last executing test programs: 2m28.719261607s ago: executing program 3 (id=146): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) write$auto(0x3, 0x0, 0x5c8) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x8803, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x2, 0xee01, 0x0, 0x3, 0xb, 0x3, 0xcd8e}, &(0x7f00000001c0)=0xfb, &(0x7f00000002c0), 0x8, 0x356, 0x3, 0x800000000000000, 0x2, 0x3, 0x0, 0x1000, @raw=0x389}) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) prctl$auto(0x4430, 0x1, 0x4, 0x400000005, 0x400000000007) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) connect$auto(0x3, 0x0, 0x54) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m26.822148368s ago: executing program 3 (id=151): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/boot_params/data\x00', 0x2c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4109, 0x100d) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x894}, 0x4) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x8000, 0x200fa9d, 0x1, 0x0, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000a00)=0x101) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r5, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000300), r1) r7 = socket(0x2b, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x20000040) recvfrom$auto(r2, 0x0, 0x8000000003, 0xfffff4a5, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYRESOCT=r6], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r8, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_setup$auto(0x7ffe, &(0x7f0000000000)) acct$auto(&(0x7f00000000c0)='/dev/nbd0\x00') shmctl$auto_SHM_INFO(0x20000000, 0xe, &(0x7f0000000500)={{0x0, 0xffffffffffffffff, 0xee01, 0x7fffffff, 0x7f, 0x6, 0x400}, 0x3, 0xffffffffffffff7f, 0x80, 0x5, @raw=0x4, @raw=0x7f, 0x6, 0x0, &(0x7f00000003c0)="00b680139633050fc43d69e1", &(0x7f0000000400)="6a6e0ad0cf631b7c7656736118c702f7e40815c70c2955bbac253e34bcaf23cbb5d7ac54041e0d5ca42672929e6d29a3a22b60b79f3e5043f571c581be310d0f183216546c737d62d5972b7cfdf0d69e0977bfb1b54b4d4b25b9617a6377cd1d3a780ca399cb191b82475262842f61f310dba4b47cfca4606a9cb400e6d4509c97a5394af229b494c1c4e0fa6f3d06fab976ff3349832903b35953a824e21464f7ca41a709d82ae649a3a7dafe48e5129df04a3f37e56c5656bdb5f55d97098288de925cd4a5a942da4abd68c571512ddc37f2edc91d9a323b773f268d882b1ae9d867ba569868798ed4bfb9370ebcd3b90b6688f73ac7b4"}) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000001100)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="6c060000", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf2503000000740101806e01f7803b58d21facf1a13268c7dcf0a0dfd9e7574e84220de3cce3e9f9327c0d7a9b51eb16c51502210bd86455f12fdbad2fbc09f056d4d34b2824679ab63feefc229bf88006077c4ae41ef6282c0d358c55428a5bae22e9c3ecfa0b1a744918af3dec03820b0557bd422982b2e9177036fa4d4886267bd5666cbe13430ffcbc36e03065310c08ac316a410527c7870adc8f32cfda7f252742d30f2af18687bd3f87118d528060189ea3c6fc9c2c29784ab76924c30ebef958f8906f3075fcaa5b69d56a10e7abda77dd55b5d19bbba8d227c582bc4fa6c1c4f379fd22ae649342af446d88af7a05368eebfb2e1b7f22a62cfa7b08002f00f8e6fb63468d602badf876e5c0f50f52c6fb9baf51dfafe52a11a68aa38bf0fa28d8afd4", @ANYRES32=0x0, @ANYBLOB="04000a80f9079b0bf026315b54c917462b4d5f09b0ece9f8571aadff0de6dd2940f582e545365712c01418e58449c9c09b8a8f76ceb656ffc0cde730224fcb45e8e9dd75dc4ac6a19371243f0b786dd952b61747ab41d166ffca054cfa0b85f1fd4da10d7ab36f82e90800f600", @ANYRES32=r9, @ANYBLOB="00000400060008000a0002000000c40401804f0058808bcadaba8526776a10b880e3011dab7b2fdde2e2f01a3b77244918bf99e84ded0e1599b9efa1e32e5479db6839661934439557d6bda78164698235369ca064efd05465aac2c4040400e900000800d300", @ANYRES32=r0, @ANYBLOB="1800e98008003e00060000000800cb00", @ANYRES32=r8, @ANYBLOB="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"], 0x66c}, 0x1, 0x0, 0x0, 0x801}, 0x20000880) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4000, 0x0) 2m25.368380864s ago: executing program 3 (id=155): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x6, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) recvmsg$auto(r2, &(0x7f00000005c0)={0x0, 0x8, &(0x7f00000004c0)={&(0x7f0000000440), 0x1}, 0x2, 0x0, 0x7, 0x11}, 0x0) unshare$auto(0x40000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="281e3200c55f1da787049fd38ae2b7bb9b2970085432d900c2346212458b57a54a3673333b6d3da33fe859cc59698cc7708e48514a3ee6f8014273aa4b0d9b5c3eb8ae1a696e3850239cd573aae9e0b5340c1dde17658b70f056abfb2d781646379d5397234a9748341ad004023d97f7c12f4adcb3ac675990da8255f649f6d5c4e452aa6308b86358", @ANYRES16=r4, @ANYBLOB="0100253d7000fddbdf250100000008000780040001800c0002000600000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8880) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x20000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) memfd_secret$auto(0x0) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) r5 = open(0x0, 0x22240, 0x55) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) statx$auto(r5, 0x0, 0x2001003, 0x4005, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) r7 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec18\x00', 0x200900, 0x0) ioctl$auto_CEC_S_MODE(r7, 0x40046109, &(0x7f0000002c40)=0x10) pread64$auto(r6, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) mmap$auto(0x0, 0x9, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) 2m24.799744543s ago: executing program 3 (id=158): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) clone3$auto(&(0x7f0000000000)={0x9, 0xd3d, 0xf, 0x10200000, 0x3, 0x200, 0x4000000050, 0x5, 0x3, 0xb, 0xd}, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x82000, 0x0) read$auto_bm_entry_operations_binfmt_misc(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r5, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x200005}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="621c000000", @ANYRES16=r6, @ANYBLOB="000126bd7000fcdbdf255300000008004201b9000000"], 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000040) ioctl$auto(r1, 0x64c6, 0x1e2) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x2006, 0x7fa, 0x7fb, &(0x7f0000000280)}) 2m24.378107813s ago: executing program 3 (id=159): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) clone3$auto(&(0x7f0000000000)={0x9, 0xd3d, 0xf, 0x10200000, 0x3, 0x200, 0x4000000050, 0x5, 0x3, 0xb, 0xd}, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x82000, 0x0) read$auto_bm_entry_operations_binfmt_misc(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r5, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x200005}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="621c000000", @ANYRES16=r6, @ANYBLOB="000126bd7000fcdbdf255300000008004201b9000000"], 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000040) ioctl$auto(r1, 0x64c6, 0x1e2) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x2006, 0x7fa, 0x7fb, &(0x7f0000000280)}) 2m23.959919925s ago: executing program 3 (id=161): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/tty/ttyq0/dev\x00', 0x80000, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x5, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x800000001}, 0xfffffffffffffff7, 0x0, 0x7f}, 0x800}, 0xc, 0x7) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) r3 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, r3, 0x801, 0x10008, 0x4f0d, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x7}, 0x6f3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc6, 0x4, 0x7352, 0x2d, 0x200000000045f, 0xa, 0x7, 0x3, 0x2, 0x9, 0x36e, 0x6, 0xfffffffffffffffe, 0x3000, 0x9, 0x8, 0x10003, 0x8, 0x1, 0x0, 0x5, 0x1ffb, 0x9, 0x20000400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x4, [0x400000, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20000, 0x0, 0x3, 0x401, 0x0, 0x0, 0x3fffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x0, 0x3ba0, 0x7, 0xe, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x11) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto(0x3, 0xae41, r1) landlock_add_rule$auto_LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000100)="e525281b8eaa21a5874890efbf24e3530b995c756d07502e73d277cf1ac0ad3dbc125d072ebc1d5549ea4bce84e14c8725da443db2b048d6bc535fa35af6e01e74a4ff91d98294417ee1e1672db8c6b60ad40596297d65dd91501626c7e6450c697430ed", 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x2, 0x7) 2m7.988648781s ago: executing program 32 (id=161): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/tty/ttyq0/dev\x00', 0x80000, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x5, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x800000001}, 0xfffffffffffffff7, 0x0, 0x7f}, 0x800}, 0xc, 0x7) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) r3 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, r3, 0x801, 0x10008, 0x4f0d, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x7}, 0x6f3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc6, 0x4, 0x7352, 0x2d, 0x200000000045f, 0xa, 0x7, 0x3, 0x2, 0x9, 0x36e, 0x6, 0xfffffffffffffffe, 0x3000, 0x9, 0x8, 0x10003, 0x8, 0x1, 0x0, 0x5, 0x1ffb, 0x9, 0x20000400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x4, [0x400000, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20000, 0x0, 0x3, 0x401, 0x0, 0x0, 0x3fffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x0, 0x3ba0, 0x7, 0xe, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x11) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto(0x3, 0xae41, r1) landlock_add_rule$auto_LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000100)="e525281b8eaa21a5874890efbf24e3530b995c756d07502e73d277cf1ac0ad3dbc125d072ebc1d5549ea4bce84e14c8725da443db2b048d6bc535fa35af6e01e74a4ff91d98294417ee1e1672db8c6b60ad40596297d65dd91501626c7e6450c697430ed", 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x2, 0x7) 9.598802951s ago: executing program 4 (id=575): r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) mmap$auto(0x0, 0x7, 0x1000000004, 0x200000009b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) setreuid$auto(0x3, 0x7) ioctl$auto(0x3, 0x8b2b, 0x91) sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x845) mmap$auto(0x0, 0x202000b, 0xfffffffffffffffe, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) userfaultfd$auto(0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) epoll_create$auto(0x4) socket(0x2, 0x1, 0x106) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/58, 0x3a) r3 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2000, 0x0) ioctl$auto_FIONREAD(r3, 0x541b, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x9, 0xd3e, 0x3, 0x949b, 0x2, 0x95f4da0a, 0x7f3, 0x79, 0x8000000000000001, 0x2a61, 0x14, 0x8, 0x1209, 0xe09, 0x4]}, 0x0) write$auto(r2, &(0x7f0000000400)=' \x00\x00\x00\xf7\xff\xff\xff\xff\xff\xff\xff', 0x100000a3d9) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1fa, 0xfffffffffffffffe, 0x8f, 0x3, 0x9487, 0x8, 0x15f4da09, 0x0, 0xfffffffffffffff7, 0x20000000000005e, 0x6, 0x1040000000000007, 0x6d41, 0x3, 0x7, 0x7]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff02c}}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.clone_children\x00', 0xb02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) mbind$auto(0x0, 0xfa9c, 0x8001, &(0x7f0000000100)=0x80000000, 0x400, 0x1) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xd3Q\xc6\xe27\xe8\xee\xdf\xa1\x1f\xe8\x02\"\r\xae\x9c\xa6\"_gg\x03\x8a\xf5\x1aZn\x1d\xad\x109\x8d\xe3fa\xf1Z\xf7\xec\xc9\xd3\x1e^J\xaf\xe8\x8fk@Y\xd3i\xa4\xf2\x94\xa7w\xd8\xab\x9bY\xffh4\xf7\x81\x13\xa90x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x480c1, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xffffffff, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/downdelay\x00', 0x10b142, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x7fffffffffffffff, 0x1, 0x9, 0x5, 0x8, 0x40000000000000, 0x3, 0x6, 0xfffffffffffffffa, 0xab, 0x2, 0x9]}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) 8.036608026s ago: executing program 0 (id=584): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd8/queue/nr_requests\x00', 0x63102, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_SNDLOWAT(r3, 0x1, 0x13, &(0x7f0000003100)='\\?-@\x00', &(0x7f0000003140)=0x8) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/version\x00', 0x101000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40076f3f, 0x38) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2000, 0x0) socket(0x2, 0x1, 0x106) r4 = setfsuid$auto(0xee01) setresuid$auto(0x0, 0x0, r4) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001340)={&(0x7f00000013c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="b2b3cf498b6a491921c685dbe58c280346df8218100e44400bb34294050da9d908951a3d8f6b164a5a0172232e276b4cd71888b05c1ed613c5e203606e9a05314af5c1e3f5d680e58ebb985a8463fd79a4f7d0be207bac10dee3ae1b1b56a3fd8e54ddccb83974b773da09a3127bbbf898a55ad116dc4b7c46386e9a1110773ef815d3b0475d9af6d826143f80714dc43d384c49b809b60509262040eda68230e678833f5e064d13f5ebc7745e4ae3558aafa828fcb603c22a7d1ffb74f56166db58e6fd77ba34db0cad094bd03a00f88412923a", @ANYBLOB="00032bbd7000fedbdf251b0000004e110280c2d2c830bb4160b24a4df2c52ce6809c273482b373622fd8920512351405ab87f6fc8c664aa92640ed0ea45eb3440a9c8fd828102c8008001e00", @ANYBLOB="254898b1fb76b52315db3f66e51c92aba60fd1d5a63620b111149e3a25ef1354102787ce1b5d95575d58e3432d45fffbc4b5c52caf14c51adaf621e5cd79867e80fbdcdd185a69b434345dd308d024e3e1708167039576969b9cc0a3693d7c4ae62eea8439148d0d4fa86cdd477a983ca9a5a2d3701971f1ef0c993bb1163378bb5a7366489d5faa2275f6b45cc550387f1dd3a7a9df4e66902cee2baa0974d20cfa461a7d1573a8422a6221e436f7488134aaa4e7669f967844", @ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRESDEC=r1, @ANYBLOB='\x00\x00'], 0x1164}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = setfsgid$auto(0x0) fchown$auto(0xffffffffffffffff, r4, r5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.783934422s ago: executing program 0 (id=585): madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/boot_params/data\x00', 0x2c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4109, 0x100d) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x894}, 0x4) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x8000, 0x200fa9d, 0x1, 0x0, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000a00)=0x101) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r4, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000300), r1) r6 = socket(0x2b, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x20000040) recvfrom$auto(r2, 0x0, 0x8000000003, 0xfffff4a5, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYRESOCT=r5], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_setup$auto(0x7ffe, &(0x7f0000000000)) acct$auto(&(0x7f00000000c0)='/dev/nbd0\x00') shmctl$auto_SHM_INFO(0x20000000, 0xe, &(0x7f0000000500)={{0x0, 0xffffffffffffffff, 0xee01, 0x7fffffff, 0x7f, 0x6, 0x400}, 0x3, 0xffffffffffffff7f, 0x80, 0x5, @raw=0x4, @raw=0x7f, 0x6, 0x0, &(0x7f00000003c0)="00b680139633050fc43d69e1", &(0x7f0000000400)="6a6e0ad0cf631b7c7656736118c702f7e40815c70c2955bbac253e34bcaf23cbb5d7ac54041e0d5ca42672929e6d29a3a22b60b79f3e5043f571c581be310d0f183216546c737d62d5972b7cfdf0d69e0977bfb1b54b4d4b25b9617a6377cd1d3a780ca399cb191b82475262842f61f310dba4b47cfca4606a9cb400e6d4509c97a5394af229b494c1c4e0fa6f3d06fab976ff3349832903b35953a824e21464f7ca41a709d82ae649a3a7dafe48e5129df04a3f37e56c5656bdb5f55d97098288de925cd4a5a942da4abd68c571512ddc37f2edc91d9a323b773f268d882b1ae9d867ba569868798ed4bfb9370ebcd3b90b6688f73ac7b4"}) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000001100)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="6c060000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000a80f9079b0bf026315b54c917462b4d5f09b0ece9f8571aadff0de6dd2940f582e545365712c01418e58449c9c09b8a8f76ceb656ffc0cde730224fcb45e8e9dd75dc4ac6a19371243f0b786dd952b61747ab41d166ffca054cfa0b85f1fd4da10d7ab36f82e90800f600", @ANYRES32=r8, @ANYBLOB="00000400060008000a0002000000c40401804f0058808bcadaba8526776a10b880e3011dab7b2fdde2e2f01a3b77244918bf99e84ded0e1599b9efa1e32e5479db6839661934439557d6bda78164698235369ca064efd05465aac2c4040400e900000800d300", @ANYRES32=r0, @ANYBLOB="1800e98008003e00060000000800cb00", @ANYRES32=r7, @ANYBLOB="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"], 0x66c}, 0x1, 0x0, 0x0, 0x801}, 0x20000880) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4000, 0x0) 7.287374595s ago: executing program 0 (id=586): unshare$auto(0x40000080) acct$auto(&(0x7f0000000000)='/dev/sequencer2\x00') socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x1000008000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0xab05, 0xffffffffffffffff) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x400080, 0x0) gettid() getsid$auto(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) 6.299872789s ago: executing program 0 (id=587): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) r0 = socket(0x11, 0xa, 0x300) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x3, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, 0xffffffffffffffff, 0x8, 0xff, r2, @relative_fd=r0, 0xe600}, 0xf) (async) ioctl$auto_FS_IOC_SETFLAGS(r2, 0x40086602, 0x3) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_setup$auto(0xffff, &(0x7f0000000580)) (async) io_setup$auto(0xa, &(0x7f0000000040)) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40e02, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x20000000068, 0x34, 0x7fff, 0x5, 0x80000000009, 0x3, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) (async) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 6.016995789s ago: executing program 0 (id=588): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5b", 0x4) socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f00000000c0)=0x5) socket(0x2, 0x1, 0x106) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, 0x0) r1 = waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) prctl$auto(0x3e, 0x1, r1, 0x1, 0x7fffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x1, 0x0, 0x80000000) madvise$auto_MADV_GUARD_INSTALL(0x40000, 0x100000001, 0x66) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000) r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r3, 0x0, 0x400000, 0xc) socket(0xa, 0x1, 0x84) 6.008824012s ago: executing program 2 (id=589): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x8) ftruncate$auto(0x0, 0x8800000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0xc1c0, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/fib_multipath_hash_seed\x00', 0xa042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f00000002c0)="81", 0x1) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) socket(0x2, 0x5, 0x4) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.809426123s ago: executing program 4 (id=590): unshare$auto(0x40000080) socket(0x2c, 0x1, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) socketcall$auto_SYS_RECVMSG(0x11, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x3, 0x2, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13") connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.430677168s ago: executing program 1 (id=591): socket(0x2, 0x5, 0x1000106) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) setuid$auto(0xe) sendto$auto(0x3, 0x0, 0x13, 0xfffffff5, 0x0, 0x22) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) setsockopt$auto_SO_ERROR(r0, 0x7ff, 0x4, 0x0, 0x7f) fcntl$auto_F_SETFL(0xffffffffffffffff, 0x4, 0x100000000) mremap$auto(0x200001000000, 0x4, 0x4, 0x3, 0xfffffffd) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x45, 0x0, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop8\x00', 0x2c381, 0x0) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/snd/pcmC1D0p\x00', 0x80000, 0x0) mmap$auto(0x5, 0x7, 0x7, 0x10, 0x2, 0x96dd) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x400000000000006, 0x28, 0x8) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r2, 0xc0844123, 0x0) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x4, 0x800005812, 0xff6, 0x8000000008011, 0x3, 0x0) 5.212825507s ago: executing program 0 (id=592): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000240), 0x28e882, 