last executing test programs: 1m15.950125202s ago: executing program 0 (id=1524): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x3, 0x8, 0xfff) prctl$auto(0x8, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) r1 = socket(0xa, 0x5, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(0x3, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mbind$auto(0x7fff, 0xb12, 0x200, &(0x7f00000000c0)=0x3, 0x4, 0x2) keyctl$auto(0x200, 0x0, 0x0, 0x0, 0x5) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f00000015c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000280)={0x12f4, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8000}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x3}, @NL802154_ATTR_PEER={0x113c, 0x28, 0x0, 0x1, [@generic="c9caa945b878692ce8ca8f464dbdad9e1490fddb0d75bf31ad2b3ff1950e57288568acd22788b31c12272ad67edf7897b9a16f66e778093ee91e51064e552012da6f3f4957a18d41bab100ea7a6c2108d1dd4bc9ec0480ac53724c65ecf1ac68ea9e10d70e59f5b8f848b74c75fac5d714e7ec262fdc98fbe62578", @generic="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", @generic="3a18db56b8e6c12cfa8c57ce1599d716bce05d07c5675ba76d31eb2e208e253d0cd371c866a392235f7ac7d8fb27571f344e8501f65132de3ecc3ef25456f030e0c05d4c9da3fbfcf36951c014cdb6805d976aaf33893076a701b2965ace242a9e4c3219682c4a5540d27c0d299bda8ff5", @nested={0x4a, 0x47, 0x0, 0x1, [@typed={0xc, 0x23, 0x0, 0x0, @u64=0x3ff}, @nested={0x4, 0x117}, @nested={0x4, 0xe2}, @typed={0x4, 0x11}, @generic="df6a4d486590e43bfbcb0122c25669b577a5997e9919a2a3d58bed066ba6b1d06f7e541d53e82f79e775fbd29057"]}]}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x16c, 0x19, 0x0, 0x1, [@nested={0x166, 0xdb, 0x0, 0x1, [@nested={0x4, 0x9f}, @generic="90e027324fc0e78149d85af8760f931bb8318ef7adf6e45c8fced467bb12e6e562c3d3db96b0a1fb446c803aaeb9b90efb47145d792b04006c91be32c353a311229c53fb9625c9d82760b877f694945712384d763718771e24f76c3f6d770f42349d7627abadda0403bdca36b31e404fb3aa4eb7c5a0e49ba4428f6dea9f42d1888a9c621f05ece73829a5a995b291f27f9f6050f9baf94691bc05befcc5375587efe3883413ec82b863d0e13b44cac7aae963a9cf3de4", @generic="bb28b05c39ef621b3a02a8781b27a669a05c431861412446989268a5c49e0e47f4cc47497910c7936fb391a2f316ecf89573ae085910a2bba7ce9cd3c21c17663046e989f128acbe42ad8dc067b6625f2478ba1593498ed5cb86d2c66be71e18845edd24d1e865e4c20c764f8670b6a6f6b9689f0af13bf85bf981b99c74035da6497b3fce0e4b36030f96262e6085821d14d6e75ad7f543f466b12a6f1d30bf18a670dd0e8ac8"]}]}, @NL802154_ATTR_COORDINATOR={0x14, 0x1e, 0x0, 0x1, [@typed={0x8, 0x152, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xa1, 0x0, 0x0, @uid}]}, @NL802154_ATTR_WPAN_PHY_NAME={0xb, 0x2, '-(v/!*\x00'}]}, 0x12f4}, 0x1, 0x0, 0x0, 0x8800}, 0x4040010) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, r4, 0x1b, 0x70bd25, 0x25dfdbf9, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xc, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x20002, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r5 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r5, 0x0, 0x0) write$auto(0x3, 0x0, 0x100000000) 1m14.059993482s ago: executing program 0 (id=1533): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x8400, 0x0) recvfrom$auto(r0, &(0x7f0000000040)="3626b52177def9fcee4411dca139e7e191a6a8e840ba679d62e7566ff418d7d34ce97857d99870ddc9be2c6aca5e55df3f5e2b2540dbbfb8b84ec0d3d69c501956618de2831fa3cfdad81f5e234e523721fba731ae3f0bd97a2727481b4377b5fdc4bc89449776069169349f5c6a445e0cbc9e04bcfb92d1da5b5c7d19d9d7770acc80eee6f84e", 0x3, 0x4, &(0x7f0000000100)=@llc={0x1a, 0x308, 0xf8, 0x8, 0xf8, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000140)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DISABLE_SE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x9}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}, @NFC_ATTR_DEVICE_NAME={0x26, 0x2, '/sys/kernel/security/tomoyo/query\x00'}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r1) r4 = dup$auto(r0) close_range$auto(r4, r1, 0x8000) r5 = semctl$auto(0x7fffffff, 0x2, 0x5, 0x18) kill$auto(r5, 0xc0000000) r6 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/ns/cgroup\x00', 0x200101, 0x0) mq_timedreceive$auto(r6, &(0x7f0000000380)='\x00', 0x2, &(0x7f00000003c0)=0x10001, &(0x7f0000000400)={0x1000, 0x10}) mknodat$auto(r4, &(0x7f0000000440)='./file0\x00', 0x3, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_GET(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2020000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_METER_ATTR_USED={0xc, 0x5, 0x1}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x2}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) io_uring_register$auto(r1, 0x1000, &(0x7f0000000580)="fbdc933fb44d8f16a8692e6e9aed1b4ee4d3bcdae0aa5a95d0698f79b5296b566afa753b1a026a5171657a375b67b48e1119be6b28516d74276712430d3bcb4a225097bf9a31d55274038508aad6785779b9021a011735874596e8f6fa46ba4a720c2835bea51285d4b60ac752df40bac21fd6b98538b3071de9c628ade1adda26d91fba34a21195a1687b2c10b8265054d6097f90c26489cc8ec54ee70d407267bed8bafa8e2be18291c54412eacc1c92aee7c5c4678318a8b041850e24ea6fe9da16b5bcc6bb7a2505d5acb63c2c3744b393adb97d93b63875f0ad0f", 0x0) preadv2$auto(r4, &(0x7f0000000740)={&(0x7f0000000680)="9741a12bb1450032e5628cf4b4ebe69512cdaf40375144e3f76794d825dd14658bd851a021cf77efdce39da3a98a2cce5f5f1767dfe47413fff05582d6330968d0832719a8adf2923e0f153e62b2391948aeac0767b75b0b12c612f5773a7a17ec469f97be61d9d9549075155e95eafabeb38cba0c2c7627274858c0f3e3329244c0486dd59759888c5a9e492eb7c4ce512c90cc78d806624ee72734a60e79bed14edd", 0x14}, 0x3, 0x10, 0x9, 0x9) r8 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000780)='/dev/mtd0ro\x00', 0x200, 0x0) ioctl$auto_BLKRRPART2(r8, 0x125f, 0x0) r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000800), r4) sendmsg$auto_NL802154_CMD_ASSOCIATE(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r9, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffffd}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'veth0_to_hsr\x00'}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xf0}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x4040000) r10 = fanotify_init$auto(0xffffffff, 0x19c) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000940), r10) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000980), 0x20400, 0x0) pselect6$auto(0x9, &(0x7f00000009c0)={[0x88, 0x100, 0x3, 0x1, 0x9, 0x1, 0x6, 0xff, 0x7, 0x6, 0x9, 0x9, 0x80000000, 0x40, 0x0, 0x9]}, &(0x7f0000000a40)={[0x1c0000000000, 0x80, 0x1620, 0x2, 0x6, 0x6, 0x8000000000000000, 0x228, 0x7, 0x9, 0x3ff, 0x7fa999be, 0x3, 0x6, 0xee0, 0x7]}, &(0x7f0000000ac0)={[0x8001, 0x9, 0xe85b, 0x2, 0x647, 0x0, 0xffffffffffffffff, 0x5, 0x7ff, 0x2, 0x4, 0x48a, 0xa, 0x10000, 0x3, 0x8]}, &(0x7f0000000b40)={0x0, 0x8}, &(0x7f0000000b80)="eef559d569de25b4d3f0d5a3f06b081c2eb6fd805cda2ee6a462e7f0131ee2b886c9c10208fb29b32f8f6a9f6916ecaad8d1e87394fa17d30fdc8bf699e1df") sendmsg$auto_NL80211_CMD_SET_MPATH(r7, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7f}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1ddffd4b734a48dff2df5875d48d0e1b7a2607c60f0f5301"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x20008081) setsockopt$auto_SO_BUSY_POLL(r1, 0x3, 0x2e, &(0x7f0000000cc0)='nl80211\x00', 0x3) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d40), r10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000d80)={'pim6reg0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r7, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x90, r11, 0x4, 0x7fff, 0x25dfdbfd, {}, [@ETHTOOL_A_PSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_C33_PSE_AVAIL_PW_LIMIT={0x8, 0xc, 0x1}, @ETHTOOL_A_PSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x401}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_C33_PSE_AVAIL_PW_LIMIT={0x8, 0xc, 0x235}, @ETHTOOL_A_PSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 1m13.843989082s ago: executing program 0 (id=1535): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) (async) ptrace$auto(0xc, r0, 0x7, 0xfffffffffffff6de) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") (async) socket(0x1e, 0x1, 0x0) (async) getpeername$auto(0x3, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 1m12.562353495s ago: executing program 0 (id=1540): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, 0x0, 0x51) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sethostname$auto(0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x3) socket(0x28, 0x4, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x440, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x11, r0, 0x0) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(r1, 0x0, 0x40, 0x0, 0x10000) mmap$auto(0x8000000000000, 0x2a, 0xdf, 0x9b72, r0, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x0, 0xe980, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram8/queue/rotational\x00', 0x109001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000200), 0xa0e01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) socketpair$auto(0x5b, 0x2, 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) 1m11.955774449s ago: executing program 0 (id=1551): mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x2000008000) r0 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x5bc) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x1, 0x7ff) ptrace$auto(0xc, r1, 0x9, 0xfffffffffffff6de) r2 = getpid() r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x4, 0xfffffffffffffffe, 0x0) bind$auto(0x3, 0xfffffffffffffffd, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0xfdef}, 0x3) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, 0x0, 0x4, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={@inferred=r1, 0xfff, 0x5, 0x3, "a4b67281c7adc342ff962acf3ad2317d7f2a1b42ee40780530a0d2e388d0bdebee2c1a8c536429c974e154c5", @inferred=r2}) unlink$auto(&(0x7f0000000380)='./file0\x00') close_range$auto(0x2, 0x8, 0x0) 1m11.039338289s ago: executing program 0 (id=1548): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) mmap$auto(0x0, 0x0, 0x1ff, 0xeb5, 0xfffffffffffffffa, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mprotect$auto(0x1000, 0x200000, 0x4) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x6, 0xfffffffffffffff8, 0x0, 0x0, 0xfffffffffffeffff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) ioctl$auto(r0, 0x0, r0) sysfs$auto(0x2, 0x5, 0x0) mprotect$auto(0x0, 0x806121, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/cec1/power/control\x00', 0x42802, 0x0) write$auto(r1, 0x0, 0x81) close_range$auto(0x2, r0, 0xffffffff) settimeofday$auto(&(0x7f0000000040)={0x9, 0x5}, &(0x7f00000001c0)={0x200, 0x3}) io_uring_register$auto_IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000200)="ac31ae44c5cb3c217b094ea8213c3f70b230a99d2d7492a4c44495cd833754fbf6191e46f1cfbc439dae26b500a50b2fb2125b8a9945a772f30699689f81bf6d917326bf5d42f9eb614119449df5345410439ea4684522658b60292556d94b304e4323ed0cf0ef022f6f4e0485bd9bee7eb76e85247976c5b2d6893093a7371a09b75ef49b69c18c911271afe354ead98c45b7b4aa5d813a9d19d327439bcbecdf867f904e71d862f7668d282ef520163ab814b888146dd96c7fd5f37a5c4b", 0x1) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b8063981, 0xfff6) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=' \\x', 0x3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) sendfile$auto(r3, r4, 0x0, 0x800048) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x4611, 0x0) 56.052100847s ago: executing program 32 (id=1548): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) mmap$auto(0x0, 0x0, 0x1ff, 0xeb5, 0xfffffffffffffffa, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mprotect$auto(0x1000, 0x200000, 0x4) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x6, 0xfffffffffffffff8, 0x0, 0x0, 0xfffffffffffeffff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) ioctl$auto(r0, 0x0, r0) sysfs$auto(0x2, 0x5, 0x0) mprotect$auto(0x0, 0x806121, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/cec1/power/control\x00', 0x42802, 0x0) write$auto(r1, 0x0, 0x81) close_range$auto(0x2, r0, 0xffffffff) settimeofday$auto(&(0x7f0000000040)={0x9, 0x5}, &(0x7f00000001c0)={0x200, 0x3}) io_uring_register$auto_IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000200)="ac31ae44c5cb3c217b094ea8213c3f70b230a99d2d7492a4c44495cd833754fbf6191e46f1cfbc439dae26b500a50b2fb2125b8a9945a772f30699689f81bf6d917326bf5d42f9eb614119449df5345410439ea4684522658b60292556d94b304e4323ed0cf0ef022f6f4e0485bd9bee7eb76e85247976c5b2d6893093a7371a09b75ef49b69c18c911271afe354ead98c45b7b4aa5d813a9d19d327439bcbecdf867f904e71d862f7668d282ef520163ab814b888146dd96c7fd5f37a5c4b", 0x1) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b8063981, 0xfff6) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=' \\x', 0x3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) sendfile$auto(r3, r4, 0x0, 0x800048) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x4611, 0x0) 14.799705993s ago: executing program 3 (id=1796): r0 = socket(0x21, 0x2, 0xa) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) fchdir$auto(r0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) socket(0x15, 0xa, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) fcntl$auto_F_CREATED_QUERY(r1, 0x404, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0) preadv2$auto(r2, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 14.419372169s ago: executing program 3 (id=1797): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xffffffff, 0x40000000000005, 0x301, 0x1d, 0xffffffffffffffff, 0x47ffc) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0xffffffffffffffff, 0x208000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x195901, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) select$auto(0x2d8, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x2, 0x80000300, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x8000000081, 0x10000005e58296b, 0x8, 0xfffffffffffff626, 0x7ff, 0x200, 0x20000000004, 0x4000000000004]}, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_ncsi(0x0, r0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040801}, 0x10) socket(0x2, 0x1, 0x106) socket(0x15, 0x5, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x7}, 0x9, 0x0) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x24004081) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd2$auto(0x7, 0x4a) ioctl$auto_I2C_SMBUS(r3, 0x720, 0x0) 13.133471697s ago: executing program 3 (id=1802): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0x8ffff, 0x5, &(0x7f0000000140)="aeef1575385547", 0xc694, 0x3, 0x80005, @stream_id=0x2, 0x20047, 0xc, 0x0}) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bluetooth/hci5/hci5:200/power/runtime_suspended_time\x00', 0x20080, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x1000, 0x1c9}, 0x2, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r2, r3, 0x0, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) read$auto(r4, &(0x7f00000003c0)=']%\'\x00', 0x5) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_USBDEVFS_REAPURB32(r0, 0x4004550c, &(0x7f0000000300)=0x10003fe) 12.381284983s ago: executing program 3 (id=1805): mmap$auto(0xb, 0xfffffffffffffffb, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff, 0xc000000000) mmap$auto(0x8009, 0x1, 0x2, 0x1e, 0xffffffffffffffff, 0xfffffffffffeffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r3, 0x0, 0x200000000006, 0x8b6) ioprio_set$auto(0x60, 0x0, 0x3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8a0001, 0x0) ioctl$auto_TIOCGDEV2(r4, 0x80045432, 0x0) mmap$auto(0x4000, 0x400008, 0x21, 0x9b72, 0x2, 0x7ffd) socket(0x1f, 0xa, 0xc) msync$auto(0x200000, 0x2000000005, 0x6) mmap$auto(0x9, 0x8, 0x40000df, 0x8eb1, 0x401, 0x73de) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x8) prctl$auto(0xfffffffa, 0x1, 0x4, 0x11, 0x7) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x28900, 0x0) fchmodat2$auto(0xffffffffffffff9c, 0x0, 0x9, 0x1000) futex_waitv$auto(&(0x7f0000000300)={0x6, 0x4, 0xfffffffe}, 0x1, 0x0, 0x0, 0x0) 11.126047262s ago: executing program 3 (id=1814): mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x2000008000) r0 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x5bc) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x1, 0x7ff) ptrace$auto(0xc, r1, 0x9, 0xfffffffffffff6de) r2 = getpid() r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x4, 0xfffffffffffffffe, 0x0) bind$auto(0x3, 0xfffffffffffffffd, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0xfdef}, 0x3) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, 0x0, 0x4, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={@inferred=r1, 0xfff, 0x5, 0x3, "a4b67281c7adc342ff962acf3ad2317d7f2a1b42ee40780530a0d2e388d0bdebee2c1a8c536429c974e154c5", @inferred=r2}) unlink$auto(&(0x7f0000000380)='./file0\x00') close_range$auto(0x2, 0x8, 0x0) 10.136373942s ago: executing program 3 (id=1819): socket(0xa, 0x2, 0x3a) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000340)={0x7fffffff, 0x8001, 0x2, 0x6, 0x8002, 0x8, 0xffffffffffffffff, [], {0x6, 0xa, 0x5cc6, 0x2df, 0x500, 0x10000, 0x501, 0x6, 0x7}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) io_uring_register$auto(0x2, 0x24, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xc8, 0x401054d5, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) (rerun: 32) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r1, r0, 0x8000, 0x2, 0xffffffffffffffff, @relative_id=0x13, 0x6}, 0xf) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) (async, rerun: 32) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (rerun: 32) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000740)="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", 0x318) (async) r3 = socket(0x10, 0x2, 0x0) (async) set_robust_list$auto(0x0, 0x18) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000580)="0886a7b7ecaad059d474d122aa2cc30e14ae830c54cea716aeeea4ae42f63423", 0x20) (async) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) read$auto(r3, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52\x8a', 0x1260) (async) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x6a00, 0x0) 4.489142647s ago: executing program 2 (id=1852): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/netfs/volumes\x00', 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0x7, 0x12, 0x40000000000a5, 0x100000000008000) socket(0x2, 0x80802, 0x0) r0 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(r0, 0xfffffffd, 0x9, 0x0, 0x27) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/boot_params/version\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000580)=""/216, 0xd8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r4, 0x0) r6 = socket(0x2c, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010337bd7000ffdbdf25100000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) sendfile$auto(r2, r2, 0x0, 0x2) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, 0xfffffffffffffffe) r9 = socket(0x2, 0x801, 0x6) setsockopt$auto(r9, 0x1, 0x12, 0x0, 0xa4) close_range$auto(r9, r1, 0x93) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) 4.228297826s ago: executing program 2 (id=1856): mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x2000008000) r0 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x5bc) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x1, 0x7ff) ptrace$auto(0xc, r1, 0x9, 0xfffffffffffff6de) r2 = getpid() r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x4, 0xfffffffffffffffe, 0x0) bind$auto(0x3, 0xfffffffffffffffd, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0xfdef}, 0x3) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, 0x0, 0x4, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={@inferred=r1, 0xfff, 0x5, 0x3, "a4b67281c7adc342ff962acf3ad2317d7f2a1b42ee40780530a0d2e388d0bdebee2c1a8c536429c974e154c5", @inferred=r2}) close_range$auto(0x2, 0x8, 0x0) 3.902434339s ago: executing program 1 (id=1859): setresuid$auto(0x0, 0x7, 0x8080) (async) r0 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000000)={@_si_pad}, 