last executing test programs: 13m58.235837188s ago: executing program 0 (id=2000): ioctl$auto(0x3, 0x89e0, 0x91) 13m57.965207937s ago: executing program 0 (id=2005): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) open(0x0, 0x0, 0x408) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) ioctl$auto(r0, 0x8923, 0x24) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4b, r2) 13m56.631872798s ago: executing program 0 (id=2008): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x9, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x4, 0xffffffffffffffff, [0x100, 0x9, 0xffff], {0x2, 0x7, 0x302d, 0xe, 0xf, 0x7, 0x7, 0x4, 0x4}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0x5, 0x9, 0x837}}) getsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f00000000c0)=0xffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) r3 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r2}) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="12", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(0xffffffffffffffff, 0x8b0c, 0x24) sendfile$auto(r3, r2, 0x0, 0x7fffe002) 13m55.136687451s ago: executing program 0 (id=2016): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x18, &(0x7f00000002c0)=@bpf_attr_0={0x0, 0x10, 0x1, 0x6, 0x8, 0xffffffffffffffff, 0x400, "432a8091dac3bd4a0411088194f19cb8", 0x0, 0xffffffffffffffff, 0x400, 0x400, 0xff, 0x64}, 0x9) open(0x0, 0x0, 0x408) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) ioctl$auto(r0, 0x8923, 0x24) mmap$auto(0x0, 0x10001, 0x3f8d, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4b, r2) 13m51.958640582s ago: executing program 0 (id=2044): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x9, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x4, 0xffffffffffffffff, [0x100, 0x9, 0xffff], {0x2, 0x7, 0x302d, 0xe, 0xf, 0x7, 0x7, 0x4, 0x4}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0x5, 0x9, 0x837}}) getsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f00000000c0)=0xffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) r3 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r2}) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(0xffffffffffffffff, 0x8b0c, 0x24) sendfile$auto(r3, r2, 0x0, 0x7fffe002) 13m51.067486354s ago: executing program 0 (id=2043): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x2, 0xffffffffffffffff, 0x6, 0x6}, 0xa3) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_map_fd=r1}, 0xa3) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)="22edd92f26639ec07e6e5d09f20c7c160a4dc5023a92446435820bd54b8004043262db0a8686bd579dcf16f50e9bfa20abfa3a", 0x33) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec2\x00', 0x20081, 0x0) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000080)={0x40000000001, 0x1, 0x7, 0x8, 0x2, 0xcb, "8a9750a07c00", 0x6, 0x6, 0x6, 0x9, 0x8, 0x5, 0x81}) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) socket(0xa, 0x1, 0x84) (async) r3 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r3, 0x84, 0x82, 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x06\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 13m36.021015965s ago: executing program 32 (id=2043): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x2, 0xffffffffffffffff, 0x6, 0x6}, 0xa3) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_map_fd=r1}, 0xa3) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)="22edd92f26639ec07e6e5d09f20c7c160a4dc5023a92446435820bd54b8004043262db0a8686bd579dcf16f50e9bfa20abfa3a", 0x33) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec2\x00', 0x20081, 0x0) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000080)={0x40000000001, 0x1, 0x7, 0x8, 0x2, 0xcb, "8a9750a07c00", 0x6, 0x6, 0x6, 0x9, 0x8, 0x5, 0x81}) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) socket(0xa, 0x1, 0x84) (async) r3 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r3, 0x84, 0x82, 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x06\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 4m52.839786232s ago: executing program 4 (id=5698): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = prctl$auto(0x10000, 0x1, 0x0, 0x1, 0x0) connect$auto(0x3, 0x0, 0x81) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_GET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x6}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x30}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, "12514eea94e8"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x84) mmap$auto(0x0, 0x7, 0x20000000df, 0x19, 0x40000000000a5, 0x5) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x591200, 0x0) pread64$auto(r2, 0x0, 0x6, 0x1ff) readv$auto(0x3, 0x0, 0x4) open(0x0, 0x161342, 0x130) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) 4m52.744763333s ago: executing program 4 (id=5700): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) mmap$auto(0x100000000, 0x440008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(r0, 0x0, 0xfffffdef) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000200)={0x81, 0x7fffff3e, 0x2, 0x0}) 4m52.648199071s ago: executing program 4 (id=5701): r0 = socket(0x2, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram0/queue/dma_alignment\x00', 0x8800, 0x0) read$auto(r2, 0x0, 0x1) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = socket(0x2, 0x80002, 0x73) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) r5 = socket(0xa, 0x5, 0x84) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) close_range$auto(r4, 0x8, 0x0) socket(0x2, 0xa, 0x100073) (async) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) 4m52.145278542s ago: executing program 4 (id=5702): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x200080, 0x0) r3 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f00000000c0), 0x280000, 0x0) r4 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000100)=@bpf_attr_0={0x7fffffff, 0x3e30, 0x200, 0x800, 0x2, r0, 0x5, "31b5fb222b33bb684ef345096dcc175d", r1, 0xffffffffffffffff, 0x400, 0x40, 0x400, 0x0, r2, r3}, 0x8) close_range$auto(r0, r2, 0x2a4) (async) r9 = socket(0x1d, 0x2, 0x6) (async) getsockopt$auto_SO_PEERGROUPS(r3, 0x9, 0x3b, &(0x7f00000001c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', &(0x7f0000000200)=0xe) (async) r10 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000280), r7) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r10, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x2}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x2}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0xfffffff8}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) lseek$auto(r3, 0xfffffffffffffffb, 0x6) r11 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r8, 0x8004b709, &(0x7f00000003c0)) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x23c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x219, 0x7, 0x0, 0x1, [@generic="35c1ffd51d42203e2fac22ad29d1598370f47d4e88f49a2662d859e69f0c1fbfcec4b2335fb1a597538dfd52174c1f62f9e7bd3816c611294b23e7889a65ead057b4b813adf9bf2bb2d5af36e3a77a88fb3ebcd9339ec21b76", @generic="a70a91e9f7bda9cad11d88378d3a46c5dbf23d1939d89027ff19f0450ab548d58c2af627315deafafce577fb0023aacf392d21e0a42766f4f05df5a7c8ee902c050b342db3ce5ac04ef7bc078bc5d36f5dd397e4f4718d61d1e38c847a0363cf1bb6aecbcefd7a95c07b2c1ec20a4ed291fd29dcd8794967b15ee6293ecf39f56988dfe9a5", @generic="892e041c2096f950fcbb7916ebdc1743cc6446d3b41c7600bca345aa12d194ae5539c906b1821dd8fe05f1e4695dd3a52e2c6a654b98b1682b3efd34cb5b6b0e7e76aa035818d37b12d2c7870ec109bca02cc903dcb7ec2456396fc3de4fe1b6b1e97a4babcc8d4a8cd28f9187c60c85d1691a96be6c4f74311ae4", @typed={0xc, 0x62, 0x0, 0x0, @u64=0x4}, @nested={0x9a, 0xf3, 0x0, 0x1, [@typed={0x8, 0x151, 0x0, 0x0, @u32=0x10000}, @generic="e484e887cf053c838b8642999ef24845a8143b7c4731884ae71ef4b75a8fbbb30dadf236c76d10420620162f67fb6da1b3275cd251f048cd513705d6d7df065e38b04058459451e70a599a68fb1637774773119b707c348c3bcd32509281cd3ac4ad88542399042d1961229c5cd594e418b7a104b7fe66fed328bfe59d5c9f5cc2f750e04f813291a39ccd04121c"]}, @typed={0x8, 0xcb, 0x0, 0x0, @pid=r11}, @nested={0xc, 0x100, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @ipv4=@loopback}]}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4044009}, 0x4000840) (async) pwrite64$auto(r7, &(0x7f00000006c0)='R\x00', 0x3, 0x10001) (async) sendmmsg$auto(r2, &(0x7f0000000900)={{&(0x7f0000000700)="0bbbe8", 