last executing test programs: 12m13.049637858s ago: executing program 2 (id=2011): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) pread64$auto(r0, 0x0, 0x8, 0x1000000fff5) 12m12.93700495s ago: executing program 2 (id=2014): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x3) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r1 = prctl$auto(0x41, 0x1, 0x0, 0x800000000000001, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) r3 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x40000, 0x0) fchmod$auto(r3, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000008) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r2, @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf250500008b946948000500000008000100", @ANYRES32=r6, @ANYBLOB="0800020049f0f25c1274fe5e7e72588a52b70dac14a42df44a87175f2501e614fef10d14ced68ce62d018d8fe506270d4238ec326e7432c1799088"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000004) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r7, 0xffffffffffdffe00, &(0x7f0000000140)=';') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 12m11.278494963s ago: executing program 2 (id=2023): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000012, 0x400, 0x718c1257}]}) r3 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xfffffffd], {0xd74c, 0x1, 0xfffffffe, 0x29f, 0x100, 0x7f, 0x101, 0x5, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x478, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r3, 0x9, 0x820e, 0x6, 0x0, 0x18) ioctl$auto_EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x6, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYBLOB="010027b57000fbdb08100100000005000000003edd827895bdd9cd5ab93cb7d2b07bd4cbcc49193d654f29d55300cc68c441a0ee7cf15b62b1575adcd51de8b70c9be021fae01e804965db3c0e2787a1331eb8c4bc495ae8fe740faf7698575c3077d3e79286d2b4fdf1a9bb3837", @ANYRESHEX=r6, @ANYBLOB="0800030007000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) getsockopt$auto_SO_RCVMARK(r4, 0x0, 0x4b, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 12m10.085054569s ago: executing program 2 (id=2027): write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000140)="c80c1b5d", 0xfffffffffffffeec) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x460f, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) shutdown$auto(0x200000003, 0x2) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/47, 0x2f) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1500000091b188694b3f7a982f1b34177df71e0fe028787b9a11eb3b1e0ba0906d98adc5c57c2f997ec78c30c0e307cedc59bce6352841915a511f9502baa691795260b0ef46d1bcf7e26cd798bccda909c84595e6176a90e7812c1708623db66dc84d67fac2ebd7869722487484e2745da0463cb6ee7affdc6357d5b1f45a987210cc445ac283fa776997003217cb47ac0a80799125835426567fb8d0fe99cd0e18496c352a7723648a6ad94b6fda03cbfa31399796f4265841077f6434e7c2613b6707dc5df1ed1595972a616a13a7c2abd3b564385fcb908e00481bb4e70576ad118e461932924e85e10316", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r4 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) read$auto_tracing_iter_fops_trace(r4, &(0x7f0000000040)=""/219, 0xdb) writev$auto(r3, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) read$auto(r0, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x200001, 0x0) 12m9.845748977s ago: executing program 2 (id=2030): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x80003, 0x300) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a332000300800040008800"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe93, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2000c0c4) (async) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) (async) syz_clone(0x10008000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$auto(0x2, 0x800000000, 0x8) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) (async) sendmsg$auto_NETDEV_CMD_NAPI_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="010b2abd700500000000000000df"], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000004) (async) r3 = getpid() (async, rerun: 32) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x40) (rerun: 32) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async, rerun: 32) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) (rerun: 32) sendmsg$auto_SMC_NETLINK_DISABLE_HS_LIMITATION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x110, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, "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"}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x4051) semctl$auto(0x7, 0x2, 0x13, 0x1) (async, rerun: 32) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/queues/tx-0/xps_rxqs\x00', 0x22b42, 0x0) (rerun: 32) sendfile$auto(r4, r4, 0x0, 0x4f64a1d2) setsockopt$auto(r0, 0x107, 0x9, 0x0, 0x20008004) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) 12m8.3044735s ago: executing program 2 (id=2038): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0xb, 0xffffffffffffffff, [0x0, 0xffffffff], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x40106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptys5\x00', 0x652800, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000100)="58d607bc") ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x1000, r0, 0x2, 0xc3, 0x4000000000000001, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x200e8, 0x9, 0x3dd59565, 0x1, 0x5, 0x4, 0x3, 0x8, 0x9, 0x100000000008000c, 0x8, 0x1, 0xfca, 0x9, 0x7c, 0x5]}, 0x0) pwrite64$auto(r4, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14\xb2^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\xc8*\xbfLs~\xfb\r\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00\x00\x00\x00', 0x0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r5, 0x0, 0x4b, 0x0, 0x0) mmap$auto(0x0, 0x1001000000000004, 0x4000000000df, 0x40eb1, r4, 0x300000000000) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0xffffffff, 0xffffffffffffffb5, 0x0, 0x1ffffffe) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/fs/ext4/sda1/mb_stats\x00', 0x103402, 0x0) pread64$auto(r6, 0x0, 0x800007, 0x9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) 11m53.270620675s ago: executing program 32 (id=2038): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0xb, 0xffffffffffffffff, [0x0, 0xffffffff], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x40106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptys5\x00', 0x652800, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000100)="58d607bc") ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x1000, r0, 0x2, 0xc3, 0x4000000000000001, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x200e8, 0x9, 0x3dd59565, 0x1, 0x5, 0x4, 0x3, 0x8, 0x9, 0x100000000008000c, 0x8, 0x1, 0xfca, 0x9, 0x7c, 0x5]}, 0x0) pwrite64$auto(r4, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14\xb2^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\xc8*\xbfLs~\xfb\r\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00\x00\x00\x00', 0x0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r5, 0x0, 0x4b, 0x0, 0x0) mmap$auto(0x0, 0x1001000000000004, 0x4000000000df, 0x40eb1, r4, 0x300000000000) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0xffffffff, 0xffffffffffffffb5, 0x0, 0x1ffffffe) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/fs/ext4/sda1/mb_stats\x00', 0x103402, 0x0) pread64$auto(r6, 0x0, 0x800007, 0x9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) 2m41.915324912s ago: executing program 3 (id=4067): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x8000400eb1, 0x401, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram8\x00', 0x108383, 0x0) ioctl$auto_BLKDISCARD(r0, 0x1277, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b7}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r1 = getpid() socket(0x29, 0x0, 0x3) r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x21, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:00.0/subsystem_device\x00', 0x200, 0x0) read$auto(r3, 0x0, 0x6) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x8000400eb1, 0x401, 0x8000) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram8\x00', 0x108383, 0x0) (async) ioctl$auto_BLKDISCARD(r0, 0x1277, 0x0) (async) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b7}, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) (async) getpid() (async) socket(0x29, 0x0, 0x3) (async) gettid() (async) rt_tgsigqueueinfo$auto(r1, r2, 0x21, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:00.0/subsystem_device\x00', 0x200, 0x0) (async) read$auto(r3, 0x0, 0x6) (async) 2m41.484947972s ago: executing program 3 (id=4069): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r1, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000000002008000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0e, 0xd, 0x7, 0x406, 0x7f, 0x8, 0x6d3e, 0xc, 0xcf, 0x2]}, 0x0) write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) 2m40.229485128s ago: executing program 3 (id=4074): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x80000000) shmctl$auto_SHM_INFO(0x7fff, 0xe, &(0x7f0000001400)={{0x1af, r0, 0xee01, 0xf, 0x5, 0x2, 0xfffc}, 0x8, 0x1, 0x4, 0x85b8, @raw=0x9, @raw=0x6676, 0x9, 0x0, &(0x7f00000000c0)="5e7edacb40c353803853b909ab24dd208726362603df13f895a3a2e5ad7780b02ddb81c6582daef7ce38a52fc7b03d97db5e08f88f254c79", &(0x7f0000001340)="fcfdf08e6503c21151829262ad4f1ee5d62036eb179c7743ebe5f61e0ffec0961e6c021e98873c272b6083ce8f498a16f39612a21bced5cb369e70615c4e0badfed42216b0021aff3adb2620cb87ff7084c91db61bfe76784d8f6e122dba4398d9e8a5751c110470beedde79d25a1f85c8d3b94b453e8fb420dd1afea02dc17e76741ac2883cd2a8e5840e219ff7f878c71c9ec91f1eaea15bd777e8d35359721bd35b"}) shmctl$auto_SHM_STAT(0x2, 0xd, &(0x7f0000001200)={{0x7, 0xffffffffffffffff, r2, 0x9, 0xa, 0x2, 0xd}, 0x8, 0x80000000, 0x2, 0x9, @inferred=r1, @inferred=0xffffffffffffffff, 0x43, 0x0, &(0x7f0000000080)="90eb624960b8525db99a3be4fd24f7762f73cea737bed8907d2c53cb0eaf5d1f9d4006bb5d8c828545a95e", &(0x7f0000000200)="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"}) stat$auto(&(0x7f0000000040)=':,\x00', &(0x7f0000001280)={0x6, 0x1, 0x6, 0x5, r0, r3, 0x0, 0x3, 0x9, 0xb9, 0x8, 0x7, 0x32d, 0x49, 0x80000001, 0xec24, 0x5d}) execve$auto(&(0x7f00000001c0)=':,\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), r4) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000001580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x80, r5, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_QOS_MAP={0x5d, 0xc7, "38b7252acae204506828d138ee31ed693bd20093024b2187d19f5e57309b8769a4144d9ca25860e0a425dc8970c31b5fbb797cd90e6a5c4648e2f7014a60c6cd0bf82ca3a5d8ad42a62ab24dfe8f6fd75052851ff04f5a49a1"}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3c3}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x801) 2m39.927982472s ago: executing program 3 (id=4076): unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x1, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x7fffffff, 0xfffffffffffffffc, 0x0, 0x220000000000005, 0xfe0000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES8=r3, @ANYRES16, @ANYBLOB="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"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x7, 0x6) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0xa002, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r2, 0x80085502, &(0x7f0000000180)={0x3ff, 0x7, "ab7b693c8cee34e54212786533650988e9071f6881d719daab065225058a5ad49657cba5f505f45025b35dfae5e7609a93e01fc61a66e7cc0d9aaebea9de906ae0d0cb380a5e594e716d97720f6906979206bf2c8ccd6b5b"}) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r5, &(0x7f00000020c0)=""/4093, 0xffd) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto_PR_SCHED_CORE_GET(0x476, 0x0, 0x0, 0x5, 0x7) socket(0xa, 0x1, 0x84) 2m37.444382325s ago: executing program 3 (id=4085): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) mmap$auto(0x80000, 0x401, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000000080) r0 = socket(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000600)='/dev/v4l-subdev1\x00', 0x282300, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0945662, r3) socket(0x2, 0x5, 0x9) madvise$auto(0x1, 0x9, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x3, 0x4, 0x6, 0x9, 0xfffffffffffffffb, 0x9, 0x3, 0x101, 0xff, 0x25, 0x4, 0x6, 0x4, 0x7, 0xfffffffffffffffa, 0x1ff, 0x1, 0x400, 0x5, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xfffffffffffffffe, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x8000, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0xffffffff, 0x1ff, 0x1, 0x6e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x9, 0x0, 0x401, 0x9, 0x6, 0x100000004, 0xffffffff, 0x800, 0x8001, 0x5, 0x5ed4, 0x1, 0x7, 0x80000003, 0x962, 0x5, 0xfffffffffffffffe, 0x100000001, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x80068, 0x2, 0x7fff, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x140, 0x0, 0xc7df, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x0, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r4, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) unshare$auto(0x40000080) 2m36.503464753s ago: executing program 3 (id=4087): mmap$auto(0x0, 0x400009, 0xc, 0x9b72, 0x8000000000000003, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xffffffffffffffff, 0x200000001, 0x4, 0x40eb2, r0, 0x100300000000000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) socket(0xa, 0x3, 0xff) ioctl$auto(0x3, 0x89e0, 0x91) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) read$auto(r1, 0x0, 0x39b8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x40000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000140)=0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x2, 0x8, 0x7fb, &(0x7f0000000100)}) r4 = pidfd_open$auto(0x1, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, r4, 0x0, 0x273) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) msgctl$auto_IPC_STAT(0xffffffff, 0x2, &(0x7f0000001400)={{0xe24, 0x0, 0x0, 0x6, 0x3, 0xfffffff7, 0x8}, &(0x7f00000000c0)=0xf, &(0x7f00000013c0)=0x10, 0xfffffffffffffff9, 0x3ff, 0xffffffff, 0x7, 0x7, 0xd, 0xfff9, 0xe9ea, @raw=0x3, @raw=0x3}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(r5, &(0x7f0000000040)={&(0x7f0000000000), 0xfff}, 0x6) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) 2m20.573935653s ago: executing program 33 (id=4087): mmap$auto(0x0, 0x400009, 0xc, 0x9b72, 0x8000000000000003, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xffffffffffffffff, 0x200000001, 0x4, 0x40eb2, r0, 0x100300000000000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) socket(0xa, 0x3, 0xff) ioctl$auto(0x3, 0x89e0, 0x91) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) read$auto(r1, 0x0, 0x39b8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x40000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000140)=0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x2, 0x8, 0x7fb, &(0x7f0000000100)}) r4 = pidfd_open$auto(0x1, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, r4, 0x0, 0x273) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) msgctl$auto_IPC_STAT(0xffffffff, 0x2, &(0x7f0000001400)={{0xe24, 0x0, 0x0, 0x6, 0x3, 0xfffffff7, 0x8}, &(0x7f00000000c0)=0xf, &(0x7f00000013c0)=0x10, 0xfffffffffffffff9, 0x3ff, 0xffffffff, 0x7, 0x7, 0xd, 0xfff9, 0xe9ea, @raw=0x3, @raw=0x3}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(r5, &(0x7f0000000040)={&(0x7f0000000000), 0xfff}, 0x6) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) 10.082035823s ago: executing program 5 (id=4543): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x7fff, r0) 9.652607943s ago: executing program 5 (id=4546): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) r1 = setfsuid$auto(0xee01) keyctl$auto(0x8, r1, r1, 0x4, 0x100000000007a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0xa, 0x1, 0x84) r3 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0xe0}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) r4 = bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES64=r3, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x8080}, 0x20008000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYBLOB="010027bd", @ANYRESHEX=r4, @ANYRESOCT=r5, @ANYRES64=r4, @ANYRESDEC=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x4}, 0x1, 0x0, 0x0, 0xd}, 0x7}, 0x3, 0x0) setresuid$auto(0x2, 0xee00, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r7 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000080)="e3f9dd796daf3c106dc25c64658c52521075a9e9f147b194840395e8") bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)=@bpf_attr_5={@target_fd=r0, r7, 0xffffffff, 0x67e, r0, @relative_fd=r0, 0x9}, 0x1) r8 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r8, 0x50009405, 0x0) r9 = getpgid(0x0) kill$auto(r9, 0xfffff800) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129102, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) 8.187004779s ago: executing program 5 (id=4551): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x1) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r2}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r4, 0x0, 0x1ff) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) fsconfig$auto_XFS_DAX_ALWAYS(r5, 0x0, 0x0, 0x0, 0x1) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4, 0x0) 6.529220954s ago: executing program 5 (id=4556): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r0, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 6.130186739s ago: executing program 5 (id=4559): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) lremovexattr$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='-\x00') io_uring_setup$auto(0x7, 0x0) r0 = gettid() kexec_load$auto(0x7, 0x2, &(0x7f0000000040)={@buf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r0, 0x11) syz_clone(0x700, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) kexec_load$auto(0x80, 0x80000000, &(0x7f0000000100)={@kbuf=&(0x7f0000000000)="71bfc8595ac3dafd332d5c33b92fa429c8af836c6eb60f8dc20350874e8411f1a1a535dce962e4266ac1d59f8cc5", 0x10, 0x3, 0x9}, 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) 4.96326523s ago: executing program 1 (id=4565): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x103382, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/190, 0xbe) 4.836051382s ago: executing program 1 (id=4566): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) r0 = memfd_create$auto(0x0, 0xe) r1 = socket(0x11, 0x3, 0x3a) ioctl$auto(r1, 0x8916, 0x1) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x143262, 0x0) write$auto(r2, 0x0, 0x81) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) pwritev2$auto(r4, &(0x7f0000000280)={0x0, 0x2}, 0x7, 0xfde, 0x5, 0x5) write$auto(0xffffffffffffffff, 0x0, 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r0, &(0x7f0000000240)="c099d4f256158c5b4b5d36e15687a9109c95538bdfd31f53bfc13156bb095ef179306bd35f514b7fd0e8f264772180a1003cb7c8ed16ebaa69dbcfe4e6e87f3252f3b3ba79354a5b2926f3cba5efb2f7b6fdba6a46ccf3ae4dd94e457105e25abcb3da080c37f4f68f5ff2e8f8759346d6c96cdd", 0x401, &(0x7f00000002c0)="1a8bceabafbb25d08f652c687c1f388ca9973a14723e848afc3fc44fd9cc23a4b89603b12d88063ffdd227ea32de58512be579d684d96b72a1580da5bf23aabbacbf103c2de01932583065382c323efc52d235b2d34869f90489fde45960c1c17a305669a2a0b6c1d3e82ecbe2789fae09ec6bc6c1ad40785e5a3328f48459ff3ef2b49519aa6bbff29d2abd049762df05cf8317", 0xffffffff, &(0x7f0000000380)="723ec7b05c47aef595a509fa998c191b8582c5c30bc45e3b0ac2ade296bc0d3e519f8f95dca1f5f03b92c9b8770b796f472642b4cfcb3d03e460c788a47c94e7", &(0x7f00000003c0)=0x9}) 4.171925599s ago: executing program 5 (id=4569): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000480), r1) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) mincore$auto(0x200000001000, 0x100000001, 0x0) msgctl$auto_IPC_INFO(0xfffff3cb, 0x3, &(0x7f0000000240)={{0x1f, 0x0, 0x0, 0x80000000, 0x800, 0xc, 0x8bf1}, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x10, 0xe, 0x1, 0x6, 0xfffffffffffffffa, 0x7, 0x0, 0x5a, 0x7f, @raw}) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x54, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x40, 0x75, 0x0, 0x1, [@nested={0x34, 0x44, 0x0, 0x1, [@typed={0x8, 0xe5, 0x0, 0x0, @uid=r5}, @generic="6f5c487be1df47cf3ef1e2b39bbb5eadcdd56144db3af69e484b0eec9abafba6ec65b56b", @nested={0x4, 0x66}]}, @typed={0x5, 0x82, 0x0, 0x0, @str='\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc804}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_userfaultfd_dev_fops_userfaultfd(r0, 0x9, &(0x7f0000000380)="30f0bbbdf1fd9cf45747061cc1bf4cf67144f985efc8139e672d70ae3b9a0fa89ea8e0b74897cdaaf0e6e11cd130eab80250989101a11c192ef074961df091e0414e0704ecaa9d1c6271d0faaef7f7f0f1c020d5eca33948c5c92ecc3c172a6f0409647c7f66b5ced82fb18dc5c813f72464d742d225071dea45f9c57204b8b28c016d76f03efa26b5be304bc19f99501ec2fc1238440cc7100dcbd523794f21f11015a78ee4ca91888eb5750924bc7bf54689634d99193d86938614311b46a3d4943ed12af4886a79368ee0f7a9987147ac067e9d4e16eb615befaaf0834d8de67af8893d7ffd0314532cb1ca269ee6388870c93a7c") 4.014910347s ago: executing program 4 (id=4570): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x6a) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) socket(0x10, 0x2, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) 3.891434205s ago: executing program 0 (id=4571): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/mm/lru_gen/enabled\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000000c0)='Y\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xe21\xdeD\x82\xed\xdbJ\xda^\xceY\xa4\xbe\x06\x7fKE\xa2\xa5\v\"e\xe4\xb9\xe2\t\a_\xe5\xd0\xfd\xbb\xdb\xba{4\xba\x85\x85\x18\xbbQ\x85\xfeG<\xdd\xb1XS\xc3\xaa\xce\xf9\x87\xc1\x18\xb48\x7f\xec\x94\\5\x98\x1fl\x9d\xe0m\'\xc2v9\xce\x14d3\xf4M\xe3\xf9\x1bY\x9c\xbei|\xd0\xa7Q\x03?