0x0) mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x4000003b, 0x80000000000001, 0x4, 0xc8, 0x1ff) madvise$auto(0x8000, 0xffffffffffff0005, 0x19) getpgid(0x0) madvise$auto(0x40, 0x3, 0x842) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) r2 = userfaultfd$auto(0x1) r3 = socketpair$auto(0x1f, 0x1001005, 0x8000000000000000, 0x0) close_range$auto(r3, r3, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2af01, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000040)="3d9647edfc909549c54860b822db5501d8b9ab95ec642223ce483d406f65abad", 0x5) ioctl$auto(r4, 0xc0585611, r4) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x32202, 0x0) rt_sigsuspend$auto(&(0x7f00000001c0)={0x4e7}, 0x8) write$auto(r5, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D3\x00', 0x403, 0x0) close_range$auto(r1, r2, 0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 4.240058683s ago: executing program 2 (id=593): mmap$auto(0x3fffb, 0x2020009, 0x10003, 0xeb1, 0xfffffffffffffffa, 0x100) r0 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) close_range$auto(r0, 0x8, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x142, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyz6\x00', 0x20143, 0x0) r1 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)=0x1) unlinkat$auto(r1, &(0x7f0000000080)='./file0\x00', 0x5) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x5, 0x40, 0x76c5, 0x8, 0x100000000}}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) pread64$auto(r2, 0x0, 0x8, 0x10000000000) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x98) open_by_handle_at$auto(r3, &(0x7f0000000140)={0x8, 0x20002, "0100000000000000"}, 0xc) mmap$auto(0xffffffffffffffff, 0x9, 0xffb, 0x8000000008011, 0x3, 0xffff) semctl$auto(0x1ff, 0x2, 0x13, 0x1) io_uring_enter$auto(0xffffffffffffffff, 0x4, 0xffffffff, 0x3, 0x0, 0x6) getsockopt$auto_SO_NO_CHECK(r3, 0x8000, 0xb, &(0x7f00000001c0)='\x00', &(0x7f0000000180)=0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x10000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x181881, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nullb0/queue/write_cache\x00', 0x10b142, 0x0) sendfile$auto(r4, r4, 0x0, 0x1000200) r5 = socket(0x25, 0x1, 0x0) sendto$auto(r5, 0x0, 0x0, 0x0, 0x0, 0x3) 3.326771934s ago: executing program 2 (id=594): r0 = socket(0x2, 0x1, 0x106) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1e, 0x5}, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x1, @empty}, 0x6a) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x1d, 0x2, 0x2) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) r3 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000100), r1) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffb}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x40) close_range$auto(0x2, 0x8, 0x0) 3.043296942s ago: executing program 2 (id=595): r0 = open(&(0x7f0000000000)='./file1\x00', 0x90480, 0x100) mmap$auto(0x2, 0x6, 0xd7, 0xeb1, r0, 0x100000001) r1 = socketpair$auto(0x100401, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xe1, 0x9b76, r2, 0x8004) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socketpair$auto(0x1, 0xc, 0x80000001, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = open(0x0, 0x361341, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) ioctl$auto_XFS_IOC_ERROR_CLEARALL(r3, 0x40085875, &(0x7f00000000c0)={r3, 0xfffffff7}) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(0x3, 0x7f, 0x0) swapon$auto(0x0, 0x6) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000080)=""/38, 0x26) quotactl_fd$auto(r1, 0x200, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x2, 0x1, 0x0, 0x9, 0xffffe) mmap$auto(0xf9c, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x7, 0x40010001, 0x9b73, 0xffffffffffffffff, 0x10004008000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000580), 0x2, 0x0) removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G') 2.982992038s ago: executing program 1 (id=596): r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) semctl$auto(0x7, 0x2, 0x13, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = pipe$auto(0x0) read$auto_transactions_fops_(r1, &(0x7f0000001140)=""/220, 0xdc) write$auto(0x1, 0x0, 0x80000000) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x108, 0x0, 0x6c, 0x697a}, 0xed71390}, 0x9a6, 0xff00) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x94) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r0) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xff}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xc7}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c081}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.929375431s ago: executing program 4 (id=597): r0 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_WEDGE(r1, 0x4004550f, 0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000780)={&(0x7f00000018c0)={0x5b4, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x58e, 0x1, 0x0, 0x1, [@generic="d1c124636df39eede45f118b5efde95edad59c67006bf1fafc3278c76053a2aef734f4c9f745fb21242798e6cabf9982f55ff3f7f2afe3293e0090705f76", @generic="12824cd8b43c83ea6bb231dac2b086f2a463cade267e628b0c68deb83f55ca3fc7cb0992ad9265abf672df2cd0f8fb16a482b2966156ce7a8dd22d82969b75a2b7e52fa11243c2fae7f72f6a5f62b26ba24abb48811228f952324b23742e9aa98ab51caa12ec4902a172143916f80d6127fea40e4b822033506c1ae1ffdb733787545e58934795dc8a7a39124b70ef691104c3e8526d0de4", @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x6}, @generic="67c793", @nested={0x7e, 0x5b, 0x0, 0x1, [@generic="0c1ab1fb389159f07bd88280fda6d4141cb100439850be686525f01975bde9200fa7b8c4d95eee42f402283a634729d6795480b65a751d8af07247e5158b77c974ad1eb9b37e278de16cacd15f02ed29703280b957d5a76bee74ccf7eac4da7c9ddbc7d7912de32fdc0cfb67d2e6c928870c", @typed={0x8, 0x12b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @nested={0x3ba, 0xad, 0x0, 0x1, [@typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x2b1, 0xc, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @fd=r1}, @generic="32ef3b0333fc28f4634ea859b619a9659eb78dda2862c7595ef3d9e43531", @typed={0x8, 0x1a, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x105, 0x0, 0x0, @u32=0x63}, @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@private1}, @generic="d30f07c4692d76ac03d20e75473722940b932767c501bf0c44336ba5e2cc93df572d35e42ddd1084", @generic="9b223cb4ae1541e32f0ab07bed7246e9572d9b4689d142189a8e34cb1c5cf50429db3cdcc4eb37ecea7ec2173af5030d1335a5c51c615644a71fdba8a3329ad5c4dc57c1b7b0e67d89ccb6d8559584ba05fa11bd07cc2499fdf1bd1cb4607532d90720bd389d5aefbacf9e06cdb60f46f9f673c4136d310a3a2534ef8a79eb85d35774e26802fec25ee5be94475c6cfa5d6dd8b654f8356c87d6365f0fa4b2b531a7e4d402f2857798be989ce99fcad03d94630ff371e9ea716714b7bc6ab52417741e0893a4ac", @nested={0x174, 0x11b, 0x0, 0x1, [@nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x8, 0x74, 0x0, 0x1, [@nested={0x4, 0x41}]}, @typed={0x8, 0xb1, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="222a9d08cb514806083c51c4a881d29fef66c331924061f91ac6ccba4cf257b7140a71ce5750a41d3026d87753bac3d3013a37bcb9a065392397cda05d08fc16f62e959b85", @nested={0x8c, 0xf, 0x0, 0x1, [@typed={0x14, 0x51, 0x0, 0x0, @str='/dev/raw-gadget\x00'}, @nested={0x4, 0x30}, @typed={0x8, 0x44, 0x0, 0x0, @fd=r1}, @typed={0x65, 0x6, 0x0, 0x0, @binary="6c035f08b00d3d21bca18d93f0e4a2039319d1735e3f54de123c82aecef9a2ad528540abdd1dd3faf761e6b6c5ace57c27a9b703a1aedd4eaba283acc05817a496edaf35fb1d596828ab705cf36bf72ee6678ae9a8a43c5fcb48b7be466221348b"}]}, @typed={0x14, 0x12c, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="1aeb6e960214ceb9946d3d10df2a0ec319a2a6490d5f2f8fbaed7c91da63599439de9613706e62feee4f57867e1fda0c30db9b8410c213f26c57abe7f8b82e184741a7972dd446d4824f734adf4501df1089f892b52c1a4c9ca529d9050a57", @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@multicast1}]}]}, @generic="a1a018b8f2cbe43889598d5a1550c27fc192abe3236a7eebd77cffcb0049dbbb24005b3192a66249b7d529b96eed748cdf2bab676b8f1b7033ffcc956cb56421d079fa5ccf8d68c136ee5e9ba678b57a46c3b7b4f88687db89565e71d8d6ec4e9ea7c63359b889f338160fb8692fc233f26a6d4b4aa39bc3fd2820b29f99d9d37638ee0840a02d3283be8a19f90ad8e213badb4ad665da9bc526b267ca4b2f48fef663045f9188dbaed3055e0fea78d5e778608698", @generic="929986c82166aa935f6d737708959d4e6e733c11fe9e2292b0bc9d2947ddfa984d4bf2aad0cbd8465b74aa0a61eb45617c35163635f752a6deb1bda5650662471a450572a1"]}, @generic="4c98ed74d55ffc4109adb430ddf8649bffaf2136439a3bc430a5d1994392ea8cfe166f8ef21a712589811cf3eda76d02fca4a7df7841c43650b713fcbf0f005efcd385701a4ca73653eaca0df768655585d7089fb43226586fa0696008", @typed={0xc, 0xa6, 0x0, 0x0, @u64=0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x80}, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x1, &(0x7f0000000080)={0x86a7, 0x11, 0xfffffffe, 0x6, 0x30000000, 0x9, 0xffffffffffffffff, [0x0, 0x0, 0xffff], {0x206, 0xa8f, 0x20000b, 0x2e1, 0x504, 0x1, 0x6, 0xd, 0x1}, {0x6, 0x3, 0x52, 0x5, 0x10001, 0x440, 0x0, 0x8, 0x1}}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000002, &(0x7f0000000400)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x0) r4 = socket(0xa, 0x3, 0x3a) ioctl$auto(r4, 0x890b, 0x1) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f0000001880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f0000000800)={0x1024, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x8}, @NL80211_ATTR_S1G_CAPABILITY={0x1004, 0x128, "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"}]}, 0x1024}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="250f00000000fbdbdf25030016fd0400"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r7, 0x545c, 0x0) 2.689050918s ago: executing program 2 (id=598): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) mremap$auto(0x0, 0x5, 0x3fd6, 0x7, 0x7fffffffb000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x8a000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{@raw=0x3, 0x7, 0x5, 0x4, "3c70d528a4a70ef32de672c630142e04009963564ec2a722ed226e7254dd431c9712cc3b67a2203455dc9710"}, 0x7, 0x6, 0x4, @raw=0x3, @enumerated={0x2, 0x80000d, "7e84e6c428a94d86f1da07124ae3fe2e694832d7218694764444d9dfa511d5246626da11e26b6b267e1a2cb6e1d41331d12d9e78470cd1d0b56d0cd2145340fc", 0x4040000000000, 0x7dd04bb4}, "71bc01bc5686085ca15f095a841b25d66c148f52a1ad31a489e59be291336905d64a8f7dbd9775e74d1ee3d57ca9b9ac2d9c4c00fb687b7327a575257b3c0deb"}) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) read$auto(r1, &(0x7f0000000440)='nl802\xd6&\x86\x9a\xf7\xbcz\xa2\xe6\xe9D!\x93?\xad2#\'j\xd6\xac\xb1\xc8\xcdD<\xce\xf1}\xff\xc9~\xa6\xff\xef\x95\x8b\xd0\x1d\xdb\xd3\xb0\xe2\t\x00\x00\x00\x95\xb1\a\x15\xcb3\x91\x9ea6\xbc\x9d\x89;\\oI\x01I(\x1b\xd3\x7f\b\xb4\x9f\xa6$Fd\xa5\xbb\x99v\fY\xed\x1f:k\xd7\x01\x00\x00\x005\xaa\xe2Tx\xf1%\xcf\x16\xff\\\x03\x19\xac;1a-b\x9a2Q$s\x802\xb2\xe3J<\xec\xa4\xfb9\x89\x80[\xee\xf6\x9an@\xa7\x18\xcc0\x16#e%p\b\xee\x9ck\x7f\x05Q\xa1{88\xb2\xa3$&&I\x93\x1aE\x13\xd9\xf0k\xffok\x00\xa1\xcc\x05\xc7?\n\xea\x93\xe8\x84H\xeb\'zOJ-m\x8f\xcb\xd0\x9b\xcc\xc7^u\xb5\xcd\xe8mE\x8f\xeae\xf9\xdb\x83\x13\xf3\x8d\xbf\x82\xda},n\xb9@G\x1cK\x82z\x95\xe4\xa2\\\x9b\x83\xd1\x9e\x85\x17Le\xf2G\xa8\xd9r\x9f*\x1e\xe3\x14\xaf\xea\x10V\x98R\xad\xa6\x00\xd3\xadKmkc\xb5\xe2\xd0\x9e\x10zv\xd9,\r\x14u\xcc\x1d\xc6j-GG\xb0\x93\xf8\x87\xf3\n\xb3\xac-\x033%F~\x12\x89\v[J\xc0*\x9d\x11\x89}\xcf\xcc+\xcd\x02\x93G\xb8T\xd9Z3\xac\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x94\xafM\xba{pu\xbb\xc1\xcfb\xc8\x85\xfa1\xeb\xd3\x10m_\xac\xdf\xafN\xb2fZi', 0x800009) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x480c1, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xffffffff, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/downdelay\x00', 0x10b142, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x7fffffffffffffff, 0x1, 0x9, 0x5, 0x8, 0x40000000000000, 0x3, 0x6, 0xfffffffffffffffa, 0xab, 0x2, 0x9]}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2.28212743s ago: executing program 4 (id=599): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = getpid() process_vm_readv$auto(r0, 0x0, 0x800000001, 0x0, 0x6, 0xffff) (async) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x40080, 0x0) lseek$auto(r1, 0x800, 0x1) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xe, 0x100000000007) (async) mmap$auto(0x0, 0x2000a, 0x4, 0xeb1, 0x401, 0x7fff) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7a, 0xffffffffffffffff, 0x8000) r2 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x7) (async) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) (async) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0xfffffffffffffffe, 0x5f94, 0x4000000000df, 0x40eb1, 0x401, 0x1000000000b) (async) socket(0xb, 0x800, 0x84) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r4 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r4, 0x0) 1.890580308s ago: executing program 1 (id=600): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x2000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r3, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000480)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x14c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x38b5}, @NL802154_ATTR_WPAN_PHY_CAPS={0x124, 0x18, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0xc7, 0x0, 0x0, @ipv4=@empty}, @nested={0x110, 0x9a, 0x0, 0x1, [@typed={0xc, 0xe1, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x15c}, @generic="fd31a232157600e8b283cd6b698d640c0b9b1aee5f2382b87a0a082960d6e7", @generic="c1feb79a8b7340519df89ef4becb038295fd2849419c54c3236a1075384c05440b0b8c6f87b33bbffbd2b185e7cc81c33102dee90de7f7b4442303b9e31c26893d46f675df41860013706906d458941d5b3e9de073963ac29cca3c52e02d3c83fd74052288abde9ba80655d3bbe5c246f51c664126581c4e5db15a72b22df4f912c9487d850904dda3120f7eb3748f70beb85c6edc5a3854be9d5b747a8c9ed25c3ce81b0adc3f96d85c4265dbdfcf8cd853284adc86659ed286e08c39ca16dc8a5b43cc7e27ae44802a1f628ae2245c560ba200af03f290e8", @nested={0x4, 0xde}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) read$auto(r0, 0x0, 0x10001) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2d41, 0x0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003080)=ANY=[@ANYBLOB="60180000", @ANYRES16=r8, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x1860}}, 0x4000000) 521.079565ms ago: executing program 2 (id=601): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8041, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0x0, 0x40040], {0x6, 0x5, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x5, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x1, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rt_sigsuspend$auto(0x0, 0x8) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) sendmmsg$auto(r1, 0x0, 0x9a6, 0xe000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0xc82, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) getsockopt$auto_SO_SNDLOWAT(r0, 0xd136, 0x13, &(0x7f00000000c0)='ethtool\x00', &(0x7f0000000140)) 226.400641ms ago: executing program 1 (id=602): sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x28044004) mmap$auto(0x100000000, 0x400008, 0xdf, 0x9b71, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x3, 0x8) timer_create$auto(0x4, &(0x7f00000000c0)={@sival_ptr=&(0x7f0000000000)="369b6a2e5ebc8a9e52d75895fea3b226e84b72a1a158c9df63b26a0ba6c5fcdfd863d4bba063134104e5cc34a429d9ddd4395fa6e8aae33c949b9decfec8dec1123bc5a6245262fa58d1b72ed3d043c6cae25437ff14f32a1d750498069ca3056dc56a21fc33a2f87e10a003a70d85416a022f98b4297c7f01f8f1167f7a60fc4778ce04cf19ad", @inferred=r0}, &(0x7f0000000100)=0x10001) r1 = socketpair$auto(0x800, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x20, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x5a) socket(0x2, 0x80002, 0x73) r2 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x23, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES32], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000140)={0x0, 0xc3}, 0x8, 0x0, 0x3, 0x504}, 0x1}, 0x2, 0x1) r4 = getegid() fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, r4) kexec_load$auto(0x5, 0xfff, &(0x7f0000000040)={@kbuf=&(0x7f0000000100), 0x2aaa, 0x6c0000c000, 0xc000}, 0xb) 0s ago: executing program 1 (id=603): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) clone3$auto(&(0x7f0000000000)={0x9, 0xd3d, 0xf, 0x10200000, 0x3, 0x200, 0x4000000050, 0x5, 0x3, 0xb, 0xd}, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x82000, 0x0) read$auto_bm_entry_operations_binfmt_misc(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r5, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x10}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x200005}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000126bd7000fcdbdf25530000000800"], 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000040) ioctl$auto(r1, 0x64c6, 0x1e2) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x2006, 0x7fa, 0x7fb, &(0x7f0000000280)}) kernel console output (not intermixed with test programs): 130.544703][ T6253] should_fail_ex.cold+0x5/0xa [ 130.544747][ T6253] should_failslab+0xc2/0x120 [ 130.544788][ T6253] __kmalloc_node_noprof+0xe6/0x850 [ 130.544844][ T6253] ? alloc_slab_obj_exts+0xae/0x270 [ 130.544922][ T6253] alloc_slab_obj_exts+0xae/0x270 [ 130.544979][ T6253] __memcg_slab_post_alloc_hook+0x3c2/0xff0 [ 130.545040][ T6253] ? kasan_save_track+0x14/0x30 [ 130.545079][ T6253] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 130.545134][ T6253] ? aio_alloc_inode+0x25/0x70 [ 130.545185][ T6253] ? pcpu_alloc_noprof+0xde1/0x1cc0 [ 130.545221][ T6253] ? __pfx_aio_alloc_inode+0x10/0x10 [ 130.545267][ T6253] aio_alloc_inode+0x25/0x70 [ 130.545309][ T6253] alloc_inode+0x68/0x250 [ 130.545365][ T6253] alloc_anon_inode+0x2a/0x3e0 [ 130.545414][ T6253] ioctx_alloc+0x4dc/0x21a0 [ 130.545477][ T6253] ? find_held_lock+0x2b/0x80 [ 130.545524][ T6253] ? __pfx_ioctx_alloc+0x10/0x10 [ 130.545585][ T6253] __x64_sys_io_setup+0xc9/0x220 [ 130.545639][ T6253] do_syscall_64+0x10b/0xf80 [ 130.545683][ T6253] ? clear_bhb_loop+0x40/0x90 [ 130.545726][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.545762][ T6253] RIP: 0033:0x7f4d7b39cdd9 [ 130.545797][ T6253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.545830][ T6253] RSP: 002b:00007f4d7c2b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 130.545861][ T6253] RAX: ffffffffffffffda RBX: 00007f4d7b615fa0 RCX: 00007f4d7b39cdd9 [ 130.545883][ T6253] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 130.545903][ T6253] RBP: 00007f4d7b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 130.545922][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.545941][ T6253] R13: 00007f4d7b616038 R14: 00007f4d7b615fa0 R15: 00007fff1e6d1908 [ 130.545984][ T6253] [ 131.967298][ T6284] FAULT_INJECTION: forcing a failure. [ 131.967298][ T6284] name failslab, interval 1, probability 0, space 0, times 0 [ 131.988503][ T6284] CPU: 1 UID: 0 PID: 6284 Comm: syz.1.113 Tainted: G U syzkaller #0 PREEMPT(full) [ 131.988552][ T6284] Tainted: [U]=USER [ 131.988563][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.988583][ T6284] Call Trace: [ 131.988593][ T6284] [ 131.988605][ T6284] dump_stack_lvl+0x100/0x190 [ 131.988649][ T6284] should_fail_ex.cold+0x5/0xa [ 131.988691][ T6284] should_failslab+0xc2/0x120 [ 131.988731][ T6284] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 131.988785][ T6284] ? security_inode_alloc+0x3b/0x2c0 [ 131.988842][ T6284] ? lockdep_init_map_type+0x5c/0x250 [ 131.988895][ T6284] security_inode_alloc+0x3b/0x2c0 [ 131.988956][ T6284] inode_init_always_gfp+0xcc0/0x1000 [ 131.989019][ T6284] alloc_inode+0x8e/0x250 [ 131.989072][ T6284] alloc_anon_inode+0x2a/0x3e0 [ 131.989120][ T6284] ioctx_alloc+0x4dc/0x21a0 [ 131.989180][ T6284] ? find_held_lock+0x2b/0x80 [ 131.989225][ T6284] ? __pfx_ioctx_alloc+0x10/0x10 [ 131.989285][ T6284] __x64_sys_io_setup+0xc9/0x220 [ 131.989336][ T6284] do_syscall_64+0x10b/0xf80 [ 131.989378][ T6284] ? clear_bhb_loop+0x40/0x90 [ 131.989421][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.989454][ T6284] RIP: 0033:0x7fe9bd79cdd9 [ 131.989480][ T6284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.989511][ T6284] RSP: 002b:00007fe9bb9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 131.989542][ T6284] RAX: ffffffffffffffda RBX: 00007fe9bda15fa0 RCX: 00007fe9bd79cdd9 [ 131.989568][ T6284] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 131.989588][ T6284] RBP: 00007fe9bd832d69 R08: 0000000000000000 R09: 0000000000000000 [ 131.989607][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.989627][ T6284] R13: 00007fe9bda16038 R14: 00007fe9bda15fa0 R15: 00007fff7cb8c1d8 [ 131.989669][ T6284] [ 132.930930][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.939112][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.979846][ T6361] FAULT_INJECTION: forcing a failure. [ 134.979846][ T6361] name failslab, interval 1, probability 0, space 0, times 0 [ 135.019789][ T6361] CPU: 1 UID: 0 PID: 6361 Comm: syz.1.124 Tainted: G U syzkaller #0 PREEMPT(full) [ 135.019831][ T6361] Tainted: [U]=USER [ 135.019840][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.019874][ T6361] Call Trace: [ 135.019883][ T6361] [ 135.019893][ T6361] dump_stack_lvl+0x100/0x190 [ 135.019927][ T6361] should_fail_ex.cold+0x5/0xa [ 135.019962][ T6361] should_failslab+0xc2/0x120 [ 135.019994][ T6361] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 135.020039][ T6361] ? security_inode_alloc+0x3b/0x2c0 [ 135.020085][ T6361] ? lockdep_init_map_type+0x5c/0x250 [ 135.020117][ T6361] security_inode_alloc+0x3b/0x2c0 [ 135.020164][ T6361] inode_init_always_gfp+0xcc0/0x1000 [ 135.020204][ T6361] alloc_inode+0x8e/0x250 [ 135.020248][ T6361] alloc_anon_inode+0x2a/0x3e0 [ 135.020298][ T6361] ioctx_alloc+0x4dc/0x21a0 [ 135.020345][ T6361] ? find_held_lock+0x2b/0x80 [ 135.020380][ T6361] ? __pfx_ioctx_alloc+0x10/0x10 [ 135.020424][ T6361] __x64_sys_io_setup+0xc9/0x220 [ 135.020464][ T6361] do_syscall_64+0x10b/0xf80 [ 135.020498][ T6361] ? clear_bhb_loop+0x40/0x90 [ 135.020529][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.020555][ T6361] RIP: 0033:0x7fe9bd79cdd9 [ 135.020575][ T6361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.020605][ T6361] RSP: 002b:00007fe9bb591028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 135.020630][ T6361] RAX: ffffffffffffffda RBX: 00007fe9bda16270 RCX: 00007fe9bd79cdd9 [ 135.020647][ T6361] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 135.020662][ T6361] RBP: 00007fe9bd832d69 R08: 0000000000000000 R09: 0000000000000000 [ 135.020677][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.020692][ T6361] R13: 00007fe9bda16308 R14: 00007fe9bda16270 R15: 00007fff7cb8c1d8 [ 135.020724][ T6361] [ 135.021499][ T6351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.165693][ T6370] random: crng reseeded on system resumption [ 136.299606][ T6377] Unrecognized hibernate image header format! [ 136.318072][ T6377] PM: hibernation: Image mismatch: architecture specific data [ 136.934695][ T6396] random: crng reseeded on system resumption [ 136.971547][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 137.695939][ T6408] zram: Removed device: zram0 [ 138.560616][ T6434] FAULT_INJECTION: forcing a failure. [ 138.560616][ T6434] name fail_futex, interval 1, probability 0, space 0, times 1 [ 138.606255][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.0.143 Tainted: G U syzkaller #0 PREEMPT(full) [ 138.606303][ T6434] Tainted: [U]=USER [ 138.606313][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.606330][ T6434] Call Trace: [ 138.606340][ T6434] [ 138.606351][ T6434] dump_stack_lvl+0x100/0x190 [ 138.606389][ T6434] should_fail_ex.cold+0x5/0xa [ 138.606429][ T6434] get_futex_key+0x1d2/0x1510 [ 138.606465][ T6434] ? __pfx_get_futex_key+0x10/0x10 [ 138.606494][ T6434] ? futex_hash+0x2ad/0x370 [ 138.606544][ T6434] ? futex_hash+0x141/0x370 [ 138.606577][ T6434] futex_wake+0xea/0x530 [ 138.606616][ T6434] ? __pfx_futex_wait+0x10/0x10 [ 138.606655][ T6434] ? __pfx_futex_wake+0x10/0x10 [ 138.606697][ T6434] ? __lock_acquire+0x4a5/0x2630 [ 138.606724][ T6434] ? do_sys_openat2+0x1b4/0x1e0 [ 138.606776][ T6434] do_futex+0x32b/0x350 [ 138.606808][ T6434] ? __pfx_do_futex+0x10/0x10 [ 138.606842][ T6434] ? find_held_lock+0x2b/0x80 [ 138.606885][ T6434] __x64_sys_futex+0x34f/0x4d0 [ 138.606920][ T6434] ? __fget_files+0x21f/0x3d0 [ 138.606954][ T6434] ? __pfx___x64_sys_futex+0x10/0x10 [ 138.607012][ T6434] ? rcu_is_watching+0x12/0xc0 [ 138.607054][ T6434] do_syscall_64+0x10b/0xf80 [ 138.607102][ T6434] ? clear_bhb_loop+0x40/0x90 [ 138.607159][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.607192][ T6434] RIP: 0033:0x7f4d7b39cdd9 [ 138.607221][ T6434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.607253][ T6434] RSP: 002b:00007f4d7c26e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.607286][ T6434] RAX: ffffffffffffffda RBX: 00007f4d7b616188 RCX: 00007f4d7b39cdd9 [ 138.607309][ T6434] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4d7b61618c [ 138.607329][ T6434] RBP: 00007f4d7b616180 R08: 0000000000000001 R09: 0000000000000000 [ 138.607349][ T6434] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 138.607369][ T6434] R13: 00007f4d7b616218 R14: 00007fff1e6d1820 R15: 00007fff1e6d1908 [ 138.607411][ T6434] [ 140.074916][ T6461] mmap: syz.3.146 (6461) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.692182][ T6459] FAULT_INJECTION: forcing a failure. [ 140.692182][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 140.715556][ T6459] CPU: 0 UID: 0 PID: 6459 Comm: syz.3.146 Tainted: G U syzkaller #0 PREEMPT(full) [ 140.715609][ T6459] Tainted: [U]=USER [ 140.715621][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.715640][ T6459] Call Trace: [ 140.715651][ T6459] [ 140.715663][ T6459] dump_stack_lvl+0x100/0x190 [ 140.715707][ T6459] should_fail_ex.cold+0x5/0xa [ 140.715752][ T6459] should_failslab+0xc2/0x120 [ 140.715792][ T6459] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 140.715846][ T6459] ? shmem_alloc_inode+0x25/0x50 [ 140.715889][ T6459] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.715942][ T6459] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 140.715987][ T6459] shmem_alloc_inode+0x25/0x50 [ 140.716028][ T6459] alloc_inode+0x68/0x250 [ 140.716082][ T6459] new_inode+0x22/0x1c0 [ 140.716148][ T6459] shmem_get_inode+0x1e3/0xfb0 [ 140.716199][ T6459] ? __pfx_shmem_get_inode+0x10/0x10 [ 140.716265][ T6459] __shmem_file_setup+0x382/0x460 [ 140.716310][ T6459] ? __pfx___shmem_file_setup+0x10/0x10 [ 140.716356][ T6459] ? vm_area_alloc+0x1f/0x160 [ 140.716406][ T6459] shmem_zero_setup+0x96/0x1b0 [ 140.716441][ T6459] __mmap_region+0x24e9/0x2da0 [ 140.716497][ T6459] ? __pfx___mmap_region+0x10/0x10 [ 140.716570][ T6459] ? find_held_lock+0x2b/0x80 [ 140.716607][ T6459] ? debug_object_activate+0x331/0x490 [ 140.716656][ T6459] ? debug_object_activate+0x331/0x490 [ 140.716709][ T6459] ? do_raw_spin_unlock+0x145/0x1e0 [ 140.716746][ T6459] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 140.716826][ T6459] ? rcu_is_watching+0x12/0xc0 [ 140.716864][ T6459] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 140.716955][ T6459] mmap_region+0x35d/0x620 [ 140.716979][ T6459] ? rcu_is_watching+0x12/0xc0 [ 140.717007][ T6459] ? __pfx_mmap_region+0x10/0x10 [ 140.717031][ T6459] ? cap_mmap_addr+0x4b/0x120 [ 140.717065][ T6459] ? bpf_lsm_mmap_addr+0x9/0x30 [ 140.717086][ T6459] ? security_mmap_addr+0x71/0x1e0 [ 140.717130][ T6459] ? __get_unmapped_area+0x255/0x3e0 [ 140.717161][ T6459] do_mmap+0xc63/0x12f0 [ 140.717191][ T6459] ? __pfx_do_mmap+0x10/0x10 [ 140.717217][ T6459] ? __pfx_down_write_killable+0x10/0x10 [ 140.717256][ T6459] vm_mmap_pgoff+0x29e/0x470 [ 140.717287][ T6459] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 140.717339][ T6459] ? do_futex+0x192/0x350 [ 140.717373][ T6459] ? __pfx_do_futex+0x10/0x10 [ 140.717395][ T6459] ? find_held_lock+0x2b/0x80 [ 140.717422][ T6459] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 140.717452][ T6459] ksys_mmap_pgoff+0xe4/0x610 [ 140.717478][ T6459] ? __x64_sys_futex+0x358/0x4d0 [ 140.717502][ T6459] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 140.717527][ T6459] ? xfd_validate_state+0x129/0x190 [ 140.717554][ T6459] __x64_sys_mmap+0x125/0x190 [ 140.717599][ T6459] do_syscall_64+0x10b/0xf80 [ 140.717628][ T6459] ? clear_bhb_loop+0x40/0x90 [ 140.717656][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.717679][ T6459] RIP: 0033:0x7f1e3479cdd9 [ 140.717707][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.717727][ T6459] RSP: 002b:00007f1e329d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 140.717747][ T6459] RAX: ffffffffffffffda RBX: 00007f1e34a16180 RCX: 00007f1e3479cdd9 [ 140.717761][ T6459] RDX: ffffffffffffffff RSI: 0000000002020008 RDI: 0000000000000000 [ 140.717773][ T6459] RBP: 00007f1e34832d69 R08: fffffffffffffffa R09: 0000000000008000 [ 140.717787][ T6459] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 140.717799][ T6459] R13: 00007f1e34a16218 R14: 00007f1e34a16180 R15: 00007ffdae2180f8 [ 140.717825][ T6459] [ 141.443251][ T6471] usb usb26: usbfs: process 6471 (syz.2.150) did not claim interface 0 before use [ 142.215590][ T6482] FAULT_INJECTION: forcing a failure. [ 142.215590][ T6482] name failslab, interval 1, probability 0, space 0, times 0 [ 142.242542][ T6482] CPU: 0 UID: 0 PID: 6482 Comm: syz.3.151 Tainted: G U syzkaller #0 PREEMPT(full) [ 142.242576][ T6482] Tainted: [U]=USER [ 142.242584][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.242597][ T6482] Call Trace: [ 142.242604][ T6482] [ 142.242613][ T6482] dump_stack_lvl+0x100/0x190 [ 142.242641][ T6482] should_fail_ex.cold+0x5/0xa [ 142.242670][ T6482] should_failslab+0xc2/0x120 [ 142.242697][ T6482] __kmalloc_cache_noprof+0x7a/0x6f0 [ 142.242732][ T6482] ? nbd_alloc_and_init_config+0x97/0x2a0 [ 142.242758][ T6482] ? find_held_lock+0x2b/0x80 [ 142.242788][ T6482] ? find_held_lock+0x2b/0x80 [ 142.242821][ T6482] nbd_alloc_and_init_config+0x97/0x2a0 [ 142.242850][ T6482] nbd_open+0x4cc/0x700 [ 142.242878][ T6482] ? __pfx_nbd_open+0x10/0x10 [ 142.242910][ T6482] ? __pfx_nbd_open+0x10/0x10 [ 142.242938][ T6482] blkdev_get_whole+0x99/0x290 [ 142.242963][ T6482] bdev_open+0x2c7/0xe40 [ 142.242992][ T6482] blkdev_open+0x34e/0x4f0 [ 142.243028][ T6482] do_dentry_open+0x6d8/0x1660 [ 142.243076][ T6482] ? __pfx_blkdev_open+0x10/0x10 [ 142.243112][ T6482] vfs_open+0x82/0x3f0 [ 142.243156][ T6482] path_openat+0x208c/0x31a0 [ 142.243192][ T6482] ? futex_unqueue+0x13d/0x2c0 [ 142.243216][ T6482] ? stack_depot_save_flags+0x27/0x9d0 [ 142.243256][ T6482] ? __pfx_path_openat+0x10/0x10 [ 142.243287][ T6482] ? kasan_save_stack+0x3f/0x50 [ 142.243308][ T6482] ? kasan_save_stack+0x30/0x50 [ 142.243328][ T6482] ? kasan_save_track+0x14/0x30 [ 142.243348][ T6482] ? __kasan_slab_alloc+0x89/0x90 [ 142.243370][ T6482] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 142.243407][ T6482] ? do_getname+0x35/0x390 [ 142.243443][ T6482] do_file_open+0x20e/0x430 [ 142.243474][ T6482] ? __pfx_do_file_open+0x10/0x10 [ 142.243524][ T6482] ? find_held_lock+0x2b/0x80 [ 142.243553][ T6482] ? __might_fault+0xc5/0x140 [ 142.243587][ T6482] ? __might_fault+0xc5/0x140 [ 142.243626][ T6482] file_open_name+0x198/0x3b0 [ 142.243661][ T6482] ? __pfx_file_open_name+0x10/0x10 [ 142.243702][ T6482] ? do_getname+0x191/0x390 [ 142.243738][ T6482] acct_on+0xa4/0x9e0 [ 142.243768][ T6482] ? __pfx_acct_on+0x10/0x10 [ 142.243796][ T6482] ? bpf_lsm_capable+0x9/0x10 [ 142.243822][ T6482] ? security_capable+0x80/0x260 [ 142.243859][ T6482] __x64_sys_acct+0x81/0x1e0 [ 142.243887][ T6482] ? lockdep_hardirqs_on+0x78/0x100 [ 142.243918][ T6482] do_syscall_64+0x10b/0xf80 [ 142.243947][ T6482] ? clear_bhb_loop+0x40/0x90 [ 142.243975][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.244008][ T6482] RIP: 0033:0x7f1e3479cdd9 [ 142.244048][ T6482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.244071][ T6482] RSP: 002b:00007f1e329f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 142.244094][ T6482] RAX: ffffffffffffffda RBX: 00007f1e34a16090 RCX: 00007f1e3479cdd9 [ 142.244110][ T6482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 142.244124][ T6482] RBP: 00007f1e34832d69 R08: 0000000000000000 R09: 0000000000000000 [ 142.244139][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.244153][ T6482] R13: 00007f1e34a16128 R14: 00007f1e34a16090 R15: 00007ffdae2180f8 [ 142.244184][ T6482] [ 143.681728][ T6500] bond0: Unable to set down delay as MII monitoring is disabled [ 145.070569][ T6498] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 145.496974][ T6523] FAULT_INJECTION: forcing a failure. [ 145.496974][ T6523] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.511273][ T6523] CPU: 0 UID: 0 PID: 6523 Comm: syz.2.164 Tainted: G U syzkaller #0 PREEMPT(full) [ 145.511316][ T6523] Tainted: [U]=USER [ 145.511325][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.511341][ T6523] Call Trace: [ 145.511350][ T6523] [ 145.511360][ T6523] dump_stack_lvl+0x100/0x190 [ 145.511396][ T6523] should_fail_ex.cold+0x5/0xa [ 145.511434][ T6523] strncpy_from_user+0x3b/0x2d0 [ 145.511462][ T6523] ? get_pid_task+0x106/0x250 [ 145.511510][ T6523] path_setxattrat+0x127/0x3b0 [ 145.511551][ T6523] ? __pfx_path_setxattrat+0x10/0x10 [ 145.511629][ T6523] ? fput+0x79/0x100 [ 145.511669][ T6523] ? ksys_write+0x1ac/0x250 [ 145.511701][ T6523] ? __pfx_ksys_write+0x10/0x10 [ 145.511740][ T6523] __x64_sys_lsetxattr+0xc9/0x140 [ 145.511785][ T6523] ? do_syscall_64+0x90/0xf80 [ 145.511823][ T6523] ? lockdep_hardirqs_on+0x78/0x100 [ 145.511862][ T6523] do_syscall_64+0x10b/0xf80 [ 145.511898][ T6523] ? clear_bhb_loop+0x40/0x90 [ 145.511934][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.511964][ T6523] RIP: 0033:0x7f8f5419cdd9 [ 145.511988][ T6523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.512016][ T6523] RSP: 002b:00007f8f54fab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 145.512043][ T6523] RAX: ffffffffffffffda RBX: 00007f8f54415fa0 RCX: 00007f8f5419cdd9 [ 145.512061][ T6523] RDX: 0000200000000040 RSI: 0000200000000280 RDI: 0000200000000d40 [ 145.512079][ T6523] RBP: 00007f8f54fab090 R08: 0000000000000002 R09: 0000000000000000 [ 145.512095][ T6523] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 145.512112][ T6523] R13: 00007f8f54416038 R14: 00007f8f54415fa0 R15: 00007ffc731f74e8 [ 145.512149][ T6523] [ 147.737381][ T6555] random: crng reseeded on system resumption [ 149.259211][ T6566] FAULT_INJECTION: forcing a failure. [ 149.259211][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 149.288555][ T6566] CPU: 0 UID: 0 PID: 6566 Comm: syz.1.176 Tainted: G U syzkaller #0 PREEMPT(full) [ 149.288596][ T6566] Tainted: [U]=USER [ 149.288605][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.288621][ T6566] Call Trace: [ 149.288629][ T6566] [ 149.288639][ T6566] dump_stack_lvl+0x100/0x190 [ 149.288674][ T6566] should_fail_ex.cold+0x5/0xa [ 149.288736][ T6566] should_failslab+0xc2/0x120 [ 149.288771][ T6566] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 149.288819][ T6566] ? security_inode_alloc+0x3b/0x2c0 [ 149.288867][ T6566] ? lockdep_init_map_type+0x5c/0x250 [ 149.288901][ T6566] security_inode_alloc+0x3b/0x2c0 [ 149.288950][ T6566] inode_init_always_gfp+0xcc0/0x1000 [ 149.288993][ T6566] alloc_inode+0x8e/0x250 [ 149.289040][ T6566] alloc_anon_inode+0x2a/0x3e0 [ 149.289082][ T6566] ioctx_alloc+0x4dc/0x21a0 [ 149.289137][ T6566] ? find_held_lock+0x2b/0x80 [ 149.289177][ T6566] ? __pfx_ioctx_alloc+0x10/0x10 [ 149.289230][ T6566] __x64_sys_io_setup+0xc9/0x220 [ 149.289278][ T6566] do_syscall_64+0x10b/0xf80 [ 149.289317][ T6566] ? clear_bhb_loop+0x40/0x90 [ 149.289355][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.289386][ T6566] RIP: 0033:0x7fe9bd79cdd9 [ 149.289410][ T6566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.289439][ T6566] RSP: 002b:00007fe9bb9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 149.289466][ T6566] RAX: ffffffffffffffda RBX: 00007fe9bda15fa0 RCX: 00007fe9bd79cdd9 [ 149.289491][ T6566] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 149.289509][ T6566] RBP: 00007fe9bd832d69 R08: 0000000000000000 R09: 0000000000000000 [ 149.289527][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.289544][ T6566] R13: 00007fe9bda16038 R14: 00007fe9bda15fa0 R15: 00007fff7cb8c1d8 [ 149.289583][ T6566] [ 149.587852][ T6570] netlink: 334 bytes leftover after parsing attributes in process `syz.2.177'. [ 150.555490][ T6593] FAULT_INJECTION: forcing a failure. [ 150.555490][ T6593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.578859][ T6593] CPU: 0 UID: 0 PID: 6593 Comm: syz.1.184 Tainted: G U syzkaller #0 PREEMPT(full) [ 150.578900][ T6593] Tainted: [U]=USER [ 150.578908][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.578923][ T6593] Call Trace: [ 150.578932][ T6593] [ 150.578942][ T6593] dump_stack_lvl+0x100/0x190 [ 150.578976][ T6593] should_fail_ex.cold+0x5/0xa [ 150.579012][ T6593] _copy_from_user+0x2e/0xd0 [ 150.579040][ T6593] vmemdup_user+0x6b/0xe0 [ 150.579071][ T6593] path_setxattrat+0x29e/0x3b0 [ 150.579114][ T6593] ? __pfx_path_setxattrat+0x10/0x10 [ 150.579184][ T6593] ? fput+0x79/0x100 [ 150.579223][ T6593] ? ksys_write+0x1ac/0x250 [ 150.579254][ T6593] ? __pfx_ksys_write+0x10/0x10 [ 150.579291][ T6593] __x64_sys_lsetxattr+0xc9/0x140 [ 150.579328][ T6593] ? do_syscall_64+0x90/0xf80 [ 150.579365][ T6593] ? lockdep_hardirqs_on+0x78/0x100 [ 150.579402][ T6593] do_syscall_64+0x10b/0xf80 [ 150.579437][ T6593] ? clear_bhb_loop+0x40/0x90 [ 150.579472][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.579501][ T6593] RIP: 0033:0x7fe9bd79cdd9 [ 150.579523][ T6593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.579549][ T6593] RSP: 002b:00007fe9bb9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 150.579574][ T6593] RAX: ffffffffffffffda RBX: 00007fe9bda15fa0 RCX: 00007fe9bd79cdd9 [ 150.579591][ T6593] RDX: 0000200000000040 RSI: 0000200000000280 RDI: 0000200000000d40 [ 150.579608][ T6593] RBP: 00007fe9bb9f6090 R08: 0000000000000002 R09: 0000000000000000 [ 150.579623][ T6593] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 150.579644][ T6593] R13: 00007fe9bda16038 R14: 00007fe9bda15fa0 R15: 00007fff7cb8c1d8 [ 150.579680][ T6593] [ 151.163656][ T30] audit: type=1800 audit(1778176241.940:4): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.185" name="lu_gp_id" dev="configfs" ino=13546 res=0 errno=0 [ 151.264964][ T6599] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 151.316857][ T30] audit: type=1400 audit(1778176242.090:5): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6598 comm="syz.2.186" [ 152.964417][ T6622] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.191: bg 1: bad block bitmap checksum [ 153.015899][ T6622] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 936 with max blocks 87 with error 74 [ 153.038330][ T6622] EXT4-fs (sda1): This should not happen!! Data will be lost [ 153.038330][ T6622] [ 153.092891][ T6627] FAULT_INJECTION: forcing a failure. [ 153.092891][ T6627] name failslab, interval 1, probability 0, space 0, times 0 [ 153.112661][ T6627] CPU: 0 UID: 0 PID: 6627 Comm: syz.1.193 Tainted: G U syzkaller #0 PREEMPT(full) [ 153.112693][ T6627] Tainted: [U]=USER [ 153.112699][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.112711][ T6627] Call Trace: [ 153.112717][ T6627] [ 153.112725][ T6627] dump_stack_lvl+0x100/0x190 [ 153.112751][ T6627] should_fail_ex.cold+0x5/0xa [ 153.112778][ T6627] should_failslab+0xc2/0x120 [ 153.112803][ T6627] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 153.112838][ T6627] ? do_getname+0x35/0x390 [ 153.112875][ T6627] do_getname+0x35/0x390 [ 153.112909][ T6627] path_setxattrat+0x360/0x3b0 [ 153.112938][ T6627] ? __pfx_path_setxattrat+0x10/0x10 [ 153.112991][ T6627] ? fput+0x79/0x100 [ 153.113020][ T6627] ? ksys_write+0x1ac/0x250 [ 153.113044][ T6627] ? __pfx_ksys_write+0x10/0x10 [ 153.113071][ T6627] __x64_sys_lsetxattr+0xc9/0x140 [ 153.113100][ T6627] ? do_syscall_64+0x90/0xf80 [ 153.113129][ T6627] ? lockdep_hardirqs_on+0x78/0x100 [ 153.113157][ T6627] do_syscall_64+0x10b/0xf80 [ 153.113190][ T6627] ? clear_bhb_loop+0x40/0x90 [ 153.113216][ T6627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.113237][ T6627] RIP: 0033:0x7fe9bd79cdd9 [ 153.113254][ T6627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.113274][ T6627] RSP: 002b:00007fe9bb9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 153.113293][ T6627] RAX: ffffffffffffffda RBX: 00007fe9bda15fa0 RCX: 00007fe9bd79cdd9 [ 153.113306][ T6627] RDX: 0000200000000040 RSI: 0000200000000280 RDI: 0000200000000d40 [ 153.113319][ T6627] RBP: 00007fe9bb9f6090 R08: 0000000000000002 R09: 0000000000000000 [ 153.113332][ T6627] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 153.113343][ T6627] R13: 00007fe9bda16038 R14: 00007fe9bda15fa0 R15: 00007fff7cb8c1d8 [ 153.113369][ T6627] [ 155.645783][ T6664] FAULT_INJECTION: forcing a failure. [ 155.645783][ T6664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.670492][ T6664] CPU: 0 UID: 0 PID: 6664 Comm: syz.0.201 Tainted: G U syzkaller #0 PREEMPT(full) [ 155.670536][ T6664] Tainted: [U]=USER [ 155.670545][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.670561][ T6664] Call Trace: [ 155.670570][ T6664] [ 155.670580][ T6664] dump_stack_lvl+0x100/0x190 [ 155.670617][ T6664] should_fail_ex.cold+0x5/0xa [ 155.670654][ T6664] _copy_from_user+0x2e/0xd0 [ 155.670685][ T6664] get_timespec64+0x8b/0x1b0 [ 155.670729][ T6664] ? __pfx_get_timespec64+0x10/0x10 [ 155.670771][ T6664] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 155.670816][ T6664] __x64_sys_futex+0x21a/0x4d0 [ 155.670854][ T6664] ? __pfx___x64_sys_futex+0x10/0x10 [ 155.670893][ T6664] ? rcu_is_watching+0x12/0xc0 [ 155.670934][ T6664] do_syscall_64+0x10b/0xf80 [ 155.670972][ T6664] ? clear_bhb_loop+0x40/0x90 [ 155.671008][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.671038][ T6664] RIP: 0033:0x7f4d7b39cdd9 [ 155.671061][ T6664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.671088][ T6664] RSP: 002b:00007fff1e6d1a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.671113][ T6664] RAX: ffffffffffffffda RBX: 0000000000025fc3 RCX: 00007f4d7b39cdd9 [ 155.671132][ T6664] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4d7b61609c [ 155.671149][ T6664] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 155.671165][ T6664] R10: 00007fff1e6d1b70 R11: 0000000000000246 R12: 00007fff1e6d1b90 [ 155.671182][ T6664] R13: 00007f4d7b61609c R14: 0000000000025ff5 R15: 00007fff1e6d1b70 [ 155.671219][ T6664] [ 156.140951][ T6654] kexec: Could not allocate control_code_buffer [ 156.205041][ T6669] FAULT_INJECTION: forcing a failure. [ 156.205041][ T6669] name failslab, interval 1, probability 0, space 0, times 0 [ 156.224313][ T6669] CPU: 1 UID: 0 PID: 6669 Comm: syz.2.202 Tainted: G U syzkaller #0 PREEMPT(full) [ 156.224357][ T6669] Tainted: [U]=USER [ 156.224366][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.224382][ T6669] Call Trace: [ 156.224390][ T6669] [ 156.224400][ T6669] dump_stack_lvl+0x100/0x190 [ 156.224436][ T6669] should_fail_ex.cold+0x5/0xa [ 156.224474][ T6669] should_failslab+0xc2/0x120 [ 156.224509][ T6669] __kvmalloc_node_noprof+0xfa/0xa00 [ 156.224538][ T6669] ? proc_sys_call_handler+0x2c7/0x5a0 [ 156.224587][ T6669] proc_sys_call_handler+0x2c7/0x5a0 [ 156.224628][ T6669] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 156.224670][ T6669] ? rw_verify_area+0xce/0x6d0 [ 156.224699][ T6669] ? __pfx_proc_sys_read+0x10/0x10 [ 156.224738][ T6669] vfs_read+0x825/0xb30 [ 156.224776][ T6669] ? __pfx_vfs_read+0x10/0x10 [ 156.224833][ T6669] ksys_read+0x12a/0x250 [ 156.224869][ T6669] ? __pfx_ksys_read+0x10/0x10 [ 156.224901][ T6669] ? rcu_is_watching+0x12/0xc0 [ 156.224937][ T6669] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 156.224967][ T6669] ? rcu_is_watching+0x12/0xc0 [ 156.225031][ T6669] do_syscall_64+0x10b/0xf80 [ 156.225073][ T6669] ? clear_bhb_loop+0x40/0x90 [ 156.225130][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.225163][ T6669] RIP: 0033:0x7f8f5419cdd9 [ 156.225189][ T6669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.225220][ T6669] RSP: 002b:00007f8f54fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.225249][ T6669] RAX: ffffffffffffffda RBX: 00007f8f54415fa0 RCX: 00007f8f5419cdd9 [ 156.225270][ T6669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 156.225288][ T6669] RBP: 00007f8f54fab090 R08: 0000000000000000 R09: 0000000000000000 [ 156.225306][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.225324][ T6669] R13: 00007f8f54416038 R14: 00007f8f54415fa0 R15: 00007ffc731f74e8 [ 156.225365][ T6669] [ 156.974270][ T5637] Bluetooth: hci2: unexpected event 0x04 length: 47 > 10 [ 156.974313][ T5637] Bluetooth: unknown link type 255 [ 156.987091][ T5637] Bluetooth: hci2: connection err: -111 [ 157.577618][ T6688] Setting dangerous option i915.mitigations - tainting kernel [ 157.608365][ T6688] Bad "i915.mitigations=!×ÚCmâUQüF\§Þ ", '×ÚCmâUQüF\§Þ' is unknown [ 160.379965][ T6731] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 160.403435][ T6731] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 160.466665][ T6731] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 160.830557][ T6736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.219'. [ 160.871887][ T6715] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 160.909672][ T6736] nbd: must specify at least one socket [ 161.013872][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.027794][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.036440][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.047268][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.065292][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.509125][ T50] Bluetooth: hci1: unexpected event 0x04 length: 47 > 10 [ 162.509164][ T50] Bluetooth: unknown link type 255 [ 162.521583][ T50] Bluetooth: hci1: connection err: -111 [ 162.965312][ T6778] Setting dangerous option i915.mitigations - tainting kernel [ 163.054197][ T6787] netlink: 6212 bytes leftover after parsing attributes in process `syz.0.228'. [ 163.055799][ T6778] Bad "i915.mitigations=!×ÚCmâUQüF\§Þ ", '×ÚCmâUQüF\§Þ' is unknown [ 163.078522][ T50] Bluetooth: hci4: command tx timeout [ 163.087257][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.100155][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.109873][ T6737] bridge_slave_0: entered allmulticast mode [ 163.117975][ T6737] bridge_slave_0: entered promiscuous mode [ 163.127385][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.134899][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.142298][ T6737] bridge_slave_1: entered allmulticast mode [ 163.150255][ T6737] bridge_slave_1: entered promiscuous mode [ 163.211852][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.242676][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.351331][ T6737] team0: Port device team_slave_0 added [ 163.368944][ T6737] team0: Port device team_slave_1 added [ 163.436304][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.451057][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.479404][ T6789] FAULT_INJECTION: forcing a failure. [ 163.479404][ T6789] name failslab, interval 1, probability 0, space 0, times 0 [ 163.492935][ T6789] CPU: 0 UID: 0 PID: 6789 Comm: syz.2.229 Tainted: G U syzkaller #0 PREEMPT(full) [ 163.492982][ T6789] Tainted: [U]=USER [ 163.492992][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.493009][ T6789] Call Trace: [ 163.493019][ T6789] [ 163.493049][ T6789] dump_stack_lvl+0x100/0x190 [ 163.493085][ T6789] should_fail_ex.cold+0x5/0xa [ 163.493123][ T6789] should_failslab+0xc2/0x120 [ 163.493158][ T6789] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 163.493208][ T6789] ? security_inode_alloc+0x3b/0x2c0 [ 163.493259][ T6789] ? lockdep_init_map_type+0x5c/0x250 [ 163.493296][ T6789] security_inode_alloc+0x3b/0x2c0 [ 163.493348][ T6789] inode_init_always_gfp+0xcc0/0x1000 [ 163.493408][ T6789] alloc_inode+0x8e/0x250 [ 163.493456][ T6789] alloc_anon_inode+0x2a/0x3e0 [ 163.493501][ T6789] ioctx_alloc+0x4dc/0x21a0 [ 163.493558][ T6789] ? find_held_lock+0x2b/0x80 [ 163.493597][ T6789] ? __pfx_ioctx_alloc+0x10/0x10 [ 163.493649][ T6789] __x64_sys_io_setup+0xc9/0x220 [ 163.493698][ T6789] do_syscall_64+0x10b/0xf80 [ 163.493737][ T6789] ? clear_bhb_loop+0x40/0x90 [ 163.493775][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.493806][ T6789] RIP: 0033:0x7f8f5419cdd9 [ 163.493830][ T6789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.493860][ T6789] RSP: 002b:00007f8f54fab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 163.493887][ T6789] RAX: ffffffffffffffda RBX: 00007f8f54415fa0 RCX: 00007f8f5419cdd9 [ 163.493906][ T6789] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 163.493924][ T6789] RBP: 00007f8f54232d69 R08: 0000000000000000 R09: 0000000000000000 [ 163.493941][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.493957][ T6789] R13: 00007f8f54416038 R14: 00007f8f54415fa0 R15: 00007ffc731f74e8 [ 163.493995][ T6789] [ 163.691994][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.706783][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.713811][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.739778][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.804146][ T6737] hsr_slave_0: entered promiscuous mode [ 163.811847][ T6737] hsr_slave_1: entered promiscuous mode [ 163.846554][ T6737] debugfs: 'hsr0' already exists in 'hsr' [ 163.867483][ T6737] Cannot create hsr debugfs directory [ 164.502104][ T6737] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.565212][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.584751][ T6737] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.614838][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.628200][ T6737] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.677717][ T6810] capability: warning: `syz.1.234' uses 32-bit capabilities (legacy support in use) [ 164.690377][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.709949][ T6737] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.732194][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.976360][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.003288][ T6737] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.029609][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.036813][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.089916][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.097130][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.161154][ T50] Bluetooth: hci4: command tx timeout [ 165.243968][ T6822] FAULT_INJECTION: forcing a failure. [ 165.243968][ T6822] name fail_futex, interval 1, probability 0, space 0, times 0 [ 165.289339][ T6822] CPU: 1 UID: 0 PID: 6822 Comm: syz.2.236 Tainted: G U syzkaller #0 PREEMPT(full) [ 165.289383][ T6822] Tainted: [U]=USER [ 165.289393][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.289409][ T6822] Call Trace: [ 165.289418][ T6822] [ 165.289429][ T6822] dump_stack_lvl+0x100/0x190 [ 165.289467][ T6822] should_fail_ex.cold+0x5/0xa [ 165.289505][ T6822] get_futex_key+0x295/0x1510 [ 165.289539][ T6822] ? __pfx_get_futex_key+0x10/0x10 [ 165.289574][ T6822] ? lock_acquire+0x1b1/0x370 [ 165.289613][ T6822] futex_wake+0xea/0x530 [ 165.289656][ T6822] ? __pfx_futex_wake+0x10/0x10 [ 165.289693][ T6822] ? exit_mm_release+0x19/0x30 [ 165.289746][ T6822] do_futex+0x32b/0x350 [ 165.289779][ T6822] ? __pfx_do_futex+0x10/0x10 [ 165.289808][ T6822] ? __might_fault+0xc5/0x140 [ 165.289863][ T6822] mm_release+0x24a/0x2f0 [ 165.289901][ T6822] do_exit+0x707/0x2a60 [ 165.289954][ T6822] ? __pfx_do_exit+0x10/0x10 [ 165.289998][ T6822] ? do_raw_spin_lock+0x128/0x260 [ 165.290032][ T6822] ? find_held_lock+0x2b/0x80 [ 165.290071][ T6822] ? get_signal+0x7e0/0x21e0 [ 165.290112][ T6822] do_group_exit+0xd5/0x2a0 [ 165.290163][ T6822] get_signal+0x1ec7/0x21e0 [ 165.290214][ T6822] ? __pfx_get_signal+0x10/0x10 [ 165.290263][ T6822] ? do_futex+0x192/0x350 [ 165.290300][ T6822] arch_do_signal_or_restart+0x91/0x770 [ 165.290345][ T6822] ? find_held_lock+0x2b/0x80 [ 165.290384][ T6822] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 165.290440][ T6822] ? __pfx___x64_sys_futex+0x10/0x10 [ 165.290475][ T6822] ? rcu_is_watching+0x12/0xc0 [ 165.290517][ T6822] exit_to_user_mode_loop+0x86/0x4a0 [ 165.290546][ T6822] ? do_syscall_64+0x519/0xf80 [ 165.290588][ T6822] do_syscall_64+0x6f2/0xf80 [ 165.290626][ T6822] ? clear_bhb_loop+0x40/0x90 [ 165.290662][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.290693][ T6822] RIP: 0033:0x7f8f5419cdd9 [ 165.290716][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.290748][ T6822] RSP: 002b:00007f8f54fab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.290782][ T6822] RAX: fffffffffffffe00 RBX: 00007f8f54415fa8 RCX: 00007f8f5419cdd9 [ 165.290800][ T6822] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f54415fa8 [ 165.290814][ T6822] RBP: 00007f8f54415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 165.290829][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.290843][ T6822] R13: 00007f8f54416038 R14: 00007ffc731f7400 R15: 00007ffc731f74e8 [ 165.290875][ T6822] [ 165.688074][ T6826] netlink: 6212 bytes leftover after parsing attributes in process `syz.2.237'. [ 166.004326][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 166.115550][ T6837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.240'. [ 166.626464][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.887700][ T6858] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 166.944154][ T6858] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 167.248358][ T50] Bluetooth: hci4: command tx timeout [ 167.269645][ T6868] FAULT_INJECTION: forcing a failure. [ 167.269645][ T6868] name fail_futex, interval 1, probability 0, space 0, times 0 [ 167.293366][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.2.244 Tainted: G U syzkaller #0 PREEMPT(full) [ 167.293415][ T6868] Tainted: [U]=USER [ 167.293424][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.293440][ T6868] Call Trace: [ 167.293449][ T6868] [ 167.293459][ T6868] dump_stack_lvl+0x100/0x190 [ 167.293517][ T6868] should_fail_ex.cold+0x5/0xa [ 167.293557][ T6868] get_futex_key+0x295/0x1510 [ 167.293594][ T6868] ? __pfx_get_futex_key+0x10/0x10 [ 167.293624][ T6868] ? lock_acquire+0x1b1/0x370 [ 167.293665][ T6868] futex_wake+0xea/0x530 [ 167.293711][ T6868] ? __pfx_futex_wake+0x10/0x10 [ 167.293751][ T6868] ? exit_mm_release+0x19/0x30 [ 167.293808][ T6868] do_futex+0x32b/0x350 [ 167.293843][ T6868] ? __pfx_do_futex+0x10/0x10 [ 167.293875][ T6868] ? __might_fault+0xc5/0x140 [ 167.293934][ T6868] mm_release+0x24a/0x2f0 [ 167.293974][ T6868] do_exit+0x707/0x2a60 [ 167.294027][ T6868] ? __pfx_do_exit+0x10/0x10 [ 167.294073][ T6868] ? do_raw_spin_lock+0x128/0x260 [ 167.294106][ T6868] ? find_held_lock+0x2b/0x80 [ 167.294153][ T6868] ? get_signal+0x7e0/0x21e0 [ 167.294196][ T6868] do_group_exit+0xd5/0x2a0 [ 167.294247][ T6868] get_signal+0x1ec7/0x21e0 [ 167.294300][ T6868] ? __pfx_get_signal+0x10/0x10 [ 167.294342][ T6868] ? do_futex+0x192/0x350 [ 167.294380][ T6868] arch_do_signal_or_restart+0x91/0x770 [ 167.294429][ T6868] ? find_held_lock+0x2b/0x80 [ 167.294469][ T6868] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 167.294527][ T6868] ? __pfx___x64_sys_futex+0x10/0x10 [ 167.294574][ T6868] ? rcu_is_watching+0x12/0xc0 [ 167.294613][ T6868] exit_to_user_mode_loop+0x86/0x4a0 [ 167.294639][ T6868] ? do_syscall_64+0x519/0xf80 [ 167.294677][ T6868] do_syscall_64+0x6f2/0xf80 [ 167.294711][ T6868] ? clear_bhb_loop+0x40/0x90 [ 167.294764][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.294804][ T6868] RIP: 0033:0x7f8f5419cdd9 [ 167.294826][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.294871][ T6868] RSP: 002b:00007f8f54fab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 167.294900][ T6868] RAX: fffffffffffffe00 RBX: 00007f8f54415fa8 RCX: 00007f8f5419cdd9 [ 167.294919][ T6868] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f54415fa8 [ 167.294938][ T6868] RBP: 00007f8f54415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 167.294956][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.294980][ T6868] R13: 00007f8f54416038 R14: 00007ffc731f7400 R15: 00007ffc731f74e8 [ 167.295038][ T6868] [ 167.894371][ T6878] netlink: 6212 bytes leftover after parsing attributes in process `syz.1.246'. [ 168.160335][ T6737] veth0_vlan: entered promiscuous mode [ 168.191109][ T6737] veth1_vlan: entered promiscuous mode [ 168.515411][ T6737] veth0_macvtap: entered promiscuous mode [ 168.526900][ T6737] veth1_macvtap: entered promiscuous mode [ 168.613058][ T6888] bond0: Unable to set down delay as MII monitoring is disabled [ 169.318886][ T50] Bluetooth: hci4: command tx timeout [ 169.447859][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.481811][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.740990][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.839942][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.862705][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.897395][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.073267][ T6885] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 170.212567][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.223082][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.543920][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.543947][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.062882][ T50] Bluetooth: hci4: unexpected event 0x04 length: 47 > 10 [ 171.062931][ T50] Bluetooth: unknown link type 255 [ 171.062986][ T50] Bluetooth: hci4: connection err: -111 [ 171.377664][ T50] Bluetooth: hci1: unexpected event 0x04 length: 47 > 10 [ 171.377712][ T50] Bluetooth: unknown link type 255 [ 171.390483][ T50] Bluetooth: hci1: connection err: -111 [ 172.027398][ T6929] Setting dangerous option i915.mitigations - tainting kernel [ 172.050361][ T6929] Bad "i915.mitigations=!×ÚCmâUQüF\§Þ ", '×ÚCmâUQüF\§Þ' is unknown [ 172.350950][ T6917] Setting dangerous option i915.mitigations - tainting kernel [ 172.386545][ T6917] Bad "i915.mitigations=!