0x4, &(0x7f0000000800)={&(0x7f0000000740)="9f97e9f47137e1608e57a469adc04894f14095aae11848e6417c0f8b1fb492882fd771b5308e4ecd82559b8ba5e670a46954b5c3d77025ea3175fb3e23add245f8da3c227e5a5225d569ae622f45f2b7af9c9576456037e160ad39e8002cba1271c31fdeca16f20dcfbb900e60ee48acb1815f70fd7216413517a7982a9ccc4fa423fce761ccdf54a8da20398c1eadf1a834b67426be53ca93037d0d0ba914aca0865ec92b8b2a5e5f482e2219e3a6fecfb49523262cca563257f3e1f4", 0x5}, 0x9, &(0x7f0000000840)="0a52b5a8eccb5c16fc312f21250c9abb57472148200076ceff895ed2f01c0de00d25641fb0677d97835fdc06470deb5397e17061bec25a46d09250aa5c6fbff215ea2fcd9e529fc44ef634b0244dd68f9d343572e6f066671e18e8b98caee0d7ed41b277b6ae991770b6a777f1b419d40f1cf38ed4ea8f85e0e69be74b215743dee8d08afad6bb80372fa1a933c060723c04d0a9d0d1f8191482ee86be12b26f", 0x9104, 0x4}, 0x7}, 0x7000000, 0x2) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000940), r4) (async) r12 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000009c0), r6) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r4, &(0x7f0000001380)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000a00)={0x914, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x3}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x343, 0x2, 0x0, 0x1, [@nested={0xaf, 0x42, 0x0, 0x1, [@nested={0x4, 0xbe}, @generic="3ba714b2505dae2070c8a8444cc348b263a270d4ddfbe024527b3708e5e425f6", @generic="ce0d4fa5037e16e2874ae5ae1284a9b4db1ad42e6811927b7f2ce7a0274e158342ba904064cf687ba2676cb1f22f91db316486048c42b600d7b22218a19ff2070a017d48e1fb9e5d935a17212412e11420efcae06d7d6a1965e95aaa2dd09e07f8f4ecf6c2a4cd81e79442c58038417e7ea3a243c35c8db67d9f107410c84cc974de5a6fc3cdd5"]}, @nested={0x10, 0x9f, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0x20}]}, @generic="119f4bafcf65937338120bb3a20a5ca686e44a8bd9c2e671a10515a2ae97076769fc56eccd0255e874b5d6fcd978c04cc6d27312988bd13a536fa71401586bd98f6dc60635efc2199cc0ee4ca44ed4c5c1ac28d860044df04973f8837b15cf389043703361", @typed={0x77, 0x13b, 0x0, 0x0, @binary="176a236450dff55f1537e51325c748b8393d7c2fc846f7664b041147a84573c3fe0eb1f91febac167f4d3e21e2514bd14960b7a4be230052546dd08083014363b97e7fdee6359f6e78536798584bea3d72ec5b528ec095d197461c3b5e85ab5b5beaa40c52c72afabea391b8e289f6be4e8651"}, @nested={0xd3, 0x128, 0x0, 0x1, [@generic="82ed29aedc4f016ad2cea8d7cf8f51173a72353a62b7946fde326bbec1daefbe84bf34788df9d8988ce4ace9a147356c24c1d00fb8b4e2d86aa850994be28cfb78df656edc0250e1c1d47dae57bb09f5999f76f3d6aa02c0ba2cd969f8f4e4092585017e8a07d5aa3ffcc1e908d9bba4abc9854587a61343ecd916bcbf78c4e80ef57c3ec016b36e5b6376d6811b2b1c73c1fe006527bd7b32d76d79ac5aaa125a2aa86a4ae2820df62ccd3bf52f85ddbf48c5ef2b2c61d488079064d07afd3cd178ec8c12e4d0", @typed={0x8, 0x9b, 0x0, 0x0, @u32=0x8}]}, @generic="4d1ec0d9934cd888981ecf5e76274b4d62f4a5899ba825991b37ecd003ad099f63a7407bd12ef738909c1d34e795bf4ee93bbb6ee4ec53aad1e8ff14932910110dd0badcb6f896ef6d110eeea67c870ea3649dde2ff846633283f2e1f9c7af9285ea27cee67776f3750bbe6cd173ca60f593eea2a3c610e169cbbf90f0dd4e4da9d3f31c5ae8b00fcd77de87120fcf09942fb9f4ea95f1c219e05ee1071d8f8ebd0630848b6bb729ab29e69a711e2428751ad5dbf7d12635cb896a34dc362248ed9e2f0b4dcf3bb997658f3330d9"]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x2}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x4}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x28c, 0x3, 0x0, 0x1, [@nested={0x27f, 0x10a, 0x0, 0x1, [@typed={0x4, 0x4e}, @nested={0x4, 0x71}, @nested={0x4, 0x80}, @nested={0x4, 0xa5}, @generic="5c149136b12773d83c1a3e1cd4f66a560765647c2383650910201f774a4e3ecdc721f00d5365a6116a414affd09bfd6d605f7a72878fdd0ca970949a02d871b2b0b664082ab6e9f4eb657bd7b71635e336dbe848b4efad275048265b81550e27778118517f16124c3b996868c06ca064e4462857bd9f447eabaa4a46d4eabfc818efee6d778fca5ba6c50acba864c4fae2c800944420990116d13634bd01b024edfa3a4ad3d377168d5de8e333f12b3d863ea5ff247a3d795191699d28cd3745eef61b0da3725991e26d1a84827bbc5c88773a65d5b9f4b88d346ec1dcd86149cc63ec722f79c892497ee3882fb26b180f630f1ac9ae6d21efe0880ffa1c", @generic="a78f711bdc19e9900c934fc869ab37bda5d98061de89476144aaa2ec4ff4a6288052f18e0853530678454809c38bff0636488b7c2a599be06f4b88199fe91b2d39f2c74a1027fbdb07e6bbe54f3b66583a520d2ec3d221e1bb6829e1577add24b2ac1640ed7f4a45852fbc1bcf3f4ae2e66604a429e7fa4b502d9179d279701fc1fc20edad0d568d9a51c7cde28d2365f71fe7b3dbc14e4d87bed17a3beaaf22b1ae770a38", @generic="82a3aaff1df743128f9d015bb53d42d51e4ec532809bff30a3998eaf3347b558d9a4796d316167fee3e0b0ff658c3aefc47537131139c38c0c03a61cff651d9f28a58de5054d7c1ea85bbe98644552fd7e5a19aa77a00a471bb1de558345d2b12210626335e5938334c1faf5017f8a422b86354f7f4659ecddf3ec61d67ee39f65600a404c0e62165befb506b2f56dc0b826dc8804602d0f209ace3b22e762b676be0d0071e96602340bec5e27a907c1efd920e03f4e977be9700335a19b0e3b", @nested={0x4, 0xed}, @nested={0x4, 0xe0}]}, @typed={0x8, 0x131, 0x0, 0x0, @u32=0x9}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x319, 0x3, 0x0, 0x1, [@generic="3ddaca00499d9dcfadb3c95f76e8b01e208a0af96366b75fe6eee7de24ff0d456fc52ae01d176e0278dc3e860e31d2e5804559fa562ef4b1f35fa31f78632dfa7a56ed505840cac132fff9901e9bd70b1c8b8ca048c7b6007befd55c628f95293b7759f32e92107ad2b0e6618e0bd6b52748ec1bd55893fc97641bc039309b7bd38a9e42656d4f9262f85daf09b10cdcced12743c8", @typed={0x8, 0x72, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x1c, 0xdc, 0x0, 0x1, [@typed={0xc, 0x10d, 0x0, 0x0, @u64=0xa}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x40}]}, @nested={0x17f, 0xfd, 0x0, 0x1, [@generic="b0ad063e9658a33db4", @generic="c3e61ac1861f689d16926d13c2607f94d8c694beaddd1aa2daa6ed782cd82e0d6fbfb1691cf240cd628d43d236213a50e602a56c1da3f9f33e5828552b2e8546ff684ec809d000e0ab430442427ae8043b4b3e8db06aec5bf1515f7176d4043301180ebabdcb0b5986872ecd3a04ab805e5bc1fe927f5c8086d93bcb155a4fe4cf5250f0feac940ea7d5e6cbe17bcb08a048557008942d6b92027ab66b4f41cbf98981276d94c21aebcf69dbd4ce5fc70b732e33bd9c0c42311eb48320c16683732143bd46beebcd30ff648b41fd8fe7c27bf6f952a1e9ee0fb75ec3d08c9b28490254", @generic="8e21d1e563ea3041cba861a28962b4f101119a750832f24a806ecd5bbbb42f8d350b9ec368c3d8839a94ca259c907f9320da877d94a11eafbfa73ee0888398cebe5af17221d7e8300dcfa97efbd04159128b7ce5d0cb0106bae146776d096997ae538f45c4fb4ae498cf8051a4e41807fd762084139e76c62ab3bdf21260c104092cf02e2b2a71c072a103", @nested={0x4, 0x50}]}, @typed={0xc9, 0x24, 0x0, 0x0, @binary="f59e66ac3271bde6482f8f770ddd67f3281b3fc538a9bfba93a7f88f81f85b650c596707c38f0b8c2b887bb78c309a26075af57c1c9516c887620490202ba26b6d960d774f5377fd46d1291fd4c9c283574851a7175622e45adf11b98bd28569e341fd0535f9eabbabfbb115a43c9bfea0b68a2df8e721386dba9889f1d5a3a6753b0b0010784fb40d475ff5851d29280e5487fd3c0043d8a067dc1638bd44b5168c2646457837b878f4ddc23a594ad0fdaf7541bb13ccb9a6d2e19205e6267d52e86646bd"}, @typed={0x8, 0x79, 0x0, 0x0, @fd=r5}, @typed={0x7, 0x14d, 0x0, 0x0, @str='(\'\x00'}]}]}, 0x914}, 0x1, 0x0, 0x0, 0x20}, 0xc010) getsockopt$auto_SO_BUSY_POLL(r7, 0x8000, 0x2e, &(0x7f00000013c0)='R\x00', &(0x7f0000001400)=0x8) r13 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001480), r4) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCR(r4, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, r13, 0x2, 0x70bd2d, 0x25dfdbfc, {}, "d26946d7bf276a677c8b588cc0f29566a17734953306c25bf95bcc6793ec71f7ca8e1de1534d298d9a96858d24c3becf99ba7e0026cdfb14da5cb3e2"}, 0x50}, 0x1, 0x0, 0x0, 0x44881}, 0x0) ioctl$auto_SNDCTL_DSP_POST(r7, 0x5008, &(0x7f00000015c0)="532c92bf255a2b929d2eb785be9d99e302d6488efb369857f3b58f89106f76605c855942dde67dfb1a867b4e14e334c9d28e1afffb2a390486ea95ae2d01f9c2ca1929405dee0e0dbe96e125e462fad61d59e35c6ca8cd18d7efef90aeadfa40f073ff79f97e5d5d338d9c32668a7c38bc3362aa035866a71a0ee4deda841a6b") r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_REG(r14, &(0x7f00000017c0)={&(0x7f0000001640), 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xe8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x61, 0xac, "f8a7eea28979f76a32975f389f73596870ab20de91334321e962e7a3d6a471de42addcb0081d9de15346508590b03c12e092accd296d35bef233a5ec5acbe5bf14d99f2f9ce229da9277a838bdf7d79186ea2916e0b94af6ed35c816a3"}, @NL80211_ATTR_BSS_SELECT={0x2c, 0xe3, 0x0, 0x1, [@generic="33e82f43ca7c6910411ec475fdfef55611d8df9882e74507950769f74b9ddc281c333e175f290364"]}, @NL80211_ATTR_STA_FLAGS2={0x30, 0x43, "bcbf774af04589d540d66c87ff45507689b795d5f61eaae472f79ba69495d780e7dc4c86dc97bf03517aacbf"}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0xf2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20008800}, 0x84) (async) read$auto_hpet_fops_hpet(r7, &(0x7f0000001800)=""/109, 0x6d) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000001880)='/dev/usbmon24\x00', 0x12600, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_timedsend$auto(r9, &(0x7f00000018c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x8, 