\x97(b\xb9\x8bK$\x96%\x9aBUw\xd9\f\xd8h\x96u\xe8\xf4@\xdb\xc7\xfe\xd7\xa0\n0\xbc\x82\xea', 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000002200)) setsockopt$auto(r1, 0x7, 0x5, &(0x7f0000001900)='macvlan0\x00', 0x7) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x57a2ccea) 3.801084524s ago: executing program 1 (id=4572): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000000)={"fc6ee1de40088185080c6f23db31859e1aa28135b1aeddf36c5a795b059c5d1ad50a04e2703df24d8c114fd481fa0c1ce790a9cdce1d000d6b80385ee5cb7abfb5fa2eb489d476f70fb1512d9039f905b2c28db3ee249f7a517f565a38a773c702840743a16c6a157c337edfb23a63714694c8b0a6105ec34fcef12d0c94c9f8", "6409f5ff5f0eae4d4f04c916fa93935db3a0c7690897b5404f0b684f939e81b0663c52532c661c4bbde17990fd8ecc8600cd3eeb84f4b7c03e5f21781eb4c32a457f217e1afbcfe3dd3b239519b595595a5b9bd599263e26dad63fc2747f546ec7884cea8afd9304cd11cec9e6f460c95c39cdfe0046bc5e1c154a180f794ad0", 0x1f}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="27040000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf250300000006000700fe7f0000060006000100000008000300000400000a000500aaaaaaaaaa3600000a000500aaaaaaaaaabb00000a000500000000000000000008000200", @ANYRES32=0x0, @ANYBLOB="060007"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x48880) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01b60936d071fb00000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80885659, 0x38) ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0x0) 3.666378676s ago: executing program 4 (id=4573): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2, 0x40009, 0x0, 0x8011, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x100, 0x0) ioctl$auto(r0, 0x4b46, 0x1) r1 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x5, 0x10000008, 0x4, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto_PTRACE_GETREGS(0xc, r2, 0x80000000, 0x1) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x4e803, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000080)=0xe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000100)="aa6a9f0fa20404000000000000b83426044de3ad9f59b18f595a668a3a777b06f54dfe4bccaa03b595e8", 0x20003, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x9}, 0x5, 0x20000000) socket(0x2, 0x3, 0x2) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) landlock_restrict_self$auto(r1, 0xde) lstat$auto(&(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x5210f57, 0x7, 0x9, 0x8000009, 0x0, 0x0, 0x0, 0x2, 0xc27, 0x5, 0x100, 0x972b, 0x1, 0x401, 0xd, 0x15, 0x40}) fsconfig$auto(0xffffffffffffffff, 0xffffffff, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="7ff792d774191bdfb9fa7d71c85e13daee4538c0b9cbb8889fc6c902c56b653ee4c8e7dd9c34691318c8367b7f00147226e7321b28631080d7712bf716d32916898f7c236022db66cd7b541958afdcc5fdb72a6667992f6ba5bc0abccd2633910a6f0b8228b276c05403f4dd06076a1f8c095b9473a5449c33cee9cb68162b47bab7e500f68eae846c6436fe15c78b79521709a0175568a8c52cdf0ac2d2ab74dbe5f58e", r5) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffff00, 0x8000}, "290000000000000000000000008000"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000040)={0x7, 0x1, 0x1c0, 0x6, 0xfffffff6, 0x2, "90577a425e214e1730ea2bab411a38e8857053c022bf12795a87e69f1bb7f01ffd02fe3d475a9b4644cf75f39f724fbed78ab016e711635563cbdd0aa81fb9cb"}) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x4e902, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) io_uring_setup$auto(0x9, 0x0) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/snd_dummy.0/sound/card0/mixer/power/runtime_active_time\x00', 0xa0000, 0x0) 2.530252697s ago: executing program 0 (id=4574): lseek$auto(0x3, 0x7fffffffffffffff, 0x1) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) getsid$auto(0xffffffffffffffff) socket(0x9, 0xa, 0x6fffffff) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev$auto(r0, &(0x7f0000001000)={0x0, 0x8}, 0x4, 0x4, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0xfffff958) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r1, &(0x7f0000000000)='system.posix_acl_access\x00') truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) 2.528303624s ago: executing program 1 (id=4575): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) ioctl$auto_SG_GET_ACCESS_COUNT(r0, 0x2289, 0xffffffffffffffff) 2.419836546s ago: executing program 4 (id=4576): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x21, 0x0) set_tid_address$auto(&(0x7f0000000080)=0x2) statx$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000100)={0xde, 0x1, 0xd8, 0x800, 0xee01, 0xee01, 0xfff, 0x81, 0x3707, 0x3, 0x5, 0x6, {0x6a, 0x7}, {0x8001, 0x2}, {0x0, 0x8001}, {0x200, 0xccc}, 0x1, 0xede, 0x8, 0x10001, 0x5, 0xffffffdd, 0x0, 0x8, 0x10001, 0xf, 0x8001, 0x2, [0x7, 0xfff, 0x3, 0x6, 0x8000000000000000, 0x7003, 0x6, 0x7, 0x40]}) socket(0x2a, 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x6a) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, &(0x7f0000000040)="9dc4e29815c3dd855a4340428a12ae12c859250e55d63ef492651f515f9a76158c045ff86707a23e18496d5d7129a8e340b7ebcd1806c7b26420ea05ca", 0x3d) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) open(&(0x7f0000000800)='./file1\x00', 0x163ac1, 0x82) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="42bf", 0x2) 1.470441973s ago: executing program 4 (id=4578): r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6d) mmap$auto(0x0, 0x7f, 0xdc, 0x9b72, r0, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001fc0)='/sys/kernel/debug/block/nbd13/pm_only\x00', 0x68180, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000002000)=""/61, 0x3d) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/conex/uevent\x00', 0x464002, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xf7f}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r3 = socket(0xa, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) write$auto(0x3, 0x0, 0xffd8) socket(0xa, 0x5, 0x84) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x20a000, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000100)=@phonet={0x23, 0x8, 0x37, 0xc}, 0x59) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x6f7250c4) 1.464681946s ago: executing program 1 (id=4586): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x6, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x0, 0x3, 0x8, 0x9, 0x6, 0x2, @attach_prog_fd, 0x0, 0x3, 0x5b, 0x6, 0x6}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = open(0x0, 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) r2 = socket(0x11, 0x3, 0x3a) ioctl$auto(r2, 0x8916, 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x6, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) pwritev2$auto(r4, &(0x7f0000000280)={&(0x7f0000000340), 0x2}, 0x7, 0xfde, 0x5, 0x5) write$auto(0xffffffffffffffff, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000400)={r1, &(0x7f0000000240)="c099d4f256158c5b4b5d36e15687a9109c95538bdfd31f53bfc13156bb095ef179306bd35f514b7fd0e8f264772180a1003cb7c8ed16ebaa69dbcfe4e6e87f3252f3b3ba79354a5b2926f3cba5efb2f7b6fdba6a46ccf3ae4dd94e457105e25abcb3da080c37f4f68f5ff2e8f8759346d6c96cdd", 0x401, &(0x7f00000002c0)="1a8bceabafbb25d08f652c687c1f388ca9973a14723e848afc3fc44fd9cc23a4b89603b12d88063ffdd227ea32de58512be579d684d96b72a1580da5bf23aabbacbf103c2de01932583065382c323efc52d235b2d34869f90489fde45960c1c17a305669a2a0b6c1d3e82ecbe2789fae09ec6bc6c1ad40785e5a3328f48459ff3ef2b49519aa6bbff29d2abd049762df05cf8317", 0xffffffff, &(0x7f0000000380)="723ec7b05c47aef595a509fa998c191b8582c5c30bc45e3b0ac2ade296bc0d3e519f8f95dca1f5f03b92c9b8770b796f472642b4cfcb3d03e460c788a47c94e7", &(0x7f00000003c0)=0x9}) 1.464342049s ago: executing program 0 (id=4579): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setitimer$auto(0x0, &(0x7f0000000140)={{0x40000000002, 0x5}, {0x20000, 0x8}}, 0x0) socket(0x10, 0x2, 0x0) socket(0x28, 0x1, 0x0) open(&(0x7f0000000000)='.\x00', 0x591002, 0x408) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x2, 0x1ff, 0x1000}, {0x1, 0x7ff, 0x7}, {0x7, 0x4cf9, 0x8}, {0x3, 0x2, 0xf98}, {0xa08, 0x5, 0x6}]}) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) mlock$auto(0xfbe8, 0x4) 1.029028045s ago: executing program 0 (id=4580): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r0, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x1030c1, 0x0) writev$auto(r3, &(0x7f0000000140)={0x0, 0x5}, 0x5) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/nr10/uevent\x00', 0xe8c2f4fcd31add88, 0x0) sendfile$auto(r5, r4, 0x0, 0x7ff7f000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 1.003879233s ago: executing program 4 (id=4581): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(0x3, 0x4010ae42, 0x38) mmap$auto(0x0, 0x20009, 0x10000000000df, 0x8011, 0x401, 0x2) pipe$auto(0x0) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) mmap$auto(0x0, 0x20009, 0xdc, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 543.640834ms ago: executing program 4 (id=4582): mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x15, 0x5, 0x7) madvise$auto(0x110c230000, 0x1, 0x9) getrandom$auto(0x0, 0x3, 0x80000001) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) msync$auto(0x110c230000, 0x200001, 0x6) getsockopt$auto_SO_INCOMING_CPU(0xffffffffffffffff, 0xe, 0x31, &(0x7f0000000000)='\\.):$[\x00', &(0x7f00000000c0)=0x10002) 334.452981ms ago: executing program 1 (id=4583): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) r0 = memfd_create$auto(0x0, 0xe) r1 = socket(0x11, 0x3, 0x3a) ioctl$auto(r1, 0x8916, 0x1) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x143262, 0x0) write$auto(r2, 0x0, 0x81) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) pwritev2$auto(r4, &(0x7f0000000280)={0x0, 0x2}, 0x7, 0xfde, 0x5, 0x5) write$auto(0xffffffffffffffff, 0x0, 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r0, &(0x7f0000000240)="c099d4f256158c5b4b5d36e15687a9109c95538bdfd31f53bfc13156bb095ef179306bd35f514b7fd0e8f264772180a1003cb7c8ed16ebaa69dbcfe4e6e87f3252f3b3ba79354a5b2926f3cba5efb2f7b6fdba6a46ccf3ae4dd94e457105e25abcb3da080c37f4f68f5ff2e8f8759346d6c96cdd", 0x401, &(0x7f00000002c0)="1a8bceabafbb25d08f652c687c1f388ca9973a14723e848afc3fc44fd9cc23a4b89603b12d88063ffdd227ea32de58512be579d684d96b72a1580da5bf23aabbacbf103c2de01932583065382c323efc52d235b2d34869f90489fde45960c1c17a305669a2a0b6c1d3e82ecbe2789fae09ec6bc6c1ad40785e5a3328f48459ff3ef2b49519aa6bbff29d2abd049762df05cf8317", 0xffffffff, &(0x7f0000000380)="723ec7b05c47aef595a509fa998c191b8582c5c30bc45e3b0ac2ade296bc0d3e519f8f95dca1f5f03b92c9b8770b796f472642b4cfcb3d03e460c788a47c94e7", &(0x7f00000003c0)=0x9}) 254.90639ms ago: executing program 0 (id=4584): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x6a) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) socket(0x10, 0x2, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 0 (id=4585): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2, 0x40009, 0x0, 0x8011, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x100, 0x0) ioctl$auto(r0, 0x4b46, 0x1) r1 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x5, 0x10000008, 0x4, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto_PTRACE_GETREGS(0xc, r2, 0x80000000, 0x1) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x4e803, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000080)=0xe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000100)="aa6a9f0fa20404000000000000b83426044de3ad9f59b18f595a668a3a777b06f54dfe4bccaa03b595e8", 0x20003, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x9}, 0x5, 0x20000000) socket(0x2, 0x3, 0x2) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) landlock_restrict_self$auto(r1, 0xde) lstat$auto(&(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x5210f57, 0x7, 0x9, 0x8000009, 0x0, 0x0, 0x0, 0x2, 0xc27, 0x5, 0x100, 0x972b, 0x1, 0x401, 0xd, 0x15, 0x40}) fsconfig$auto(0xffffffffffffffff, 0xffffffff, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="7ff792d774191bdfb9fa7d71c85e13daee4538c0b9cbb8889fc6c902c56b653ee4c8e7dd9c34691318c8367b7f00147226e7321b28631080d7712bf716d32916898f7c236022db66cd7b541958afdcc5fdb72a6667992f6ba5bc0abccd2633910a6f0b8228b276c05403f4dd06076a1f8c095b9473a5449c33cee9cb68162b47bab7e500f68eae846c6436fe15c78b79521709a0175568a8c52cdf0ac2d2ab74dbe5f58e", r5) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffff00, 0x8000}, "290000000000000000000000008000"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000040)={0x7, 0x1, 0x1c0, 0x6, 0xfffffff6, 0x2, "90577a425e214e1730ea2bab411a38e8857053c022bf12795a87e69f1bb7f01ffd02fe3d475a9b4644cf75f39f724fbed78ab016e711635563cbdd0aa81fb9cb"}) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x4e902, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) io_uring_setup$auto(0x9, 0x0) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/snd_dummy.0/sound/card0/mixer/power/runtime_active_time\x00', 0xa0000, 0x0) kernel console output (not intermixed with test programs): d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1245.791414][T23389] RAX: ffffffffffffffda RBX: 00007f740d815fa0 RCX: 00007f740d59c629 [ 1245.791424][T23389] RDX: 0000000000000000 RSI: 000000000000f4f0 RDI: 0000000004001000 [ 1245.791433][T23389] RBP: 00007f740d632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1245.791442][T23389] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1245.791450][T23389] R13: 00007f740d816038 R14: 00007f740d815fa0 R15: 00007fffa5e232e8 [ 1245.791470][T23389] [ 1247.502974][T23416] FAULT_INJECTION: forcing a failure. [ 1247.502974][T23416] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1247.550313][T23416] CPU: 0 UID: 0 PID: 23416 Comm: syz.4.4027 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1247.550340][T23416] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1247.550346][T23416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1247.550354][T23416] Call Trace: [ 1247.550360][T23416] [ 1247.550366][T23416] dump_stack_lvl+0x100/0x190 [ 1247.550399][T23416] should_fail_ex.cold+0x5/0xa [ 1247.550413][T23416] ? prepare_alloc_pages+0x16d/0x5f0 [ 1247.550439][T23416] should_fail_alloc_page+0xeb/0x140 [ 1247.550462][T23416] prepare_alloc_pages+0x1f0/0x5f0 [ 1247.550476][T23416] ? kernel_text_address+0x8d/0x100 [ 1247.550497][T23416] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1247.550523][T23416] ? copy_splice_read+0x1a3/0xb90 [ 1247.550542][T23416] ? stack_trace_save+0x8e/0xc0 [ 1247.550564][T23416] ? __pfx_stack_trace_save+0x10/0x10 [ 1247.550592][T23416] ? do_splice_direct+0x174/0x240 [ 1247.550613][T23416] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1247.550635][T23416] ? copy_splice_read+0x1a3/0xb90 [ 1247.550653][T23416] ? kasan_save_stack+0x3f/0x50 [ 1247.550671][T23416] ? kasan_save_stack+0x30/0x50 [ 1247.550689][T23416] ? kasan_save_track+0x14/0x30 [ 1247.550706][T23416] ? __kasan_kmalloc+0xaa/0xb0 [ 1247.550730][T23416] ? __kmalloc_noprof+0x301/0x850 [ 1247.550748][T23416] ? copy_splice_read+0x1a3/0xb90 [ 1247.550766][T23416] ? do_splice_read+0x285/0x370 [ 1247.550786][T23416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.550811][T23416] alloc_pages_bulk_noprof+0x782/0x1490 [ 1247.550837][T23416] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1247.550861][T23416] ? __kmalloc_noprof+0x320/0x850 [ 1247.550883][T23416] copy_splice_read+0x1e1/0xb90 [ 1247.550907][T23416] ? __pfx_copy_splice_read+0x10/0x10 [ 1247.550932][T23416] ? find_held_lock+0x2b/0x80 [ 1247.550956][T23416] ? __pfx_copy_splice_read+0x10/0x10 [ 1247.550980][T23416] do_splice_read+0x285/0x370 [ 1247.551005][T23416] splice_direct_to_actor+0x2a1/0xa30 [ 1247.551026][T23416] ? __pfx_direct_splice_actor+0x10/0x10 [ 1247.551049][T23416] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1247.551075][T23416] do_splice_direct+0x174/0x240 [ 1247.551095][T23416] ? __pfx_do_splice_direct+0x10/0x10 [ 1247.551114][T23416] ? common_file_perm+0x1ab/0x4f0 [ 1247.551134][T23416] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1247.551157][T23416] ? rw_verify_area+0xce/0x6d0 [ 1247.551177][T23416] do_sendfile+0xadc/0xe20 [ 1247.551200][T23416] ? __pfx_do_sendfile+0x10/0x10 [ 1247.551219][T23416] ? __fget_files+0x21f/0x3d0 [ 1247.551243][T23416] __x64_sys_sendfile64+0x1d8/0x220 [ 1247.551258][T23416] ? ksys_write+0x1ac/0x250 [ 1247.551276][T23416] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1247.551296][T23416] do_syscall_64+0x106/0xf80 [ 1247.551315][T23416] ? clear_bhb_loop+0x40/0x90 [ 1247.551332][T23416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.551347][T23416] RIP: 0033:0x7f8e3fd9c629 [ 1247.551360][T23416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.551374][T23416] RSP: 002b:00007f8e40cb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1247.551389][T23416] RAX: ffffffffffffffda RBX: 00007f8e40015fa0 RCX: 00007f8e3fd9c629 [ 1247.551398][T23416] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1247.551407][T23416] RBP: 00007f8e40cb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.551416][T23416] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1247.551425][T23416] R13: 00007f8e40016038 R14: 00007f8e40015fa0 R15: 00007fff967ef028 [ 1247.551444][T23416] [ 1248.455079][T23419] __vm_enough_memory: pid: 23419, comm: syz.4.4028, bytes: 4398046511104 not enough memory for the allocation [ 1248.773784][ T5868] usb usb38-port5: attempt power cycle [ 1248.801383][T23422] zswap: compressor not available [ 1249.343538][ T5868] usb usb38-port5: unable to enumerate USB device [ 1249.398340][T23429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4029'. [ 1249.476978][ T5970] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1250.663563][T23459] FAULT_INJECTION: forcing a failure. [ 1250.663563][T23459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.731455][T23459] CPU: 0 UID: 0 PID: 23459 Comm: syz.4.4035 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1250.731483][T23459] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1250.731489][T23459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1250.731498][T23459] Call Trace: [ 1250.731508][T23459] [ 1250.731515][T23459] dump_stack_lvl+0x100/0x190 [ 1250.731539][T23459] should_fail_ex.cold+0x5/0xa [ 