T9284] kmemdup_noprof+0x29/0x60 [ 323.877794][ T9284] sctp_sysctl_net_register+0x30/0x200 [ 323.883367][ T9284] sctp_defaults_init+0x6d2/0xd90 [ 323.888432][ T9284] ops_init+0x1e2/0x5f0 [ 323.892710][ T9284] setup_net+0x118/0x3a0 [ 323.897091][ T9284] copy_net_ns+0x46f/0x7c0 [ 323.901554][ T9284] create_new_namespaces+0x3ea/0xac0 [ 323.907050][ T9284] unshare_nsproxy_namespaces+0xf2/0x220 [ 323.912814][ T9284] ksys_unshare+0x438/0xab0 [ 323.917345][ T9284] page last free pid 5677 tgid 5677 stack trace: [ 323.923877][ T9284] __free_frozen_pages+0x747/0x1040 [ 323.929209][ T9284] qlist_free_all+0x47/0xf0 [ 323.933749][ T9284] kasan_quarantine_reduce+0x1a0/0x1f0 [ 323.939235][ T9284] __kasan_slab_alloc+0x69/0x90 [ 323.944110][ T9284] kmem_cache_alloc_noprof+0x241/0x6e0 [ 323.949656][ T9284] alloc_empty_file+0x5b/0x1c0 [ 323.954886][ T9284] path_openat+0xe8/0x31a0 [ 323.959326][ T9284] do_file_open+0x20e/0x430 [ 323.963844][ T9284] do_sys_openat2+0x10d/0x1e0 [ 323.968545][ T9284] __x64_sys_openat+0x12d/0x210 [ 323.973434][ T9284] do_syscall_64+0x10b/0xf80 [ 323.978050][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.983959][ T9284] [ 323.986289][ T9284] Memory state around the buggy address: [ 323.992013][ T9284] ffff888037c4b700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.000094][ T9284] ffff888037c4b780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.008254][ T9284] >ffff888037c4b800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 324.016322][ T9284] ^ [ 324.020487][ T9284] ffff888037c4b880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 324.028563][ T9284] ffff888037c4b900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 324.036724][ T9284] ================================================================== [ 324.119544][ T9284] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 324.126870][ T9284] CPU: 0 UID: 0 PID: 9284 Comm: syz.2.706 Not tainted syzkaller #0 PREEMPT(full) [ 324.136078][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.146416][ T9284] Call Trace: [ 324.149718][ T9284] [ 324.152677][ T9284] dump_stack_lvl+0x100/0x190 [ 324.157382][ T9284] vpanic+0x552/0x970 [ 324.161384][ T9284] ? __pfx_vpanic+0x10/0x10 [ 324.165919][ T9284] ? cache_seq_start_rcu+0x3fe/0x420 [ 324.171624][ T9284] panic+0xd1/0xe0 [ 324.175413][ T9284] ? __pfx_panic+0x10/0x10 [ 324.179973][ T9284] ? cache_seq_start_rcu+0x3fe/0x420 [ 324.185335][ T9284] ? preempt_schedule_common+0x42/0xc0 [ 324.190865][ T9284] ? check_panic_on_warn+0x1f/0x90 [ 324.196033][ T9284] check_panic_on_warn.cold+0x19/0x34 [ 324.201435][ T9284] end_report.part.0+0x3a/0x90 [ 324.206229][ T9284] kasan_report.cold+0xe/0x18 [ 324.211030][ T9284] ? cache_seq_start_rcu+0x3fe/0x420 [ 324.216435][ T9284] cache_seq_start_rcu+0x3fe/0x420 [ 324.221581][ T9284] seq_read_iter+0x2c1/0x1270 [ 324.226379][ T9284] seq_read+0x33b/0x4c0 [ 324.230558][ T9284] ? __pfx_seq_read+0x10/0x10 [ 324.235345][ T9284] ? lock_acquire+0x1b1/0x370 [ 324.240043][ T9284] ? __pfx_seq_read+0x10/0x10 [ 324.244749][ T9284] proc_reg_read+0x240/0x330 [ 324.249380][ T9284] ? __pfx_proc_reg_read+0x10/0x10 [ 324.254530][ T9284] vfs_read+0x1e4/0xb30 [ 324.258807][ T9284] ? __pfx_vfs_read+0x10/0x10 [ 324.263524][ T9284] ? __fget_files+0x215/0x3d0 [ 324.268486][ T9284] ? __fget_files+0x21f/0x3d0 [ 324.273189][ T9284] ksys_read+0x12a/0x250 [ 324.277538][ T9284] ? __pfx_ksys_read+0x10/0x10 [ 324.282325][ T9284] ? rcu_is_watching+0x12/0xc0 [ 324.287113][ T9284] do_syscall_64+0x10b/0xf80 [ 324.291809][ T9284] ? clear_bhb_loop+0x40/0x90 [ 324.296677][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.302604][ T9284] RIP: 0033:0x7ffa4af9cdd9 [ 324.307123][ T9284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.326842][ T9284] RSP: 002b:00007ffa4bdd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.335292][ T9284] RAX: ffffffffffffffda RBX: 00007ffa4b216090 RCX: 00007ffa4af9cdd9 [ 324.344232][ T9284] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 324.352217][ T9284] RBP: 00007ffa4b032d69 R08: 0000000000000000 R09: 0000000000000000 [ 324.360203][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.368539][ T9284] R13: 00007ffa4b216128 R14: 00007ffa4b216090 R15: 00007ffc3dfd4268 [ 324.376627][ T9284] [ 324.380387][ T9284] Kernel Offset: disabled [ 324.384729][ T9284] Rebooting in 86400 seconds..