0x1, &(0x7f0000001900)={0xb84, 0xc}) (async) fstatfs$auto(r4, &(0x7f0000001940)={0x5, 0xa, 0x1, 0xfffffffffffffc01, 0x9a, 0x800, 0x7, {[0x1, 0x8]}, 0x0, 0xffffffffffff8000, 0xffffffffffffffff, [0x10000, 0x61ca, 0x3, 0x100000001]}) (async) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000019c0)={0x81, "19cbde22ce6a93f59ba96e624fb902ffd4f16b34b21c1b40f70ce39e52c9fc82", @inferred=r0}) 4m51.465906474s ago: executing program 4 (id=5707): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) connect$auto(0x3, 0x0, 0x7f) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x7fffffff) mmap$auto(0x0, 0xfff, 0x1, 0xeb1, 0x401, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0x80000, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 4m51.403838166s ago: executing program 4 (id=5709): r0 = socket(0xf, 0x4, 0x81) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x2, @none, 0x4, 0x2}, 0x54) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r1, 0xd23, r1) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x8010, r1, 0x7fff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x7b, 0x1, 0x0, 0x5, 0x3) mmap$auto(0x5, 0x8020009, 0x5, 0xeb1, r2, 0x3) unshare$auto(0x40000080) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) close_range$auto(0xffffffffffffffff, 0x5, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0xc08f00, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptyw4/uevent\x00', 0x1ab8c2, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) write$auto(0x3, 0x0, 0x100082) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0xe0e7) setsockopt$auto(r4, 0x29, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x10) mmap$auto(0xbb, 0x100000000, 0x4000000000df, 0x40eb1, r0, 0x300000000000) socket(0xa, 0x3, 0x4) 4m36.115605898s ago: executing program 33 (id=5709): r0 = socket(0xf, 0x4, 0x81) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x2, @none, 0x4, 0x2}, 0x54) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r1, 0xd23, r1) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x8010, r1, 0x7fff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x7b, 0x1, 0x0, 0x5, 0x3) mmap$auto(0x5, 0x8020009, 0x5, 0xeb1, r2, 0x3) unshare$auto(0x40000080) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) close_range$auto(0xffffffffffffffff, 0x5, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0xc08f00, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptyw4/uevent\x00', 0x1ab8c2, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) write$auto(0x3, 0x0, 0x100082) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0xe0e7) setsockopt$auto(r4, 0x29, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x10) mmap$auto(0xbb, 0x100000000, 0x4000000000df, 0x40eb1, r0, 0x300000000000) socket(0xa, 0x3, 0x4) 9.198061832s ago: executing program 2 (id=7183): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_IPC_STAT(0xfffffff8, 0x2, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000098c0)='/dev/sg0\x00', 0x40, 0x0) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000009900)={"9c79bece76127589a33a968f51b2aaadc76a2d360a5d6917323688f527ff0804", 0x5, 0x2, 0x0, 0xe57, 0x7fff}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8800, 0xd1fc}, 0x4, 0x0) ioctl$auto_EVIOCGVERSION(r0, 0x80044501, &(0x7f00000001c0)=0x8) mmap$auto(0x7fffffff9000, 0x1, 0x7ffffffffffffffb, 0x3132, r2, 0xfffffffffffffffe) mmap$auto(0x7fffffffa000, 0x5, 0x7fffffffffffffff, 0x3132, 0x8d73, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x200, 0x0) ioctl$auto_FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000140)={0x7, 0xd, 0x2, 0xd, 0x3, 0x800, 0x0, 0x6}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/slab/kmalloc-64/cpu_partial\x00', 0x109101, 0x0) mmap$auto(0x0, 0x40000d, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$auto_RTC_PARAM_SET(r4, 0x40187014, &(0x7f00000000c0)={0x1, @ptr=0x7, 0x1}) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000240)="22edd92f26639ec07e6e5d09f20c7c160a4dc5023a92446435820bd54b8004043262db0a8686bd579dcf16f50e9bfa20abfa3a", 0x33) read$auto(r3, 0x0, 0x1e) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 7.536437939s ago: executing program 2 (id=7193): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 6.477340243s ago: executing program 2 (id=7200): socket(0x11, 0x80003, 0x300) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4004) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xb, 0x9, 0x63, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000000a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r2 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r2, 0x0, 0x8fb5) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) 5.304084611s ago: executing program 2 (id=7204): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) recvmmsg$auto(r1, 0x0, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r1) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x13c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x115, 0x1, 0x0, 0x1, [@typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@remote}, @generic="173a06d2a7761cc587d433e3780ec1766fd1c925fe946a31c6543310550a6ce4d37fd6fcb37678017393c8f9c5a01624375b4e29293f715f22e5958ee4b488e6131e448334be94061b89e32d6921fdf8d8d206434f3d9afd01a90d2580c5fdb5553dc1f5430f33f09c141ab8d4414344f6b257daf89a467fe7c943b9f2642b8e31ba5a5219c03e008a21653ae65c8e2c6f753173ce6438a05e417ec7032caa889ba9d06f44929a202e32e762d786c5e472276f417cfbb44eb42862d9b9121d7dc7543bb1f2344cda00f59b9854a4d1ea0d330d8339f3a3b24cf174de71bd1b442cdde9cd6d9e3a3207a9371fe5", @nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x9c}]}, @nested={0x8, 0x14a, 0x0, 0x1, [@nested={0x4, 0xd6}]}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008810) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) fanotify_init$auto(0x65, 0x2) prctl$auto(0x6b, 0x4, 0x0, 0x400, 0xfffffffffffffff7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002d7000ffdbdf2505000000160011002f6465762fa26e642f6d6964694332443000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) 3.247230628s ago: executing program 2 (id=7211): socket(0x11, 0x80003, 0x300) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4004) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xb, 0x9, 0x63, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000000a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r2 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r2, 0x0, 0x8fb5) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) 3.06191955s ago: executing program 3 (id=7213): pwrite64$auto(0xc8, &(0x7f0000000480)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06e\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\b2[\x05\xbdn\x1d\x00\xeb]B\xa0\x99\xb0B\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a0\xeb\xbf\xcfwU&[\xde?\x81\x9a@\xb8h\xc0\x88_\xa0u\xa2\xddH\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xe, 0x10000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/001/001\x00', 0x802, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC0\x00', 0x109482, 0x0) r2 = clone3$auto(&(0x7f0000000100)={0x800, 0x400, 0xa, 0x7, 0x9, 0x5, 0x9, 0x9d0f, 0x9, 0x813, 0x3}, 0x5) r3 = getsid$auto(0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{@inferred=r2, 0x5, 0xffff, 0xa8, "5c01e5e538a5a1a019a0e76954c7e75beb64454b57f839475ed4ea37837c9d0ba05a15c809b5185d38f8d4d9", @raw=0xfffffffc}, 0xd4d, 0x3, 0x3, @inferred=r3, @enumerated={0x1ca000, 0x3, "83ba8846f7c96fe4d3afb46c89712d165668452e012869de12797768acc459760be147335e7ae11d91e831e4c4b7759d7ab22906bcf798b2dbb9e7e5c90326b8", 0x0, 0x3}, "ce89bff56fe23da3e41319b391be6efeffbeff74f8b5074a5ddc4f45ea4d7847656f0394ce18da92a94c02b91ba6913ec20fab3c35e8b4ecc96c5215257a6990"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, r6, 0x100, 0x6, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x5}, @NL802154_ATTR_SEC_LEVEL={0xd9, 0x2d, 0x0, 0x1, [@generic="76ff499aa207401ae2dd344370832ea1b54a59d7bd7373db055c23613424c7ddf145e2592b3e08f65a400c344a08823148466e38e99ebee51edc620c2702f0273ecc19bfcf93154ed20e337a477a65cb358adfd777654f259ac8dc7bad8294c49d01d00372481450f87958d01b48e8f2608f56ce198ee87e1d358d27dc1b2e6653a372f0d84687c53082e2c125faff693ea7816d86b106b083310cc9f7e181ba84e9bfa56fa9a4315f6dbaebcac48036d5453dbd24dac621561d69e818a31f1484da0ad50e75dd8914c18b0f52aaf833bc0d8b8430"]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card2\x00', 0x5819c0, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x20, 0x1, 0xfffd, 