last executing test programs: 2m17.665115643s ago: executing program 0 (id=635): read$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x100000000, 0xffffffffffffffff, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000300)='}[,&*}/file0\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffafff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc+\x87\x95\x9a\xb7\xa0\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\xe6\xa3\xd2>\x9f\xf4\xfb\xa3\xa8\x86\xd3\xa1y\xe0\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf74_\xca\xd5\xd8\xa4g_\xb1w\x18\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe13\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\xf4\x14me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e,u\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01w\xda\xdd\xef\x1c6\x1f\xd6m\xd2\x85U@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7fv\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03{^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xffu\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1b\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ\xb4&\t=\xcf6S\xaa#\xef<\x83\xc3\xab{.\xe0\x83\x10\x97z\x91\xcd6H\xb1\x00\x86\x8e\xc9\xa3S\x1c4\x9b\f\x01/\xd3\xd5\'\xbc\x97\x9d\xef\x967\x86\x0f{y\x8b\xa1F\xd7\x03\xbf\x8ep, 5\xd6\xca\x9e\x90\x8f1\x88\x14\x02:\x86\xc2\xaa!%\x96\xcd\xbb\xe6%\x88\x97\xf8E\xd9\x94\x0f\xe3j2$\x82\xc25\x8f\x15g\xfd\x13>\x83\xbf\x02I\x9aAS-\xfd\x8e\aTu\xe8\x03\xees\xf2W\xe1CKI\xa5\x8b/\x1eJ\xe4\xf0\xc0\x1c\x9d\xee\xda>`\x97\t\xf9\r\xa1\xb2=\xb7\xe9\x12H\xe8\xfb[\xcdHH\a\xff\xe3\xaf\x1fc\xdb\xa9\xab8\x18\x8d\xb9\xd0\x9c\f\xbe\xc2\x05\x9cM\xc5\x16\x8e\x99\xca0n}\xb5\xd5\x13#\xdb\x93\xa0\x85\xf7\x949\xe8\xed\x03`\xe2\x16;\xc7\xb6\nG\xdb\x96\xcf\x8f\xb6\xe0\xc0\xb4S\x88\xd8pt\xa9$C\xc9\xcb\f\x92\x12\xb1\xe2\xa4\xaby\x8d\xd7\xd4\xf7V\a!J\x04\xbe!n$\x85\xa6Q\xecq\xa6!V\xe2+\x94\xec\xb6\xc1\x80-5R\x06\xe6\'', 0xd) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87a, 0x2) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(r3, r3, 0xfff) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd=r0, @target_fd, 0x3, 0x1, @uprobe_multi={0x81, 0x1fb, 0x64, 0x4e, 0x1, 0x4}}, 0x200092) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x808, 0x2000000, 0x4000008000}) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 2m17.120153495s ago: executing program 0 (id=637): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) mprotect$auto(0x0, 0x806121, 0x6) socket(0x2, 0x3, 0x6) r2 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) futex$auto(0x0, 0x6, 0xc, 0x0, 0x0, 0x526) io_uring_setup$auto(0x5, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x175801, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) fcntl$auto_F_WRLCK(r3, 0x5, 0x1) socketpair$auto(0x10401e, 0x5, 0xfffffffc, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 2m15.580333716s ago: executing program 0 (id=642): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x305000, 0x101) fanotify_mark$auto(0xffffffffffffffff, 0xd4, 0x7, r0, &(0x7f00000001c0)='./file0/file0\x00') openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, 0x0, 0x40c4) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) ustat$auto(0x801, 0x0) setsockopt$auto_SO_TYPE(r0, 0x1a2e9e2c, 0x3, &(0x7f0000000240)='\x00', 0xa) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd7/hctx0/dispatch_busy\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f00000000c0)=""/105, 0x69) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x167841, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r4 = socket(0x2, 0x1, 0x106) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='-', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/io_poll_delay\x00', 0x763483, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x527342, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0xdc5e, 0x4, 0x300000000000) 2m15.445597029s ago: executing program 0 (id=643): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) write$auto(r0, &(0x7f0000000400)='3\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x9b\xcf\x1a@4\x1d>\x9b\xb8\xe7\t\x88\xe0\x85\xee\x1a\a-T\xf8\xcfHx|j\xa0\n\xc7q\x93\x8e\bOp\xd8\x05\x94\xb77\x8d.\xb3t\xbd\x15\xfdR\xfd3\xa0\xe4\xecz8\x1a\xa1V8\xa4\xe3O\xc8w|\xd4\x7f\xea\xa2X\x86\xa0\xec\xd7\x91\xb1B\xcdd9\x1a[\x96\xf7=\x9aU\xeb\r\xb5\x8e\x8b\xaeq\xa12\xc9\\\xb2\xd5\xfd\xf5\xfb\x88R\xa7\xb5\xfd\xe3\xf9\x10\xf2f\xe7\t}\xe61\xcb\x14\x88\xa2\x0f\xfa\xb5T%\xc6 \\\xa3\xa1\x10@y\xbd\x16\xe1\xdfh\xee\xde\xaa\xa2U\xd7\xf4\xa8\xd6\xc1\xe0X\x8f{m\'(\xfb\xab\x8bXW\x9a>Hg\\\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/N\xc6\f\xef\xda\xaay\xf8fm\f\xabH\x9f\f\xd1\xc2fZ8\xcd\xb61\xcd\xd8\xcc|p:7\x15\xb2\xcb\xf5\x13\xcc\xb6\x97\x18=[\x8a\x92r2, 0x5, 0x5}, 0x5) ioctl$auto_UI_SET_SNDBIT(r4, 0x4004556a, &(0x7f0000000200)=0x1) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$auto(r5, 0x800064d1, r5) (async) ioctl$auto(r5, 0x800064d1, r5) ioctl$auto(r3, 0x401c5504, r3) (async) ioctl$auto(r3, 0x401c5504, r3) fsconfig$auto_SHMEM_HUGE_DENY(r3, 0x1, &(0x7f0000000000)='/sys/module/usb_storage/parameters/delay_use\x00', &(0x7f0000000040)="f07e0032969e3d52f4c30084238f177f03fed9de67a96821a1614688cdaffcfa02458e2236122f8430c14c6310b580acd9b10c6deb04", 0xffffffffffffffff) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) getsockopt$auto_SO_RCVMARK(r3, 0x1000, 0x4b, &(0x7f0000000080)='-\xd9-]-@\x00', &(0x7f00000000c0)=0x58) 1m59.686420393s ago: executing program 32 (id=646): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) bpf$auto(0x0, &(0x7f0000000300)=@bpf_attr_0={0x22, 0x538, 0x80, 0x10000, 0x4, 0xffffffffffffffff, 0x21000, "72fea04183dce563f03f2a25077b3383", 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x101, 0x1000000000001}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) (async) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000c00018008000100000000000000000000006fa76fb21c155b75add79264b568d47bd93523571c0725708720de02aea6a663d0916a6b016371f8871e4c3d5392b88e08277d07d1d6402703e00e705bfe8fc19d35446d8ca488dc8b35ad67a99b30050c14b0abfc646e68705adaa729293c790ef03408fe414479c0c1583d99959b01e5c16af3a340d13f8b473d62638d78a351d26c75d2d436a2c99c32676bbc78c1ebca914f7b9d433b66ffd2", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, r0, 0x0) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socketpair$auto(0x5, 0x8, 0x1, 0x0) socket(0x10, 0x2, 0xc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100) socket(0x1e, 0x3, 0x3f) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)="13") (async) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)="13") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) keyctl$auto(0x11, 0xfffffffd, 0x0, 0x0, 0x1000000000008) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)=@info={r2, 0x5, 0x5}, 0x5) ioctl$auto_UI_SET_SNDBIT(r4, 0x4004556a, &(0x7f0000000200)=0x1) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$auto(r5, 0x800064d1, r5) (async) ioctl$auto(r5, 0x800064d1, r5) ioctl$auto(r3, 0x401c5504, r3) (async) ioctl$auto(r3, 0x401c5504, r3) fsconfig$auto_SHMEM_HUGE_DENY(r3, 0x1, &(0x7f0000000000)='/sys/module/usb_storage/parameters/delay_use\x00', &(0x7f0000000040)="f07e0032969e3d52f4c30084238f177f03fed9de67a96821a1614688cdaffcfa02458e2236122f8430c14c6310b580acd9b10c6deb04", 0xffffffffffffffff) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) getsockopt$auto_SO_RCVMARK(r3, 0x1000, 0x4b, &(0x7f0000000080)='-\xd9-]-@\x00', &(0x7f00000000c0)=0x58) 4.816824326s ago: executing program 1 (id=984): mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x9}) r1 = socket(0x2b, 0x1, 0x0) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r2 = socket(0x11, 0x80003, 0x300) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) ioctl$auto_FIONREAD(r2, 0x541b, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) 4.811171557s ago: executing program 3 (id=985): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000002, 0x2}, 0x20000895}, 0x8, 0x0) getpid() r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r1 = socket(0x6, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26044800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040840) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x3, 0x20008, 0x4000000000df, 0xeb1, r1, 0x8000) r2 = io_uring_setup$auto(0x4c, 0x0) r3 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, 0x0, 0x5c3001, 0x0) write$auto_dfs_sched_itmt_fops_itmt(r3, &(0x7f0000000300)="4f9ad86abfe720f17540bfe93795e1f0f4395b23c49588c9be6509c53fceaa3d5c82d3b8d7f35c96ae94cb195f6dd72772259b69b29a01a483b6e158dc6296ea8bd26083e50f8745bc3dfe7805", 0x4d) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) readv$auto(r4, &(0x7f0000000a80)={0x0, 0x3}, 0x3) mmap$auto(0xffffffffffffffff, 0x400008, 0x32, 0x9b73, r2, 0x8000) close_range$auto(r4, r0, 0x800) memfd_create$auto(0x0, 0xe) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon30\x00', 0x20880, 0x0) ioctl$auto_MON_IOCH_MFLUSH(r5, 0x9208, 0x0) connect$auto(0x3, 0x0, 0x50) setsockopt$auto(0x3, 0x1, 0x1, 0x0, 0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = io_uring_setup$auto(0xa9, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r6, 0x4018bc0e, &(0x7f0000000040)={0x4, 0x0, 0x80000001}) timer_create$auto(0x2, 0x0, 0x0) r7 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x739600, 0x0) writev$auto(r7, &(0x7f0000001c80)={0x0, 0x101}, 0x6) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x1a6b75d638828712, 0x0) 4.260898904s ago: executing program 3 (id=987): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000000), 0x6080c2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) io_submit$auto(0x8000000000000001, 0x3550, 0x0) (async) io_submit$auto(0x8000000000000001, 0x3550, 0x0) mprotect$auto(0x0, 0x806121, 0x6) 4.229742272s ago: executing program 1 (id=988): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x305000, 0x101) fanotify_mark$auto(0xffffffffffffffff, 0xd4, 0x7, r0, &(0x7f00000001c0)='./file0/file0\x00') openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, 0x0, 0x40c4) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) ustat$auto(0x801, 0x0) setsockopt$auto_SO_TYPE(r0, 0x1a2e9e2c, 0x3, &(0x7f0000000240)='\x00', 0xa) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd7/hctx0/dispatch_busy\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f00000000c0)=""/105, 0x69) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x167841, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0xfff, 0x5, 0xffffffffffffffc0, 0x100000000000017, 0x7, 0x28000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)='-', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/io_poll_delay\x00', 0x763483, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x527342, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0xdc5e, 0x4, 0x300000000000) 3.888824685s ago: executing program 1 (id=990): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) (async, rerun: 32) landlock_create_ruleset$auto(&(0x7f0000000140)={0x7, 0xdd4, 0x9}, 0x8000000000000002, 0x0) (rerun: 32) mprotect$auto(0x110c238000, 0x1, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) setresuid$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) (async, rerun: 32) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x20042, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) getsockopt$auto_SO_RCVPRIORITY(r0, 0x0, 0x52, &(0x7f00000005c0)=',\xcb\xe6\xfbo\xd6J\xd1N\xf1\xd1\x96\x89m\xf1\xad9\x8dK-\xc6-\x182Y\x00\xad\xce\x86\xcb\xe42lK|2i\x9b\x9e\x96w\xbcrC\xd9\xb2\a\x05\x91/\x98P\xb3\n:\x8a;B\xdc/o:m\xef\n\xfb\x88\v\xd0^\xf6\x1a[z\x18\xb5\x97\xe8<\xc2\xd2\xee,{\xeeW\x01u\xa3\x82\xb0XY\xb5\xfed\xd2\x8c\xa3\x9d\x82\xd8\xfa\x8a!#[RG\xdc\xa4e\x15gT\x9f;\x02\xfae;B&\xf3t\xf0\x8bH\x8b\xf4\'\xa8\xaav\x96aR\xbf\xf1\x0e\xba@\xe8\x1b\xc1P\x0e\xc3j\xdb\xb4\x86\xa8H\xe4\xe1\x02~\xde\xfc\x83*\xa4\x17\xcaZ&\x8e\xa5\x9c\xdf\x88}\x92@\rT\xe2\xa0\f\x1eQ\xbc\x8a~\xbe\xcf\xce\xb7\xda\xca\xec\x99GZ\x8cm\xe5\x15\x10\xefi$\x1a5\f\x10\xcb\xd9\x836\xac\x80I\xa7U\x0f\xa0Z\xdf`\x03a', &(0x7f0000000340)=0x84) (async, rerun: 32) socketpair$auto(0x3d4, 0x7, 0x2, 0x0) (rerun: 32) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/lapb0/napi_defer_hard_irqs\x00', 0x800, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) socket(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x801, 0x84) close_range$auto(r1, 0xfffffffffffff000, 0x4000000000002) select$auto(0x10e, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0xc, 0xd, 0x2007d49, 0xa, 0x4, 0xfff, 0xffffffff, 0x3, 0x0, 0x80002, 0x8000000ab8, 0xfffffffffffffff7, 0x5, 0x2, 0x5363]}, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x400000000006) (async, rerun: 64) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) (async, rerun: 64) mmap$auto(0x400000000000, 0x8, 0xe0, 0x9b76, 0x2, 0x8000) 3.761552922s ago: executing program 3 (id=991): mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x8042, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) (async) io_uring_setup$auto(0x8, 0x0) (async) connect$auto(r1, 0x0, 0x7) (async) bind$auto(0x3, 0x0, 0x6a) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f0000000280)={0x10000, &(0x7f0000000240)=&(0x7f0000000140)="beb93fa080a16bf33a576b5dcfb5033cfa41bf25b475a515cc41b8199d1224974305e0d7c32868cf8c26b0ac5c234fc6f52a5e7fcde847ada639fa935c0b31b32f7d8da174eb2c82d03ae90654e200006093b5772308107ef0c9a35c9596bba80bec963f6b2bdd6c9f80f916320ce6511f97d4d38747c24b774813283abd043cd264374ce6d07039e9c155f7d6ea3f717f42ed3f1c1461cdea72ee291a1ba560e54496a8527b38ce60b3abac153b6050d729fb0517dfcaf522643286a0b7778778ff0beaca11d2c001bcfd0f3a198b77226cceebd7c4d454c8362e35822aa20e127d15a05693da", 0x7f}) (async) r2 = pidfd_open$auto(0x1, 0x0) ftruncate$auto(r2, 0x2000000700) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6tnl0/dev_id\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)='n', 0x1) socket(0x23, 0x80805, 0x0) (async, rerun: 64) write$auto(0x3, 0x0, 0xfdef) (async, rerun: 64) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/xfs/xqm\x00', 0x1c9802, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) (async) pread64$auto(r4, 0x0, 0x100000001, 0x2000006) (async) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) (async) ioctl$auto_BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000012c0)={0x800, 0x40004, "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"}) (async) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000ea775c1c0400000005000b0023000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) (async) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 3.659994946s ago: executing program 1 (id=992): timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x0, 0x83}}, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000140)=0x5) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r0, 0x0, 0x81) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x88400, 0x0) sendfile$auto(r0, r0, 0x0, 0x101) unshare$auto(0x20000080) mmap$auto(0x2, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x800000000000000) ustat$auto(0x801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r1, 0x0, 0x30, 0x0, 0x1bb) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) copy_file_range$auto(r2, &(0x7f0000000040)=0xd52, r2, 0x0, 0xb1, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x10040026f36, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, 0x0, 0x400c8d4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r4, 0x0, 0x40002) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x450000, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) 3.616372148s ago: executing program 3 (id=993): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x6, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x8003) (async) mmap$auto(0x6, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x8003) socket(0xa, 0x1, 0x84) (async) r1 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b71, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b71, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x3) swapoff$auto(0x0) (async) swapoff$auto(0x0) read$auto(0xffffffffffffffff, 0x0, 0x9a28) pipe2$auto(0x0, 0x8) (async) pipe2$auto(0x0, 0x8) mknod$auto(0x0, 0xf02b, 0x0) (async) mknod$auto(0x0, 0xf02b, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) mmap$auto(0x20000000, 0x4020009, 0x6, 0xeb1, 0x401, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) pipe$auto(0x0) (async) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x7, &(0x7f0000000040), 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0) clock_gettime$auto(0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=@bpf_attr_3={0x2b, 0x10002, 0x6, 0x5, 0x9, 0x20, 0x80000001, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x2000200, 0xffffffffffffffff, 0x3, 0x8, 0x9, 0x6, 0x3, @attach_prog_fd, 0x0, 0x3, 0x5b, 0x6, 0x6}, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3.177763272s ago: executing program 2 (id=995): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0) write$auto(r0, &(0x7f0000000000)=']\xdc--\'+:&$//&^!&\x00', 0x1) (async) mmap$auto(0x0, 0x400008, 0xea, 0x18, r0, 0x5) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(r1, 0x400, 0x0) link$auto(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)='./file2\x00') r2 = socket(0x2b, 0x1, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sda1\x00', 0x48100, 0x0) ioctl$auto_IOC_PR_RESERVE(r3, 0x401070c9, 0x0) (async) getsockopt$auto(r2, 0x0, 0x34, 0x0, 0x0) 2.977666904s ago: executing program 2 (id=996): mmap$auto(0x0, 0x2020009, 0x3, 0xeb0, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) (async) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/ueagle_atm/parameters/sync_wait\x00', 0x1e2142, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0x8040, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) (async, rerun: 32) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) (async) mmap$auto(0x30a1b1c7, 0x4020009, 0xdf, 0xeb1, 0x401, 0xba) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 32) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) (rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=@bpf_attr_7={@btf_id=0x7, 0xe51, 0x2, r1}, 0xc) sendfile$auto(r2, 0xffffffffffffffff, &(0x7f0000000280)=0x407f, 0x7f800000000000) (async) epoll_create$auto(0x5) (async, rerun: 32) sendmsg$auto_NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x74, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x200}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xe6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2900}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x8}, @NFC_ATTR_DEVICE_NAME={0x8, 0x2, '[-\\:'}, @NFC_ATTR_VENDOR_DATA={0x27, 0x1f, "209d8b1ced47535a52294a1d25a130dc5a42d3395309ccc83fc8502090287e168ac88f"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000088) (async, rerun: 32) sendfile$auto(r1, r1, 0x0, 0x3) 2.837358239s ago: executing program 2 (id=997): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x6a142, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000003, 0xeb1, r0, 0x8000) fchdir$auto(r0) r1 = socket(0x2, 0xa, 0x4) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8085}, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x601, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x171800, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe}) mprotect$auto(0x0, 0x8000000000000001, 0xc) connect$auto(0xffffffffffffffff, 0x0, 0x5c) r6 = socket(0xa, 0x3, 0x3a) close_range$auto(0x0, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) bpf$auto(0x9, &(0x7f00000000c0)=@link_create={@prog_fd=r0, @target_ifindex=r7, 0x81, 0xfffffbff, @tracing={0x9, 0x4}}, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r4) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0x10) madvise$auto(0xcbe3, 0xffffffffffff0001, 0x15) socket$auto(0x0, 0x0, 0x8) sendmmsg$auto(0x3, &(0x7f0000000200)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x1000003, 0x0) 2.674704928s ago: executing program 3 (id=998): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000100)='/proc/self/net/arp_tables_targets\x00', 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x0, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000001c0)=@bpf_attr_11={0x0, 0x9, 0x6, 0xc6d, 0x10001, 0x7, 0x4, r2}, 0x7) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f00000003c0)={0x62c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x610, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x5e1, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xbc9f}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xf}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x7}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8}]}]}, 0x62c}, 0x1, 0x0, 0x0, 0x20008814}, 0x48800) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0041, 0x0) ioctl$auto_UI_SET_PROPBIT(r4, 0x4004556e, &(0x7f00000000c0)=0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) socket(0xb390e9e4a4273ca, 0x7, 0x6) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mincore$auto(0x0, 0x1, 0x0) 2.550414112s ago: executing program 4 (id=999): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x305000, 