1250.731556][T23459] _copy_from_user+0x2e/0xd0 [ 1250.731578][T23459] snd_seq_oss_write+0x395/0x7f0 [ 1250.731604][T23459] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1250.731629][T23459] ? bpf_lsm_file_permission+0x9/0x10 [ 1250.731651][T23459] odev_write+0x51/0xa0 [ 1250.731669][T23459] vfs_write+0x2aa/0x1070 [ 1250.731690][T23459] ? __pfx_odev_write+0x10/0x10 [ 1250.731709][T23459] ? __pfx_vfs_write+0x10/0x10 [ 1250.731727][T23459] ? find_held_lock+0x2b/0x80 [ 1250.731747][T23459] ? __fget_files+0x215/0x3d0 [ 1250.731767][T23459] ? __fget_files+0x215/0x3d0 [ 1250.731789][T23459] ? __fget_files+0x21f/0x3d0 [ 1250.731813][T23459] ksys_write+0x12a/0x250 [ 1250.731832][T23459] ? __pfx_ksys_write+0x10/0x10 [ 1250.731856][T23459] do_syscall_64+0x106/0xf80 [ 1250.731871][T23459] ? clear_bhb_loop+0x40/0x90 [ 1250.731888][T23459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.731903][T23459] RIP: 0033:0x7f8e3fd9c629 [ 1250.731915][T23459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.731929][T23459] RSP: 002b:00007f8e40c95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1250.731944][T23459] RAX: ffffffffffffffda RBX: 00007f8e40016090 RCX: 00007f8e3fd9c629 [ 1250.731953][T23459] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000003 [ 1250.731962][T23459] RBP: 00007f8e40c95090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.731971][T23459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1250.731979][T23459] R13: 00007f8e40016128 R14: 00007f8e40016090 R15: 00007fff967ef028 [ 1250.731997][T23459] [ 1251.468550][T23470] FAULT_INJECTION: forcing a failure. [ 1251.468550][T23470] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.548684][T23470] CPU: 0 UID: 0 PID: 23470 Comm: syz.1.4039 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1251.548714][T23470] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1251.548720][T23470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1251.548730][T23470] Call Trace: [ 1251.548736][T23470] [ 1251.548742][T23470] dump_stack_lvl+0x100/0x190 [ 1251.548768][T23470] should_fail_ex.cold+0x5/0xa [ 1251.548787][T23470] should_failslab+0xc2/0x120 [ 1251.548810][T23470] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1251.548831][T23470] ? ptlock_alloc+0x1f/0x70 [ 1251.548853][T23470] ptlock_alloc+0x1f/0x70 [ 1251.548870][T23470] pte_alloc_one+0x84/0x3e0 [ 1251.548886][T23470] __pte_alloc+0x6d/0x3f0 [ 1251.548908][T23470] ? __pfx___pte_alloc+0x10/0x10 [ 1251.548929][T23470] ? __pfx___might_resched+0x10/0x10 [ 1251.548949][T23470] ? copy_page_range+0x1e9d/0x6570 [ 1251.548969][T23470] copy_page_range+0x3e51/0x6570 [ 1251.549008][T23470] ? __pfx_copy_page_range+0x10/0x10 [ 1251.549033][T23470] ? __pfx___might_resched+0x10/0x10 [ 1251.549059][T23470] ? up_write+0x290/0x4f0 [ 1251.549081][T23470] dup_mmap+0xc00/0x1db0 [ 1251.549103][T23470] ? __pfx_dup_mmap+0x10/0x10 [ 1251.549118][T23470] ? rcu_is_watching+0x12/0xc0 [ 1251.549151][T23470] copy_process+0x73d7/0x7a10 [ 1251.549178][T23470] ? __pfx_copy_process+0x10/0x10 [ 1251.549194][T23470] ? find_held_lock+0x2b/0x80 [ 1251.549219][T23470] ? futex_private_hash_put+0x107/0x1c0 [ 1251.549240][T23470] kernel_clone+0xfc/0x9a0 [ 1251.549258][T23470] ? __pfx_kernel_clone+0x10/0x10 [ 1251.549285][T23470] __do_sys_clone+0xd9/0x120 [ 1251.549302][T23470] ? __pfx___do_sys_clone+0x10/0x10 [ 1251.549335][T23470] do_syscall_64+0x106/0xf80 [ 1251.549360][T23470] ? clear_bhb_loop+0x40/0x90 [ 1251.549380][T23470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.549396][T23470] RIP: 0033:0x7f008759c629 [ 1251.549410][T23470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.549426][T23470] RSP: 002b:00007f00884a3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1251.549441][T23470] RAX: ffffffffffffffda RBX: 00007f0087815fa0 RCX: 00007f008759c629 [ 1251.549451][T23470] RDX: 0000000000000000 RSI: 000000000000fff0 RDI: 0000000004001000 [ 1251.549460][T23470] RBP: 00007f0087632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1251.549469][T23470] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1251.549478][T23470] R13: 00007f0087816038 R14: 00007f0087815fa0 R15: 00007ffcea3fcd88 [ 1251.549498][T23470] [ 1253.289963][T23494] __vm_enough_memory: pid: 23494, comm: syz.0.4046, bytes: 4398046511104 not enough memory for the allocation [ 1253.699256][T23506] FAULT_INJECTION: forcing a failure. [ 1253.699256][T23506] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.768615][T23506] CPU: 0 UID: 0 PID: 23506 Comm: syz.1.4049 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1253.768644][T23506] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1253.768651][T23506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1253.768660][T23506] Call Trace: [ 1253.768667][T23506] [ 1253.768673][T23506] dump_stack_lvl+0x100/0x190 [ 1253.768701][T23506] should_fail_ex.cold+0x5/0xa [ 1253.768720][T23506] should_failslab+0xc2/0x120 [ 1253.768744][T23506] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1253.768763][T23506] ? ptlock_alloc+0x1f/0x70 [ 1253.768786][T23506] ptlock_alloc+0x1f/0x70 [ 1253.768804][T23506] pte_alloc_one+0x84/0x3e0 [ 1253.768821][T23506] __pte_alloc+0x6d/0x3f0 [ 1253.768842][T23506] ? __pfx___pte_alloc+0x10/0x10 [ 1253.768865][T23506] ? __pfx___might_resched+0x10/0x10 [ 1253.768885][T23506] ? copy_page_range+0x1e9d/0x6570 [ 1253.768906][T23506] copy_page_range+0x3e51/0x6570 [ 1253.768945][T23506] ? __pfx_copy_page_range+0x10/0x10 [ 1253.768970][T23506] ? __pfx___might_resched+0x10/0x10 [ 1253.768997][T23506] ? up_write+0x290/0x4f0 [ 1253.769019][T23506] dup_mmap+0xc00/0x1db0 [ 1253.769042][T23506] ? __pfx_dup_mmap+0x10/0x10 [ 1253.769056][T23506] ? rcu_is_watching+0x12/0xc0 [ 1253.769089][T23506] copy_process+0x73d7/0x7a10 [ 1253.769116][T23506] ? __pfx_copy_process+0x10/0x10 [ 1253.769132][T23506] ? find_held_lock+0x2b/0x80 [ 1253.769157][T23506] ? futex_private_hash_put+0x107/0x1c0 [ 1253.769178][T23506] kernel_clone+0xfc/0x9a0 [ 1253.769195][T23506] ? __pfx_kernel_clone+0x10/0x10 [ 1253.769223][T23506] __do_sys_clone+0xd9/0x120 [ 1253.769240][T23506] ? __pfx___do_sys_clone+0x10/0x10 [ 1253.769273][T23506] do_syscall_64+0x106/0xf80 [ 1253.769290][T23506] ? clear_bhb_loop+0x40/0x90 [ 1253.769308][T23506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.769324][T23506] RIP: 0033:0x7f008759c629 [ 1253.769339][T23506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.769354][T23506] RSP: 002b:00007f00884a3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1253.769369][T23506] RAX: ffffffffffffffda RBX: 00007f0087815fa0 RCX: 00007f008759c629 [ 1253.769379][T23506] RDX: 0000000000000000 RSI: 0000000000020010 RDI: 0000000004001000 [ 1253.769389][T23506] RBP: 00007f0087632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1253.769398][T23506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1253.769413][T23506] R13: 00007f0087816038 R14: 00007f0087815fa0 R15: 00007ffcea3fcd88 [ 1253.769434][T23506] [ 1254.384730][T23494] zswap: compressor not available [ 1255.528577][T23516] FAULT_INJECTION: forcing a failure. [ 1255.528577][T23516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.704630][T23516] CPU: 0 UID: 0 PID: 23516 Comm: syz.0.4052 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1255.704657][T23516] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1255.704663][T23516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1255.704672][T23516] Call Trace: [ 1255.704677][T23516] [ 1255.704683][T23516] dump_stack_lvl+0x100/0x190 [ 1255.704708][T23516] should_fail_ex.cold+0x5/0xa [ 1255.704725][T23516] _copy_from_user+0x2e/0xd0 [ 1255.704747][T23516] get_timespec64+0x8b/0x1b0 [ 1255.704762][T23516] ? __pfx_get_timespec64+0x10/0x10 [ 1255.704779][T23516] ? common_nsleep+0xa1/0xd0 [ 1255.704796][T23516] __x64_sys_clock_nanosleep+0x1ce/0x480 [ 1255.704817][T23516] ? xfd_validate_state+0x129/0x190 [ 1255.704836][T23516] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1255.704863][T23516] do_syscall_64+0x106/0xf80 [ 1255.704879][T23516] ? clear_bhb_loop+0x40/0x90 [ 1255.704902][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.704919][T23516] RIP: 0033:0x7f740d55cece [ 1255.704933][T23516] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1255.704947][T23516] RSP: 002b:00007fffa5e233c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1255.704966][T23516] RAX: ffffffffffffffda RBX: 000055555fa16500 RCX: 00007f740d55cece [ 1255.704976][T23516] RDX: 00007fffa5e23420 RSI: 0000000000000000 RDI: 0000000000000000 [ 1255.704985][T23516] RBP: 00007f740d817da0 R08: 0000000000000000 R09: 0000000000000000 [ 1255.704993][T23516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000132851 [ 1255.705002][T23516] R13: 00007f740d81609c R14: 00000000001326b0 R15: 00007fffa5e23550 [ 1255.705021][T23516] [ 1257.865645][T23552] FAULT_INJECTION: forcing a failure. [ 1257.865645][T23552] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1257.970995][T23552] CPU: 0 UID: 0 PID: 23552 Comm: syz.0.4059 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1257.971024][T23552] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1257.971030][T23552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1257.971039][T23552] Call Trace: [ 1257.971045][T23552] [ 1257.971052][T23552] dump_stack_lvl+0x100/0x190 [ 1257.971078][T23552] should_fail_ex.cold+0x5/0xa [ 1257.971093][T23552] ? prepare_alloc_pages+0x16d/0x5f0 [ 1257.971110][T23552] should_fail_alloc_page+0xeb/0x140 [ 1257.971135][T23552] prepare_alloc_pages+0x1f0/0x5f0 [ 1257.971154][T23552] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1257.971180][T23552] ? kasan_save_stack+0x3f/0x50 [ 1257.971199][T23552] ? kasan_save_stack+0x30/0x50 [ 1257.971218][T23552] ? kasan_save_track+0x14/0x30 [ 1257.971236][T23552] ? __kasan_slab_alloc+0x89/0x90 [ 1257.971256][T23552] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1257.971275][T23552] ? ptlock_alloc+0x1f/0x70 [ 1257.971291][T23552] ? pte_alloc_one+0x84/0x3e0 [ 1257.971305][T23552] ? __pte_alloc+0x6d/0x3f0 [ 1257.971326][T23552] ? copy_page_range+0x3e51/0x6570 [ 1257.971342][T23552] ? dup_mmap+0xc00/0x1db0 [ 1257.971355][T23552] ? copy_process+0x73d7/0x7a10 [ 1257.971370][T23552] ? kernel_clone+0xfc/0x9a0 [ 1257.971384][T23552] ? __do_sys_clone+0xd9/0x120 [ 1257.971400][T23552] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1257.971426][T23552] ? look_up_lock_class+0x55/0x120 [ 1257.971447][T23552] ? __lock_acquire+0x4a5/0x2630 [ 1257.971467][T23552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1257.971493][T23552] ? policy_nodemask+0xed/0x4f0 [ 1257.971517][T23552] alloc_pages_mpol+0x1fb/0x550 [ 1257.971540][T23552] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1257.971573][T23552] alloc_pages_noprof+0x131/0x390 [ 1257.971597][T23552] pte_alloc_one+0x1e/0x3e0 [ 1257.971613][T23552] __pte_alloc+0x6d/0x3f0 [ 1257.971635][T23552] ? __pfx___pte_alloc+0x10/0x10 [ 1257.971656][T23552] ? __pfx___might_resched+0x10/0x10 [ 1257.971676][T23552] ? copy_page_range+0x1e9d/0x6570 [ 1257.971696][T23552] copy_page_range+0x3e51/0x6570 [ 1257.971736][T23552] ? __pfx_copy_page_range+0x10/0x10 [ 1257.971768][T23552] ? __pfx___might_resched+0x10/0x10 [ 1257.971797][T23552] ? up_write+0x290/0x4f0 [ 1257.971820][T23552] dup_mmap+0xc00/0x1db0 [ 1257.971844][T23552] ? __pfx_dup_mmap+0x10/0x10 [ 1257.971858][T23552] ? rcu_is_watching+0x12/0xc0 [ 1257.971892][T23552] copy_process+0x73d7/0x7a10 [ 1257.971918][T23552] ? __pfx_copy_process+0x10/0x10 [ 1257.971934][T23552] ? find_held_lock+0x2b/0x80 [ 1257.971959][T23552] ? futex_private_hash_put+0x107/0x1c0 [ 1257.971979][T23552] kernel_clone+0xfc/0x9a0 [ 1257.971997][T23552] ? __pfx_kernel_clone+0x10/0x10 [ 1257.972024][T23552] __do_sys_clone+0xd9/0x120 [ 1257.972041][T23552] ? __pfx___do_sys_clone+0x10/0x10 [ 1257.972074][T23552] do_syscall_64+0x106/0xf80 [ 1257.972090][T23552] ? clear_bhb_loop+0x40/0x90 [ 1257.972109][T23552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.972131][T23552] RIP: 0033:0x7f740d59c629 [ 1257.972151][T23552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.972167][T23552] RSP: 002b:00007f740e449fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1257.972183][T23552] RAX: ffffffffffffffda RBX: 00007f740d815fa0 RCX: 00007f740d59c629 [ 1257.972194][T23552] RDX: 0000000000000000 RSI: 0000000000020200 RDI: 0000000004001000 [ 1257.972204][T23552] RBP: 00007f740d632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1257.972213][T23552] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1257.972222][T23552] R13: 00007f740d816038 R14: 00007f740d815fa0 R15: 00007fffa5e232e8 [ 1257.972244][T23552] [ 1258.723326][T23550] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1259.359376][T23561] zswap: compressor not available [ 1260.533268][T23579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4066'. [ 1260.777608][ T5970] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1261.187171][T23592] bridge0: port 4(netdevsim1) entered blocking state [ 1261.233023][T23592] bridge0: port 4(netdevsim1) entered disabled state [ 1261.252993][T23592] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1261.282091][T23592] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1261.323582][T23592] bridge0: port 4(netdevsim1) entered blocking state [ 1261.330342][T23592] bridge0: port 4(netdevsim1) entered forwarding state [ 1262.138926][T23611] input: f as /devices/virtual/input/input388 [ 1263.329637][T23525] Process accounting resumed [ 1263.995008][T23639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4079'. [ 1264.043303][ T5970] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1264.360104][T23644] FAULT_INJECTION: forcing a failure. [ 1264.360104][T23644] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.480951][T23644] CPU: 0 UID: 0 PID: 23644 Comm: syz.4.4081 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1264.480982][T23644] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1264.480989][T23644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1264.480998][T23644] Call Trace: [ 1264.481003][T23644] [ 1264.481010][T23644] dump_stack_lvl+0x100/0x190 [ 1264.481038][T23644] should_fail_ex.cold+0x5/0xa [ 1264.481056][T23644] should_failslab+0xc2/0x120 [ 1264.481086][T23644] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1264.481109][T23644] ? kstrdup_const+0x63/0x80 [ 1264.481134][T23644] kstrdup+0x51/0xe0 [ 1264.481155][T23644] kstrdup_const+0x63/0x80 [ 1264.481176][T23644] alloc_vfsmnt+0xe5/0x6a0 [ 1264.481194][T23644] mnt_clone_internal+0x81/0x250 [ 1264.481218][T23644] acct_on+0xd7/0x9e0 [ 1264.481239][T23644] ? __pfx_acct_on+0x10/0x10 [ 1264.481260][T23644] ? bpf_lsm_capable+0x9/0x10 [ 1264.481273][T23644] ? security_capable+0x80/0x260 [ 1264.481293][T23644] __x64_sys_acct+0x81/0x1e0 [ 1264.481312][T23644] ? lockdep_hardirqs_on+0x78/0x100 [ 1264.481329][T23644] do_syscall_64+0x106/0xf80 [ 1264.481346][T23644] ? clear_bhb_loop+0x40/0x90 [ 1264.481364][T23644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.481379][T23644] RIP: 0033:0x7f8e3fd9c629 [ 1264.481394][T23644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.481408][T23644] RSP: 002b:00007f8e40cb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1264.481423][T23644] RAX: ffffffffffffffda RBX: 00007f8e40015fa0 RCX: 00007f8e3fd9c629 [ 1264.481433][T23644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1264.481442][T23644] RBP: 00007f8e3fe32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1264.481451][T23644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.481460][T23644] R13: 00007f8e40016038 R14: 00007f8e40015fa0 R15: 00007fff967ef028 [ 1264.481481][T23644] [ 1265.086860][T23654] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1265.197778][T23654] FAULT_INJECTION: forcing a failure. [ 1265.197778][T23654] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.197840][T23654] CPU: 0 UID: 0 PID: 23654 Comm: syz.4.4084 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1265.197864][T23654] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1265.197871][T23654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1265.197880][T23654] Call Trace: [ 1265.197885][T23654] [ 1265.197892][T23654] dump_stack_lvl+0x100/0x190 [ 1265.197917][T23654] should_fail_ex.cold+0x5/0xa [ 1265.197935][T23654] ? lsm_blob_alloc+0x68/0x90 [ 1265.197950][T23654] should_failslab+0xc2/0x120 [ 1265.197974][T23654] __kmalloc_noprof+0xe0/0x850 [ 1265.197994][T23654] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1265.198019][T23654] lsm_blob_alloc+0x68/0x90 [ 1265.198035][T23654] security_sk_alloc+0x2d/0x290 [ 1265.198055][T23654] sk_prot_alloc+0x1d1/0x2a0 [ 1265.198085][T23654] sk_alloc+0x36/0xe80 [ 1265.198101][T23654] inet6_create+0x385/0x12b0 [ 1265.198120][T23654] ? inet6_create+0x7f/0x12b0 [ 1265.198139][T23654] __sock_create+0x339/0x860 [ 1265.198163][T23654] udp_sock_create6+0xc7/0x6a0 [ 1265.198181][T23654] ? __pfx_udp_sock_create6+0x10/0x10 [ 1265.198202][T23654] ? crng_make_state+0x477/0x6c0 [ 1265.198222][T23654] ? lockdep_hardirqs_on+0x78/0x100 [ 1265.198239][T23654] ? crng_make_state+0x2b0/0x6c0 [ 1265.198260][T23654] rxrpc_open_socket+0x206/0x6b0 [ 1265.198281][T23654] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 1265.198311][T23654] ? rcu_is_watching+0x12/0xc0 [ 1265.198335][T23654] rxrpc_lookup_local+0xac7/0x1220 [ 1265.198359][T23654] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1265.198381][T23654] ? __local_bh_enable_ip+0x9e/0x120 [ 1265.198399][T23654] rxrpc_sendmsg+0x34a/0x680 [ 1265.198424][T23654] sock_write_iter+0x566/0x610 [ 1265.198444][T23654] ? __pfx_sock_write_iter+0x10/0x10 [ 1265.198470][T23654] ? bpf_lsm_file_permission+0x9/0x10 [ 1265.198491][T23654] ? security_file_permission+0x76/0x210 [ 1265.198513][T23654] ? rw_verify_area+0xce/0x6d0 [ 1265.198534][T23654] vfs_write+0x6ac/0x1070 [ 1265.198555][T23654] ? __pfx_sock_write_iter+0x10/0x10 [ 1265.198576][T23654] ? __pfx_vfs_write+0x10/0x10 [ 1265.198594][T23654] ? find_held_lock+0x2b/0x80 [ 1265.198628][T23654] ksys_write+0x1f8/0x250 [ 1265.198649][T23654] ? __pfx_ksys_write+0x10/0x10 [ 1265.198674][T23654] do_syscall_64+0x106/0xf80 [ 1265.198690][T23654] ? clear_bhb_loop+0x40/0x90 [ 1265.198708][T23654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.198724][T23654] RIP: 0033:0x7f8e3fd9c629 [ 1265.198739][T23654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.198754][T23654] RSP: 002b:00007f8e40cb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1265.198770][T23654] RAX: ffffffffffffffda RBX: 00007f8e40015fa0 RCX: 00007f8e3fd9c629 [ 1265.198780][T23654] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1265.198790][T23654] RBP: 00007f8e3fe32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1265.198799][T23654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.198808][T23654] R13: 00007f8e40016038 R14: 00007f8e40015fa0 R15: 00007fff967ef028 [ 1265.198829][T23654] [ 1267.315130][T23681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4089'. [ 1267.365403][ T5970] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1267.908636][ T29] audit: type=1804 audit(4294975643.031:50): pid=23687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4092" name="/newroot/291/file0" dev="tmpfs" ino=1538 res=1 errno=0 [ 1268.047424][ T29] audit: type=1804 audit(4294975643.091:51): pid=23689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4092" name="/newroot/291/file0" dev="tmpfs" ino=1538 res=1 errno=0 [ 1269.082272][T23704] FAULT_INJECTION: forcing a failure. [ 1269.082272][T23704] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1269.172233][T23704] CPU: 0 UID: 0 PID: 23704 Comm: syz.1.4096 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1269.172263][T23704] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1269.172269][T23704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1269.172279][T23704] Call