×ÚCmâUQüF\§Þ ", '×ÚCmâUQüF\§Þ' is unknown [ 173.842219][ T6967] futex_wake_op: syz.4.268 tries to shift op by -1; fix this program [ 174.024063][ T6961] FAULT_INJECTION: forcing a failure. [ 174.024063][ T6961] name failslab, interval 1, probability 0, space 0, times 0 [ 174.053669][ T6961] CPU: 1 UID: 0 PID: 6961 Comm: syz.1.266 Tainted: G U syzkaller #0 PREEMPT(full) [ 174.053722][ T6961] Tainted: [U]=USER [ 174.053733][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.053752][ T6961] Call Trace: [ 174.053762][ T6961] [ 174.053774][ T6961] dump_stack_lvl+0x100/0x190 [ 174.053818][ T6961] should_fail_ex.cold+0x5/0xa [ 174.053870][ T6961] should_failslab+0xc2/0x120 [ 174.053911][ T6961] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 174.053967][ T6961] ? __d_alloc+0x34/0xa40 [ 174.054012][ T6961] ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300 [ 174.054056][ T6961] __d_alloc+0x34/0xa40 [ 174.054099][ T6961] ? inode_set_ctime_current+0x283/0x870 [ 174.054150][ T6961] d_alloc_pseudo+0x1c/0xc0 [ 174.054183][ T6961] alloc_file_pseudo+0xcf/0x230 [ 174.054236][ T6961] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 174.054298][ T6961] ioctx_alloc+0x5d6/0x21a0 [ 174.054366][ T6961] ? find_held_lock+0x2b/0x80 [ 174.054409][ T6961] ? __pfx_ioctx_alloc+0x10/0x10 [ 174.054463][ T6961] __x64_sys_io_setup+0xc9/0x220 [ 174.054511][ T6961] do_syscall_64+0x10b/0xf80 [ 174.054553][ T6961] ? clear_bhb_loop+0x40/0x90 [ 174.054591][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.054642][ T6961] RIP: 0033:0x7fe9bd79cdd9 [ 174.054668][ T6961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.054700][ T6961] RSP: 002b:00007fe9bb9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 174.054731][ T6961] RAX: ffffffffffffffda RBX: 00007fe9bda15fa0 RCX: 00007fe9bd79cdd9 [ 174.054753][ T6961] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 174.054772][ T6961] RBP: 00007fe9bd832d69 R08: 0000000000000000 R09: 0000000000000000 [ 174.054802][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.054820][ T6961] R13: 00007fe9bda16038 R14: 00007fe9bda15fa0 R15: 00007fff7cb8c1d8 [ 174.054868][ T6961] [ 176.183616][ T7001] FAULT_INJECTION: forcing a failure. [ 176.183616][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 176.234011][ T7001] CPU: 1 UID: 0 PID: 7001 Comm: syz.2.276 Tainted: G U syzkaller #0 PREEMPT(full) [ 176.234046][ T7001] Tainted: [U]=USER [ 176.234053][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.234094][ T7001] Call Trace: [ 176.234101][ T7001] [ 176.234109][ T7001] dump_stack_lvl+0x100/0x190 [ 176.234138][ T7001] should_fail_ex.cold+0x5/0xa [ 176.234167][ T7001] should_failslab+0xc2/0x120 [ 176.234194][ T7001] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 176.234231][ T7001] ? vm_area_dup+0x27/0x8e0 [ 176.234263][ T7001] ? mas_next_range+0x9b/0xf0 [ 176.234300][ T7001] vm_area_dup+0x27/0x8e0 [ 176.234335][ T7001] copy_vma+0x643/0xac0 [ 176.234375][ T7001] ? __pfx_copy_vma+0x10/0x10 [ 176.234462][ T7001] ? __lock_acquire+0x4a5/0x2630 [ 176.234484][ T7001] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 176.234520][ T7001] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 176.234561][ T7001] copy_vma_and_data+0x1cf/0x7c0 [ 176.234601][ T7001] ? __pfx_copy_vma_and_data+0x10/0x10 [ 176.234638][ T7001] ? mtree_load+0x311/0xa90 [ 176.234678][ T7001] ? rcu_is_watching+0x12/0xc0 [ 176.234704][ T7001] ? percpu_counter_add_batch+0xb9/0x230 [ 176.234733][ T7001] ? __vm_enough_memory+0x184/0x390 [ 176.234768][ T7001] move_vma+0x574/0x1920 [ 176.234808][ T7001] ? __pfx_move_vma+0x10/0x10 [ 176.234847][ T7001] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 176.234877][ T7001] ? cap_mmap_addr+0x4b/0x120 [ 176.234910][ T7001] ? bpf_lsm_mmap_addr+0x9/0x30 [ 176.234932][ T7001] ? security_mmap_addr+0x71/0x1e0 [ 176.234958][ T7001] ? __get_unmapped_area+0x255/0x3e0 [ 176.235010][ T7001] ? vrm_set_new_addr+0x204/0x290 [ 176.235091][ T7001] mremap_to+0x234/0x4c0 [ 176.235134][ T7001] ? __pfx_mremap_to+0x10/0x10 [ 176.235172][ T7001] ? __pfx_down_write_killable+0x10/0x10 [ 176.235211][ T7001] ? check_prep_vma+0x878/0xdf0 [ 176.235260][ T7001] __do_sys_mremap+0xc42/0x1850 [ 176.235310][ T7001] ? __pfx___do_sys_mremap+0x10/0x10 [ 176.235356][ T7001] ? do_futex+0x192/0x350 [ 176.235383][ T7001] ? __pfx_do_futex+0x10/0x10 [ 176.235411][ T7001] ? __pfx___might_resched+0x10/0x10 [ 176.235440][ T7001] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 176.235505][ T7001] ? __x64_sys_futex+0x34f/0x4d0 [ 176.235544][ T7001] ? rcu_is_watching+0x12/0xc0 [ 176.235578][ T7001] do_syscall_64+0x10b/0xf80 [ 176.235612][ T7001] ? clear_bhb_loop+0x40/0x90 [ 176.235642][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.235668][ T7001] RIP: 0033:0x7f8f5419cdd9 [ 176.235693][ T7001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.235717][ T7001] RSP: 002b:00007f8f54fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 176.235740][ T7001] RAX: ffffffffffffffda RBX: 00007f8f54415fa0 RCX: 00007f8f5419cdd9 [ 176.235756][ T7001] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 0000000000004000 [ 176.235771][ T7001] RBP: 00007f8f54232d69 R08: 0000000000018000 R09: 0000000000000000 [ 176.235786][ T7001] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 176.235800][ T7001] R13: 00007f8f54416038 R14: 00007f8f54415fa0 R15: 00007ffc731f74e8 [ 176.235831][ T7001] [ 177.815895][ T7026] bridge_slave_0: left allmulticast mode [ 177.840140][ T7026] bridge_slave_0: left promiscuous mode [ 177.865516][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.218718][ T7120] syz.1.304 (7120): attempted to duplicate a private mapping with mremap. This is not supported. [ 182.264961][ T30] audit: type=1800 audit(1778176273.040:6): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.304" name="dummy_udc" dev="gadgetfs" ino=7339 res=0 errno=0 [ 182.481414][ T50] Bluetooth: hci0: unexpected event 0x04 length: 47 > 10 [ 182.481460][ T50] Bluetooth: unknown link type 255 [ 182.495658][ T50] Bluetooth: hci0: connection err: -111 [ 182.513205][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 182.527250][ T7124] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 182.535724][ T7124] netlink: 'syz.1.305': attribute type 6 has an invalid length. [ 183.098445][ T7137] deleting an unspecified loop device is not supported. [ 183.135799][ T7137] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 183.236758][ T7139] ubi0: attaching mtd0 [ 183.372685][ T7139] ubi0: scanning is finished [ 183.402416][ T7139] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 184.077278][ T7139] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 190.409380][ T7247] futex_wake_op: syz.0.335 tries to shift op by -1; fix this program [ 190.722926][ T7241] i2c i2c-0: delete_device: Can't find device in list [ 192.224203][ T7282] FAULT_INJECTION: forcing a failure. [ 192.224203][ T7282] name failslab, interval 1, probability 0, space 0, times 0 [ 192.260644][ T7282] CPU: 0 UID: 0 PID: 7282 Comm: syz.0.346 Tainted: G U syzkaller #0 PREEMPT(full) [ 192.260697][ T7282] Tainted: [U]=USER [ 192.260709][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.260726][ T7282] Call Trace: [ 192.260736][ T7282] [ 192.260748][ T7282] dump_stack_lvl+0x100/0x190 [ 192.260788][ T7282] should_fail_ex.cold+0x5/0xa [ 192.260828][ T7282] should_failslab+0xc2/0x120 [ 192.260866][ T7282] __kmalloc_cache_noprof+0x7a/0x6f0 [ 192.260913][ T7282] ? init_srcu_struct_fields+0xa69/0xfa0 [ 192.260944][ T7282] ? __kasan_kmalloc+0xaa/0xb0 [ 192.260975][ T7282] ? lockdep_init_map_type+0x5c/0x250 [ 192.261013][ T7282] init_srcu_struct_fields+0xa69/0xfa0 [ 192.261051][ T7282] kvm_dev_ioctl+0x593/0x1a50 [ 192.261105][ T7282] ? find_held_lock+0x2b/0x80 [ 192.261147][ T7282] ? __fget_files+0x215/0x3d0 [ 192.261184][ T7282] ? hook_file_ioctl_common+0x149/0x410 [ 192.261222][ T7282] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 192.261273][ T7282] ? __fget_files+0x21f/0x3d0 [ 192.261317][ T7282] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 192.261366][ T7282] __x64_sys_ioctl+0x18e/0x210 [ 192.261401][ T7282] do_syscall_64+0x10b/0xf80 [ 192.261445][ T7282] ? clear_bhb_loop+0x40/0x90 [ 192.261486][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.261520][ T7282] RIP: 0033:0x7f4d7b39cdd9 [ 192.261553][ T7282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.261585][ T7282] RSP: 002b:00007f4d7c2b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.261616][ T7282] RAX: ffffffffffffffda RBX: 00007f4d7b615fa0 RCX: 00007f4d7b39cdd9 [ 192.261637][ T7282] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 192.261655][ T7282] RBP: 00007f4d7b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 192.261674][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.261693][ T7282] R13: 00007f4d7b616038 R14: 00007f4d7b615fa0 R15: 00007fff1e6d1908 [ 192.261733][ T7282] [ 192.888471][ T7289] FAULT_INJECTION: forcing a failure. [ 192.888471][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 192.990254][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.2.347 Tainted: G U syzkaller #0 PREEMPT(full) [ 192.990300][ T7289] Tainted: [U]=USER [ 192.990309][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.990325][ T7289] Call Trace: [ 192.990334][ T7289] [ 192.990345][ T7289] dump_stack_lvl+0x100/0x190 [ 192.990381][ T7289] should_fail_ex.cold+0x5/0xa [ 192.990424][ T7289] ? tomoyo_realpath_from_path+0xb6/0x690 [ 192.990462][ T7289] should_failslab+0xc2/0x120 [ 192.990496][ T7289] __kmalloc_noprof+0xe0/0x850 [ 192.990542][ T7289] ? kfree+0x1dd/0x6c0 [ 192.990590][ T7289] tomoyo_realpath_from_path+0xb6/0x690 [ 192.990637][ T7289] tomoyo_check_open_permission+0x2af/0x3c0 [ 192.990671][ T7289] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 192.990723][ T7289] ? hook_file_open+0x24e/0x7a0 [ 192.990774][ T7289] ? lock_acquire+0x1b1/0x370 [ 192.990815][ T7289] tomoyo_file_open+0x6b/0x90 [ 192.990860][ T7289] security_file_open+0xb5/0x1e0 [ 192.990895][ T7289] do_dentry_open+0x5aa/0x1660 [ 192.990943][ T7289] vfs_open+0x82/0x3f0 [ 192.990991][ T7289] path_openat+0x208c/0x31a0 [ 192.991042][ T7289] ? __pfx_path_openat+0x10/0x10 [ 192.991095][ T7289] do_file_open+0x20e/0x430 [ 192.991136][ T7289] ? __pfx_do_file_open+0x10/0x10 [ 192.991188][ T7289] ? __pfx_kfree_link+0x10/0x10 [ 192.991229][ T7289] ? alloc_fd+0x476/0x790 [ 192.991274][ T7289] ? do_getname+0x191/0x390 [ 192.991322][ T7289] do_sys_openat2+0x10d/0x1e0 [ 192.991369][ T7289] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.991434][ T7289] __x64_sys_openat+0x12d/0x210 [ 192.991483][ T7289] ? __pfx___x64_sys_openat+0x10/0x10 [ 192.991529][ T7289] ? ksys_write+0x1ac/0x250 [ 192.991569][ T7289] ? rcu_is_watching+0x12/0xc0 [ 192.991610][ T7289] do_syscall_64+0x10b/0xf80 [ 192.991649][ T7289] ? clear_bhb_loop+0x40/0x90 [ 192.991687][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.991717][ T7289] RIP: 0033:0x7f8f5415d60e [ 192.991739][ T7289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 192.991766][ T7289] RSP: 002b:00007f8f54faaf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.991791][ T7289] RAX: ffffffffffffffda RBX: 00007f8f54fab6c0 RCX: 00007f8f5415d60e [ 192.991808][ T7289] RDX: 0000000000000002 RSI: 00007f8f54232670 RDI: ffffffffffffff9c [ 192.991825][ T7289] RBP: 00007f8f54232d69 R08: 0000000000000000 R09: 0000000000000000 [ 192.991842][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.991858][ T7289] R13: 00007f8f54416038 R14: 00007f8f54415fa0 R15: 00007ffc731f74e8 [ 192.991894][ T7289] [ 192.992049][ T7289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 193.273287][ T7289] FAULT_INJECTION: forcing a failure. [ 193.273287][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 193.286515][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.2.347 Tainted: G U syzkaller #0 PREEMPT(full) [ 193.286557][ T7289] Tainted: [U]=USER [ 193.286565][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.286581][ T7289] Call Trace: [ 193.286591][ T7289] [ 193.286601][ T7289] dump_stack_lvl+0x100/0x190 [ 193.286637][ T7289] should_fail_ex.cold+0x5/0xa [ 193.286672][ T7289] ? tomoyo_realpath_from_path+0xb6/0x690 [ 193.286709][ T7289] should_failslab+0xc2/0x120 [ 193.286743][ T7289] __kmalloc_noprof+0xe0/0x850 [ 193.286808][ T7289] ? kfree+0x1dd/0x6c0 [ 193.286858][ T7289] tomoyo_realpath_from_path+0xb6/0x690 [ 193.286910][ T7289] tomoyo_path_number_perm+0x23c/0x580 [ 193.286942][ T7289] ? tomoyo_path_number_perm+0x22e/0x580 [ 193.286987][ T7289] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 193.287057][ T7289] ? find_held_lock+0x2b/0x80 [ 193.287095][ T7289] ? __fget_files+0x215/0x3d0 [ 193.287137][ T7289] ? hook_file_ioctl_common+0x149/0x410 [ 193.287169][ T7289] ? __fget_files+0x215/0x3d0 [ 193.287208][ T7289] ? __fget_files+0x21f/0x3d0 [ 193.287248][ T7289] security_file_ioctl+0xd3/0x230 [ 193.287282][ T7289] __x64_sys_ioctl+0xb7/0x210 [ 193.287315][ T7289] do_syscall_64+0x10b/0xf80 [ 193.287353][ T7289] ? clear_bhb_loop+0x40/0x90 [ 193.287399][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.287428][ T7289] RIP: 0033:0x7f8f5419cdd9 [ 193.287449][ T7289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.287475][ T7289] RSP: 002b:00007f8f54fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.287504][ T7289] RAX: ffffffffffffffda RBX: 00007f8f54415fa0 RCX: 00007f8f5419cdd9 [ 193.287521][ T7289] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 193.287537][ T7289] RBP: 00007f8f54fab090 R08: 0000000000000000 R09: 0000000000000000 [ 193.287554][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.287569][ T7289] R13: 00007f8f54416038 R14: 00007f8f54415fa0 R15: 00007ffc731f74e8 [ 193.287604][ T7289] [ 194.364440][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372181][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.630895][ T7324] __vm_enough_memory: pid: 7324, comm: syz.1.356, bytes: 4398046457856 not enough memory for the allocation [ 195.816730][ T7322] bond0: Unable to set down delay as MII monitoring is disabled [ 196.873630][ T7345] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 197.002445][ T7321] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 198.215559][ T7365] bond0: option slaves: interface -Âô]àæ©=,Dçon?ïI|›a CB does not exist! [ 198.823342][ T7377] FAULT_INJECTION: forcing a failure. [ 198.823342][ T7377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.929417][ T7377] CPU: 1 UID: 0 PID: 7377 Comm: syz.1.369 Tainted: G U syzkaller #0 PREEMPT(full) [ 198.929469][ T7377] Tainted: [U]=USER [ 198.929480][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.929499][ T7377] Call Trace: [ 198.929511][ T7377] [ 198.929523][ T7377] dump_stack_lvl+0x100/0x190 [ 198.929566][ T7377] should_fail_ex.cold+0x5/0xa [ 198.929609][ T7377] _copy_to_user+0x32/0xd0 [ 198.929635][ T7377] ksys_msgctl.constprop.0+0x2cc/0x340 [ 198.929674][ T7377] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 198.929731][ T7377] ? rcu_is_watching+0x12/0xc0 [ 198.929765][ T7377] do_syscall_64+0x10b/0xf80 [ 198.929799][ T7377] ? clear_bhb_loop+0x40/0x90 [ 198.929829][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.929855][ T7377] RIP: 0033:0x7fe9bd79cdd9 [ 198.929875][ T7377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.929901][ T7377] RSP: 002b:00007fe9bb9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 198.929957][ T7377] RAX: ffffffffffffffda RBX: 00007fe9bda15fa0 RCX: 00007fe9bd79cdd9 [ 198.929975][ T7377] RDX: 0000200000000280 RSI: 0000000000000003 RDI: 0000000000000001 [ 198.929990][ T7377] RBP: 00007fe9bd832d69 R08: 0000000000000000 R09: 0000000000000000 [ 198.930005][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.930021][ T7377] R13: 00007fe9bda16038 R14: 00007fe9bda15fa0 R15: 00007fff7cb8c1d8 [ 198.930052][ T7377] [ 201.154100][ T7415] FAULT_INJECTION: forcing a failure. [ 201.154100][ T7415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.194067][ T7410] WARNING! power/level is deprecated; use power/control instead [ 201.236847][ T7415] CPU: 1 UID: 0 PID: 7415 Comm: syz.1.377 Tainted: G U syzkaller #0 PREEMPT(full) [ 201.236893][ T7415] Tainted: [U]=USER [ 201.236902][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.236919][ T7415] Call Trace: [ 201.236944][ T7415] [ 201.236955][ T7415] dump_stack_lvl+0x100/0x190 [ 201.237023][ T7415] should_fail_ex.cold+0x5/0xa [ 201.237064][ T7415] _copy_to_user+0x32/0xd0 [ 201.237099][ T7415] simple_read_from_buffer+0xcb/0x170 [ 201.237140][ T7415] proc_fail_nth_read+0x1af/0x230 [ 201.237193][ T7415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.237247][ T7415] ? rw_verify_area+0xce/0x6d0 [ 201.237279][ T7415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.237334][ T7415] vfs_read+0x1e4/0xb30 [ 201.237376][ T7415] ? __pfx_vfs_read+0x10/0x10 [ 201.237410][ T7415] ? __fget_files+0x215/0x3d0 [ 201.237457][ T7415] ? __fget_files+0x21f/0x3d0 [ 201.237506][ T7415] ksys_read+0x12a/0x250 [ 201.237542][ T7415] ? __pfx_ksys_read+0x10/0x10 [ 201.237582][ T7415] ? rcu_is_watching+0x12/0xc0 [ 201.237638][ T7415] do_syscall_64+0x10b/0xf80 [ 201.237676][ T7415] ? clear_bhb_loop+0x40/0x90 [ 201.237713][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.237745][ T7415] RIP: 0033:0x7fe9bd75d60e [ 201.237769][ T7415] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.237804][ T7415] RSP: 002b:00007fe9bb9f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.237831][ T7415] RAX: ffffffffffffffda RBX: 00007fe9bb9f66c0 RCX: 00007fe9bd75d60e [ 201.237850][ T7415] RDX: 000000000000000f RSI: 00007fe9bb9f60a0 RDI: 0000000000000003 [ 201.237867][ T7415] RBP: 00007fe9bb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 201.237884][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.237900][ T7415] R13: 00007fe9bda16038 R14: 00007fe9bda15fa0 R15: 00007fff7cb8c1d8 [ 201.237938][ T7415] [ 203.026757][ T7423] smpboot: CPU 1 is now offline [ 203.848564][ T7448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.894294][ T7448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.934442][ T7448] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.999275][ T7448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.054432][ T7448] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.086198][ T7448] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.173410][ T7448] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.682341][ T7454] FAULT_INJECTION: forcing a failure. [ 204.682341][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 204.717088][ T7456] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.385'. [ 204.763182][ T7454] CPU: 0 UID: 0 PID: 7454 Comm: syz.0.384 Tainted: G U syzkaller #0 PREEMPT(full) [ 204.763219][ T7454] Tainted: [U]=USER [ 204.763227][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.763251][ T7454] Call Trace: [ 204.763259][ T7454] [ 204.763268][ T7454] dump_stack_lvl+0x100/0x190 [ 204.763298][ T7454] should_fail_ex.cold+0x5/0xa [ 204.763329][ T7454] should_failslab+0xc2/0x120 [ 204.763358][ T7454] __kmalloc_cache_noprof+0x7a/0x6f0 [ 204.763393][ T7454] ? rfkill_fop_open+0x1cc/0x480 [ 204.763427][ T7454] rfkill_fop_open+0x1cc/0x480 [ 204.763456][ T7454] ? __pfx_rfkill_fop_open+0x10/0x10 [ 204.763485][ T7454] misc_open+0x26d/0x450 [ 204.763516][ T7454] ? __pfx_misc_open+0x10/0x10 [ 204.763546][ T7454] chrdev_open+0x234/0x6a0 [ 204.763579][ T7454] ? __pfx_apparmor_file_open+0x10/0x10 [ 204.763620][ T7454] ? __pfx_chrdev_open+0x10/0x10 [ 204.763653][ T7454] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 204.763692][ T7454] do_dentry_open+0x6d8/0x1660 [ 204.763722][ T7454] ? __pfx_chrdev_open+0x10/0x10 [ 204.763759][ T7454] vfs_open+0x82/0x3f0 [ 204.763799][ T7454] path_openat+0x208c/0x31a0 [ 204.763840][ T7454] ? __pfx_path_openat+0x10/0x10 [ 204.763881][ T7454] do_file_open+0x20e/0x430 [ 204.763930][ T7454] ? __pfx_do_file_open+0x10/0x10 [ 204.763982][ T7454] ? alloc_fd+0x476/0x790 [ 204.764014][ T7454] ? do_getname+0x191/0x390 [ 204.764054][ T7454] do_sys_openat2+0x10d/0x1e0 [ 204.764093][ T7454] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.764142][ T7454] __x64_sys_openat+0x12d/0x210 [ 204.764181][ T7454] ? __pfx___x64_sys_openat+0x10/0x10 [ 204.764219][ T7454] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 204.764265][ T7454] ? rcu_is_watching+0x12/0xc0 [ 204.764298][ T7454] do_syscall_64+0x10b/0xf80 [ 204.764330][ T7454] ? clear_bhb_loop+0x40/0x90 [ 204.764360][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.764385][ T7454] RIP: 0033:0x7f4d7b39cdd9 [ 204.764405][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.764429][ T7454] RSP: 002b:00007f4d7c2b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.764452][ T7454] RAX: ffffffffffffffda RBX: 00007f4d7b615fa0 RCX: 00007f4d7b39cdd9 [ 204.764468][ T7454] RDX: 0000000000000000 RSI: 0000200000002200 RDI: ffffffffffffff9c [ 204.764483][ T7454] RBP: 00007f4d7b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 204.764498][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.764513][ T7454] R13: 00007f4d7b616038 R14: 00007f4d7b615fa0 R15: 00007fff1e6d1908 [ 204.764543][ T7454] [ 205.920078][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.004562][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.011360][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.068890][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.125496][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.165241][ T30] audit: type=1807 audit(1778176296.880:7): UNKNOWN=òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 206.165581][ T30] audit: type=1802 audit(1778176296.940:8): pid=7465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.387" res=0 errno=0 [ 206.916840][ T7460] ima: policy update