0x101) fanotify_mark$auto(0xffffffffffffffff, 0xd4, 0x7, r0, &(0x7f00000001c0)='./file0/file0\x00') openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, 0x0, 0x40c4) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) ustat$auto(0x801, 0x0) setsockopt$auto_SO_TYPE(r0, 0x1a2e9e2c, 0x3, &(0x7f0000000240)='\x00', 0xa) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd7/hctx0/dispatch_busy\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f00000000c0)=""/105, 0x69) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x167841, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0xfff, 0x5, 0xffffffffffffffc0, 0x100000000000017, 0x7, 0x28000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)='-', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/io_poll_delay\x00', 0x763483, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x527342, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0xdc5e, 0x4, 0x300000000000) 2.271670326s ago: executing program 4 (id=1000): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000200)='/dev/usbmon37\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x0) setresuid$auto(0x0, 0x8, 0x0) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x10002, 0x2, 0x4, 0x0, 0xfffffffdfffffffa, 0x1, 0x0, 0x9, 0x7, 0xffffffff}) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xe, 0x4, 0x3) r2 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x6240, 0x0) read$auto_ftrace_system_enable_fops_trace_events(r2, &(0x7f0000000080)=""/62, 0x3e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1.97152477s ago: executing program 1 (id=1001): mmap$auto(0x0, 0x1, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/vlan/config\x00', 0x141e40, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x28102, 0x0) write$auto(r1, &(0x7f0000000180)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) write$auto(r0, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/loop9\x00', 0x40, 0x0) ioctl$auto_BLKGETNRZONES(r2, 0x80041285, &(0x7f00000006c0)=0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0002, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) settimeofday$auto(0x0, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000380)='zG0') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r4 = socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) r5 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/environ\x00', 0x88f80, 0x0) readv$auto(r5, &(0x7f0000001780)={0x0, 0x400}, 0x7f) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) 1.25342376s ago: executing program 2 (id=1002): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xfffffffffffffda7, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0xeb57}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0xee}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xfffffffffffffda7, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0xeb57}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0xee}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xfffffffffffffe01}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) (async) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xfffffffffffffe01}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 1.2301003s ago: executing program 4 (id=1003): socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="99b8b06bcb8afd544f9682510ff5bdc47b47e5500967e1b2652a9abc29840873a19c72f78270c14f5576bc0e4a99f96840144d0b710da984a005323d49b4a500004c94569fac3e6ef0494c40775ca7afd3cd2278fab078360dab23f4248a7385bfacb5385afd2671092edd0f3451b5d71448e62c2d1342f0d321dc7ad3fe40d84c46a9c44dcc47fe9c14871c3099957fe0c299fb76b430ebd27645f2335b1e0941fc6ebe12d18fc817d78ffd7c3c6eaedae6d8060bb228ced419a222a5ddf5621efed1b3", @ANYBLOB='T'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3f, 0x0) fsopen$auto(0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="c410", @ANYRES16=r1, @ANYBLOB="00022abd7000fddbdf252c00000004008e008500f5002d94f137859b3adcc3df472d95e58744f4feded5a400cd7b33153524830cda68c9eb12dc8048e197bee288e1b2acffc6fd9f514faad81c8de850e2b1bf4374f1f8741eb06f08869a7eb3932ff65bbba495bdd242c4209b3825d211f4e959744212c066d2bcb607cd87823e5cc2644c81ba56efbb35ef8473f380ce10a43d04bcc9000000800046000800c9000600100008006100010000000600fb00a600000008004200534e0000"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) socketcall$auto(0x9, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x42, 0x0) (async) sysfs$auto(0x2, 0x42, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic="1a"]}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040070}, 0x800) fsopen$auto(0x0, 0x1) (async) fsopen$auto(0x0, 0x1) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x10000, 0xfffffffffffffffe) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) read$auto_debugfs_devm_entry_ops_file(0xffffffffffffffff, &(0x7f00000001c0)=""/27, 0x1b) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 1.15135315s ago: executing program 3 (id=1004): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) ioctl$auto_TIOCMGET(r0, 0x5415, &(0x7f0000000240)) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000200), r5) sendmsg$auto_OVS_VPORT_CMD_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={0x0}}, 0x48010) ioctl$auto(0x3, 0x541b, 0x10000000000402) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r8 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r8, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba831b", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) socket(0x6, 0x1, 0x3ad2dd5) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0xe9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) 1.021582088s ago: executing program 2 (id=1005): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="30624bf1", 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r2 = socket(0xa, 0x1, 0x84) r3 = socket(0x10, 0x2, 0x4) bind$auto(r3, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xe) getsockopt$auto(r2, 0x84, 0x10, 0x0, &(0x7f0000000000)=0x7ffe) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0xa001, 0x0) socket(0xa, 0x1, 0x84) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000003640), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r6, 0x40187013, &(0x7f0000003680)={0x7, @uvalue=0x2c, 0x4}) read$auto(r5, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x141241, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) write$auto(r4, &(0x7f0000000780)='7\x00\\\xa0\x04|\xfe\xca\x12\xfa\b\x1c\xc7k\xff\xfe\x8e\xaf\xeeu~\a\xc0/(d\n\x05\x13EE\xf0\xad\r\xcb\xd3\xa83\xda}v\xcc\xfb\xcdm\x8f\nd\xca+4i{G\x18\x81J\x92\xf7\xc5,H\x88\xf6KRg\xab\xf2<^\xc7\x8fG# \x06\xc8!\x177GA\x84n\x0e\xa3\xa1\xdb\x8au\xf1\xee\xb25\x04 \x16\xbd\x9d\xa1;>\x99\x8d\x1d\x83>\xf5cE\x06\xe8\xb8\xc1)\x15\xe8\x1a\xef{\xfd\x19\xa6\x84V\x7f\xf5\x9f\xf0\xa4\x1b\xf7\xa5\x91.q\xc21k\n\xca\x91L/{d\xf6#\xb5\xb4\x01\xc2/\xdf\xb4\x89y|\xc7^c,\xf3\x98\x9fo\xaa\xb1\xbf\x92\x9bX\xc8\x8f\x13\x10K+~\xde\x00gib\x8a\xebm\xc1\n\xf4\x8a\x9eQ\xea\xa4\xb4\x16?*$\x1a\b\xa7\x8e\xe7dd[\rWN\xc8<\x8a:\\\x98\xc3yX?\xfd3\x06\xaf\xb10\x11 \x836\xb7\xe1+\xe3|B\xe7\xc6H\fS\xe5Y@\xdfZ\xdf\x9e\xd0\xa6\r\x94\xf6\xe0\xe1\x98v\x8d\x06\xfa\x06$\xf9s\xdb\x9c\xfd\xf5\xa3\xa1\x1a\x96b]}\x86\xc1\x84\xe4\xfc\x17\xe4\xaa\x8dL\x11uO\xd8Y\x17\xc4FK\x8b\x05\xcd\xe2J\xf60oA\x91\xf0\xe6\xd9B7P\xbb\xb6\xf4s\x8cl\x03tJ\xfa;&\xa4\xce\xc0\x9b\xc4w)\x9f~\x8d\xc9S\x8e\xf0+\x14\xaf\xd9]*\xe5L\xc5\x0e\xf1\f j\x8c\n\\#\x8dY\f\xa4\x16\x80\xe1K\xacW\xa8\xcaf\xac\xc0\xd8\xc5S*\xe8\xfd\xc1FK\x878\xce\xea2\x11J\x8aMF\x13W\x9ePL\x91\x17fs}\xfb\xa9\xf3\xbdi\xd27\x9a\xd4\xd6\xb1qu\xf0`\xd5\xcd\x9e\xbb\x8f', 0x1) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000000)=@batch={0x7fff, 0x7, 0x5, 0x5, 0x6, 0xffffffffffffffff, 0x1}, 0xfffffff9) r8 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) r9 = socket(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) ioctl$auto_PPPIOCSPASS(r8, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0x6}}) getsockopt$auto(r1, 0x84, 0xfffffffa, 0x0, 0x0) linkat$auto(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00', 0x1) 871.378505ms ago: executing program 1 (id=1006): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdf1) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022bbd7000ff070000000000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0xfffffffffffffffe, 0x200006, 0x4000400000e3, 0x40eb2, r2, 0x9) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14754f00", @ANYRES16=r3, @ANYBLOB="00042cbd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0xc8042, 0x0) write$auto(0x3, 0x0, 0x100082) 726.047907ms ago: executing program 4 (id=1007): sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x2404c000) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80002, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0x200000000df, 0x9b72, 0x2, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 96.669776ms ago: executing program 2 (id=1008): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r1) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x158, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x142, 0x5, 0x0, 0x1, [@generic="6ebc1c3b076643d2a63a8c68e77fd46f98cfa9bc505f64846fd03aef4fb8a25448e1fa40fab4de8e84b3367ce9ff8977ad65dfde72a126d9b685357b8e20025b7c7c1f25bfb1570043f3d5c8260dae53a5b40b35ba48a34bf65385d4b19714", @generic="69787c65cbf0ae83b43d48e06dcee888ce1af1f056a241c64be57f05531f94e5b03cb471689e9a14555b5fb8953eb8c12e073ce776d9b63f7bc481c2eb1b2f441ce7c8ace87f59533a65a005dcf68958809703a8f75476156254c9c6ffbcd5756ee1b9824c8891780f54bc9bf11ba3f8b7d99c5b95b8c8e7ff51b6648cfece233cc60391408448cd1249887e34197596d3d22fe2f3739a33fe90caae912100fcc51c76cac47331949e6bcc22ad56145401e2784b9b73db88e200b2d0551accb0c354c9a7ebdbe0c4f6ced1601f3d06", @typed={0x8, 0x4b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x5, 0x134, 0x0, 0x0, @str='\x00'}]}]}, 0x158}}, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0xa001, 0x0) open_tree$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x2, 0x1, 0x106) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x11fa42, 0x0) io_uring_setup$auto(0x7, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/v4l-subdev5\x00', 0x0, 0x0) ioctl$auto(r5, 0xc040563d, r4) ioctl$auto_RNDGETENTCNT2(r1, 0x80045200, &(0x7f0000000040)=0x214) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf8\xfe\n\xa7\xfeD\xca\xd9\xb3\xc1\xe4\xf5j\x94\x7f\x00\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xed\x013\x87l\xb9\x1e\x05\x90\xa2', 0x2) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(r6, 0x9, 0x3) 54.061524ms ago: executing program 4 (id=1009): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/pcm0c/sub2/info\x00', 0x80280, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x6, 0x1000006) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x810) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x29f, 0x2, 0x83, 0x4, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000140)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r3, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x106) 0s ago: executing program 4 (id=1010): madvise$auto(0x1, 0x7, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb2, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$auto(0x3, 0x0, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r1, &(0x7f0000000180)={0x0, 0x2}, 0x3, 0x5, 0x5) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket(0x15, 0x5, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r5 = socket(0x15, 0x80007, 0x0) getsockopt$auto(r5, 0x114, 0x2715, 0xfffffffffffffffc, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x8, r3, 0x0, "9d622f7ad49decb61ffd2641637dea24"}) epoll_ctl$auto_EPOLL_CTL_DEL(r2, 0x2, r1, &(0x7f0000000040)={0x10, 0x4}) madvise$auto(0x0, 0x200007, 0x19) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptyq0\x00', 0x197800, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/ib-comp-unb-wq/nice\x00', 0xcaa02, 0x0) sendfile$auto(r7, r7, 0x0, 0x7ffff000) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r6, 0x541c, r8) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000100)="a407e0ebb5d24d765188d1de7342edde2eca59336f1735d12ff5d3b66c7b1e93dd64aaa4adc1204fe71e44d02bb9c446b926e12f5c42bb5521103f06c47c90c13106eba7c3a8fad2b56e25e7f154d0ea2967ee19f4642c268607bada374abf20e236d806e66ae34b1fc64c0597b220e647749db95218b9aad04a4a54ca568f593eee0cd3c84a2dd651afa178a3379bc8c099b7bd131f593779bd01962fe0c454b2cc5eae7c1cf36e", 0xbb, &(0x7f00000001c0)="442db9379ec8aa7ffa47ea7c6cb485fb575acbd5cc81d725a2c849331c8d789c21459a69af3e3f1a231c12dbce3cca108de52f2951ed85a0e49265e7d68bf79f6a85d4fd8293f532170f08ab9df6d76d2c45105dbc7dd2", 0x6, &(0x7f0000000240), &(0x7f0000000340)=0x3}) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) brk$auto(0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kernel console output (not intermixed with test programs): ubi0: attaching mtd0 [ 214.914724][ T7825] ubi0: scanning is finished [ 214.931597][ T7824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.345'. [ 215.221451][ T7825] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 215.315990][ T7825] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 215.339801][ T7825] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 215.347068][ T7825] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 215.363920][ T7825] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 215.372445][ T7825] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 215.380533][ T7825] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 804046458 [ 215.390578][ T7825] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 215.402263][ T7829] ubi0: background thread "ubi_bgt0d" started, PID 7829 [ 215.475209][ T7826] ubi0: detaching mtd0 [ 215.531107][ T7826] ubi0: mtd0 is detached [ 216.465768][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'. [ 216.719300][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 217.303784][ T7833] Process accounting resumed [ 218.108372][ T7871] FAULT_INJECTION: forcing a failure. [ 218.108372][ T7871] name failslab, interval 1, probability 0, space 0, times 0 [ 218.124919][ T7871] CPU: 1 UID: 0 PID: 7871 Comm: syz.1.354 Tainted: G U syzkaller #0 PREEMPT(full) [ 218.124959][ T7871] Tainted: [U]=USER [ 218.124967][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.124991][ T7871] Call Trace: [ 218.124999][ T7871] [ 218.125009][ T7871] dump_stack_lvl+0x100/0x190 [ 218.125061][ T7871] should_fail_ex.cold+0x5/0xa [ 218.125094][ T7871] ? ring_buffer_read_start+0x1b9/0x450 [ 218.125127][ T7871] should_failslab+0xc2/0x120 [ 218.125160][ T7871] __kmalloc_noprof+0xe0/0x850 [ 218.125211][ T7871] ring_buffer_read_start+0x1b9/0x450 [ 218.125246][ T7871] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 218.125276][ T7871] ? lockdep_init_map_type+0x5c/0x250 [ 218.125320][ T7871] ? ring_buffer_overruns+0x14e/0x1a0 [ 218.125369][ T7871] __tracing_open+0x74e/0xa80 [ 218.125402][ T7871] tracing_open+0x26b/0x4d0 [ 218.125434][ T7871] do_dentry_open+0x6ab/0x14d0 [ 218.125468][ T7871] ? __pfx_tracing_open+0x10/0x10 [ 218.125503][ T7871] vfs_open+0x82/0x3f0 [ 218.125548][ T7871] path_openat+0x208c/0x31a0 [ 218.125596][ T7871] ? __pfx_path_openat+0x10/0x10 [ 218.125646][ T7871] do_file_open+0x20e/0x430 [ 218.125683][ T7871] ? __pfx_do_file_open+0x10/0x10 [ 218.125746][ T7871] ? alloc_fd+0x476/0x790 [ 218.125783][ T7871] ? do_getname+0x191/0x390 [ 218.125827][ T7871] do_sys_openat2+0x10d/0x1e0 [ 218.125868][ T7871] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.125917][ T7871] ? __fget_files+0x21f/0x3d0 [ 218.125958][ T7871] __x64_sys_openat+0x12d/0x210 [ 218.126011][ T7871] ? __pfx___x64_sys_openat+0x10/0x10 [ 218.126062][ T7871] ? rcu_is_watching+0x12/0xc0 [ 218.126099][ T7871] do_syscall_64+0x115/0x840 [ 218.126138][ T7871] ? clear_bhb_loop+0x40/0x90 [ 218.126173][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.126201][ T7871] RIP: 0033:0x7fd71bb9ce59 [ 218.126224][ T7871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.126249][ T7871] RSP: 002b:00007fd71ca22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.126275][ T7871] RAX: ffffffffffffffda RBX: 00007fd71be16180 RCX: 00007fd71bb9ce59 [ 218.126294][ T7871] RDX: 0000000000082000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 218.126312][ T7871] RBP: 00007fd71bc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 218.126328][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.126344][ T7871] R13: 00007fd71be16218 R14: 00007fd71be16180 R15: 00007ffe27b0a048 [ 218.126382][ T7871] [ 218.638947][ T5633] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 218.648867][ T5633] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 219.488119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 219.642210][ T7892] FAULT_INJECTION: forcing a failure. [ 219.642210][ T7892] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.726460][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.3.358 Tainted: G U syzkaller #0 PREEMPT(full) [ 219.726500][ T7892] Tainted: [U]=USER [ 219.726508][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 219.726523][ T7892] Call Trace: [ 219.726531][ T7892] [ 219.726540][ T7892] dump_stack_lvl+0x100/0x190 [ 219.726587][ T7892] should_fail_ex.cold+0x5/0xa [ 219.726614][ T7892] ? prepare_alloc_pages+0x16d/0x5f0 [ 219.726650][ T7892] should_fail_alloc_page+0xeb/0x140 [ 219.726682][ T7892] prepare_alloc_pages+0x1f0/0x5f0 [ 219.726721][ T7892] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 219.726762][ T7892] ? rcu_is_watching+0x12/0xc0 [ 219.726796][ T7892] ? __lock_acquire+0x4a5/0x2630 [ 219.726839][ T7892] ? __lock_acquire+0x4a5/0x2630 [ 219.726874][ T7892] ? __css_rstat_updated+0x1ce/0x5a0 [ 219.726914][ T7892] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 219.726956][ T7892] ? do_raw_spin_lock+0x128/0x260 [ 219.726984][ T7892] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.727012][ T7892] ? find_held_lock+0x2b/0x80 [ 219.727054][ T7892] ? __lock_acquire+0x4a5/0x2630 [ 219.727091][ T7892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.727128][ T7892] ? policy_nodemask+0xed/0x4f0 [ 219.727161][ T7892] alloc_pages_mpol+0x1fb/0x540 [ 219.727193][ T7892] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 219.727223][ T7892] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 219.727258][ T7892] folio_alloc_mpol_noprof+0x36/0x260 [ 219.727294][ T7892] shmem_alloc_folio+0x135/0x160 [ 219.727338][ T7892] shmem_alloc_and_add_folio+0x371/0xd40 [ 219.727388][ T7892] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 219.727432][ T7892] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 219.727466][ T7892] shmem_get_folio_gfp+0x6ab/0x1900 [ 219.727500][ T7892] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 219.727529][ T7892] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 219.727554][ T7892] ? lockdep_hardirqs_on+0x78/0x100 [ 219.727596][ T7892] shmem_fault+0x1f9/0xa20 [ 219.727619][ T7892] ? __lock_acquire+0x4a5/0x2630 [ 219.727658][ T7892] ? __pfx_shmem_fault+0x10/0x10 [ 219.727685][ T7892] ? __up_read+0x2c1/0x6e0 [ 219.727725][ T7892] ? __pfx_filemap_map_pages+0x10/0x10 [ 219.727760][ T7892] __do_fault+0x10b/0x440 [ 219.727782][ T7892] ? find_held_lock+0x2b/0x80 [ 219.727812][ T7892] do_fault+0x2db/0x1750 [ 219.727846][ T7892] __handle_mm_fault+0x187d/0x2a00 [ 219.727886][ T7892] ? mt_find+0x45e/0x8e0 [ 219.727922][ T7892] ? __pfx___handle_mm_fault+0x10/0x10 [ 219.727952][ T7892] ? __pfx_mt_find+0x10/0x10 [ 219.727983][ T7892] ? find_vma+0xbf/0x140 [ 219.727997][ T7892] ? __pfx_find_vma+0x10/0x10 [ 219.728014][ T7892] handle_mm_fault+0x37b/0xa30 [ 219.728037][ T7892] do_user_addr_fault+0x74c/0x12f0 [ 219.728056][ T7892] ? trace_page_fault_kernel+0x7a/0x200 [ 219.728073][ T7892] exc_page_fault+0x6f/0xd0 [ 219.728091][ T7892] asm_exc_page_fault+0x26/0x30 [ 219.728105][ T7892] RIP: 0010:rep_stos_alternative+0x5b/0x80 [ 219.728120][ T7892] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 <48> 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 83 f9 08 73 [ 219.728133][ T7892] RSP: 0018:ffffc90004c1fea0 EFLAGS: 00050202 [ 219.728145][ T7892] RAX: 0000000000000000 RBX: 0000000000010000 RCX: 0000000000004038 [ 219.728153][ T7892] RDX: ffff88802fd79f00 RSI: ffffffff8257f631 RDI: 000000000000bfc8 [ 219.728162][ T7892] RBP: 000000000000fff8 R08: 0000000000000001 R09: 00000000000001c5 [ 219.728169][ T7892] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000008 [ 219.728177][ T7892] R13: ffff88803509b9d8 R14: 0000000000010000 R15: 00007ffffffff000 [ 219.728191][ T7892] ? __might_fault+0x111/0x140 [ 219.728215][ T7892] read_ldt+0x1b4/0x240 [ 219.728233][ T7892] __x64_sys_modify_ldt+0x114/0x170 [ 219.728250][ T7892] do_syscall_64+0x115/0x840 [ 219.728268][ T7892] ? clear_bhb_loop+0x40/0x90 [ 219.728285][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.728298][ T7892] RIP: 0033:0x7f651f79ce59 [ 219.728310][ T7892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.728328][ T7892] RSP: 002b:00007f65206a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 219.728340][ T7892] RAX: ffffffffffffffda RBX: 00007f651fa15fa0 RCX: 00007f651f79ce59 [ 219.728349][ T7892] RDX: fffffffffffffffb