0xd, &(0x7f0000000080)={{0xab, 0x867}, {0x6, 0x4}, 0xe, 0x9, 0x3, 0x9, 0x7, 0x9, 0x4, 0x3, 0x4, 0x3, 0xfe00000000000000, 0x5, 0x6, 0x401}) tkill$auto(r0, 0x80009) 3.768494324s ago: executing program 2 (id=1860): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmmsg$auto(r0, 0x0, 0x3, 0x20000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000400)={@siginfo_0_0={0x8, 0xe, 0xffffffff, @_sigsys={&(0x7f0000000340)="01a3541ef00b53ac5843bd349ee21302d9e27933129a7aa0c628a59c77707c121330561ea4ba9fdf2a2e4f8e78bb95c20eb54ce4023be160f9a673bdf5bd153952b7f1e963ab2c69de1c2f05c18b8919d143f7f30e4194931162dc4fc6ff65967279ea0dcb59948a183be4275f7644e6bf926f30fe0393d87819b6e48a95a1761a5ee48f37eae843a26a1b2d1a9fe342ea812cf7da597d08f71fe6fd5188ca27154a1e47a01f608ada", 0xffff, 0x4}}}, 0x2bdb, &(0x7f0000000480)={{0x401, 0x4b0d}, {0x2, 0x8}, 0x0, 0x9, 0x1, 0xffffffffffffffff, 0x7, 0x5, 0xb9f1, 0x3, 0x3, 0x7, 0x7, 0x5, 0x1, 0x6}) r3 = prctl$auto(0x40, 0x1, r2, 0x1, 0x6) write$auto(r1, 0x0, 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto_bm_register_operations_binfmt_misc(r3, &(0x7f0000000200)="f4186144fcc685ce1f451a898f1bbcb2a4803d576414422863aea2b69734609997ba474e2a1f44395598d56c90fbde87eee0337b058f0a3fcaaa688faa33bb6619c49a157b10487ab7a86fa80d9f64574685c82fae524b3ab70e85b52b9f28d8894b79c73ef2c78a1da8b15a942b1788b4eab77b563b9ea9c50c2785744fd42928294d303f566c065b9fb82192699801526d08", 0x93) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0xfffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_UBI_IOCDET(r4, 0x40046f41, 0x0) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r3) sendmsg$auto_L2TP_CMD_NOOP(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x66871c73e4a73b9}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000010", @ANYRES16=r5, @ANYBLOB="000425bd7000fedbdf250000000008001100f9ffffff0600020001800000"], 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r6, &(0x7f0000000280)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r7, 0x77bed28568c43d3b, 0x70b52a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe0000}]}, 0x30}, 0x1, 0x3f000000}, 0x80) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x80000000001) clone$auto(0xf43, 0xe, &(0x7f00000002c0)=0xe58, &(0x7f0000000300)=0x40, 0xb07) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r10) 3.674686272s ago: executing program 1 (id=1861): setxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0, 0x10) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x20000000009) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = setfsuid$auto(0xee00) (async) r1 = setfsuid$auto(0xee01) setresuid$auto(r0, r1, r0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="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", 0x2f8) (async) ioctl$auto_SNDCTL_SEQ_SYNC(r2, 0x5101, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x12241, 0x3d5) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) (async) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x10, 0x203, 0x0, 0x0, 0x5, 0x7, 0x6, 0x1f4, 0x9, 0xe8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) (async) bpf$auto_BPF_MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)=@info={r3, 0x5, 0x1}, 0xf) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card1/pcm0p/sub3/info\x00', 0x80080, 0x0) (async) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_swap\x00', 0x100042, 0x0) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) (async) madvise$auto(0x7, 0x8, 0xffffffff) 3.547544371s ago: executing program 1 (id=1862): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000540)={'macvlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x80805, 0x0) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, 0x0, 0x5) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) getsockopt$auto(r1, 0x84, 0x22, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000200)={0x0, 0x1ff}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0225020000000800030080"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004001}, 0x20040004) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x80000005, &(0x7f0000000180)={0x0, 0xc8}, 0x1, 0x0, 0x5}, 0x3}, 0x40000204, 0x0) 3.035564255s ago: executing program 2 (id=1863): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) msgsnd$auto(0x0, 0x0, 0x8, 0x9) r0 = socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xa0000, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1000, 0x84a1, 0x10000000020) fsync$auto(r3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x304) socket(0x2, 0x5, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x20, 0xf3, 0xb0, @inferred=r4}}) write$auto(r5, 0x0, 0x6) 2.043343922s ago: executing program 4 (id=1866): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2bffff04", @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf252b000000180001801400020076657468315f746f5f626f6e64000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7}, 0x2) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffd}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x0, 0x2072c2, 0xc, 0x100000000}}) (async, rerun: 32) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) (async) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) (async) r2 = ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000000)=0x6) read$auto(r2, &(0x7f0000000040)='ethtool\x00', 0x2) (async) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, 0x0, 0x0, 0xce8) 1.762217307s ago: executing program 1 (id=1867): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x80000000) r0 = socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x2000401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0xfffffffe], {0x6, 0x7, 0x3, 0xe, 0xf, 0x5, 0x1, 0x4, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0xb06, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1020, 0x206, 0x10007, 0x8, 0xffffffffffffffff, [], {0x27, 0x6, 0x21bb9432, 0x4, 0xffffffff, 0x7f, 0xc, 0x6, 0x2}, {0x100, 0x1000000c, 0x7, 0x1, 0x3, 0x3f, 0x76c4, 0xec66, 0x2}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe39b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 1.72374208s ago: executing program 4 (id=1868): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x82401, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.719899683s ago: executing program 2 (id=1869): mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x2000008000) r0 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x5bc) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x1, 0x7ff) ptrace$auto(0xc, r1, 0x9, 0xfffffffffffff6de) r2 = getpid() r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x4, 0xfffffffffffffffe, 0x0) bind$auto(0x3, 0xfffffffffffffffd, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0xfdef}, 0x3) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, 0x0, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.656448158s ago: executing program 1 (id=1870): mmap$auto(0xb, 0xfffffffffffffffb, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff, 0xc000000000) mmap$auto(0x8009, 0x1, 0x2, 0x1e, 0xffffffffffffffff, 0xfffffffffffeffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r3, 0x0, 0x200000000006, 0x8b6) ioprio_set$auto(0x60, 0x0, 0x3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8a0001, 0x0) ioctl$auto_TIOCGDEV2(r4, 0x80045432, 0x0) mmap$auto(0x4000, 0x400008, 0x21, 0x9b72, 0x2, 0x7ffd) socket(0x1f, 0xa, 0xc) msync$auto(0x200000, 0x2000000005, 0x6) mmap$auto(0x9, 0x8, 0x40000df, 0x8eb1, 0x401, 0x73de) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x8) prctl$auto(0xfffffffa, 0x1, 0x4, 0x11, 0x7) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x28900, 0x0) fchmodat2$auto(0xffffffffffffff9c, 0x0, 0x9, 0x1000) futex_waitv$auto(&(0x7f0000000300)={0x6, 0x4, 0xfffffffe}, 0x1, 0x0, 0x0, 0x0) 1.585094216s ago: executing program 4 (id=1871): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r3) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) ioctl$auto_KVM_CREATE_VM(r1, 0x8090ae81, 0x0) 1.398919785s ago: executing program 4 (id=1872): ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)="f9c6db73364934578d51601d132b20dd82ae0781f6cb18c55fb7ed811a498af961a2ba35abcb2a9e90cb1318a4e844fa36d450dd94feeb082f1df20f92ccf13a81a57128c3747e32049e83c577e1acbc77ae0592cdbc051382debcaa0dc8ed6a464e67d65d0fe51909b6301747549e056844706522e452069bc58cceba3c6f41643ea20806562e91ca8a2cc01217c98f9dbad36dd49ba0ac6b5eac96f27ca3511f2ead40050e4c") (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x101202, 0x0) sendfile$auto(r0, r0, 0x0, 0xd) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) r1 = socket(0x2, 0x3, 0x100) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'pim6reg\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x1a1302, 0x0) (async) unshare$auto(0x40000080) (async) acct$auto(&(0x7f0000000000)='/dev/sequencer2\x00') (async) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) shmget$auto(0x0, 0x7b, 0x100) madvise$auto(0x108000, 0x2, 0x80000001) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x2) (async) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5404, 0x0) (async) sendfile$auto(r3, r3, 0x0, 0x43) (async) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) (async) r5 = socket(0x2, 0x1, 0x84) (async) socketpair$auto(0x7, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) setsockopt$auto(r5, 0x84, 0x15, 0x0, 0x1) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card2\x00', 0x109901, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) (async) socket(0x10, 0x2, 0x0) 1.181058747s ago: executing program 2 (id=1873): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x22342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 910.440022ms ago: executing program 4 (id=1874): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket(0xa, 0x2, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) bpf$auto_BPF_MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)=@info={r1, 0x100, 0xe}, 0x1) (async) bpf$auto_BPF_MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)=@info={r1, 0x100, 0xe}, 0x1) write$auto(0x3, 0x0, 0x1) (async) write$auto(0x3, 0x0, 0x1) setsockopt$auto(r1, 0x4000004, 0x1ff, &(0x7f00000000c0)='\x00', 0x5f8) (async) setsockopt$auto(r1, 0x4000004, 0x1ff, &(0x7f00000000c0)='\x00', 0x5f8) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) (async) setresuid$auto(0x0, 0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fanotify_init$auto(0x5, 0x9) (async) fanotify_init$auto(0x5, 0x9) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r3 = socket(0x10, 0x2, 0x0) epoll_pwait2$auto(r0, 0xffffffffffffffff, 0xfffffffa, 0x0, 0x0, 0x8) (async) epoll_pwait2$auto(r0, 0xffffffffffffffff, 0xfffffffa, 0x0, 0x0, 0x8) r4 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/43:256/stats\x00', 0x20002, 0x0) read$auto_bdi_debug_stats_fops_(r4, &(0x7f0000000040)=""/69, 0x45) bind$auto(r3, 0x0, 0x6b) ioctl$auto_SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000200)="b23bac23c7629726e133cbd4e59d116499d8033716ff07a63b0d611a9abb9b4feb45379b05ca576f90f5436e7abf4aeb46e14695f7e134331f22798abe233a52c06972428d5356d6be2796ee44f341161557efecd11f12494aa078adceddb19e29577a7b62f285f602cab90cac79430f3aecdf6c03dc4495d6a3b07218723e8800ec6b27a8db30d2a9e5567ea01164f9958ae5c3251656f8715eb27db0409df8a59b987506c92ad785b361985ed0dc73d18533ab6e5face40bd6c3158c842b91e8472af25f9206a7ae0d76ce9b1ff4") prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x5, 0x7000000000, 0x978f, 0x7) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/macvtap0/autoconf\x00', 0x517000, 0x0) fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xbc9f) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 707.506624ms ago: executing program 1 (id=1875): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18b040, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x902, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xc040aed5, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) symlink$auto(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) open(&(0x7f00000000c0)='./file0\x00', 0x40300, 0x31) rename$auto(&(0x7f00000001c0)='./file0\x00', 0x0) mprotect$auto(0x0, 0xffffffff, 0x8) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4008000) ftruncate$auto(0x3, 0x700) 0s ago: executing program 4 (id=1876): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18b040, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x902, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xc040aed5, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) symlink$auto(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) open(&(0x7f00000000c0)='./file0\x00', 0x40300, 0x31) rename$auto(0x0, &(0x7f00000000c0)='./file0\x00') mprotect$auto(0x0, 0xffffffff, 0x8) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4008000) ftruncate$auto(0x3, 0x700) kernel console output (not intermixed with test programs): 02896][T11096] ? process_measurement+0x4c8/0x2350 [ 322.102915][T11096] ? lock_release+0x24d/0x310 [ 322.102934][T11096] ? down_write+0x146/0x1f0 [ 322.102953][T11096] ? rcu_is_watching+0x12/0xc0 [ 322.102968][T11096] ? ima_match_policy+0x8c4/0x2350 [ 322.102989][T11096] ? ima_match_policy+0x8c4/0x2350 [ 322.103009][T11096] ? lock_release+0x24d/0x310 [ 322.103035][T11096] ? rcu_is_watching+0x12/0xc0 [ 322.103050][T11096] ? process_measurement+0x4c8/0x2350 [ 322.103066][T11096] ? lock_release+0x24d/0x310 [ 322.103085][T11096] ? down_write+0x146/0x1f0 [ 322.103109][T11096] ? lock_release+0x24d/0x310 [ 322.103129][T11096] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 322.103149][T11096] mmap_region+0x527/0x620 [ 322.103163][T11096] ? __pfx_mmap_region+0x10/0x10 [ 322.103177][T11096] ? cap_mmap_addr+0x4b/0x120 [ 322.103192][T11096] ? bpf_lsm_mmap_addr+0x9/0x30 [ 322.103214][T11096] ? security_mmap_addr+0x71/0x1e0 [ 322.103234][T11096] ? __get_unmapped_area+0x255/0x3e0 [ 322.103252][T11096] do_mmap+0xc63/0x12f0 [ 322.103270][T11096] ? __pfx_do_mmap+0x10/0x10 [ 322.103286][T11096] ? __pfx_down_write_killable+0x10/0x10 [ 322.103305][T11096] vm_mmap_pgoff+0x29e/0x470 [ 322.103323][T11096] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 322.103339][T11096] ? lock_release+0x24d/0x310 [ 322.103360][T11096] ? __fget_files+0x21f/0x3d0 [ 322.103381][T11096] ksys_mmap_pgoff+0x3cb/0x610 [ 322.103398][T11096] ? __x64_sys_futex+0x358/0x4d0 [ 322.103412][T11096] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 322.103429][T11096] ? xfd_validate_state+0x129/0x190 [ 322.103446][T11096] __x64_sys_mmap+0x125/0x190 [ 322.103462][T11096] do_syscall_64+0x115/0x840 [ 322.103477][T11096] ? clear_bhb_loop+0x40/0x90 [ 322.103494][T11096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.103509][T11096] RIP: 0033:0x7f83cb19ce59 [ 322.103531][T11096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.103554][T11096] RSP: 002b:00007f83c93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 322.103580][T11096] RAX: ffffffffffffffda RBX: 00007f83cb415fa0 RCX: 00007f83cb19ce59 [ 322.103592][T11096] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 322.103602][T11096] RBP: 00007f83cb232e6f R08: 00000000000000dd R09: 0000000000000000 [ 322.103612][T11096] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 322.103621][T11096] R13: 00007f83cb416038 R14: 00007f83cb415fa0 R15: 00007ffd2c96e358 [ 322.103638][T11096] [ 322.107546][T11096] kcov: kcov: vm_insert_page() failed [ 322.727254][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.734845][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.302541][ T9630] Bluetooth: hci2: unexpected event 0x3e length: 358 > 260 [ 325.302572][ T9630] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 325.350754][T11167] nfs: Unknown parameter '>V‰k&´?[' [ 327.652893][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1138'. [ 329.152402][T11291] FAULT_INJECTION: forcing a failure. [ 329.152402][T11291] name failslab, interval 1, probability 0, space 0, times 0 [ 329.296781][T11291] CPU: 0 UID: 0 PID: 11291 Comm: syz.1.1146 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 329.296815][T11291] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 329.296822][T11291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.296832][T11291] Call Trace: [ 329.296839][T11291] [ 329.296848][T11291] dump_stack_lvl+0x100/0x190 [ 329.296871][T11291] should_fail_ex.cold+0x5/0xa [ 329.296890][T11291] should_failslab+0xc2/0x120 [ 329.296910][T11291] __kmalloc_cache_noprof+0x7a/0x6e0 [ 329.296931][T11291] ? __hw_addr_create+0x57/0x220 [ 329.296955][T11291] ? lock_acquire+0x301/0x370 [ 329.296976][T11291] __hw_addr_create+0x57/0x220 [ 329.297000][T11291] __hw_addr_add_ex+0x32b/0x650 [ 329.297014][T11291] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 329.297027][T11291] ? __mutex_unlock_slowpath+0x35d/0x930 [ 329.297045][T11291] dev_addr_init+0x161/0x250 [ 329.297060][T11291] ? __pfx_dev_addr_init+0x10/0x10 [ 329.297076][T11291] ? __pfx_tun_setup+0x10/0x10 [ 329.297099][T11291] ? __pfx_tun_setup+0x10/0x10 [ 329.297119][T11291] alloc_netdev_mqs+0x363/0x1550 [ 329.297148][T11291] ? bpf_lsm_capable+0x9/0x10 [ 329.297164][T11291] __tun_chr_ioctl+0x1878/0x47c0 [ 329.297180][T11291] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 329.297200][T11291] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 329.297213][T11291] ? rcu_is_watching+0x12/0xc0 [ 329.297228][T11291] ? __fget_files+0x215/0x3d0 [ 329.297248][T11291] ? hook_file_ioctl_common+0x140/0x440 [ 329.297270][T11291] ? __fget_files+0x21f/0x3d0 [ 329.297289][T11291] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 329.297320][T11291] __x64_sys_ioctl+0x18e/0x210 [ 329.297337][T11291] do_syscall_64+0x115/0x840 [ 329.297352][T11291] ? clear_bhb_loop+0x40/0x90 [ 329.297369][T11291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.297385][T11291] RIP: 0033:0x7f64a879ce59 [ 329.297399][T11291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.297415][T11291] RSP: 002b:00007f64a96e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.297430][T11291] RAX: ffffffffffffffda RBX: 00007f64a8a15fa0 RCX: 00007f64a879ce59 [ 329.297441][T11291] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000006 [ 329.297450][T11291] RBP: 00007f64a8832e6f R08: 0000000000000000 R09: 0000000000000000 [ 329.297463][T11291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.297472][T11291] R13: 00007f64a8a16038 R14: 00007f64a8a15fa0 R15: 00007fff0dd92978 [ 329.297486][T11291] [ 330.255910][T11315] ubi0: attaching mtd0 [ 330.270781][T11315] ubi0: scanning is finished [ 330.288833][T11315] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 331.100908][T11315] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 333.127408][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1167'. [ 334.725088][T11436] ubi0: attaching mtd0 [ 334.761649][T11436] ubi0: scanning is finished [ 334.821295][T11436] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 335.073815][T11418] kexec: Could not allocate control_code_buffer [ 335.245993][T11455] openvswitch: netlink: Missing valid actions attribute. [ 335.284709][T11455] FAULT_INJECTION: forcing a failure. [ 335.284709][T11455] name failslab, interval 1, probability 0, space 0, times 0 [ 335.297460][T11455] CPU: 0 UID: 0 PID: 11455 Comm: syz.2.1182 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 335.297493][T11455] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 335.297501][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.297512][T11455] Call Trace: [ 335.297520][T11455] [ 335.297528][T11455] dump_stack_lvl+0x100/0x190 [ 335.297554][T11455] should_fail_ex.cold+0x5/0xa [ 335.297574][T11455] should_failslab+0xc2/0x120 [ 335.297595][T11455] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 335.297611][T11455] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 335.297640][T11455] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 335.297665][T11455] idr_get_free+0x52e/0xa00 [ 