failed [ 206.960092][ T30] audit: type=1802 audit(1843104519.200:9): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.387" res=0 errno=0 [ 207.928464][ T7482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 208.198616][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.293602][ T7484] random: crng reseeded on system resumption [ 210.278399][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 210.955366][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 210.997337][ T7504] netlink: 25 bytes leftover after parsing attributes in process `syz.0.395'. [ 211.054898][ T7504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'. [ 211.098438][ T7504] bridge_slave_1: left allmulticast mode [ 211.116991][ T7504] bridge_slave_1: left promiscuous mode [ 211.138038][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.691446][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 213.574981][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'. [ 213.721465][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.795326][ T7536] ipvlan1: entered promiscuous mode [ 213.822523][ T7536] ipvlan1: entered allmulticast mode [ 213.836973][ T50] Bluetooth: hci0: unexpected event 0x04 length: 47 > 10 [ 213.837004][ T50] Bluetooth: unknown link type 255 [ 213.852418][ T50] Bluetooth: hci0: connection err: -111 [ 213.869971][ T7536] veth0_vlan: entered allmulticast mode [ 215.802065][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 218.101610][ T7579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'. [ 218.256255][ T7523] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 218.694055][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.416'. [ 219.694229][ T7621] FAULT_INJECTION: forcing a failure. [ 219.694229][ T7621] name failslab, interval 1, probability 0, space 0, times 0 [ 219.813644][ T7621] CPU: 0 UID: 0 PID: 7621 Comm: syz.0.422 Tainted: G U syzkaller #0 PREEMPT(full) [ 219.813681][ T7621] Tainted: [U]=USER [ 219.813688][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.813703][ T7621] Call Trace: [ 219.813710][ T7621] [ 219.813718][ T7621] dump_stack_lvl+0x100/0x190 [ 219.813747][ T7621] should_fail_ex.cold+0x5/0xa [ 219.813777][ T7621] should_failslab+0xc2/0x120 [ 219.813804][ T7621] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 219.813842][ T7621] ? skb_clone+0x190/0x400 [ 219.813872][ T7621] skb_clone+0x190/0x400 [ 219.813898][ T7621] netlink_deliver_tap+0xaed/0xcc0 [ 219.813935][ T7621] netlink_unicast+0x62b/0x850 [ 219.813971][ T7621] ? __pfx_netlink_unicast+0x10/0x10 [ 219.814002][ T7621] ? __build_skb_around+0x278/0x390 [ 219.814039][ T7621] ? is_vmalloc_addr+0x86/0xa0 [ 219.814079][ T7621] netlink_sendmsg+0x8b0/0xda0 [ 219.814115][ T7621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.814147][ T7621] ? __import_iovec+0x1d2/0x640 [ 219.814179][ T7621] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 219.814220][ T7621] ____sys_sendmsg+0x9e1/0xb70 [ 219.814250][ T7621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.814283][ T7621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.814327][ T7621] ___sys_sendmsg+0x190/0x1e0 [ 219.814363][ T7621] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.814428][ T7621] __sys_sendmsg+0x170/0x220 [ 219.814453][ T7621] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.814489][ T7621] ? rcu_is_watching+0x12/0xc0 [ 219.814521][ T7621] do_syscall_64+0x10b/0xf80 [ 219.814552][ T7621] ? clear_bhb_loop+0x40/0x90 [ 219.814580][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.814604][ T7621] RIP: 0033:0x7f4d7b39cdd9 [ 219.814621][ T7621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.814648][ T7621] RSP: 002b:00007f4d7c2b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.814669][ T7621] RAX: ffffffffffffffda RBX: 00007f4d7b615fa0 RCX: 00007f4d7b39cdd9 [ 219.814684][ T7621] RDX: 0000000004000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 219.814698][ T7621] RBP: 00007f4d7c2b0090 R08: 0000000000000000 R09: 0000000000000000 [ 219.814711][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.814724][ T7621] R13: 00007f4d7b616038 R14: 00007f4d7b615fa0 R15: 00007fff1e6d1908 [ 219.814753][ T7621] [ 220.106508][ T7617] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 221.607148][ T7613] FAULT_INJECTION: forcing a failure. [ 221.607148][ T7613] name fail_futex, interval 1, probability 0, space 0, times 0 [ 221.702779][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.4.417 Tainted: G U syzkaller #0 PREEMPT(full) [ 221.702817][ T7613] Tainted: [U]=USER [ 221.702825][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.702840][ T7613] Call Trace: [ 221.702847][ T7613] [ 221.702856][ T7613] dump_stack_lvl+0x100/0x190 [ 221.702885][ T7613] should_fail_ex.cold+0x5/0xa [ 221.702915][ T7613] get_futex_key+0x1d2/0x1510 [ 221.702942][ T7613] ? __pfx_get_futex_key+0x10/0x10 [ 221.702965][ T7613] ? lock_acquire+0x1b1/0x370 [ 221.703005][ T7613] futex_wake+0xea/0x530 [ 221.703038][ T7613] ? __pfx_futex_wake+0x10/0x10 [ 221.703069][ T7613] ? exit_mm_release+0x19/0x30 [ 221.703113][ T7613] do_futex+0x32b/0x350 [ 221.703139][ T7613] ? __pfx_do_futex+0x10/0x10 [ 221.703163][ T7613] ? __might_fault+0xc5/0x140 [ 221.703208][ T7613] mm_release+0x24a/0x2f0 [ 221.703239][ T7613] do_exit+0x707/0x2a60 [ 221.703281][ T7613] ? __pfx_do_exit+0x10/0x10 [ 221.703317][ T7613] ? do_raw_spin_lock+0x128/0x260 [ 221.703345][ T7613] ? find_held_lock+0x2b/0x80 [ 221.703375][ T7613] ? get_signal+0x7e0/0x21e0 [ 221.703409][ T7613] do_group_exit+0xd5/0x2a0 [ 221.703449][ T7613] get_signal+0x1ec7/0x21e0 [ 221.703489][ T7613] ? __pfx_get_signal+0x10/0x10 [ 221.703522][ T7613] ? do_futex+0x192/0x350 [ 221.703551][ T7613] arch_do_signal_or_restart+0x91/0x770 [ 221.703588][ T7613] ? find_held_lock+0x2b/0x80 [ 221.703619][ T7613] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 221.703664][ T7613] ? __pfx___x64_sys_futex+0x10/0x10 [ 221.703692][ T7613] ? rcu_is_watching+0x12/0xc0 [ 221.703725][ T7613] exit_to_user_mode_loop+0x86/0x4a0 [ 221.703748][ T7613] ? do_syscall_64+0x519/0xf80 [ 221.703783][ T7613] do_syscall_64+0x6f2/0xf80 [ 221.703814][ T7613] ? clear_bhb_loop+0x40/0x90 [ 221.703843][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.703867][ T7613] RIP: 0033:0x7fbadff9cdd9 [ 221.703887][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.703910][ T7613] RSP: 002b:00007fbade1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 221.703931][ T7613] RAX: fffffffffffffe00 RBX: 00007fbae0216188 RCX: 00007fbadff9cdd9 [ 221.703947][ T7613] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbae0216188 [ 221.703961][ T7613] RBP: 00007fbae0216180 R08: 0000000000000000 R09: 0000000000000000 [ 221.703982][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.703996][ T7613] R13: 00007fbae0216218 R14: 00007fff1bb76750 R15: 00007fff1bb76838 [ 221.704025][ T7613] [ 223.017440][ T7642] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 223.116521][ T7642] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 223.258728][ T7642] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 226.978890][ T7686] tipc: can't start tipc send workqueue [ 228.326152][ T7687] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 229.506806][ T7717] FAULT_INJECTION: forcing a failure. [ 229.506806][ T7717] name failslab, interval 1, probability 0, space 0, times 0 [ 229.695676][ T7717] CPU: 0 UID: 0 PID: 7717 Comm: syz.4.444 Tainted: G U syzkaller #0 PREEMPT(full) [ 229.695717][ T7717] Tainted: [U]=USER [ 229.695725][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.695741][ T7717] Call Trace: [ 229.695749][ T7717] [ 229.695759][ T7717] dump_stack_lvl+0x100/0x190 [ 229.695791][ T7717] should_fail_ex.cold+0x5/0xa [ 229.695823][ T7717] should_failslab+0xc2/0x120 [ 229.695857][ T7717] __kmalloc_cache_noprof+0x7a/0x6f0 [ 229.695894][ T7717] ? proc_self_get_link+0x189/0x1f0 [ 229.695928][ T7717] proc_self_get_link+0x189/0x1f0 [ 229.695957][ T7717] pick_link+0xac2/0x13c0 [ 229.695981][ T7717] ? __pfx_proc_self_get_link+0x10/0x10 [ 229.696013][ T7717] step_into_slowpath+0x9ba/0xf90 [ 229.696045][ T7717] ? __pfx_step_into_slowpath+0x10/0x10 [ 229.696076][ T7717] ? lookup_fast+0x2da/0x600 [ 229.696098][ T7717] ? inode_permission+0x374/0x620 [ 229.696141][ T7717] link_path_walk+0xf28/0x1cc0 [ 229.696178][ T7717] path_openat+0x1be/0x31a0 [ 229.696208][ T7717] ? kasan_save_stack+0x3f/0x50 [ 229.696231][ T7717] ? kasan_save_stack+0x30/0x50 [ 229.696254][ T7717] ? kasan_save_track+0x14/0x30 [ 229.696278][ T7717] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 229.696328][ T7717] ? __pfx_path_openat+0x10/0x10 [ 229.696376][ T7717] do_file_open+0x20e/0x430 [ 229.696412][ T7717] ? __pfx_do_file_open+0x10/0x10 [ 229.696464][ T7717] ? alloc_fd+0x476/0x790 [ 229.696498][ T7717] ? do_getname+0x191/0x390 [ 229.696539][ T7717] do_sys_openat2+0x10d/0x1e0 [ 229.696580][ T7717] ? __pfx_do_sys_openat2+0x10/0x10 [ 229.696630][ T7717] __x64_sys_openat+0x12d/0x210 [ 229.696671][ T7717] ? __pfx___x64_sys_openat+0x10/0x10 [ 229.696711][ T7717] ? ksys_write+0x1ac/0x250 [ 229.696744][ T7717] ? rcu_is_watching+0x12/0xc0 [ 229.696778][ T7717] do_syscall_64+0x10b/0xf80 [ 229.696812][ T7717] ? clear_bhb_loop+0x40/0x90 [ 229.696843][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.696868][ T7717] RIP: 0033:0x7fbadff5d60e [ 229.696889][ T7717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.696913][ T7717] RSP: 002b:00007fbae0d9cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.696937][ T7717] RAX: ffffffffffffffda RBX: 00007fbae0d9d6c0 RCX: 00007fbadff5d60e [ 229.696953][ T7717] RDX: 0000000000000002 RSI: 00007fbae0d9cf90 RDI: ffffffffffffff9c [ 229.696969][ T7717] RBP: 00007fbae0032d69 R08: 0000000000000000 R09: 0000000000000000 [ 229.696984][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.696999][ T7717] R13: 00007fbae0216038 R14: 00007fbae0215fa0 R15: 00007fff1bb76838 [ 229.697030][ T7717] [ 230.204820][ T7714] FAULT_INJECTION: forcing a failure. [ 230.204820][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 230.217549][ T7714] CPU: 0 UID: 0 PID: 7714 Comm: syz.0.443 Tainted: G U syzkaller #0 PREEMPT(full) [ 230.217589][ T7714] Tainted: [U]=USER [ 230.217597][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.217612][ T7714] Call Trace: [ 230.217621][ T7714] [ 230.217630][ T7714] dump_stack_lvl+0x100/0x190 [ 230.217662][ T7714] should_fail_ex.cold+0x5/0xa [ 230.217694][ T7714] should_failslab+0xc2/0x120 [ 230.217725][ T7714] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 230.217765][ T7714] ? security_inode_alloc+0x3b/0x2c0 [ 230.217807][ T7714] ? lockdep_init_map_type+0x5c/0x250 [ 230.217836][ T7714] security_inode_alloc+0x3b/0x2c0 [ 230.217880][ T7714] inode_init_always_gfp+0xcc0/0x1000 [ 230.217916][ T7714] alloc_inode+0x8e/0x250 [ 230.217956][ T7714] alloc_anon_inode+0x2a/0x3e0 [ 230.217991][ T7714] ioctx_alloc+0x4dc/0x21a0 [ 230.218037][ T7714] ? find_held_lock+0x2b/0x80 [ 230.218070][ T7714] ? __pfx_ioctx_alloc+0x10/0x10 [ 230.218114][ T7714] __x64_sys_io_setup+0xc9/0x220 [ 230.218154][ T7714] do_syscall_64+0x10b/0xf80 [ 230.218188][ T7714] ? clear_bhb_loop+0x40/0x90 [ 230.218219][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.218248][ T7714] RIP: 0033:0x7f4d7b39cdd9 [ 230.218268][ T7714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.218299][ T7714] RSP: 002b:00007f4d7c2b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 230.218323][ T7714] RAX: ffffffffffffffda RBX: 00007f4d7b615fa0 RCX: 00007f4d7b39cdd9 [ 230.218339][ T7714] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 230.218355][ T7714] RBP: 00007f4d7b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 230.218370][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.218386][ T7714] R13: 00007f4d7b616038 R14: 00007f4d7b615fa0 R15: 00007fff1e6d1908 [ 230.218417][ T7714] [ 231.541394][ T7727] zswap: compressor not available [ 231.561439][ T7734] random: crng reseeded on system resumption [ 232.139016][ T7742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.448'. [ 232.212919][ T7742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.326241][ T7742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.427478][ T7710] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 233.945697][ T7762] FAULT_INJECTION: forcing a failure. [ 233.945697][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 234.012292][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.4.453 Tainted: G U syzkaller #0 PREEMPT(full) [ 234.012336][ T7762] Tainted: [U]=USER [ 234.012345][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.012360][ T7762] Call Trace: [ 234.012368][ T7762] [ 234.012378][ T7762] dump_stack_lvl+0x100/0x190 [ 234.012411][ T7762] should_fail_ex.cold+0x5/0xa [ 234.012441][ T7762] should_failslab+0xc2/0x120 [ 234.012470][ T7762] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 234.012511][ T7762] ? __d_alloc+0x34/0xa40 [ 234.012550][ T7762] __d_alloc+0x34/0xa40 [ 234.012586][ T7762] d_alloc_parallel+0x111/0x14e0 [ 234.012618][ T7762] ? find_held_lock+0x2b/0x80 [ 234.012649][ T7762] ? __d_lookup+0x25c/0x4a0 [ 234.012673][ T7762] ? __pfx_d_alloc_parallel+0x10/0x10 [ 234.012701][ T7762] ? __d_lookup+0x266/0x4a0 [ 234.012731][ T7762] lookup_open.isra.0+0x57c/0x11b0 [ 234.012762][ T7762] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 234.012804][ T7762] ? mnt_get_write_access+0x1e9/0x2f0 [ 234.012854][ T7762] path_openat+0xa98/0x31a0 [ 234.012913][ T7762] ? __pfx_path_openat+0x10/0x10 [ 234.013191][ T7762] do_file_open+0x20e/0x430 [ 234.013236][ T7762] ? __pfx_do_file_open+0x10/0x10 [ 234.013280][ T7762] ? __pfx_kfree_link+0x10/0x10 [ 234.013314][ T7762] ? alloc_fd+0x476/0x790 [ 234.013348][ T7762] ? do_getname+0x191/0x390 [ 234.013389][ T7762] do_sys_openat2+0x10d/0x1e0 [ 234.013430][ T7762] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.013472][ T7762] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 234.013504][ T7762] __x64_sys_openat+0x12d/0x210 [ 234.013554][ T7762] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.013594][ T7762] ? do_getpgid+0x101/0x2e0 [ 234.013626][ T7762] ? rcu_is_watching+0x12/0xc0 [ 234.013660][ T7762] do_syscall_64+0x10b/0xf80 [ 234.013694][ T7762] ? clear_bhb_loop+0x40/0x90 [ 234.013725][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.013750][ T7762] RIP: 0033:0x7fbadff5d60e [ 234.013771][ T7762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.013796][ T7762] RSP: 002b:00007fbae0d9cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.013819][ T7762] RAX: ffffffffffffffda RBX: 00007fbae0d9d6c0 RCX: 00007fbadff5d60e [ 234.013836][ T7762] RDX: 0000000000000002 RSI: 00007fbae0d9cf90 RDI: ffffffffffffff9c [ 234.013852][ T7762] RBP: 00007fbae0032d69 R08: 0000000000000000 R09: 0000000000000000 [ 234.013867][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.013883][ T7762] R13: 00007fbae0216038 R14: 00007fbae0215fa0 R15: 00007fff1bb76838 [ 234.013914][ T7762] [ 235.020303][ T5637] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 235.441265][ T7779] random: crng reseeded on system resumption [ 236.078594][ T50] Bluetooth: hci4: ISO packet too small [ 237.079661][ T5637] Bluetooth: hci4: command 0x0c1a tx timeout [ 238.274548][ T7810] FAULT_INJECTION: forcing a failure. [ 238.274548][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 238.363587][ T7810] CPU: 0 UID: 0 PID: 7810 Comm: syz.0.465 Tainted: G U syzkaller #0 PREEMPT(full) [ 238.363626][ T7810] Tainted: [U]=USER [ 238.363634][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.363661][ T7810] Call Trace: [ 238.363670][ T7810] [ 238.363678][ T7810] dump_stack_lvl+0x100/0x190 [ 238.363709][ T7810] should_fail_ex.cold+0x5/0xa [ 238.363748][ T7810] should_failslab+0xc2/0x120 [ 238.363777][ T7810] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 238.363818][ T7810] ? alloc_inode+0x68/0x250 [ 238.363857][ T7810] ? simple_start_creating+0xb0/0x110 [ 238.363886][ T7810] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 238.363925][ T7810] alloc_inode+0x68/0x250 [ 238.363965][ T7810] new_inode+0x22/0x1c0 [ 238.364006][ T7810] __debugfs_create_file+0x105/0x4f0 [ 238.364048][ T7810] debugfs_create_file_full+0x41/0x60 [ 238.364089][ T7810] drm_debugfs_clients_add+0xd9/0x210 [ 238.364127][ T7810] drm_file_alloc+0x5c6/0xb40 [ 238.364169][ T7810] drm_open_helper+0x1fc/0x540 [ 238.364210][ T7810] drm_open+0x1a0/0x3e0 [ 238.364247][ T7810] ? __pfx_drm_open+0x10/0x10 [ 238.364287][ T7810] drm_stub_open+0x20f/0x380 [ 238.364325][ T7810] ? __pfx_drm_stub_open+0x10/0x10 [ 238.364363][ T7810] chrdev_open+0x234/0x6a0 [ 238.364393][ T7810] ? __pfx_apparmor_file_open+0x10/0x10 [ 238.364433][ T7810] ? __pfx_chrdev_open+0x10/0x10 [ 238.364466][ T7810] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 238.364504][ T7810] do_dentry_open+0x6d8/0x1660 [ 238.364534][ T7810] ? __pfx_chrdev_open+0x10/0x10 [ 238.364572][ T7810] vfs_open+0x82/0x3f0 [ 238.364612][ T7810] path_openat+0x208c/0x31a0 [ 238.364652][ T7810] ? __pfx_path_openat+0x10/0x10 [ 238.364693][ T7810] do_file_open+0x20e/0x430 [ 238.364732][ T7810] ? __pfx_do_file_open+0x10/0x10 [ 238.364784][ T7810] ? alloc_fd+0x476/0x790 [ 238.364817][ T7810] ? do_getname+0x191/0x390 [ 238.364856][ T7810] do_sys_openat2+0x10d/0x1e0 [ 238.364895][ T7810] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.364936][ T7810] ? __fget_files+0x21f/0x3d0 [ 238.364970][ T7810] __x64_sys_openat+0x12d/0x210 [ 238.365031][ T7810] ? __pfx___x64_sys_openat+0x10/0x10 [ 238.365077][ T7810] ? rcu_is_watching+0x12/0xc0 [ 238.365112][ T7810] do_syscall_64+0x10b/0xf80 [ 238.365145][ T7810] ? clear_bhb_loop+0x40/0x90 [ 238.365176][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.365202][ T7810] RIP: 0033:0x7f4d7b39cdd9 [ 238.365222][ T7810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.365247][ T7810] RSP: 002b:00007f4d7c2b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.365271][ T7810] RAX: ffffffffffffffda RBX: 00007f4d7b615fa0 RCX: 00007f4d7b39cdd9 [ 238.365287][ T7810] RDX: 0000000000080802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 238.365304][ T7810] RBP: 00007f4d7b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 238.365319][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.365334][ T7810] R13: 00007f4d7b616038 R14: 00007f4d7b615fa0 R15: 00007fff1e6d1908 [ 238.365366][ T7810] [ 238.995213][ T7810] debugfs: out of free dentries, can not create file 'proc_info' [ 239.172212][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 241.839722][ T7861] vivid-007: ================= START STATUS ================= [ 241.897989][ T7861] vivid-007: Generate PTS: true [ 241.949022][ T7861] vivid-007: Generate SCR: true [ 241.983115][ T7861] tpg source WxH: 320x240 (Y'CbCr) [ 242.047418][ T7861] tpg field: 1 [ 242.140244][ T7861] tpg crop: (0,0)/320x240 [ 242.171765][ T7861] tpg compose: (0,0)/320x240 [ 242.217443][ T7861] tpg colorspace: 8 [ 242.279369][ T7861] tpg transfer function: 0/0 [ 242.325954][ T7861] tpg Y'CbCr encoding: 0/0 [ 242.374774][ T7861] tpg quantization: 0/0 [ 242.408105][ T7861] tpg RGB range: 0/2 [ 242.429101][ T7861] vivid-007: ================== END STATUS ================== [ 243.267728][ T7895] x_tables: duplicate underflow at hook 4 [ 246.374095][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.755213][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.967115][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.160948][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.281045][ T5643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.295650][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.303912][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.321374][ T5643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.331629][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.481787][ T12] bridge_slave_1: left allmulticast mode [ 248.520459][ T12] bridge_slave_1: left promiscuous mode [ 248.556958][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.667321][ T12] bridge_slave_0: left allmulticast mode [ 248.712616][ T12] bridge_slave_0: left promiscuous mode [ 248.742299][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.406894][ T5643] Bluetooth: hci4: command tx timeout [ 249.603052][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.642557][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.676673][ T12] bond0 (unregistering): Released all slaves [ 250.748077][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 251.312467][ T7988] netlink: 62 bytes leftover after parsing attributes in process `syz.2.502'. [ 251.482920][ T5643] Bluetooth: hci4: command tx timeout [ 251.519699][ T12] hsr_slave_0: left promiscuous mode [ 251.575429][ T12] hsr_slave_1: left promiscuous mode [ 251.600789][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.646832][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.689323][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.723905][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.764127][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 251.896148][ T12] veth1_macvtap: left promiscuous mode [ 251.943841][ T12] veth0_macvtap: left promiscuous mode [ 251.976038][ T12] veth1_vlan: left promiscuous mode [ 252.009154][ T12] veth0_vlan: left promiscuous mode [ 252.910515][ T12] team0 (unregistering): Port device team_slave_1 removed [ 252.972595][ T12] team0 (unregistering): Port device team_slave_0 removed [ 253.558840][ T5643] Bluetooth: hci4: command tx timeout [ 254.956738][ T8043] bond0: Unable to set down delay as MII monitoring is disabled [ 255.350212][ T7932] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.378022][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.414556][ T7932] bridge_slave_0: entered allmulticast mode [ 255.451637][ T7932] bridge_slave_0: entered promiscuous mode [ 255.620602][ T7932] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.640128][ T5643] Bluetooth: hci4: command tx timeout [ 255.664269][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.697522][ T7932] bridge_slave_1: entered allmulticast mode [ 255.726324][ T7932] bridge_slave_1: entered promiscuous mode [ 255.801348][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.809577][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.878941][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 256.292487][ T7932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.349834][ T7932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.362211][ T8039] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 256.561496][ T7932] team0: Port device team_slave_0 added [ 256.587419][ T7932] team0: Port device team_slave_1 added [ 256.766829][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.804134][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.917021][ T7932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.034165][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.075536][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.245078][ T7932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.723693][ T7932] hsr_slave_0: entered promiscuous mode [ 257.760481][ T7932] hsr_slave_1: entered promiscuous mode [ 257.811165][ T7932] debugfs: 'hsr0' already exists in 'hsr' [ 257.855545][ T7932] Cannot create hsr debugfs directory [ 258.562778][ T8090] FAULT_INJECTION: forcing a failure. [ 258.562778][ T8090] name failslab, interval 1, probability 0, space 0, times 0 [ 258.634052][ T8090] CPU: 0 UID: 0 PID: 8090 Comm: syz.1.515 Tainted: G U syzkaller #0 PREEMPT(full) [ 258.634101][ T8090] Tainted: [U]=USER [ 258.634112][ T8090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.634131][ T8090] Call Trace: [ 258.634138][ T8090] [ 258.634148][ T8090] dump_stack_lvl+0x100/0x190 [ 258.634179][ T8090] should_fail_ex.cold+0x5/0xa [ 258.634218][ T8090] should_failslab+0xc2/0x120 [ 258.634248][ T8090] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 258.634289][ T8090] ? security_inode_alloc+0x3b/0x2c0 [ 258.634334][ T8090] ? lockdep_init_map_type+0x5c/0x250 [ 258.634364][ T8090] security_inode_alloc+0x3b/0x2c0 [ 258.634407][ T8090] inode_init_always_gfp+0xcc0/0x1000 [ 258.634444][ T8090] alloc_inode+0x8e/0x250 [ 258.634484][ T8090] alloc_anon_inode+0x2a/0x3e0 [ 258.634519][ T8090] ioctx_alloc+0x4dc/0x21a0 [ 258.634566][ T8090] ? find_held_lock+0x2b/0x80 [ 258.634599][ T8090] ? __pfx_ioctx_alloc+0x10/0x10 [ 258.634643][ T8090] __x64_sys_io_setup+0xc9/0x220 [ 258.634683][ T8090] do_syscall_64+0x10b/0xf80 [ 258.634716][ T8090] ? clear_bhb_loop+0x40/0x90 [ 258.634747][ T8090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.634773][ T8090] RIP: 0033:0x7fe9bd79cdd9 [ 258.634793][ T8090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.634830][ T8090] RSP: 002b:00007fe9bb9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 258.634853][ T8090] RAX: ffffffffffffffda RBX: 00007fe9bda15fa0 RCX: 00007fe9bd79cdd9 [ 258.634869][ T8090] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 258.634884][ T8090] RBP: 00007fe9bd832d69 R08: 0000000000000000 R09: 0000000000000000 [ 258.634899][ T8090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.634913][ T8090] R13: 00007fe9bda16038 R14: 00007fe9bda15fa0 R15: 00007fff7cb8c1d8 [ 258.634943][ T8090] [ 259.427756][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 262.648691][ T7932] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 262.701351][ T7932] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.767634][ T7932] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.812393][ T7932] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.856025][ T7932] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.920212][ T7932] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.019663][ T7932] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.059640][ T7932] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.020383][ T7932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.140556][ T7932] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.243493][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.250760][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.437486][ T8178] FAULT_INJECTION: forcing a failure. [ 264.437486][ T8178] name failslab, interval 1, probability 0, space 0, times 0 [ 264.520473][ T8178] CPU: 0 UID: 0 PID: 8178 Comm: syz.1.527 Tainted: G U syzkaller #0 PREEMPT(full) [ 264.520512][ T8178] Tainted: [U]=USER [ 264.520520][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.520535][ T8178] Call Trace: [ 264.520543][ T8178] [ 264.520551][ T8178] dump_stack_lvl+0x100/0x190 [ 264.520582][ T8178] should_fail_ex.cold+0x5/0xa [ 264.520613][ T8178] should_failslab+0xc2/0x120 [ 264.520641][ T8178] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 264.520688][ T8178] ? security_inode_alloc+0x3b/0x2c0 [ 264.520729][ T8178] ? lockdep_init_map_type+0x5c/0x250 [ 264.520758][ T8178] security_inode_alloc+0x3b/0x2c0 [ 264.520800][ T8178] inode_init_always_gfp+0xcc0/0x1000 [ 264.520855][ T8178] alloc_inode+0x8e/0x250 [ 264.520895][ T8178] alloc_anon_inode+0x2a/0x3e0 [ 264.520930][ T8178] ioctx_alloc+0x4dc/0x21a0 [ 264.520977][ T8178] ? find_held_lock+0x2b/0x80 [ 264.521010][ T8178] ? __pfx_ioctx_alloc+0x10/0x10 [ 264.521054][ T8178] __x64_sys_io_setup+0xc9/0x220 [ 264.521093][ T8178] do_syscall_64+0x10b/0xf80 [ 264.521128][ T8178] ? clear_bhb_loop+0x40/0x90 [ 264.521158][ T8178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.521183][ T8178] RIP: 0033:0x7fe9bd79cdd9 [ 264.521204][ T8178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.521229][ T8178] RSP: 002b:00007fe9bb9d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 264.521253][ T8178] RAX: ffffffffffffffda RBX: 00007fe9bda16090 RCX: 00007fe9bd79cdd9 [ 264.521270][ T8178] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 264.521286][ T8178] RBP: 00007fe9bd832d69 R08: 0000000000000000 R09: 0000000000000000 [ 264.521301][ T8178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.521316][ T8178] R13: 00007fe9bda16128 R14: 00007fe9bda16090 R15: 00007fff7cb8c1d8 [ 264.521348][ T8178] [ 264.860787][ T7932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.871238][ T7932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.937716][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.944984][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.334048][ T8217] bond0: Unable to set down delay as MII monitoring is disabled [ 266.844800][ T7932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.551636][ T8257] FAULT_INJECTION: forcing a failure. [ 267.551636][ T8257] name fail_futex, interval 1, probability 0, space 0, times 0 [ 267.643666][ T8257] CPU: 0 UID: 0 PID: 8257 Comm: syz.1.539 Tainted: G U syzkaller #0 PREEMPT(full) [ 267.643707][ T8257] Tainted: [U]=USER [ 267.643715][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.643731][ T8257] Call Trace: [ 267.643739][ T8257] [ 267.643748][ T8257] dump_stack_lvl+0x100/0x190 [ 267.643786][ T8257] should_fail_ex.cold+0x5/0xa [ 267.643818][ T8257] get_futex_key+0x1d2/0x1510 [ 267.643846][ T8257] ? __pfx_get_futex_key+0x10/0x10 [ 267.643869][ T8257] ? futex_hash+0x2ad/0x370 [ 267.643894][ T8257] ? futex_hash+0x141/0x370 [ 267.643921][ T8257] futex_wake+0xea/0x530 [ 267.643954][ T8257] ? __pfx_futex_wait+0x10/0x10 [ 267.643991][ T8257] ? __pfx_futex_wake+0x10/0x10 [ 267.644026][ T8257] ? ksys_write+0x190/0x250 [ 267.644054][ T8257] ? ksys_write+0x190/0x250 [ 267.644088][ T8257] do_futex+0x32b/0x350 [ 267.644116][ T8257] ? __pfx_do_futex+0x10/0x10 [ 267.644141][ T8257] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.644188][ T8257] __x64_sys_futex+0x34f/0x4d0 [ 267.644217][ T8257] ? __x64_sys_close_range+0x30f/0x5d0 [ 267.644251][ T8257] ? __pfx___x64_sys_futex+0x10/0x10 [ 267.644280][ T8257] ? __pfx___x64_sys_close_range+0x10/0x10 [ 267.644317][ T8257] ? rcu_is_watching+0x12/0xc0 [ 267.644351][ T8257] do_syscall_64+0x10b/0xf80 [ 267.644385][ T8257] ? clear_bhb_loop+0x40/0x90 [ 267.644415][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.644441][ T8257] RIP: 0033:0x7fe9bd79cdd9 [ 267.644468][ T8257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.644494][ T8257] RSP: 002b:00007fe9bb9d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 267.644517][ T8257] RAX: ffffffffffffffda RBX: 00007fe9bda16098 RCX: 00007fe9bd79cdd9 [ 267.644534][ T8257] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe9bda1609c [ 267.644549][ T8257] RBP: 00007fe9bda16090 R08: 0000000000000001 R09: 0000000000000000 [ 267.644565][ T8257] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 267.644580][ T8257] R13: 00007fe9bda16128 R14: 00007fff7cb8c0f0 R15: 00007fff7cb8c1d8 [ 267.644612][ T8257] [ 268.166849][ T8215] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 269.233344][ T7932] veth0_vlan: entered promiscuous mode [ 269.531571][ T7932] veth1_vlan: entered promiscuous mode [ 269.716806][ T7932] veth0_macvtap: entered promiscuous mode [ 269.758175][ T7932] veth1_macvtap: entered promiscuous mode [ 270.160272][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.227742][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.347989][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.404170][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.460498][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.515846][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.583175][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.643018][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.785470][ T1354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.827788][ T1354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.514739][ T8358] FAULT_INJECTION: forcing a failure. [ 273.514739][ T8358] name failslab, interval 1, probability 0, space 0, times 0 [ 273.597308][ T8358] CPU: 0 UID: 0 PID: 8358 Comm: syz.1.551 Tainted: G U syzkaller #0 PREEMPT(full) [ 273.597348][ T8358] Tainted: [U]=USER [ 273.597356][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.597372][ T8358] Call Trace: [ 273.597380][ T8358] [ 273.597389][ T8358] dump_stack_lvl+0x100/0x190 [ 273.597420][ T8358] should_fail_ex.cold+0x5/0xa [ 273.597452][ T8358] should_failslab+0xc2/0x120 [ 273.597482][ T8358] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 273.597524][ T8358] ? __d_alloc+0x34/0xa40 [ 273.597558][ T8358] ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300 [ 273.597591][ T8358] __d_alloc+0x34/0xa40 [ 273.597627][ T8358] ? inode_set_ctime_current+0x283/0x870 [ 273.597666][ T8358] d_alloc_pseudo+0x1c/0xc0 [ 273.597690][ T8358] alloc_file_pseudo+0xcf/0x230 [ 273.597730][ T8358] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 273.597777][ T8358] ioctx_alloc+0x5d6/0x21a0 [ 273.597823][ T8358] ? find_held_lock+0x2b/0x80 [ 273.597857][ T8358] ? __pfx_ioctx_alloc+0x10/0x10 [ 273.597901][ T8358] __x64_sys_io_setup+0xc9/0x220 [ 273.597939][ T8358] do_syscall_64+0x10b/0xf80 [ 273.597973][ T8358] ? clear_bhb_loop+0x40/0x90 [ 273.598009][ T8358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.598035][ T8358] RIP: 0033:0x7fe9bd79cdd9 [ 273.598055][ T8358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.598080][ T8358] RSP: 002b:00007fe9bb9d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 273.598104][ T8358] RAX: ffffffffffffffda RBX: 00007fe9bda16090 RCX: 00007fe9bd79cdd9 [ 273.598120][ T8358] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 273.598136][ T8358] RBP: 00007fe9bd832d69 R08: 0000000000000000 R09: 0000000000000000 [ 273.598151][ T8358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.598166][ T8358] R13: 00007fe9bda16128 R14: 00007fe9bda16090 R15: 00007fff7cb8c1d8 [ 273.598197][ T8358] [ 274.630268][ T8371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.555'. [ 275.699471][ T8379] FAULT_INJECTION: forcing a failure. [ 275.699471][ T8379] name failslab, interval 1, probability 0, space 0, times 0 [ 275.744406][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.2.558 Tainted: G U syzkaller #0 PREEMPT(full) [ 275.744446][ T8379] Tainted: [U]=USER [ 275.744454][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.744469][ T8379] Call Trace: [ 275.744477][ T8379] [ 275.744487][ T8379] dump_stack_lvl+0x100/0x190 [ 275.744518][ T8379] should_fail_ex.cold+0x5/0xa [ 275.744550][ T8379] should_failslab+0xc2/0x120 [ 275.744580][ T8379] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 275.744621][ T8379] ? security_inode_alloc+0x3b/0x2c0 [ 275.744666][ T8379] ? lockdep_init_map_type+0x5c/0x250 [ 275.744696][ T8379] security_inode_alloc+0x3b/0x2c0 [ 275.744739][ T8379] inode_init_always_gfp+0xcc0/0x1000 [ 275.744776][ T8379] alloc_inode+0x8e/0x250 [ 275.744816][ T8379] alloc_anon_inode+0x2a/0x3e0 [ 275.744851][ T8379] ioctx_alloc+0x4dc/0x21a0 [ 275.744904][ T8379] ? find_held_lock+0x2b/0x80 [ 275.744938][ T8379] ? __pfx_ioctx_alloc+0x10/0x10 [ 275.744983][ T8379] __x64_sys_io_setup+0xc9/0x220 [ 275.745026][ T8379] do_syscall_64+0x10b/0xf80 [ 275.745059][ T8379] ? clear_bhb_loop+0x40/0x90 [ 275.745091][ T8379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.745116][ T8379] RIP: 0033:0x7f8f5419cdd9 [ 275.745136][ T8379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.745161][ T8379] RSP: 002b:00007f8f54fab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 275.745184][ T8379] RAX: ffffffffffffffda RBX: 00007f8f54415fa0 RCX: 00007f8f5419cdd9 [ 275.745200][ T8379] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 275.745216][ T8379] RBP: 00007f8f54232d69 R08: 0000000000000000 R09: 0000000000000000 [ 275.745233][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.745248][ T8379] R13: 00007f8f54416038 R14: 00007f8f54415fa0 R15: 00007ffc731f74e8 [ 275.745279][ T8379] [ 276.707625][ T8404] FAULT_INJECTION: forcing a failure. [ 276.707625][ T8404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.736986][ T8404] CPU: 0 UID: 0 PID: 8404 Comm: syz.4.565 Tainted: G U syzkaller #0 PREEMPT(full) [ 276.737024][ T8404] Tainted: [U]=USER [ 276.737032][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.737046][ T8404] Call Trace: [ 276.737054][ T8404] [ 276.737062][ T8404] dump_stack_lvl+0x100/0x190 [ 276.737093][ T8404] should_fail_ex.cold+0x5/0xa [ 276.737124][ T8404] _copy_from_user+0x2e/0xd0 [ 276.737149][ T8404] copy_msghdr_from_user+0x9f/0x4f0 [ 276.737186][ T8404] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 276.737227][ T8404] ? __pfx__kstrtoull+0x10/0x10 [ 276.737267][ T8404] ___sys_sendmsg+0x106/0x1e0 [ 276.737303][ T8404] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.737350][ T8404] ? find_held_lock+0x2b/0x80 [ 276.737399][ T8404] __sys_sendmmsg+0x205/0x430 [ 276.737429][ T8404] ? __pfx___sys_sendmmsg+0x10/0x10 [ 276.737465][ T8404] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.737513][ T8404] ? fput+0x79/0x100 [ 276.737545][ T8404] ? ksys_write+0x1ac/0x250 [ 276.737572][ T8404] ? __pfx_ksys_write+0x10/0x10 [ 276.737604][ T8404] __x64_sys_sendmmsg+0x9c/0x100 [ 276.737631][ T8404] ? lockdep_hardirqs_on+0x78/0x100 [ 276.737662][ T8404] do_syscall_64+0x10b/0xf80 [ 276.737694][ T8404] ? clear_bhb_loop+0x40/0x90 [ 276.737723][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.737752][ T8404] RIP: 0033:0x7fba8019cdd9 [ 276.737772][ T8404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.737795][ T8404] RSP: 002b:00007fba7e3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 276.737816][ T8404] RAX: ffffffffffffffda RBX: 00007fba80415fa0 RCX: 00007fba8019cdd9 [ 276.737832][ T8404] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 276.737846][ T8404] RBP: 00007fba7e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 276.737860][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.737874][ T8404] R13: 00007fba80416038 R14: 00007fba80415fa0 R15: 00007fffab6f84f8 [ 276.737903][ T8404] [ 277.344161][ T8411] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 277.355885][ T8412] FAULT_INJECTION: forcing a failure. [ 277.355885][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 277.369670][ T8411] netlink: 198 bytes leftover after parsing attributes in process `syz.4.569'. [ 277.405548][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.2.566 Tainted: G U syzkaller #0 PREEMPT(full) [ 277.405588][ T8412] Tainted: [U]=USER [ 277.405596][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.405611][ T8412] Call Trace: [ 277.405619][ T8412] [ 277.405628][ T8412] dump_stack_lvl+0x100/0x190 [ 277.405660][ T8412] should_fail_ex.cold+0x5/0xa [ 277.405691][ T8412] should_failslab+0xc2/0x120 [ 277.405722][ T8412] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 277.405769][ T8412] ? __d_alloc+0x34/0xa40 [ 277.405803][ T8412] ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300 [ 277.405836][ T8412] __d_alloc+0x34/0xa40 [ 277.405873][ T8412] ? inode_set_ctime_current+0x283/0x870 [ 277.405911][ T8412] d_alloc_pseudo+0x1c/0xc0 [ 277.405936][ T8412] alloc_file_pseudo+0xcf/0x230 [ 277.405976][ T8412] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 277.406023][ T8412] ioctx_alloc+0x5d6/0x21a0 [ 277.406069][ T8412] ? find_held_lock+0x2b/0x80 [ 277.406103][ T8412] ? __pfx_ioctx_alloc+0x10/0x10 [ 277.406147][ T8412] __x64_sys_io_setup+0xc9/0x220 [ 277.406186][ T8412] do_syscall_64+0x10b/0xf80 [ 277.406225][ T8412] ? clear_bhb_loop+0x40/0x90 [ 277.406259][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.406284][ T8412] RIP: 0033:0x7f8f5419cdd9 [ 277.406305][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.406334][ T8412] RSP: 002b:00007f8f54fab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 277.406358][ T8412] RAX: ffffffffffffffda RBX: 00007f8f54415fa0 RCX: 00007f8f5419cdd9 [ 277.406375][ T8412] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 277.406391][ T8412] RBP: 00007f8f54232d69 R08: 0000000000000000 R09: 0000000000000000 [ 277.406406][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.406420][ T8412] R13: 00007f8f54416038 R14: 00007f8f54415fa0 R15: 00007ffc731f74e8 [ 277.406452][ T8412] [ 