0x400, 0x1, 0x9, &(0x7f00000000c0)}) 2.97783462s ago: executing program 5 (id=7214): r0 = inotify_init1$auto(0x3a8) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)="01152fcb8b4a363062d270284a034769fc66ceae0b92b9cd971d7587bc3b66922f86e1727ec72170fa49e136c77dc28f9bf8cbde2f63c44f42005cb530", 0x8) msgctl$auto_IPC_RMID(0x10, 0x0, &(0x7f0000000100)={{0x3000, 0xee01, 0xffffffffffffffff, 0x31a, 0x9, 0x3ff}, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0xa, 0x4, 0x6, 0x7226, 0x9, 0x800, 0x3, 0x2, 0x3, @inferred=0xffffffffffffffff, @raw=0xd}) setfsgid$auto(0xee01) (async) r3 = setfsgid$auto(0xee01) lchown$auto(&(0x7f0000000040)='./file0\x00', r1, r3) (async) lchown$auto(&(0x7f0000000040)='./file0\x00', r1, r3) lstat$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x5, 0xdadf, 0x0, 0x1ff, r1, r2, 0x0, 0x1, 0x8, 0x4, 0x9b45, 0x3, 0xffffffffffffffff, 0x2, 0x8, 0xffffffffffffffff, 0x8000000000000001}) (async) lstat$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x5, 0xdadf, 0x0, 0x1ff, r1, r2, 0x0, 0x1, 0x8, 0x4, 0x9b45, 0x3, 0xffffffffffffffff, 0x2, 0x8, 0xffffffffffffffff, 0x8000000000000001}) stat$auto(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x1, 0x6, 0x7e69, r1, r2, 0x0, 0x51, 0x400, 0x101, 0xffffffffffffff00, 0x0, 0x0, 0x3, 0x3, 0xc, 0x3}) lchown$auto(&(0x7f0000000380)='./file0\x00', r4, r3) (async) lchown$auto(&(0x7f0000000380)='./file0\x00', r4, r3) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)=@bpf_attr_11={0xffc, 0xb, 0x3, 0x4, 0x4, 0x3, 0x7, r0}, 0x7) readv$auto(r6, &(0x7f0000000500)={&(0x7f0000000480)="23290ae66441224d9392c93588112f5e910a2f0bdcac2b426909307951bdc5ed3475a8a1519110c1c5614e0b14438ac8d08ff23cf2481d10ccfeb17b06d1b1fbb724ddadce662a4cdee7c77b7e4664b6b2e7f3ad38eb85c8fbc771839c5049020e5c9293708cece610d3fed798619ad9fb331e93d8d4e99ce6cd8263c1f4"}, 0x1ff) (async) readv$auto(r6, &(0x7f0000000500)={&(0x7f0000000480)="23290ae66441224d9392c93588112f5e910a2f0bdcac2b426909307951bdc5ed3475a8a1519110c1c5614e0b14438ac8d08ff23cf2481d10ccfeb17b06d1b1fbb724ddadce662a4cdee7c77b7e4664b6b2e7f3ad38eb85c8fbc771839c5049020e5c9293708cece610d3fed798619ad9fb331e93d8d4e99ce6cd8263c1f4"}, 0x1ff) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f0000000540)=r0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2, 0x0) renameat2$auto(r7, &(0x7f0000000580)='./file0\x00', r8, &(0x7f0000000600)='./file0\x00', 0x0) preadv$auto(r7, &(0x7f00000006c0)={&(0x7f0000000640)="96e66f152e6c0a5b9962f0d7caf263282071b975aa7555f49a534bd8caee1a17ceeeed083f52c0965b94e929d4a804b88f2cad592882cf25f6312fe198f303e39308846196", 0x7520}, 0x7bb9, 0x7fff, 0x8) (async) preadv$auto(r7, &(0x7f00000006c0)={&(0x7f0000000640)="96e66f152e6c0a5b9962f0d7caf263282071b975aa7555f49a534bd8caee1a17ceeeed083f52c0965b94e929d4a804b88f2cad592882cf25f6312fe198f303e39308846196", 0x7520}, 0x7bb9, 0x7fff, 0x8) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000700)='/sys/devices/platform/vivid.0/video4linux/vbi5/power/control\x00', 0x200000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000740)='/sys/devices/platform/vivid.0/video4linux/vbi5/power/control\x00', 0x8) (async) write$auto(0xffffffffffffffff, &(0x7f0000000740)='/sys/devices/platform/vivid.0/video4linux/vbi5/power/control\x00', 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000780)='/proc/sys/net/ipv6/conf/ip6gre0/accept_ra_min_lft\x00', 0x400840, 0x0) read$auto_snd_pcm_f_ops_pcm1(r6, &(0x7f00000007c0)=""/4096, 0x1000) read$auto_gpiolib_fops_(r0, &(0x7f00000017c0)=""/24, 0x18) keyctl$auto_KEY_REQKEY_DEFL_THREAD_KEYRING(0x6, 0x1, r1, r5, 0x6) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000001800)='/proc/self/oom_adj\x00', 0x315b42, 0x0) renameat$auto(r6, &(0x7f0000001840)='./file0\x00', r0, &(0x7f0000001880)='./file0\x00') ioctl$auto_TUNGETVNETBE2(r6, 0x800454df, &(0x7f00000018c0)=0xb8b) (async) r10 = ioctl$auto_TUNGETVNETBE2(r6, 0x800454df, &(0x7f00000018c0)=0xb8b) getsockopt$auto_SO_BUF_LOCK(r10, 0xfffffffb, 0x48, &(0x7f0000001900)='/proc/sys/net/ipv6/conf/ip6gre0/accept_ra_min_lft\x00', &(0x7f0000001940)=0x8) (async) getsockopt$auto_SO_BUF_LOCK(r10, 0xfffffffb, 0x48, &(0x7f0000001900)='/proc/sys/net/ipv6/conf/ip6gre0/accept_ra_min_lft\x00', &(0x7f0000001940)=0x8) getsockopt$auto_SO_BPF_EXTENSIONS(r9, 0x6, 0x30, &(0x7f0000001980)='/\x00', &(0x7f00000019c0)=0x10) r11 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001a40), r0) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r10, &(0x7f0000001cc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001a80)={0x1e0, r11, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xe}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8001}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x40}, @NL802154_ATTR_SEC_DEVICE={0x1ac, 0x2e, 0x0, 0x1, [@typed={0x4, 0x143}, @nested={0x24, 0xa1, 0x0, 0x1, [@nested={0x4, 0x124}, @nested={0x4, 0x9}, @typed={0x8, 0xba, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0xa4}, @typed={0x9, 0x13, 0x0, 0x0, @str='-\xe6\xca!\x00'}]}, @nested={0x17d, 0x12f, 0x0, 0x1, [@generic="4b3ca58611aeda0427204c11559727f4ab4874194813a9f84b43dfe9d2f9ad081f1088bc5f598152aab465fcc728435c665e255b7aa5c244b3b21b9f4fe358f945b99e20cc7ca2784c05cdeb0fa714892804e38f0199270a81f5d6488a9333036da34521f59572d768aa662032ebd32f59c44a73b59b300b37f4122748ccaf23e1978db0bb452b462a206b3628891363a42ec9672b", @generic="6086c2cb4dfb6971a994dd8859c3cc63e16411c566c6e70e9049a4729de5bfc29f30250a5e5835d3cd52dec38806c4b43057ee20efe30c82affbbff82cf4e0ea40c4eafbae30cfdac18b531640539be80f41f6c48b6ca500e1762480958f1a5058c9a2d93d6cdf2257df7696b5ec087097097f7fb00523df65eff5a508fa1be691b6b342d6d54e5020d76a244a73cb6d7537bf618c48e796ee2a72c1fee09bdd8dbb28946f1965602039d1d36c116ce30237d5f04ffb92add149678c0675c8e66657f0c067857502e9e7b8c0e434655866defcfc", @typed={0xc, 0x88, 0x0, 0x0, @u64=0x8057}, @nested={0x4, 0x12e}]}]}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40}, 0x1) r12 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000001d00)='/sys/kernel/debug/netdevsim/netdevsim5/fib/fail_res_nexthop_group_replace\x00', 0x200, 0x0) getsockopt$auto_SO_PEERPIDFD(r12, 0xf0e, 0x4d, &(0x7f0000001d80)='#\x00', &(0x7f0000001dc0)=0x1) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r10, &(0x7f0000002100)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e40)={0x248, r11, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x12b, 0x2f, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @fd=r7}, @generic="3e8e6320fe0771ab0735432aab5c9682aa4222f4060180525933cb0753c20238e3da17e81b19459e7b9ca7589690abdf47255e2f336f57888db80b1b1add410e00f4d98b9cd290dde976cf793be179f006b36946578e79214b5e0101d48d2cb09c45c8cef598fb3165fed3450d86146673558afea53ca4c8879c442adcb46fc3e1bcf618287790c656341afd0d1807d4aa7123", @nested={0x8c, 0xbd, 0x0, 0x1, [@generic="5f901ad0f7ce2bb63e4277d4941712f9cee448fff952aeaa81b46e7689121ff814ffc4ec1664ed8a3840d4a0e64bef65d35cbb0f0d42d19960901cbcae1829ebbe66db79f313a4ebbcfbf336986f011accfc5fab49e7f16c1c814302c3652e9d7d686756d3a33caf34e79573d16d9149eb2daf52040a8921a7c72d701f8c46d646953ed124d5dc41"]}]}, @NL802154_ATTR_COORDINATOR={0x107, 0x1e, 0x0, 0x1, [@generic="a255c11a2614a01c3de8b0e004a9eaff9c9c1291ae68044fc107234dd9177f738991c0b2f6cddf1cd87456c70ba6baf53f1ca6df9af9b5834b749ffba2e85ba65417dd2fe95cd7bfd126a863a2229beafa170b9cc4015970b03b499872fab7ad4613ba25610fbec02072d6fe6d2c9b328b159301df2bef7a9138f4034c675b8c06c30924a1cc25f57c9650d60387056141465b7b259231eb60a19841c04f", @typed={0x4, 0x6c}, @generic="d2a57b2874a9b76386a097b582e3bc05ca76a13cafa1419bf9987229927f42990bdd2a9aa45c67dc6f251584841b3b21b21b207c43f0d31989b51c0c2182ced2b1dec1f93d50d638576ec5aac3eae6728de80466fd", @nested={0xc, 0xc4, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @uid=r1}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c080) (async) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r10, &(0x7f0000002100)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e40)={0x248, r11, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x12b, 0x2f, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @fd=r7}, @generic="3e8e6320fe0771ab0735432aab5c9682aa4222f4060180525933cb0753c20238e3da17e81b19459e7b9ca7589690abdf47255e2f336f57888db80b1b1add410e00f4d98b9cd290dde976cf793be179f006b36946578e79214b5e0101d48d2cb09c45c8cef598fb3165fed3450d86146673558afea53ca4c8879c442adcb46fc3e1bcf618287790c656341afd0d1807d4aa7123", @nested={0x8c, 0xbd, 0x0, 