335.297684][T11455] idr_alloc_u32+0x1ac/0x320 [ 335.297701][T11455] ? __pfx_idr_alloc_u32+0x10/0x10 [ 335.297718][T11455] ? rcu_is_watching+0x12/0xc0 [ 335.297738][T11455] idr_alloc_cyclic+0x10b/0x230 [ 335.297755][T11455] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 335.297770][T11455] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 335.297784][T11455] ? kfree+0x1e5/0x6c0 [ 335.297805][T11455] map_create+0x1476/0x3120 [ 335.297830][T11455] ? __pfx_map_create+0x10/0x10 [ 335.297865][T11455] ? event_filter_pid_sched_wakeup_probe_post+0x128/0x270 [ 335.297890][T11455] ? rcu_is_watching+0x12/0xc0 [ 335.297907][T11455] ? __might_fault+0xc5/0x140 [ 335.297936][T11455] __sys_bpf+0x2a6e/0x4e80 [ 335.297960][T11455] ? futex_hash+0x311/0x400 [ 335.297981][T11455] ? lock_release+0x24d/0x310 [ 335.298002][T11455] ? __pfx___sys_bpf+0x10/0x10 [ 335.298023][T11455] ? futex_wake+0x4ea/0x5e0 [ 335.298038][T11455] ? rcu_is_watching+0x12/0xc0 [ 335.298053][T11455] ? futex_private_hash_put+0x115/0x1c0 [ 335.298077][T11455] ? __pfx_futex_wake+0x10/0x10 [ 335.298093][T11455] ? preempt_count_add+0x76/0x150 [ 335.298113][T11455] ? ksys_write+0x190/0x250 [ 335.298133][T11455] ? rcu_is_watching+0x12/0xc0 [ 335.298152][T11455] ? __x64_sys_futex+0x34f/0x4d0 [ 335.298165][T11455] ? __x64_sys_futex+0x358/0x4d0 [ 335.298178][T11455] ? __x64_sys_openat+0x12d/0x210 [ 335.298194][T11455] ? xfd_validate_state+0x129/0x190 [ 335.298210][T11455] ? __x64_sys_bpf+0xce/0x140 [ 335.298227][T11455] __x64_sys_bpf+0xce/0x140 [ 335.298240][T11455] ? trace_irq_enable.constprop.0+0x122/0x160 [ 335.298265][T11455] do_syscall_64+0x115/0x840 [ 335.298282][T11455] ? clear_bhb_loop+0x40/0x90 [ 335.298299][T11455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.298314][T11455] RIP: 0033:0x7f53f4d9ce59 [ 335.298329][T11455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.298344][T11455] RSP: 002b:00007f53f5bea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.298361][T11455] RAX: ffffffffffffffda RBX: 00007f53f5015fa0 RCX: 00007f53f4d9ce59 [ 335.298381][T11455] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 335.298391][T11455] RBP: 00007f53f4e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 335.298401][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.298411][T11455] R13: 00007f53f5016038 R14: 00007f53f5015fa0 R15: 00007ffc1aaa2a28 [ 335.298426][T11455] [ 336.448596][T11436] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 336.544271][T11437] ubi0: attaching mtd0 [ 336.591760][T11437] ubi0: scanning is finished [ 336.651811][T11437] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 337.243016][T11437] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 337.413782][T11444] Process accounting resumed [ 337.779823][T11473] ima: policy update failed [ 337.851663][ T30] audit: type=1802 audit(1843104620.929:9): pid=11473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1186" res=0 errno=0 [ 338.093549][T11479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1189'. [ 340.656773][ T9630] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 340.664362][ T9630] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 341.671114][ T5771] Process accounting resumed [ 342.930798][T11534] Process accounting resumed [ 342.965101][T11558] random: crng reseeded on system resumption [ 343.246226][T11564] FAULT_INJECTION: forcing a failure. [ 343.246226][T11564] name failslab, interval 1, probability 0, space 0, times 0 [ 343.302362][T11564] CPU: 0 UID: 0 PID: 11564 Comm: syz.2.1209 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 343.302396][T11564] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 343.302404][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 343.302449][T11564] Call Trace: [ 343.302457][T11564] [ 343.302464][T11564] dump_stack_lvl+0x100/0x190 [ 343.302663][T11564] should_fail_ex.cold+0x5/0xa [ 343.302697][T11564] ? fs_reclaim_acquire+0x70/0x100 [ 343.302760][T11564] should_failslab+0xc2/0x120 [ 343.302795][T11564] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 343.302810][T11564] ? security_inode_alloc+0x3b/0x2c0 [ 343.302886][T11564] ? lockdep_init_map_type+0x5c/0x250 [ 343.302951][T11564] security_inode_alloc+0x3b/0x2c0 [ 343.302969][T11564] inode_init_always_gfp+0xc77/0xfb0 [ 343.303008][T11564] alloc_inode+0x8e/0x250 [ 343.303024][T11564] alloc_anon_inode+0x2a/0x3e0 [ 343.303048][T11564] anon_inode_make_secure_inode+0x2f/0x140 [ 343.303082][T11564] __anon_inode_getfile+0x1cf/0x280 [ 343.303099][T11564] new_userfaultfd+0x255/0x400 [ 343.303135][T11564] __x64_sys_userfaultfd+0x4b/0xb0 [ 343.303156][T11564] do_syscall_64+0x115/0x840 [ 343.303262][T11564] ? clear_bhb_loop+0x40/0x90 [ 343.303282][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.303298][T11564] RIP: 0033:0x7f53f4d9ce59 [ 343.303366][T11564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.303382][T11564] RSP: 002b:00007f53f5bea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 343.303458][T11564] RAX: ffffffffffffffda RBX: 00007f53f5015fa0 RCX: 00007f53f4d9ce59 [ 343.303468][T11564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 343.303477][T11564] RBP: 00007f53f4e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 343.303503][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.303513][T11564] R13: 00007f53f5016038 R14: 00007f53f5015fa0 R15: 00007ffc1aaa2a28 [ 343.303528][T11564] [ 343.867904][T11582] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 344.934012][T11599] kernel read not supported for file /sg0 (pid: 11599 comm: syz.0.1214) [ 344.987998][ T9760] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:17: bg 1: bad block bitmap checksum [ 345.034489][ T9760] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 895 with max blocks 16 with error 74 [ 345.058023][ T9630] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 345.065841][ T9630] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 345.098146][ T9760] EXT4-fs (sda1): This should not happen!! Data will be lost [ 345.098146][ T9760] [ 345.288398][ T7885] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 345.710441][ T5700] Process accounting resumed [ 345.861289][T11589] Process accounting paused [ 345.898000][T11617] NFSD: Failed to start, no listeners configured. [ 346.108197][T11603] Process accounting resumed [ 346.627792][ T7885] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 347.989977][T11694] sctp: [Deprecated]: syz.3.1230 (pid 11694) Use of int in maxseg socket option. [ 347.989977][T11694] Use struct sctp_assoc_value instead [ 349.218959][T11745] FAULT_INJECTION: forcing a failure. [ 349.218959][T11745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.281032][T11745] CPU: 0 UID: 0 PID: 11745 Comm: syz.2.1241 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 349.281066][T11745] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 349.281073][T11745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.281083][T11745] Call Trace: [ 349.281088][T11745] [ 349.281094][T11745] dump_stack_lvl+0x100/0x190 [ 349.281116][T11745] should_fail_ex.cold+0x5/0xa [ 349.281135][T11745] _copy_to_user+0x32/0xd0 [ 349.281216][T11745] do_timer_create+0x6d9/0x1460 [ 349.281258][T11745] ? __pfx_do_timer_create+0x10/0x10 [ 349.281272][T11745] ? __pfx_do_futex+0x10/0x10 [ 349.281303][T11745] ? lock_release+0x24d/0x310 [ 349.281325][T11745] __x64_sys_timer_create+0x199/0x1d0 [ 349.281341][T11745] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 349.281358][T11745] ? xfd_validate_state+0x129/0x190 [ 349.281397][T11745] ? rcu_is_watching+0x12/0xc0 [ 349.281431][T11745] do_syscall_64+0x115/0x840 [ 349.281446][T11745] ? clear_bhb_loop+0x40/0x90 [ 349.281463][T11745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.281478][T11745] RIP: 0033:0x7f53f4d9ce59 [ 349.281491][T11745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.281506][T11745] RSP: 002b:00007f53f5bea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 349.281521][T11745] RAX: ffffffffffffffda RBX: 00007f53f5015fa0 RCX: 00007f53f4d9ce59 [ 349.281531][T11745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 349.281540][T11745] RBP: 00007f53f4e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 349.281549][T11745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.281558][T11745] R13: 00007f53f5016038 R14: 00007f53f5015fa0 R15: 00007ffc1aaa2a28 [ 349.281573][T11745] [ 350.411774][ T5700] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 350.573006][T11763] random: crng reseeded on system resumption [ 352.136153][T11777] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 352.668194][T11831] MTRR 1 not used [ 352.799631][T11834] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5620] was attempted by ""[11834] [ 353.964876][T11869] FAULT_INJECTION: forcing a failure. [ 353.964876][T11869] name failslab, interval 1, probability 0, space 0, times 0 [ 354.025565][T11869] CPU: 0 UID: 0 PID: 11869 Comm: syz.0.1265 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 354.025613][T11869] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 354.025621][T11869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 354.025631][T11869] Call Trace: [ 354.025637][T11869] [ 354.025643][T11869] dump_stack_lvl+0x100/0x190 [ 354.025666][T11869] should_fail_ex.cold+0x5/0xa [ 354.025682][T11869] ? fs_reclaim_acquire+0x70/0x100 [ 354.025702][T11869] should_failslab+0xc2/0x120 [ 354.025720][T11869] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 354.025735][T11869] ? ima_inode_get+0x11f/0x580 [ 354.025802][T11869] ima_inode_get+0x11f/0x580 [ 354.025820][T11869] process_measurement+0x1213/0x2350 [ 354.025845][T11869] ? stack_depot_save_flags+0x27/0x9d0 [ 354.025917][T11869] ? stack_trace_save+0x8e/0xc0 [ 354.025937][T11869] ? __pfx_process_measurement+0x10/0x10 [ 354.025955][T11869] ? kasan_save_stack+0x3f/0x50 [ 354.025970][T11869] ? kasan_save_track+0x14/0x30 [ 354.025983][T11869] ? __kasan_slab_alloc+0x89/0x90 [ 354.025999][T11869] ? kmem_cache_alloc_noprof+0x241/0x6d0 [ 354.026012][T11869] ? init_file+0x95/0x480 [ 354.026025][T11869] ? alloc_empty_file+0x79/0x1c0 [ 354.026038][T11869] ? alloc_file_pseudo+0x183/0x290 [ 354.026051][T11869] ? ksys_mmap_pgoff+0x242/0x610 [ 354.026067][T11869] ? __x64_sys_mmap+0x125/0x190 [ 354.026106][T11869] ? do_syscall_64+0x115/0x840 [ 354.026130][T11869] ? __pfx_aa_file_perm+0x10/0x10 [ 354.026158][T11869] ima_file_mmap+0x1c4/0x1f0 [ 354.026176][T11869] ? __pfx_ima_file_mmap+0x10/0x10 [ 354.026196][T11869] security_mmap_file+0x278/0x9b0 [ 354.026217][T11869] vm_mmap_pgoff+0xec/0x470 [ 354.026254][T11869] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 354.026270][T11869] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 354.026286][T11869] ? hugetlbfs_get_inode+0x3f5/0x700 [ 354.026395][T11869] ksys_mmap_pgoff+0x285/0x610 [ 354.026414][T11869] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 354.026431][T11869] ? xfd_validate_state+0x129/0x190 [ 354.026448][T11869] __x64_sys_mmap+0x125/0x190 [ 354.026464][T11869] do_syscall_64+0x115/0x840 [ 354.026479][T11869] ? clear_bhb_loop+0x40/0x90 [ 354.026495][T11869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.026510][T11869] RIP: 0033:0x7ff11dd9ce59 [ 354.026524][T11869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.026540][T11869] RSP: 002b:00007ff11ebce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 354.026556][T11869] RAX: ffffffffffffffda RBX: 00007ff11e015fa0 RCX: 00007ff11dd9ce59 [ 354.026566][T11869] RDX: 00004000000000df RSI: 0000000000000003 RDI: 0000000000000000 [ 354.026576][T11869] RBP: 00007ff11de32e6f R08: 0000000000000401 R09: 0000300000000000 [ 354.026590][T11869] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 354.026599][T11869] R13: 00007ff11e016038 R14: 00007ff11e015fa0 R15: 00007ffc19fc3788 [ 354.026613][T11869] [ 354.792547][T11875] syz.3.1268 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 354.953782][T11877] FAULT_INJECTION: forcing a failure. [ 354.953782][T11877] name failslab, interval 1, probability 0, space 0, times 0 [ 354.988574][T11877] CPU: 0 UID: 0 PID: 11877 Comm: syz.0.1269 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 354.988610][T11877] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 354.988618][T11877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 354.988628][T11877] Call Trace: [ 354.988633][T11877] [ 354.988648][T11877] dump_stack_lvl+0x100/0x190 [ 354.988672][T11877] should_fail_ex.cold+0x5/0xa [ 354.988690][T11877] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 354.988707][T11877] should_failslab+0xc2/0x120 [ 354.988724][T11877] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 354.988739][T11877] ? xas_split_alloc+0x11c/0x4a0 [ 354.988755][T11877] ? prep_compound_page+0x27d/0x570 [ 354.988775][T11877] ? post_alloc_hook+0xed/0x120 [ 354.988796][T11877] xas_split_alloc+0x11c/0x4a0 [ 354.988816][T11877] __folio_split+0x5e7/0x1610 [ 354.988840][T11877] ? rcu_is_watching+0x12/0xc0 [ 354.988855][T11877] ? __pfx___folio_split+0x10/0x10 [ 354.988890][T11877] ? __pfx___might_resched+0x10/0x10 [ 354.988912][T11877] ? lock_release+0x24d/0x310 [ 354.988934][T11877] madvise_cold_or_pageout_pte_range+0xf8c/0x2620 [ 354.988958][T11877] ? __css_rstat_updated+0x1ce/0x5a0 [ 354.988980][T11877] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 354.989001][T11877] ? stack_trace_save+0x8e/0xc0 [ 354.989020][T11877] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 354.989040][T11877] walk_pgd_range+0xc1a/0x1dd0 [ 354.989059][T11877] ? __pfx_walk_pgd_range+0x10/0x10 [ 354.989074][T11877] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 354.989095][T11877] ? process_measurement+0x4c8/0x2350 [ 354.989121][T11877] __walk_page_range+0x171/0x850 [ 354.989140][T11877] walk_page_range_vma_unsafe+0x209/0x8f0 [ 354.989157][T11877] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 354.989173][T11877] ? do_raw_spin_unlock+0x145/0x1e0 [ 354.989188][T11877] ? mlock_drain_local+0x254/0x4e0 [ 354.989201][T11877] ? rcu_is_watching+0x12/0xc0 [ 354.989216][T11877] ? mlock_drain_local+0x254/0x4e0 [ 354.989228][T11877] ? lock_release+0x24d/0x310 [ 354.989248][T11877] walk_page_range_vma+0x63/0x90 [ 354.989263][T11877] madvise_pageout+0x259/0x540 [ 354.989280][T11877] ? __pfx_madvise_pageout+0x10/0x10 [ 354.989297][T11877] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 354.989321][T11877] ? rcu_is_watching+0x12/0xc0 [ 354.989338][T11877] ? mtree_range_walk+0x72b/0xb70 [ 354.989400][T11877] madvise_vma_behavior+0x452/0x2240 [ 354.989422][T11877] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 354.989444][T11877] ? find_vma_prev+0xd8/0x150 [ 354.989461][T11877] ? rcu_is_watching+0x12/0xc0 [ 354.989476][T11877] ? __pfx_find_vma_prev+0x10/0x10 [ 354.989495][T11877] ? __futex_wait+0x256/0x300 [ 354.989513][T11877] madvise_walk_vmas+0x2fe/0xa90 [ 354.989533][T11877] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 354.989552][T11877] ? __pfx_futex_hash+0x10/0x10 [ 354.989574][T11877] madvise_do_behavior+0x1ea/0x510 [ 354.989593][T11877] ? __pfx_madvise_do_behavior+0x10/0x10 [ 354.989616][T11877] ? down_read+0x13b/0x4c0 [ 354.989632][T11877] ? __pfx_futex_wait+0x10/0x10 [ 354.989651][T11877] do_madvise+0x238/0x290 [ 354.989668][T11877] ? __pfx_do_madvise+0x10/0x10 [ 354.989687][T11877] ? do_futex+0x190/0x440 [ 354.989701][T11877] ? fdget+0x18b/0x210 [ 354.989722][T11877] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 354.989745][T11877] __x64_sys_madvise+0xa9/0x110 [ 354.989764][T11877] do_syscall_64+0x115/0x840 [ 354.989778][T11877] ? clear_bhb_loop+0x40/0x90 [ 354.989795][T11877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.989811][T11877] RIP: 0033:0x7ff11dd9ce59 [ 354.989825][T11877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.989841][T11877] RSP: 002b:00007ff11ebce028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 354.989857][T11877] RAX: ffffffffffffffda RBX: 00007ff11e015fa0 RCX: 00007ff11dd9ce59 [ 354.989869][T11877] RDX: 0000000000000015 RSI: 0000000000000081 RDI: 0000000000000000 [ 354.989878][T11877] RBP: 00007ff11de32e6f R08: 0000000000000000 R09: 0000000000000000 [ 354.989890][T11877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.989900][T11877] R13: 00007ff11e016038 R14: 00007ff11e015fa0 R15: 00007ffc19fc3788 [ 354.989915][T11877] [ 356.091728][T11882] ubi0: attaching mtd0 [ 356.105737][T11882] ubi0: scanning is finished [ 356.122578][T11882] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 356.791391][T11890] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input10 [ 356.868101][T11882] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 356.971843][T11881] Process accounting resumed [ 359.453626][T11979] FAULT_INJECTION: forcing a failure. [ 359.453626][T11979] name failslab, interval 1, probability 0, space 0, times 0 [ 359.524485][T11979] CPU: 0 UID: 0 PID: 11979 Comm: syz.1.1291 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 359.524518][T11979] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 359.524526][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.524535][T11979] Call Trace: [ 359.524541][T11979] [ 359.524546][T11979] dump_stack_lvl+0x100/0x190 [ 359.524570][T11979] should_fail_ex.cold+0x5/0xa [ 359.524604][T11979] ? __kmalloc_noprof+0xba/0x840 [ 359.524627][T11979] ? __seq_open_private+0x22/0xd0 [ 359.524646][T11979] should_failslab+0xc2/0x120 [ 359.524664][T11979] __kmalloc_noprof+0xe0/0x840 [ 359.524684][T11979] ? rcu_is_watching+0x12/0xc0 [ 359.524708][T11979] __seq_open_private+0x22/0xd0 [ 359.524726][T11979] seq_open_private+0x24/0x50 [ 359.524744][T11979] proc_seq_open+0xc4/0x100 [ 359.524813][T11979] ? __pfx_proc_seq_open+0x10/0x10 [ 359.524834][T11979] proc_reg_open+0x2ab/0x5f0 [ 359.524856][T11979] do_dentry_open+0x6ab/0x14d0 [ 359.524877][T11979] ? __pfx_proc_reg_open+0x10/0x10 [ 359.524898][T11979] vfs_open+0x82/0x3f0 [ 359.524912][T11979] path_openat+0x2873/0x4280 [ 359.524937][T11979] ? __pfx_path_openat+0x10/0x10 [ 359.524958][T11979] do_file_open+0x20e/0x430 [ 359.524978][T11979] ? __pfx_do_file_open+0x10/0x10 [ 359.525004][T11979] ? alloc_fd+0x471/0x7a0 [ 359.525023][T11979] ? do_getname+0x191/0x390 [ 359.525038][T11979] do_sys_openat2+0x10f/0x1e0 [ 359.525052][T11979] ? __pfx_do_sys_openat2+0x10/0x10 [ 359.525068][T11979] ? __fget_files+0x21f/0x3d0 [ 359.525087][T11979] __x64_sys_openat+0x12d/0x210 [ 359.525103][T11979] ? __pfx___x64_sys_openat+0x10/0x10 [ 359.525120][T11979] ? rcu_is_watching+0x12/0xc0 [ 359.525136][T11979] do_syscall_64+0x115/0x840 [ 359.525152][T11979] ? clear_bhb_loop+0x40/0x90 [ 359.525169][T11979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.525183][T11979] RIP: 0033:0x7f64a879ce59 [ 359.525202][T11979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.525218][T11979] RSP: 002b:00007f64a96e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 359.525234][T11979] RAX: ffffffffffffffda RBX: 00007f64a8a15fa0 RCX: 00007f64a879ce59 [ 359.525244][T11979] RDX: 0000000000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 359.525254][T11979] RBP: 00007f64a8832e6f R08: 0000000000000000 R09: 0000000000000000 [ 359.525263][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.525272][T11979] R13: 00007f64a8a16038 R14: 00007f64a8a15fa0 R15: 00007fff0dd92978 [ 359.525287][T11979] [ 360.527106][ T30] audit: type=1800 audit(1843106691.620:10): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1300" name="dbroot" dev="configfs" ino=44010 res=0 errno=0 [ 362.834096][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 362.868706][T12087] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 363.872006][T12112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1321'. [ 363.904478][T12112] veth1_macvtap: left promiscuous mode [ 363.925988][T12112] macsec0: entered promiscuous mode [ 363.944447][T12112] macsec0: entered allmulticast mode [ 