277.840477][ T8398] FAULT_INJECTION: forcing a failure. [ 277.840477][ T8398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.856303][ T8398] CPU: 0 UID: 0 PID: 8398 Comm: syz.1.563 Tainted: G U syzkaller #0 PREEMPT(full) [ 277.856342][ T8398] Tainted: [U]=USER [ 277.856358][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.856374][ T8398] Call Trace: [ 277.856382][ T8398] [ 277.856390][ T8398] dump_stack_lvl+0x100/0x190 [ 277.856422][ T8398] should_fail_ex.cold+0x5/0xa [ 277.856459][ T8398] _copy_to_user+0x32/0xd0 [ 277.856485][ T8398] snd_pcm_oss_read2+0x294/0x400 [ 277.856527][ T8398] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 277.856565][ T8398] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 277.856605][ T8398] snd_pcm_oss_read+0x5aa/0x730 [ 277.856650][ T8398] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 277.856689][ T8398] vfs_readv+0x5d8/0x8d0 [ 277.856723][ T8398] ? __pfx_vfs_readv+0x10/0x10 [ 277.856775][ T8398] ? __fget_files+0x21f/0x3d0 [ 277.856812][ T8398] ? do_readv+0x13e/0x340 [ 277.856836][ T8398] do_readv+0x13e/0x340 [ 277.856862][ T8398] ? __pfx_do_readv+0x10/0x10 [ 277.856890][ T8398] ? rcu_is_watching+0x12/0xc0 [ 277.856925][ T8398] do_syscall_64+0x10b/0xf80 [ 277.856959][ T8398] ? clear_bhb_loop+0x40/0x90 [ 277.856990][ T8398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.857015][ T8398] RIP: 0033:0x7fe9bd79cdd9 [ 277.857035][ T8398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.857060][ T8398] RSP: 002b:00007fe9bb9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 277.857083][ T8398] RAX: ffffffffffffffda RBX: 00007fe9bda15fa0 RCX: 00007fe9bd79cdd9 [ 277.857100][ T8398] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000006 [ 277.857115][ T8398] RBP: 00007fe9bd832d69 R08: 0000000000000000 R09: 0000000000000000 [ 277.857130][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.857145][ T8398] R13: 00007fe9bda16038 R14: 00007fe9bda15fa0 R15: 00007fff7cb8c1d8 [ 277.857176][ T8398] [ 278.701395][ T8429] NFSD: Failed to start, no listeners configured. [ 282.345163][ T8460] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 283.133277][ T8502] FAULT_INJECTION: forcing a failure. [ 283.133277][ T8502] name failslab, interval 1, probability 0, space 0, times 0 [ 283.216611][ T8502] CPU: 0 UID: 0 PID: 8502 Comm: syz.1.591 Tainted: G U syzkaller #0 PREEMPT(full) [ 283.216651][ T8502] Tainted: [U]=USER [ 283.216658][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.216673][ T8502] Call Trace: [ 283.216680][ T8502] [ 283.216689][ T8502] dump_stack_lvl+0x100/0x190 [ 283.216720][ T8502] should_fail_ex.cold+0x5/0xa [ 283.216751][ T8502] should_failslab+0xc2/0x120 [ 283.216781][ T8502] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 283.216821][ T8502] ? mas_preallocate+0x1105/0x14a0 [ 283.216871][ T8502] mas_preallocate+0x1105/0x14a0 [ 283.216915][ T8502] ? __pfx_mas_preallocate+0x10/0x10 [ 283.216981][ T8502] ? anon_vma_name+0x5a/0x250 [ 283.217021][ T8502] __split_vma+0x33d/0xd90 [ 283.217063][ T8502] ? __pfx___split_vma+0x10/0x10 [ 283.217108][ T8502] ? __pfx_mas_prev+0x10/0x10 [ 283.217152][ T8502] vms_gather_munmap_vmas+0x3a5/0x1720 [ 283.217199][ T8502] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 283.217249][ T8502] ? mas_walk+0x6ef/0x9b0 [ 283.217298][ T8502] __mmap_region+0x4aa/0x2da0 [ 283.217340][ T8502] ? tomoyo_path_perm+0x29c/0x460 [ 283.217368][ T8502] ? __pfx___mmap_region+0x10/0x10 [ 283.217410][ T8502] ? __lock_acquire+0x4a5/0x2630 [ 283.217465][ T8502] ? __lock_acquire+0x4a5/0x2630 [ 283.217489][ T8502] ? do_raw_spin_unlock+0x145/0x1e0 [ 283.217538][ T8502] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 283.217586][ T8502] ? rcu_is_watching+0x12/0xc0 [ 283.217617][ T8502] ? trace_hrtimer_start+0x79/0x230 [ 283.217648][ T8502] ? hrtimer_start_range_ns+0x860/0x1a50 [ 283.217681][ T8502] ? find_held_lock+0x2b/0x80 [ 283.217713][ T8502] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 283.217747][ T8502] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 283.217783][ T8502] ? rcu_is_watching+0x12/0xc0 [ 283.217813][ T8502] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 283.217847][ T8502] ? lockdep_hardirqs_on+0x78/0x100 [ 283.217914][ T8502] ? futex_unqueue+0x133/0x2c0 [ 283.217948][ T8502] mmap_region+0x35d/0x620 [ 283.217972][ T8502] ? rcu_is_watching+0x12/0xc0 [ 283.218002][ T8502] ? __pfx_mmap_region+0x10/0x10 [ 283.218029][ T8502] ? cap_mmap_addr+0x4b/0x120 [ 283.218066][ T8502] ? bpf_lsm_mmap_addr+0x9/0x30 [ 283.218090][ T8502] ? security_mmap_addr+0x71/0x1e0 [ 283.218119][ T8502] ? __get_unmapped_area+0x255/0x3e0 [ 283.218155][ T8502] do_mmap+0xc63/0x12f0 [ 283.218204][ T8502] ? __pfx_do_mmap+0x10/0x10 [ 283.218233][ T8502] ? __pfx_down_write_killable+0x10/0x10 [ 283.218300][ T8502] vm_mmap_pgoff+0x29e/0x470 [ 283.218337][ T8502] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 283.218370][ T8502] ? do_futex+0x192/0x350 [ 283.218397][ T8502] ? __pfx_do_futex+0x10/0x10 [ 283.218428][ T8502] ksys_mmap_pgoff+0xe4/0x610 [ 283.218458][ T8502] ? __x64_sys_futex+0x358/0x4d0 [ 283.218485][ T8502] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 283.218514][ T8502] ? xfd_validate_state+0x129/0x190 [ 283.218545][ T8502] __x64_sys_mmap+0x125/0x190 [ 283.218575][ T8502] do_syscall_64+0x10b/0xf80 [ 283.218607][ T8502] ? clear_bhb_loop+0x40/0x90 [ 283.218637][ T8502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.218661][ T8502] RIP: 0033:0x7fe9bd79cdd9 [ 283.218682][ T8502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.218706][ T8502] RSP: 002b:00007fe9bb9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 283.218729][ T8502] RAX: ffffffffffffffda RBX: 00007fe9bda16090 RCX: 00007fe9bd79cdd9 [ 283.218745][ T8502] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000000 [ 283.218759][ T8502] RBP: 00007fe9bd832d69 R08: 0000000000000005 R09: 0000000000000000 [ 283.218774][ T8502] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 283.218789][ T8502] R13: 00007fe9bda16128 R14: 00007fe9bda16090 R15: 00007fff7cb8c1d8 [ 283.218819][ T8502] [ 285.670427][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 285.934545][ T8531] bond0: Unable to set down delay as MII monitoring is disabled [ 286.765821][ T8547] FAULT_INJECTION: forcing a failure. [ 286.765821][ T8547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.883445][ T8547] CPU: 0 UID: 0 PID: 8547 Comm: syz.1.600 Tainted: G U syzkaller #0 PREEMPT(full) [ 286.883491][ T8547] Tainted: [U]=USER [ 286.883499][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.883514][ T8547] Call Trace: [ 286.883522][ T8547] [ 286.883530][ T8547] dump_stack_lvl+0x100/0x190 [ 286.883562][ T8547] should_fail_ex.cold+0x5/0xa [ 286.883590][ T8547] ? prepare_alloc_pages+0x16d/0x5f0 [ 286.883624][ T8547] should_fail_alloc_page+0xeb/0x140 [ 286.883657][ T8547] prepare_alloc_pages+0x1f0/0x5f0 [ 286.883694][ T8547] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 286.883740][ T8547] ? find_held_lock+0x2b/0x80 [ 286.883773][ T8547] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 286.883807][ T8547] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 286.883840][ T8547] ? find_held_lock+0x2b/0x80 [ 286.883877][ T8547] ? rcu_is_watching+0x12/0xc0 [ 286.883909][ T8547] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 286.883957][ T8547] ? __lock_acquire+0x4a5/0x2630 [ 286.883980][ T8547] ? __lock_acquire+0x4a5/0x2630 [ 286.884008][ T8547] ? css_rstat_updated+0x1ce/0x5a0 [ 286.884058][ T8547] ? lock_acquire+0x1b1/0x370 [ 286.884081][ T8547] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 286.884121][ T8547] ? policy_nodemask+0xed/0x4f0 [ 286.884153][ T8547] alloc_pages_mpol+0x1fb/0x540 [ 286.884184][ T8547] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 286.884216][ T8547] ? __lock_acquire+0x4a5/0x2630 [ 286.884242][ T8547] folio_alloc_mpol_noprof+0x36/0x260 [ 286.884279][ T8547] vma_alloc_folio_noprof+0xed/0x1d0 [ 286.884313][ T8547] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 286.884357][ T8547] do_anonymous_page+0xb46/0x2050 [ 286.884396][ T8547] ? rcu_read_unlock+0x2d/0xb0 [ 286.884442][ T8547] __handle_mm_fault+0x1d2c/0x2a00 [ 286.884497][ T8547] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 286.884529][ T8547] ? __pfx___handle_mm_fault+0x10/0x10 [ 286.884568][ T8547] ? pte_offset_map_lock+0x174/0x320 [ 286.884596][ T8547] ? find_held_lock+0x2b/0x80 [ 286.884636][ T8547] ? follow_page_pte+0x4d0/0x13f0 [ 286.884671][ T8547] handle_mm_fault+0x36d/0xa20 [ 286.884713][ T8547] __get_user_pages+0x1178/0x32a0 [ 286.884755][ T8547] ? __pfx___get_user_pages+0x10/0x10 [ 286.884793][ T8547] populate_vma_page_range+0x267/0x3f0 [ 286.884847][ T8547] ? __pfx_populate_vma_page_range+0x10/0x10 [ 286.884881][ T8547] ? __pfx_find_vma_intersection+0x10/0x10 [ 286.884913][ T8547] ? do_mmap+0x93f/0x12f0 [ 286.884947][ T8547] __mm_populate+0x107/0x3a0 [ 286.884981][ T8547] ? __pfx___mm_populate+0x10/0x10 [ 286.885027][ T8547] ? up_write+0x28c/0x4f0 [ 286.885058][ T8547] vm_mmap_pgoff+0x37f/0x470 [ 286.885094][ T8547] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 286.885128][ T8547] ? do_futex+0x192/0x350 [ 286.885155][ T8547] ? __pfx_do_futex+0x10/0x10 [ 286.885183][ T8547] ? fd_install+0x223/0x580 [ 286.885215][ T8547] ksys_mmap_pgoff+0xe4/0x610 [ 286.885245][ T8547] ? __x64_sys_futex+0x358/0x4d0 [ 286.885273][ T8547] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 286.885304][ T8547] ? xfd_validate_state+0x129/0x190 [ 286.885335][ T8547] __x64_sys_mmap+0x125/0x190 [ 286.885366][ T8547] do_syscall_64+0x10b/0xf80 [ 286.885400][ T8547] ? clear_bhb_loop+0x40/0x90 [ 286.885431][ T8547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.885457][ T8547] RIP: 0033:0x7fe9bd79cdd9 [ 286.885477][ T8547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.885504][ T8547] RSP: 002b:00007fe9bb9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 286.885528][ T8547] RAX: ffffffffffffffda RBX: 00007fe9bda16180 RCX: 00007fe9bd79cdd9 [ 286.885545][ T8547] RDX: 00000000000000e2 RSI: 0000000000040009 RDI: 0000000000000000 [ 286.885561][ T8547] RBP: 00007fe9bd832d69 R08: 0000000000000007 R09: 0000000000028000 [ 286.885576][ T8547] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 286.885591][ T8547] R13: 00007fe9bda16218 R14: 00007fe9bda16180 R15: 00007fff7cb8c1d8 [ 286.885622][ T8547] [ 287.440029][ T8529] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 288.160982][ T5643] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 288.438744][ T31] INFO: task syz.3.161:6513 blocked for more than 142 seconds. [ 288.447052][ T31] Tainted: G U syzkaller #0 [ 288.454302][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 288.485954][ T31] task:syz.3.161 state:D stack:25296 pid:6513 tgid:6512 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 288.544651][ T31] Call Trace: [ 288.556274][ T31] [ 288.565945][ T31] __schedule+0x10e9/0x6820 [ 288.582103][ T31] ? __pfx___schedule+0x10/0x10 [ 288.592797][ T31] ? find_held_lock+0x2b/0x80 [ 288.605354][ T31] ? schedule+0x2bf/0x390 [ 288.615435][ T31] ? kvm_swap_active_memslots+0x2a2/0x7c0 [ 288.628336][ T31] schedule+0xdd/0x390 [ 288.636778][ T31] kvm_swap_active_memslots+0x2e0/0x7c0 [ 288.649036][ T31] kvm_set_memslot+0xbde/0x1740 [ 288.660659][ T31] ? kasan_save_track+0x14/0x30 [ 288.666376][ T31] kvm_set_memory_region+0xe1c/0x1570 [ 288.672300][ T31] kvm_set_internal_memslot+0x9f/0xf0 [ 288.678007][ T31] __x86_set_memory_region+0x2f6/0x730 [ 288.688387][ T31] ? __pfx___x86_set_memory_region+0x10/0x10 [ 288.694554][ T31] ? __asan_memset+0x23/0x50 [ 288.799770][ T31] ? alloc_loaded_vmcs+0x1b8/0x2e0 [ 288.881339][ T31] kvm_alloc_apic_access_page+0xad/0x120 [ 288.910613][ T31] vmx_vcpu_create+0x79b/0xb90 [ 288.936217][ T31] ? intel_pmu_init+0x3ac/0x560 [ 288.956691][ T31] ? __pfx_vmx_vcpu_create+0x10/0x10 [ 288.978416][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.999708][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 289.026182][ T31] kvm_arch_vcpu_create+0x683/0xac0 [ 289.043242][ T31] kvm_vm_ioctl+0x756/0x4050 [ 289.057096][ T31] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 289.070283][ T31] ? kasan_quarantine_put+0x104/0x240 [ 289.088303][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 289.093593][ T31] ? find_held_lock+0x2b/0x80 [ 289.108347][ T31] ? tomoyo_path_number_perm+0x28f/0x580 [ 289.116015][ T31] ? tomoyo_path_number_perm+0x28f/0x580 [ 289.136041][ T31] ? tomoyo_path_number_perm+0x188/0x580 [ 289.158406][ T31] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 289.179714][ T31] ? futex_wake+0x1ad/0x530 [ 289.185374][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.198304][ T31] ? do_vfs_ioctl+0x226/0x13e0 [ 289.208522][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 289.220038][ T31] ? find_held_lock+0x2b/0x80 [ 289.234252][ T31] ? __fget_files+0x215/0x3d0 [ 289.248484][ T31] ? hook_file_ioctl_common+0x149/0x410 [ 289.258752][ T31] ? __fget_files+0x21f/0x3d0 [ 289.268503][ T31] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 289.278473][ T31] __x64_sys_ioctl+0x18e/0x210 [ 289.288755][ T31] do_syscall_64+0x10b/0xf80 [ 289.298851][ T31] ? clear_bhb_loop+0x40/0x90 [ 289.308483][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.321683][ T31] RIP: 0033:0x7f1e3479cdd9 [ 289.331647][ T31] RSP: 002b:00007f1e35587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.353490][ T31] RAX: ffffffffffffffda RBX: 00007f1e34a15fa0 RCX: 00007f1e3479cdd9 [ 289.365338][ T5622] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 289.375405][ T31] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000003 [ 289.387912][ T31] RBP: 00007f1e34832d69 R08: 0000000000000000 R09: 0000000000000000 [ 289.408904][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.426954][ T5622] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 289.435553][ T31] R13: 00007f1e34a16038 R14: 00007f1e34a15fa0 R15: 00007ffdae2180f8 [ 289.444691][ T31] [ 289.520192][ T31] [ 289.520192][ T31] Showing all locks held in the system: [ 289.533763][ T8558] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 289.608582][ T31] 1 lock held by pool_workqueue_/3: [ 289.617082][ T8558] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 289.642925][ T31] 3 locks held by kworker/0:1/10: [ 289.658398][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 289.669050][ T8558] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 289.701864][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2d69/0x6820 [ 289.730492][ T31] #2: ffff888027863958 (&helper->damage_lock){....}-{3:3}, at: drm_fb_helper_damage_work+0x1ce/0x640 [ 289.769784][ T31] 1 lock held by khungtaskd/31: [ 289.788059][ T31] #0: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 289.824099][ T31] 3 locks held by kworker/u8:4/62: [ 289.838248][ T31] #0: ffff88813fe9c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 289.859984][ T31] #1: ffffc9000202fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 289.890933][ T31] #2: ffffffff9060e760 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 289.910013][ T31] 2 locks held by getty/5381: [ 289.923326][ T31] #0: ffff888034d5e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 289.948247][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 289.978318][ T31] 2 locks held by syz-executor/5626: [ 289.983779][ T31] #0: ffffffff9060e760 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 289.994439][ T31] #1: ffffffff8e7f0e28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 290.004884][ T31] 2 locks held by syz.3.161/6513: [ 290.010119][ T31] #0: ffff88802c2a00a0 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_alloc_apic_access_page+0x27/0x120 [ 290.021091][ T31] #1: ffff88802c2a0128 (&kvm->slots_arch_lock){+.+.}-{4:4}, at: kvm_set_memslot+0x34/0x1740 [ 290.037244][ T31] 4 locks held by syz.2.198/6651: [ 290.042947][ T31] #0: ffff888037978ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 290.053277][ T31] #1: ffff8880379780b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 290.064022][ T31] #2: ffffffff90894880 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 290.074396][ T31] #3: ffff88807d35f2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 290.084071][ T31] 2 locks held by syz.4.599/8536: [ 290.089284][ T31] #0: ffffffff905f5a28 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 290.098999][ T31] #1: ffffffff9060e760 (rtnl_mutex){+.+.}-{4:4}, at: fib_net_exit_batch+0x15/0x130 [ 290.166960][ T31] [ 290.178051][ T31] ============================================= [ 290.178051][ T31] [ 290.252871][ T31] NMI backtrace for cpu 0 [ 290.252894][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 290.252927][ T31] Tainted: [U]=USER [ 290.252935][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 290.252949][ T31] Call Trace: [ 290.252956][ T31] [ 290.252965][ T31] dump_stack_lvl+0x100/0x190 [ 290.252995][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 290.253025][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.253052][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 290.253079][ T31] sys_info+0x141/0x190 [ 290.253115][ T31] watchdog+0xcb1/0x1030 [ 290.253155][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 290.253186][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.253222][ T31] ? __kthread_parkme+0x18c/0x230 [ 290.253258][ T31] ? kthread+0x13a/0x450 [ 290.253277][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.253310][ T31] kthread+0x370/0x450 [ 290.253330][ T31] ? __pfx_kthread+0x10/0x10 [ 290.253352][ T31] ret_from_fork+0x72b/0xd50 [ 290.253379][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.253406][ T31] ? __switch_to+0x800/0x1100 [ 290.253440][ T31] ? __switch_to_asm+0x39/0x70 [ 290.253472][ T31] ? __pfx_kthread+0x10/0x10 [ 290.253494][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.253540][ T31] [ 290.651070][ T6651] EXT4-fs (sda1): pa ffff888077d9e658: logic 0, phys. 94208, len 2048 [ 290.659655][ T6651] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:5458: group 2, free 1790, pa_free 1703 [ 290.740876][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.761236][ T6651] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 290.803279][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 290.810206][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 290.820916][ T31] Tainted: [U]=USER [ 290.824730][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 290.834793][ T31] Call Trace: [ 290.838081][ T31] [ 290.841019][ T31] dump_stack_lvl+0x100/0x190 [ 290.845712][ T31] vpanic+0x552/0x970 [ 290.849707][ T31] ? __pfx_vpanic+0x10/0x10 [ 290.854222][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 290.860394][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 290.866564][ T31] panic+0xd1/0xe0 [ 290.870308][ T31] ? __pfx_panic+0x10/0x10 [ 290.874736][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 290.880899][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 290.887059][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 290.893233][ T31] ? watchdog.cold+0x1ec/0x234 [ 290.898014][ T31] ? watchdog+0xcc1/0x1030 [ 290.902458][ T31] watchdog.cold+0x1fd/0x234 [ 290.907080][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 290.912918][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.917635][ T31] ? __kthread_parkme+0x18c/0x230 [ 290.922710][ T31] ? kthread+0x13a/0x450 [ 290.926967][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.931672][ T31] kthread+0x370/0x450 [ 290.935756][ T31] ? __pfx_kthread+0x10/0x10 [ 290.940366][ T31] ret_from_fork+0x72b/0xd50 [ 290.944977][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.950099][ T31] ? __switch_to+0x800/0x1100 [ 290.954793][ T31] ? __switch_to_asm+0x39/0x70 [ 290.959576][ T31] ? __pfx_kthread+0x10/0x10 [ 290.964189][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.968986][ T31] [ 290.972085][ T31] Kernel Offset: disabled [ 290.976420][ T31] Rebooting in 86400 seconds..