0x1, [@generic="5f901ad0f7ce2bb63e4277d4941712f9cee448fff952aeaa81b46e7689121ff814ffc4ec1664ed8a3840d4a0e64bef65d35cbb0f0d42d19960901cbcae1829ebbe66db79f313a4ebbcfbf336986f011accfc5fab49e7f16c1c814302c3652e9d7d686756d3a33caf34e79573d16d9149eb2daf52040a8921a7c72d701f8c46d646953ed124d5dc41"]}]}, @NL802154_ATTR_COORDINATOR={0x107, 0x1e, 0x0, 0x1, [@generic="a255c11a2614a01c3de8b0e004a9eaff9c9c1291ae68044fc107234dd9177f738991c0b2f6cddf1cd87456c70ba6baf53f1ca6df9af9b5834b749ffba2e85ba65417dd2fe95cd7bfd126a863a2229beafa170b9cc4015970b03b499872fab7ad4613ba25610fbec02072d6fe6d2c9b328b159301df2bef7a9138f4034c675b8c06c30924a1cc25f57c9650d60387056141465b7b259231eb60a19841c04f", @typed={0x4, 0x6c}, @generic="d2a57b2874a9b76386a097b582e3bc05ca76a13cafa1419bf9987229927f42990bdd2a9aa45c67dc6f251584841b3b21b21b207c43f0d31989b51c0c2182ced2b1dec1f93d50d638576ec5aac3eae6728de80466fd", @nested={0xc, 0xc4, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @uid=r1}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c080) 2.935429604s ago: executing program 3 (id=7215): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, 0x0, 0x0, 0x2}, 0xe3c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b00)=""/4077, 0xffd0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) socket(0x11, 0x2, 0x9) (async) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x7, 0x10000006, 0x48}) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb) (async) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0xac2e6400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xac2e6400, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) adjtimex$auto(0x0) (async) adjtimex$auto(0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2.893449327s ago: executing program 5 (id=7216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB="4e7b6bf4e87fa29684a216957f2e2d2c59f06bb622aec09b308415426f4c7e707f5f79ae8ff7383de7ddbe1cf839adc66a6a87cf21b4b2a3b28b4ea830783dc7f6bd8e92328addf1df2f92ea68670cfaf0c7d458cf1115446a1cdd708d9a7fedfd2c", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x2081) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x511c43, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x363003, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x14bb00, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = socket(0xa, 0x5, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getsockopt$auto(r4, 0x0, 0x50, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) 2.529885266s ago: executing program 3 (id=7217): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x701000, 0x0) close_range$auto(r0, 0x5, 0x0) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x408041, 0x0) (async, rerun: 64) epoll_create$auto(0x3e) (rerun: 64) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x2, &(0x7f0000000140)={{0x6782, 0x3}, {0x0, 0x3}, 0x5, 0xffff, 0x8, 0x100000000, 0x6, 0x606, 0x100000001, 0x9, 0x8, 0x3, 0xffffffff80000001, 0x454f, 0x1, 0xffffffffffff176f}) bpf$auto(0x0, 0x0, 0x6f3) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 32) futex_requeue$auto(0x0, 0x0, 0xfffffffe, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400001, 0x0) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) (async) socket(0x2, 0x1, 0x0) (async, rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/thread-self/net/sctp/remaddr\x00', 0x8200, 0x0) (async, rerun: 32) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/video9\x00', 0x20000, 0x0) (async, rerun: 32) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async, rerun: 32) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0xb, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0xff0f0000, 0x3, 0x1000000000000, 0x8000000008011, 0x3, 0x0) (async) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) (async) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0) 2.456152643s ago: executing program 3 (id=7218): rseq$auto(&(0x7f0000000000)={0x401, 0x401, 0x0, 0x6, 0xfffffffe, 0x1000, "2a9dd64827c6e0c8f3a6"}, 0x4000004, 0x0, 0x6) poll$auto(0x0, 0x0, 0x9f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0xfffffffc) io_uring_setup$auto(0x6, 0x0) mmap$auto_kernfs_file_fops_kernfs_internal(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x10010, 0xffffffffffffffff, 0x1) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0xd, 0x22020009, 0x1, 0xffffffffffffff50, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r0, &(0x7f0000000340)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x81) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x2}) setfsgid$auto(0x0) 2.445425671s ago: executing program 1 (id=7219): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) socket(0x11, 0x3, 0x9) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x81300, 0x0) (async) ioctl$auto_XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000180)={0x573e7328, @raw=0xaf99, @inferred=r1, 0x8000000000000001, 0x7, '\x00', {0x8000, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x352, 0x3, 0x43ff, {0x1, 0x3}, {0x2, 0x1ff}, {0x9b9, 0x9}, 0x0, 0x6, 0x1, 0x8, 0x1bdf, 0xba9, 0x5770, 0x101, 0xa, 0x3, '\x00', 0x3, 0x224, 0x3, 0x4}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x783a06, 0x0) (async) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9aa2738b", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r2, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x64008084}, 0x2000c082) (async, rerun: 32) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) 2.307082921s ago: executing program 2 (id=7220): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) recvmmsg$auto(r1, 0x0, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r1) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x13c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x115, 0x1, 0x0, 0x1, [@typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@remote}, @generic="173a06d2a7761cc587d433e3780ec1766fd1c925fe946a31c6543310550a6ce4d37fd6fcb37678017393c8f9c5a01624375b4e29293f715f22e5958ee4b488e6131e448334be94061b89e32d6921fdf8d8d206434f3d9afd01a90d2580c5fdb5553dc1f5430f33f09c141ab8d4414344f6b257daf89a467fe7c943b9f2642b8e31ba5a5219c03e008a21653ae65c8e2c6f753173ce6438a05e417ec7032caa889ba9d06f44929a202e32e762d786c5e472276f417cfbb44eb42862d9b9121d7dc7543bb1f2344cda00f59b9854a4d1ea0d330d8339f3a3b24cf174de71bd1b442cdde9cd6d9e3a3207a9371fe5", @nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x9c}]}, @nested={0x8, 0x14a, 0x0, 0x1, [@nested={0x4, 0xd6}]}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008810) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) fanotify_init$auto(0x65, 0x2) prctl$auto(0x6b, 0x4, 0x0, 0x400, 0xfffffffffffffff7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002d7000ffdbdf2505000000160011002f6465762fa26e642f6d6964694332443000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) 1.69766895s ago: executing program 3 (id=7221): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, &(0x7f0000000040)="88243316b796251e5330a2ac1cff371c2e37f69b3a95570efc173c3f03728ea659ceee95e9de3413ff9cab6c6eb7054828c1de1c5c") openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mprotect$auto(0x9, 0x4, 0xfffffffffffff988) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x17, r1, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129102, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @raw=0xce8}, 0x287) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/thermal/cooling_device0/max_state\x00', 0x500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000005c0)=""/8, 0x8) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r4 = socket(0x2, 0xa, 0x106) setsockopt$auto(r4, 0x6, 0xd, 0x0, 0x0) 1.584858592s ago: executing program 5 (id=7222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 1.502173564s ago: executing program 5 (id=7223): r0 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20d80, 0x0) mmap$auto(0x0, 0x66e9, 0x7ff, 0x10000080000eb3, r0, 0x80000000000000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) prctl$auto_PR_GET_TSC(0x19, 0xa, 0x37c3625c, 0x0, 0xd) (async) ioctl$auto(0xffffffffffffffff, 0x40104d14, r1) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) (async) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r2, 0xc2604110, 0x0) 1.40607687s ago: executing program 5 (id=7224): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8002, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000004c0)=""/45, 0x2d) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x322f02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek$auto(r4, 0x7fd, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r5, 0x0, 0x400007ffff000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x2) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_map_fd=r0}, 0xa3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) getcpu$auto(&(0x7f0000001140), 0x0, 0x0) getsockopt$auto(r2, 0x3, 0x4, &(0x7f00000002c0)='/sys/devices/pci0000:00/waiting_for_supplier\x00\xe9\xa4\xdeE\x8e\x82\xf2\x12\x98\xcfTJ_[\xcb\xe3\x00O\x15\xda\x16iW\x12\xca5TnS\x89\x9a\xa7\xb8^\xee\xa9\xa9\xbc\t\xd1!