365.327430][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 366.329346][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 366.812930][T12206] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.1346: bg 4: bad block bitmap checksum [ 366.893860][T12206] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 367.005357][T12206] EXT4-fs (sda1): This should not happen!! Data will be lost [ 367.005357][T12206] [ 368.123187][T12198] Process accounting paused [ 368.430517][T12252] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1357: iget: checksum invalid [ 368.483873][T12252] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 368.538367][T12252] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1357: iget: checksum invalid [ 368.584570][T12252] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 368.634240][T12252] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1357: iget: checksum invalid [ 368.690446][T12252] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 368.751185][T12252] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1357: iget: checksum invalid [ 368.810867][T12252] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 368.854608][T12252] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 368.908289][T12252] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 371.666138][T12337] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5621] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[12337] [ 372.783413][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 372.838467][T12372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 372.990980][T12371] veth0_macvtap: left promiscuous mode [ 373.039229][T12371] macvtap0: entered promiscuous mode [ 373.089520][T12371] macvtap0: entered allmulticast mode [ 373.412105][T12384] block nbd0: NBD_DISCONNECT [ 373.507260][T12380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1381'. [ 376.212359][T12447] Process accounting paused [ 376.502362][T12466] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.0.1402: Error -117 reading block bitmap for 4 [ 378.456309][T12507] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1410'. [ 378.511688][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1410'. [ 379.239435][T12547] ubi0: attaching mtd0 [ 379.299602][T12547] ubi0: scanning is finished [ 379.389936][T12547] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 380.353566][T12547] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 380.508020][ T7885] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 380.753790][T12577] FAULT_INJECTION: forcing a failure. [ 380.753790][T12577] name failslab, interval 1, probability 0, space 0, times 0 [ 380.767490][T12577] CPU: 0 UID: 0 PID: 12577 Comm: syz.2.1423 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 380.767523][T12577] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 380.767530][T12577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 380.767541][T12577] Call Trace: [ 380.767551][T12577] [ 380.767558][T12577] dump_stack_lvl+0x100/0x190 [ 380.767585][T12577] should_fail_ex.cold+0x5/0xa [ 380.767607][T12577] should_failslab+0xc2/0x120 [ 380.767627][T12577] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 380.767644][T12577] ? inet_bind2_bucket_create+0x36/0x5f0 [ 380.767797][T12577] ? do_raw_spin_lock+0x128/0x260 [ 380.767816][T12577] inet_bind2_bucket_create+0x36/0x5f0 [ 380.767838][T12577] inet_csk_get_port+0x2687/0x28e0 [ 380.767869][T12577] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 380.767886][T12577] ? __inet_bind+0x8a5/0xc60 [ 380.767905][T12577] ? rcu_is_watching+0x12/0xc0 [ 380.767923][T12577] ? __inet_bind+0x8a5/0xc60 [ 380.767940][T12577] ? trace_irq_enable.constprop.0+0x122/0x160 [ 380.767991][T12577] __inet_bind+0x598/0xc60 [ 380.768011][T12577] inet_bind+0xdb/0x120 [ 380.768034][T12577] __sys_bind+0x1a9/0x260 [ 380.768081][T12577] ? __pfx___sys_bind+0x10/0x10 [ 380.768105][T12577] __x64_sys_bind+0x72/0xb0 [ 380.768121][T12577] do_syscall_64+0x115/0x840 [ 380.768140][T12577] ? clear_bhb_loop+0x40/0x90 [ 380.768158][T12577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.768175][T12577] RIP: 0033:0x7f53f4d9ce59 [ 380.768192][T12577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.768208][T12577] RSP: 002b:00007f53f5bea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 380.768225][T12577] RAX: ffffffffffffffda RBX: 00007f53f5015fa0 RCX: 00007f53f4d9ce59 [ 380.768236][T12577] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 380.768246][T12577] RBP: 00007f53f4e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 380.768257][T12577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.768267][T12577] R13: 00007f53f5016038 R14: 00007f53f5015fa0 R15: 00007ffc1aaa2a28 [ 380.768282][T12577] [ 381.312541][T12568] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input11 [ 382.140307][ T7885] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 382.149954][ T7885] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 382.201291][T12387] Process accounting resumed [ 382.580355][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1430'. [ 382.630348][T12604] unsupported nlmsg_type 40 [ 382.921062][ T5700] Process accounting resumed [ 383.284845][T12599] Process accounting resumed [ 383.780050][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.786924][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.764407][T12705] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1458: iget: checksum invalid [ 386.816882][T12705] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 386.889317][T12705] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1458: iget: checksum invalid [ 386.942230][T12705] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 386.987232][T12705] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1458: iget: checksum invalid [ 387.039520][T12705] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 387.094340][T12705] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1458: iget: checksum invalid [ 387.143649][T12705] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 387.184942][T12705] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 387.227810][T12705] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 387.352953][T12691] Process accounting paused [ 387.423390][T12714] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1460'. [ 387.467855][T12708] HfR: entered promiscuous mode [ 387.515297][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'. [ 387.834152][T12727] ubi0: attaching mtd0 [ 387.863520][T12727] ubi0: scanning is finished [ 387.894687][T12727] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 388.364113][T12727] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 388.688774][T12758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1469'. [ 388.704165][T12755] FAULT_INJECTION: forcing a failure. [ 388.704165][T12755] name failslab, interval 1, probability 0, space 0, times 0 [ 388.728808][T12758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1469'. [ 388.867535][T12755] CPU: 0 UID: 0 PID: 12755 Comm: syz.3.1467 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 388.867571][T12755] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 388.867579][T12755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.867589][T12755] Call Trace: [ 388.867595][T12755] [ 388.867602][T12755] dump_stack_lvl+0x100/0x190 [ 388.867629][T12755] should_fail_ex.cold+0x5/0xa [ 388.867658][T12755] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 388.867678][T12755] should_failslab+0xc2/0x120 [ 388.867699][T12755] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 388.867715][T12755] ? alloc_io_context+0x21/0x2f0 [ 388.867796][T12755] ? __pfx_ipcns_owner+0x10/0x10 [ 388.867819][T12755] alloc_io_context+0x21/0x2f0 [ 388.867844][T12755] __copy_io+0xdc/0x210 [ 388.867865][T12755] copy_process+0x38c4/0x7ff0 [ 388.867913][T12755] ? __pfx_copy_process+0x10/0x10 [ 388.867929][T12755] ? lock_release+0x24d/0x310 [ 388.867956][T12755] ? _copy_from_user+0x59/0xd0 [ 388.867982][T12755] kernel_clone+0x176/0x9d0 [ 388.867997][T12755] ? __pfx_kernel_clone+0x10/0x10 [ 388.868016][T12755] __do_sys_clone3+0x214/0x290 [ 388.868030][T12755] ? __pfx___do_sys_clone3+0x10/0x10 [ 388.868054][T12755] ? rcu_is_watching+0x12/0xc0 [ 388.868070][T12755] do_syscall_64+0x115/0x840 [ 388.868086][T12755] ? clear_bhb_loop+0x40/0x90 [ 388.868103][T12755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.868118][T12755] RIP: 0033:0x7f83cb19ce59 [ 388.868131][T12755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.868146][T12755] RSP: 002b:00007f83c93d4ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 388.868162][T12755] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f83cb19ce59 [ 388.868172][T12755] RDX: 00007f83c93d4f10 RSI: 0000000000000058 RDI: 00007f83c93d4f10 [ 388.868182][T12755] RBP: 00007f83cb232e6f R08: 0000000000000000 R09: 0000000000000058 [ 388.868192][T12755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.868201][T12755] R13: 00007f83cb416128 R14: 00007f83cb416090 R15: 00007ffd2c96e358 [ 388.868215][T12755] [ 391.297450][T12805] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1478'. [ 394.594494][T12889] FAULT_INJECTION: forcing a failure. [ 394.594494][T12889] name failslab, interval 1, probability 0, space 0, times 0 [ 394.851172][T12889] CPU: 0 UID: 0 PID: 12889 Comm: syz.2.1495 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 394.851206][T12889] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 394.851230][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.851240][T12889] Call Trace: [ 394.851246][T12889] [ 394.851252][T12889] dump_stack_lvl+0x100/0x190 [ 394.851277][T12889] should_fail_ex.cold+0x5/0xa [ 394.851295][T12889] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 394.851312][T12889] should_failslab+0xc2/0x120 [ 394.851338][T12889] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 394.851352][T12889] ? anon_vma_fork+0x19a/0x6b0 [ 394.851374][T12889] ? kmem_cache_alloc_noprof+0x292/0x6d0 [ 394.851389][T12889] anon_vma_fork+0x19a/0x6b0 [ 394.851410][T12889] dup_mmap+0x143e/0x21b0 [ 394.851433][T12889] ? __pfx_dup_mmap+0x10/0x10 [ 394.851450][T12889] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 394.851478][T12889] ? lock_release+0x24d/0x310 [ 394.851500][T12889] ? do_raw_spin_lock+0x128/0x260 [ 394.851514][T12889] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 394.851529][T12889] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 394.851556][T12889] ? rcu_is_watching+0x12/0xc0 [ 394.851576][T12889] ? lock_acquire+0x301/0x370 [ 394.851597][T12889] copy_process+0x4588/0x7ff0 [ 394.851618][T12889] ? __pfx_copy_process+0x10/0x10 [ 394.851633][T12889] ? futex_wake+0x4ea/0x5e0 [ 394.851649][T12889] ? rcu_is_watching+0x12/0xc0 [ 394.851666][T12889] kernel_clone+0x176/0x9d0 [ 394.851681][T12889] ? __pfx_kernel_clone+0x10/0x10 [ 394.851700][T12889] __do_sys_clone+0xd9/0x120 [ 394.851714][T12889] ? __pfx___do_sys_clone+0x10/0x10 [ 394.851728][T12889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 394.851748][T12889] ? rcu_is_watching+0x12/0xc0 [ 394.851763][T12889] do_syscall_64+0x115/0x840 [ 394.851779][T12889] ? clear_bhb_loop+0x40/0x90 [ 394.851796][T12889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.851811][T12889] RIP: 0033:0x7f53f4d9ce59 [ 394.851823][T12889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.851838][T12889] RSP: 002b:00007f53f5bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 394.851853][T12889] RAX: ffffffffffffffda RBX: 00007f53f5016090 RCX: 00007f53f4d9ce59 [ 394.851863][T12889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 394.851872][T12889] RBP: 00007f53f4e32e6f R08: 0000000000000042 R09: 0000000000000000 [ 394.851884][T12889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.851892][T12889] R13: 00007f53f5016128 R14: 00007f53f5016090 R15: 00007ffc1aaa2a28 [ 394.851906][T12889] [ 395.796391][ T9630] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 397.776721][T12962] random: crng reseeded on system resumption [ 397.864063][ T9630] Bluetooth: hci3: command 0x0c1a tx timeout [ 397.877849][T12962] hub 1-0:1.0: USB hub found [ 397.906851][T12962] hub 1-0:1.0: 1 port detected [ 397.967508][T12966] netlink: 'syz.1.1511': attribute type 23 has an invalid length. [ 398.109965][T12971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1514'. [ 398.449540][T12961] Process accounting resumed [ 399.209185][ T7885] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 399.217019][ T7885] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 399.626886][T13005] Process accounting resumed [ 399.933330][ T7873] Bluetooth: hci3: command 0x0c1a tx timeout [ 400.126217][T13026] No such timeout policy "" [ 400.666128][T13047] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1529'. [ 403.452648][T13139] can0: slcan on pty238. [ 403.525915][T13145] can0 (unregistered): slcan off pty238. [ 404.287048][T13147] Process accounting resumed [ 406.011355][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 406.669572][T13271] ubi0: attaching mtd0 [ 406.683256][T13271] ubi0: scanning is finished [ 406.702147][T13271] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 406.882487][T13271] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 407.643890][T13299] futex_wake_op: syz.1.1570 tries to shift op by -2048; fix this program [ 407.734981][T13296] program syz.3.1571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.761445][T13308] futex_wake_op: syz.1.1570 tries to shift op by -2048; fix this program [ 409.567122][T13344] FAULT_INJECTION: forcing a failure. [ 409.567122][T13344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.647125][T13344] CPU: 0 UID: 0 PID: 13344 Comm: syz.3.1580 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 409.647158][T13344] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 409.647165][T13344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.647174][T13344] Call Trace: [ 409.647180][T13344] [ 409.647186][T13344] dump_stack_lvl+0x100/0x190 [ 409.647210][T13344] should_fail_ex.cold+0x5/0xa [ 409.647229][T13344] _copy_from_user+0x2e/0xd0 [ 409.647253][T13344] copy_msghdr_from_user+0x9f/0x4c0 [ 409.647273][T13344] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 409.647305][T13344] ? kstrtouint_from_user+0x13c/0x1d0 [ 409.647323][T13344] ___sys_sendmsg+0x106/0x1e0 [ 409.647338][T13344] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.647352][T13344] ? get_pid_task+0x106/0x250 [ 409.647422][T13344] ? rcu_is_watching+0x12/0xc0 [ 409.647445][T13344] __sys_sendmsg+0x160/0x210 [ 409.647465][T13344] ? __pfx___sys_sendmsg+0x10/0x10 [ 409.647487][T13344] ? rcu_is_watching+0x12/0xc0 [ 409.647502][T13344] do_syscall_64+0x115/0x840 [ 409.647518][T13344] ? clear_bhb_loop+0x40/0x90 [ 409.647541][T13344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.647556][T13344] RIP: 0033:0x7f83cb19ce59 [ 409.647569][T13344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.647586][T13344] RSP: 002b:00007f83c93f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.647602][T13344] RAX: ffffffffffffffda RBX: 00007f83cb415fa0 RCX: 00007f83cb19ce59 [ 409.647611][T13344] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 409.647621][T13344] RBP: 00007f83c93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 409.647629][T13344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.647638][T13344] R13: 00007f83cb416038 R14: 00007f83cb415fa0 R15: 00007ffd2c96e358 [ 409.647651][T13344] [ 410.370390][ T9630] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 411.854245][T13378] vivid-007: ================= START STATUS ================= [ 411.878304][T13378] vivid-007: Generate PTS: true [ 411.898674][T13378] vivid-007: Generate SCR: true [ 411.919683][T13378] tpg source WxH: 320x240 (Y'CbCr) [ 411.954877][T13378] tpg field: 1 [ 411.968136][T13378] tpg crop: (0,0)/320x240 [ 411.985816][T13378] tpg compose: (0,0)/320x240 [ 412.012309][T13378] tpg colorspace: 8 [ 412.035002][T13378] tpg transfer function: 0/0 [ 412.059828][T13378] tpg Y'CbCr encoding: 0/0 [ 412.078189][T13378] tpg quantization: 0/0 [ 412.098776][T13378] tpg RGB range: 0/2 [ 412.112820][T13378] vivid-007: ================== END STATUS ================== [ 412.428374][ T9630] Bluetooth: hci2: command 0x0c1a tx timeout [ 412.690336][T13378] pim6reg: entered allmulticast mode [ 413.018172][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 413.045634][T13393] FAULT_INJECTION: forcing a failure. [ 413.045634][T13393] name failslab, interval 1, probability 0, space 0, times 0 [ 413.092058][T13393] CPU: 0 UID: 0 PID: 13393 Comm: syz.1.1590 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 413.092091][T13393] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 413.092098][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.092107][T13393] Call Trace: [ 413.092111][T13393] [ 413.092117][T13393] dump_stack_lvl+0x100/0x190 [ 413.092138][T13393] should_fail_ex.cold+0x5/0xa [ 413.092155][T13393] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 413.092174][T13393] should_failslab+0xc2/0x120 [ 413.092191][T13393] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 413.092205][T13393] ? __alloc_skb+0x140/0x710 [ 413.092277][T13393] ? __alloc_skb+0x5b7/0x710 [ 413.092304][T13393] __alloc_skb+0x140/0x710 [ 413.092320][T13393] ? __alloc_skb+0x5b7/0x710 [ 413.092337][T13393] ? __pfx___alloc_skb+0x10/0x10 [ 413.092354][T13393] ? netlink_autobind.isra.0+0x160/0x370 [ 413.092395][T13393] netlink_alloc_large_skb+0x69/0x150 [ 413.092411][T13393] netlink_sendmsg+0x680/0xda0 [ 413.092453][T13393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.092467][T13393] ? __import_iovec+0x1d2/0x640 [ 413.092492][T13393] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 413.092510][T13393] ____sys_sendmsg+0xa4d/0xbe0 [ 413.092524][T13393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.092539][T13393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.092555][T13393] ? kstrtouint_from_user+0x13c/0x1d0 [ 413.092573][T13393] ___sys_sendmsg+0x190/0x1e0 [ 413.092588][T13393] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.092602][T13393] ? get_pid_task+0x106/0x250 [ 413.092622][T13393] ? rcu_is_watching+0x12/0xc0 [ 413.092642][T13393] __sys_sendmsg+0x160/0x210 [ 413.092662][T13393] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.092684][T13393] ? rcu_is_watching+0x12/0xc0 [ 413.092699][T13393] do_syscall_64+0x115/0x840 [ 413.092715][T13393] ? clear_bhb_loop+0x40/0x90 [ 413.092732][T13393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.092747][T13393] RIP: 0033:0x7f64a879ce59 [ 413.092760][T13393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.092774][T13393] RSP: 002b:00007f64a96e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.092790][T13393] RAX: ffffffffffffffda RBX: 00007f64a8a15fa0 RCX: 00007f64a879ce59 [ 413.092800][T13393] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 413.092808][T13393] RBP: 00007f64a96e1090 R08: 0000000000000000 R09: 0000000000000000 [ 413.092817][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.092826][T13393] R13: 00007f64a8a16038 R14: 00007f64a8a15fa0 R15: 00007fff0dd92978 [ 413.092839][T13393] [ 414.497883][ T9630] Bluetooth: hci2: command 0x0c1a tx timeout [ 414.605023][T13406] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 414.612307][T13406] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 414.622991][T13406] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 414.632729][T13406] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 415.060094][T13433] blktrace: Concurrent blktraces are not allowed on loop2 [ 415.133646][T13433] FAULT_INJECTION: forcing a failure. [ 415.133646][T13433] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 415.297958][T13433] CPU: 0 UID: 0 PID: 13433 Comm: syz.3.1600 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 