Trace: [ 1269.172285][T23704] [ 1269.172292][T23704] dump_stack_lvl+0x100/0x190 [ 1269.172319][T23704] should_fail_ex.cold+0x5/0xa [ 1269.172335][T23704] ? prepare_alloc_pages+0x16d/0x5f0 [ 1269.172353][T23704] should_fail_alloc_page+0xeb/0x140 [ 1269.172378][T23704] prepare_alloc_pages+0x1f0/0x5f0 [ 1269.172397][T23704] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1269.172422][T23704] ? __lock_acquire+0x4a5/0x2630 [ 1269.172446][T23704] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1269.172470][T23704] ? __lock_acquire+0x4a5/0x2630 [ 1269.172491][T23704] ? __lock_acquire+0x4a5/0x2630 [ 1269.172510][T23704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1269.172534][T23704] ? policy_nodemask+0xed/0x4f0 [ 1269.172558][T23704] alloc_pages_mpol+0x1fb/0x550 [ 1269.172582][T23704] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1269.172610][T23704] alloc_pages_noprof+0x131/0x390 [ 1269.172633][T23704] pte_alloc_one+0x1e/0x3e0 [ 1269.172666][T23704] __pte_alloc+0x6d/0x3f0 [ 1269.172689][T23704] ? __pfx___pte_alloc+0x10/0x10 [ 1269.172712][T23704] ? __pfx___might_resched+0x10/0x10 [ 1269.172732][T23704] ? copy_page_range+0x1e9d/0x6570 [ 1269.172753][T23704] copy_page_range+0x3e51/0x6570 [ 1269.172795][T23704] ? __pfx_copy_page_range+0x10/0x10 [ 1269.172821][T23704] ? __pfx___might_resched+0x10/0x10 [ 1269.172847][T23704] ? up_write+0x290/0x4f0 [ 1269.172869][T23704] dup_mmap+0xc00/0x1db0 [ 1269.172892][T23704] ? __pfx_dup_mmap+0x10/0x10 [ 1269.172907][T23704] ? rcu_is_watching+0x12/0xc0 [ 1269.172941][T23704] copy_process+0x73d7/0x7a10 [ 1269.172968][T23704] ? __pfx_copy_process+0x10/0x10 [ 1269.172984][T23704] ? find_held_lock+0x2b/0x80 [ 1269.173009][T23704] ? futex_private_hash_put+0x107/0x1c0 [ 1269.173029][T23704] kernel_clone+0xfc/0x9a0 [ 1269.173047][T23704] ? __pfx_kernel_clone+0x10/0x10 [ 1269.173074][T23704] __do_sys_clone+0xd9/0x120 [ 1269.173090][T23704] ? __pfx___do_sys_clone+0x10/0x10 [ 1269.173124][T23704] do_syscall_64+0x106/0xf80 [ 1269.173140][T23704] ? clear_bhb_loop+0x40/0x90 [ 1269.173158][T23704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.173174][T23704] RIP: 0033:0x7f008759c629 [ 1269.173188][T23704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.173204][T23704] RSP: 002b:00007f00884a3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1269.173219][T23704] RAX: ffffffffffffffda RBX: 00007f0087815fa0 RCX: 00007f008759c629 [ 1269.173229][T23704] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000004001000 [ 1269.173238][T23704] RBP: 00007f0087632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1269.173248][T23704] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1269.173258][T23704] R13: 00007f0087816038 R14: 00007f0087815fa0 R15: 00007ffcea3fcd88 [ 1269.173279][T23704] [ 1270.399939][T23717] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1271.138959][T23723] block2mtd: illegal erase size [ 1272.200595][T23745] __vm_enough_memory: pid: 23745, comm: syz.4.4104, bytes: 4398046511104 not enough memory for the allocation [ 1272.962629][T23757] nvme_fcloop: unknown parameter or missing value 'netdev' [ 1274.524053][T23796] FAULT_INJECTION: forcing a failure. [ 1274.524053][T23796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.601545][T23796] CPU: 0 UID: 0 PID: 23796 Comm: syz.0.4116 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1274.601574][T23796] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1274.601580][T23796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1274.601589][T23796] Call Trace: [ 1274.601594][T23796] [ 1274.601600][T23796] dump_stack_lvl+0x100/0x190 [ 1274.601626][T23796] should_fail_ex.cold+0x5/0xa [ 1274.601643][T23796] _copy_from_user+0x2e/0xd0 [ 1274.601663][T23796] snd_seq_oss_write+0x395/0x7f0 [ 1274.601689][T23796] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1274.601714][T23796] ? bpf_lsm_file_permission+0x9/0x10 [ 1274.601737][T23796] odev_write+0x51/0xa0 [ 1274.601755][T23796] vfs_write+0x2aa/0x1070 [ 1274.601775][T23796] ? __pfx_odev_write+0x10/0x10 [ 1274.601794][T23796] ? __pfx_vfs_write+0x10/0x10 [ 1274.601812][T23796] ? find_held_lock+0x2b/0x80 [ 1274.601832][T23796] ? __fget_files+0x215/0x3d0 [ 1274.601851][T23796] ? __fget_files+0x215/0x3d0 [ 1274.601873][T23796] ? __fget_files+0x21f/0x3d0 [ 1274.601897][T23796] ksys_write+0x12a/0x250 [ 1274.601916][T23796] ? __pfx_ksys_write+0x10/0x10 [ 1274.601939][T23796] do_syscall_64+0x106/0xf80 [ 1274.601955][T23796] ? clear_bhb_loop+0x40/0x90 [ 1274.601972][T23796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.601987][T23796] RIP: 0033:0x7f740d59c629 [ 1274.602000][T23796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.602014][T23796] RSP: 002b:00007f740e429028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1274.602030][T23796] RAX: ffffffffffffffda RBX: 00007f740d816090 RCX: 00007f740d59c629 [ 1274.602040][T23796] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000003 [ 1274.602049][T23796] RBP: 00007f740e429090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.602058][T23796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1274.602066][T23796] R13: 00007f740d816128 R14: 00007f740d816090 R15: 00007fffa5e232e8 [ 1274.602092][T23796] [ 1275.117327][T23787] Invalid ELF header magic: != ELF [ 1275.894895][T23799] __vm_enough_memory: pid: 23799, comm: syz.0.4117, bytes: 4398046511104 not enough memory for the allocation [ 1276.559521][T23800] zswap: compressor not available [ 1276.779142][T23808] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4118'. [ 1276.876386][T23808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4118'. [ 1276.928820][T23810] netlink: 86 bytes leftover after parsing attributes in process `syz.0.4118'. [ 1278.566639][T23847] FAULT_INJECTION: forcing a failure. [ 1278.566639][T23847] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.673615][T23847] CPU: 0 UID: 0 PID: 23847 Comm: syz.0.4125 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1278.673646][T23847] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1278.673652][T23847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1278.673661][T23847] Call Trace: [ 1278.673668][T23847] [ 1278.673676][T23847] dump_stack_lvl+0x100/0x190 [ 1278.673711][T23847] should_fail_ex.cold+0x5/0xa [ 1278.673729][T23847] should_failslab+0xc2/0x120 [ 1278.673754][T23847] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1278.673774][T23847] ? __kernfs_new_node+0xd2/0x960 [ 1278.673796][T23847] __kernfs_new_node+0xd2/0x960 [ 1278.673817][T23847] ? __pfx___kernfs_new_node+0x10/0x10 [ 1278.673840][T23847] ? find_held_lock+0x2b/0x80 [ 1278.673862][T23847] ? kernfs_root+0xee/0x2a0 [ 1278.673879][T23847] ? kernfs_root+0xee/0x2a0 [ 1278.673901][T23847] kernfs_new_node+0x11b/0x1a0 [ 1278.673925][T23847] __kernfs_create_file+0x53/0x350 [ 1278.673942][T23847] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1278.673964][T23847] sysfs_merge_group+0x194/0x340 [ 1278.673984][T23847] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1278.674006][T23847] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1278.674027][T23847] ? bus_to_subsys+0x114/0x150 [ 1278.674044][T23847] dpm_sysfs_add+0x237/0x280 [ 1278.674065][T23847] device_add+0x9ef/0x1950 [ 1278.674089][T23847] ? __pfx_device_add+0x10/0x10 [ 1278.674109][T23847] ? trace_kmalloc+0x101/0x130 [ 1278.674130][T23847] ? __kasan_kmalloc+0xaa/0xb0 [ 1278.674150][T23847] ? lockdep_init_map_type+0x5c/0x250 [ 1278.674169][T23847] ? lockdep_init_map_type+0x5c/0x250 [ 1278.674189][T23847] input_register_device+0x7d2/0xe20 [ 1278.674210][T23847] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 1278.674233][T23847] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1278.674253][T23847] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1278.674279][T23847] ? find_held_lock+0x2b/0x80 [ 1278.674300][T23847] ? __fget_files+0x215/0x3d0 [ 1278.674329][T23847] ? __pfx_uinput_ioctl+0x10/0x10 [ 1278.674351][T23847] __x64_sys_ioctl+0x18e/0x210 [ 1278.674371][T23847] do_syscall_64+0x106/0xf80 [ 1278.674388][T23847] ? clear_bhb_loop+0x40/0x90 [ 1278.674406][T23847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.674422][T23847] RIP: 0033:0x7f740d59c629 [ 1278.674436][T23847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.674452][T23847] RSP: 002b:00007f740e44a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.674468][T23847] RAX: ffffffffffffffda RBX: 00007f740d815fa0 RCX: 00007f740d59c629 [ 1278.674478][T23847] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 1278.674488][T23847] RBP: 00007f740d632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1278.674497][T23847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1278.674507][T23847] R13: 00007f740d816038 R14: 00007f740d815fa0 R15: 00007fffa5e232e8 [ 1278.674528][T23847] [ 1280.971269][T23871] FAULT_INJECTION: forcing a failure. [ 1280.971269][T23871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.073979][T23871] CPU: 0 UID: 0 PID: 23871 Comm: syz.0.4131 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1281.074009][T23871] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1281.074016][T23871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1281.074026][T23871] Call Trace: [ 1281.074032][T23871] [ 1281.074038][T23871] dump_stack_lvl+0x100/0x190 [ 1281.074065][T23871] should_fail_ex.cold+0x5/0xa [ 1281.074083][T23871] _copy_from_user+0x2e/0xd0 [ 1281.074106][T23871] memdup_user+0x6b/0xe0 [ 1281.074128][T23871] msr_io+0xea/0x480 [ 1281.074143][T23871] ? __pfx_do_get_feature_msr+0x10/0x10 [ 1281.074164][T23871] ? __pfx_msr_io+0x10/0x10 [ 1281.074184][T23871] kvm_arch_dev_ioctl+0x487/0x770 [ 1281.074200][T23871] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 1281.074221][T23871] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1281.074245][T23871] ? do_vfs_ioctl+0x226/0x13e0 [ 1281.074266][T23871] kvm_dev_ioctl+0x73a/0x1a80 [ 1281.074287][T23871] ? hook_file_ioctl_common+0x146/0x410 [ 1281.074308][T23871] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1281.074326][T23871] ? __x64_sys_openat+0x12d/0x210 [ 1281.074343][T23871] ? xfd_validate_state+0x129/0x190 [ 1281.074364][T23871] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1281.074381][T23871] __x64_sys_ioctl+0x18e/0x210 [ 1281.074401][T23871] do_syscall_64+0x106/0xf80 [ 1281.074417][T23871] ? clear_bhb_loop+0x40/0x90 [ 1281.074436][T23871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.074451][T23871] RIP: 0033:0x7f740d59c629 [ 1281.074464][T23871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.074498][T23871] RSP: 002b:00007f740e44a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.074514][T23871] RAX: ffffffffffffffda RBX: 00007f740d815fa0 RCX: 00007f740d59c629 [ 1281.074525][T23871] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000006 [ 1281.074535][T23871] RBP: 00007f740d632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1281.074544][T23871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.074553][T23871] R13: 00007f740d816038 R14: 00007f740d815fa0 R15: 00007fffa5e232e8 [ 1281.074573][T23871] [ 1281.364857][T23875] FAULT_INJECTION: forcing a failure. [ 1281.364857][T23875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.378437][T23875] CPU: 0 UID: 0 PID: 23875 Comm: syz.4.4132 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1281.378464][T23875] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1281.378469][T23875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1281.378478][T23875] Call Trace: [ 1281.378502][T23875] [ 1281.378507][T23875] dump_stack_lvl+0x100/0x190 [ 1281.378533][T23875] should_fail_ex.cold+0x5/0xa [ 1281.378550][T23875] _copy_from_user+0x2e/0xd0 [ 1281.378571][T23875] snd_seq_oss_write+0x395/0x7f0 [ 1281.378597][T23875] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1281.378622][T23875] ? bpf_lsm_file_permission+0x9/0x10 [ 1281.378645][T23875] odev_write+0x51/0xa0 [ 1281.378662][T23875] vfs_write+0x2aa/0x1070 [ 1281.378683][T23875] ? __pfx_odev_write+0x10/0x10 [ 1281.378701][T23875] ? __pfx_vfs_write+0x10/0x10 [ 1281.378719][T23875] ? find_held_lock+0x2b/0x80 [ 1281.378739][T23875] ? __fget_files+0x215/0x3d0 [ 1281.378759][T23875] ? __fget_files+0x215/0x3d0 [ 1281.378781][T23875] ? __fget_files+0x21f/0x3d0 [ 1281.378805][T23875] ksys_write+0x12a/0x250 [ 1281.378824][T23875] ? __pfx_ksys_write+0x10/0x10 [ 1281.378848][T23875] do_syscall_64+0x106/0xf80 [ 1281.378864][T23875] ? clear_bhb_loop+0x40/0x90 [ 1281.378881][T23875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.378895][T23875] RIP: 0033:0x7f8e3fd9c629 [ 1281.378908][T23875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.378922][T23875] RSP: 002b:00007f8e40c95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1281.378936][T23875] RAX: ffffffffffffffda RBX: 00007f8e40016090 RCX: 00007f8e3fd9c629 [ 1281.378946][T23875] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000003 [ 1281.378954][T23875] RBP: 00007f8e40c95090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.378963][T23875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1281.378971][T23875] R13: 00007f8e40016128 R14: 00007f8e40016090 R15: 00007fff967ef028 [ 1281.378990][T23875] [ 1281.953445][T23878] netlink: 'syz.1.4133': attribute type 2 has an invalid length. [ 1282.102845][T23880] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1282.149554][ T29] audit: type=1800 audit(4294975657.221:52): pid=23883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4135" name="dbroot" dev="configfs" ino=96785 res=0 errno=0 [ 1282.253056][T23880] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1282.357463][T23880] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 1282.494835][T23889] __vm_enough_memory: pid: 23889, comm: syz.0.4136, bytes: 4398046511104 not enough memory for the allocation [ 1283.142421][T23905] zswap: compressor not available [ 1283.247319][ T5927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1283.263656][ T5927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1283.271890][ T5927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1283.280256][ T5927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1283.289046][ T5927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1283.835214][T23916] netlink: 350 bytes leftover after parsing attributes in process `syz.0.4139'. [ 1284.668556][T23910] chnl_net:caif_netlink_parms(): no params data found [ 1285.193228][T23910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.200376][T23910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.343121][T23910] bridge_slave_0: entered allmulticast mode [ 1285.381762][T23910] bridge_slave_0: entered promiscuous mode [ 1285.453329][ T5970] Bluetooth: hci2: command tx timeout [ 1285.486108][T23910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.573908][T23910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.682128][T23910] bridge_slave_1: entered allmulticast mode [ 1285.704947][T23910] bridge_slave_1: entered promiscuous mode [ 1286.034921][T23910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.200851][T23910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.938111][T23910] team0: Port device team_slave_0 added [ 1287.049745][T23910] team0: Port device team_slave_1 added [ 1287.233001][T23910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.240047][T23910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.442825][T23910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.533531][ T5970] Bluetooth: hci2: command tx timeout [ 1287.541979][T23937] syz.1.4142 (23937): drop_caches: 0 [ 1287.620301][T23910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.672899][T23910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.801914][T23910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.065521][T23910] hsr_slave_0: entered promiscuous mode [ 1288.113420][T23910] hsr_slave_1: entered promiscuous mode [ 1288.146979][T23910] debugfs: 'hsr0' already exists in 'hsr' [ 1288.185812][T23910] Cannot create hsr debugfs directory [ 1288.796955][T23944] FAULT_INJECTION: forcing a failure. [ 1288.796955][T23944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.883016][T23944] CPU: 0 UID: 0 PID: 23944 Comm: syz.1.4144 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1288.883044][T23944] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1288.883049][T23944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1288.883059][T23944] Call Trace: [ 1288.883065][T23944] [ 1288.883071][T23944] dump_stack_lvl+0x100/0x190 [ 1288.883096][T23944] should_fail_ex.cold+0x5/0xa [ 1288.883112][T23944] _copy_from_user+0x2e/0xd0 [ 1288.883135][T23944] snd_seq_oss_write+0x395/0x7f0 [ 1288.883161][T23944] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1288.883186][T23944] ? bpf_lsm_file_permission+0x9/0x10 [ 1288.883208][T23944] odev_write+0x51/0xa0 [ 1288.883226][T23944] vfs_write+0x2aa/0x1070 [ 1288.883247][T23944] ? __pfx_odev_write+0x10/0x10 [ 1288.883265][T23944] ? __pfx_vfs_write+0x10/0x10 [ 1288.883283][T23944] ? find_held_lock+0x2b/0x80 [ 1288.883304][T23944] ? __fget_files+0x215/0x3d0 [ 1288.883323][T23944] ? __fget_files+0x215/0x3d0 [ 1288.883345][T23944] ? __fget_files+0x21f/0x3d0 [ 1288.883369][T23944] ksys_write+0x12a/0x250 [ 1288.883388][T23944] ? __pfx_ksys_write+0x10/0x10 [ 1288.883413][T23944] do_syscall_64+0x106/0xf80 [ 1288.883428][T23944] ? clear_bhb_loop+0x40/0x90 [ 1288.883446][T23944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.883460][T23944] RIP: 0033:0x7f008759c629 [ 1288.883473][T23944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.883487][T23944] RSP: 002b:00007f0088483028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1288.883502][T23944] RAX: ffffffffffffffda RBX: 00007f0087816090 RCX: 00007f008759c629 [ 1288.883511][T23944] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000003 [ 1288.883520][T23944] RBP: 00007f0088483090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.883528][T23944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1288.883537][T23944] R13: 00007f0087816128 R14: 00007f0087816090 R15: 00007ffcea3fcd88 [ 1288.883556][T23944] [ 1289.146793][T23910] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1289.451198][T23910] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1289.635610][T23910] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1289.681543][ T5970] Bluetooth: hci2: command tx timeout [ 1289.834110][T23910] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1289.926227][T23947] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880794018c0 pfn:0x79401 [ 1289.963986][T23947] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1289.971124][T23947] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1290.054228][T23947] raw: ffff8880794018c0 ffff88801c34b800 00000001ffffffff 0000000000000000 [ 1290.110604][T23947] page dumped because: unmovable page [ 1290.126354][T23947] page_owner tracks the page as allocated [ 1290.161126][T23947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 6608, tgid 6605 (syz.2.138), ts 122539127144, free_ts 120288842793 [ 1290.285643][T23947] post_alloc_hook+0x153/0x170 [ 1290.315135][T23947] get_page_from_freelist+0x111d/0x3140 [ 1290.348481][T23947] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1290.382938][T23947] __alloc_pages_noprof+0xb/0x1b0 [ 1290.405788][T23947] pcpu_populate_chunk+0x118/0x990 [ 1290.436030][T23910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.459695][T23947] pcpu_alloc_noprof+0x833/0x1c50 [ 1290.483237][T23947] bpf_map_alloc_percpu+0x9a/0xf0 [ 1290.523059][T23947] htab_map_alloc+0x1054/0x14e0 [ 1290.552983][T23947] map_create+0x84e/0x2ba0 [ 1290.571779][T23910] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.657513][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.664701][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.703113][T23947] __sys_bpf+0x2091/0x4b90 [ 1290.724587][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.731739][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.739775][T23947] __x64_sys_bpf+0x7b/0xc0 [ 1290.765582][T23947] do_syscall_64+0x106/0xf80 [ 1290.792990][T23947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.834524][T23947] page last free pid 6537 tgid 6532 stack trace: [ 1290.840890][T23947] __free_frozen_pages+0x7ca/0x10a0 [ 1290.887422][T23947] mon_bin_release+0x15a/0x210 [ 1290.892249][T23947] __fput+0x3ff/0xb40 [ 1290.926730][T23910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1290.947518][T23947] task_work_run+0x150/0x240 [ 1290.952139][T23947] do_exit+0x829/0x2aa0 [ 1290.993111][T23947] do_group_exit+0xd5/0x2a0 [ 1290.997649][T23947] get_signal+0x1ec7/0x21e0 [ 1291.053462][T23947] arch_do_signal_or_restart+0x91/0x770 [ 1291.079391][T23947] exit_to_user_mode_loop+0x86/0x4a0 [ 1291.109741][T23947] do_syscall_64+0x668/0xf80 [ 1291.142849][T23947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.693453][ T5970] Bluetooth: hci2: command tx timeout [ 1291.735314][T23910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.925091][T23910] veth0_vlan: entered promiscuous mode [ 1293.132267][T23910] veth1_vlan: entered promiscuous mode [ 1293.277530][T23910] veth0_macvtap: entered promiscuous mode [ 1293.364135][T23997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4153'. [ 1293.454053][ T5970] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1293.485605][T23910] veth1_macvtap: entered promiscuous mode [ 1293.566309][T23910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.622406][T23990] Process accounting paused [ 1293.661784][T23910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.777251][T18443] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.815702][T18443] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.883279][T24002] FAULT_INJECTION: forcing a failure. [ 1293.883279][T24002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.933407][T24002] CPU: 0 UID: 0 PID: 24002 Comm: syz.1.4154 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1293.933435][T24002] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1293.933441][T24002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1293.933457][T24002] Call Trace: [ 1293.933463][T24002] [ 1293.933469][T24002] dump_stack_lvl+0x100/0x190 [ 1293.933494][T24002] should_fail_ex.cold+0x5/0xa [ 1293.933510][T24002] _copy_from_user+0x2e/0xd0 [ 1293.933535][T24002] snd_seq_oss_write+0x395/0x7f0 [ 1293.933561][T24002] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1293.933587][T24002] ? bpf_lsm_file_permission+0x9/0x10 [ 1293.933609][T24002] odev_write+0x51/0xa0 [ 1293.933626][T24002] vfs_write+0x2aa/0x1070 [ 1293.933646][T24002] ? __pfx_odev_write+0x10/0x10 [ 1293.933665][T24002] ? __pfx_vfs_write+0x10/0x10 [ 1293.933682][T24002] ? find_held_lock+0x2b/0x80 [ 1293.933703][T24002] ? __fget_files+0x215/0x3d0 [ 1293.933722][T24002] ? __fget_files+0x215/0x3d0 [ 1293.933744][T24002] ? __fget_files+0x21f/0x3d0 [ 1293.933767][T24002] ksys_write+0x12a/0x250 [ 1293.933787][T24002] ? __pfx_ksys_write+0x10/0x10 [ 1293.933811][T24002] do_syscall_64+0x106/0xf80 [ 1293.933827][T24002] ? clear_bhb_loop+0x40/0x90 [ 1293.933844][T24002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.933864][T24002] RIP: 0033:0x7f008759c629 [ 1293.933877][T24002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.933891][T24002] RSP: 002b:00007f0088483028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1293.933905][T24002] RAX: ffffffffffffffda RBX: 00007f0087816090 RCX: 00007f008759c629 [ 1293.933915][T24002] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000003 [ 1293.933927][T24002] RBP: 00007f0088483090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.933936][T24002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1293.933944][T24002] R13: 00007f0087816128 R14: 00007f0087816090 R15: 00007ffcea3fcd88 [ 1293.933963][T24002] [ 1294.643154][T18443] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.686388][T18443] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.055948][T14112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.098141][T14112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.156730][T18443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.192860][T18443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.716004][T24017] FAULT_INJECTION: forcing a failure. [ 1295.716004][T24017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.809108][T24019] random: crng reseeded on system resumption [ 1295.818244][T24017] CPU: 0 UID: 0 PID: 24017 Comm: syz.1.4158 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1295.818271][T24017] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1295.818276][T24017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1295.818286][T24017] Call Trace: [ 1295.818292][T24017] [ 1295.818298][T24017] dump_stack_lvl+0x100/0x190 [ 1295.818324][T24017] should_fail_ex.cold+0x5/0xa [ 1295.818340][T24017] _copy_from_user+0x2e/0xd0 [ 1295.818362][T24017] move_addr_to_kernel+0x65/0x170 [ 1295.818383][T24017] __sys_connect+0xb5/0x170 [ 1295.818404][T24017] ? __pfx___sys_connect+0x10/0x10 [ 1295.818427][T24017] ? __fget_files+0x21f/0x3d0 [ 1295.818453][T24017] ? __pfx_ksys_write+0x10/0x10 [ 1295.818477][T24017] __x64_sys_connect+0x72/0xb0 [ 1295.818496][T24017] ? lockdep_hardirqs_on+0x78/0x100 [ 1295.818513][T24017] do_syscall_64+0x106/0xf80 [ 1295.818528][T24017] ? clear_bhb_loop+0x40/0x90 [ 1295.818545][T24017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.818560][T24017] RIP: 0033:0x7f008759c629 [ 1295.818573][T24017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.818587][T24017] RSP: 002b:00007f00884a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1295.818602][T24017] RAX: ffffffffffffffda RBX: 00007f0087815fa0 RCX: 00007f008759c629 [ 1295.818611][T24017] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 1295.818620][T24017] RBP: 00007f00884a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.818629][T24017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.818637][T24017] R13: 00007f0087816038 R14: 00007f0087815fa0 R15: 00007ffcea3fcd88 [ 1295.818656][T24017] [ 1298.873235][T24047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4162'. [ 1298.932348][ T5970] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1299.470288][T24051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4171'. [ 1299.486149][ T29] audit: type=1800 audit(4294975674.611:53): pid=24053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4163" name="dbroot" dev="configfs" ino=98043 res=0 errno=0 [ 1299.551035][ T5970] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1300.178465][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.190407][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.010873][T24070] __vm_enough_memory: pid: 24070, comm: syz.1.4166, bytes: 4398046511104 not enough memory for the allocation [ 1301.464135][T24078] FAULT_INJECTION: forcing a failure. [ 1301.464135][T24078] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.584064][T24078] CPU: 0 UID: 0 PID: 24078 Comm: syz.0.4168 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1301.584091][T24078] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1301.584097][T24078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1301.584106][T24078] Call Trace: [ 1301.584112][T24078] [ 1301.584119][T24078] dump_stack_lvl+0x100/0x190 [ 1301.584143][T24078] should_fail_ex.cold+0x5/0xa [ 1301.584161][T24078] should_failslab+0xc2/0x120 [ 1301.584182][T24078] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1301.584199][T24078] ? sctp_association_new+0xbb/0x2990 [ 1301.584222][T24078] sctp_association_new+0xbb/0x2990 [ 1301.584241][T24078] ? sctp_v4_scope+0x171/0x1a0 [ 1301.584265][T24078] sctp_connect_new_asoc+0x1a8/0x770 [ 1301.584285][T24078] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1301.584303][T24078] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 1301.584320][T24078] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 1301.584344][T24078] __sctp_connect+0x3e7/0xc70 [ 1301.584367][T24078] ? __pfx___sctp_connect+0x10/0x10 [ 1301.584387][T24078] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1301.584406][T24078] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1301.584430][T24078] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1301.584448][T24078] sctp_inet_connect+0x15f/0x220 [ 1301.584467][T24078] __sys_connect_file+0x141/0x1a0 [ 1301.584496][T24078] __sys_connect+0x141/0x170 [ 1301.584517][T24078] ? __pfx___sys_connect+0x10/0x10 [ 1301.584536][T24078] ? __fget_files+0x21f/0x3d0 [ 1301.584563][T24078] ? __pfx_ksys_write+0x10/0x10 [ 1301.584587][T24078] __x64_sys_connect+0x72/0xb0 [ 1301.584606][T24078] ? lockdep_hardirqs_on+0x78/0x100 [ 1301.584622][T24078] do_syscall_64+0x106/0xf80 [ 1301.584637][T24078] ? clear_bhb_loop+0x40/0x90 [ 1301.584654][T24078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.584669][T24078] RIP: 0033:0x7f740d59c629 [ 1301.584682][T24078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.584696][T24078] RSP: 002b:00007f740e44a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1301.584711][T24078] RAX: ffffffffffffffda RBX: 00007f740d815fa0 RCX: 00007f740d59c629 [ 1301.584721][T24078] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 1301.584730][T24078] RBP: 00007f740e44a090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.584738][T24078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.584746][T24078] R13: 00007f740d816038 R14: 00007f740d815fa0 R15: 00007fffa5e232e8 [ 1301.584766][T24078] [ 1301.872185][T24070] zswap: compressor not available [ 1303.432047][T24089] __vm_enough_memory: pid: 24089, comm: syz.0.4179, bytes: 4398046511104 not enough memory for the allocation [ 1303.496318][T24088] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880794018c0 pfn:0x79401 [ 1303.551624][T24088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1303.624146][T24088] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1303.715675][T24088] raw: ffff8880794018c0 ffff88801c34b800 00000001ffffffff 0000000000000000 [ 1303.788692][T24088] page dumped because: unmovable page [ 1303.836649][T24088] page_owner tracks the page as allocated [ 1303.896320][T24088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 6608, tgid 6605 (syz.2.138), ts 122539127144, free_ts 120288842793 [ 1304.022888][T24088] post_alloc_hook+0x153/0x170 [ 1304.062866][T24088] get_page_from_freelist+0x111d/0x3140 [ 1304.092940][T24088] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1304.126246][T24088] __alloc_pages_noprof+0xb/0x1b0 [ 1304.156575][T24088] pcpu_populate_chunk+0x118/0x990 [ 1304.270952][T24088] pcpu_alloc_noprof+0x833/0x1c50 [ 1304.353777][T24088] bpf_map_alloc_percpu+0x9a/0xf0 [ 1304.382563][T24088] htab_map_alloc+0x1054/0x14e0 [ 1304.424671][T24088] map_create+0x84e/0x2ba0 [ 1304.429128][T24088] __sys_bpf+0x2091/0x4b90 [ 1304.446927][T24089] zswap: compressor not available [ 1304.472922][T24088] __x64_sys_bpf+0x7b/0xc0 [ 1304.499263][T24088] do_syscall_64+0x106/0xf80 [ 1304.532874][T24088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.561422][T24088] page last free pid 6537 tgid 6532 stack trace: [ 1304.593803][T24088] __free_frozen_pages+0x7ca/0x10a0 [ 1304.636753][T24088] mon_bin_release+0x15a/0x210 [ 1304.672867][T24088] __fput+0x3ff/0xb40 [ 1304.690004][T24088] task_work_run+0x150/0x240 [ 1304.712873][T24088] do_exit+0x829/0x2aa0 [ 1304.727312][T24088] do_group_exit+0xd5/0x2a0 [ 1304.747567][T24088] get_signal+0x1ec7/0x21e0 [ 1304.761892][T24088] arch_do_signal_or_restart+0x91/0x770 [ 1304.792862][T24088] exit_to_user_mode_loop+0x86/0x4a0 [ 1304.833038][T24088] do_syscall_64+0x668/0xf80 [ 1304.837755][T24088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.989723][ T29] audit: type=1800 audit(4294975681.111:54): pid=24143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4181" name="dbroot" dev="configfs" ino=98506 res=0 errno=0 [ 1306.038892][T24144] __vm_enough_memory: pid: 24144, comm: syz.5.4182, bytes: 4398046511104 not enough memory for the allocation [ 1306.803268][T24146] zswap: compressor not available [ 1307.661603][T24162] serio: Serial port ttyS2 [ 1310.788953][T24180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4189'. [ 1310.868077][ T5970] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1311.458552][T24190] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1312.033945][T24198] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1312.308862][T24206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4198'. [ 1312.365898][ T5970] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1312.408647][T24210] ovs_?: entered promiscuous mode [ 1314.001721][T24232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4205'. [ 1314.936503][ T29] audit: type=1107 audit(4294975690.055:55): pid=24241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1315.045634][ T29] audit: type=1107 audit(4294975690.055:56): pid=24241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1315.074029][T24245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4208'. [ 1315.720018][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4209'. [ 1315.956718][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4209'. [ 1316.058650][T24267] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1317.365227][T24281] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 1319.859998][ T5970] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1320.289507][T24298] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4221'. [ 1322.652307][ T29] audit: type=1400 audit(4294994041.766:57): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=24326 comm="syz.1.4227" [ 1323.714149][ T5970] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1323.889387][T24335] Process accounting resumed [ 1327.870583][ T5970] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1329.903148][T24418] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4250'. [ 1330.146604][T24418] mac80211_hwsim hwsim49 : renamed from wlan0 (while UP) [ 1331.468131][ T5927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1331.482961][ T5927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1331.491168][ T5927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1331.499355][ T5927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1331.506854][ T5927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1331.963353][T24437] zswap: compressor not available [ 1333.139214][T24450] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4256'. [ 1333.202590][T24436] chnl_net:caif_netlink_parms(): no params data found [ 1333.277425][T24451] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4256'. [ 1333.313385][T24451] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4256'. [ 1333.369556][T24451] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4256'. [ 1333.423680][T24451] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4256'. [ 1333.543222][T24451] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4256'. [ 1333.614905][T12225] Bluetooth: hci6: command tx timeout [ 1333.621465][T24451] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4256'. [ 1333.708116][T24457] sysfs_service_op_show: Client not running :-5: [ 1333.756749][T24451] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4256'. [ 1333.783489][T24451] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4256'. [ 1334.044841][T24436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.062255][T24436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.106689][T24436] bridge_slave_0: entered allmulticast mode [ 1334.164643][T24436] bridge_slave_0: entered promiscuous mode [ 1334.224084][T24436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.283660][T24436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.323037][T24436] bridge_slave_1: entered allmulticast mode [ 1334.374318][T24436] bridge_slave_1: entered promiscuous mode [ 1334.417916][T24469] mac80211_hwsim hwsim69 : renamed from wlan0 (while UP) [ 1334.673494][T24436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.795339][T24436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.157616][T24436] team0: Port device team_slave_0 added [ 1335.234914][T24436] team0: Port device team_slave_1 added [ 1335.698455][T12225] Bluetooth: hci6: command tx timeout [ 1335.842267][T24436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.902096][T24436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.967932][T24490] zswap: compressor not available [ 1336.041550][T24496] __nla_validate_parse: 12 callbacks suppressed [ 1336.041567][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4266'. [ 1336.082998][T24436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.238735][T24436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.286951][T24436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.415557][T24436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.669551][T24502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4267'. [ 1336.868951][T24436] hsr_slave_0: entered promiscuous mode [ 1336.897009][T24436] hsr_slave_1: entered promiscuous mode [ 1336.931850][T24436] debugfs: 'hsr0' already exists in 'hsr' [ 1336.953058][T24436] Cannot create hsr debugfs directory [ 1336.978888][T24502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.994352][T24502] bridge_slave_1 (unregistering): left allmulticast mode [ 1337.032216][T24502] bridge_slave_1 (unregistering): left promiscuous mode [ 1337.072503][T24502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.363008][T24505] sysfs_service_op_show: Client not running :-5: [ 1337.381316][T18441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.773210][T12225] Bluetooth: hci6: command tx timeout [ 1337.949773][T18441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.183722][T24481] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1338.309828][T18441] bridge0: port 4(netdevsim1) entered disabled state [ 1338.436004][T18441] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 1338.488314][T18441] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 1338.539328][T18441] bridge0: port 4(netdevsim1) entered disabled state [ 1338.633721][T18441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.975143][T18441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.765597][T18441] team0: left allmulticast mode [ 1339.770475][T18441] team_slave_0: left allmulticast mode [ 1339.776532][T24519] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1339.850154][T18441] team_slave_1: left allmulticast mode [ 1339.856655][T12225] Bluetooth: hci6: command tx timeout [ 1339.902544][T24519] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1339.923865][T18441] team0: left promiscuous mode [ 1339.954474][T18441] team_slave_0: left promiscuous mode [ 1339.959995][T18441] team_slave_1: left promiscuous mode [ 1339.999124][T24519] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1340.043087][T18441] bridge0: port 3(team0) entered disabled state [ 1340.086114][T18441] bridge_slave_1: left allmulticast mode [ 1340.091771][T18441] bridge_slave_1: left promiscuous mode [ 1340.122912][T24519] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1340.184192][T18441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.350727][T24526] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1340.471918][T18441] bridge_slave_0: left allmulticast mode [ 1340.478684][T24526] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1340.529545][T18441] bridge_slave_0: left promiscuous mode [ 1340.543014][T18441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.573348][T24526] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1340.667206][T24526] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1342.339586][T18441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.421340][T18441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.468443][T18441] bond0 (unregistering): Released all slaves [ 1342.584205][T24522] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4273'. [ 1342.692131][T18441] : left promiscuous mode [ 1342.931152][T24538] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1342.975306][T18441] &#$@\]\-: left promiscuous mode [ 1343.062999][T24538] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1343.167717][T24538] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1343.257243][T24538] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1343.480704][T24539] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1343.587214][T24539] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1343.679823][T24539] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1343.781852][T24539] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1344.178704][T24540] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1344.303482][T24540] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1344.406637][T24540] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1344.475753][T24436] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1344.504578][T24540] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1344.559746][T24436] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1344.792823][T24436] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1344.834089][T24436] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1344.946757][T24541] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1345.037062][T24541] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1345.103166][T24541] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1345.202867][T24541] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1345.302843][T18441] hsr_slave_1: left promiscuous mode [ 1345.308741][T18441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.353512][T18441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.393617][T18441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.401007][T18441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.533600][T18441] veth1_macvtap: left promiscuous mode [ 1345.539140][T18441] veth1_vlan: left promiscuous mode [ 1345.573608][T18441] veth0_vlan: left promiscuous mode [ 1346.291827][T18441] team0 (unregistering): Port device team_slave_1 removed [ 1346.354497][T18441] team0 (unregistering): Port device team_slave_0 removed [ 1346.940637][T24553] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1346.961055][T24555] sysfs_service_op_show: Client not running :-5: [ 1347.008933][T24436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1347.068044][T24553] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1347.091226][T24436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1347.140458][T24559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4278'. [ 1347.185864][T24553] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1347.225022][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.232113][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1347.308558][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.315695][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.325668][T24553] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1347.343465][T24560] blktrace: Concurrent blktraces are not allowed on nbd8 [ 1347.494378][T24559] bridge_slave_1 (unregistering): left allmulticast mode [ 1347.504771][T24559] bridge_slave_1 (unregistering): left promiscuous mode [ 1347.552712][T24559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.767165][T24436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1347.843012][T24436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1348.746063][T24436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.114829][T24580] FAULT_INJECTION: forcing a failure. [ 1349.114829][T24580] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.245542][T24580] CPU: 0 UID: 0 PID: 24580 Comm: syz.0.4282 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1349.245571][T24580] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1349.245577][T24580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1349.245590][T24580] Call Trace: [ 1349.245596][T24580] [ 1349.245602][T24580] dump_stack_lvl+0x100/0x190 [ 1349.245633][T24580] should_fail_ex.cold+0x5/0xa [ 1349.245651][T24580] should_failslab+0xc2/0x120 [ 1349.245675][T24580] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1349.245695][T24580] ? ptlock_alloc+0x1f/0x70 [ 1349.245716][T24580] ptlock_alloc+0x1f/0x70 [ 1349.245733][T24580] pte_alloc_one+0x84/0x3e0 [ 1349.245750][T24580] __pte_alloc+0x6d/0x3f0 [ 1349.245778][T24580] ? __pfx___pte_alloc+0x10/0x10 [ 1349.245800][T24580] ? __pfx___might_resched+0x10/0x10 [ 1349.245821][T24580] ? copy_page_range+0x1e9d/0x6570 [ 1349.245843][T24580] copy_page_range+0x3e51/0x6570 [ 1349.245883][T24580] ? __pfx_copy_page_range+0x10/0x10 [ 1349.245908][T24580] ? __pfx___might_resched+0x10/0x10 [ 1349.245935][T24580] ? up_write+0x290/0x4f0 [ 1349.245956][T24580] dup_mmap+0xc00/0x1db0 [ 1349.245980][T24580] ? __pfx_dup_mmap+0x10/0x10 [ 1349.245994][T24580] ? rcu_is_watching+0x12/0xc0 [ 1349.246027][T24580] copy_process+0x73d7/0x7a10 [ 1349.246053][T24580] ? __pfx_copy_process+0x10/0x10 [ 1349.246069][T24580] ? find_held_lock+0x2b/0x80 [ 1349.246094][T24580] ? futex_private_hash_put+0x107/0x1c0 [ 1349.246114][T24580] kernel_clone+0xfc/0x9a0 [ 1349.246132][T24580] ? __pfx_kernel_clone+0x10/0x10 [ 1349.246159][T24580] __do_sys_clone+0xd9/0x120 [ 1349.246175][T24580] ? __pfx___do_sys_clone+0x10/0x10 [ 1349.246208][T24580] do_syscall_64+0x106/0xf80 [ 1349.246224][T24580] ? clear_bhb_loop+0x40/0x90 [ 1349.246243][T24580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.246259][T24580] RIP: 0033:0x7f740d59c629 [ 1349.246273][T24580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.246291][T24580] RSP: 002b:00007f740e428fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1349.246306][T24580] RAX: ffffffffffffffda RBX: 00007f740d816090 RCX: 00007f740d59c629 [ 1349.246317][T24580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001000 [ 1349.246326][T24580] RBP: 00007f740d632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1349.246335][T24580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1349.246345][T24580] R13: 00007f740d816128 R14: 00007f740d816090 R15: 00007fffa5e232e8 [ 1349.246366][T24580] [ 1350.490489][T24436] veth0_vlan: entered promiscuous mode [ 1350.521960][T24436] veth1_vlan: entered promiscuous mode [ 1350.600549][T24436] veth0_macvtap: entered promiscuous mode [ 1350.632188][T24436] veth1_macvtap: entered promiscuous mode [ 1350.686704][T24436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1350.819408][T24436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1350.916668][T14116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.970248][T14116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.056568][T14116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.111915][T14116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.483865][T18443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.533328][T18443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.704097][T14116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.740208][T14116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.733427][ T5927] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1354.661229][T24641] Process accounting paused [ 1354.976165][T24668] futex_wake_op: syz.5.4302 tries to shift op by -2048; fix this program [ 1355.099667][T24668] futex_wake_op: syz.5.4302 tries to shift op by -2048; fix this program [ 1355.158461][T24670] 0x000000000001-0x000000020000 : "" [ 1355.275470][T24670] ftl_cs: FTL header corrupt! [ 1356.066918][T24684] __vm_enough_memory: pid: 24684, comm: syz.4.4305, bytes: 4398046511104 not enough memory for the allocation [ 1356.750700][T24684] zswap: compressor not available [ 1357.585726][T24661] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1357.665921][ T5927] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1358.322521][T24723] zswap: compressor not available [ 1358.353252][T24725] zswap: compressor not available [ 1358.753797][T24739] __vm_enough_memory: pid: 24739, comm: syz.1.4318, bytes: 4398046511104 not enough memory for the allocation [ 1358.768129][T24737] [U] ^\ [ 1359.237416][T24750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4319'. [ 1359.318481][T24743] zswap: compressor not available [ 1359.746006][ T5927] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1359.934813][T24765] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1360.107944][T24767] FAULT_INJECTION: forcing a failure. [ 1360.107944][T24767] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.196457][T24767] CPU: 0 UID: 0 PID: 24767 Comm: syz.0.4325 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1360.196485][T24767] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1360.196491][T24767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1360.196500][T24767] Call Trace: [ 1360.196506][T24767] [ 1360.196512][T24767] dump_stack_lvl+0x100/0x190 [ 1360.196538][T24767] should_fail_ex.cold+0x5/0xa [ 1360.196554][T24767] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1360.196569][T24767] should_failslab+0xc2/0x120 [ 1360.196591][T24767] __kmalloc_noprof+0xe0/0x850 [ 1360.196614][T24767] tomoyo_realpath_from_path+0xb6/0x690 [ 1360.196633][T24767] tomoyo_path_number_perm+0x23c/0x580 [ 1360.196653][T24767] ? tomoyo_path_number_perm+0x22e/0x580 [ 1360.196674][T24767] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1360.196718][T24767] ? find_held_lock+0x2b/0x80 [ 1360.196739][T24767] ? __fget_files+0x215/0x3d0 [ 1360.196758][T24767] ? hook_file_ioctl_common+0x146/0x410 [ 1360.196782][T24767] ? __fget_files+0x21f/0x3d0 [ 1360.196804][T24767] security_file_ioctl+0xd3/0x230 [ 1360.196825][T24767] __x64_sys_ioctl+0xb7/0x210 [ 1360.196845][T24767] do_syscall_64+0x106/0xf80 [ 1360.196860][T24767] ? clear_bhb_loop+0x40/0x90 [ 1360.196878][T24767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.196893][T24767] RIP: 0033:0x7f740d59c629 [ 1360.196905][T24767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.196920][T24767] RSP: 002b:00007f740e44a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1360.196935][T24767] RAX: ffffffffffffffda RBX: 00007f740d815fa0 RCX: 00007f740d59c629 [ 1360.196944][T24767] RDX: 0000000000000004 RSI: 00000000000089a1 RDI: 0000000000000003 [ 1360.196953][T24767] RBP: 00007f740e44a090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.196962][T24767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.196970][T24767] R13: 00007f740d816038 R14: 00007f740d815fa0 R15: 00007fffa5e232e8 [ 1360.196989][T24767] [ 1360.196996][T24767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1361.105076][T24778] __vm_enough_memory: pid: 24778, comm: syz.4.4329, bytes: 4398046511104 not enough memory for the allocation [ 1361.618663][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.632415][T24780] zswap: compressor not available [ 1361.642862][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.877607][T24788] FAULT_INJECTION: forcing a failure. [ 1361.877607][T24788] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.985300][T24783] zswap: compressor cover enable write trace failed, mode=0 not available [ 1361.994075][T24788] CPU: 0 UID: 0 PID: 24788 Comm: syz.0.4330 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1361.994100][T24788] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1361.994106][T24788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1361.994115][T24788] Call Trace: [ 1361.994121][T24788] [ 1361.994127][T24788] dump_stack_lvl+0x100/0x190 [ 1361.994152][T24788] should_fail_ex.cold+0x5/0xa [ 1361.994168][T24788] ? tomoyo_encode2+0xfb/0x3c0 [ 1361.994182][T24788] should_failslab+0xc2/0x120 [ 1361.994204][T24788] __kmalloc_noprof+0xe0/0x850 [ 1361.994222][T24788] ? d_absolute_path+0x136/0x1b0 [ 1361.994242][T24788] tomoyo_encode2+0xfb/0x3c0 [ 1361.994259][T24788] tomoyo_encode+0x29/0x50 [ 1361.994272][T24788] tomoyo_realpath_from_path+0x18c/0x690 [ 1361.994290][T24788] tomoyo_path_number_perm+0x23c/0x580 [ 1361.994310][T24788] ? tomoyo_path_number_perm+0x22e/0x580 [ 1361.994330][T24788] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1361.994368][T24788] ? find_held_lock+0x2b/0x80 [ 1361.994389][T24788] ? __fget_files+0x215/0x3d0 [ 1361.994407][T24788] ? hook_file_ioctl_common+0x146/0x410 [ 1361.994432][T24788] ? __fget_files+0x21f/0x3d0 [ 1361.994454][T24788] security_file_ioctl+0xd3/0x230 [ 1361.994475][T24788] __x64_sys_ioctl+0xb7/0x210 [ 1361.994495][T24788] do_syscall_64+0x106/0xf80 [ 1361.994510][T24788] ? clear_bhb_loop+0x40/0x90 [ 1361.994527][T24788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.994550][T24788] RIP: 0033:0x7f740d59c629 [ 1361.994563][T24788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.994577][T24788] RSP: 002b:00007f740e44a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1361.994592][T24788] RAX: ffffffffffffffda RBX: 00007f740d815fa0 RCX: 00007f740d59c629 [ 1361.994601][T24788] RDX: ffffffffffffffff RSI: 0000000000002289 RDI: 0000000000000003 [ 1361.994610][T24788] RBP: 00007f740e44a090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.994619][T24788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.994628][T24788] R13: 00007f740d816038 R14: 00007f740d815fa0 R15: 00007fffa5e232e8 [ 1361.994647][T24788] [ 1361.994662][T24788] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1362.703319][T24783] zswap: compressor (errno 9) not available [ 1362.743098][T24777] zswap: compressor cover mmap failed not available [ 1363.710685][T24804] netlink: 'syz.0.4333': attribute type 1 has an invalid length. [ 1364.025782][T18441] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:13: bg 2: bad block bitmap checksum [ 1364.084937][ T5927] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1364.121611][T18441] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 14 with max blocks 9 with error 74 [ 1364.219057][T18441] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1364.219057][T18441] [ 1364.438139][T24794] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1366.699295][T24839] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1367.066161][ T5927] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1368.002134][T24849] kexec: Could not allocate control_code_buffer [ 1368.358435][T24878] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1368.439973][T24878] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1368.728783][T24867] hub 1-0:1.0: USB hub found [ 1368.789910][T24867] hub 1-0:1.0: 1 port detected [ 1369.336104][T24867] FAULT_INJECTION: forcing a failure. [ 1369.336104][T24867] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1369.442512][T24867] CPU: 0 UID: 0 PID: 24867 Comm: syz.0.4350 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1369.442538][T24867] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1369.442544][T24867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1369.442553][T24867] Call Trace: [ 1369.442559][T24867] [ 1369.442565][T24867] dump_stack_lvl+0x100/0x190 [ 1369.442590][T24867] should_fail_ex.cold+0x5/0xa [ 1369.442604][T24867] ? rcu_is_watching+0x12/0xc0 [ 1369.442626][T24867] get_futex_key+0x1d2/0x1620 [ 1369.442645][T24867] ? __pfx_get_futex_key+0x10/0x10 [ 1369.442659][T24867] ? lock_acquire+0x1cf/0x380 [ 1369.442682][T24867] futex_wake+0xea/0x530 [ 1369.442703][T24867] ? __pfx_futex_wake+0x10/0x10 [ 1369.442725][T24867] ? exit_mm_release+0x19/0x30 [ 1369.442747][T24867] do_futex+0x32b/0x350 [ 1369.442764][T24867] ? __pfx_do_futex+0x10/0x10 [ 1369.442786][T24867] ? __might_fault+0xc5/0x140 [ 1369.442809][T24867] mm_release+0x24a/0x2f0 [ 1369.442823][T24867] do_exit+0x675/0x2aa0 [ 1369.442844][T24867] ? __pfx_do_exit+0x10/0x10 [ 1369.442861][T24867] ? do_raw_spin_lock+0x128/0x260 [ 1369.442880][T24867] ? find_held_lock+0x2b/0x80 [ 1369.442900][T24867] ? get_signal+0x7e0/0x21e0 [ 1369.442916][T24867] do_group_exit+0xd5/0x2a0 [ 1369.442935][T24867] get_signal+0x1ec7/0x21e0 [ 1369.442952][T24867] ? find_held_lock+0x2b/0x80 [ 1369.442975][T24867] ? __pfx_get_signal+0x10/0x10 [ 1369.442989][T24867] ? do_futex+0x192/0x350 [ 1369.443008][T24867] arch_do_signal_or_restart+0x91/0x770 [ 1369.443026][T24867] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1369.443048][T24867] ? __pfx___x64_sys_futex+0x10/0x10 [ 1369.443069][T24867] exit_to_user_mode_loop+0x86/0x4a0 [ 1369.443088][T24867] do_syscall_64+0x668/0xf80 [ 1369.443104][T24867] ? clear_bhb_loop+0x40/0x90 [ 1369.443121][T24867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.443135][T24867] RIP: 0033:0x7f740d59c629 [ 1369.443148][T24867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1369.443163][T24867] RSP: 002b:00007f740e44a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1369.443178][T24867] RAX: fffffffffffffe00 RBX: 00007f740d815fa8 RCX: 00007f740d59c629 [ 1369.443187][T24867] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f740d815fa8 [ 1369.443196][T24867] RBP: 00007f740d815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1369.443205][T24867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1369.443214][T24867] R13: 00007f740d816038 R14: 00007fffa5e23200 R15: 00007fffa5e232e8 [ 1369.443232][T24867] [ 1370.699043][T24890] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1370.717840][T24895] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input391 [ 1371.004794][T24905] __vm_enough_memory: pid: 24905, comm: syz.1.4359, bytes: 4398046511104 not enough memory for the allocation [ 1371.459120][T24916] __vm_enough_memory: pid: 24916, comm: syz.4.4360, bytes: 4398046511104 not enough memory for the allocation [ 1371.579217][T24908] zswap: compressor not available [ 1373.553778][T24951] __vm_enough_memory: pid: 24951, comm: syz.4.4371, bytes: 4398046511104 not enough memory for the allocation [ 1373.624430][T24919] kexec: Could not allocate control_code_buffer [ 1374.001460][T24961] Invalid ELF header magic: != ELF [ 1374.165621][T24956] zswap: compressor not available [ 1374.393392][T24967] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1374.723991][T24970] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1375.667179][T25007] ucma_write: process 1374 (syz.0.4392) changed security contexts after opening file descriptor, this is not allowed. [ 1376.101225][T25015] misc userio: Invalid payload size [ 1376.609266][T25022] __vm_enough_memory: pid: 25022, comm: syz.0.4386, bytes: 4398046511104 not enough memory for the allocation [ 1377.165567][T25024] zswap: compressor not available [ 1379.794367][T25062] __vm_enough_memory: pid: 25062, comm: syz.0.4397, bytes: 4398046511104 not enough memory for the allocation [ 1380.396018][T25064] zswap: compressor not available [ 1380.860918][T25082] input: jJǸ-9%vJ86 as /devices/virtual/input/input392 [ 1382.938774][T25112] __vm_enough_memory: pid: 25112, comm: syz.1.4410, bytes: 4398046511104 not enough memory for the allocation [ 1383.018222][T25104] Invalid ELF header magic: != ELF [ 1383.532406][T25119] zswap: compressor not available [ 1385.220088][T25145] Process accounting resumed [ 1385.459061][T25161] __vm_enough_memory: pid: 25161, comm: syz.0.4423, bytes: 4398046511104 not enough memory for the allocation [ 1386.055314][T25165] zswap: compressor not available [ 1386.363269][T25180] FAULT_INJECTION: forcing a failure. [ 1386.363269][T25180] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.376277][T25180] CPU: 0 UID: 0 PID: 25180 Comm: syz.5.4426 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1386.376305][T25180] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1386.376312][T25180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1386.376321][T25180] Call