\xeb\xe4\x11\xf6\xe1P\\C\xb4\xf9\x80\"3!\xcfd~\xee\x7f9\xc53\xf6c\xaco\xfe\xd0\xad\'2\x06\xfe\x15\xd5)\xe5\xa6t\x960\x06\x04\xea$S\'\xc9\xcd\xac*\t\x81\xd9x/m\xadrf\x9be\xb7\xe9D*z=\xa8\xa6\xc0\x98\xd70\x01\xc1\xb2\xabU\x13?\xa6w\xd5\x84\xca\xbe\xe4R\xf96O7z#\x13/\x89\xed!7\xd3\x99KM\x05@\x9eO\x9bPtR\xa3{\xe9m\xf7$\x12\xaa\xb1\x91:\x1f\xce\x93[', &(0x7f0000000180)=0x20000009) 1.219641395s ago: executing program 1 (id=7225): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r2 = ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5) msgctl$auto_IPC_SET(0x4, 0x1, &(0x7f00000000c0)={{0x4, 0xffffffffffffffff, 0xee01, 0x1b, 0xfffff801, 0x8, 0x7}, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x9, 0x1, 0x80000000, 0x800, 0xf, 0xb99, 0x8, 0x1, 0x100, @inferred=r0, @raw=0x5}) r4 = getegid() setregid$auto(r4, r4) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x10001, 0x3, 0xfffffffffffffff9, 0x2, r3, r4, 0x0, 0x9e92, 0x29, 0x5, 0x0, 0x2, 0x6, 0x80000000, 0x80000000, 0xb}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r5, 0x402, 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r6, 0x402, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r7, 0x0, 0x5) r8 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/options/test_nop_accept\x00', 0x5, 0x0) write$auto(r8, 0x0, 0x6) ioctl$auto_TIOCGSID(r2, 0x5429, &(0x7f00000002c0)="dc8c9021f6efaa7359bd7ad9798e58f75529f1df7ecd6f16e655347659555f630949f7bd91b816c7d79f4062316a3420fe1d925a21ba9cb628b432b2df9aad54b00a7aa6a4736ee2260d59e6c879f7c7d3460aafc0afac507386ef4497642c00c21d9f7cd30ceadd8c764fbebc9187bffe6f227724cbf98492f030f04119216b069b9a1d23835114aa754ab6ade067fd701683804d842baba28777b0cb0548be68322cca0a9baf01b13250cefdc646261d3e533ccea61db82364d7eea10b18d09315a43387072201aaae2919521ff95456820c078759b70511b897ff74d3fa55720e9ab99e75883c62b0226ae2cd3c6ccab904ed361736944b8de3") poll$auto(0x0, 0x4, 0x100004) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) 912.213422ms ago: executing program 5 (id=7226): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw, 0x3, 0x9, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0x40000000c4, 0x6, 0x6, 0x4, 0x3, 0x5, 0x1, 0x3, 0x8, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x7, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0x6, 0x5, 0x71, 0x0, 0x8, 0x2, 0xfffffffffffffff8, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x0, 0x5, 0x7, 0x0, 0x6, 0x80, 0x1ff, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0xb, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x1000000008000002, 0x6, 0x10001, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x200000000002, 0x7, 0x100, 0x14b, 0xd2, 0x45f3, 0x0, 0x4000000000000, 0x4, 0xf, 0x8001, 0xfffffffffffffffc, 0xffffffffffffffff, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x4, 0xc9a, 0xd09, 0x40, 0x2, 0xffbfffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x8], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0xa, 0x3, 0x9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x9, 0x7f) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfdef) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x8, 0xb}, 0x800009}, 0x3, 0x20000000) socket(0x2, 0x1, 0x106) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) listen$auto(0x3, 0x400000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r2) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x60640, 0x0) 717.736079ms ago: executing program 3 (id=7227): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0xfffffffe}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10004, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x2000000000, 0x20005, 0xdf, 0xf39, r1, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x0, 0x0) fsconfig$auto_SHMEM_HUGE_ALWAYS(r4, 0x7f, &(0x7f0000000180)=']\x00', &(0x7f00000001c0)="375dcb1378652de07317a621cf0f946ca73ccbcca7dbaf06c4229c64a968395fea83676e3e4db20193308eb2b88ef1fb65251d8895496129726825abfa28772b3254b8560479f984fd7ac2e461a71e27b909740468f3403619f8f7b0b1fe", 0x1) ioctl$auto(0x3, 0xae41, r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x2c, &(0x7f0000000880)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000001ac0)=ANY=[], 0x830}, 0x1, 0x0, 0x0, 0x84}, 0x10) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) close_range$auto(0x2, r2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x2000000, 0x0, 0x2], {0x6, 0x6, 0xf, 0x2a3, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) mremap$auto(0x1, 0x4, 0x3, 0x50a, 0x6) 329.26937ms ago: executing program 1 (id=7228): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mlock2$auto(0x1, 0x8001, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r4, 0x0, 0x20) (async) ioctl$auto_TIOCNOTTY2(r2, 0x5422, &(0x7f0000001080)="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") writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x3) (async) r5 = accept$auto(r4, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x24008010) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) (async) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r1) (async) msgctl$auto_MSG_INFO(0x0, 0xc, &(0x7f0000000240)={{0x1, 0xee01, 0xffffffffffffffff, 0xad3, 0xc0c, 0x976, 0x7}, &(0x7f0000000180)=0x1, &(0x7f00000001c0), 0xfffffffffffffff9, 0xbabb, 0x7fff, 0x8, 0x4, 0x9, 0x5, 0x90, @inferred=0x0, @inferred=0xffffffffffffffff}) (async) r9 = getuid() ioctl$auto_XFS_IOC_ALLOCSP64(r5, 0x40305824, &(0x7f00000002c0)={0xb, 0xffff, 0x7f0, 0x3ffc00000000000, 0x4}) (async) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) (async) sysfs$auto(0x2, 0x1e, 0x0) (async) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) (async) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x6b) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000300)={0x6, @inferred=r5, @inferred=r2, 0x4, 0x0, '\x00', {0x1, 0x5, 0x200, 0xee00, 0x0, 0x3, 0x7fff, 0x70, {0x0, 0x9}, {0x3ff, 0xfe9a}, {0x100000000, 0x101}, 0xd619, 0xc8d8, 0x8000, 0x3, 0x3, 0x0, 0x400, 0x37, 0x34, 0x69c, '\x00', 0x818, 0x3, 0x54, 0x4}}) (async) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000180)=@link_detach, 0x3) (async) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000004a40)=ANY=[@ANYBLOB="84290000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0400308004003f80bfb408211d4de66405003b5c96d1910b37444c9a6fd4f60c089244b944de13dc08d42fdf3dd2b40ea288bc5f02f479ca6421d4494c7cbbb5b8bfa65d4aa42ccf60a212ee061be684e82ec866cc840ce39c36f1d49ac957d901438008001400", @ANYRES32=r1, @ANYBLOB="040082800c002b0008000000000000000800c200", @ANYRES32=r8, @ANYRESHEX, @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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"/780, @ANYRES32=r8, @ANYBLOB="0c00340003000000000000000800eb0004000000d1cd898073a93d4caad49bdb852b329572b9518383c00798b07930b1285eaba56460ac2b4f49bc60743a2bbe7ec542bae3e1212215b6ddc9dd9d826fe264a96d5c5607070d20767f11ffe384f04798fe90eece318ac1c9c9096133683bc3d629fe2c1fda6cd7ef2fc400000008001100", @ANYRESHEX=r0, @ANYBLOB="08008000e68568fd7cb6f7e85529ac5256233baca8ee896ae7ddb14da42d48c3584b3cdfffda8acc331df8e5a4156223612405452f667fdb8ebb7455a50a0f4859d80047b24ea3a4634de958f7786b7b8ecfe889984f08bea5e0e56e89519f626b3148d84d2678d4ff58d9a4ca8df80a20e932fb230cb25e427b9331b683b17a350b0da1f5a9786eb5527c54a6e0a277dde69f3f03242615f78f485213e281c2", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x2984}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x306, 0xe8, 0x1, 0x6, &(0x7f0000000040)}) 210.087498ms ago: executing program 1 (id=7229): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0xdb, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x17, 0x2, 