415.298002][T13433] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 415.298011][T13433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.298022][T13433] Call Trace: [ 415.298028][T13433] [ 415.298034][T13433] dump_stack_lvl+0x100/0x190 [ 415.298057][T13433] should_fail_ex.cold+0x5/0xa [ 415.298078][T13433] should_fail_alloc_page+0xeb/0x140 [ 415.298101][T13433] prepare_alloc_pages+0x1f0/0x5f0 [ 415.298124][T13433] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 415.298149][T13433] ? alloc_skb_with_frags+0xdd/0x760 [ 415.298172][T13433] ? tun_chr_write_iter+0xdc/0x200 [ 415.298271][T13433] ? vfs_write+0x6ac/0x1050 [ 415.298294][T13433] ? __x64_sys_pwrite64+0x1eb/0x250 [ 415.298321][T13433] ? do_syscall_64+0x115/0x840 [ 415.298338][T13433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.298356][T13433] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 415.298388][T13433] ? rcu_is_watching+0x12/0xc0 [ 415.298404][T13433] ? trace_kmalloc+0xeb/0x110 [ 415.298420][T13433] ? __kasan_kmalloc+0xaa/0xb0 [ 415.298435][T13433] ? __kmalloc_node_track_caller_noprof+0x33b/0x890 [ 415.298454][T13433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 415.298486][T13433] ? policy_nodemask+0xed/0x4f0 [ 415.298509][T13433] alloc_pages_mpol+0x1fb/0x540 [ 415.298530][T13433] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 415.298548][T13433] ? __alloc_skb+0x5b7/0x710 [ 415.298566][T13433] ? __pfx___alloc_skb+0x10/0x10 [ 415.298584][T13433] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 415.298609][T13433] alloc_pages_noprof+0x1a/0x160 [ 415.298629][T13433] alloc_skb_with_frags+0x4e7/0x760 [ 415.298653][T13433] sock_alloc_send_pskb+0x801/0x980 [ 415.298674][T13433] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 415.298693][T13433] ? rcu_is_watching+0x12/0xc0 [ 415.298707][T13433] ? futex_unqueue+0x133/0x2c0 [ 415.298729][T13433] ? rcu_is_watching+0x12/0xc0 [ 415.298744][T13433] tun_get_user+0x904/0x3c20 [ 415.298763][T13433] ? __pfx_tun_get_user+0x10/0x10 [ 415.298777][T13433] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 415.298797][T13433] ? tun_get+0x191/0x370 [ 415.298809][T13433] ? rcu_is_watching+0x12/0xc0 [ 415.298823][T13433] ? tun_get+0x191/0x370 [ 415.298834][T13433] ? lock_release+0x24d/0x310 [ 415.298856][T13433] tun_chr_write_iter+0xdc/0x200 [ 415.298874][T13433] vfs_write+0x6ac/0x1050 [ 415.298896][T13433] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 415.298912][T13433] ? __pfx_vfs_write+0x10/0x10 [ 415.298931][T13433] ? lock_release+0x24d/0x310 [ 415.298954][T13433] __x64_sys_pwrite64+0x1eb/0x250 [ 415.298975][T13433] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 415.298996][T13433] ? rcu_is_watching+0x12/0xc0 [ 415.299011][T13433] do_syscall_64+0x115/0x840 [ 415.299026][T13433] ? clear_bhb_loop+0x40/0x90 [ 415.299042][T13433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.299057][T13433] RIP: 0033:0x7f83cb19ce59 [ 415.299072][T13433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.299086][T13433] RSP: 002b:00007f83c93d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 415.299104][T13433] RAX: ffffffffffffffda RBX: 00007f83cb416090 RCX: 00007f83cb19ce59 [ 415.299115][T13433] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 415.299125][T13433] RBP: 00007f83cb232e6f R08: 0000000000000000 R09: 0000000000000000 [ 415.299135][T13433] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 415.299151][T13433] R13: 00007f83cb416128 R14: 00007f83cb416090 R15: 00007ffd2c96e358 [ 415.299167][T13433] [ 416.068950][ T9630] Bluetooth: hci1: command 0x0c1a tx timeout [ 416.081277][T13454] FAULT_INJECTION: forcing a failure. [ 416.081277][T13454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.115953][T13454] CPU: 0 UID: 0 PID: 13454 Comm: syz.1.1605 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 416.115992][T13454] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 416.115999][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 416.116008][T13454] Call Trace: [ 416.116014][T13454] [ 416.116019][T13454] dump_stack_lvl+0x100/0x190 [ 416.116042][T13454] should_fail_ex.cold+0x5/0xa [ 416.116059][T13454] _copy_from_iter+0x1f4/0x1690 [ 416.116084][T13454] ? __asan_memset+0x23/0x50 [ 416.116107][T13454] ? __pfx__copy_from_iter+0x10/0x10 [ 416.116128][T13454] ? __pfx___alloc_skb+0x10/0x10 [ 416.116148][T13454] ? netlink_autobind.isra.0+0x160/0x370 [ 416.116167][T13454] netlink_sendmsg+0x808/0xda0 [ 416.116182][T13454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.116196][T13454] ? __import_iovec+0x1d2/0x640 [ 416.116219][T13454] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 416.116237][T13454] ____sys_sendmsg+0xa4d/0xbe0 [ 416.116251][T13454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.116282][T13454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.116297][T13454] ? kstrtouint_from_user+0x13c/0x1d0 [ 416.116315][T13454] ___sys_sendmsg+0x190/0x1e0 [ 416.116330][T13454] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.116345][T13454] ? get_pid_task+0x106/0x250 [ 416.116364][T13454] ? rcu_is_watching+0x12/0xc0 [ 416.116384][T13454] __sys_sendmsg+0x160/0x210 [ 416.116404][T13454] ? __pfx___sys_sendmsg+0x10/0x10 [ 416.116425][T13454] ? rcu_is_watching+0x12/0xc0 [ 416.116440][T13454] do_syscall_64+0x115/0x840 [ 416.116456][T13454] ? clear_bhb_loop+0x40/0x90 [ 416.116472][T13454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.116487][T13454] RIP: 0033:0x7f64a879ce59 [ 416.116500][T13454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.116515][T13454] RSP: 002b:00007f64a96e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.116530][T13454] RAX: ffffffffffffffda RBX: 00007f64a8a15fa0 RCX: 00007f64a879ce59 [ 416.116540][T13454] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 416.116548][T13454] RBP: 00007f64a96e1090 R08: 0000000000000000 R09: 0000000000000000 [ 416.116557][T13454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.116566][T13454] R13: 00007f64a8a16038 R14: 00007f64a8a15fa0 R15: 00007fff0dd92978 [ 416.116579][T13454] [ 416.656773][ T9630] Bluetooth: hci3: command 0x0c1a tx timeout [ 416.663287][ T9630] Bluetooth: hci2: command 0x0c1a tx timeout [ 416.669740][ T9630] Bluetooth: hci0: command 0x0c1a tx timeout [ 417.538071][T13465] could not allocate digest TFM handle [ 417.872464][T13492] FAULT_INJECTION: forcing a failure. [ 417.872464][T13492] name failslab, interval 1, probability 0, space 0, times 0 [ 417.916203][T13492] CPU: 0 UID: 0 PID: 13492 Comm: syz.1.1614 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 417.916235][T13492] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 417.916242][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 417.916251][T13492] Call Trace: [ 417.916256][T13492] [ 417.916262][T13492] dump_stack_lvl+0x100/0x190 [ 417.916286][T13492] should_fail_ex.cold+0x5/0xa [ 417.916305][T13492] should_failslab+0xc2/0x120 [ 417.916323][T13492] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 417.916338][T13492] ? skb_clone+0x190/0x400 [ 417.916362][T13492] skb_clone+0x190/0x400 [ 417.916380][T13492] netlink_deliver_tap+0xaed/0xcc0 [ 417.916407][T13492] netlink_unicast+0x62b/0x850 [ 417.916423][T13492] ? __pfx_netlink_unicast+0x10/0x10 [ 417.916439][T13492] netlink_sendmsg+0x8b0/0xda0 [ 417.916455][T13492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.916468][T13492] ? __import_iovec+0x1d2/0x640 [ 417.916493][T13492] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 417.916512][T13492] ____sys_sendmsg+0xa4d/0xbe0 [ 417.916526][T13492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.916541][T13492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.916556][T13492] ? kstrtouint_from_user+0x13c/0x1d0 [ 417.916575][T13492] ___sys_sendmsg+0x190/0x1e0 [ 417.916590][T13492] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.916605][T13492] ? get_pid_task+0x106/0x250 [ 417.916625][T13492] ? rcu_is_watching+0x12/0xc0 [ 417.916646][T13492] __sys_sendmsg+0x160/0x210 [ 417.916667][T13492] ? __pfx___sys_sendmsg+0x10/0x10 [ 417.916688][T13492] ? rcu_is_watching+0x12/0xc0 [ 417.916703][T13492] do_syscall_64+0x115/0x840 [ 417.916720][T13492] ? clear_bhb_loop+0x40/0x90 [ 417.916737][T13492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.916752][T13492] RIP: 0033:0x7f64a879ce59 [ 417.916764][T13492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.916779][T13492] RSP: 002b:00007f64a96e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.916794][T13492] RAX: ffffffffffffffda RBX: 00007f64a8a15fa0 RCX: 00007f64a879ce59 [ 417.916804][T13492] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 417.916813][T13492] RBP: 00007f64a96e1090 R08: 0000000000000000 R09: 0000000000000000 [ 417.916822][T13492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.916830][T13492] R13: 00007f64a8a16038 R14: 00007f64a8a15fa0 R15: 00007fff0dd92978 [ 417.916844][T13492] [ 418.438480][T13511] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 418.446609][T13511] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1618'. [ 418.495213][T13486] FAULT_INJECTION: forcing a failure. [ 418.495213][T13486] name failslab, interval 1, probability 0, space 0, times 0 [ 418.574556][T13486] CPU: 0 UID: 0 PID: 13486 Comm: syz.3.1612 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 418.574607][T13486] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 418.574614][T13486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 418.574625][T13486] Call Trace: [ 418.574631][T13486] [ 418.574638][T13486] dump_stack_lvl+0x100/0x190 [ 418.574671][T13486] should_fail_ex.cold+0x5/0xa [ 418.574691][T13486] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 418.574712][T13486] should_failslab+0xc2/0x120 [ 418.574732][T13486] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 418.574747][T13486] ? alloc_inode+0x68/0x250 [ 418.574768][T13486] ? simple_start_creating+0xb0/0x110 [ 418.574788][T13486] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 418.574847][T13486] alloc_inode+0x68/0x250 [ 418.574864][T13486] new_inode+0x22/0x1c0 [ 418.574881][T13486] __debugfs_create_file+0x105/0x4f0 [ 418.574899][T13486] debugfs_create_file_full+0x41/0x60 [ 418.574917][T13486] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 418.574932][T13486] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 418.574955][T13486] ? __kvmalloc_node_noprof+0x393/0xa60 [ 418.574971][T13486] ? alloc_netdev_mqs+0xd7/0x1550 [ 418.574994][T13486] ? lockdep_init_map_type+0x5c/0x250 [ 418.575020][T13486] ? __pfx_loopback_setup+0x10/0x10 [ 418.575068][T13486] alloc_netdev_mqs+0x314/0x1550 [ 418.575091][T13486] ? __pfx_loopback_net_init+0x10/0x10 [ 418.575116][T13486] loopback_net_init+0x38/0x170 [ 418.575141][T13486] ? __pfx_loopback_net_init+0x10/0x10 [ 418.575163][T13486] ops_init+0x1e2/0x5f0 [ 418.575187][T13486] setup_net+0x118/0x3a0 [ 418.575207][T13486] ? __pfx_setup_net+0x10/0x10 [ 418.575227][T13486] ? mutex_init_lockdep+0xf1/0x120 [ 418.575251][T13486] copy_net_ns+0x46f/0x7c0 [ 418.575272][T13486] create_new_namespaces+0x3ea/0xac0 [ 418.575298][T13486] unshare_nsproxy_namespaces+0xf2/0x220 [ 418.575321][T13486] ksys_unshare+0x438/0xab0 [ 418.575338][T13486] ? __pfx_ksys_unshare+0x10/0x10 [ 418.575355][T13486] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 418.575377][T13486] ? syscall_user_dispatch+0x76/0x130 [ 418.575401][T13486] __x64_sys_unshare+0x31/0x40 [ 418.575417][T13486] do_syscall_64+0x115/0x840 [ 418.575433][T13486] ? clear_bhb_loop+0x40/0x90 [ 418.575451][T13486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.575468][T13486] RIP: 0033:0x7f83cb19ce59 [ 418.575482][T13486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.575497][T13486] RSP: 002b:00007f83c93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 418.575515][T13486] RAX: ffffffffffffffda RBX: 00007f83cb415fa0 RCX: 00007f83cb19ce59 [ 418.575527][T13486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 418.575538][T13486] RBP: 00007f83cb232e6f R08: 0000000000000000 R09: 0000000000000000 [ 418.575553][T13486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.575564][T13486] R13: 00007f83cb416038 R14: 00007f83cb415fa0 R15: 00007ffd2c96e358 [ 418.575579][T13486] [ 418.882114][T13486] debugfs: out of free dentries, can not create file 'netdev@ffff88807e6b46f0' [ 419.210463][T13508] Process accounting resumed [ 419.689446][T13536] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 419.742977][T13525] FAULT_INJECTION: forcing a failure. [ 419.742977][T13525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.792814][T13536] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 419.890997][T13536] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 419.958062][T13525] CPU: 0 UID: 0 PID: 13525 Comm: syz.3.1621 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 419.958095][T13525] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 419.958110][T13525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 419.958120][T13525] Call Trace: [ 419.958127][T13525] [ 419.958133][T13525] dump_stack_lvl+0x100/0x190 [ 419.958156][T13525] should_fail_ex.cold+0x5/0xa [ 419.958175][T13525] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 419.958205][T13525] ? rcu_is_watching+0x12/0xc0 [ 419.958227][T13525] ? timestamp_truncate+0x22e/0x2f0 [ 419.958252][T13525] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 419.958276][T13525] ? shmem_write_begin+0x1ba/0x420 [ 419.958301][T13525] ? __pfx_shmem_write_begin+0x10/0x10 [ 419.958323][T13525] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 419.958341][T13525] generic_perform_write+0x4cb/0xa40 [ 419.958363][T13525] ? __pfx_generic_perform_write+0x10/0x10 [ 419.958380][T13525] ? __mark_inode_dirty+0x55c/0x16e0 [ 419.958398][T13525] ? mnt_put_write_access_file+0x4e/0x100 [ 419.958418][T13525] ? file_update_time_flags+0x373/0x500 [ 419.958434][T13525] shmem_file_write_iter+0x10e/0x140 [ 419.958450][T13525] vfs_write+0x6ac/0x1050 [ 419.958470][T13525] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 419.958487][T13525] ? __pfx_vfs_write+0x10/0x10 [ 419.958510][T13525] ksys_write+0x12a/0x250 [ 419.958528][T13525] ? __pfx_ksys_write+0x10/0x10 [ 419.958547][T13525] ? rcu_is_watching+0x12/0xc0 [ 419.958563][T13525] do_syscall_64+0x115/0x840 [ 419.958581][T13525] ? clear_bhb_loop+0x40/0x90 [ 419.958598][T13525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.958615][T13525] RIP: 0033:0x7f83cb19ce59 [ 419.958629][T13525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.958643][T13525] RSP: 002b:00007f83c93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 419.958659][T13525] RAX: ffffffffffffffda RBX: 00007f83cb415fa0 RCX: 00007f83cb19ce59 [ 419.958669][T13525] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 419.958679][T13525] RBP: 00007f83cb232e6f R08: 0000000000000000 R09: 0000000000000000 [ 419.958720][T13525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.958732][T13525] R13: 00007f83cb416038 R14: 00007f83cb415fa0 R15: 00007ffd2c96e358 [ 419.958761][T13525] [ 420.344660][T13541] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum [ 420.501247][ T9630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.513643][ T9630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.523257][ T9630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.531165][ T9630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.538758][ T9630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.891550][T11720] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.929051][T11720] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.970702][T11720] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.116802][T11720] bridge_slave_1: left allmulticast mode [ 421.116824][T11720] bridge_slave_1: left promiscuous mode [ 421.116944][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.122805][T11720] bridge_slave_0: left allmulticast mode [ 421.122827][T11720] bridge_slave_0: left promiscuous mode [ 421.122980][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.483262][T11720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.505489][T11720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.510809][T11720] bond0 (unregistering): Released all slaves [ 421.555839][T11720] HfR: left promiscuous mode [ 422.276231][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 422.351370][T11720] hsr_slave_0: left promiscuous mode [ 422.380896][T11720] hsr_slave_1: left promiscuous mode [ 422.400505][T11720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.431508][T11720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.448165][T11720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.463976][T11720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.489355][T11720] veth0_macvtap: left promiscuous mode [ 422.505202][T11720] veth1_vlan: left promiscuous mode [ 422.510796][T11720] veth0_vlan: left promiscuous mode [ 422.615326][ T9630] Bluetooth: hci4: command tx timeout [ 422.717650][T11720] team0 (unregistering): Port device team_slave_1 removed [ 422.741781][T11720] team0 (unregistering): Port device team_slave_0 removed [ 423.492459][T13547] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.541996][T13547] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.586229][T13547] bridge_slave_0: entered allmulticast mode [ 423.617085][T13547] bridge_slave_0: entered promiscuous mode [ 423.723831][T13547] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.759109][T13547] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.794843][T13547] bridge_slave_1: entered allmulticast mode [ 423.826801][T13547] bridge_slave_1: entered promiscuous mode [ 423.981765][T13547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.066097][T13547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.194470][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 424.313959][T13547] team0: Port device team_slave_0 added [ 424.367485][T13547] team0: Port device team_slave_1 added [ 424.461778][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'. [ 424.510164][T13547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.561710][T13547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.686724][ T7873] Bluetooth: hci4: command tx timeout [ 424.753762][T13547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.820444][T13547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.869425][T13547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.996387][T13547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.275008][T13547] hsr_slave_0: entered promiscuous mode [ 425.290553][T13547] hsr_slave_1: entered promiscuous mode [ 425.306523][T13547] debugfs: 'hsr0' already exists in 'hsr' [ 425.320039][T13547] Cannot create hsr debugfs directory [ 425.588923][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 425.856256][T13547] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 425.910946][T13547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.936202][T13547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.959525][T13547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.992596][T13547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 426.046200][T13547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.095021][T13547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 426.149962][T13547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.434178][T13547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.490434][T13547] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.530796][ T9762] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.538085][ T9762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.661313][ T9762] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.668747][ T9762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.754794][ T7873] Bluetooth: hci4: command tx timeout [ 426.858625][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 