RSI: 0000000000000000 RDI: 0000000000000000 [ 219.728357][ T7892] RBP: 00007f65206a2090 R08: 0000000000000000 R09: 0000000000000000 [ 219.728365][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.728372][ T7892] R13: 00007f651fa16038 R14: 00007f651fa15fa0 R15: 00007ffe5aaa52a8 [ 219.728391][ T7892] [ 220.349703][ T807] Process accounting resumed [ 220.400234][ T7889] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 220.506485][ T7889] pci 0000:00:01.3: PCI INT A: no GSI [ 221.103648][ T7865] Process accounting resumed [ 226.646625][ T8010] FAULT_INJECTION: forcing a failure. [ 226.646625][ T8010] name fail_futex, interval 1, probability 0, space 0, times 1 [ 226.684742][ T8010] CPU: 0 UID: 0 PID: 8010 Comm: syz.1.380 Tainted: G U syzkaller #0 PREEMPT(full) [ 226.684784][ T8010] Tainted: [U]=USER [ 226.684793][ T8010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.684806][ T8010] Call Trace: [ 226.684814][ T8010] [ 226.684824][ T8010] dump_stack_lvl+0x100/0x190 [ 226.684874][ T8010] should_fail_ex.cold+0x5/0xa [ 226.684908][ T8010] get_futex_key+0x295/0x1510 [ 226.684957][ T8010] ? __pfx_get_futex_key+0x10/0x10 [ 226.685002][ T8010] ? kasan_save_track+0x14/0x30 [ 226.685029][ T8010] ? __kasan_kmalloc+0xaa/0xb0 [ 226.685060][ T8010] futex_lock_pi+0x1d2/0x7a0 [ 226.685094][ T8010] ? __pfx_futex_lock_pi+0x10/0x10 [ 226.685137][ T8010] ? __pfx_try_to_wake_up+0x10/0x10 [ 226.685172][ T8010] ? futex_private_hash_put+0x107/0x1c0 [ 226.685211][ T8010] ? __pfx_futex_wake_mark+0x10/0x10 [ 226.685250][ T8010] ? __might_fault+0x111/0x140 [ 226.685291][ T8010] ? do_vfs_ioctl+0x226/0x13e0 [ 226.685321][ T8010] do_futex+0x18a/0x350 [ 226.685348][ T8010] ? __pfx_do_futex+0x10/0x10 [ 226.685378][ T8010] ? find_held_lock+0x2b/0x80 [ 226.685417][ T8010] __x64_sys_futex+0x34f/0x4d0 [ 226.685451][ T8010] ? __pfx___x64_sys_futex+0x10/0x10 [ 226.685482][ T8010] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 226.685523][ T8010] ? syscall_user_dispatch+0x76/0x130 [ 226.685557][ T8010] do_syscall_64+0x115/0x840 [ 226.685605][ T8010] ? clear_bhb_loop+0x40/0x90 [ 226.685640][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.685669][ T8010] RIP: 0033:0x7fd71bb9ce59 [ 226.685691][ T8010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.685717][ T8010] RSP: 002b:00007fd71ca22028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 226.685743][ T8010] RAX: ffffffffffffffda RBX: 00007fd71be16180 RCX: 00007fd71bb9ce59 [ 226.685761][ T8010] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 226.685777][ T8010] RBP: 00007fd71bc32d6f R08: 0000000000000000 R09: 000000008000fff5 [ 226.685794][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.685810][ T8010] R13: 00007fd71be16218 R14: 00007fd71be16180 R15: 00007ffe27b0a048 [ 226.685850][ T8010] [ 227.416373][ T8020] HfR: entered promiscuous mode [ 227.873162][ T8020] netlink: 342 bytes leftover after parsing attributes in process `syz.1.384'. [ 227.922005][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'. [ 227.983328][ T8020] HfR: left promiscuous mode [ 229.864830][ T30] audit: type=1800 audit(2147483713.350:5): pid=8050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.389" name="lu_gp_id" dev="configfs" ino=22142 res=0 errno=0 [ 230.502303][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 233.844909][ T8088] FAULT_INJECTION: forcing a failure. [ 233.844909][ T8088] name failslab, interval 1, probability 0, space 0, times 0 [ 233.916053][ T8088] CPU: 0 UID: 0 PID: 8088 Comm: syz.3.398 Tainted: G U syzkaller #0 PREEMPT(full) [ 233.916098][ T8088] Tainted: [U]=USER [ 233.916107][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.916123][ T8088] Call Trace: [ 233.916133][ T8088] [ 233.916144][ T8088] dump_stack_lvl+0x100/0x190 [ 233.916194][ T8088] should_fail_ex.cold+0x5/0xa [ 233.916229][ T8088] should_failslab+0xc2/0x120 [ 233.916263][ T8088] __kmalloc_cache_node_noprof+0x7d/0x770 [ 233.916296][ T8088] ? __get_vm_area_node+0x101/0x330 [ 233.916329][ T8088] ? putname+0xb1/0x110 [ 233.916370][ T8088] __get_vm_area_node+0x101/0x330 [ 233.916410][ T8088] __vmalloc_node_range_noprof+0x228/0x1630 [ 233.916450][ T8088] ? kernel_read_file+0x77e/0x9a0 [ 233.916478][ T8088] ? putname+0xb6/0x110 [ 233.916513][ T8088] ? do_file_open_root+0x42d/0x5a0 [ 233.916546][ T8088] ? widen_string+0xdb/0x2f0 [ 233.916578][ T8088] ? kernel_read_file+0x77e/0x9a0 [ 233.916616][ T8088] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.916662][ T8088] ? ima_read_file+0x149/0x1b0 [ 233.916690][ T8088] ? __pfx_ima_read_file+0x10/0x10 [ 233.916730][ T8088] ? kernel_read_file+0x77e/0x9a0 [ 233.916757][ T8088] __vmalloc_node_noprof+0xad/0xf0 [ 233.916793][ T8088] ? kernel_read_file+0x77e/0x9a0 [ 233.916824][ T8088] kernel_read_file+0x77e/0x9a0 [ 233.916855][ T8088] ? __pfx_kernel_read_file+0x10/0x10 [ 233.916894][ T8088] kernel_read_file_from_path_initns+0x1cf/0x260 [ 233.916929][ T8088] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 233.916971][ T8088] _request_firmware+0x733/0x13c0 [ 233.917024][ T8088] ? __pfx__request_firmware+0x10/0x10 [ 233.917061][ T8088] ? __pfx_netdev_run_todo+0x10/0x10 [ 233.917095][ T8088] ? rcu_is_watching+0x12/0xc0 [ 233.917131][ T8088] request_firmware+0x35/0x50 [ 233.917170][ T8088] reg_reload_regdb+0x85/0x460 [ 233.917205][ T8088] ? __pfx_reg_reload_regdb+0x10/0x10 [ 233.917241][ T8088] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 233.917289][ T8088] ? nl80211_pre_doit+0x19a/0xae0 [ 233.917337][ T8088] genl_family_rcv_msg_doit+0x214/0x300 [ 233.917384][ T8088] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 233.917426][ T8088] ? genl_get_cmd+0x3e7/0x760 [ 233.917472][ T8088] ? bpf_lsm_capable+0x9/0x10 [ 233.917500][ T8088] ? security_capable+0x80/0x260 [ 233.917534][ T8088] genl_rcv_msg+0x560/0x800 [ 233.917580][ T8088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.917620][ T8088] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 233.917659][ T8088] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 233.917690][ T8088] ? __pfx_nl80211_post_doit+0x10/0x10 [ 233.917752][ T8088] netlink_rcv_skb+0x159/0x420 [ 233.917790][ T8088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.917829][ T8088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.917879][ T8088] ? netlink_deliver_tap+0x1ae/0xcc0 [ 233.917917][ T8088] genl_rcv+0x28/0x40 [ 233.917954][ T8088] netlink_unicast+0x585/0x850 [ 233.917994][ T8088] ? __pfx_netlink_unicast+0x10/0x10 [ 233.918036][ T8088] netlink_sendmsg+0x8b0/0xda0 [ 233.918078][ T8088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.918113][ T8088] ? __import_iovec+0x1d2/0x640 [ 233.918157][ T8088] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 233.918193][ T8088] ____sys_sendmsg+0x9e1/0xb70 [ 233.918227][ T8088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.918267][ T8088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.918301][ T8088] ? preempt_schedule_thunk+0x16/0x30 [ 233.918350][ T8088] ? try_to_wake_up+0x5f6/0x1900 [ 233.918392][ T8088] ___sys_sendmsg+0x190/0x1e0 [ 233.918434][ T8088] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.918472][ T8088] ? futex_private_hash_put+0x107/0x1c0 [ 233.918562][ T8088] __sys_sendmsg+0x170/0x220 [ 233.918593][ T8088] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.918621][ T8088] ? __x64_sys_futex+0x34f/0x4d0 [ 233.918665][ T8088] ? rcu_is_watching+0x12/0xc0 [ 233.918702][ T8088] do_syscall_64+0x115/0x840 [ 233.918749][ T8088] ? clear_bhb_loop+0x40/0x90 [ 233.918785][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.918814][ T8088] RIP: 0033:0x7f651f79ce59 [ 233.918839][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.918865][ T8088] RSP: 002b:00007f65206a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.918893][ T8088] RAX: ffffffffffffffda RBX: 00007f651fa15fa0 RCX: 00007f651f79ce59 [ 233.918912][ T8088] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 233.918930][ T8088] RBP: 00007f651f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 233.918947][ T8088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.918964][ T8088] R13: 00007f651fa16038 R14: 00007f651fa15fa0 R15: 00007ffe5aaa52a8 [ 233.919003][ T8088] [ 234.382004][ T8088] syz.3.398: vmalloc error: size 5980, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 234.398636][ T8088] CPU: 0 UID: 0 PID: 8088 Comm: syz.3.398 Tainted: G U syzkaller #0 PREEMPT(full) [ 234.398679][ T8088] Tainted: [U]=USER [ 234.398688][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.398713][ T8088] Call Trace: [ 234.398722][ T8088] [ 234.398732][ T8088] dump_stack_lvl+0x100/0x190 [ 234.398786][ T8088] warn_alloc.cold+0x95/0x1c1 [ 234.398816][ T8088] ? __pfx_warn_alloc+0x10/0x10 [ 234.398857][ T8088] ? trace_kmalloc+0xe3/0x110 [ 234.398893][ T8088] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 234.398928][ T8088] ? __kasan_kmalloc+0x8a/0xb0 [ 234.398958][ T8088] ? __get_vm_area_node+0x208/0x330 [ 234.399001][ T8088] __vmalloc_node_range_noprof+0xccd/0x1630 [ 234.399042][ T8088] ? putname+0xb6/0x110 [ 234.399077][ T8088] ? do_file_open_root+0x42d/0x5a0 [ 234.399109][ T8088] ? widen_string+0xdb/0x2f0 [ 234.399141][ T8088] ? kernel_read_file+0x77e/0x9a0 [ 234.399177][ T8088] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 234.399222][ T8088] ? ima_read_file+0x149/0x1b0 [ 234.399249][ T8088] ? __pfx_ima_read_file+0x10/0x10 [ 234.399280][ T8088] ? kernel_read_file+0x77e/0x9a0 [ 234.399305][ T8088] __vmalloc_node_noprof+0xad/0xf0 [ 234.399342][ T8088] ? kernel_read_file+0x77e/0x9a0 [ 234.399373][ T8088] kernel_read_file+0x77e/0x9a0 [ 234.399405][ T8088] ? __pfx_kernel_read_file+0x10/0x10 [ 234.399444][ T8088] kernel_read_file_from_path_initns+0x1cf/0x260 [ 234.399477][ T8088] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 234.399517][ T8088] _request_firmware+0x733/0x13c0 [ 234.399568][ T8088] ? __pfx__request_firmware+0x10/0x10 [ 234.399605][ T8088] ? __pfx_netdev_run_todo+0x10/0x10 [ 234.399640][ T8088] ? rcu_is_watching+0x12/0xc0 [ 234.399676][ T8088] request_firmware+0x35/0x50 [ 234.399723][ T8088] reg_reload_regdb+0x85/0x460 [ 234.399761][ T8088] ? __pfx_reg_reload_regdb+0x10/0x10 [ 234.399797][ T8088] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 234.399838][ T8088] ? nl80211_pre_doit+0x19a/0xae0 [ 234.399885][ T8088] genl_family_rcv_msg_doit+0x214/0x300 [ 234.399930][ T8088] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 234.399969][ T8088] ? genl_get_cmd+0x3e7/0x760 [ 234.400014][ T8088] ? bpf_lsm_capable+0x9/0x10 [ 234.400042][ T8088] ? security_capable+0x80/0x260 [ 234.400073][ T8088] genl_rcv_msg+0x560/0x800 [ 234.400117][ T8088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 234.400157][ T8088] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 234.400197][ T8088] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 234.400228][ T8088] ? __pfx_nl80211_post_doit+0x10/0x10 [ 234.400284][ T8088] netlink_rcv_skb+0x159/0x420 [ 234.400320][ T8088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 234.400362][ T8088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 234.400430][ T8088] ? netlink_deliver_tap+0x1ae/0xcc0 [ 234.400472][ T8088] genl_rcv+0x28/0x40 [ 234.400509][ T8088] netlink_unicast+0x585/0x850 [ 234.400550][ T8088] ? __pfx_netlink_unicast+0x10/0x10 [ 234.400596][ T8088] netlink_sendmsg+0x8b0/0xda0 [ 234.400638][ T8088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.400673][ T8088] ? __import_iovec+0x1d2/0x640 [ 234.400725][ T8088] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 234.400762][ T8088] ____sys_sendmsg+0x9e1/0xb70 [ 234.400796][ T8088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.400836][ T8088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.400870][ T8088] ? preempt_schedule_thunk+0x16/0x30 [ 234.400918][ T8088] ? try_to_wake_up+0x5f6/0x1900 [ 234.400961][ T8088] ___sys_sendmsg+0x190/0x1e0 [ 234.401002][ T8088] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.401040][ T8088] ? futex_private_hash_put+0x107/0x1c0 [ 234.401125][ T8088] __sys_sendmsg+0x170/0x220 [ 234.401155][ T8088] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.401181][ T8088] ? __x64_sys_futex+0x34f/0x4d0 [ 234.401224][ T8088] ? rcu_is_watching+0x12/0xc0 [ 234.401261][ T8088] do_syscall_64+0x115/0x840 [ 234.401299][ T8088] ? clear_bhb_loop+0x40/0x90 [ 234.401333][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.401362][ T8088] RIP: 0033:0x7f651f79ce59 [ 234.401383][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.401409][ T8088] RSP: 002b:00007f65206a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.401435][ T8088] RAX: ffffffffffffffda RBX: 00007f651fa15fa0 RCX: 00007f651f79ce59 [ 234.401454][ T8088] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 234.401471][ T8088] RBP: 00007f651f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 234.401488][ T8088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.401504][ T8088] R13: 00007f651fa16038 R14: 00007f651fa15fa0 R15: 00007ffe5aaa52a8 [ 234.401543][ T8088] [ 234.402534][ T8088] Mem-Info: [ 234.872570][ T8088] active_anon:6138 inactive_anon:0 isolated_anon:0 [ 234.872570][ T8088] active_file:10243 inactive_file:39735 isolated_file:0 [ 234.872570][ T8088] unevictable:21187 dirty:1035 writeback:0 [ 234.872570][ T8088] slab_reclaimable:10945 slab_unreclaimable:89970 [ 234.872570][ T8088] mapped:35183 shmem:2109 pagetables:1214 [ 234.872570][ T8088] sec_pagetables:0 bounce:0 [ 234.872570][ T8088] kernel_misc_reclaimable:0 [ 234.872570][ T8088] free:1305639 free_pcp:22167 free_cma:0 [ 234.932012][ T8088] Node 0 active_anon:24352kB inactive_anon:0kB active_file:40464kB inactive_file:158316kB unevictable:83212kB isolated(anon):0kB isolated(file):0kB mapped:140732kB dirty:4140kB writeback:0kB shmem:6900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11780kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 235.019255][ T8088] Node 1 active_anon:0kB inactive_anon:0kB active_file:508kB inactive_file:624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 235.084155][ T8088] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.143526][ T8088] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 235.205093][ T8088] Node 0 DMA32 free:1285852kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21052kB inactive_anon:0kB active_file:40464kB inactive_file:158316kB unevictable:83212kB writepending:4140kB zspages:0kB present:3129332kB managed:2537488kB mlocked:81676kB bounce:0kB free_pcp:83916kB local_pcp:39480kB free_cma:0kB [ 235.277778][ T8088] lowmem_reserve[]: 0 0 1 1 1 [ 235.297406][ T8088] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1112kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 235.379973][ T8088] lowmem_reserve[]: 0 0 0 0 0 [ 235.386093][ T8088] Node 1 Normal free:3925328kB boost:0kB min:55824kB low:69780kB high:83736kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:508kB inactive_file:624kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6684kB local_pcp:836kB free_cma:0kB [ 235.434995][ T8088] lowmem_reserve[]: 0 0 0 0 0 [ 235.440598][ T8088] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 235.463126][ T8129] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 235.475017][ T8088] Node 0 DMA32: 7062*4kB (ME) 1231*8kB (UME) 673*16kB (UME) 439*32kB (UME) 142*64kB (UME) 316*128kB (UME) 122*256kB (UME) 33*512kB (UME) 6*1024kB (UME) 2*2048kB (ME) 272*4096kB (UM) = 1284928kB [ 235.502177][ T8088] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 235.523762][ T8088] Node 1 Normal: 6*4kB (UM) 6*8kB (U) 7*16kB (U) 8*32kB (UM) 8*64kB (UM) 6*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 2*2048kB (UM) 956*4096kB (M) = 3925432kB [ 235.547439][ T8088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.570958][ T8088] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 235.602009][ T8088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.640589][ T8088] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.661491][ T8088] 62220 total pagecache pages [ 235.669572][ T8088] 0 pages in swap cache [ 235.678331][ T8088] Free swap = 124996kB [ 235.686051][ T8088] Total swap = 124996kB [ 235.695288][ T8088] 2097051 pages RAM [ 235.711470][ T8088] 0 pages HighMem/MovableOnly [ 235.711478][ T8088] 430786 pages reserved [ 235.711484][ T8088] 0 pages cma reserved [ 235.711519][ T8088] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 235.711550][ T8088] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 235.711564][ T8088] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 242.534582][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 242.573343][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 243.349456][ T8243] syz.1.424 (8243): attempted to duplicate a private mapping with mremap. This is not supported. [ 246.292131][ T8262] Unable to find swap-space signature [ 247.928839][ T8292] ubi0: attaching mtd0 [ 248.045318][ T8292] ubi0: scanning is finished [ 248.135169][ T8291] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input8 [ 248.175717][ T8266] Process accounting paused [ 249.234352][ T8292] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 249.738919][ T8306] FAULT_INJECTION: forcing a failure. [ 249.738919][ T8306] name failslab, interval 1, probability 0, space 0, times 0 [ 249.784253][ T8306] CPU: 1 UID: 8 PID: 8306 Comm: syz.0.436 Tainted: G U syzkaller #0 PREEMPT(full) [ 249.784284][ T8306] Tainted: [U]=USER [ 249.784289][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.784302][ T8306] Call Trace: [ 249.784307][ T8306] [ 249.784313][ T8306] dump_stack_lvl+0x100/0x190 [ 249.784342][ T8306] should_fail_ex.cold+0x5/0xa [ 249.784362][ T8306] should_failslab+0xc2/0x120 [ 249.784379][ T8306] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 249.784401][ T8306] ? prepare_creds+0x2c/0x950 [ 249.784416][ T8306] ? from_kuid_munged+0xaa/0x130 [ 249.784438][ T8306] prepare_creds+0x2c/0x950 [ 249.784454][ T8306] __sys_setfsuid+0xda/0x380 [ 249.784473][ T8306] do_syscall_64+0x115/0x840 [ 249.784500][ T8306] ? clear_bhb_loop+0x40/0x90 [ 249.784518][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.784534][ T8306] RIP: 0033:0x7fb89499ce59 [ 249.784547][ T8306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.784561][ T8306] RSP: 002b:00007fb892bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 249.784579][ T8306] RAX: ffffffffffffffda RBX: 00007fb894c15fa0 RCX: 00007fb89499ce59 [ 249.784588][ T8306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 249.784597][ T8306] RBP: 00007fb894a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 249.784606][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.784614][ T8306] R13: 00007fb894c16038 R14: 00007fb894c15fa0 R15: 00007fffe8c15b38 [ 249.784634][ T8306] [ 251.807860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 253.118751][ T8304] Process accounting paused [ 255.640434][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.651556][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.460386][ T8349] FAULT_INJECTION: forcing a failure. [ 256.460386][ T8349] name failslab, interval 1, probability 0, space 0, times 0 [ 256.474172][ T8341] FAULT_INJECTION: forcing a failure. [ 256.474172][ T8341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.474208][ T8349] CPU: 0 UID: 0 PID: 8349 Comm: syz.3.442 Tainted: G U syzkaller #0 PREEMPT(full) [ 256.474240][ T8349] Tainted: [U]=USER [ 256.474247][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.474260][ T8349] Call Trace: [ 256.474268][ T8349] [ 256.474278][ T8349] dump_stack_lvl+0x100/0x190 [ 256.474325][ T8349] should_fail_ex.cold+0x5/0xa [ 256.474358][ T8349] should_failslab+0xc2/0x120 [ 256.474388][ T8349] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 256.474427][ T8349] ? inet_bind2_bucket_create+0x36/0x5f0 [ 256.474455][ T8349] ? do_raw_spin_lock+0x128/0x260 [ 256.474489][ T8349] inet_bind2_bucket_create+0x36/0x5f0 [ 256.474522][ T8349] __inet_hash_connect+0x1527/0x2000 [ 256.474564][ T8349] ? __pfx___inet_check_established+0x10/0x10 [ 256.474595][ T8349] ? __pfx___inet_hash_connect+0x10/0x10 [ 256.474632][ T8349] ? inet_init_ehash_secret+0xd/0x60 [ 256.474657][ T8349] ? inet_hash_connect+0x9f/0x340 [ 256.474689][ T8349] tcp_v4_connect+0xeb3/0x1b40 [ 256.474749][ T8349] ? __pfx_tcp_v4_connect+0x10/0x10 [ 256.474792][ T8349] ? mptcp_token_new_connect+0x1e4/0x620 [ 256.474830][ T8349] mptcp_connect+0x4c6/0xaf0 [ 256.474865][ T8349] __inet_stream_connect+0x208/0xfa0 [ 256.474912][ T8349] ? __pfx___inet_stream_connect+0x10/0x10 [ 256.474968][ T8349] tcp_sendmsg_fastopen+0x3ed/0x750 [ 256.475001][ T8349] mptcp_sendmsg+0x1641/0x2210 [ 256.475033][ T8349] ? trace_kmalloc+0xe3/0x110 [ 256.475075][ T8349] ? aa_sk_perm+0x309/0xaa0 [ 256.475113][ T8349] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 256.475155][ T8349] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 256.475191][ T8349] inet_sendmsg+0x11c/0x140 [ 256.475230][ T8349] ____sys_sendmsg+0x98d/0xb70 [ 256.475262][ T8349] ? __pfx_inet_sendmsg+0x10/0x10 [ 256.475309][ T8349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.475348][ T8349] ? __pfx__kstrtoull+0x10/0x10 [ 256.475382][ T8349] ___sys_sendmsg+0x190/0x1e0 [ 256.475419][ T8349] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.475471][ T8349] ? find_held_lock+0x2b/0x80 [ 256.475525][ T8349] __sys_sendmmsg+0x205/0x430 [ 256.475556][ T8349] ? __pfx___sys_sendmmsg+0x10/0x10 [ 256.475595][ T8349] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 256.475647][ T8349] ? fput+0x79/0x100 [ 256.475681][ T8349] ? ksys_write+0x1ac/0x250 [ 256.475709][ T8349] ? __pfx_ksys_write+0x10/0x10 [ 256.475751][ T8349] __x64_sys_sendmmsg+0x9c/0x100 [ 256.475778][ T8349] ? lockdep_hardirqs_on+0x78/0x100 [ 256.475812][ T8349] do_syscall_64+0x115/0x840 [ 256.475846][ T8349] ? clear_bhb_loop+0x40/0x90 [ 256.475876][ T8349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.475902][ T8349] RIP: 0033:0x7f651f79ce59 [ 256.475923][ T8349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.475947][ T8349] RSP: 002b:00007f6520681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 256.475971][ T8349] RAX: ffffffffffffffda RBX: 00007f651fa16090 RCX: 00007f651f79ce59 [ 256.475988][ T8349] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000004 [ 256.476004][ T8349] RBP: 00007f6520681090 R08: 0000000000000000 R09: 0000000000000000 [ 256.476019][ T8349] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.476039][ T8349] R13: 00007f651fa16128 R14: 00007f651fa16090 R15: 00007ffe5aaa52a8 [ 256.476075][ T8349] [ 256.858248][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 256.884565][ T8341] CPU: 1 UID: 0 PID: 8341 Comm: syz.0.440 Tainted: G U syzkaller #0 PREEMPT(full) [ 256.884589][ T8341] Tainted: [U]=USER [ 256.884594][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.884603][ T8341] Call Trace: [ 256.884607][ T8341] [ 256.884613][ T8341] dump_stack_lvl+0x100/0x190 [ 256.884641][ T8341] should_fail_ex.cold+0x5/0xa [ 256.884660][ T8341] _copy_from_user+0x2e/0xd0 [ 256.884681][ T8341] copy_msghdr_from_user+0x9f/0x4f0 [ 256.884701][ T8341] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 256.884723][ T8341] ? rcu_is_watching+0x12/0xc0 [ 256.884739][ T8341] ? ___sys_recvmsg+0x177/0x1a0 [ 256.884757][ T8341] ? kfree+0x1dd/0x6c0 [ 256.884779][ T8341] ___sys_recvmsg+0xdd/0x1a0 [ 256.884799][ T8341] ? __pfx____sys_recvmsg+0x10/0x10 [ 256.884829][ T8341] ? __pfx___might_resched+0x10/0x10 [ 256.884850][ T8341] do_recvmmsg+0x301/0x760 [ 256.884872][ T8341] ? __pfx_do_recvmmsg+0x10/0x10 [ 256.884895][ T8341] ? do_futex+0x192/0x350 [ 256.884922][ T8341] ? __x64_sys_futex+0x34f/0x4d0 [ 256.884952][ T8341] __x64_sys_recvmmsg+0x22a/0x280 [ 256.884983][ T8341] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 256.885015][ T8341] ? rcu_is_watching+0x12/0xc0 [ 256.885046][ T8341] do_syscall_64+0x115/0x840 [ 256.885067][ T8341] ? clear_bhb_loop+0x40/0x90 [ 256.885085][ T8341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.885099][ T8341] RIP: 0033:0x7fb89499ce59 [ 256.885112][ T8341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.885125][ T8341] RSP: 002b:00007fb892bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 256.885140][ T8341] RAX: ffffffffffffffda RBX: 00007fb894c16090 RCX: 00007fb89499ce59 [ 256.885149][ T8341] RDX: 000000000000010a RSI: 0000000000000000 RDI: 0000000000000007 [ 256.885157][ T8341] RBP: 00007fb894a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 256.885169][ T8341] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 256.885177][ T8341] R13: 00007fb894c16128 R14: 00007fb894c16090 R15: 00007fffe8c15b38 [ 256.885196][ T8341] [ 265.376355][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'. [ 270.611272][ T8602] ubi0: attaching mtd0 [ 270.637285][ T8602] ubi0: scanning is finished [ 271.002314][ T8602] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 271.039948][ T8602] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 271.075100][ T8602] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 271.095235][ T8602] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 271.120877][ T8602] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 271.146058][ T8602] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 271.165845][ T8602] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 804046458 [ 271.232305][ T8602] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 271.249936][ T8607] ubi0: background thread "ubi_bgt0d" started, PID 8607 [ 271.280509][ T8603] ubi0: detaching mtd0 [ 271.361121][ T8603] ubi0: mtd0 is detached [ 272.613954][ T8640] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 273.221170][ T8655] sctp: [Deprecated]: syz.2.500 (pid 8655) Use of int in maxseg socket option. [ 273.221170][ T8655] Use struct sctp_assoc_value instead [ 273.332713][ T30] audit: type=1807 audit(2147483756.810:6): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 273.421270][ T30] audit: type=1802 audit(2147483756.820:7): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.501" res=0 errno=0 [ 273.453908][ T8659] ima: policy update failed [ 273.467231][ T30] audit: type=1802 audit(2147483756.950:8): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.501" res=0 errno=0 [ 275.823770][ T8680] vhci_hcd: not connected 4 [ 278.377587][ T8737] Process accounting resumed [ 278.856872][ T8761] FAULT_INJECTION: forcing a failure. [ 278.856872][ T8761] name failslab, interval 1, probability 0, space 0, times 0 [ 278.871634][ T8761] CPU: 1 UID: 0 PID: 8761 Comm: syz.2.518 Tainted: G U syzkaller #0 PREEMPT(full) [ 278.871670][ T8761] Tainted: [U]=USER [ 278.871677][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.871690][ T8761] Call Trace: [ 278.871698][ T8761] [ 278.871708][ T8761] dump_stack_lvl+0x100/0x190 [ 278.871743][ T8761] should_fail_ex.cold+0x5/0xa [ 278.871770][ T8761] ? __netif_set_xps_queue+0x8a3/0x2340 [ 278.871784][ T8761] should_failslab+0xc2/0x120 [ 278.871801][ T8761] __kmalloc_noprof+0xe0/0x850 [ 278.871826][ T8761] __netif_set_xps_queue+0x8a3/0x2340 [ 278.871852][ T8761] netif_set_xps_queue+0x2a/0x40 [ 278.871869][ T8761] xps_cpus_store+0x279/0x320 [ 278.871892][ T8761] ? __pfx_xps_cpus_store+0x10/0x10 [ 278.871913][ T8761] ? find_held_lock+0x2b/0x80 [ 278.871930][ T8761] ? sysfs_file_kobj+0xe4/0x290 [ 278.871952][ T8761] ? __pfx_xps_cpus_store+0x10/0x10 [ 278.871972][ T8761] netdev_queue_attr_store+0x61/0x90 [ 278.871990][ T8761] ? __pfx_netdev_queue_attr_store+0x10/0x10 [ 278.872007][ T8761] sysfs_kf_write+0xf2/0x150 [ 278.872030][ T8761] kernfs_fop_write_iter+0x3e0/0x5f0 [ 278.872048][ T8761] ? __pfx_sysfs_kf_write+0x10/0x10 [ 278.872071][ T8761] vfs_write+0x6ac/0x1070 [ 278.872088][ T8761] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 278.872109][ T8761] ? __pfx_vfs_write+0x10/0x10 [ 278.872137][ T8761] ksys_write+0x12a/0x250 [ 278.872153][ T8761] ? __pfx_ksys_write+0x10/0x10 [ 278.872170][ T8761] ? rcu_is_watching+0x12/0xc0 [ 278.872188][ T8761] do_syscall_64+0x115/0x840 [ 278.872207][ T8761] ? clear_bhb_loop+0x40/0x90 [ 278.872224][ T8761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.872238][ T8761] RIP: 0033:0x7f2e5659ce59 [ 278.872253][ T8761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.872266][ T8761] RSP: 002b:00007f2e547ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.872280][ T8761] RAX: ffffffffffffffda RBX: 00007f2e56815fa0 RCX: 00007f2e5659ce59 [ 278.872289][ T8761] RDX: 0000000000007fff RSI: 0000200000000400 RDI: 0000000000000003 [ 278.872297][ T8761] RBP: 00007f2e547ee090 R08: 0000000000000000 R09: 0000000000000000 [ 278.872305][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.872312][ T8761] R13: 00007f2e56816038 R14: 00007f2e56815fa0 R15: 00007ffe0e00acd8 [ 278.872332][ T8761] [ 279.510452][ T8768] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 280.903348][ T30] audit: type=1800 audit(2147483764.390:9): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.526" name="lu_gp_id" dev="configfs" ino=26047 res=0 errno=0 [ 283.284822][ T8829] Process accounting resumed [ 284.102554][ T8866] ubi0: attaching mtd0 [ 284.126428][ T8866] ubi0: scanning is finished [ 284.493724][ T8866] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 284.529305][ T8866] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 284.612922][ T8866] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 284.636907][ T8866] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 284.692822][ T8866] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 284.712642][ T8866] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 284.731102][ T8866] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 804046458 [ 284.750899][ T8866] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 284.860107][ T8871] ubi0: background thread "ubi_bgt0d" started, PID 8871 [ 284.910040][ T8867] ubi0: detaching mtd0 [ 284.921589][ T8867] ubi0: mtd0 is detached [ 285.157145][ T30] audit: type=1800 audit(4294967327.100:10): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.541" name="lu_gp_id" dev="configfs" ino=26249 res=0 errno=0 [ 288.153723][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 288.179612][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a033400: rx timeout, send abort [ 288.190088][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a033400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 288.591619][ T8952] ubi0: attaching mtd0 [ 288.628265][ T8952] ubi0: scanning is finished [ 288.979822][ T8952] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 289.010570][ T8952] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 289.021036][ T8952] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 289.028321][ T8952] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 289.040979][ T8952] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 289.049146][ T8952] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 289.067794][ T8952] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 804046458 [ 289.089639][ T8952] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 289.124427][ T8964] ubi0: background thread "ubi_bgt0d" started, PID 8964 [ 289.151963][ T8955] ubi0: detaching mtd0 [ 289.235740][ T8955] ubi0: mtd0 is detached [ 291.211048][ T5633] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 291.273552][ T8994] hub 1-0:1.0: USB hub found [ 291.291408][ T8994] hub 1-0:1.0: 1 port detected [ 293.126830][ T9040] syz.0.574 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 293.202095][ T9038] smpboot: CPU 1 is now offline [ 293.239003][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 294.086457][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 294.156499][ T9051] libceph: secret too big 48 [ 294.164192][ T9059] ubi0: attaching mtd0 [ 294.217756][ T9059] ubi0: scanning is finished [ 294.673898][ T9059] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 294.769493][ T9059] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 294.904908][ T9059] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 295.055132][ T9059] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 295.252089][ T9059] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 295.308155][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 295.436275][ T9059] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 295.668134][ T9059] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 804046458 [ 295.719695][ T9090] netlink: 334 bytes leftover after parsing attributes in process `syz.3.586'. [ 295.800734][ T9059] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 295.823620][ T9090] netlink: 334 bytes leftover after parsing attributes in process `syz.3.586'. [ 295.850703][ T9092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.587'. [ 295.901803][ T9061] ubi0: detaching mtd0 [ 295.906704][ T9074] ubi0: background thread "ubi_bgt0d" started, PID 9074 [ 296.000516][ T9061] ubi0: mtd0 is detached [ 296.606208][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 299.191483][ T9189] ubi0: attaching mtd0 [ 299.257902][ T9189] ubi0: scanning is finished [ 299.617176][ T9189] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 299.686170][ T9189] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 299.732219][ T9189] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 299.780351][ T9189] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 299.904015][ T9189] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 300.026440][ T9189] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 300.067857][ T9189] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 804046458 [ 300.120772][ T9189] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 300.170607][ T9192] ubi0: detaching mtd0 [ 300.174722][ T9196] ubi0: background thread "ubi_bgt0d" started, PID 9196 [ 300.220485][ T9192] ubi0: mtd0 is detached [ 300.391937][ T9205] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 300.771614][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 300.813559][ T9199] FAULT_INJECTION: forcing a failure. [ 300.813559][ T9199] name fail_futex, interval 1, probability 0, space 0, times 0 [ 300.936053][ T9199] CPU: 0 UID: 0 PID: 9199 Comm: syz.0.610 Tainted: G U syzkaller #0 PREEMPT(full) [ 300.936078][ T9199] Tainted: [U]=USER [ 300.936083][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.936092][ T9199] Call Trace: [ 300.936098][ T9199] [ 300.936103][ T9199] dump_stack_lvl+0x100/0x190 [ 300.936133][ T9199] should_fail_ex.cold+0x5/0xa [ 300.936152][ T9199] get_futex_key+0x1d2/0x1510 [ 300.936177][ T9199] ? __pfx_get_futex_key+0x10/0x10 [ 300.936206][ T9199] futex_wake+0xea/0x530 [ 300.936225][ T9199] ? __pfx_futex_wake+0x10/0x10 [ 300.936244][ T9199] ? lockdep_hardirqs_on+0x78/0x100 [ 300.936271][ T9199] do_futex+0x32b/0x350 [ 300.936286][ T9199] ? __pfx_do_futex+0x10/0x10 [ 300.936300][ T9199] ? __pfx___might_resched+0x10/0x10 [ 300.936323][ T9199] ? blkcg_maybe_throttle_current+0x5e8/0xeb0 [ 300.936347][ T9199] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.936368][ T9199] __x64_sys_futex+0x34f/0x4d0 [ 300.936386][ T9199] ? __pfx___x64_sys_futex+0x10/0x10 [ 300.936400][ T9199] ? exit_to_user_mode_loop+0xf3/0x670 [ 300.936424][ T9199] ? rcu_is_watching+0x12/0xc0 [ 300.936443][ T9199] do_syscall_64+0x115/0x840 [ 300.936463][ T9199] ? clear_bhb_loop+0x40/0x90 [ 300.936480][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.936494][ T9199] RIP: 0033:0x7fb89499ce59 [ 300.936507][ T9199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.936520][ T9199] RSP: 002b:00007fb892bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 300.936534][ T9199] RAX: ffffffffffffffda RBX: 00007fb894c15fa8 RCX: 00007fb89499ce59 [ 300.936544][ T9199] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb894c15fac [ 300.936552][ T9199] RBP: 00007fb894c15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 300.936561][ T9199] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 300.936570][ T9199] R13: 00007fb894c16038 R14: 00007fffe8c15a50 R15: 00007fffe8c15b38 [ 300.936589][ T9199] [ 301.614039][ T9204] zswap: compressor 000 not available [ 302.857269][ T9244] FAULT_INJECTION: forcing a failure. [ 302.857269][ T9244] name failslab, interval 1, probability 0, space 0, times 0 [ 302.922934][ T9244] CPU: 0 UID: 0 PID: 9244 Comm: syz.3.616 Tainted: G U syzkaller #0 PREEMPT(full) [ 302.922960][ T9244] Tainted: [U]=USER [ 302.922965][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.922973][ T9244] Call Trace: [ 302.922979][ T9244] [ 302.922985][ T9244] dump_stack_lvl+0x100/0x190 [ 302.923014][ T9244] should_fail_ex.cold+0x5/0xa [ 302.923033][ T9244] should_failslab+0xc2/0x120 [ 302.923059][ T9244] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 302.923083][ T9244] ? ptlock_alloc+0x1f/0x70 [ 302.923104][ T9244] ? do_raw_spin_lock+0x128/0x260 [ 302.923123][ T9244] ptlock_alloc+0x1f/0x70 [ 302.923143][ T9244] pte_alloc_one+0x82/0x3d0 [ 302.923163][ T9244] do_fault+0x86c/0x1750 [ 302.923180][ T9244] ? __pmd_alloc+0x3fb/0x950 [ 302.923199][ T9244] __handle_mm_fault+0x187d/0x2a00 [ 302.923223][ T9244] ? mt_find+0x45e/0x8e0 [ 302.923246][ T9244] ? __pfx___handle_mm_fault+0x10/0x10 [ 302.923265][ T9244] ? __pfx_mt_find+0x10/0x10 [ 302.923297][ T9244] ? find_vma+0xbf/0x140 [ 302.923313][ T9244] ? __pfx_find_vma+0x10/0x10 [ 302.923331][ T9244] handle_mm_fault+0x37b/0xa30 [ 302.923355][ T9244] do_user_addr_fault+0x74c/0x12f0 [ 302.923375][ T9244] ? trace_page_fault_kernel+0x7a/0x200 [ 302.923393][ T9244] exc_page_fault+0x6f/0xd0 [ 302.923413][ T9244] asm_exc_page_fault+0x26/0x30 [ 302.923427][ T9244] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 302.923443][ T9244] Code: c4 10 e9 04 9d 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 [ 302.923456][ T9244] RSP: 0018:ffffc90004c2f9c0 EFLAGS: 00050206 [ 302.923468][ T9244] RAX: 0000000000000001 RBX: ffff88802efeba80 RCX: 0000000000000003 [ 302.923478][ T9244] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802efeba80 [ 302.923486][ T9244] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1005dfd750 [ 302.923494][ T9244] R10: ffff88802efeba82 R11: 0000000000000000 R12: ffffc90004c2fc40 [ 302.923506][ T9244] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000000 [ 302.923523][ T9244] _copy_from_iter+0x355/0x1690 [ 302.923546][ T9244] ? __asan_memset+0x23/0x50 [ 302.923568][ T9244] ? __pfx__copy_from_iter+0x10/0x10 [ 302.923588][ T9244] ? __pfx___alloc_skb+0x10/0x10 [ 302.923602][ T9244] ? __pfx___might_resched+0x10/0x10 [ 302.923624][ T9244] netlink_sendmsg+0x808/0xda0 [ 302.923647][ T9244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.923669][ T9244] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 302.923687][ T9244] sock_write_iter+0x524/0x5a0 [ 302.923705][ T9244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.923724][ T9244] ? __pfx_sock_write_iter+0x10/0x10 [ 302.923749][ T9244] ? bpf_lsm_file_permission+0x9/0x10 [ 302.923762][ T9244] ? security_file_permission+0x76/0x210 [ 302.923782][ T9244] ? rw_verify_area+0xce/0x6d0 [ 302.923798][ T9244] vfs_write+0x6ac/0x1070 [ 302.923815][ T9244] ? __pfx_sock_write_iter+0x10/0x10 [ 302.923835][ T9244] ? __pfx_vfs_write+0x10/0x10 [ 302.923850][ T9244] ? find_held_lock+0x2b/0x80 [ 302.923879][ T9244] ksys_write+0x1f8/0x250 [ 302.923895][ T9244] ? __pfx_ksys_write+0x10/0x10 [ 302.923913][ T9244] ? rcu_is_watching+0x12/0xc0 [ 302.923931][ T9244] do_syscall_64+0x115/0x840 [ 302.923950][ T9244] ? clear_bhb_loop+0x40/0x90 [ 302.923968][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.923982][ T9244] RIP: 0033:0x7f651f79ce59 [ 302.923994][ T9244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.924007][ T9244] RSP: 002b:00007f65206a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 302.924020][ T9244] RAX: ffffffffffffffda RBX: 00007f651fa15fa0 RCX: 00007f651f79ce59 [ 302.924029][ T9244] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 302.924037][ T9244] RBP: 00007f651f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 302.924052][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.924061][ T9244] R13: 00007f651fa16038 R14: 00007f651fa15fa0 R15: 00007ffe5aaa52a8 [ 302.924081][ T9244] [ 303.764504][ T9258] rnbd_client L213: map_device: Parameters missing [ 303.841057][ T9262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.619'. [ 304.343259][ T9272] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 304.446771][ T9270] FAULT_INJECTION: forcing a failure. [ 304.446771][ T9270] name failslab, interval 1, probability 0, space 0, times 0 [ 304.446831][ T9270] CPU: 0 UID: 0 PID: 9270 Comm: syz.3.621 Tainted: G U syzkaller #0 PREEMPT(full) [ 304.446853][ T9270] Tainted: [U]=USER [ 304.446858][ T9270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 304.446866][ T9270] Call Trace: [ 304.446871][ T9270] [ 304.446884][ T9270] dump_stack_lvl+0x100/0x190 [ 304.446914][ T9270] should_fail_ex.cold+0x5/0xa [ 304.446934][ T9270] ? lsm_blob_alloc+0x68/0x90 [ 304.446957][ T9270] should_failslab+0xc2/0x120 [ 304.446976][ T9270] __kmalloc_noprof+0xe0/0x850 [ 304.446997][ T9270] ? trace_kmalloc+0xe3/0x110 [ 304.447017][ T9270] lsm_blob_alloc+0x68/0x90 [ 304.447038][ T9270] security_sk_alloc+0x2d/0x290 [ 304.447054][ T9270] sk_prot_alloc+0x12a/0x2a0 [ 304.447074][ T9270] sk_alloc+0x36/0xe80 [ 304.447096][ T9270] __netlink_create+0x5e/0x2c0 [ 304.447112][ T9270] ? __wake_up+0x3f/0x60 [ 304.447133][ T9270] netlink_create+0x29b/0x610 [ 304.447148][ T9270] ? __pfx_genl_bind+0x10/0x10 [ 304.447166][ T9270] ? __pfx_genl_unbind+0x10/0x10 [ 304.447184][ T9270] ? __pfx_genl_release+0x10/0x10 [ 304.447205][ T9270] __sock_create+0x339/0x860 [ 304.447228][ T9270] __sys_socket+0x14d/0x260 [ 304.447247][ T9270] ? __pfx___sys_socket+0x10/0x10 [ 304.447271][ T9270] __x64_sys_socket+0x72/0xb0 [ 304.447290][ T9270] ? lockdep_hardirqs_on+0x78/0x100 [ 304.447310][ T9270] do_syscall_64+0x115/0x840 [ 304.447329][ T9270] ? clear_bhb_loop+0x40/0x90 [ 304.447348][ T9270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.447363][ T9270] RIP: 0033:0x7f651f79ce59 [ 304.447376][ T9270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.447390][ T9270] RSP: 002b:00007f65206a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 304.447405][ T9270] RAX: ffffffffffffffda