Trace: [ 1386.376329][T25180] [ 1386.376336][T25180] dump_stack_lvl+0x100/0x190 [ 1386.376362][T25180] should_fail_ex.cold+0x5/0xa [ 1386.376377][T25180] ? pcpu_block_update+0x2cf/0x690 [ 1386.376396][T25180] should_failslab+0xc2/0x120 [ 1386.376420][T25180] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1386.376440][T25180] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 1386.376468][T25180] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 1386.376493][T25180] idr_get_free+0x52e/0xa00 [ 1386.376515][T25180] idr_alloc_u32+0x1ac/0x320 [ 1386.376533][T25180] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1386.376551][T25180] ? lock_acquire+0x1cf/0x380 [ 1386.376573][T25180] idr_alloc_cyclic+0x10b/0x230 [ 1386.376590][T25180] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1386.376605][T25180] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1386.376630][T25180] map_create+0x14d8/0x2ba0 [ 1386.376651][T25180] ? futex_unqueue+0x13d/0x2c0 [ 1386.376669][T25180] ? __futex_wait+0x256/0x300 [ 1386.376693][T25180] ? __pfx_map_create+0x10/0x10 [ 1386.376714][T25180] ? __might_fault+0xc5/0x140 [ 1386.376732][T25180] ? __might_fault+0xc5/0x140 [ 1386.376758][T25180] __sys_bpf+0x2091/0x4b90 [ 1386.376776][T25180] ? __pfx___sys_bpf+0x10/0x10 [ 1386.376791][T25180] ? __pfx_futex_wait+0x10/0x10 [ 1386.376816][T25180] ? ksys_write+0x190/0x250 [ 1386.376841][T25180] ? do_futex+0x192/0x350 [ 1386.376870][T25180] ? xfd_validate_state+0x129/0x190 [ 1386.376894][T25180] __x64_sys_bpf+0x7b/0xc0 [ 1386.376910][T25180] ? lockdep_hardirqs_on+0x78/0x100 [ 1386.376927][T25180] do_syscall_64+0x106/0xf80 [ 1386.376942][T25180] ? clear_bhb_loop+0x40/0x90 [ 1386.376961][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.376976][T25180] RIP: 0033:0x7f0b43f9c629 [ 1386.376992][T25180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.377008][T25180] RSP: 002b:00007f0b44eb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1386.377023][T25180] RAX: ffffffffffffffda RBX: 00007f0b44215fa0 RCX: 00007f0b43f9c629 [ 1386.377034][T25180] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 1386.377044][T25180] RBP: 00007f0b44032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1386.377054][T25180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.377069][T25180] R13: 00007f0b44216038 R14: 00007f0b44215fa0 R15: 00007fffd91727a8 [ 1386.377090][T25180] [ 1386.963968][T25180] FAULT_INJECTION: forcing a failure. [ 1386.963968][T25180] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.982877][T25182] sd 0:0:1:0: PR command failed: 1026 [ 1386.988291][T25182] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1387.062844][T25180] CPU: 0 UID: 0 PID: 25180 Comm: syz.5.4426 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1387.062873][T25180] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1387.062880][T25180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1387.062889][T25180] Call Trace: [ 1387.062895][T25180] [ 1387.062901][T25180] dump_stack_lvl+0x100/0x190 [ 1387.062929][T25180] should_fail_ex.cold+0x5/0xa [ 1387.062947][T25180] should_failslab+0xc2/0x120 [ 1387.062970][T25180] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1387.062999][T25180] ? __d_alloc+0x34/0xa80 [ 1387.063019][T25180] __d_alloc+0x34/0xa80 [ 1387.063036][T25180] d_alloc_pseudo+0x1c/0xc0 [ 1387.063056][T25180] alloc_file_pseudo+0xcf/0x230 [ 1387.063075][T25180] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1387.063098][T25180] __shmem_file_setup+0x1a3/0x330 [ 1387.063117][T25180] shmem_zero_setup+0x93/0x1b0 [ 1387.063140][T25180] __mmap_region+0x20b5/0x2760 [ 1387.063160][T25180] ? set_next_entity+0x11b/0x9c0 [ 1387.063180][T25180] ? __pfx___mmap_region+0x10/0x10 [ 1387.063212][T25180] ? finish_task_switch.isra.0+0x200/0xb80 [ 1387.063227][T25180] ? finish_task_switch.isra.0+0x200/0xb80 [ 1387.063243][T25180] ? rcu_is_watching+0x12/0xc0 [ 1387.063271][T25180] ? __schedule+0x1000/0x60e0 [ 1387.063312][T25180] ? rcu_is_watching+0x12/0xc0 [ 1387.063332][T25180] ? cap_capable+0x107/0x460 [ 1387.063353][T25180] mmap_region+0x180/0x3e0 [ 1387.063377][T25180] do_mmap+0xc63/0x12f0 [ 1387.063396][T25180] ? __pfx_do_mmap+0x10/0x10 [ 1387.063411][T25180] ? __pfx_down_write_killable+0x10/0x10 [ 1387.063435][T25180] vm_mmap_pgoff+0x29e/0x470 [ 1387.063453][T25180] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1387.063472][T25180] ? __x64_sys_futex+0x34f/0x4d0 [ 1387.063490][T25180] ? __x64_sys_futex+0x358/0x4d0 [ 1387.063510][T25180] ksys_mmap_pgoff+0x7d/0x5b0 [ 1387.063536][T25180] __x64_sys_mmap+0x125/0x190 [ 1387.063559][T25180] do_syscall_64+0x106/0xf80 [ 1387.063575][T25180] ? clear_bhb_loop+0x40/0x90 [ 1387.063593][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.063608][T25180] RIP: 0033:0x7f0b43f9c629 [ 1387.063622][T25180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1387.063637][T25180] RSP: 002b:00007f0b44eb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1387.063653][T25180] RAX: ffffffffffffffda RBX: 00007f0b44215fa0 RCX: 00007f0b43f9c629 [ 1387.063663][T25180] RDX: 00000000000000db RSI: 0000000004020009 RDI: 0000000000000000 [ 1387.063672][T25180] RBP: 00007f0b44032b39 R08: 0000000000000401 R09: 0000000000008000 [ 1387.063681][T25180] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1387.063691][T25180] R13: 00007f0b44216038 R14: 00007f0b44215fa0 R15: 00007fffd91727a8 [ 1387.063711][T25180] [ 1387.343751][T25188] sd 0:0:1:0: PR command failed: 1026 [ 1387.349149][T25188] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1387.355894][T25188] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1387.363907][T25182] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1387.886546][T25201] netlink: 'syz.0.4429': attribute type 9 has an invalid length. [ 1387.920162][T25201] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4429'. [ 1388.338934][T25215] FAULT_INJECTION: forcing a failure. [ 1388.338934][T25215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1388.442929][T25215] CPU: 0 UID: 0 PID: 25215 Comm: syz.4.4432 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1388.442965][T25215] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1388.442971][T25215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1388.442982][T25215] Call Trace: [ 1388.442987][T25215] [ 1388.442994][T25215] dump_stack_lvl+0x100/0x190 [ 1388.443020][T25215] should_fail_ex.cold+0x5/0xa [ 1388.443035][T25215] ? prepare_alloc_pages+0x16d/0x5f0 [ 1388.443052][T25215] should_fail_alloc_page+0xeb/0x140 [ 1388.443077][T25215] prepare_alloc_pages+0x1f0/0x5f0 [ 1388.443095][T25215] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1388.443118][T25215] ? __pfx_css_rstat_updated+0x10/0x10 [ 1388.443141][T25215] ? find_held_lock+0x2b/0x80 [ 1388.443162][T25215] ? rcu_read_unlock+0x17/0x60 [ 1388.443177][T25215] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1388.443196][T25215] ? page_counter_charge+0x1d2/0x240 [ 1388.443214][T25215] ? rcu_is_watching+0x12/0xc0 [ 1388.443235][T25215] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1388.443265][T25215] ? stack_trace_save+0x8e/0xc0 [ 1388.443288][T25215] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1388.443311][T25215] ? policy_nodemask+0xed/0x4f0 [ 1388.443335][T25215] alloc_pages_mpol+0x1fb/0x550 [ 1388.443359][T25215] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1388.443379][T25215] ? __x64_sys_modify_ldt+0xb1/0x170 [ 1388.443394][T25215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.443414][T25215] alloc_pages_noprof+0x131/0x390 [ 1388.443438][T25215] __pud_alloc+0x3b/0x760 [ 1388.443455][T25215] walk_to_pmd+0x357/0x4c0 [ 1388.443472][T25215] get_locked_pte+0x25/0xc0 [ 1388.443489][T25215] map_ldt_struct+0x3c1/0xa70 [ 1388.443516][T25215] ? __pfx_map_ldt_struct+0x10/0x10 [ 1388.443539][T25215] ? alloc_pages_noprof+0x233/0x390 [ 1388.443565][T25215] write_ldt+0x6d3/0xd40 [ 1388.443590][T25215] ? __pfx_write_ldt+0x10/0x10 [ 1388.443614][T25215] ? xfd_validate_state+0x129/0x190 [ 1388.443639][T25215] __x64_sys_modify_ldt+0xb1/0x170 [ 1388.443655][T25215] do_syscall_64+0x106/0xf80 [ 1388.443671][T25215] ? clear_bhb_loop+0x40/0x90 [ 1388.443689][T25215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.443704][T25215] RIP: 0033:0x7f218799c629 [ 1388.443719][T25215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.443734][T25215] RSP: 002b:00007f21888e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1388.443750][T25215] RAX: ffffffffffffffda RBX: 00007f2187c15fa0 RCX: 00007f218799c629 [ 1388.443760][T25215] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 1388.443770][T25215] RBP: 00007f2187a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1388.443779][T25215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1388.443788][T25215] R13: 00007f2187c16038 R14: 00007f2187c15fa0 R15: 00007ffede6f1208 [ 1388.443809][T25215] [ 1388.821615][T25220] Invalid ELF header magic: != ELF [ 1389.022689][ T29] audit: type=1800 audit(4294994108.033:58): pid=25224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4432" name="trace_marker" dev="tracefs" ino=3524 res=0 errno=0 [ 1389.177045][T25231] __vm_enough_memory: pid: 25231, comm: syz.0.4436, bytes: 4398046511104 not enough memory for the allocation [ 1389.669176][T25249] input: jJǸ-9%vJ86 as /devices/virtual/input/input393 [ 1390.003143][T25239] zswap: compressor not available [ 1390.307506][T25269] input: jJǸ-9%vJ86 as /devices/virtual/input/input394 [ 1390.353040][T25270] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1390.760121][T25279] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1390.885183][T25279] FAULT_INJECTION: forcing a failure. [ 1390.885183][T25279] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1390.979098][T25279] CPU: 0 UID: 0 PID: 25279 Comm: syz.4.4448 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1390.979128][T25279] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1390.979134][T25279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1390.979143][T25279] Call Trace: [ 1390.979148][T25279] [ 1390.979155][T25279] dump_stack_lvl+0x100/0x190 [ 1390.979181][T25279] should_fail_ex.cold+0x5/0xa [ 1390.979200][T25279] get_futex_key+0x1d2/0x1620 [ 1390.979220][T25279] ? __pfx_get_futex_key+0x10/0x10 [ 1390.979237][T25279] ? __might_fault+0xc5/0x140 [ 1390.979256][T25279] ? __might_fault+0xc5/0x140 [ 1390.979279][T25279] futex_wake+0xea/0x530 [ 1390.979299][T25279] ? _copy_to_user+0xaf/0xd0 [ 1390.979321][T25279] ? __pfx_futex_wake+0x10/0x10 [ 1390.979341][T25279] ? lockdep_hardirqs_on+0x78/0x100 [ 1390.979360][T25279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1390.979388][T25279] do_futex+0x32b/0x350 [ 1390.979406][T25279] ? __pfx_do_futex+0x10/0x10 [ 1390.979425][T25279] ? read_tsc+0x9/0x20 [ 1390.979440][T25279] ? ktime_get_ts64+0x256/0x3f0 [ 1390.979457][T25279] __x64_sys_futex+0x34f/0x4d0 [ 1390.979477][T25279] ? __pfx___x64_sys_futex+0x10/0x10 [ 1390.979502][T25279] do_syscall_64+0x106/0xf80 [ 1390.979518][T25279] ? clear_bhb_loop+0x40/0x90 [ 1390.979536][T25279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.979551][T25279] RIP: 0033:0x7f218799c629 [ 1390.979564][T25279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.979578][T25279] RSP: 002b:00007f21888e20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1390.979593][T25279] RAX: ffffffffffffffda RBX: 00007f2187c15fa8 RCX: 00007f218799c629 [ 1390.979603][T25279] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2187c15fac [ 1390.979612][T25279] RBP: 00007f2187c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1390.979621][T25279] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1390.979629][T25279] R13: 00007f2187c16038 R14: 00007ffede6f1120 R15: 00007ffede6f1208 [ 1390.979649][T25279] [ 1390.979786][T25279] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1391.225059][T25287] FAULT_INJECTION: forcing a failure. [ 1391.225059][T25287] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.240339][T25286] ubi0: attaching mtd0 [ 1391.269545][T25286] ubi0: scanning is finished [ 1391.312994][T25286] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1391.321559][T25287] CPU: 0 UID: 0 PID: 25287 Comm: syz.1.4450 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1391.321591][T25287] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1391.321597][T25287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1391.321606][T25287] Call Trace: [ 1391.321611][T25287] [ 1391.321617][T25287] dump_stack_lvl+0x100/0x190 [ 1391.321640][T25287] should_fail_ex.cold+0x5/0xa [ 1391.321657][T25287] should_failslab+0xc2/0x120 [ 1391.321679][T25287] __kvmalloc_node_noprof+0xfa/0xa00 [ 1391.321698][T25287] ? seq_read_iter+0x819/0x1270 [ 1391.321722][T25287] seq_read_iter+0x819/0x1270 [ 1391.321749][T25287] kernfs_fop_read_iter+0x46c/0x610 [ 1391.321764][T25287] ? rw_verify_area+0xce/0x6d0 [ 1391.321781][T25287] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1391.321797][T25287] vfs_read+0x825/0xb30 [ 1391.321818][T25287] ? __pfx_vfs_read+0x10/0x10 [ 1391.321849][T25287] ksys_read+0x12a/0x250 [ 1391.321868][T25287] ? __pfx_ksys_read+0x10/0x10 [ 1391.321892][T25287] do_syscall_64+0x106/0xf80 [ 1391.321908][T25287] ? clear_bhb_loop+0x40/0x90 [ 1391.321925][T25287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.321939][T25287] RIP: 0033:0x7f008759c629 [ 1391.321952][T25287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.321965][T25287] RSP: 002b:00007f00884a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1391.321980][T25287] RAX: ffffffffffffffda RBX: 00007f0087815fa0 RCX: 00007f008759c629 [ 1391.321989][T25287] RDX: 00000000000000be RSI: 0000200000000140 RDI: 0000000000000003 [ 1391.321998][T25287] RBP: 00007f00884a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.322007][T25287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.322015][T25287] R13: 00007f0087816038 R14: 00007f0087815fa0 R15: 00007ffcea3fcd88 [ 1391.322034][T25287] [ 1391.837397][T25293] __vm_enough_memory: pid: 25293, comm: syz.5.4453, bytes: 4398046511104 not enough memory for the allocation [ 1392.358296][T25296] zswap: compressor not available [ 1392.374922][T25286] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1393.429597][T25332] netlink: 'syz.4.4463': attribute type 1 has an invalid length. [ 1393.728045][T25343] FAULT_INJECTION: forcing a failure. [ 1393.728045][T25343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.839062][T25343] CPU: 0 UID: 0 PID: 25343 Comm: syz.4.4464 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1393.839090][T25343] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1393.839096][T25343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1393.839105][T25343] Call Trace: [ 1393.839110][T25343] [ 1393.839117][T25343] dump_stack_lvl+0x100/0x190 [ 1393.839142][T25343] should_fail_ex.cold+0x5/0xa [ 1393.839160][T25343] _copy_to_user+0x32/0xd0 [ 1393.839182][T25343] simple_read_from_buffer+0xcb/0x170 [ 1393.839203][T25343] proc_fail_nth_read+0x1af/0x230 [ 1393.839220][T25343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1393.839236][T25343] ? rw_verify_area+0xce/0x6d0 [ 1393.839254][T25343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1393.839269][T25343] vfs_read+0x1e4/0xb30 [ 1393.839291][T25343] ? __pfx_vfs_read+0x10/0x10 [ 1393.839310][T25343] ? __fget_files+0x215/0x3d0 [ 1393.839334][T25343] ? __fget_files+0x21f/0x3d0 [ 1393.839358][T25343] ksys_read+0x12a/0x250 [ 1393.839406][T25343] ? __pfx_ksys_read+0x10/0x10 [ 1393.839431][T25343] do_syscall_64+0x106/0xf80 [ 1393.839447][T25343] ? clear_bhb_loop+0x40/0x90 [ 1393.839464][T25343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.839479][T25343] RIP: 0033:0x7f218795cece [ 1393.839492][T25343] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1393.839507][T25343] RSP: 002b:00007f21888e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1393.839521][T25343] RAX: ffffffffffffffda RBX: 00007f21888e26c0 RCX: 00007f218795cece [ 1393.839530][T25343] RDX: 000000000000000f RSI: 00007f21888e20a0 RDI: 0000000000000004 [ 1393.839538][T25343] RBP: 00007f21888e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.839547][T25343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.839555][T25343] R13: 00007f2187c16038 R14: 00007f2187c15fa0 R15: 00007ffede6f1208 [ 1393.839574][T25343] [ 1394.385121][T25349] __vm_enough_memory: pid: 25349, comm: syz.5.4466, bytes: 4398046511104 not enough memory for the allocation [ 1396.316187][T25396] netlink: 146 bytes leftover after parsing attributes in process `syz.0.4473'. [ 1396.967820][T25404] __vm_enough_memory: pid: 25404, comm: syz.1.4476, bytes: 4398046511104 not enough memory for the allocation [ 1397.926292][T25425] openvswitch: netlink: Flow actions attr not present in new flow. [ 1398.200945][T25428] vmstat_refresh: nr_hugetlb -19456 [ 1398.269860][T25432] Invalid ELF header magic: != ELF [ 1400.304498][T25465] __vm_enough_memory: pid: 25465, comm: syz.5.4492, bytes: 4398046511104 not enough memory for the allocation [ 1401.030801][T25482] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(3) [ 1401.194357][T25477] zswap: compressor not available [ 1402.809891][T25502] FAULT_INJECTION: forcing a failure. [ 1402.809891][T25502] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.822586][T25502] CPU: 0 UID: 0 PID: 25502 Comm: syz.5.4500 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1402.822615][T25502] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1402.822621][T25502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1402.822630][T25502] Call Trace: [ 1402.822637][T25502] [ 1402.822643][T25502] dump_stack_lvl+0x100/0x190 [ 1402.822671][T25502] should_fail_ex.cold+0x5/0xa [ 1402.822688][T25502] should_failslab+0xc2/0x120 [ 1402.822715][T25502] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1402.822736][T25502] ? __alloc_skb+0x140/0x710 [ 1402.822750][T25502] ? queue_work_on+0x11b/0x1e0 [ 1402.822773][T25502] __alloc_skb+0x140/0x710 [ 1402.822787][T25502] ? __pfx___alloc_skb+0x10/0x10 [ 1402.822803][T25502] ? do_raw_write_lock+0x11e/0x260 [ 1402.822826][T25502] tipc_buf_acquire+0x26/0xe0 [ 1402.822849][T25502] named_prepare_buf+0x29/0x170 [ 1402.822865][T25502] tipc_named_withdraw+0x206/0x680 [ 1402.822883][T25502] tipc_nametbl_withdraw+0x131/0x3a0 [ 1402.822904][T25502] tipc_sk_withdraw+0x547/0x7c0 [ 1402.822925][T25502] ? __pfx_tipc_sk_withdraw+0x10/0x10 [ 1402.822947][T25502] tipc_sk_leave+0x13d/0x1c0 [ 1402.822964][T25502] ? __pfx_tipc_sk_leave+0x10/0x10 [ 1402.822980][T25502] ? __pfx_woken_wake_function+0x10/0x10 [ 1402.823004][T25502] ? tipc_sk_filtering+0x47d/0x590 [ 1402.823027][T25502] tipc_release+0x11f/0x16b0 [ 1402.823047][T25502] ? down_write+0x146/0x1f0 [ 1402.823066][T25502] ? __pfx_down_write+0x10/0x10 [ 1402.823085][T25502] ? __pfx_locks_remove_file+0x10/0x10 [ 1402.823102][T25502] __sock_release+0xb3/0x260 [ 1402.823119][T25502] ? __pfx_sock_close+0x10/0x10 [ 1402.823136][T25502] sock_close+0x1c/0x30 [ 1402.823151][T25502] __fput+0x3ff/0xb40 [ 1402.823170][T25502] task_work_run+0x150/0x240 [ 1402.823191][T25502] ? __pfx_task_work_run+0x10/0x10 [ 1402.823216][T25502] exit_to_user_mode_loop+0x100/0x4a0 [ 1402.823237][T25502] do_syscall_64+0x668/0xf80 [ 1402.823252][T25502] ? clear_bhb_loop+0x40/0x90 [ 1402.823270][T25502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.823286][T25502] RIP: 0033:0x7f0b43f9c629 [ 1402.823301][T25502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1402.823315][T25502] RSP: 002b:00007f0b44eb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1402.823331][T25502] RAX: 0000000000000000 RBX: 00007f0b44215fa0 RCX: 00007f0b43f9c629 [ 1402.823341][T25502] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1402.823351][T25502] RBP: 