428.223668][T13547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.822963][ T7873] Bluetooth: hci4: command tx timeout [ 429.039534][T13547] veth0_vlan: entered promiscuous mode [ 429.117144][T13787] Process accounting paused [ 429.124548][T13547] veth1_vlan: entered promiscuous mode [ 429.330945][T13547] veth0_macvtap: entered promiscuous mode [ 429.380379][ T30] audit: type=1800 audit(1843106760.879:11): pid=13823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1662" name="features" dev="configfs" ino=54618 res=0 errno=0 [ 429.446279][T13547] veth1_macvtap: entered promiscuous mode [ 429.623937][T13547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.707005][T13547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.804299][ T7872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.848505][ T7872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.880435][ T7873] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 429.942856][ T7872] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.982339][ T7872] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.312022][ T7872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.350134][ T7872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.441918][ T7872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.485599][ T7872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.741002][T13853] NFSD: Failed to start, no listeners configured. [ 431.328869][T13872] FAULT_INJECTION: forcing a failure. [ 431.328869][T13872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.398574][T13872] CPU: 0 UID: 0 PID: 13872 Comm: syz.2.1671 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 431.398607][T13872] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 431.398613][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.398623][T13872] Call Trace: [ 431.398628][T13872] [ 431.398633][T13872] dump_stack_lvl+0x100/0x190 [ 431.398657][T13872] should_fail_ex.cold+0x5/0xa [ 431.398677][T13872] _copy_to_user+0x32/0xd0 [ 431.398702][T13872] simple_read_from_buffer+0xcb/0x170 [ 431.398725][T13872] proc_fail_nth_read+0x1af/0x230 [ 431.398742][T13872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.398757][T13872] ? security_file_permission+0x76/0x210 [ 431.398779][T13872] ? rw_verify_area+0xce/0x6d0 [ 431.398805][T13872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.398819][T13872] vfs_read+0x1e4/0xb40 [ 431.398839][T13872] ? __pfx_vfs_read+0x10/0x10 [ 431.398857][T13872] ? rcu_is_watching+0x12/0xc0 [ 431.398875][T13872] ? __fget_files+0x21f/0x3d0 [ 431.398897][T13872] ksys_read+0x12a/0x250 [ 431.398915][T13872] ? __pfx_ksys_read+0x10/0x10 [ 431.398935][T13872] ? rcu_is_watching+0x12/0xc0 [ 431.398950][T13872] do_syscall_64+0x115/0x840 [ 431.398967][T13872] ? clear_bhb_loop+0x40/0x90 [ 431.398985][T13872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.399000][T13872] RIP: 0033:0x7f53f4d5d68e [ 431.399012][T13872] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 431.399026][T13872] RSP: 002b:00007f53f5be9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.399044][T13872] RAX: ffffffffffffffda RBX: 00007f53f5bea6c0 RCX: 00007f53f4d5d68e [ 431.399054][T13872] RDX: 000000000000000f RSI: 00007f53f5bea0a0 RDI: 0000000000000003 [ 431.399063][T13872] RBP: 00007f53f5bea090 R08: 0000000000000000 R09: 0000000000000000 [ 431.399072][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.399081][T13872] R13: 00007f53f5016038 R14: 00007f53f5015fa0 R15: 00007ffc1aaa2a28 [ 431.399094][T13872] [ 432.090821][ T7873] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 432.098419][ T7873] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 432.447195][T13898] ubi0: attaching mtd0 [ 432.474188][T13898] ubi0: scanning is finished [ 432.506736][T13898] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 433.019745][T13898] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 433.899993][T13943] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 434.786423][T13939] Process accounting paused [ 435.238101][T13966] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1695'. [ 439.607311][T14064] FAULT_INJECTION: forcing a failure. [ 439.607311][T14064] name failslab, interval 1, probability 0, space 0, times 0 [ 439.769473][T14064] CPU: 0 UID: 0 PID: 14064 Comm: syz.1.1713 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 439.769507][T14064] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 439.769515][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 439.769524][T14064] Call Trace: [ 439.769531][T14064] [ 439.769537][T14064] dump_stack_lvl+0x100/0x190 [ 439.769569][T14064] should_fail_ex.cold+0x5/0xa [ 439.769587][T14064] ? fs_reclaim_acquire+0x70/0x100 [ 439.769608][T14064] should_failslab+0xc2/0x120 [ 439.769625][T14064] __kmalloc_node_track_caller_noprof+0xe4/0x890 [ 439.769643][T14064] ? ima_collect_measurement+0x531/0xb30 [ 439.769667][T14064] krealloc_node_align_noprof+0x321/0x3e0 [ 439.769684][T14064] ima_collect_measurement+0x531/0xb30 [ 439.769706][T14064] ? __pfx_ima_collect_measurement+0x10/0x10 [ 439.769732][T14064] ? process_measurement+0x5ab/0x2350 [ 439.769749][T14064] ? is_bad_inode+0xd/0x40 [ 439.769767][T14064] ? xattr_resolve_name+0x27d/0x3f0 [ 439.769788][T14064] ? vfs_getxattr_alloc+0xec/0x350 [ 439.769810][T14064] ? ima_get_hash_algo+0x241/0x400 [ 439.769826][T14064] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 439.769843][T14064] ? process_measurement+0xdfe/0x2350 [ 439.769860][T14064] process_measurement+0xdfe/0x2350 [ 439.769879][T14064] ? do_dentry_open+0x6ab/0x14d0 [ 439.769899][T14064] ? vfs_open+0x82/0x3f0 [ 439.769913][T14064] ? __pfx_process_measurement+0x10/0x10 [ 439.769930][T14064] ? __x64_sys_openat+0x12d/0x210 [ 439.769945][T14064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.769971][T14064] ? __configfs_open_file+0x6ca/0x9c0 [ 439.769993][T14064] ima_file_check+0xcc/0x120 [ 439.770010][T14064] ? __pfx_ima_file_check+0x10/0x10 [ 439.770029][T14064] security_file_post_open+0xc4/0x210 [ 439.770050][T14064] path_openat+0x985/0x4280 [ 439.770073][T14064] ? __pfx_path_openat+0x10/0x10 [ 439.770096][T14064] do_file_open+0x20e/0x430 [ 439.770116][T14064] ? __pfx_do_file_open+0x10/0x10 [ 439.770165][T14064] ? alloc_fd+0x471/0x7a0 [ 439.770186][T14064] ? do_getname+0x191/0x390 [ 439.770201][T14064] do_sys_openat2+0x10f/0x1e0 [ 439.770218][T14064] ? __pfx_do_sys_openat2+0x10/0x10 [ 439.770234][T14064] ? __fget_files+0x21f/0x3d0 [ 439.770256][T14064] __x64_sys_openat+0x12d/0x210 [ 439.770273][T14064] ? __pfx___x64_sys_openat+0x10/0x10 [ 439.770291][T14064] ? rcu_is_watching+0x12/0xc0 [ 439.770307][T14064] do_syscall_64+0x115/0x840 [ 439.770324][T14064] ? clear_bhb_loop+0x40/0x90 [ 439.770345][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.770360][T14064] RIP: 0033:0x7f64a879ce59 [ 439.770374][T14064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.770388][T14064] RSP: 002b:00007f64a96e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 439.770406][T14064] RAX: ffffffffffffffda RBX: 00007f64a8a15fa0 RCX: 00007f64a879ce59 [ 439.770417][T14064] RDX: 0000000000189002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 439.770426][T14064] RBP: 00007f64a8832e6f R08: 0000000000000000 R09: 0000000000000000 [ 439.770436][T14064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.770445][T14064] R13: 00007f64a8a16038 R14: 00007f64a8a15fa0 R15: 00007fff0dd92978 [ 439.770459][T14064] [ 440.430291][T14072] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 442.842349][ T30] audit: type=1800 audit(1843106774.405:12): pid=14064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1713" name="lu_gp_id" dev="configfs" ino=55967 res=0 errno=0 [ 444.892844][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.899289][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.402546][T14195] MTRR 1 not used [ 445.554731][T14197] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5625] was attempted by ""[14197] [ 446.879718][ T9630] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 447.307560][T14210] ubi0: attaching mtd0 [ 447.340641][T14210] ubi0: scanning is finished [ 447.363335][T14210] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 447.865000][T14210] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 448.232318][T14232] FAULT_INJECTION: forcing a failure. [ 448.232318][T14232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.446739][T14232] CPU: 0 UID: 0 PID: 14232 Comm: syz.1.1742 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 448.446771][T14232] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 448.446778][T14232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 448.446787][T14232] Call Trace: [ 448.446792][T14232] [ 448.446799][T14232] dump_stack_lvl+0x100/0x190 [ 448.446820][T14232] should_fail_ex.cold+0x5/0xa [ 448.446838][T14232] _copy_from_user+0x2e/0xd0 [ 448.446864][T14232] kstrtouint_from_user+0xd6/0x1d0 [ 448.446881][T14232] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 448.446898][T14232] ? nilfs_cpfile_change_cpmode+0x1970/0x1d90 [ 448.446975][T14232] proc_fail_nth_write+0x83/0x220 [ 448.446993][T14232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 448.447008][T14232] ? __pfx___might_resched+0x10/0x10 [ 448.447031][T14232] vfs_write+0x2aa/0x1050 [ 448.447050][T14232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 448.447067][T14232] ? __pfx_vfs_write+0x10/0x10 [ 448.447085][T14232] ? rcu_is_watching+0x12/0xc0 [ 448.447102][T14232] ? __fget_files+0x21f/0x3d0 [ 448.447123][T14232] ksys_write+0x12a/0x250 [ 448.447141][T14232] ? __pfx_ksys_write+0x10/0x10 [ 448.447161][T14232] ? rcu_is_watching+0x12/0xc0 [ 448.447176][T14232] do_syscall_64+0x115/0x840 [ 448.447196][T14232] ? clear_bhb_loop+0x40/0x90 [ 448.447221][T14232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.447236][T14232] RIP: 0033:0x7f64a875d68e [ 448.447249][T14232] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 448.447263][T14232] RSP: 002b:00007f64a96e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.447278][T14232] RAX: ffffffffffffffda RBX: 00007f64a96e16c0 RCX: 00007f64a875d68e [ 448.447288][T14232] RDX: 0000000000000001 RSI: 00007f64a96e10a0 RDI: 0000000000000004 [ 448.447297][T14232] RBP: 00007f64a96e1090 R08: 0000000000000000 R09: 0000000000000000 [ 448.447306][T14232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.447314][T14232] R13: 00007f64a8a16038 R14: 00007f64a8a15fa0 R15: 00007fff0dd92978 [ 448.447327][T14232] [ 449.819006][T14263] netlink: 266 bytes leftover after parsing attributes in process `syz.4.1749'. [ 449.857913][T14263] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.680895][T14276] FAULT_INJECTION: forcing a failure. [ 450.680895][T14276] name failslab, interval 1, probability 0, space 0, times 0 [ 451.024816][T14276] CPU: 0 UID: 0 PID: 14276 Comm: syz.1.1751 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 451.024850][T14276] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 451.024857][T14276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 451.024868][T14276] Call Trace: [ 451.024873][T14276] [ 451.024879][T14276] dump_stack_lvl+0x100/0x190 [ 451.024901][T14276] should_fail_ex.cold+0x5/0xa [ 451.024918][T14276] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 451.024936][T14276] should_failslab+0xc2/0x120 [ 451.024955][T14276] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 451.024970][T14276] ? security_file_alloc+0x34/0x2c0 [ 451.024990][T14276] ? trace_kmem_cache_alloc+0xdd/0x100 [ 451.025009][T14276] security_file_alloc+0x34/0x2c0 [ 451.025035][T14276] init_file+0x95/0x480 [ 451.025050][T14276] alloc_empty_file+0x79/0x1c0 [ 451.025066][T14276] alloc_file_clone+0x5f/0x110 [ 451.025082][T14276] create_pipe_files+0x40e/0x970 [ 451.025106][T14276] do_pipe2+0xbd/0x1e0 [ 451.025127][T14276] ? __pfx_do_pipe2+0x10/0x10 [ 451.025149][T14276] __x64_sys_pipe+0x33/0x50 [ 451.025169][T14276] do_syscall_64+0x115/0x840 [ 451.025185][T14276] ? clear_bhb_loop+0x40/0x90 [ 451.025205][T14276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.025220][T14276] RIP: 0033:0x7f64a879ce59 [ 451.025234][T14276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.025249][T14276] RSP: 002b:00007f64a967e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 451.025264][T14276] RAX: ffffffffffffffda RBX: 00007f64a8a16270 RCX: 00007f64a879ce59 [ 451.025275][T14276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.025284][T14276] RBP: 00007f64a8832e6f R08: 0000000000000000 R09: 0000000000000000 [ 451.025293][T14276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.025302][T14276] R13: 00007f64a8a16308 R14: 00007f64a8a16270 R15: 00007fff0dd92978 [ 451.025316][T14276] [ 452.394823][T14298] FAULT_INJECTION: forcing a failure. [ 452.394823][T14298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.461195][T14298] CPU: 0 UID: 0 PID: 14298 Comm: syz.4.1757 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 452.461243][T14298] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 452.461254][T14298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 452.461264][T14298] Call Trace: [ 452.461270][T14298] [ 452.461278][T14298] dump_stack_lvl+0x100/0x190 [ 452.461300][T14298] should_fail_ex.cold+0x5/0xa [ 452.461321][T14298] _copy_from_user+0x2e/0xd0 [ 452.461345][T14298] __sys_bpf+0x2f5/0x4e80 [ 452.461427][T14298] ? kstrtouint_from_user+0xb0/0x1d0 [ 452.461448][T14298] ? __pfx___sys_bpf+0x10/0x10 [ 452.461471][T14298] ? rcu_is_watching+0x12/0xc0 [ 452.461488][T14298] ? get_pid_task+0xfc/0x250 [ 452.461509][T14298] ? rcu_is_watching+0x12/0xc0 [ 452.461528][T14298] ? get_pid_task+0xfc/0x250 [ 452.461542][T14298] ? lock_release+0x24d/0x310 [ 452.461565][T14298] ? ksys_write+0x12a/0x250 [ 452.461587][T14298] ? rcu_is_watching+0x12/0xc0 [ 452.461602][T14298] ? preempt_count_add+0x76/0x150 [ 452.461622][T14298] ? ksys_write+0x190/0x250 [ 452.461643][T14298] ? rcu_is_watching+0x12/0xc0 [ 452.461657][T14298] ? ksys_write+0x190/0x250 [ 452.461675][T14298] ? lock_release+0x24d/0x310 [ 452.461699][T14298] ? fput+0x79/0x100 [ 452.461713][T14298] ? __x64_sys_bpf+0xce/0x140 [ 452.461730][T14298] __x64_sys_bpf+0xce/0x140 [ 452.461743][T14298] ? trace_irq_enable.constprop.0+0x122/0x160 [ 452.461771][T14298] do_syscall_64+0x115/0x840 [ 452.461787][T14298] ? clear_bhb_loop+0x40/0x90 [ 452.461804][T14298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.461819][T14298] RIP: 0033:0x7fbc81d9ce59 [ 452.461832][T14298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.461846][T14298] RSP: 002b:00007fbc82be9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.461862][T14298] RAX: ffffffffffffffda RBX: 00007fbc82015fa0 RCX: 00007fbc81d9ce59 [ 452.461875][T14298] RDX: 0000000000000009 RSI: 0000200000000000 RDI: 0000000000000005 [ 452.461884][T14298] RBP: 00007fbc82be9090 R08: 0000000000000000 R09: 0000000000000000 [ 452.461893][T14298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.461902][T14298] R13: 00007fbc82016038 R14: 00007fbc82015fa0 R15: 00007ffccca2a308 [ 452.461915][T14298] [ 454.084205][T14329] FAULT_INJECTION: forcing a failure. [ 454.084205][T14329] name failslab, interval 1, probability 0, space 0, times 0 [ 454.132761][T14329] CPU: 0 UID: 0 PID: 14329 Comm: syz.4.1765 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 454.132794][T14329] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 454.132800][T14329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.132811][T14329] Call Trace: [ 454.132816][T14329] [ 454.132823][T14329] dump_stack_lvl+0x100/0x190 [ 454.132844][T14329] should_fail_ex.cold+0x5/0xa [ 454.132873][T14329] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 454.132890][T14329] should_failslab+0xc2/0x120 [ 454.132908][T14329] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 454.132923][T14329] ? __alloc_skb+0x140/0x710 [ 454.132945][T14329] ? __alloc_skb+0x5b7/0x710 [ 454.132962][T14329] __alloc_skb+0x140/0x710 [ 454.132979][T14329] ? __alloc_skb+0x5b7/0x710 [ 454.132996][T14329] ? __pfx___alloc_skb+0x10/0x10 [ 454.133013][T14329] ? netlink_autobind.isra.0+0x160/0x370 [ 454.133031][T14329] netlink_alloc_large_skb+0x69/0x150 [ 454.133047][T14329] netlink_sendmsg+0x680/0xda0 [ 454.133063][T14329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.133079][T14329] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 454.133103][T14329] sock_write_iter+0x53a/0x5b0 [ 454.133118][T14329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.133132][T14329] ? __pfx_sock_write_iter+0x10/0x10 [ 454.133148][T14329] ? bpf_lsm_file_permission+0x9/0x10 [ 454.133213][T14329] ? security_file_permission+0x76/0x210 [ 454.133234][T14329] ? rw_verify_area+0xce/0x6d0 [ 454.133253][T14329] vfs_write+0x6ac/0x1050 [ 454.133272][T14329] ? __pfx_sock_write_iter+0x10/0x10 [ 454.133286][T14329] ? __pfx_vfs_write+0x10/0x10 [ 454.133332][T14329] ? lock_release+0x24d/0x310 [ 454.133357][T14329] ksys_write+0x1f8/0x250 [ 454.133376][T14329] ? __pfx_ksys_write+0x10/0x10 [ 454.133395][T14329] ? rcu_is_watching+0x12/0xc0 [ 454.133411][T14329] do_syscall_64+0x115/0x840 [ 454.133427][T14329] ? clear_bhb_loop+0x40/0x90 [ 454.133444][T14329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.133459][T14329] RIP: 0033:0x7fbc81d9ce59 [ 454.133472][T14329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.133487][T14329] RSP: 002b:00007fbc82be9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 454.133502][T14329] RAX: ffffffffffffffda RBX: 00007fbc82015fa0 RCX: 00007fbc81d9ce59 [ 454.133512][T14329] RDX: 00000000000002fb RSI: 0000200000000000 RDI: 0000000000000003 [ 454.133521][T14329] RBP: 00007fbc82be9090 R08: 0000000000000000 R09: 0000000000000000 [ 454.133531][T14329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.133539][T14329] R13: 00007fbc82016038 R14: 00007fbc82015fa0 R15: 00007ffccca2a308 [ 454.133552][T14329] [ 455.872585][T14358] FAULT_INJECTION: forcing a failure. [ 455.872585][T14358] name failslab, interval 1, probability 0, space 0, times 0 [ 455.965326][T14358] CPU: 0 UID: 0 PID: 14358 Comm: syz.3.1772 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 455.965360][T14358] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 455.965367][T14358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.965376][T14358] Call Trace: [ 455.965381][T14358] [ 455.965387][T14358] dump_stack_lvl+0x100/0x190 [ 455.965410][T14358] should_fail_ex.cold+0x5/0xa [ 455.965426][T14358] ? __kmalloc_cache_node_noprof+0x57/0x760 [ 455.965459][T14358] should_failslab+0xc2/0x120 [ 455.965476][T14358] __kmalloc_cache_node_noprof+0x7d/0x760 [ 455.965492][T14358] ? __get_vm_area_node+0x101/0x330 [ 455.965512][T14358] __get_vm_area_node+0x101/0x330 [ 455.965530][T14358] __vmalloc_node_range_noprof+0x228/0x1630 [ 455.965549][T14358] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 455.965569][T14358] ? process_measurement+0x4c8/0x2350 [ 455.965587][T14358] ? rcu_is_watching+0x12/0xc0 [ 455.965603][T14358] ? lock_release+0x24d/0x310 [ 455.965622][T14358] ? down_write+0x146/0x1f0 [ 455.965644][T14358] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 455.965665][T14358] ? process_measurement+0x1f4/0x2350 [ 455.965683][T14358] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 455.965702][T14358] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 455.965722][T14358] ? rcu_is_watching+0x12/0xc0 [ 455.965736][T14358] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 455.965754][T14358] ? lock_release+0x24d/0x310 [ 455.965774][T14358] ? tomoyo_check_open_permission+0x211/0x3c0 [ 455.965794][T14358] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 455.965820][T14358] __vmalloc_node_noprof+0xad/0xf0 [ 455.965839][T14358] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 455.965856][T14358] __vmalloc_noprof+0xa3/0x120 [ 455.965875][T14358] ? __pfx___vmalloc_noprof+0x10/0x10 [ 455.965894][T14358] ? rcu_is_watching+0x12/0xc0 [ 