RBX: 00007f651fa15fa0 RCX: 00007f651f79ce59 [ 304.447415][ T9270] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 304.447424][ T9270] RBP: 00007f651f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 304.447433][ T9270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.447442][ T9270] R13: 00007f651fa16038 R14: 00007f651fa15fa0 R15: 00007ffe5aaa52a8 [ 304.447461][ T9270] [ 304.746123][ T9280] sysfs_service_op_store: Client not running :-5: [ 305.965723][ T30] audit: type=1800 audit(4294967347.910:11): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.628" name="lu_gp_id" dev="configfs" ino=28759 res=0 errno=0 [ 306.669282][ T9326] random: crng reseeded on system resumption [ 307.713938][ T9350] FAULT_INJECTION: forcing a failure. [ 307.713938][ T9350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.771947][ T9350] CPU: 0 UID: 0 PID: 9350 Comm: syz.3.640 Tainted: G U syzkaller #0 PREEMPT(full) [ 307.771973][ T9350] Tainted: [U]=USER [ 307.771979][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.771988][ T9350] Call Trace: [ 307.771993][ T9350] [ 307.771999][ T9350] dump_stack_lvl+0x100/0x190 [ 307.772029][ T9350] should_fail_ex.cold+0x5/0xa [ 307.772046][ T9350] ? prepare_alloc_pages+0x16d/0x5f0 [ 307.772066][ T9350] should_fail_alloc_page+0xeb/0x140 [ 307.772085][ T9350] prepare_alloc_pages+0x1f0/0x5f0 [ 307.772106][ T9350] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 307.772132][ T9350] ? __pfx_stack_trace_save+0x10/0x10 [ 307.772152][ T9350] ? stack_depot_save_flags+0x27/0x9d0 [ 307.772175][ T9350] ? kasan_save_stack+0x3f/0x50 [ 307.772188][ T9350] ? kasan_save_stack+0x30/0x50 [ 307.772201][ T9350] ? kasan_save_track+0x14/0x30 [ 307.772217][ T9350] ? kasan_save_stack+0x3f/0x50 [ 307.772233][ T9350] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 307.772273][ T9350] ? __lock_acquire+0x4a5/0x2630 [ 307.772295][ T9350] ? __lock_acquire+0x4a5/0x2630 [ 307.772316][ T9350] ? __css_rstat_updated+0x1ce/0x5a0 [ 307.772344][ T9350] ? lock_acquire+0x1b1/0x370 [ 307.772365][ T9350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 307.772387][ T9350] ? policy_nodemask+0xed/0x4f0 [ 307.772406][ T9350] alloc_pages_mpol+0x1fb/0x540 [ 307.772424][ T9350] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 307.772443][ T9350] ? __lock_acquire+0x4a5/0x2630 [ 307.772466][ T9350] folio_alloc_mpol_noprof+0x36/0x260 [ 307.772487][ T9350] vma_alloc_folio_noprof+0xed/0x1d0 [ 307.772506][ T9350] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 307.772531][ T9350] do_anonymous_page+0xb46/0x2050 [ 307.772561][ T9350] ? rcu_read_unlock+0x2d/0xb0 [ 307.772588][ T9350] __handle_mm_fault+0x1d2c/0x2a00 [ 307.772613][ T9350] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 307.772634][ T9350] ? __pfx___handle_mm_fault+0x10/0x10 [ 307.772657][ T9350] ? pte_offset_map_lock+0x174/0x320 [ 307.772674][ T9350] ? find_held_lock+0x2b/0x80 [ 307.772697][ T9350] ? follow_page_pte+0x4d0/0x13f0 [ 307.772718][ T9350] handle_mm_fault+0x37b/0xa30 [ 307.772743][ T9350] __get_user_pages+0x1178/0x32a0 [ 307.772767][ T9350] ? __pfx___get_user_pages+0x10/0x10 [ 307.772791][ T9350] populate_vma_page_range+0x267/0x3f0 [ 307.772810][ T9350] ? __pfx_populate_vma_page_range+0x10/0x10 [ 307.772829][ T9350] ? __pfx_find_vma_intersection+0x10/0x10 [ 307.772847][ T9350] ? do_mmap+0x93f/0x12f0 [ 307.772866][ T9350] __mm_populate+0x107/0x3a0 [ 307.772886][ T9350] ? __pfx___mm_populate+0x10/0x10 [ 307.772905][ T9350] ? up_write+0x28c/0x4f0 [ 307.772922][ T9350] vm_mmap_pgoff+0x37f/0x470 [ 307.772943][ T9350] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 307.772962][ T9350] ? do_futex+0x192/0x350 [ 307.772976][ T9350] ? __pfx_do_futex+0x10/0x10 [ 307.772995][ T9350] ksys_mmap_pgoff+0xe4/0x610 [ 307.773012][ T9350] ? __x64_sys_futex+0x358/0x4d0 [ 307.773027][ T9350] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 307.773044][ T9350] ? xfd_validate_state+0x129/0x190 [ 307.773063][ T9350] __x64_sys_mmap+0x125/0x190 [ 307.773080][ T9350] do_syscall_64+0x115/0x840 [ 307.773101][ T9350] ? clear_bhb_loop+0x40/0x90 [ 307.773119][ T9350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.773135][ T9350] RIP: 0033:0x7f651f79ce59 [ 307.773148][ T9350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.773162][ T9350] RSP: 002b:00007f65206a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 307.773178][ T9350] RAX: ffffffffffffffda RBX: 00007f651fa15fa0 RCX: 00007f651f79ce59 [ 307.773188][ T9350] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 307.773197][ T9350] RBP: 00007f651f832d6f R08: ffffffffffffffff R09: 0000000000000000 [ 307.773206][ T9350] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 307.773215][ T9350] R13: 00007f651fa16038 R14: 00007f651fa15fa0 R15: 00007ffe5aaa52a8 [ 307.773234][ T9350] [ 308.737672][ T9347] Process accounting paused [ 308.930808][ T30] audit: type=1800 audit(4294967350.840:12): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.642" name="lu_gp_id" dev="configfs" ino=29139 res=0 errno=0 [ 310.423863][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 310.472492][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 312.549918][ T30] audit: type=1800 audit(4294967354.500:13): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.661" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 313.977268][ T9476] FAULT_INJECTION: forcing a failure. [ 313.977268][ T9476] name failslab, interval 1, probability 0, space 0, times 0 [ 314.049331][ T9476] CPU: 0 UID: 0 PID: 9476 Comm: syz.2.665 Tainted: G U syzkaller #0 PREEMPT(full) [ 314.049361][ T9476] Tainted: [U]=USER [ 314.049366][ T9476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.049375][ T9476] Call Trace: [ 314.049381][ T9476] [ 314.049387][ T9476] dump_stack_lvl+0x100/0x190 [ 314.049416][ T9476] should_fail_ex.cold+0x5/0xa [ 314.049436][ T9476] should_failslab+0xc2/0x120 [ 314.049453][ T9476] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 314.049475][ T9476] ? ptlock_alloc+0x1f/0x70 [ 314.049497][ T9476] ? do_raw_spin_lock+0x128/0x260 [ 314.049524][ T9476] ptlock_alloc+0x1f/0x70 [ 314.049544][ T9476] pte_alloc_one+0x82/0x3d0 [ 314.049564][ T9476] do_fault+0x86c/0x1750 [ 314.049581][ T9476] ? __pmd_alloc+0x3fb/0x950 [ 314.049601][ T9476] __handle_mm_fault+0x187d/0x2a00 [ 314.049624][ T9476] ? mt_find+0x45e/0x8e0 [ 314.049647][ T9476] ? __pfx___handle_mm_fault+0x10/0x10 [ 314.049667][ T9476] ? __pfx_mt_find+0x10/0x10 [ 314.049697][ T9476] ? find_vma+0xbf/0x140 [ 314.049713][ T9476] ? __pfx_find_vma+0x10/0x10 [ 314.049730][ T9476] handle_mm_fault+0x37b/0xa30 [ 314.049756][ T9476] do_user_addr_fault+0x74c/0x12f0 [ 314.049775][ T9476] ? trace_page_fault_kernel+0x7a/0x200 [ 314.049793][ T9476] exc_page_fault+0x6f/0xd0 [ 314.049814][ T9476] asm_exc_page_fault+0x26/0x30 [ 314.049836][ T9476] RIP: 0010:__get_user_4+0x14/0x20 [ 314.049853][ T9476] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 80 95 04 00 90 90 90 90 90 90 90 90 90 90 [ 314.049867][ T9476] RSP: 0018:ffffc9000536fd20 EFLAGS: 00050287 [ 314.049880][ T9476] RAX: 0000000000000000 RBX: ffff88807799ec40 RCX: ffffc90011f62000 [ 314.049890][ T9476] RDX: 00007ffffffff000 RSI: ffffffff8257f631 RDI: ffffffff8c1c4680 [ 314.049900][ T9476] RBP: 1ffff92000a6dfa7 R08: 0000000000000001 R09: 00000000000001c5 [ 314.049909][ T9476] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 314.049918][ T9476] R13: ffff88806ad2c550 R14: 0000000000005452 R15: 0000000000005452 [ 314.049933][ T9476] ? __might_fault+0x111/0x140 [ 314.049957][ T9476] do_vfs_ioctl+0xec4/0x13e0 [ 314.049972][ T9476] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 314.049992][ T9476] ? find_held_lock+0x2b/0x80 [ 314.050009][ T9476] ? __fget_files+0x215/0x3d0 [ 314.050024][ T9476] ? hook_file_ioctl_common+0x149/0x410 [ 314.050047][ T9476] ? __fget_files+0x21f/0x3d0 [ 314.050068][ T9476] __x64_sys_ioctl+0x114/0x210 [ 314.050084][ T9476] do_syscall_64+0x115/0x840 [ 314.050103][ T9476] ? clear_bhb_loop+0x40/0x90 [ 314.050120][ T9476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.050135][ T9476] RIP: 0033:0x7f2e5659ce59 [ 314.050147][ T9476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.050160][ T9476] RSP: 002b:00007f2e547ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.050173][ T9476] RAX: ffffffffffffffda RBX: 00007f2e56816180 RCX: 00007f2e5659ce59 [ 314.050183][ T9476] RDX: 0000000000000000 RSI: 0000000000005452 RDI: 0000000000000007 [ 314.050191][ T9476] RBP: 00007f2e56632d6f R08: 0000000000000000 R09: 0000000000000000 [ 314.050199][ T9476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.050207][ T9476] R13: 00007f2e56816218 R14: 00007f2e56816180 R15: 00007ffe0e00acd8 [ 314.050226][ T9476] [ 315.362180][ T9479] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0e09a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 315.377793][ T9479] Call Trace: [ 315.381062][ T9479] [ 315.383988][ T9479] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 315.390658][ T9479] mce_cpu_restart+0xd5/0x1f0 [ 315.395320][ T9479] ? __pfx_mce_cpu_restart+0x10/0x10 [ 315.400620][ T9479] smp_call_function_many_cond+0x13d4/0x1700 [ 315.406596][ T9479] ? __pfx_mce_cpu_restart+0x10/0x10 [ 315.411868][ T9479] ? mark_held_locks+0x40/0x70 [ 315.416621][ T9479] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 315.422418][ T9479] ? lockdep_hardirqs_on+0x78/0x100 [ 315.427610][ T9479] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 315.433406][ T9479] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 315.439724][ T9479] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 315.445699][ T9479] ? __timer_delete_sync+0x151/0x1c0 [ 315.450974][ T9479] ? __pfx_mce_cpu_restart+0x10/0x10 [ 315.456245][ T9479] on_each_cpu_cond_mask+0x40/0x90 [ 315.461350][ T9479] set_bank+0x240/0x3a0 [ 315.465487][ T9479] ? __pfx_set_bank+0x10/0x10 [ 315.470146][ T9479] ? find_held_lock+0x2b/0x80 [ 315.474811][ T9479] ? sysfs_file_kobj+0xe4/0x290 [ 315.479655][ T9479] ? sysfs_file_kobj+0xe4/0x290 [ 315.484497][ T9479] ? __pfx_set_bank+0x10/0x10 [ 315.489156][ T9479] dev_attr_store+0x58/0x80 [ 315.493651][ T9479] ? __pfx_dev_attr_store+0x10/0x10 [ 315.498832][ T9479] sysfs_kf_write+0xf2/0x150 [ 315.503421][ T9479] kernfs_fop_write_iter+0x3e0/0x5f0 [ 315.508698][ T9479] ? __pfx_sysfs_kf_write+0x10/0x10 [ 315.513889][ T9479] vfs_write+0x6ac/0x1070 [ 315.518206][ T9479] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 315.524003][ T9479] ? __pfx_vfs_write+0x10/0x10 [ 315.528771][ T9479] ksys_write+0x12a/0x250 [ 315.533090][ T9479] ? __pfx_ksys_write+0x10/0x10 [ 315.537930][ T9479] ? rcu_is_watching+0x12/0xc0 [ 315.542681][ T9479] do_syscall_64+0x115/0x840 [ 315.547261][ T9479] ? clear_bhb_loop+0x40/0x90 [ 315.551930][ T9479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.557813][ T9479] RIP: 0033:0x7f2e5659ce59 [ 315.562216][ T9479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.581808][ T9479] RSP: 002b:00007f2e547ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.590228][ T9479] RAX: ffffffffffffffda RBX: 00007f2e56815fa0 RCX: 00007f2e5659ce59 [ 315.598181][ T9479] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000004 [ 315.606134][ T9479] RBP: 00007f2e56632d6f R08: 0000000000000000 R09: 0000000000000000 [ 315.614092][ T9479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.622042][ T9479] R13: 00007f2e56816038 R14: 00007f2e56815fa0 R15: 00007ffe0e00acd8 [ 315.630005][ T9479] [ 315.866403][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.877741][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.039565][ T9490] FAULT_INJECTION: forcing a failure. [ 317.039565][ T9490] name fail_futex, interval 1, probability 0, space 0, times 0 [ 317.195632][ T9490] CPU: 0 UID: 0 PID: 9490 Comm: syz.1.668 Tainted: G U L syzkaller #0 PREEMPT(full) [ 317.195659][ T9490] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 317.195665][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.195674][ T9490] Call Trace: [ 317.195679][ T9490] [ 317.195685][ T9490] dump_stack_lvl+0x100/0x190 [ 317.195715][ T9490] should_fail_ex.cold+0x5/0xa [ 317.195734][ T9490] get_futex_key+0x1d2/0x1510 [ 317.195759][ T9490] ? __pfx_get_futex_key+0x10/0x10 [ 317.195781][ T9490] ? find_held_lock+0x2b/0x80 [ 317.195804][ T9490] futex_wake+0xea/0x530 [ 317.195820][ T9490] ? __might_fault+0xc5/0x140 [ 317.195844][ T9490] ? __pfx_futex_wake+0x10/0x10 [ 317.195863][ T9490] ? _copy_from_user+0x59/0xd0 [ 317.195886][ T9490] ? post_copy_siginfo_from_user.isra.0+0x227/0x300 [ 317.195912][ T9490] do_futex+0x32b/0x350 [ 317.195927][ T9490] ? __pfx_do_futex+0x10/0x10 [ 317.195948][ T9490] __x64_sys_futex+0x34f/0x4d0 [ 317.195964][ T9490] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 317.195986][ T9490] ? __pfx___x64_sys_futex+0x10/0x10 [ 317.196004][ T9490] ? rcu_is_watching+0x12/0xc0 [ 317.196023][ T9490] do_syscall_64+0x115/0x840 [ 317.196042][ T9490] ? clear_bhb_loop+0x40/0x90 [ 317.196060][ T9490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.196075][ T9490] RIP: 0033:0x7fd71bb9ce59 [ 317.196088][ T9490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.196102][ T9490] RSP: 002b:00007fd71ca640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 317.196117][ T9490] RAX: ffffffffffffffda RBX: 00007fd71be15fa8 RCX: 00007fd71bb9ce59 [ 317.196126][ T9490] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd71be15fac [ 317.196135][ T9490] RBP: 00007fd71be15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 317.196144][ T9490] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 317.196153][ T9490] R13: 00007fd71be16038 R14: 00007ffe27b09f60 R15: 00007ffe27b0a048 [ 317.196172][ T9490] [ 318.003636][ T4949] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 321.111617][ T9548] bond0: no command found in slaves file - use +ifname or -ifname [ 321.523309][ T9560] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.683: bg 4: bad block bitmap checksum [ 321.588636][ T9560] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 321.673731][ T9560] EXT4-fs (sda1): This should not happen!! Data will be lost [ 321.673731][ T9560] [ 324.115913][ T9620] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.2.691: Error -117 reading block bitmap for 4 [ 324.734859][ T5632] Process accounting paused [ 324.845250][ T9631] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 324.962461][ T9631] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 325.019270][ T30] audit: type=1800 audit(4294967366.960:14): pid=9634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.693" name="version" dev="configfs" ino=30759 res=0 errno=0 [ 325.082339][ T9631] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 325.733089][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.746850][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.756055][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.763897][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.772322][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.076748][ T9672] FAULT_INJECTION: forcing a failure. [ 327.076748][ T9672] name failslab, interval 1, probability 0, space 0, times 0 [ 327.149672][ T9672] CPU: 0 UID: 0 PID: 9672 Comm: syz.2.699 Tainted: G U L syzkaller #0 PREEMPT(full) [ 327.149697][ T9672] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 327.149702][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.149711][ T9672] Call Trace: [ 327.149716][ T9672] [ 327.149721][ T9672] dump_stack_lvl+0x100/0x190 [ 327.149750][ T9672] should_fail_ex.cold+0x5/0xa [ 327.149768][ T9672] ? tomoyo_realpath_from_path+0xb6/0x690 [ 327.149788][ T9672] should_failslab+0xc2/0x120 [ 327.149805][ T9672] __kmalloc_noprof+0xe0/0x850 [ 327.149825][ T9672] ? kfree+0x1dd/0x6c0 [ 327.149846][ T9672] tomoyo_realpath_from_path+0xb6/0x690 [ 327.149870][ T9672] tomoyo_path_number_perm+0x23c/0x580 [ 327.149885][ T9672] ? tomoyo_path_number_perm+0x22e/0x580 [ 327.149903][ T9672] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 327.149938][ T9672] ? find_held_lock+0x2b/0x80 [ 327.149954][ T9672] ? __fget_files+0x215/0x3d0 [ 327.149969][ T9672] ? hook_file_ioctl_common+0x149/0x410 [ 327.149986][ T9672] ? __fget_files+0x215/0x3d0 [ 327.150004][ T9672] ? __fget_files+0x21f/0x3d0 [ 327.150023][ T9672] security_file_ioctl+0xd3/0x230 [ 327.150040][ T9672] __x64_sys_ioctl+0xb7/0x210 [ 327.150056][ T9672] do_syscall_64+0x115/0x840 [ 327.150074][ T9672] ? clear_bhb_loop+0x40/0x90 [ 327.150091][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.150117][ T9672] RIP: 0033:0x7f2e5659ce59 [ 327.150134][ T9672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.150147][ T9672] RSP: 002b:00007f2e547cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.150161][ T9672] RAX: ffffffffffffffda RBX: 00007f2e56816090 RCX: 00007f2e5659ce59 [ 327.150170][ T9672] RDX: 0000000000000038 RSI: 000000000000894b RDI: 0000000000000003 [ 327.150178][ T9672] RBP: 00007f2e547cd090 R08: 0000000000000000 R09: 0000000000000000 [ 327.150187][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.150195][ T9672] R13: 00007f2e56816128 R14: 00007f2e56816090 R15: 00007ffe0e00acd8 [ 327.150213][ T9672] [ 327.150219][ T9672] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.435162][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 327.947263][ T5633] Bluetooth: hci4: command tx timeout [ 328.658446][ T9652] Process accounting resumed [ 328.839545][ T9644] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.888468][ T9644] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.932324][ T9644] bridge_slave_0: entered allmulticast mode [ 328.986043][ T9644] bridge_slave_0: entered promiscuous mode [ 329.192269][ T9644] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.236048][ T9644] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.287983][ T9644] bridge_slave_1: entered allmulticast mode [ 329.333656][ T9644] bridge_slave_1: entered promiscuous mode [ 330.029185][ T5633] Bluetooth: hci4: command tx timeout [ 330.288577][ T9644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.342051][ T9644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.516265][ T9644] team0: Port device team_slave_0 added [ 330.568841][ T9644] team0: Port device team_slave_1 added [ 330.678003][ T9719] netlink: 350 bytes leftover after parsing attributes in process `syz.3.708'. [ 330.722150][ T9644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.761242][ T9644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.880838][ T9644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.959413][ T9644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.987203][ T9644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.076047][ T9644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.329534][ T9644] hsr_slave_0: entered promiscuous mode [ 331.363072][ T9644] hsr_slave_1: entered promiscuous mode [ 331.404331][ T9644] debugfs: 'hsr0' already exists in 'hsr' [ 331.429214][ T9644] Cannot create hsr debugfs directory [ 332.108085][ T5633] Bluetooth: hci4: command tx timeout [ 333.242213][ T9644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 333.384847][ T9644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.437113][ T9644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.526648][ T9644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.571382][ T9644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 333.661959][ T9644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.722475][ T9644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 333.809685][ T9644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.187958][ T5633] Bluetooth: hci4: command tx timeout [ 334.204516][ T9644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.371345][ T9769] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.718: bg 5: bad block bitmap checksum [ 334.391718][ T9764] bridge0: port 3(dummy0) entered blocking state [ 334.422137][ T9764] bridge0: port 3(dummy0) entered disabled state [ 334.441317][ T9769] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 334.459738][ T9764] dummy0: entered allmulticast mode [ 334.491544][ T9764] dummy0: entered promiscuous mode [ 334.517032][ T9764] bridge0: port 3(dummy0) entered blocking state [ 334.524191][ T9764] bridge0: port 3(dummy0) entered forwarding state [ 334.533640][ T9769] EXT4-fs (sda1): This should not happen!! Data will be lost [ 334.533640][ T9769] [ 334.645877][ T9769] FAULT_INJECTION: forcing a failure. [ 334.645877][ T9769] name failslab, interval 1, probability 0, space 0, times 0 [ 334.666801][ T9644] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.709392][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.716545][ T7728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.737688][ T9769] CPU: 0 UID: 0 PID: 9769 Comm: syz.3.718 Tainted: G U L syzkaller #0 PREEMPT(full) [ 334.737717][ T9769] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 334.737723][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.737732][ T9769] Call Trace: [ 334.737737][ T9769] [ 334.737743][ T9769] dump_stack_lvl+0x100/0x190 [ 334.737773][ T9769] should_fail_ex.cold+0x5/0xa [ 334.737794][ T9769] should_failslab+0xc2/0x120 [ 334.737811][ T9769] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 334.737833][ T9769] ? alloc_empty_file_noaccount+0x2b/0xd0 [ 334.737859][ T9769] alloc_empty_file_noaccount+0x2b/0xd0 [ 334.737882][ T9769] alloc_file_pseudo_noaccount+0x13a/0x230 [ 334.737905][ T9769] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 334.737930][ T9769] ? iput+0x3a/0x40 [ 334.737951][ T9769] bdev_file_open_by_dev+0x13a/0x210 [ 334.737975][ T9769] blkdev_bszset+0x170/0x240 [ 334.737997][ T9769] ? __pfx_blkdev_bszset+0x10/0x10 [ 334.738018][ T9769] ? find_held_lock+0x2b/0x80 [ 334.738035][ T9769] ? __fget_files+0x215/0x3d0 [ 334.738051][ T9769] ? hook_file_ioctl_common+0x149/0x410 [ 334.738071][ T9769] blkdev_ioctl+0x513/0x6f0 [ 334.738092][ T9769] ? __pfx_blkdev_ioctl+0x10/0x10 [ 334.738116][ T9769] ? __pfx_blkdev_ioctl+0x10/0x10 [ 334.738138][ T9769] __x64_sys_ioctl+0x18e/0x210 [ 334.738154][ T9769] do_syscall_64+0x115/0x840 [ 334.738174][ T9769] ? clear_bhb_loop+0x40/0x90 [ 334.738192][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.738207][ T9769] RIP: 0033:0x7f651f79ce59 [ 334.738220][ T9769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.738234][ T9769] RSP: 002b:00007f65206a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.738249][ T9769] RAX: ffffffffffffffda RBX: 00007f651fa15fa0 RCX: 00007f651f79ce59 [ 334.738259][ T9769] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000002 [ 334.738267][ T9769] RBP: 00007f651f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 334.738276][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.738285][ T9769] R13: 00007f651fa16038 R14: 00007f651fa15fa0 R15: 00007ffe5aaa52a8 [ 334.738303][ T9769] [ 335.400022][ T9644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.438496][ T9644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.855869][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.863007][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.892188][ T9644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.960550][ T9644] veth0_vlan: entered promiscuous mode [ 338.020874][ T9644] veth1_vlan: entered promiscuous mode [ 338.161111][ T9644] veth0_macvtap: entered promiscuous mode [ 338.214060][ T9644] veth1_macvtap: entered promiscuous mode [ 338.322258][ T9644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.424976][ T9644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.496746][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.537358][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.605242][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.653858][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.941140][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.995263][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.130818][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.165477][ T9779] Process accounting resumed [ 339.181726][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.427339][ T9831] random: crng reseeded on system resumption [ 339.757142][ T9833] hub 1-0:1.0: USB hub found [ 339.905715][ T9833] hub 1-0:1.0: 1 port detected [ 340.002506][ T30] audit: type=1800 audit(4294967381.940:15): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.727" name="lu_gp_id" dev="configfs" ino=32260 res=0 errno=0 [ 340.545766][ T9853] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 341.429471][ T9875] nbd: must specify at least one socket [ 341.487559][ T9869] bond0: invalid ARP target specified [ 342.273170][ T9885] netlink: 25 bytes leftover after parsing attributes in process `syz.4.737'. [ 343.625351][ T9884] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 347.229438][ T9887] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 348.130129][ T9924] random: crng reseeded on system resumption [ 348.844225][ T30] audit: type=1800 audit(4294967390.790:16): pid=9933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.746" name="lu_gp_id" dev="configfs" ino=32935 res=0 errno=0 [ 349.590528][ T9944] syz.2.748 uses obsolete (PF_INET,SOCK_PACKET) [ 350.336731][ T9955] FAULT_INJECTION: forcing a failure. [ 350.336731][ T9955] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.399962][ T9955] CPU: 0 UID: 0 PID: 9955 Comm: syz.2.751 Tainted: G U L syzkaller #0 PREEMPT(full) [ 350.399989][ T9955] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 350.399994][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.400003][ T9955] Call Trace: [ 350.400009][ T9955] [ 350.400014][ T9955] dump_stack_lvl+0x100/0x190 [ 350.400042][ T9955] should_fail_ex.cold+0x5/0xa [ 350.400058][ T9955] ? prepare_alloc_pages+0x16d/0x5f0 [ 350.400078][ T9955] should_fail_alloc_page+0xeb/0x140 [ 350.400096][ T9955] prepare_alloc_pages+0x1f0/0x5f0 [ 350.400116][ T9955] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 350.400139][ T9955] ? vma_set_page_prot+0xb1/0x120 [ 350.400157][ T9955] ? __mmap_region+0xc85/0x2dd0 [ 350.400181][ T9955] ? __pfx___mmap_region+0x10/0x10 [ 350.400202][ T9955] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.400228][ T9955] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 350.400255][ T9955] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 350.400275][ T9955] ? policy_nodemask+0xed/0x4f0 [ 350.400292][ T9955] alloc_pages_mpol+0x1fb/0x540 [ 350.400309][ T9955] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 350.400332][ T9955] alloc_pages_noprof+0x1a/0x160 [ 350.400351][ T9955] __pmd_alloc+0x3b/0x950 [ 350.400370][ T9955] __handle_mm_fault+0xa9c/0x2a00 [ 350.400393][ T9955] ? mt_find+0x45e/0x8e0 [ 350.400414][ T9955] ? __pfx___handle_mm_fault+0x10/0x10 [ 350.400433][ T9955] ? __pfx_mt_find+0x10/0x10 [ 350.400467][ T9955] handle_mm_fault+0x37b/0xa30 [ 350.400490][ T9955] __get_user_pages+0x1178/0x32a0 [ 350.400515][ T9955] ? __pfx___get_user_pages+0x10/0x10 [ 350.400537][ T9955] populate_vma_page_range+0x267/0x3f0 [ 350.400556][ T9955] ? __pfx_populate_vma_page_range+0x10/0x10 [ 350.400573][ T9955] ? __pfx_find_vma_intersection+0x10/0x10 [ 350.400590][ T9955] ? do_mmap+0x93f/0x12f0 [ 350.400608][ T9955] __mm_populate+0x107/0x3a0 [ 350.400627][ T9955] ? __pfx___mm_populate+0x10/0x10 [ 350.400646][ T9955] ? up_write+0x28c/0x4f0 [ 350.400662][ T9955] vm_mmap_pgoff+0x37f/0x470 [ 350.400681][ T9955] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 350.400700][ T9955] ? do_futex+0x192/0x350 [ 350.400714][ T9955] ? __pfx_do_futex+0x10/0x10 [ 350.400732][ T9955] ksys_mmap_pgoff+0xe4/0x610 [ 350.400749][ T9955] ? __x64_sys_futex+0x358/0x4d0 [ 350.400763][ T9955] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 350.400779][ T9955] ? xfd_validate_state+0x129/0x190 [ 350.400792][ T9955] ? ksys_write+0x1ac/0x250 [ 350.400812][ T9955] __x64_sys_mmap+0x125/0x190 [ 350.400828][ T9955] do_syscall_64+0x115/0x840 [ 350.400847][ T9955] ? clear_bhb_loop+0x40/0x90 [ 350.400864][ T9955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.400878][ T9955] RIP: 0033:0x7f2e5659ce59 [ 350.400891][ T9955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.400910][ T9955] RSP: 002b:00007f2e547ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 350.400924][ T9955] RAX: ffffffffffffffda RBX: 00007f2e56815fa0 RCX: 00007f2e5659ce59 [ 350.400934][ T9955] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 350.400942][ T9955] RBP: 00007f2e56632d6f R08: ffffffffffffffff R09: 0000000000000000 [ 350.400951][ T9955] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 350.400959][ T9955] R13: 00007f2e56816038 R14: 00007f2e56815fa0 R15: 00007ffe0e00acd8 [ 350.400978][ T9955] [ 351.040219][ T9970] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 351.053765][ T9970] EXT4-fs (sda1): This should not happen!! Data will be lost [ 351.053765][ T9970] [ 351.253498][ T30] audit: type=1800 audit(4294967393.200:17): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.755" name="lu_gp_id" dev="configfs" ino=33118 res=0 errno=0 [ 351.512685][ T9982] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 351.564851][ T9982] EXT4-fs (sda1): This should not happen!! Data will be lost [ 351.564851][ T9982] [ 351.826869][ T9993] netlink: 338 bytes leftover after parsing attributes in process `syz.1.758'. [ 351.888860][ T9993] netlink: 338 bytes leftover after parsing attributes in process `syz.1.758'. [ 351.967553][ T9996] netlink: 306 bytes leftover after parsing attributes in process `syz.1.758'. [ 351.998648][ T9993] netlink: 338 bytes leftover after parsing attributes in process `syz.1.758'. [ 352.013539][ T9984] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 352.032396][ T9993] netlink: 338 bytes leftover after parsing attributes in process `syz.1.758'. [ 352.070879][ T9993] netlink: 338 bytes leftover after parsing attributes in process `syz.1.758'. [ 352.104378][ T9993] netlink: 338 bytes leftover after parsing attributes in process `syz.1.758'. [ 352.148268][ T9993] netlink: 338 bytes leftover after parsing attributes in process `syz.1.758'. [ 352.195894][ T9993] netlink: 338 bytes leftover after parsing attributes in process `syz.1.758'. [ 352.949788][T10023] openvswitch: netlink: IP tunnel TTL not specified. [ 353.097024][T10024] netlink: Invalid conntrack timeout [ 353.421009][ T9998] Process accounting resumed [ 357.827024][T10088] NFSD: Failed to start, no listeners configured. [ 357.933902][ T30] audit: type=1800 audit(4294967399.860:18): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.780" name="lu_gp_id" dev="configfs" ino=33564 res=0 errno=0 [ 358.199544][T10105] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 358.261631][T10105] EXT4-fs (sda1): This should not happen!! Data will be lost [ 358.261631][T10105] [ 358.724853][T10118] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 1962 with max blocks 1 with error 117 [ 358.783432][T10118] EXT4-fs (sda1): This should not happen!! Data will be lost [ 358.783432][T10118] [ 358.834386][T10118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.784'. [ 358.965778][T10118] ipvlan1: entered promiscuous mode [ 358.994483][T10118] ipvlan1: entered allmulticast mode [ 359.025690][T10118] veth0_vlan: entered allmulticast mode [ 359.038886][ T7722] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 359.103188][ T7722] EXT4-fs (sda1): This should not happen!! Data will be lost [ 359.103188][ T7722] [ 359.252826][ T7722] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 1967 with max blocks 1 with error 117 [ 359.313787][ T7722] EXT4-fs (sda1): This should not happen!! Data will be lost [ 359.313787][ T7722] [ 364.483117][ T5633] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 364.491692][ T5633] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 365.464089][T10207] FAULT_INJECTION: forcing a failure. [ 365.464089][T10207] name fail_futex, interval 1, probability 0, space 0, times 0 [ 365.690470][T10207] CPU: 0 UID: 0 PID: 10207 Comm: syz.1.799 Tainted: G U L syzkaller #0 PREEMPT(full) [ 365.690496][T10207] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 365.690502][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.690511][T10207] Call Trace: [ 365.690580][T10207] [ 365.690586][T10207] dump_stack_lvl+0x100/0x190 [ 365.690644][T10207] should_fail_ex.cold+0x5/0xa [ 365.690676][T10207] get_futex_key+0x1d2/0x1510 [ 365.690717][T10207] ? __pfx_get_futex_key+0x10/0x10 [ 365.690741][T10207] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 365.690774][T10207] ? __up_read+0x2c1/0x6e0 [ 365.690801][T10207] futex_wake+0xea/0x530 [ 365.690820][T10207] ? __pfx_futex_wake+0x10/0x10 [ 365.690836][T10207] ? rcu_is_watching+0x12/0xc0 [ 365.690852][T10207] ? irqentry_exit+0x24d/0x970 [ 365.690962][T10207] ? lockdep_hardirqs_on+0x78/0x100 [ 365.690980][T10207] ? irqentry_exit+0x24d/0x970 [ 365.691001][T10207] do_futex+0x32b/0x350 [ 365.691016][T10207] ? __pfx_do_futex+0x10/0x10 [ 365.691031][T10207] ? __might_fault+0x111/0x140 [ 365.691054][T10207] mm_release+0x24a/0x2f0 [ 365.691079][T10207] do_exit+0x707/0x2af0 [ 365.691105][T10207] ? __pfx_do_exit+0x10/0x10 [ 365.691124][T10207] ? do_raw_spin_lock+0x128/0x260 [ 365.691139][T10207] ? find_held_lock+0x2b/0x80 [ 365.691155][T10207] ? get_signal+0x7e5/0x2210 [ 365.691173][T10207] do_group_exit+0xd5/0x2a0 [ 365.691194][T10207] get_signal+0x20ff/0x2210 [ 365.691216][T10207] ? __pfx_get_signal+0x10/0x10 [ 365.691234][T10207] ? do_futex+0x192/0x350 [ 365.691249][T10207] arch_do_signal_or_restart+0x91/0x7a0 [ 365.691280][T10207] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 365.691312][T10207] ? rcu_is_watching+0x12/0xc0 [ 365.691332][T10207] exit_to_user_mode_loop+0x98/0x670 [ 365.691357][T10207] ? rcu_is_watching+0x12/0xc0 [ 365.691374][T10207] do_syscall_64+0x652/0x840 [ 365.691392][T10207] ? clear_bhb_loop+0x40/0x90 [ 365.691417][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.691431][T10207] RIP: 0033:0x7fd71bb9ce59 [ 365.691444][T10207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.691458][T10207] RSP: 002b:00007fd71ca430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 365.691472][T10207] RAX: fffffffffffffe00 RBX: 00007fd71be16098 RCX: 00007fd71bb9ce59 [ 365.691481][T10207] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd71be16098 [ 365.691490][T10207] RBP: 00007fd71be16090 R08: 0000000000000000 R09: 0000000000000000 [ 365.691498][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.691506][T10207] R13: 00007fd71be16128 R14: 00007ffe27b09f60 R15: 00007ffe27b0a048 [ 365.691524][T10207] [ 366.690277][ T5731] Process accounting resumed [ 366.766571][T10225] FAULT_INJECTION: forcing a failure. [ 366.766571][T10225] name failslab, interval 1, probability 0, space 0, times 0 [ 366.829245][T10225] CPU: 0 UID: 0 PID: 10225 Comm: syz.4.801 Tainted: G U L syzkaller #0 PREEMPT(full) [ 366.829274][T10225] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 366.829281][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 366.829290][T10225] Call Trace: [ 366.829295][T10225] [ 366.829301][T10225] dump_stack_lvl+0x100/0x190 [ 366.829334][T10225] should_fail_ex.cold+0x5/0xa [ 366.829354][T10225] ? trace_parser_get_init+0x30/0xc0 [ 366.829406][T10225] should_failslab+0xc2/0x120 [ 366.829429][T10225] __kmalloc_noprof+0xe0/0x850 [ 366.829457][T10225] trace_parser_get_init+0x30/0xc0 [ 366.829479][T10225] trace_pid_write+0xf3/0x460 [ 366.829499][T10225] ? __pfx_trace_pid_write+0x10/0x10 [ 366.829530][T10225] event_pid_write.isra.0+0x1e4/0x7d0 [ 366.829552][T10225] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 366.829578][T10225] vfs_write+0x2aa/0x1070 [ 366.829606][T10225] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 366.829628][T10225] ? __pfx_vfs_write+0x10/0x10 [ 366.829644][T10225] ? __fget_files+0x215/0x3d0 [ 366.829670][T10225] ? __fget_files+0x21f/0x3d0 [ 366.829691][T10225] ksys_write+0x12a/0x250 [ 366.829707][T10225] ? __pfx_ksys_write+0x10/0x10 [ 366.829726][T10225] ? rcu_is_watching+0x12/0xc0 [ 366.829745][T10225] do_syscall_64+0x115/0x840 [ 366.829765][T10225] ? clear_bhb_loop+0x40/0x90 [ 366.829783][T10225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.829798][T10225] RIP: 0033:0x7f83fb39ce59 [ 366.829812][T10225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.829826][T10225] RSP: 002b:00007f83fc27d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 366.829840][T10225] RAX: ffffffffffffffda RBX: 00007f83fb615fa0 RCX: 00007f83fb39ce59 [ 366.829850][T10225] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 366.829859][T10225] RBP: 00007f83fb432d6f R08: 0000000000000000 R09: 0000000000000000 [ 366.829867][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.829876][T10225] R13: 00007f83fb616038 R14: 00007f83fb615fa0 R15: 00007ffcf24c9238 [ 366.829895][T10225] [ 368.719966][T10204] Process accounting resumed [ 371.034502][T10227] Process accounting paused [ 372.187248][ T30] audit: type=1800 audit(4294967414.130:19): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.809" name="lu_gp_id" dev="configfs" ino=34443 res=0 errno=0 [ 373.609945][T10290] FAULT_INJECTION: forcing a failure. [ 373.609945][T10290] name failslab, interval 1, probability 0, space 0, times 0 [ 373.664472][T10290] CPU: 0 UID: 0 PID: 10290 Comm: syz.2.812 Tainted: G U L syzkaller #0 PREEMPT(full) [ 373.664499][T10290] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 373.664505][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.664514][T10290] Call Trace: [ 373.664519][T10290] [ 373.664525][T10290] dump_stack_lvl+0x100/0x190 [ 373.664555][T10290] should_fail_ex.cold+0x5/0xa [ 373.664575][T10290] should_failslab+0xc2/0x120 [ 373.664594][T10290] __kmalloc_cache_noprof+0x7a/0x6f0 [ 373.664614][T10290] ? trace_pid_list_alloc+0x232/0x480 [ 373.664633][T10290] ? lockdep_init_map_type+0x5c/0x250 [ 373.664659][T10290] trace_pid_list_alloc+0x232/0x480 [ 373.664681][T10290] trace_pid_write+0x110/0x460 [ 373.664701][T10290] ? __pfx_trace_pid_write+0x10/0x10 [ 373.664732][T10290] event_pid_write.isra.0+0x1e4/0x7d0 [ 373.664754][T10290] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 373.664784][T10290] vfs_write+0x2aa/0x1070 [ 373.664801][T10290] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 373.664824][T10290] ? __pfx_vfs_write+0x10/0x10 [ 373.664840][T10290] ? __fget_files+0x215/0x3d0 [ 373.664861][T10290] ? __fget_files+0x21f/0x3d0 [ 373.664883][T10290] ksys_write+0x12a/0x250 [ 373.664899][T10290] ? __pfx_ksys_write+0x10/0x10 [ 373.664917][T10290] ? rcu_is_watching+0x12/0xc0 [ 373.664952][T10290] do_syscall_64+0x115/0x840 [ 373.664974][T10290] ? clear_bhb_loop+0x40/0x90 [ 373.664993][T10290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.665009][T10290] RIP: 0033:0x7f2e5659ce59 [ 373.665022][T10290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.665036][T10290] RSP: 002b:00007f2e547ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.665050][T10290] RAX: ffffffffffffffda RBX: 00007f2e56815fa0 RCX: 00007f2e5659ce59 [ 373.665060][T10290] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 373.665069][T10290] RBP: 00007f2e56632d6f R08: 0000000000000000 R09: 0000000000000000 [ 373.665077][T10290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.665085][T10290] R13: 00007f2e56816038 R14: 00007f2e56815fa0 R15: 00007ffe0e00acd8 [ 373.665105][T10290] [ 375.652664][T10307] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.3.816: Error -117 reading block bitmap for 5 [ 375.778242][T10309] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [88] [ 375.977503][T10317] ima: policy update failed [ 376.022883][ T30] audit: type=1802 audit(4294967417.970:20): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.819" res=0 errno=0 [ 376.425568][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 376.945907][T10342] FAULT_INJECTION: forcing a failure. [ 376.945907][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 377.151482][T10342] CPU: 0 UID: 0 PID: 10342 Comm: syz.2.820 Tainted: G U L syzkaller #0 PREEMPT(full) [ 377.151510][T10342] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 377.151516][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.151525][T10342] Call Trace: [ 377.151531][T10342] [ 377.151537][T10342] dump_stack_lvl+0x100/0x190 [ 377.151566][T10342] should_fail_ex.cold+0x5/0xa [ 377.151586][T10342] should_failslab+0xc2/0x120 [ 377.151604][T10342] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 377.151627][T10342] ? alloc_inode+0x68/0x250 [ 377.151648][T10342] ? simple_start_creating+0xb0/0x110 [ 377.151669][T10342] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 377.151798][T10342] alloc_inode+0x68/0x250 [ 377.151821][T10342] new_inode+0x22/0x1c0 [ 377.151851][T10342] __debugfs_create_file+0x105/0x4f0 [ 377.151869][T10342] debugfs_create_file_full+0x41/0x60 [ 377.151887][T10342] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 377.151944][T10342] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 377.151958][T10342] ? ida_alloc_range+0x70d/0x830 [ 377.152027][T10342] ? lockdep_init_map_type+0x5c/0x250 [ 377.152054][T10342] preinit_net.part.0+0x252/0x920 [ 377.152101][T10342] copy_net_ns+0x339/0x7c0 [ 377.152122][T10342] create_new_namespaces+0x3ea/0xac0 [ 377.152146][T10342] unshare_nsproxy_namespaces+0xf2/0x220 [ 377.152165][T10342] ksys_unshare+0x438/0xab0 [ 377.152187][T10342] ? __pfx_ksys_unshare+0x10/0x10 [ 377.152206][T10342] ? xfd_validate_state+0x129/0x190 [ 377.152225][T10342] ? ksys_write+0x1ac/0x250 [ 377.152247][T10342] __x64_sys_unshare+0x31/0x40 [ 377.152267][T10342] do_syscall_64+0x115/0x840 [ 377.152287][T10342] ? clear_bhb_loop+0x40/0x90 [ 377.152305][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.152321][T10342] RIP: 0033:0x7f2e5659ce59 [ 377.152334][T10342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.152348][T10342] RSP: 002b:00007f2e547ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 377.152362][T10342] RAX: ffffffffffffffda RBX: 00007f2e56816180 RCX: 00007f2e5659ce59 [ 377.152372][T10342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 377.152381][T10342] RBP: 00007f2e56632d6f R08: 0000000000000000 R09: 0000000000000000 [ 377.152390][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.152399][T10342] R13: 