0x50) epoll_create$auto(0x4) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000580)=ANY=[@ANYBLOB="f4040000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf25020000005302038004003d00be00ec00fc6a29624f9ebc1b51d6e296c213b65370f3a0e6c54f1dc0ee8d518c3a060e5ca3840f2c94e6c0a8973e88e01c33a28e5bc0df82d03b2bc0dc2beda703deab2a26fd26a57bb7478bf35e6c47ca1ca9bd408020d54fa9bd080c55e3bdadb8a5ccb1ab670fe490d6849be5d35864c92f66b74fcc7e0c02228e43080e1cee5d76aced239dce5c776e66894c8e89191d868c65c827869cad457dcbc6b75b6d46b9f855a75ef0b666e32d7d9514575d5e26083a2eb630019ff0d3c4700000ca00ec00efdf58efaeac2814692a32efb76ab4c892aeb9939783b13d26e47fcb1bece5ade052b201823b0200d5fcda2e5c2fd9b55a12072912f089c5846b66782e2bca5e4d6063424a215595a2a970d1714305979d009c056f99e361b83f8392bb349e0bf6b2edc9875a4aa4250895dd0724cd391b91d4ac03808273dfdf8474e6157db581320a0b70b6285eb9a3274ced150d18addd727e91e6a32a37425df3ef0bb01f42b7abd42c6514b707f389026bd65f49c91ac87d5c17f38511bcba5a518103a3e0707521729e0000bb69566ef3398e7dabf98d7274866c1257fef14e47f5218d1420fdb4eba721eb41b2c57a2c7748e51cfd555ad550be3dfaadc368e6a71dcba2bd2328619f3a2c32236f4984ea4865f65dbb86bd0fb4efe990e1bf582adc20d1ef454d4005a8d50bcb485e8b0a5a138bb809d4c1ff2cbda50f92f1d94b78fbdd5991f4e42a7f6952c9a9f776d7215fec3ca7d6a2a8046ce080840cb837175167f4ecdd015a7cd9efbe8f1c00068008004100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="6d58384d759afa8ef5773fba2c8ce7c31e57322af5f6a376d39c00ed37c45122dd8255da7e0a77aedad459d3c20dc80d74e9a9fa140e09b528b83ee4fbf1b3d1120f879356f051192217e01999a04ca9644163c11c05652e2cf7b4bc2851721d7e22f239bf1a43b8412c017614a9613b4f196705704e0e6a0968684d72f02e0b55a2c589d44bbe82c9792c27873b0d96ae8954d1f55bbfa98563ff8630a8788ee21bff6da9040fe189f0b5c95f2f2be4538fc0d51ca13f5e8c417ffe6daf7f36e4ab1aabc10ecee64bb2f8000000000000533bcfc3cb80955951000008000100"/240, @ANYRES32=0x0, @ANYBLOB], 0x4f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000890) write$auto(0x3, 0x0, 0x5c8) 109.515031ms ago: executing program 1 (id=7230): bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r2) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x2000c0c0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={r1, &(0x7f0000000000)="3761f6ea8f181ef601f5a8", 0x3, &(0x7f0000000080)="99dc9e0d", 0x58, &(0x7f00000000c0)="4e35de6324c663c31d79c161f016c5bc57d3aaa2a4ba1bbd63811f07a9e018fa4c08e1b7ea1556d78816e10e67a6130b3442d26117dfd18543006b8ab5e8aa1adb0acd0bf412a62ae47616377bdcb60c80579aa054fec12677682b598d239746b2e5e782dcc3f461abc538c336ec9c0969e67e737997bf595a9d5aceb17261c2604e4d4aff0e5db507a2721f4d10accca4e6fb5964e351b7e8a4cb1ebcd890aa89aca96fa8e7753f8eb9495dadfc1b7843780da64af34481d88e268450a0c0168e23e1801f587e052030b7e702bc38df8ac4deb2d4afa5dcb5d26caeec7e", &(0x7f00000001c0)=0x2}) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) r6 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) read$auto_ecryptfs_dir_fops_ecryptfs_kernel(r6, &(0x7f00000003c0)=""/17, 0x11) close_range$auto(r4, r1, 0x46) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00'}) sendmsg$auto_ILA_CMD_FLUSH(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={0x0}}, 0x0) r7 = clone3$auto(0x0, 0x7) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x55c, r0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_FLAGS={0x9e, 0x11, 0x0, 0x1, [@typed={0x14, 0x12f, 0x0, 0x0, @ipv6=@private0}, @typed={0x4, 0xf5}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0xf1f}, @generic="7df9c3dd8865a201168b61490beb081c13646b5b2e58aa1bf9d8103de324a3026fb0092e23915bf01b641cb240d2e3fe18df6b5427c8b6177adb0fdf9164fdaf22d94712bdb60ed6023001f174136fe0915bf78ed94a7aac74c4586d42f369c5091e3892d4532ed923df3a0cdbab9ef3496a1fe7a018"]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x208, 0x6e, 0x0, 0x1, [@typed={0x4, 0x115}, @generic="e0d6a6e42e97f5920bf428654311391f7dca4a843b487eebb97de30c946ced359ff678c32bb686beb795e1436e84a84228fea3c33d9f871541f672cc21d6c962e4405e38409e11b5d92a34af49f0175aeced6191f12782ffa39e35419e04e6382eb83e02243bb2c09386508e", @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@empty}, @typed={0x9, 0x35, 0x0, 0x0, @str='\x8b*[\x7f\x00'}, @typed={0x37, 0x91, 0x0, 0x0, @str='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00'}, @nested={0x20, 0x131, 0x0, 0x1, [@nested={0x1c, 0x76, 0x0, 0x1, [@typed={0xc, 0xe6, 0x0, 0x0, @u64=0x40}, @nested={0x4, 0x6}, @nested={0x4, 0xe3}, @nested={0x4, 0x95}]}]}, @nested={0x11b, 0x136, 0x0, 0x1, [@nested={0x4, 0x14b}, @generic="fa8e1ab47926cf4361a000380045fe01000cc6159ab518361e029a0ad4bf0099559f4f13e6870847256ca7c4ce7d9c597d348acdc15de96d3c03e894e8", @typed={0x8, 0xc7, 0x0, 0x0, @pid=r7}, @generic="d2c6af7cc7e4d88b134c", @typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@loopback}, @typed={0x3f, 0x7, 0x0, 0x0, @str='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00'}, @nested={0x4, 0x14e}, @generic="35f1e70f653b87b76e6860fa1f084befd071e287c4665741aa0c7fb368cf2705342a05d211194150c85acd52c888719f43288bf9c11e47919337ce02476e17823b445071a6191dd7c5b7bfa6286fac11c69b6f365ac1dd8f0f6b0f1a6d18d7ebe32f980258208ede7e79303b"]}]}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x88}, @NL80211_ATTR_BSS_SELECT={0x1b0, 0xe3, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @fd}, @generic="af1e682fce349a85172f5a60866dfcfdf16adcb755514f234a0bf500c879386a123b7826aaf9f659c47b6b1fc1f3e4425096090fa6a93d22198b683aca6aaf977123823038f0d4fcc734cab716bde67a46286c3c2efd82ae853ffbdc4e1c11c3d009e26d08cf5048ed8c4014c45af784f61807d31bb3475eb358c8fda40ebdd6a4ada3662280944d865e0c6efbe96b590959067830bc82483c3e0706a7790082f391ddbfdb3f3a7ebde7", @generic="21624d50d00527067c07087bc9376dd2cfa5f18adf556430a6700a5caff6368d1a90fb1a074d17d88e95e7ddc1e26b2d036c7095beb3d7f92e3c74e678d475b9f004bd754604e8119d877759dd1724c6c1abc0dbb243abc0bc4f76f6781d76e9befd25a43e381ca8f503dde6b7309261cb6cfefefd30f1520a6a85424da6ffd48779d1bfb18a8c0d32013e7e31222fee3f903dc08421d7d10493ab5f1c73fd23d156906118db75d44c3ae2805e585374b47510b8ecc9e4611d9844b36dad8827579d5b1374b438c42c522daf27160540c8a7", @nested={0x28, 0x151, 0x0, 0x1, [@nested={0x4, 0xe6}, @typed={0x14, 0x54, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0xf}}, @typed={0x8, 0xd8, 0x0, 0x0, @fd}, @nested={0x4, 0xaa}]}]}, @NL80211_ATTR_BSSID={0xe7, 0xf5, "71efbb9fb85ede73bda9163ed80a606cfd8f117e2fd03ff35c744b3b5508a19b9a90c5f03a7e05cfb3cb9dfe2b9048e60040c606592e1baf28e05e92de44e7042c24e9c5dd93142db51f46e695d0c4c0137593de85841349f6d29dab39b74f2e96008911e0e9e8ff728861877390ffa65dcfc559729d171b108bff93b335efc1f3406b5c2844c0861fc89eba0b7b06aec947aaaa6fd15112dabfdfc071b1667a95a31e36b041e350a96e760260c1b0968b9b5f31bb8616a91b46d7f9250bf8005c62a5c7c810586641eafd4597c04114a775015f39df99b823103a79d13e146c5158d5"}]}, 0x55c}, 0x1, 0x0, 0x0, 0x1}, 0x400c1) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r8, &(0x7f0000003900)='\t', 0x1) openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim0/bpf_bind_verifier_delay\x00', 0x1c1800, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)=')@-!\x00', 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) 0s ago: executing program 1 (id=7231): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) bpf$auto(0x0, 0x0, 0xa3) sendfile$auto(r0, r1, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x3496c2, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/bonding/bond0\x00', 0x18b000, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000440)={{@raw=0xfff, 0x1, 0x6, 0x2, "e927783d468fa2e92fe8ec7a46cbb746439daa1ee1aa0000000000040000660e070100e000000000008000"}, 0xb, 0x2, 0x6, @raw=0xfffffffa, @enumerated={0x201, 0xe09, "cbf5c8cceb3453062c6bac6965a6ed512426b4240e4345075dcfb2d29565b83e770ff228ade0c196935e7c381d2cba8aadfc28f8f123652b5fbabea3e993248f", 0x9, 0x9f6}, "a4699d30a05edbe0d28473c399a7dc1d7de94b4123f970bedd3460c667373fcc66b584d81592f6ab606c276807000000000000006e76803400"}) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r2, 0x4004ae8b, 0x0) kernel console output (not intermixed with test programs): ___pte_offset_map+0x175/0x380 [ 1242.701183][T25452] __handle_mm_fault+0x19cb/0x2bb0 [ 1242.701198][T25452] ? __pfx___handle_mm_fault+0x10/0x10 [ 1242.701212][T25452] ? __pfx_vma_start_read+0x10/0x10 [ 1242.701225][T25452] ? lock_vma_under_rcu+0x176/0x580 [ 1242.701237][T25452] ? rcu_is_watching+0x12/0xc0 [ 1242.701256][T25452] ? __pfx___do_sys_wait4+0x10/0x10 [ 1242.701271][T25452] handle_mm_fault+0x3fe/0xad0 [ 1242.701285][T25452] do_user_addr_fault+0x60c/0x1370 [ 1242.701302][T25452] ? rcu_is_watching+0x12/0xc0 [ 1242.701320][T25452] exc_page_fault+0x64/0xc0 [ 1242.701339][T25452] asm_exc_page_fault+0x26/0x30 [ 1242.701353][T25452] RIP: 0033:0x7f0cc9fb75f0 [ 1242.701365][T25452] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 1242.701378][T25452] RSP: 002b:00007ffe8b42dd68 EFLAGS: 00010246 [ 1242.701389][T25452] RAX: 0000000000000000 RBX: 000000000000071d RCX: 00007f0cc9f85917 [ 1242.701399][T25452] RDX: 0000000040000001 RSI: 