455.965908][T14358] ? apparmor_capable+0x1d7/0x4d0 [ 455.965931][T14358] bpf_prog_alloc_no_stats+0x58/0x640 [ 455.965948][T14358] ? security_capable+0x80/0x260 [ 455.965964][T14358] bpf_prog_alloc+0x3b/0x200 [ 455.965981][T14358] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 455.966001][T14358] bpf_prog_load+0x1149/0x2fa0 [ 455.966025][T14358] ? __pfx_bpf_prog_load+0x10/0x10 [ 455.966047][T14358] ? putname+0xb1/0x110 [ 455.966068][T14358] ? _parse_integer_limit+0x1ac/0x220 [ 455.966091][T14358] __sys_bpf+0x18dc/0x4e80 [ 455.966114][T14358] ? kstrtouint_from_user+0xb0/0x1d0 [ 455.966130][T14358] ? __pfx___sys_bpf+0x10/0x10 [ 455.966151][T14358] ? rcu_is_watching+0x12/0xc0 [ 455.966166][T14358] ? get_pid_task+0xfc/0x250 [ 455.966182][T14358] ? rcu_is_watching+0x12/0xc0 [ 455.966201][T14358] ? get_pid_task+0xfc/0x250 [ 455.966216][T14358] ? lock_release+0x24d/0x310 [ 455.966238][T14358] ? ksys_write+0x12a/0x250 [ 455.966257][T14358] ? rcu_is_watching+0x12/0xc0 [ 455.966272][T14358] ? preempt_count_add+0x76/0x150 [ 455.966293][T14358] ? ksys_write+0x190/0x250 [ 455.966311][T14358] ? rcu_is_watching+0x12/0xc0 [ 455.966329][T14358] ? ksys_write+0x190/0x250 [ 455.966347][T14358] ? lock_release+0x24d/0x310 [ 455.966371][T14358] ? fput+0x79/0x100 [ 455.966384][T14358] ? __x64_sys_bpf+0xce/0x140 [ 455.966397][T14358] __x64_sys_bpf+0xce/0x140 [ 455.966410][T14358] ? trace_irq_enable.constprop.0+0x122/0x160 [ 455.966436][T14358] do_syscall_64+0x115/0x840 [ 455.966450][T14358] ? clear_bhb_loop+0x40/0x90 [ 455.966467][T14358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.966481][T14358] RIP: 0033:0x7f83cb19ce59 [ 455.966494][T14358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.966509][T14358] RSP: 002b:00007f83c93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.966525][T14358] RAX: ffffffffffffffda RBX: 00007f83cb415fa0 RCX: 00007f83cb19ce59 [ 455.966535][T14358] RDX: 0000000000000009 RSI: 0000200000000000 RDI: 0000000000000005 [ 455.966544][T14358] RBP: 00007f83c93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.966557][T14358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.966565][T14358] R13: 00007f83cb416038 R14: 00007f83cb415fa0 R15: 00007ffd2c96e358 [ 455.966579][T14358] [ 455.966600][T14358] syz.3.1772: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 457.348231][T14380] ubi0: attaching mtd0 [ 457.358573][T14380] ubi0: scanning is finished [ 457.385917][T14358] CPU: 0 UID: 0 PID: 14358 Comm: syz.3.1772 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 457.385952][T14358] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 457.385959][T14358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.385968][T14358] Call Trace: [ 457.385975][T14358] [ 457.385980][T14358] dump_stack_lvl+0x100/0x190 [ 457.386004][T14358] warn_alloc.cold+0x94/0xa8 [ 457.386019][T14358] ? __pfx_warn_alloc+0x10/0x10 [ 457.386044][T14358] ? trace_kmalloc+0xeb/0x110 [ 457.386062][T14358] ? __kmalloc_cache_node_noprof+0x2d9/0x760 [ 457.386079][T14358] ? __kasan_kmalloc+0x8a/0xb0 [ 457.386095][T14358] ? __get_vm_area_node+0x208/0x330 [ 457.386122][T14358] __vmalloc_node_range_noprof+0xccd/0x1630 [ 457.386143][T14358] ? rcu_is_watching+0x12/0xc0 [ 457.386160][T14358] ? lock_release+0x24d/0x310 [ 457.386181][T14358] ? down_write+0x146/0x1f0 [ 457.386200][T14358] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 457.386221][T14358] ? process_measurement+0x1f4/0x2350 [ 457.386242][T14358] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.386262][T14358] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 457.386283][T14358] ? rcu_is_watching+0x12/0xc0 [ 457.386297][T14358] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 457.386316][T14358] ? lock_release+0x24d/0x310 [ 457.386337][T14358] ? tomoyo_check_open_permission+0x211/0x3c0 [ 457.386356][T14358] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 457.386373][T14358] __vmalloc_node_noprof+0xad/0xf0 [ 457.386463][T14358] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 457.386482][T14358] __vmalloc_noprof+0xa3/0x120 [ 457.386500][T14358] ? __pfx___vmalloc_noprof+0x10/0x10 [ 457.386520][T14358] ? rcu_is_watching+0x12/0xc0 [ 457.386534][T14358] ? apparmor_capable+0x1d7/0x4d0 [ 457.386552][T14358] bpf_prog_alloc_no_stats+0x58/0x640 [ 457.386570][T14358] ? security_capable+0x80/0x260 [ 457.386587][T14358] bpf_prog_alloc+0x3b/0x200 [ 457.386602][T14358] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.386626][T14358] bpf_prog_load+0x1149/0x2fa0 [ 457.386651][T14358] ? __pfx_bpf_prog_load+0x10/0x10 [ 457.386681][T14358] ? putname+0xb1/0x110 [ 457.386706][T14358] ? _parse_integer_limit+0x1ac/0x220 [ 457.386730][T14358] __sys_bpf+0x18dc/0x4e80 [ 457.386754][T14358] ? kstrtouint_from_user+0xb0/0x1d0 [ 457.386771][T14358] ? __pfx___sys_bpf+0x10/0x10 [ 457.386793][T14358] ? rcu_is_watching+0x12/0xc0 [ 457.386807][T14358] ? get_pid_task+0xfc/0x250 [ 457.386824][T14358] ? rcu_is_watching+0x12/0xc0 [ 457.386838][T14358] ? get_pid_task+0xfc/0x250 [ 457.386853][T14358] ? lock_release+0x24d/0x310 [ 457.386874][T14358] ? ksys_write+0x12a/0x250 [ 457.386894][T14358] ? rcu_is_watching+0x12/0xc0 [ 457.386909][T14358] ? preempt_count_add+0x76/0x150 [ 457.386930][T14358] ? ksys_write+0x190/0x250 [ 457.386948][T14358] ? rcu_is_watching+0x12/0xc0 [ 457.386962][T14358] ? ksys_write+0x190/0x250 [ 457.386980][T14358] ? lock_release+0x24d/0x310 [ 457.387004][T14358] ? fput+0x79/0x100 [ 457.387017][T14358] ? __x64_sys_bpf+0xce/0x140 [ 457.387030][T14358] __x64_sys_bpf+0xce/0x140 [ 457.387043][T14358] ? trace_irq_enable.constprop.0+0x122/0x160 [ 457.387066][T14358] do_syscall_64+0x115/0x840 [ 457.387081][T14358] ? clear_bhb_loop+0x40/0x90 [ 457.387098][T14358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.387118][T14358] RIP: 0033:0x7f83cb19ce59 [ 457.387132][T14358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.387145][T14358] RSP: 002b:00007f83c93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.387162][T14358] RAX: ffffffffffffffda RBX: 00007f83cb415fa0 RCX: 00007f83cb19ce59 [ 457.387171][T14358] RDX: 0000000000000009 RSI: 0000200000000000 RDI: 0000000000000005 [ 457.387180][T14358] RBP: 00007f83c93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 457.387189][T14358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.387197][T14358] R13: 00007f83cb416038 R14: 00007f83cb415fa0 R15: 00007ffd2c96e358 [ 457.387211][T14358] [ 457.387489][T14380] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 457.819094][T14358] Mem-Info: [ 457.829419][T14358] active_anon:5715 inactive_anon:15167 isolated_anon:0 [ 457.829419][T14358] active_file:11295 inactive_file:45665 isolated_file:0 [ 457.829419][T14358] unevictable:768 dirty:741 writeback:0 [ 457.829419][T14358] slab_reclaimable:11690 slab_unreclaimable:95220 [ 457.829419][T14358] mapped:35097 shmem:9672 pagetables:1681 [ 457.829419][T14358] sec_pagetables:0 bounce:0 [ 457.829419][T14358] kernel_misc_reclaimable:0 [ 457.829419][T14358] free:1288317 free_pcp:18394 free_cma:0 [ 457.941588][T14358] Node 0 active_anon:22964kB inactive_anon:60488kB active_file:45176kB inactive_file:182536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101336kB dirty:2960kB writeback:0kB shmem:36684kB shmem_thp:32768kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12384kB pagetables:6596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 458.042868][T14358] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 458.076842][T14358] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.107455][T14358] lowmem_reserve[]: 0 2476 2477 2477 2477 [ 458.113326][T14358] Node 0 DMA32 free:1241944kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22756kB inactive_anon:27708kB active_file:45176kB inactive_file:182536kB unevictable:1536kB writepending:3012kB zspages:860kB present:3129332kB managed:2536216kB mlocked:0kB bounce:0kB free_pcp:75340kB local_pcp:75340kB free_cma:0kB [ 458.152144][T14358] lowmem_reserve[]: 0 0 1 1 1 [ 458.157295][T14358] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.187482][T14384] FAULT_INJECTION: forcing a failure. [ 458.187482][T14384] name failslab, interval 1, probability 0, space 0, times 0 [ 458.200487][T14384] CPU: 0 UID: 0 PID: 14384 Comm: syz.2.1780 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 458.200517][T14384] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 458.200523][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 458.200533][T14384] Call Trace: [ 458.200538][T14384] [ 458.200544][T14384] dump_stack_lvl+0x100/0x190 [ 458.200567][T14384] should_fail_ex.cold+0x5/0xa [ 458.200585][T14384] should_failslab+0xc2/0x120 [ 458.200603][T14384] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 458.200618][T14384] ? skb_clone+0x190/0x400 [ 458.200642][T14384] skb_clone+0x190/0x400 [ 458.200660][T14384] netlink_deliver_tap+0xaed/0xcc0 [ 458.200687][T14384] netlink_unicast+0x6a5/0x850 [ 458.200702][T14384] ? __pfx_netlink_unicast+0x10/0x10 [ 458.200717][T14384] ? __asan_memcpy+0x3c/0x60 [ 458.200741][T14384] batadv_netlink_tp_meter_start+0x369/0x4b0 [ 458.200908][T14384] ? __pfx_batadv_netlink_tp_meter_start+0x10/0x10 [ 458.200930][T14384] ? dev_get_by_index+0x18a/0x380 [ 458.200952][T14384] ? batadv_meshif_is_valid+0xd/0x70 [ 458.200971][T14384] ? batadv_pre_doit+0x4a1/0x6c0 [ 458.200991][T14384] genl_family_rcv_msg_doit+0x214/0x300 [ 458.201009][T14384] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 458.201026][T14384] ? genl_get_cmd+0x3e7/0x760 [ 458.201043][T14384] ? bpf_lsm_capable+0x9/0x10 [ 458.201057][T14384] ? security_capable+0x80/0x260 [ 458.201075][T14384] ? ns_capable+0xd2/0xf0 [ 458.201100][T14384] genl_rcv_msg+0x560/0x800 [ 458.201117][T14384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.201133][T14384] ? __pfx_batadv_pre_doit+0x10/0x10 [ 458.201153][T14384] ? __pfx_batadv_netlink_tp_meter_start+0x10/0x10 [ 458.201174][T14384] ? __pfx_batadv_post_doit+0x10/0x10 [ 458.201196][T14384] netlink_rcv_skb+0x159/0x420 [ 458.201211][T14384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.201231][T14384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.201250][T14384] ? netlink_deliver_tap+0x1ae/0xcc0 [ 458.201277][T14384] genl_rcv+0x28/0x40 [ 458.201297][T14384] netlink_unicast+0x585/0x850 [ 458.201312][T14384] ? __pfx_netlink_unicast+0x10/0x10 [ 458.201333][T14384] netlink_sendmsg+0x8b0/0xda0 [ 458.201349][T14384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.201363][T14384] ? __import_iovec+0x1d2/0x640 [ 458.201388][T14384] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 458.201406][T14384] ____sys_sendmsg+0xa4d/0xbe0 [ 458.201420][T14384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.201441][T14384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.201456][T14384] ? kstrtouint_from_user+0x13c/0x1d0 [ 458.201475][T14384] ___sys_sendmsg+0x190/0x1e0 [ 458.201490][T14384] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.201505][T14384] ? get_pid_task+0x106/0x250 [ 458.201524][T14384] ? rcu_is_watching+0x12/0xc0 [ 458.201545][T14384] __sys_sendmsg+0x160/0x210 [ 458.201565][T14384] ? __pfx___sys_sendmsg+0x10/0x10 [ 458.201586][T14384] ? rcu_is_watching+0x12/0xc0 [ 458.201601][T14384] do_syscall_64+0x115/0x840 [ 458.201616][T14384] ? clear_bhb_loop+0x40/0x90 [ 458.201634][T14384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.201649][T14384] RIP: 0033:0x7f53f4d9ce59 [ 458.201662][T14384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.201694][T14384] RSP: 002b:00007f53f5bea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.201710][T14384] RAX: ffffffffffffffda RBX: 00007f53f5015fa0 RCX: 00007f53f4d9ce59 [ 458.201719][T14384] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 458.201728][T14384] RBP: 00007f53f5bea090 R08: 0000000000000000 R09: 0000000000000000 [ 458.201737][T14384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.201750][T14384] R13: 00007f53f5016038 R14: 00007f53f5015fa0 R15: 00007ffc1aaa2a28 [ 458.201764][T14384] [ 458.204064][T14358] lowmem_reserve[]: [ 458.992595][T14380] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 459.171087][T14358] 0 0 0 0 0 [ 459.183145][T14358] Node 1 Normal free:3927664kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.330242][T14358] lowmem_reserve[]: 0 0 0 0 0 [ 459.352572][T14358] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 459.404336][T14358] Node 0 DMA32: 9747*4kB (UME) 3397*8kB (UME) 2943*16kB (UME) 1797*32kB (UME) 955*64kB (UME) 917*128kB (UME) 325*256kB (UM) 100*512kB (UM) 36*1024kB (UME) 6*2048kB (UE) 174*4096kB (UME) = 1245508kB [ 459.488291][T14358] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 459.542296][T14358] Node 1 Normal: 4*4kB (UM) 4*8kB (UM) 8*16kB (UM) 8*32kB (UM) 9*64kB (UM) 7*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 3*2048kB (M) 956*4096kB (UM) = 3927664kB [ 459.613960][T14358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.648725][T14358] Node 0 hugepages_total=8 hugepages_free=7 hugepages_surp=0 hugepages_size=2048kB [ 459.680044][T14358] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.711250][T14358] Node 1 hugepages_total=7 hugepages_free=7 hugepages_surp=0 hugepages_size=2048kB [ 459.740863][T14358] 62733 total pagecache pages [ 459.755726][T14358] 95 pages in swap cache [ 459.773152][T14358] Free swap = 121768kB [ 459.788003][T14358] Total swap = 124996kB [ 459.801318][T14358] 2097051 pages RAM [ 459.812871][T14358] 0 pages HighMem/MovableOnly [ 459.827813][T14358] 431117 pages reserved [ 459.849535][T14358] 0 pages cma reserved [ 459.936679][T14409] Process accounting resumed [ 460.010368][T14427] FAULT_INJECTION: forcing a failure. [ 460.010368][T14427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.080240][T14427] CPU: 0 UID: 0 PID: 14427 Comm: syz.3.1792 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 460.080270][T14427] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 460.080277][T14427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.080286][T14427] Call Trace: [ 460.080291][T14427] [ 460.080297][T14427] dump_stack_lvl+0x100/0x190 [ 460.080319][T14427] should_fail_ex.cold+0x5/0xa [ 460.080336][T14427] _copy_to_user+0x32/0xd0 [ 460.080360][T14427] simple_read_from_buffer+0xcb/0x170 [ 460.080384][T14427] proc_fail_nth_read+0x1af/0x230 [ 460.080400][T14427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.080415][T14427] ? security_file_permission+0x76/0x210 [ 460.080436][T14427] ? rw_verify_area+0xce/0x6d0 [ 460.080455][T14427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.080469][T14427] vfs_read+0x1e4/0xb40 [ 460.080488][T14427] ? __pfx_vfs_read+0x10/0x10 [ 460.080506][T14427] ? rcu_is_watching+0x12/0xc0 [ 460.080523][T14427] ? __fget_files+0x21f/0x3d0 [ 460.080544][T14427] ksys_read+0x12a/0x250 [ 460.080562][T14427] ? __pfx_ksys_read+0x10/0x10 [ 460.080591][T14427] ? rcu_is_watching+0x12/0xc0 [ 460.080606][T14427] do_syscall_64+0x115/0x840 [ 460.080624][T14427] ? clear_bhb_loop+0x40/0x90 [ 460.080641][T14427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.080656][T14427] RIP: 0033:0x7f83cb15d68e [ 460.080668][T14427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 460.080682][T14427] RSP: 002b:00007f83c93f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.080697][T14427] RAX: ffffffffffffffda RBX: 00007f83c93f66c0 RCX: 00007f83cb15d68e [ 460.080715][T14427] RDX: 000000000000000f RSI: 00007f83c93f60a0 RDI: 0000000000000005 [ 460.080724][T14427] RBP: 00007f83c93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 460.080737][T14427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.080746][T14427] R13: 00007f83cb416038 R14: 00007f83cb415fa0 R15: 00007ffd2c96e358 [ 460.080767][T14427] [ 460.320757][T14430] FAULT_INJECTION: forcing a failure. [ 460.320757][T14430] name fail_futex, interval 1, probability 0, space 0, times 0 [ 460.334127][T14430] CPU: 0 UID: 5 PID: 14430 Comm: syz.1.1793 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 460.334161][T14430] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 460.334169][T14430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.334180][T14430] Call Trace: [ 460.334188][T14430] [ 460.334203][T14430] dump_stack_lvl+0x100/0x190 [ 460.334230][T14430] should_fail_ex.cold+0x5/0xa [ 460.334251][T14430] get_futex_key+0x1d2/0x14f0 [ 460.334280][T14430] ? __pfx_get_futex_key+0x10/0x10 [ 460.334315][T14430] ? trace_ignore_this_task+0xc3/0x100 [ 460.334336][T14430] ? event_filter_pid_sched_wakeup_probe_post+0x128/0x270 [ 460.334362][T14430] futex_wait_setup+0x91/0x540 [ 460.334382][T14430] __futex_wait+0x19f/0x300 [ 460.334399][T14430] ? __pfx___futex_wait+0x10/0x10 [ 460.334415][T14430] ? __pfx_try_to_wake_up+0x10/0x10 [ 460.334444][T14430] ? __pfx_futex_wake_mark+0x10/0x10 [ 460.334461][T14430] ? futex_wake+0x4ea/0x5e0 [ 460.334476][T14430] ? rcu_is_watching+0x12/0xc0 [ 460.334493][T14430] futex_wait+0xe6/0x370 [ 460.334509][T14430] ? __pfx_futex_wait+0x10/0x10 [ 460.334529][T14430] do_futex+0x265/0x440 [ 460.334542][T14430] ? __pfx_do_futex+0x10/0x10 [ 460.334555][T14430] ? rcu_is_watching+0x12/0xc0 [ 460.334571][T14430] __x64_sys_futex+0x34f/0x4d0 [ 460.334586][T14430] ? __pfx___x64_sys_futex+0x10/0x10 [ 460.334599][T14430] ? set_cred_ucounts+0x10f/0x200 [ 460.334621][T14430] ? rcu_is_watching+0x12/0xc0 [ 460.334637][T14430] do_syscall_64+0x115/0x840 [ 460.334654][T14430] ? clear_bhb_loop+0x40/0x90 [ 460.334670][T14430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.334686][T14430] RIP: 0033:0x7f64a879ce59 [ 460.334702][T14430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.334719][T14430] RSP: 002b:00007f64a96e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 460.334737][T14430] RAX: ffffffffffffffda RBX: 00007f64a8a15fa8 RCX: 00007f64a879ce59 [ 460.334748][T14430] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f64a8a15fa8 [ 460.334758][T14430] RBP: 00007f64a8a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 460.334769][T14430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.334779][T14430] R13: 00007f64a8a16038 R14: 00007fff0dd92890 R15: 00007fff0dd92978 [ 460.334794][T14430] [ 460.901299][ T30] audit: type=1807 audit(1843106791.985:13): UNKNOWN=127 res=0 [ 460.929730][ T30] audit: type=1802 audit(1843106791.985:14): pid=14430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1793" res=0 errno=0 [ 461.415291][T14429] ima: policy update failed [ 461.444665][ T30] audit: type=1802 audit(1843106793.111:15): pid=14429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1793" res=0 errno=0 [ 461.537484][T14453] FAULT_INJECTION: forcing a failure. [ 461.537484][T14453] name failslab, interval 1, probability 0, space 0, times 0 [ 461.672568][T14453] CPU: 0 UID: 0 PID: 14453 Comm: syz.4.1798 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 461.672641][T14453] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 461.672663][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 461.672672][T14453] Call Trace: [ 461.672678][T14453] [ 461.672684][T14453] dump_stack_lvl+0x100/0x190 [ 461.672707][T14453] should_fail_ex.cold+0x5/0xa [ 461.672727][T14453] should_failslab+0xc2/0x120 [ 461.672745][T14453] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 461.672760][T14453] ? skb_clone+0x190/0x400 [ 461.672783][T14453] skb_clone+0x190/0x400 [ 461.672803][T14453] netlink_deliver_tap+0xaed/0xcc0 [ 461.672835][T14453] netlink_unicast+0x62b/0x850 [ 461.672851][T14453] ? __pfx_netlink_unicast+0x10/0x10 [ 461.672867][T14453] netlink_sendmsg+0x8b0/0xda0 [ 461.672883][T14453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.672898][T14453] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 461.672918][T14453] sock_write_iter+0x53a/0x5b0 [ 461.672933][T14453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.672950][T14453] ? __pfx_sock_write_iter+0x10/0x10 [ 461.672965][T14453] ? bpf_lsm_file_permission+0x9/0x10 [ 461.672987][T14453] ? security_file_permission+0x76/0x210 [ 461.673009][T14453] ? rw_verify_area+0xce/0x6d0 [ 461.673027][T14453] vfs_write+0x6ac/0x1050 [ 461.673047][T14453] ? __pfx_sock_write_iter+0x10/0x10 [ 461.673061][T14453] ? __pfx_vfs_write+0x10/0x10 [ 461.673080][T14453] ? lock_release+0x24d/0x310 [ 461.673105][T14453] ksys_write+0x1f8/0x250 [ 461.673124][T14453] ? __pfx_ksys_write+0x10/0x10 [ 461.673144][T14453] ? rcu_is_watching+0x12/0xc0 [ 461.673161][T14453] do_syscall_64+0x115/0x840 [ 461.673176][T14453] ? clear_bhb_loop+0x40/0x90 [ 461.673194][T14453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.673209][T14453] RIP: 0033:0x7fbc81d9ce59 [ 461.673221][T14453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.673235][T14453] RSP: 002b:00007fbc82be9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 461.673250][T14453] RAX: ffffffffffffffda RBX: 00007fbc82015fa0 RCX: 00007fbc81d9ce59 [ 461.673260][T14453] RDX: 00000000000002fb RSI: 0000200000000000 RDI: 0000000000000003 [ 461.673269][T14453] RBP: 00007fbc82be9090 R08: 0000000000000000 R09: 0000000000000000 [ 461.673278][T14453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.673286][T14453] R13: 00007fbc82016038 R14: 00007fbc82015fa0 R15: 00007ffccca2a308 [ 461.673300][T14453] [ 462.230872][T14448] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1797'. [ 462.784938][T14463] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 462.821945][T14468] zswap: compressor 000 not available [ 464.367180][T14510] ubi0: attaching mtd0 [ 464.383506][T14510] ubi0: scanning is finished [ 464.402574][T14510] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 464.419455][T14478] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 464.655225][T14510] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 465.509152][T14517] Process accounting resumed [ 465.988204][T14550] ubi0: attaching mtd0 [ 466.012669][T14550] ubi0: scanning is finished [ 466.017469][T14550] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 466.220729][T14550] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 466.603542][T14572] FAULT_INJECTION: forcing a failure. [ 466.603542][T14572] name failslab, interval 1, probability 0, space 0, times 0 [ 466.649480][T14572] CPU: 0 UID: 0 PID: 14572 Comm: syz.4.1830 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 466.649545][T14572] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 466.649557][T14572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.649576][T14572] Call Trace: [ 466.649585][T14572] [ 466.649625][T14572] dump_stack_lvl+0x100/0x190 [ 466.649689][T14572] should_fail_ex.cold+0x5/0xa [ 466.649724][T14572] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 466.649761][T14572] should_failslab+0xc2/0x120 [ 466.649795][T14572] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 466.649828][T14572] ? __alloc_skb+0x140/0x710 [ 466.649868][T14572] ? __alloc_skb+0x5b7/0x710 [ 466.649905][T14572] __alloc_skb+0x140/0x710 [ 466.649938][T14572] ? __alloc_skb+0x5b7/0x710 [ 466.649974][T14572] ? __pfx___alloc_skb+0x10/0x10 [ 466.650011][T14572] ? trace_contention_end+0x126/0x160 [ 466.650054][T14572] ? __mutex_lock+0x26d/0x1bd0 [ 466.650084][T14572] netlink_dump+0x194/0xd00 [ 466.650130][T14572] ? lock_release+0x24d/0x310 [ 466.650169][T14572] ? __pfx_netlink_dump+0x10/0x10 [ 466.650210][T14572] ? __netlink_lookup+0x65c/0x900 [ 466.650240][T14572] ? lock_release+0x24d/0x310 [ 466.650281][T14572] __netlink_dump_start+0x6d6/0x990 [ 466.650311][T14572] packet_diag_handler_dump+0x1f0/0x290 [ 466.650443][T14572] ? __pfx_packet_diag_handler_dump+0x10/0x10 [ 466.650478][T14572] ? __pfx_packet_diag_dump+0x10/0x10 [ 466.650511][T14572] ? sock_diag_lock_handler+0x10f/0x2e0 [ 466.650584][T14572] ? lock_release+0x24d/0x310 [ 466.650627][T14572] sock_diag_rcv_msg+0x431/0x7a0 [ 466.650663][T14572] netlink_rcv_skb+0x159/0x420 [ 466.650690][T14572] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 466.650725][T14572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.650757][T14572] ? netlink_deliver_tap+0x1ae/0xcc0 [ 466.650800][T14572] netlink_unicast+0x585/0x850 [ 466.650829][T14572] ? __pfx_netlink_unicast+0x10/0x10 [ 466.650860][T14572] netlink_sendmsg+0x8b0/0xda0 [ 466.650889][T14572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.650919][T14572] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 466.650955][T14572] sock_write_iter+0x53a/0x5b0 [ 466.650982][T14572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.651009][T14572] ? __pfx_sock_write_iter+0x10/0x10 [ 466.651039][T14572] ? bpf_lsm_file_permission+0x9/0x10 [ 466.651080][T14572] ? security_file_permission+0x76/0x210 [ 466.651119][T14572] ? rw_verify_area+0xce/0x6d0 [ 466.651151][T14572] vfs_write+0x6ac/0x1050 [ 466.651185][T14572] ? __pfx_sock_write_iter+0x10/0x10 [ 466.651211][T14572] ? __pfx_vfs_write+0x10/0x10 [ 466.651259][T14572] ? lock_release+0x24d/0x310 [ 466.651304][T14572] ksys_write+0x1f8/0x250 [ 466.651339][T14572] ? __pfx_ksys_write+0x10/0x10 [ 466.651377][T14572] ? rcu_is_watching+0x12/0xc0 [ 466.651409][T14572] do_syscall_64+0x115/0x840 [ 466.651439][T14572] ? clear_bhb_loop+0x40/0x90 [ 466.651473][T14572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.651502][T14572] RIP: 0033:0x7fbc81d9ce59 [ 466.651525][T14572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.651550][T14572] RSP: 002b:00007fbc82be9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 466.651575][T14572] RAX: ffffffffffffffda RBX: 00007fbc82015fa0 RCX: 00007fbc81d9ce59 [ 466.651591][T14572] RDX: 00000000000002fb RSI: 0000200000000000 RDI: 0000000000000003 [ 466.651616][T14572] RBP: 00007fbc82be9090 R08: 0000000000000000 R09: 0000000000000000 [ 466.651632][T14572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.651646][T14572] R13: 00007fbc82016038 R14: 00007fbc82015fa0 R15: 00007ffccca2a308 [ 466.651670][T14572] [ 467.727770][T14577] Process accounting resumed [ 467.811895][T14585] netlink: 'syz.2.1835': attribute type 2 has an invalid length. [ 468.124562][T14604] ubi0: attaching mtd0 [ 468.136143][T14604] ubi0: scanning is finished [ 468.147915][T14604] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 468.341397][T14604] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 468.759721][T14623] vivid-007: ================= START STATUS ================= [ 468.795683][T14623] vivid-007: Generate PTS: true [ 468.818781][T14623] vivid-007: Generate SCR: true [ 468.850115][T14623] tpg source WxH: 320x240 (Y'CbCr) [ 468.871785][T14623] tpg field: 1 [ 468.906972][T14623] tpg crop: (0,0)/320x240 [ 468.938361][T14623] tpg compose: (0,0)/320x240 [ 468.979997][T14623] tpg colorspace: 8 [ 469.014987][T14623] tpg transfer function: 0/0 [ 469.049062][T14623] tpg Y'CbCr encoding: 0/0 [ 469.057703][T14623] tpg quantization: 0/0 [ 469.063529][T14623] tpg RGB range: 0/2 [ 469.068826][T14623] vivid-007: ================== END STATUS ================== [ 469.992893][T14623] pim6reg: entered allmulticast mode [ 470.287960][T14648] vhci_hcd: not connected 4 [ 471.168755][T14632] kexec: Could not allocate control_code_buffer [ 472.248207][T14694] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 8 with max blocks 2 with error 117 [ 472.336096][T14694] EXT4-fs (sda1): This should not happen!! Data will be lost [ 472.336096][T14694] [ 473.044920][T14722] FAULT_INJECTION: forcing a failure. [ 473.044920][T14722] name failslab, interval 1, probability 0, space 0, times 0 [ 473.155525][T14722] CPU: 1 UID: 0 PID: 14722 Comm: syz.2.1863 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 473.155589][T14722] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 473.155604][T14722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 473.155624][T14722] Call Trace: [ 473.155633][T14722] [ 473.155719][T14722] dump_stack_lvl+0x100/0x190 [ 473.155763][T14722] should_fail_ex.cold+0x5/0xa [ 473.155797][T14722] ? __kmalloc_node_track_caller_noprof+0xbe/0x890 [ 473.155834][T14722] should_failslab+0xc2/0x120 [ 473.155869][T14722] __kmalloc_node_track_caller_noprof+0xe4/0x890 [ 473.155906][T14722] ? register_ip_vs_app_inc+0x88/0x4d0 [ 473.156004][T14722] kmemdup_noprof+0x29/0x60 [ 473.156041][T14722] register_ip_vs_app_inc+0x88/0x4d0 [ 473.156095][T14722] __ip_vs_ftp_init+0x14b/0x220 [ 473.156130][T14722] ? __ip_vs_lblcr_init+0x189/0x330 [ 473.156174][T14722] ? __pfx___ip_vs_ftp_init+0x10/0x10 [ 473.156202][T14722] ops_init+0x1e2/0x5f0 [ 473.156245][T14722] setup_net+0x118/0x3a0 [ 473.156283][T14722] ? __pfx_setup_net+0x10/0x10 [ 473.156322][T14722] ? mutex_init_lockdep+0xf1/0x120 [ 473.156369][T14722] copy_net_ns+0x46f/0x7c0 [ 473.156418][T14722] create_new_namespaces+0x3ea/0xac0 [ 473.156470][T14722] unshare_nsproxy_namespaces+0xf2/0x220 [ 473.156514][T14722] ksys_unshare+0x438/0xab0 [ 473.156543][T14722] ? __pfx_ksys_unshare+0x10/0x10 [ 473.156586][T14722] __x64_sys_unshare+0x31/0x40 [ 473.156621][T14722] do_syscall_64+0x115/0x840 [ 473.156662][T14722] ? clear_bhb_loop+0x40/0x90 [ 473.156698][T14722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.156731][T14722] RIP: 0033:0x7f53f4d9ce59 [ 473.156757][T14722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.156788][T14722] RSP: 002b:00007f53f5bea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 473.156819][T14722] RAX: ffffffffffffffda RBX: 00007f53f5015fa0 RCX: 00007f53f4d9ce59 [ 473.156839][T14722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 473.156856][T14722] RBP: 00007f53f4e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 473.156874][T14722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.156890][T14722] R13: 00007f53f5016038 R14: 00007f53f5015fa0 R15: 00007ffc1aaa2a28 [ 473.156919][T14722] [ 475.726544][T14713] ------------[ cut here ]------------ [ 475.732191][T14713] ODEBUG: free active (active state 0) object: ffff88807eab9438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 475.745385][T14713] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#1: syz.2.1860/14713 [ 475.756024][T14713] Modules linked in: [ 475.760060][T14713] CPU: 1 UID: 0 PID: 14713 Comm: syz.2.1860 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 475.771445][T14713] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 475.779063][T14713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.789508][T14713] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 475.795630][T14713] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 98 14 de 0b 41 56 48 8b 14 ed 40 77 1e 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 32 4d d3 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 475.815797][T14713] RSP: 0018:ffffc90004a8f738 EFLAGS: 00010246 [ 475.821913][T14713] RAX: dffffc0000000000 RBX: ffffc90004a8f820 RCX: 0000000000000000 [ 475.830254][T14713] RDX: ffffffff8c1e7680 RSI: ffffffff8c1e72a0 RDI: ffffffff90e551a0 [ 475.838510][T14713] RBP: 0000000000000003 R08: ffff88807eab9438 R09: ffffffff8bb2e1e0 [ 475.846925][T14713] R10: 0000000000000000 R11: ffffffff8a93e49b R12: ffffffff8c1e72a0 [ 475.855315][T14713] R13: ffffffff8bb2e220 R14: ffffffff8a9cf6f0 R15: ffffc90004a8f838 [ 475.863579][T14713] FS: 0000000000000000(0000) GS:ffff88812441f000(0000) knlGS:0000000000000000 [ 475.872856][T14713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.879742][T14713] CR2: 0000000000000000 CR3: 0000000041a4e000 CR4: 00000000003526f0 [ 475.887987][T14713] Call Trace: [ 475.891301][T14713] [ 475.894543][T14713] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 475.900055][T14713] ? trace_irq_enable.constprop.0+0x122/0x160 [ 475.906473][T14713] debug_check_no_obj_freed+0x4da/0x630 [ 475.912138][T14713] ? rcu_is_watching+0x12/0xc0 [ 475.917228][T14713] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 475.923677][T14713] ? rcu_is_watching+0x12/0xc0 [ 475.928765][T14713] ? __page_table_check_zero+0x333/0x410 [ 475.934735][T14713] ? __page_table_check_zero+0x338/0x410 [ 475.940423][T14713] __free_frozen_pages+0x409/0x1090 [ 475.945967][T14713] hci_release_dev+0x4ef/0x630 [ 475.951096][T14713] ? __pfx_hci_release_dev+0x10/0x10 [ 475.956719][T14713] ? device_release+0x97/0x270 [ 475.961610][T14713] ? rcu_is_watching+0x12/0xc0 [ 475.966700][T14713] ? device_release+0x97/0x270 [ 475.971694][T14713] bt_host_release+0x6b/0xb0 [ 475.976600][T14713] ? __pfx_bt_host_release+0x10/0x10 [ 475.981933][T14713] device_release+0xd2/0x270 [ 475.986941][T14713] kobject_put+0x1f7/0x640 [ 475.991491][T14713] put_device+0x1f/0x30 [ 475.996054][T14713] vhci_release+0x185/0x230 [ 476.000794][T14713] ? __pfx_vhci_release+0x10/0x10 [ 476.006123][T14713] __fput+0x3ff/0xb50 [ 476.010492][T14713] task_work_run+0x150/0x240 [ 476.016116][T14713] ? __pfx_task_work_run+0x10/0x10 [ 476.021921][T14713] ? free_uts_ns+0x16e/0x330 [ 476.027695][T14713] do_exit+0x951/0x2ae0 [ 476.033056][T14713] ? folio_unlock+0xf5/0x190 [ 476.037968][T14713] ? __pfx_do_exit+0x10/0x10 [ 476.043226][T14713] ? do_raw_spin_lock+0x128/0x260 [ 476.048952][T14713] ? get_signal+0x7e0/0x21e0 [ 476.054081][T14713] do_group_exit+0xd5/0x2a0 [ 476.058923][T14713] get_signal+0x1ec7/0x21e0 [ 476.063726][T14713] ? __css_rstat_updated+0x1ce/0x5a0 [ 476.069080][T14713] ? __pfx___handle_mm_fault+0x10/0x10 [ 476.074905][T14713] ? __pfx___css_rstat_updated+0x10/0x10 [ 476.080610][T14713] ? __pfx_vma_start_read+0x10/0x10 [ 476.086123][T14713] ? __pfx_get_signal+0x10/0x10 [ 476.091105][T14713] ? rcu_is_watching+0x12/0xc0 [ 476.096212][T14713] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 476.102691][T14713] arch_do_signal_or_restart+0x91/0x7a0 [ 476.108389][T14713] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 476.114651][T14713] ? rcu_is_watching+0x12/0xc0 [ 476.119469][T14713] irqentry_exit+0x402/0xa00 [ 476.124292][T14713] asm_exc_page_fault+0x26/0x30 [ 476.129182][T14713] RIP: 0033:0x2e61000 [ 476.133487][T14713] Code: Unable to access opcode bytes at 0x2e60fd6. [ 476.140545][T14713] RSP: 002b:0000000000000011 EFLAGS: 00010246 [ 476.146746][T14713] RAX: 0000000000000000 RBX: 00007f53f5016090 RCX: 00007f53f4d9ce59 [ 476.154921][T14713] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000100000008 [ 476.162979][T14713] RBP: 00007f53f4e32e6f R08: 0000000004000006 R09: 0000000000000000 [ 476.171044][T14713] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.179127][T14713] R13: 00007f53f5016128 R14: 00007f53f5016090 R15: 00007ffc1aaa2a28 [ 476.187203][T14713] ? 0xffffffff81000000 [ 476.191408][T14713] [ 476.194541][T14713] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 476.201856][T14713] CPU: 1 UID: 0 PID: 14713 Comm: syz.2.1860 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 476.212851][T14713] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 476.220244][T14713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 476.230333][T14713] Call Trace: [ 476.233642][T14713] [ 476.236604][T14713] dump_stack_lvl+0x100/0x190 [ 476.241460][T14713] vpanic+0x552/0x970 [ 476.245504][T14713] ? __pfx_vpanic+0x10/0x10 [ 476.250057][T14713] ? lock_release+0x24d/0x310 [ 476.254799][T14713] panic+0xd1/0xe0 [ 476.258653][T14713] ? __pfx_panic+0x10/0x10 [ 476.263137][T14713] ? check_panic_on_warn+0x1f/0x90 [ 476.268312][T14713] check_panic_on_warn.cold+0x19/0x34 [ 476.273745][T14713] ? debug_print_object+0x198/0x2b0 [ 476.279023][T14713] __warn.cold+0x191/0x318 [ 476.283482][T14713] __report_bug+0x30f/0x440 [ 476.288121][T14713] ? debug_print_object+0x198/0x2b0 [ 476.293373][T14713] ? __pfx___report_bug+0x10/0x10 [ 476.298539][T14713] ? lock_release+0x24d/0x310 [ 476.303538][T14713] ? bpf_ksym_find+0x124/0x1c0 [ 476.308596][T14713] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 476.314819][T14713] report_bug_entry+0xe1/0x290 [ 476.319601][T14713] ? debug_print_object+0x1a5/0x2b0 [ 476.324865][T14713] handle_bug+0x1cd/0x2a0 [ 476.329236][T14713] exc_invalid_op+0x17/0x50 [ 476.333771][T14713] asm_exc_invalid_op+0x1a/0x20 [ 476.338639][T14713] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 476.344472][T14713] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 98 14 de 0b 41 56 48 8b 14 ed 40 77 1e 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 32 4d d3 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 476.364291][T14713] RSP: 0018:ffffc90004a8f738 EFLAGS: 00010246 [ 476.370378][T14713] RAX: dffffc0000000000 RBX: ffffc90004a8f820 RCX: 0000000000000000 [ 476.378410][T14713] RDX: ffffffff8c1e7680 RSI: ffffffff8c1e72a0 RDI: ffffffff90e551a0 [ 476.386393][T14713] RBP: 0000000000000003 R08: ffff88807eab9438 R09: ffffffff8bb2e1e0 [ 476.394394][T14713] R10: 0000000000000000 R11: ffffffff8a93e49b R12: ffffffff8c1e72a0 [ 476.402390][T14713] R13: ffffffff8bb2e220 R14: ffffffff8a9cf6f0 R15: ffffc90004a8f838 [ 476.410402][T14713] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 476.415896][T14713] ? bt_host_release+0x6b/0xb0 [ 476.420694][T14713] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 476.426175][T14713] ? trace_irq_enable.constprop.0+0x122/0x160 [ 476.432277][T14713] debug_check_no_obj_freed+0x4da/0x630 [ 476.437874][T14713] ? rcu_is_watching+0x12/0xc0 [ 476.442660][T14713] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 476.448760][T14713] ? rcu_is_watching+0x12/0xc0 [ 476.453644][T14713] ? __page_table_check_zero+0x333/0x410 [ 476.460073][T14713] ? __page_table_check_zero+0x338/0x410 [ 476.465849][T14713] __free_frozen_pages+0x409/0x1090 [ 476.471107][T14713] hci_release_dev+0x4ef/0x630 [ 476.475916][T14713] ? __pfx_hci_release_dev+0x10/0x10 [ 476.481238][T14713] ? device_release+0x97/0x270 [ 476.486015][T14713] ? rcu_is_watching+0x12/0xc0 [ 476.490811][T14713] ? device_release+0x97/0x270 [ 476.495591][T14713] bt_host_release+0x6b/0xb0 [ 476.500203][T14713] ? __pfx_bt_host_release+0x10/0x10 [ 476.505507][T14713] device_release+0xd2/0x270 [ 476.510119][T14713] kobject_put+0x1f7/0x640 [ 476.514560][T14713] put_device+0x1f/0x30 [ 476.518735][T14713] vhci_release+0x185/0x230 [ 476.523270][T14713] ? __pfx_vhci_release+0x10/0x10 [ 476.528317][T14713] __fput+0x3ff/0xb50 [ 476.532315][T14713] task_work_run+0x150/0x240 [ 476.536931][T14713] ? __pfx_task_work_run+0x10/0x10 [ 476.542060][T14713] ? free_uts_ns+0x16e/0x330 [ 476.546669][T14713] do_exit+0x951/0x2ae0 [ 476.550850][T14713] ? folio_unlock+0xf5/0x190 [ 476.555461][T14713] ? __pfx_do_exit+0x10/0x10 [ 476.560079][T14713] ? do_raw_spin_lock+0x128/0x260 [ 476.565409][T14713] ? get_signal+0x7e0/0x21e0 [ 476.570078][T14713] do_group_exit+0xd5/0x2a0 [ 476.574810][T14713] get_signal+0x1ec7/0x21e0 [ 476.579326][T14713] ? __css_rstat_updated+0x1ce/0x5a0 [ 476.584640][T14713] ? __pfx___handle_mm_fault+0x10/0x10 [ 476.590306][T14713] ? __pfx___css_rstat_updated+0x10/0x10 [ 476.596040][T14713] ? __pfx_vma_start_read+0x10/0x10 [ 476.601477][T14713] ? __pfx_get_signal+0x10/0x10 [ 476.606544][T14713] ? rcu_is_watching+0x12/0xc0 [ 476.611331][T14713] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 476.617798][T14713] arch_do_signal_or_restart+0x91/0x7a0 [ 476.623418][T14713] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 476.629659][T14713] ? rcu_is_watching+0x12/0xc0 [ 476.634495][T14713] irqentry_exit+0x402/0xa00 [ 476.639667][T14713] asm_exc_page_fault+0x26/0x30 [ 476.645001][T14713] RIP: 0033:0x2e61000 [ 476.649090][T14713] Code: Unable to access opcode bytes at 0x2e60fd6. [ 476.655701][T14713] RSP: 002b:0000000000000011 EFLAGS: 00010246 [ 476.661812][T14713] RAX: 0000000000000000 RBX: 00007f53f5016090 RCX: 00007f53f4d9ce59 [ 476.669984][T14713] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000100000008 [ 476.678113][T14713] RBP: 00007f53f4e32e6f R08: 0000000004000006 R09: 0000000000000000 [ 476.686132][T14713] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.694277][T14713] R13: 00007f53f5016128 R14: 00007f53f5016090 R15: 00007ffc1aaa2a28 [ 476.702642][T14713] ? 0xffffffff81000000 [ 476.706831][T14713] [ 476.710298][T14713] Kernel Offset: disabled [ 476.714938][T14713] Rebooting in 86400 seconds..