00007f0b44032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1402.823360][T25502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1402.823369][T25502] R13: 00007f0b44216038 R14: 00007f0b44215fa0 R15: 00007fffd91727a8 [ 1402.823390][T25502] [ 1403.094149][T25502] tipc: Withdrawal distribution failure [ 1403.521060][T25507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4508'. [ 1403.645493][ T5927] Bluetooth: hci5: unexpected event 0x14 length: 16 > 6 [ 1403.895095][ T5927] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 1403.909966][ T5927] Bluetooth: hci6: Invalid handle: 0x3a4a > 0x0eff [ 1403.945125][T25507] veth1_vlan: entered allmulticast mode [ 1404.379782][T25520] __vm_enough_memory: pid: 25520, comm: syz.1.4504, bytes: 4398046511104 not enough memory for the allocation [ 1406.753655][T25564] __vm_enough_memory: pid: 25564, comm: syz.5.4517, bytes: 4398046511104 not enough memory for the allocation [ 1406.885586][T25566] FAULT_INJECTION: forcing a failure. [ 1406.885586][T25566] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.011574][T25566] CPU: 0 UID: 0 PID: 25566 Comm: syz.1.4518 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1407.011603][T25566] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1407.011610][T25566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1407.011620][T25566] Call Trace: [ 1407.011626][T25566] [ 1407.011634][T25566] dump_stack_lvl+0x100/0x190 [ 1407.011661][T25566] should_fail_ex.cold+0x5/0xa [ 1407.011679][T25566] should_failslab+0xc2/0x120 [ 1407.011702][T25566] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1407.011723][T25566] ? anon_vma_clone+0x2bd/0xc70 [ 1407.011743][T25566] anon_vma_clone+0x2bd/0xc70 [ 1407.011765][T25566] anon_vma_fork+0x1bb/0x6b0 [ 1407.011786][T25566] dup_mmap+0x1054/0x1db0 [ 1407.011809][T25566] ? __pfx_dup_mmap+0x10/0x10 [ 1407.011823][T25566] ? rcu_is_watching+0x12/0xc0 [ 1407.011856][T25566] copy_process+0x73d7/0x7a10 [ 1407.011883][T25566] ? __pfx_copy_process+0x10/0x10 [ 1407.011909][T25566] kernel_clone+0xfc/0x9a0 [ 1407.011923][T25566] ? __pfx_futex_wait+0x10/0x10 [ 1407.011945][T25566] ? __pfx_kernel_clone+0x10/0x10 [ 1407.011973][T25566] __do_sys_clone+0xd9/0x120 [ 1407.011989][T25566] ? __pfx___do_sys_clone+0x10/0x10 [ 1407.012022][T25566] do_syscall_64+0x106/0xf80 [ 1407.012043][T25566] ? clear_bhb_loop+0x40/0x90 [ 1407.012067][T25566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.012083][T25566] RIP: 0033:0x7f008759c629 [ 1407.012097][T25566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1407.012113][T25566] RSP: 002b:00007f00884a3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1407.012128][T25566] RAX: ffffffffffffffda RBX: 00007f0087815fa0 RCX: 00007f008759c629 [ 1407.012138][T25566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001000 [ 1407.012147][T25566] RBP: 00007f0087632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1407.012156][T25566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1407.012165][T25566] R13: 00007f0087816038 R14: 00007f0087815fa0 R15: 00007ffcea3fcd88 [ 1407.012185][T25566] [ 1408.554486][T25597] __vm_enough_memory: pid: 25597, comm: syz.0.4533, bytes: 4398046511104 not enough memory for the allocation [ 1409.616276][T25619] qrtr: Invalid version 4 [ 1409.970983][ T5927] Bluetooth: hci2: command 0x0406 tx timeout [ 1411.893190][T25654] __vm_enough_memory: pid: 25654, comm: syz.1.4540, bytes: 4398046511104 not enough memory for the allocation [ 1412.480830][T25661] zswap: compressor  not available [ 1413.194662][T25683] FAULT_INJECTION: forcing a failure. [ 1413.194662][T25683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1413.313607][T25683] CPU: 0 UID: 0 PID: 25683 Comm: syz.4.4547 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1413.313638][T25683] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1413.313644][T25683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1413.313654][T25683] Call Trace: [ 1413.313660][T25683] [ 1413.313667][T25683] dump_stack_lvl+0x100/0x190 [ 1413.313694][T25683] should_fail_ex.cold+0x5/0xa [ 1413.313709][T25683] ? prepare_alloc_pages+0x16d/0x5f0 [ 1413.313727][T25683] should_fail_alloc_page+0xeb/0x140 [ 1413.313750][T25683] prepare_alloc_pages+0x1f0/0x5f0 [ 1413.313765][T25683] ? __lock_acquire+0x4a5/0x2630 [ 1413.313785][T25683] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1413.313807][T25683] ? __lock_acquire+0x4a5/0x2630 [ 1413.313833][T25683] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1413.313853][T25683] ? find_held_lock+0x2b/0x80 [ 1413.313875][T25683] ? is_bpf_text_address+0x8a/0x1a0 [ 1413.313896][T25683] ? is_bpf_text_address+0x8a/0x1a0 [ 1413.313916][T25683] ? bpf_ksym_find+0x124/0x1c0 [ 1413.313933][T25683] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1413.313959][T25683] ? kernel_text_address+0x8d/0x100 [ 1413.313978][T25683] ? is_bpf_text_address+0x8a/0x1a0 [ 1413.313998][T25683] ? __kernel_text_address+0xd/0x30 [ 1413.314017][T25683] ? unwind_get_return_address+0x59/0xa0 [ 1413.314033][T25683] ? arch_stack_walk+0xa6/0xf0 [ 1413.314048][T25683] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1413.314072][T25683] ? policy_nodemask+0xed/0x4f0 [ 1413.314096][T25683] alloc_pages_mpol+0x1fb/0x550 [ 1413.314119][T25683] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1413.314148][T25683] alloc_pages_noprof+0x131/0x390 [ 1413.314172][T25683] __pud_alloc+0x3b/0x760 [ 1413.314188][T25683] copy_page_range+0x3f06/0x6570 [ 1413.314211][T25683] ? __lock_acquire+0x4a5/0x2630 [ 1413.314242][T25683] ? mas_wr_store_entry+0x6d2/0x2390 [ 1413.314262][T25683] ? __pfx_copy_page_range+0x10/0x10 [ 1413.314284][T25683] ? mas_store+0x666/0xac0 [ 1413.314304][T25683] ? __pfx_mas_store+0x10/0x10 [ 1413.314326][T25683] ? __pfx___vma_start_write+0x10/0x10 [ 1413.314349][T25683] dup_mmap+0xc00/0x1db0 [ 1413.314373][T25683] ? __pfx_dup_mmap+0x10/0x10 [ 1413.314387][T25683] ? rcu_is_watching+0x12/0xc0 [ 1413.314421][T25683] copy_process+0x73d7/0x7a10 [ 1413.314458][T25683] ? __pfx_copy_process+0x10/0x10 [ 1413.314485][T25683] kernel_clone+0xfc/0x9a0 [ 1413.314500][T25683] ? __pfx_futex_wait+0x10/0x10 [ 1413.314523][T25683] ? __pfx_kernel_clone+0x10/0x10 [ 1413.314551][T25683] __do_sys_clone+0xd9/0x120 [ 1413.314567][T25683] ? __pfx___do_sys_clone+0x10/0x10 [ 1413.314601][T25683] do_syscall_64+0x106/0xf80 [ 1413.314617][T25683] ? clear_bhb_loop+0x40/0x90 [ 1413.314636][T25683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.314651][T25683] RIP: 0033:0x7f218799c629 [ 1413.314665][T25683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1413.314681][T25683] RSP: 002b:00007f21888e1fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1413.314696][T25683] RAX: ffffffffffffffda RBX: 00007f2187c15fa0 RCX: 00007f218799c629 [ 1413.314707][T25683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001000 [ 1413.314716][T25683] RBP: 00007f2187a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1413.314725][T25683] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1413.314734][T25683] R13: 00007f2187c16038 R14: 00007f2187c15fa0 R15: 00007ffede6f1208 [ 1413.314755][T25683] [ 1414.569755][T25697] bond0: invalid ARP target specified [ 1414.694141][T25697] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4551'. [ 1414.918570][T25697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1414.983914][T25697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.080637][T25706] __vm_enough_memory: pid: 25706, comm: syz.0.4554, bytes: 4398046511104 not enough memory for the allocation [ 1415.286308][T25697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.352869][T25697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.871942][T25712] zswap: compressor not available [ 1417.194271][T25708] Process accounting paused [ 1417.844063][T25749] __vm_enough_memory: pid: 25749, comm: syz.1.4566, bytes: 4398046511104 not enough memory for the allocation [ 1417.991082][T25727] kexec: Could not allocate control_code_buffer [ 1418.512301][T25755] zswap: compressor  not available [ 1418.785412][T25766] FAULT_INJECTION: forcing a failure. [ 1418.785412][T25766] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1419.001974][T25766] CPU: 0 UID: 0 PID: 25766 Comm: syz.5.4569 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1419.002003][T25766] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1419.002010][T25766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1419.002019][T25766] Call Trace: [ 1419.002025][T25766] [ 1419.002031][T25766] dump_stack_lvl+0x100/0x190 [ 1419.002058][T25766] should_fail_ex.cold+0x5/0xa [ 1419.002074][T25766] ? prepare_alloc_pages+0x16d/0x5f0 [ 1419.002092][T25766] should_fail_alloc_page+0xeb/0x140 [ 1419.002117][T25766] prepare_alloc_pages+0x1f0/0x5f0 [ 1419.002133][T25766] ? __lock_acquire+0x4a5/0x2630 [ 1419.002153][T25766] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1419.002174][T25766] ? __lock_acquire+0x4a5/0x2630 [ 1419.002201][T25766] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1419.002221][T25766] ? find_held_lock+0x2b/0x80 [ 1419.002242][T25766] ? is_bpf_text_address+0x8a/0x1a0 [ 1419.002263][T25766] ? is_bpf_text_address+0x8a/0x1a0 [ 1419.002284][T25766] ? bpf_ksym_find+0x124/0x1c0 [ 1419.002300][T25766] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1419.002326][T25766] ? kernel_text_address+0x8d/0x100 [ 1419.002346][T25766] ? is_bpf_text_address+0x8a/0x1a0 [ 1419.002365][T25766] ? __kernel_text_address+0xd/0x30 [ 1419.002385][T25766] ? unwind_get_return_address+0x59/0xa0 [ 1419.002401][T25766] ? arch_stack_walk+0xa6/0xf0 [ 1419.002416][T25766] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1419.002440][T25766] ? policy_nodemask+0xed/0x4f0 [ 1419.002464][T25766] alloc_pages_mpol+0x1fb/0x550 [ 1419.002488][T25766] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1419.002516][T25766] alloc_pages_noprof+0x131/0x390 [ 1419.002540][T25766] __pud_alloc+0x3b/0x760 [ 1419.002557][T25766] copy_page_range+0x3f06/0x6570 [ 1419.002580][T25766] ? __lock_acquire+0x4a5/0x2630 [ 1419.002611][T25766] ? mas_wr_store_entry+0x6d2/0x2390 [ 1419.002631][T25766] ? __pfx_copy_page_range+0x10/0x10 [ 1419.002653][T25766] ? mas_store+0x666/0xac0 [ 1419.002673][T25766] ? __pfx_mas_store+0x10/0x10 [ 1419.002700][T25766] ? __pfx___vma_start_write+0x10/0x10 [ 1419.002724][T25766] dup_mmap+0xc00/0x1db0 [ 1419.002747][T25766] ? __pfx_dup_mmap+0x10/0x10 [ 1419.002762][T25766] ? rcu_is_watching+0x12/0xc0 [ 1419.002796][T25766] copy_process+0x73d7/0x7a10 [ 1419.002824][T25766] ? __pfx_copy_process+0x10/0x10 [ 1419.002850][T25766] kernel_clone+0xfc/0x9a0 [ 1419.002871][T25766] ? __pfx_futex_wait+0x10/0x10 [ 1419.002895][T25766] ? __pfx_kernel_clone+0x10/0x10 [ 1419.002924][T25766] __do_sys_clone+0xd9/0x120 [ 1419.002941][T25766] ? __pfx___do_sys_clone+0x10/0x10 [ 1419.002976][T25766] do_syscall_64+0x106/0xf80 [ 1419.002992][T25766] ? clear_bhb_loop+0x40/0x90 [ 1419.003010][T25766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.003025][T25766] RIP: 0033:0x7f0b43f9c629 [ 1419.003040][T25766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.003055][T25766] RSP: 002b:00007f0b44eb3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1419.003069][T25766] RAX: ffffffffffffffda RBX: 00007f0b44215fa0 RCX: 00007f0b43f9c629 [ 1419.003080][T25766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001000 [ 1419.003089][T25766] RBP: 00007f0b44032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1419.003098][T25766] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1419.003107][T25766] R13: 00007f0b44216038 R14: 00007f0b44215fa0 R15: 00007fffd91727a8 [ 1419.003128][T25766] [ 1420.215456][T25784] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input395 [ 1421.279444][T25797] __vm_enough_memory: pid: 25797, comm: syz.1.4586, bytes: 4398046511104 not enough memory for the allocation [ 1422.079148][T25802] zswap: compressor not available [ 1422.366408][T25817] __vm_enough_memory: pid: 25817, comm: syz.1.4583, bytes: 4398046511104 not enough memory for the allocation [ 1422.960202][T25823] zswap: compressor  not available [ 1423.056623][ T30] INFO: task syz.3.4087:23674 blocked for more than 143 seconds. [ 1423.064985][ T30] Tainted: G U L syzkaller #0 [ 1423.071475][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1423.085215][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.091642][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.156099][ T30] task:syz.3.4087 state:D stack:26904 pid:23674 tgid:23670 ppid:20134 task_flags:0x400740 flags:0x00080002 [ 1423.252785][ T30] Call Trace: [ 1423.275934][ T30] [ 1423.293849][ T30] __schedule+0xfee/0x60e0 [ 1423.317515][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1423.348824][ T30] ? __pfx___schedule+0x10/0x10 [ 1423.373973][ T30] ? find_held_lock+0x2b/0x80 [ 1423.405060][ T30] ? schedule+0x2bf/0x390 [ 1423.429261][ T30] schedule+0xdd/0x390 [ 1423.452398][ T30] schedule_timeout+0x1b2/0x280 [ 1423.481096][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1423.525106][ T30] ? __wait_for_common+0x2da/0x4c0 [ 1423.566134][ T30] ? rcu_is_watching+0x12/0xc0 [ 1423.613682][ T30] __wait_for_common+0x2e7/0x4c0 [ 1423.630443][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1423.660448][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1423.693184][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 1423.722372][ T30] ? vfs_coredump+0x7e0/0x5570 [ 1423.762820][ T30] ? rcu_is_watching+0x12/0xc0 [ 1423.775017][ T30] wait_for_completion_state+0x1c/0x40 [ 1423.805820][ T30] vfs_coredump+0x80d/0x5570 [ 1423.853049][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1423.863278][ T30] ? sctp_assoc_bh_rcv+0x392/0x6f0 [ 1423.886292][ T30] ? __pfx_vfs_coredump+0x10/0x10 [ 1423.917571][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1423.942752][ T30] ? lock_acquire+0x1cf/0x380 [ 1423.978002][ T30] ? lock_acquire+0x1cf/0x380 [ 1424.005894][ T30] ? find_held_lock+0x2b/0x80 [ 1424.026903][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 1424.052260][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 1424.093779][ T30] ? bpf_ksym_find+0x124/0x1c0 [ 1424.110853][ T30] ? __kernel_text_address+0xd/0x30 [ 1424.138064][ T30] ? unwind_get_return_address+0x59/0xa0 [ 1424.169107][ T30] ? arch_stack_walk+0xa6/0xf0 [ 1424.226503][ T30] ? __sigqueue_free+0xbe/0x2a0 [ 1424.242046][ T30] ? stack_trace_save+0x8e/0xc0 [ 1424.257161][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1424.283338][ T30] ? stack_depot_save_flags+0x27/0x9d0 [ 1424.311196][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1424.342798][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.373745][ T30] ? proc_coredump_connector+0x2d3/0x4f0 [ 1424.412941][ T30] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1424.436923][ T30] ? rcu_is_watching+0x12/0xc0 [ 1424.466750][ T30] get_signal+0x1f2a/0x21e0 [ 1424.489792][ T30] ? __pfx_get_signal+0x10/0x10 [ 1424.515804][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1424.562986][ T30] ? force_sig_info_to_task+0x4d2/0x660 [ 1424.580692][ T30] arch_do_signal_or_restart+0x91/0x770 [ 1424.610787][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1424.666181][ T30] ? __do_sys_prctl+0x187/0x2330 [ 1424.676674][ T30] exit_to_user_mode_loop+0x86/0x4a0 [ 1424.703325][ T30] do_syscall_64+0x668/0xf80 [ 1424.733058][ T30] ? clear_bhb_loop+0x40/0x90 [ 1424.755665][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.789266][ T30] RIP: 0033:0x7fd18af9c629 [ 1424.813336][ T30] RSP: 002b:00007fd18bd740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1424.864932][ T30] RAX: ffffffffffffffda RBX: 00007fd18b216098 RCX: 00007fd18af9c629 [ 1424.908918][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd18b21609c [ 1424.962995][ T30] RBP: 00007fd18b216090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.991633][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1425.038085][ T30] R13: 00007fd18b216128 R14: 00007ffe5ef6bce0 R15: 00007ffe5ef6bdc8 [ 1425.084222][ T30] [ 1425.105546][ T30] [ 1425.105546][ T30] Showing all locks held in the system: [ 1425.171952][ T30] 1 lock held by khungtaskd/30: [ 1425.228534][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1425.270180][ T30] 2 locks held by getty/5588: [ 1425.295646][ T30] #0: ffff888037de10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1425.350708][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1425.408308][ T30] 1 lock held by syz.2.2038/15147: [ 1425.439111][ T30] 1 lock held by syz.3.4087/23671: [ 1425.466190][ T30] 4 locks held by kworker/u10:24/25369: [ 1425.501693][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1425.557733][ T30] #1: ffffc90004447d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1425.611463][ T30] #2: ffffffff905f8e30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1425.665585][ T30] #3: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1425.721247][ T30] 4 locks held by syz.4.4582/25815: [ 1425.747133][ T30] [ 1425.802767][ T30] ============================================= [ 1425.802767][ T30] [ 1425.827579][ T30] NMI backtrace for cpu 0 [ 1425.827596][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1425.827618][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1425.827627][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1425.827636][ T30] Call Trace: [ 1425.827641][ T30] [ 1425.827647][ T30] dump_stack_lvl+0x100/0x190 [ 1425.827672][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1425.827694][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1425.827714][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1425.827737][ T30] sys_info+0x141/0x190 [ 1425.827754][ T30] watchdog+0xd25/0x1050 [ 1425.827772][ T30] ? __pfx_watchdog+0x10/0x10 [ 1425.827786][ T30] ? __kthread_parkme+0x18c/0x230 [ 1425.827803][ T30] ? kthread+0x13a/0x450 [ 1425.827819][ T30] ? __pfx_watchdog+0x10/0x10 [ 1425.827831][ T30] kthread+0x370/0x450 [ 1425.827847][ T30] ? __pfx_kthread+0x10/0x10 [ 1425.827865][ T30] ret_from_fork+0x754/0xd80 [ 1425.827885][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1425.827905][ T30] ? __switch_to+0x7b4/0x1120 [ 1425.827920][ T30] ? __pfx_kthread+0x10/0x10 [ 1425.827938][ T30] ret_from_fork_asm+0x1a/0x30 [ 1425.827961][ T30] [ 1426.471500][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1426.478367][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1426.489031][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1426.494203][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1426.504241][ T30] Call Trace: [ 1426.507501][ T30] [ 1426.510416][ T30] dump_stack_lvl+0x100/0x190 [ 1426.515082][ T30] vpanic+0x552/0x970 [ 1426.519043][ T30] ? __pfx_vpanic+0x10/0x10 [ 1426.523526][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1426.529670][ T30] panic+0xd1/0xe0 [ 1426.533374][ T30] ? __pfx_panic+0x10/0x10 [ 1426.537772][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1426.543910][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1426.550049][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1426.556185][ T30] ? watchdog.cold+0x198/0x1ca [ 1426.560939][ T30] ? watchdog+0xd35/0x1050 [ 1426.565337][ T30] watchdog.cold+0x1a9/0x1ca [ 1426.569913][ T30] ? __pfx_watchdog+0x10/0x10 [ 1426.574570][ T30] ? __kthread_parkme+0x18c/0x230 [ 1426.579577][ T30] ? kthread+0x13a/0x450 [ 1426.583802][ T30] ? __pfx_watchdog+0x10/0x10 [ 1426.588456][ T30] kthread+0x370/0x450 [ 1426.592508][ T30] ? __pfx_kthread+0x10/0x10 [ 1426.597080][ T30] ret_from_fork+0x754/0xd80 [ 1426.601657][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1426.606753][ T30] ? __switch_to+0x7b4/0x1120 [ 1426.611413][ T30] ? __pfx_kthread+0x10/0x10 [ 1426.615985][ T30] ret_from_fork_asm+0x1a/0x30 [ 1426.620739][ T30] [ 1426.623814][ T30] Kernel Offset: disabled [ 1426.628141][ T30] Rebooting in 86400 seconds..