00007f2e56816218 R14: 00007f2e56816180 R15: 00007ffe0e00acd8 [ 377.152419][T10342] [ 377.702783][T10342] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88807f235000' [ 378.082557][T10354] random: crng reseeded on system resumption [ 378.519872][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.526265][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.690166][T10403] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 382.779961][T10403] bond0: option packets_per_slave: allowed values 0 - 65535 [ 383.647479][ T30] audit: type=1326 audit(4294967425.589:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.3.837" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f651f79ce59 code=0x0 [ 386.369815][T10452] vhci_hcd vhci_hcd.1: invalid port number 47 [ 386.446523][T10452] vhci_hcd vhci_hcd.1: default hub control req: a073 v7379 i002f l29285 [ 386.845026][ T30] audit: type=1800 audit(4294967428.789:22): pid=10463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.848" name="lu_gp_id" dev="configfs" ino=35678 res=0 errno=0 [ 388.256931][T10476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.852'. [ 388.390930][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 388.631917][T10481] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.852: iget: checksum invalid [ 388.892281][T10481] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 389.165537][T10481] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.852: iget: checksum invalid [ 389.410575][T10481] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 389.455964][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.858'. [ 389.574771][T10481] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.852: iget: checksum invalid [ 389.761092][T10481] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 389.890678][T10481] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.852: iget: checksum invalid [ 390.074864][T10481] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 390.170693][T10481] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 390.260218][T10481] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 390.665038][T10506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 390.740112][T10506] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 391.146769][T10506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.187305][T10506] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 391.292343][T10506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.337441][T10506] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 391.423596][T10506] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 391.464418][T10506] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 391.556678][T10506] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 392.668023][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 393.147823][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 393.191274][T10564] FAULT_INJECTION: forcing a failure. [ 393.191274][T10564] name failslab, interval 1, probability 0, space 0, times 0 [ 393.255143][T10564] CPU: 0 UID: 0 PID: 10564 Comm: syz.3.871 Tainted: G U L syzkaller #0 PREEMPT(full) [ 393.255171][T10564] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 393.255176][T10564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 393.255186][T10564] Call Trace: [ 393.255191][T10564] [ 393.255198][T10564] dump_stack_lvl+0x100/0x190 [ 393.255228][T10564] should_fail_ex.cold+0x5/0xa [ 393.255249][T10564] should_failslab+0xc2/0x120 [ 393.255268][T10564] __kmalloc_cache_noprof+0x7a/0x6f0 [ 393.255288][T10564] ? trace_pid_list_alloc+0x232/0x480 [ 393.255314][T10564] trace_pid_list_alloc+0x232/0x480 [ 393.255336][T10564] trace_pid_write+0x110/0x460 [ 393.255356][T10564] ? __pfx_trace_pid_write+0x10/0x10 [ 393.255387][T10564] event_pid_write.isra.0+0x1e4/0x7d0 [ 393.255409][T10564] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 393.255435][T10564] vfs_write+0x2aa/0x1070 [ 393.255452][T10564] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 393.255475][T10564] ? __pfx_vfs_write+0x10/0x10 [ 393.255491][T10564] ? __fget_files+0x215/0x3d0 [ 393.255512][T10564] ? __fget_files+0x21f/0x3d0 [ 393.255534][T10564] ksys_write+0x12a/0x250 [ 393.255550][T10564] ? __pfx_ksys_write+0x10/0x10 [ 393.255568][T10564] ? rcu_is_watching+0x12/0xc0 [ 393.255588][T10564] do_syscall_64+0x115/0x840 [ 393.255608][T10564] ? clear_bhb_loop+0x40/0x90 [ 393.255627][T10564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.255642][T10564] RIP: 0033:0x7f651f79ce59 [ 393.255655][T10564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.255669][T10564] RSP: 002b:00007f65206a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 393.255684][T10564] RAX: ffffffffffffffda RBX: 00007f651fa15fa0 RCX: 00007f651f79ce59 [ 393.255694][T10564] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 393.255702][T10564] RBP: 00007f651f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 393.255711][T10564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.255720][T10564] R13: 00007f651fa16038 R14: 00007f651fa15fa0 R15: 00007ffe5aaa52a8 [ 393.255740][T10564] [ 393.844649][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 393.850796][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 394.123988][ T30] audit: type=1800 audit(4294967435.999:23): pid=10570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.873" name="lu_gp_id" dev="configfs" ino=36310 res=0 errno=0 [ 394.194280][ T4949] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 394.748388][ T4949] Bluetooth: hci2: command 0x0406 tx timeout [ 394.808435][T10589] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 394.941449][T10590] netlink: Conntrack attr has 4 unknown bytes [ 395.734659][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 395.868105][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 395.875517][ T4949] Bluetooth: hci4: command 0x0c1a tx timeout [ 396.466869][ T30] audit: type=1326 audit(4294967438.409:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10614 comm="syz.2.882" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e5659ce59 code=0x0 [ 397.430060][T10636] blktrace: Concurrent blktraces are not allowed on sda1 [ 397.779685][T10643] warning: `syz.1.887' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 397.948193][ T4949] Bluetooth: hci4: command 0x0c1a tx timeout [ 398.022265][T10651] FAULT_INJECTION: forcing a failure. [ 398.022265][T10651] name failslab, interval 1, probability 0, space 0, times 0 [ 398.195454][T10651] CPU: 0 UID: 0 PID: 10651 Comm: syz.1.887 Tainted: G U L syzkaller #0 PREEMPT(full) [ 398.195482][T10651] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 398.195488][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.195497][T10651] Call Trace: [ 398.195502][T10651] [ 398.195508][T10651] dump_stack_lvl+0x100/0x190 [ 398.195539][T10651] should_fail_ex.cold+0x5/0xa [ 398.195559][T10651] should_failslab+0xc2/0x120 [ 398.195577][T10651] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 398.195604][T10651] ? __d_alloc+0x34/0xa40 [ 398.195627][T10651] __d_alloc+0x34/0xa40 [ 398.195647][T10651] d_alloc+0x4a/0x1e0 [ 398.195670][T10651] lookup_one_qstr_excl+0x171/0x250 [ 398.195701][T10651] start_dirop+0x59/0xb0 [ 398.195719][T10651] simple_start_creating+0xf9/0x110 [ 398.195738][T10651] ? __pfx_simple_start_creating+0x10/0x10 [ 398.195755][T10651] ? mntput+0x70/0xa0 [ 398.195771][T10651] ? simple_pin_fs+0xa3/0x190 [ 398.195787][T10651] debugfs_start_creating.part.0+0x82/0x170 [ 398.195803][T10651] __debugfs_create_file+0xb3/0x4f0 [ 398.195821][T10651] debugfs_create_file_full+0x41/0x60 [ 398.195838][T10651] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 398.195854][T10651] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 398.195885][T10651] ? lockdep_init_map_type+0x5c/0x250 [ 398.195911][T10651] preinit_net.part.0+0x43b/0x920 [ 398.195929][T10651] copy_net_ns+0x339/0x7c0 [ 398.195948][T10651] create_new_namespaces+0x3ea/0xac0 [ 398.195971][T10651] unshare_nsproxy_namespaces+0xf2/0x220 [ 398.195991][T10651] ksys_unshare+0x438/0xab0 [ 398.196012][T10651] ? __pfx_ksys_unshare+0x10/0x10 [ 398.196031][T10651] ? xfd_validate_state+0x129/0x190 [ 398.196045][T10651] ? ksys_write+0x1ac/0x250 [ 398.196067][T10651] __x64_sys_unshare+0x31/0x40 [ 398.196086][T10651] do_syscall_64+0x115/0x840 [ 398.196107][T10651] ? clear_bhb_loop+0x40/0x90 [ 398.196125][T10651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.196140][T10651] RIP: 0033:0x7fd71bb9ce59 [ 398.196159][T10651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.196175][T10651] RSP: 002b:00007fd71ca22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 398.196189][T10651] RAX: ffffffffffffffda RBX: 00007fd71be16180 RCX: 00007fd71bb9ce59 [ 398.196200][T10651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 398.196209][T10651] RBP: 00007fd71bc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 398.196219][T10651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.196227][T10651] R13: 00007fd71be16218 R14: 00007fd71be16180 R15: 00007ffe27b0a048 [ 398.196247][T10651] [ 398.782534][T10593] Process accounting paused [ 399.871495][T10686] capability: warning: `syz.4.895' uses 32-bit capabilities (legacy support in use) [ 400.563883][T10711] FAULT_INJECTION: forcing a failure. [ 400.563883][T10711] name failslab, interval 1, probability 0, space 0, times 0 [ 400.591042][T10711] CPU: 0 UID: 0 PID: 10711 Comm: syz.4.901 Tainted: G U L syzkaller #0 PREEMPT(full) [ 400.591072][T10711] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 400.591077][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.591087][T10711] Call Trace: [ 400.591092][T10711] [ 400.591098][T10711] dump_stack_lvl+0x100/0x190 [ 400.591128][T10711] should_fail_ex.cold+0x5/0xa [ 400.591147][T10711] should_failslab+0xc2/0x120 [ 400.591165][T10711] __kmalloc_cache_noprof+0x7a/0x6f0 [ 400.591186][T10711] ? trace_pid_list_alloc+0x232/0x480 [ 400.591209][T10711] trace_pid_list_alloc+0x232/0x480 [ 400.591238][T10711] trace_pid_write+0x110/0x460 [ 400.591259][T10711] ? __pfx_trace_pid_write+0x10/0x10 [ 400.591291][T10711] event_pid_write.isra.0+0x1e4/0x7d0 [ 400.591313][T10711] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 400.591340][T10711] vfs_write+0x2aa/0x1070 [ 400.591360][T10711] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 400.591383][T10711] ? __pfx_vfs_write+0x10/0x10 [ 400.591399][T10711] ? __fget_files+0x215/0x3d0 [ 400.591420][T10711] ? __fget_files+0x21f/0x3d0 [ 400.591442][T10711] ksys_write+0x12a/0x250 [ 400.591458][T10711] ? __pfx_ksys_write+0x10/0x10 [ 400.591476][T10711] ? rcu_is_watching+0x12/0xc0 [ 400.591495][T10711] do_syscall_64+0x115/0x840 [ 400.591516][T10711] ? clear_bhb_loop+0x40/0x90 [ 400.591534][T10711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.591549][T10711] RIP: 0033:0x7f83fb39ce59 [ 400.591562][T10711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.591576][T10711] RSP: 002b:00007f83fc27d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 400.591591][T10711] RAX: ffffffffffffffda RBX: 00007f83fb615fa0 RCX: 00007f83fb39ce59 [ 400.591600][T10711] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 400.591609][T10711] RBP: 00007f83fb432d6f R08: 0000000000000000 R09: 0000000000000000 [ 400.591618][T10711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.591626][T10711] R13: 00007f83fb616038 R14: 00007f83fb615fa0 R15: 00007ffcf24c9238 [ 400.591647][T10711] [ 401.284822][T10696] Process accounting resumed [ 401.455431][ T4949] Bluetooth: hci3: unexpected event 0x09 length: 435 > 3 [ 401.456729][T10720] HfR: entered promiscuous mode [ 401.897284][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 402.184000][T10720] HfR: left promiscuous mode [ 402.843154][T10745] random: crng reseeded on system resumption [ 403.087483][T10747] ovs_: entered promiscuous mode [ 403.343482][T10748] HfR: entered promiscuous mode [ 403.487576][T10751] FAULT_INJECTION: forcing a failure. [ 403.487576][T10751] name failslab, interval 1, probability 0, space 0, times 0 [ 403.618514][T10751] CPU: 0 UID: 0 PID: 10751 Comm: syz.2.907 Tainted: G U L syzkaller #0 PREEMPT(full) [ 403.618542][T10751] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 403.618548][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.618559][T10751] Call Trace: [ 403.618564][T10751] [ 403.618570][T10751] dump_stack_lvl+0x100/0x190 [ 403.618601][T10751] should_fail_ex.cold+0x5/0xa [ 403.618620][T10751] should_failslab+0xc2/0x120 [ 403.618639][T10751] __kmalloc_cache_noprof+0x7a/0x6f0 [ 403.618659][T10751] ? copy_mount_options+0x55/0x190 [ 403.618685][T10751] copy_mount_options+0x55/0x190 [ 403.618709][T10751] __x64_sys_mount+0x1ab/0x310 [ 403.618730][T10751] ? __pfx___x64_sys_mount+0x10/0x10 [ 403.618751][T10751] ? rcu_is_watching+0x12/0xc0 [ 403.618770][T10751] do_syscall_64+0x115/0x840 [ 403.618790][T10751] ? clear_bhb_loop+0x40/0x90 [ 403.618810][T10751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.618825][T10751] RIP: 0033:0x7f2e5659ce59 [ 403.618838][T10751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.618852][T10751] RSP: 002b:00007f2e547ac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 403.618866][T10751] RAX: ffffffffffffffda RBX: 00007f2e56816180 RCX: 00007f2e5659ce59 [ 403.618876][T10751] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000200000000080 [ 403.618885][T10751] RBP: 00007f2e56632d6f R08: 00002000000002c0 R09: 0000000000000000 [ 403.618894][T10751] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 403.618903][T10751] R13: 00007f2e56816218 R14: 00007f2e56816180 R15: 00007ffe0e00acd8 [ 403.618923][T10751] [ 408.304155][T10789] misc userio: The device must be registered before sending interrupts [ 408.505295][T10789] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿd, dev 2f00000000 [ 411.895056][ T30] audit: type=1800 audit(4294967453.839:25): pid=10822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.923" name="lu_gp_id" dev="configfs" ino=37762 res=0 errno=0 [ 413.619469][ T4949] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 415.708221][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 416.012525][T10861] ima: policy update failed [ 416.158341][ T30] audit: type=1802 audit(4294967458.099:26): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.932" res=0 errno=0 [ 416.496573][T10881] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 416.845132][ T30] audit: type=1800 audit(4294967458.789:27): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.935" name="lu_gp_id" dev="configfs" ino=38097 res=0 errno=0 [ 417.790643][ T4949] Bluetooth: hci3: command 0x0406 tx timeout [ 418.369016][ T30] audit: type=1800 audit(4294967460.309:28): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.941" name="members" dev="configfs" ino=38347 res=0 errno=0 [ 430.829901][T11003] Process accounting resumed [ 431.612219][T11028] Process accounting paused [ 439.041003][T11142] FAULT_INJECTION: forcing a failure. [ 439.041003][T11142] name failslab, interval 1, probability 0, space 0, times 0 [ 439.101856][T11142] CPU: 0 UID: 0 PID: 11142 Comm: syz.1.983 Tainted: G U L syzkaller #0 PREEMPT(full) [ 439.101885][T11142] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 439.101890][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 439.101900][T11142] Call Trace: [ 439.101911][T11142] [ 439.101918][T11142] dump_stack_lvl+0x100/0x190 [ 439.101950][T11142] should_fail_ex.cold+0x5/0xa [ 439.101969][T11142] ? trace_parser_get_init+0x30/0xc0 [ 439.101990][T11142] should_failslab+0xc2/0x120 [ 439.102008][T11142] __kmalloc_noprof+0xe0/0x850 [ 439.102036][T11142] trace_parser_get_init+0x30/0xc0 [ 439.102058][T11142] trace_pid_write+0xf3/0x460 [ 439.102078][T11142] ? __pfx_trace_pid_write+0x10/0x10 [ 439.102109][T11142] event_pid_write.isra.0+0x1e4/0x7d0 [ 439.102131][T11142] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 439.102158][T11142] vfs_write+0x2aa/0x1070 [ 439.102175][T11142] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 439.102198][T11142] ? __pfx_vfs_write+0x10/0x10 [ 439.102214][T11142] ? __fget_files+0x215/0x3d0 [ 439.102235][T11142] ? __fget_files+0x21f/0x3d0 [ 439.102257][T11142] ksys_write+0x12a/0x250 [ 439.102273][T11142] ? __pfx_ksys_write+0x10/0x10 [ 439.102291][T11142] ? rcu_is_watching+0x12/0xc0 [ 439.102310][T11142] do_syscall_64+0x115/0x840 [ 439.102330][T11142] ? clear_bhb_loop+0x40/0x90 [ 439.102349][T11142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.102364][T11142] RIP: 0033:0x7fd71bb9ce59 [ 439.102378][T11142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.102392][T11142] RSP: 002b:00007fd71ca64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.102409][T11142] RAX: ffffffffffffffda RBX: 00007fd71be15fa0 RCX: 00007fd71bb9ce59 [ 439.102419][T11142] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 439.102428][T11142] RBP: 00007fd71bc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 439.102437][T11142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.102446][T11142] R13: 00007fd71be16038 R14: 00007fd71be15fa0 R15: 00007ffe27b0a048 [ 439.102467][T11142] [ 439.522182][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 439.964282][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.970710][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.327248][ T30] audit: type=1800 audit(4294968505.256:29): pid=11165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.988" name="lu_gp_id" dev="configfs" ino=39844 res=0 errno=0 [ 441.154478][T11197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.993'. [ 441.206167][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.993'. [ 441.991583][ T30] audit: type=1800 audit(4294968506.915:30): pid=11222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.999" name="lu_gp_id" dev="configfs" ino=40074 res=0 errno=0 [ 443.663770][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 443.860271][T11261] FAULT_INJECTION: forcing a failure. [ 443.860271][T11261] name fail_futex, interval 1, probability 0, space 0, times 0 [ 444.015095][T11261] CPU: 0 UID: 0 PID: 11261 Comm: syz.1.1006 Tainted: G U L syzkaller #0 PREEMPT(full) [ 444.015123][T11261] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 444.015129][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.015138][T11261] Call Trace: [ 444.015143][T11261] [ 444.015149][T11261] dump_stack_lvl+0x100/0x190 [ 444.015182][T11261] should_fail_ex.cold+0x5/0xa [ 444.015202][T11261] get_futex_key+0x1d2/0x1510 [ 444.015228][T11261] ? __pfx_get_futex_key+0x10/0x10 [ 444.015252][T11261] ? __lock_acquire+0x4a5/0x2630 [ 444.015278][T11261] futex_wake+0xea/0x530 [ 444.015298][T11261] ? __pfx_futex_wake+0x10/0x10 [ 444.015317][T11261] ? find_held_lock+0x2b/0x80 [ 444.015334][T11261] ? do_sys_openat2+0x1b4/0x1e0 [ 444.015355][T11261] ? do_sys_openat2+0x1b4/0x1e0 [ 444.015379][T11261] do_futex+0x32b/0x350 [ 444.015394][T11261] ? __pfx_do_futex+0x10/0x10 [ 444.015428][T11261] ? __pfx_do_sys_openat2+0x10/0x10 [ 444.015454][T11261] __x64_sys_futex+0x34f/0x4d0 [ 444.015471][T11261] ? __x64_sys_openat+0x12d/0x210 [ 444.015493][T11261] ? __pfx___x64_sys_futex+0x10/0x10 [ 444.015508][T11261] ? ksys_write+0x1ac/0x250 [ 444.015527][T11261] ? rcu_is_watching+0x12/0xc0 [ 444.015546][T11261] do_syscall_64+0x115/0x840 [ 444.015566][T11261] ? clear_bhb_loop+0x40/0x90 [ 444.015584][T11261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.015599][T11261] RIP: 0033:0x7fd71bb9ce59 [ 444.015612][T11261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.015626][T11261] RSP: 002b:00007fd71ca430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 444.015641][T11261] RAX: ffffffffffffffda RBX: 00007fd71be16098 RCX: 00007fd71bb9ce59 [ 444.015651][T11261] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd71be1609c [ 444.015660][T11261] RBP: 00007fd71be16090 R08: 0000000000000001 R09: 0000000000000000 [ 444.015668][T11261] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 444.015677][T11261] R13: 00007fd71be16128 R14: 00007ffe27b09f60 R15: 00007ffe27b0a048 [ 444.015697][T11261] [ 463.616329][ T7716] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.686509][ T7716] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.745500][ T7716] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.796766][ T7716] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.949250][ T7716] bridge_slave_1: left allmulticast mode [ 463.957431][ T7716] bridge_slave_1: left promiscuous mode [ 463.966184][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.976407][ T7716] bridge_slave_0: left allmulticast mode [ 463.982183][ T7716] bridge_slave_0: left promiscuous mode [ 463.989014][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.146831][ T7716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.158054][ T7716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.173623][ T7716] bond0 (unregistering): Released all slaves [ 464.392058][ T7716] hsr_slave_0: left promiscuous mode [ 464.405393][ T7716] hsr_slave_1: left promiscuous mode [ 464.411747][ T7716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.420166][ T7716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.428774][ T7716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.436585][ T7716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.456464][ T7716] veth1_macvtap: left promiscuous mode [ 464.463001][ T7716] veth0_macvtap: left promiscuous mode [ 464.468566][ T7716] veth1_vlan: left promiscuous mode [ 464.474362][ T7716] veth0_vlan: left promiscuous mode [ 464.667780][ T7716] team0 (unregistering): Port device team_slave_1 removed [ 464.683341][ T7716] team0 (unregistering): Port device team_slave_0 removed [ 501.433418][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.439772][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.071388][ T4999] udevd[4999]: worker [10340] /devices/pci0000:00/0000:00:03.0/virtio0/host0/target0:0:1/0:0:1:0/block/sda is taking a long time [ 562.904748][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.912213][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 603.882917][ T31] INFO: task kworker/u8:2:33 blocked in I/O wait for more than 143 seconds. [ 603.891953][ T31] Tainted: G U L syzkaller #0 [ 603.898468][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 603.908733][ T31] task:kworker/u8:2 state:D stack:23440 pid:33 tgid:33 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 603.921558][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 603.927605][ T31] Call Trace: [ 603.931168][ T31] [ 603.934109][ T31] __schedule+0x1295/0x67a0 [ 603.939739][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 603.946126][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 603.953433][ T31] ? __pfx___schedule+0x10/0x10 [ 603.958391][ T31] ? find_held_lock+0x2b/0x80 [ 603.964684][ T31] ? schedule+0x2bf/0x390 [ 603.969043][ T31] schedule+0xdd/0x390 [ 603.973411][ T31] io_schedule+0x8a/0xf0 [ 603.977668][ T31] bit_wait_io+0xd/0xe0 [ 603.982262][ T31] __wait_on_bit_lock+0x115/0x1a0 [ 603.987306][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 603.992825][ T31] out_of_line_wait_on_bit_lock+0xdc/0x110 [ 603.998646][ T31] ? __pfx_out_of_line_wait_on_bit_lock+0x10/0x10 [ 604.005323][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 604.011045][ T31] ? __pfx___might_resched+0x10/0x10 [ 604.016341][ T31] __lock_buffer+0x67/0x80 [ 604.021031][ T31] do_get_write_access+0x7df/0x1220 [ 604.026272][ T31] ? jbd2_journal_add_journal_head+0x414/0x660 [ 604.032653][ T31] ? jbd2_write_access_granted+0x61/0x3d0 [ 604.038382][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 604.046209][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 604.052545][ T31] ext4_mb_mark_context+0x179/0xdb0 [ 604.058721][ T31] ? ext4_sb_block_valid+0x378/0x640 [ 604.065357][ T31] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 604.072600][ T31] ext4_mb_mark_diskspace_used+0x472/0x800 [ 604.078429][ T31] ? __pfx_ext4_mb_mark_diskspace_used+0x10/0x10 [ 604.085013][ T31] ? ext4_mb_new_blocks+0x85d/0x4c60 [ 604.090456][ T31] ext4_mb_new_blocks+0x93d/0x4c60 [ 604.095582][ T31] ? trace_kmalloc+0xe3/0x110 [ 604.100609][ T31] ? bh_uptodate_or_lock+0x3c/0x140 [ 604.105820][ T31] ? __read_extent_tree_block+0x2cd/0x650 [ 604.111760][ T31] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 604.117315][ T31] ? ext4_ext_search_right+0x2cc/0xd60 [ 604.126904][ T31] ext4_ext_map_blocks+0x1c74/0x5930 [ 604.132394][ T31] ? stack_trace_save+0x8e/0xc0 [ 604.137266][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 604.143491][ T31] ? stack_depot_save_flags+0x27/0x9d0 [ 604.148983][ T31] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 604.154886][ T31] ? __lock_acquire+0x4a5/0x2630 [ 604.160997][ T31] ? __writeback_single_inode+0x164/0x1350 [ 604.166825][ T31] ? writeback_sb_inodes+0x766/0x1c60 [ 604.173494][ T31] ? __writeback_inodes_wb+0xf8/0x2d0 [ 604.178881][ T31] ? wb_writeback+0x720/0xb90 [ 604.185776][ T31] ? wb_workfn+0x8dd/0xc00 [ 604.190344][ T31] ? process_one_work+0xa0e/0x1980 [ 604.195460][ T31] ? worker_thread+0x5ef/0xe50 [ 604.201969][ T31] ? kthread+0x370/0x450 [ 604.206236][ T31] ? ret_from_fork+0x72b/0xd50 [ 604.211364][ T31] ext4_map_create_blocks+0xec/0x5e0 [ 604.216672][ T31] ext4_map_blocks+0x46b/0xd30 [ 604.221707][ T31] ? __pfx_ext4_map_blocks+0x10/0x10 [ 604.227004][ T31] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 604.232934][ T31] ? ext4_ext_index_trans_blocks+0x167/0x1a0 [ 604.238922][ T31] ? __ext4_journal_ensure_credits+0x265/0x2f0 [ 604.245865][ T31] ext4_do_writepages+0x2313/0x3f20 [ 604.251255][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 604.256816][ T31] ? ext4_writepages+0x347/0x790 [ 604.263024][ T31] ext4_writepages+0x347/0x790 [ 604.267807][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 604.273352][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 604.278648][ T31] do_writepages+0x278/0x600 [ 604.284605][ T31] ? __pfx_do_writepages+0x10/0x10 [ 604.289731][ T31] __writeback_single_inode+0x164/0x1350 [ 604.296947][ T31] ? find_held_lock+0x2b/0x80 [ 604.301816][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 604.307890][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 604.313327][ T31] writeback_sb_inodes+0x766/0x1c60 [ 604.318538][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 604.324533][ T31] ? _raw_spin_unlock+0x28/0x50 [ 604.329460][ T31] ? move_expired_inodes+0x5ea/0x8f0 [ 604.334974][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 604.340183][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 604.346325][ T31] ? queue_io+0x287/0x540 [ 604.351360][ T31] wb_writeback+0x720/0xb90 [ 604.355885][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 604.362110][ T31] ? get_nr_inodes+0x100/0x150 [ 604.366896][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.372365][ T31] wb_workfn+0x8dd/0xc00 [ 604.376623][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 604.382701][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 604.387478][ T31] ? rcu_is_watching+0x12/0xc0 [ 604.394070][ T31] process_one_work+0xa0e/0x1980 [ 604.399237][ T31] ? __pfx_process_one_work+0x10/0x10 [ 604.406124][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 604.411051][ T31] worker_thread+0x5ef/0xe50 [ 604.415679][ T31] ? __pfx_worker_thread+0x10/0x10 [ 604.421043][ T31] ? kthread+0x13a/0x450 [ 604.425298][ T31] ? __pfx_worker_thread+0x10/0x10 [ 604.430707][ T31] kthread+0x370/0x450 [ 604.434787][ T31] ? __pfx_kthread+0x10/0x10 [ 604.439368][ T31] ret_from_fork+0x72b/0xd50 [ 604.444707][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 604.450595][ T31] ? __switch_to+0x800/0x1100 [ 604.455290][ T31] ? __switch_to_asm+0x39/0x70 [ 604.460044][ T31] ? __pfx_kthread+0x10/0x10 [ 604.465942][ T31] ret_from_fork_asm+0x1a/0x30 [ 604.470898][ T31] [ 604.474015][ T31] INFO: task jbd2/sda1-8:4961 blocked in I/O wait for more than 143 seconds. [ 604.483656][ T31] Tainted: G U L syzkaller #0 [ 604.490155][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.499207][ T31] task:jbd2/sda1-8 state:D stack:25976 pid:4961 tgid:4961 ppid:2 task_flags:0x240040 flags:0x00080000 [ 604.514645][ T31] Call Trace: [ 604.517941][ T31] [ 604.522330][ T31] __schedule+0x1295/0x67a0 [ 604.526863][ T31] ? __pfx___schedule+0x10/0x10 [ 604.531945][ T31] ? find_held_lock+0x2b/0x80 [ 604.536636][ T31] ? schedule+0x2bf/0x390 [ 604.541282][ T31] schedule+0xdd/0x390 [ 604.545365][ T31] io_schedule+0x8a/0xf0 [ 604.549595][ T31] bit_wait_io+0xd/0xe0 [ 604.554594][ T31] __wait_on_bit+0x65/0x180 [ 604.559111][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 604.564389][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 604.570876][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 604.576874][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 604.582643][ T31] ? __pfx___might_resched+0x10/0x10 [ 604.587944][ T31] __wait_on_buffer+0x64/0x70 [ 604.592851][ T31] jbd2_journal_commit_transaction+0x388a/0x6870 [ 604.599209][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 604.606242][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 604.612210][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 604.617937][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 604.626573][ T31] ? find_held_lock+0x2b/0x80 [ 604.631410][ T31] ? __try_to_del_timer_sync+0x107/0x160 [ 604.637056][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 604.643124][ T31] ? __timer_delete_sync+0x151/0x1c0 [ 604.648419][ T31] kjournald2+0x200/0x760 [ 604.653053][ T31] ? __pfx_kjournald2+0x10/0x10 [ 604.658426][ T31] ? find_held_lock+0x2b/0x80 [ 604.663390][ T31] ? __kthread_parkme+0xbb/0x230 [ 604.669298][ T31] ? rcu_is_watching+0x12/0xc0 [ 604.674392][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 604.680687][ T31] ? __kthread_parkme+0x18c/0x230 [ 604.685723][ T31] ? kthread+0x13a/0x450 [ 604.689953][ T31] ? __pfx_kjournald2+0x10/0x10 [ 604.695103][ T31] kthread+0x370/0x450 [ 604.699178][ T31] ? __pfx_kthread+0x10/0x10 [ 604.704005][ T31] ret_from_fork+0x72b/0xd50 [ 604.708604][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 604.713958][ T31] ? __switch_to+0x800/0x1100 [ 604.718641][ T31] ? __switch_to_asm+0x39/0x70 [ 604.723655][ T31] ? __pfx_kthread+0x10/0x10 [ 604.728257][ T31] ret_from_fork_asm+0x1a/0x30 [ 604.736211][ T31] [ 604.739490][ T31] INFO: task syz-executor:5621 blocked in I/O wait for more than 144 seconds. [ 604.748954][ T31] Tainted: G U L syzkaller #0 [ 604.755603][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.765057][ T31] task:syz-executor state:D stack:23176 pid:5621 tgid:5621 ppid:5620 task_flags:0x440100 flags:0x00080000 [ 604.778051][ T31] Call Trace: [ 604.781555][ T31] [ 604.784491][ T31] __schedule+0x1295/0x67a0 [ 604.789003][ T31] ? __pfx___schedule+0x10/0x10 [ 604.794141][ T31] ? find_held_lock+0x2b/0x80 [ 604.798827][ T31] ? schedule+0x2bf/0x390 [ 604.803371][ T31] schedule+0xdd/0x390 [ 604.807447][ T31] io_schedule+0x8a/0xf0 [ 604.811922][ T31] bit_wait_io+0xd/0xe0 [ 604.816087][ T31] __wait_on_bit+0x65/0x180 [ 604.820811][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 604.825757][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 604.831425][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 604.837412][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 604.846661][ T31] do_get_write_access+0x84f/0x1220 [ 604.852037][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 604.858036][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 604.864872][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 604.870459][ T31] __ext4_mark_inode_dirty+0x18f/0x890 [ 604.877170][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 604.883325][ T31] ? trace_jbd2_handle_start+0x82/0x260 [ 604.888880][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 604.894378][ T31] ? __ext4_journal_start_sb+0x36d/0x670 [ 604.900013][ T31] ? __ext4_journal_start_sb+0x1ce/0x670 [ 604.905871][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 604.910963][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 604.916335][ T31] ext4_dirty_inode+0xd9/0x130 [ 604.921379][ T31] ? rcu_is_watching+0x12/0xc0 [ 604.926150][ T31] __mark_inode_dirty+0x1f3/0x1720 [ 604.931471][ T31] file_update_time_flags+0x46b/0x500 [ 604.936858][ T31] ext4_page_mkwrite+0x324/0x1890 [ 604.942108][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 604.947570][ T31] ? vm_normal_page+0x1d5/0x390 [ 604.955349][ T31] ? find_held_lock+0x2b/0x80 [ 604.960054][ T31] ? rcu_read_unlock+0x2d/0xb0 [ 604.965604][ T31] do_page_mkwrite+0x17a/0x440 [ 604.970393][ T31] do_wp_page+0xa77/0x4350 [ 604.975071][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 604.981146][ T31] ? do_raw_spin_lock+0x128/0x260 [ 604.986189][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 604.991860][ T31] __handle_mm_fault+0x1ab6/0x2a00 [ 604.996997][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 605.002630][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.008116][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 605.013578][ T31] handle_mm_fault+0x37b/0xa30 [ 605.018367][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 605.024045][ T31] exc_page_fault+0x6f/0xd0 [ 605.028565][ T31] asm_exc_page_fault+0x26/0x30 [ 605.033656][ T31] RIP: 0033:0x7fa862c6efc3 [ 605.038084][ T31] RSP: 002b:00007ffc267fd370 EFLAGS: 00010202 [ 605.044421][ T31] RAX: 00007fa85d9dade8 RBX: 00007ffc267fd4a0 RCX: 0000000000000000 [ 605.052560][ T31] RDX: 00007fa85d9dade4 RSI: 0000000000000008 RDI: 00007ffc267fd4a0 [ 605.060540][ T31] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 605.072345][ T31] R10: 00007ffc267fd480 R11: 0000000000000000 R12: 0000000000000000 [ 605.082298][ T31] R13: 0000000000025218 R14: fffffffffffdade8 R15: 0000000000000000 [ 605.090301][ T31] [ 605.093714][ T31] INFO: task syz.4.1010:11272 blocked in I/O wait for more than 144 seconds. [ 605.103113][ T31] Tainted: G U L syzkaller #0 [ 605.109613][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.118727][ T31] task:syz.4.1010 state:D stack:27128 pid:11272 tgid:11272 ppid:9644 task_flags:0x440040 flags:0x00080002 [ 605.131003][ T31] Call Trace: [ 605.134294][ T31] [ 605.137216][ T31] __schedule+0x1295/0x67a0 [ 605.142103][ T31] ? __pfx___schedule+0x10/0x10 [ 605.146969][ T31] ? find_held_lock+0x2b/0x80 [ 605.151887][ T31] ? schedule+0x2bf/0x390 [ 605.156229][ T31] schedule+0xdd/0x390 [ 605.160286][ T31] io_schedule+0x8a/0xf0 [ 605.169606][ T31] bit_wait_io+0xd/0xe0 [ 605.175121][ T31] __wait_on_bit+0x65/0x180 [ 605.179642][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 605.186719][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 605.193331][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 605.199334][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 605.205126][ T31] do_get_write_access+0x84f/0x1220 [ 605.210348][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 605.216648][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 605.222988][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 605.228545][ T31] __ext4_mark_inode_dirty+0x18f/0x890 [ 605.234245][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 605.240236][ T31] ? trace_jbd2_handle_start+0x82/0x260 [ 605.247781][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 605.253159][ T31] ? __ext4_journal_start_sb+0x36d/0x670 [ 605.258823][ T31] ? __ext4_journal_start_sb+0x1ce/0x670 [ 605.264700][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 605.270173][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 605.275800][ T31] ext4_dirty_inode+0xd9/0x130 [ 605.280571][ T31] ? rcu_is_watching+0x12/0xc0 [ 605.287548][ T31] __mark_inode_dirty+0x1f3/0x1720 [ 605.293695][ T31] file_update_time_flags+0x46b/0x500 [ 605.299093][ T31] ext4_page_mkwrite+0x324/0x1890 [ 605.304972][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 605.310447][ T31] do_page_mkwrite+0x17a/0x440 [ 605.315542][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 605.321155][ T31] do_fault+0x3b5/0x1750 [ 605.325407][ T31] __handle_mm_fault+0x187d/0x2a00 [ 605.330523][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 605.336186][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.341797][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 605.347020][ T31] handle_mm_fault+0x37b/0xa30 [ 605.351999][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 605.357121][ T31] exc_page_fault+0x6f/0xd0 [ 605.361861][ T31] asm_exc_page_fault+0x26/0x30 [ 605.366718][ T31] RIP: 0033:0x7f83fb271580 [ 605.372065][ T31] RSP: 002b:00007ffcf24c9280 EFLAGS: 00010202 [ 605.378145][ T31] RAX: 0000001b2fa20000 RBX: ffffffff828c8835 RCX: 0000001b2fa1fff8 [ 605.387345][ T31] RDX: 0000001b2f424220 RSI: 0000000000000008 RDI: 00007f83fc145720 [ 605.396790][ T31] RBP: 000000000000013d R08: 00007f83fb600000 R09: 00007f83fb602000 [ 605.405777][ T31] R10: 00000000828c8839 R11: 0000000000000003 R12: 00007f83fb616128 [ 605.414426][ T31] R13: 000000000000018f R14: ffffffff828c8db4 R15: 00007f83fc145720 [ 605.422627][ T31] ? path_openat+0x534/0x31a0 [ 605.427317][ T31] ? kernel_tmpfile_open+0x55/0x90 [ 605.432668][ T31] [ 605.435702][ T31] [ 605.435702][ T31] Showing all locks held in the system: [ 605.443792][ T31] 1 lock held by khungtaskd/31: [ 605.448642][ T31] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 605.458799][ T31] 6 locks held by kworker/u8:2/33: [ 605.464049][ T31] #0: ffff88801eaf4940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 605.475448][ T31] #1: ffffc90000a97d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 605.487492][ T31] #2: ffff8880360a80d8 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 605.499284][ T31] #3: ffff8880360b6c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 605.511788][ T31] #4: ffff8880360b4938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 605.522053][ T31] #5: ffff888076ce2770 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x45a/0xd30 [ 605.532228][ T31] 2 locks held by getty/5389: [ 605.536904][ T31] #0: ffff88803747f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 605.546979][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 605.557321][ T31] 3 locks held by syz-executor/5621: [ 605.564078][ T31] #0: ffff88802ca05d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 605.573461][ T31] #1: ffff8880360a8508 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 605.583645][ T31] #2: ffff8880360b4938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 605.594370][ T31] 3 locks held by syz.4.1010/11272: [ 605.599575][ T31] #0: ffff88807ec48e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 605.609117][ T31] #1: ffff8880360a8508 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 605.620028][ T31] #2: ffff8880360b4938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 605.630648][ T31] 2 locks held by dhcpcd/11278: [ 605.636205][ T31] #0: ffff8880293b6420 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xaf/0x1740 [ 605.646598][ T31] #1: ffff888034d59cc8 (&ei->xattr_sem){.+.+}-{4:4}, at: ext4_xattr_get+0x14a/0x770 [ 605.656289][ T31] [ 605.658747][ T31] ============================================= [ 605.658747][ T31] [ 605.667916][ T31] NMI backtrace for cpu 0 [ 605.667932][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 605.667953][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 605.667958][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 605.667967][ T31] Call Trace: [ 605.667972][ T31] [ 605.667978][ T31] dump_stack_lvl+0x100/0x190 [ 605.668004][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 605.668020][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 605.668035][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 605.668106][ T31] sys_info+0x141/0x190 [ 605.668141][ T31] watchdog+0xcb1/0x1030 [ 605.668170][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 605.668189][ T31] ? __pfx_watchdog+0x10/0x10 [ 605.668207][ T31] ? __kthread_parkme+0x18c/0x230 [ 605.668227][ T31] ? kthread+0x13a/0x450 [ 605.668244][ T31] ? __pfx_watchdog+0x10/0x10 [ 605.668261][ T31] kthread+0x370/0x450 [ 605.668279][ T31] ? __pfx_kthread+0x10/0x10 [ 605.668300][ T31] ret_from_fork+0x72b/0xd50 [ 605.668315][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 605.668330][ T31] ? __switch_to+0x800/0x1100 [ 605.668347][ T31] ? __switch_to_asm+0x39/0x70 [ 605.668364][ T31] ? __pfx_kthread+0x10/0x10 [ 605.668384][ T31] ret_from_fork_asm+0x1a/0x30 [ 605.668409][ T31] [ 605.806520][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 605.813367][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 605.824027][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 605.829198][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 605.839234][ T31] Call Trace: [ 605.842496][ T31] [ 605.845410][ T31] dump_stack_lvl+0x100/0x190 [ 605.850082][ T31] vpanic+0x552/0x970 [ 605.854046][ T31] ? __pfx_vpanic+0x10/0x10 [ 605.858532][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 605.864671][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 605.870809][ T31] panic+0xd1/0xe0 [ 605.874510][ T31] ? __pfx_panic+0x10/0x10 [ 605.878908][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 605.885042][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 605.891175][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 605.897308][ T31] ? watchdog.cold+0x1ec/0x234 [ 605.902055][ T31] ? watchdog+0xcc1/0x1030 [ 605.906463][ T31] watchdog.cold+0x1fd/0x234 [ 605.911042][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 605.916837][ T31] ? __pfx_watchdog+0x10/0x10 [ 605.921498][ T31] ? __kthread_parkme+0x18c/0x230 [ 605.926511][ T31] ? kthread+0x13a/0x450 [ 605.930740][ T31] ? __pfx_watchdog+0x10/0x10 [ 605.935403][ T31] kthread+0x370/0x450 [ 605.939457][ T31] ? __pfx_kthread+0x10/0x10 [ 605.944049][ T31] ret_from_fork+0x72b/0xd50 [ 605.948641][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 605.953742][ T31] ? __switch_to+0x800/0x1100 [ 605.958412][ T31] ? __switch_to_asm+0x39/0x70 [ 605.963167][ T31] ? __pfx_kthread+0x10/0x10 [ 605.967754][ T31] ret_from_fork_asm+0x1a/0x30 [ 605.972520][ T31] [ 605.975585][ T31] Kernel Offset: disabled [ 605.979897][ T31] Rebooting in 86400 seconds..