00007ffe8b42dddc RDI: 0000000000000000 [ 1242.701407][T25452] RBP: 00007ffe8b42dddc R08: 0000000000000000 R09: 0000000000000000 [ 1242.701416][T25452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1242.701424][T25452] R13: 00000000000927c0 R14: 0000000000130b10 R15: 00007ffe8b42de30 [ 1242.701437][T25452] [ 1242.701442][T25452] memory: usage 3072kB, limit 3072kB, failcnt 86038 [ 1243.600015][ T3033] FAULT_INJECTION: forcing a failure. [ 1243.600015][ T3033] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1243.624191][ T3033] CPU: 0 UID: 0 PID: 3033 Comm: syz.3.6869 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1243.624223][ T3033] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1243.624232][ T3033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1243.624240][ T3033] Call Trace: [ 1243.624245][ T3033] [ 1243.624251][ T3033] dump_stack_lvl+0x16c/0x1f0 [ 1243.624276][ T3033] should_fail_ex+0x512/0x640 [ 1243.624295][ T3033] get_futex_key+0x1d0/0x15f0 [ 1243.624312][ T3033] ? __pfx_get_futex_key+0x10/0x10 [ 1243.624329][ T3033] futex_wait_setup+0x9d/0x570 [ 1243.624349][ T3033] __futex_wait+0x193/0x2f0 [ 1243.624366][ T3033] ? __pfx___futex_wait+0x10/0x10 [ 1243.624385][ T3033] ? __pfx_futex_wake_mark+0x10/0x10 [ 1243.624405][ T3033] ? futex_wake+0x456/0x530 [ 1243.624421][ T3033] ? rcu_is_watching+0x12/0xc0 [ 1243.624439][ T3033] ? futex_private_hash_put+0x160/0x1b0 [ 1243.624454][ T3033] futex_wait+0xe8/0x380 [ 1243.624471][ T3033] ? __pfx_futex_wait+0x10/0x10 [ 1243.624492][ T3033] do_futex+0x229/0x350 [ 1243.624506][ T3033] ? __pfx_do_futex+0x10/0x10 [ 1243.624523][ T3033] __x64_sys_futex+0x1e0/0x4c0 [ 1243.624539][ T3033] ? __pfx___x64_sys_futex+0x10/0x10 [ 1243.624554][ T3033] ? xfd_validate_state+0x61/0x180 [ 1243.624569][ T3033] do_syscall_64+0xcd/0xf80 [ 1243.624589][ T3033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.624603][ T3033] RIP: 0033:0x7fdec058f7c9 [ 1243.624614][ T3033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.624628][ T3033] RSP: 002b:00007fdec13430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1243.624642][ T3033] RAX: ffffffffffffffda RBX: 00007fdec07e6098 RCX: 00007fdec058f7c9 [ 1243.624652][ T3033] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdec07e6098 [ 1243.624661][ T3033] RBP: 00007fdec07e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.624669][ T3033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.624678][ T3033] R13: 00007fdec07e6128 R14: 00007ffda2cde210 R15: 00007ffda2cde2f8 [ 1243.624691][ T3033] [ 1244.037199][T25452] memory+swap: usage 5512kB, limit 9007199254740988kB, failcnt 0 [ 1244.044930][T25452] kmem: usage 2912kB, limit 9007199254740988kB, failcnt 0 [ 1244.052065][T25452] Memory cgroup stats for /syz2: [ 1244.052151][T25452] cache 0 [ 1244.060030][T25452] rss 0 [ 1244.062767][T25452] rss_huge 0 [ 1244.065937][T25452] shmem 0 [ 1244.068875][T25452] mapped_file 0 [ 1244.072307][T25452] dirty 0 [ 1244.075218][T25452] writeback 0 [ 1244.080018][T25452] workingset_refault_anon 20383 [ 1244.084894][T25452] workingset_refault_file 14817 [ 1244.095096][T25452] swap 2498560 [ 1244.098499][T25452] swapcached 163840 [ 1244.102297][T25452] pgpgin 2200775 [ 1244.105828][T25452] pgpgout 2287274 [ 1244.109472][T25452] pgfault 1013011 [ 1244.113078][T25452] pgmajfault 5072 [ 1244.116701][T25452] inactive_anon 45056 [ 1244.120665][T25452] active_anon 118784 [ 1244.124539][T25452] inactive_file 0 [ 1244.128195][T25452] active_file 0 [ 1244.131631][T25452] unevictable 0 [ 1244.135100][T25452] hierarchical_memory_limit 3145728 [ 1244.140413][T25452] hierarchical_memsw_limit 9223372036854771712 [ 1244.146628][T25452] total_cache 0 [ 1244.150064][T25452] total_rss 0 [ 1244.153323][T25452] total_rss_huge 0 [ 1244.159642][T25452] total_shmem 0 [ 1244.163097][T25452] total_mapped_file 0 [ 1244.167147][T25452] total_dirty 0 [ 1244.170598][T25452] total_writeback 0 [ 1244.174376][T25452] total_workingset_refault_anon 20383 [ 1244.179776][T25452] total_workingset_refault_file 14817 [ 1244.185122][T25452] total_swap 2498560 [ 1244.189391][T25452] total_swapcached 163840 [ 1244.193715][T25452] total_pgpgin 2200775 [ 1244.200846][T25452] total_pgpgout 2287274 [ 1244.205002][T25452] total_pgfault 1013011 [ 1244.209445][T25452] total_pgmajfault 5072 [ 1244.213579][T25452] total_inactive_anon 45056 [ 1244.219433][T25452] total_active_anon 118784 [ 1244.223838][T25452] total_inactive_file 0 [ 1244.228177][T25452] total_active_file 0 [ 1244.232201][T25452] total_unevictable 0 [ 1244.236363][T25452] anon_cost 17 [ 1244.239713][T25452] file_cost 0 [ 1244.253157][T25452] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6861,pid=3005,uid=0 [ 1244.285707][T25452] Memory cgroup out of memory: Killed process 3005 (syz.2.6861) total-vm:106264kB, anon-rss:1268kB, file-rss:21800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1244.430034][ T3029] netlink: 334 bytes leftover after parsing attributes in process `syz.5.6862'. [ 1244.536564][ T3039] FAULT_INJECTION: forcing a failure. [ 1244.536564][ T3039] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.590626][ T3039] CPU: 0 UID: 0 PID: 3039 Comm: syz.1.6871 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1244.590659][ T3039] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1244.590669][ T3039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1244.590677][ T3039] Call Trace: [ 1244.590682][ T3039] [ 1244.590688][ T3039] dump_stack_lvl+0x16c/0x1f0 [ 1244.590713][ T3039] should_fail_ex+0x512/0x640 [ 1244.590733][ T3039] should_failslab+0xc2/0x120 [ 1244.590754][ T3039] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1244.590770][ T3039] ? lock_release+0x201/0x2d0 [ 1244.590783][ T3039] ? __d_alloc+0x35/0xa80 [ 1244.590804][ T3039] ? __d_alloc+0x35/0xa80 [ 1244.590821][ T3039] __d_alloc+0x35/0xa80 [ 1244.590840][ T3039] d_alloc+0x4a/0x1e0 [ 1244.590874][ T3039] lookup_one_qstr_excl+0x175/0x250 [ 1244.590889][ T3039] start_dirop+0x59/0xb0 [ 1244.590906][ T3039] simple_start_creating+0xf4/0x100 [ 1244.590925][ T3039] ? __pfx_simple_start_creating+0x10/0x10 [ 1244.590942][ T3039] ? do_raw_spin_unlock+0x172/0x230 [ 1244.590958][ T3039] ? simple_pin_fs+0xa3/0x190 [ 1244.590973][ T3039] debugfs_start_creating.part.0+0x82/0x190 [ 1244.590993][ T3039] __debugfs_create_file+0xb3/0x530 [ 1244.591021][ T3039] debugfs_create_file_full+0x41/0x60 [ 1244.591041][ T3039] kvm_dev_ioctl+0x14ca/0x1a80 [ 1244.591064][ T3039] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1244.591085][ T3039] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1244.591102][ T3039] __x64_sys_ioctl+0x18e/0x210 [ 1244.591118][ T3039] do_syscall_64+0xcd/0xf80 [ 1244.591138][ T3039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.591153][ T3039] RIP: 0033:0x7fac9c98f7c9 [ 1244.591164][ T3039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.591178][ T3039] RSP: 002b:00007fac9d8ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.591191][ T3039] RAX: ffffffffffffffda RBX: 00007fac9cbe5fa0 RCX: 00007fac9c98f7c9 [ 1244.591201][ T3039] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000b [ 1244.591209][ T3039] RBP: 00007fac9ca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1244.591218][ T3039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.591227][ T3039] R13: 00007fac9cbe6038 R14: 00007fac9cbe5fa0 R15: 00007ffe0a47ca28 [ 1244.591241][ T3039] [ 1245.373298][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.393069][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.708752][ T3059] Loading of unsigned module is rejected [ 1246.150241][ T3077] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6884'. [ 1248.190960][ T3129] FAULT_INJECTION: forcing a failure. [ 1248.190960][ T3129] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.289837][ T3129] CPU: 0 UID: 0 PID: 3129 Comm: syz.1.6896 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1248.289870][ T3129] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1248.289878][ T3129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1248.289888][ T3129] Call Trace: [ 1248.289893][ T3129] [ 1248.289898][ T3129] dump_stack_lvl+0x16c/0x1f0 [ 1248.289922][ T3129] should_fail_ex+0x512/0x640 [ 1248.289944][ T3129] should_failslab+0xc2/0x120 [ 1248.289964][ T3129] kmem_cache_alloc_noprof+0x83/0x770 [ 1248.289979][ T3129] ? __pfx_map_id_range_down+0x10/0x10 [ 1248.289998][ T3129] ? security_inode_alloc+0x3b/0x2b0 [ 1248.290016][ T3129] ? security_inode_alloc+0x3b/0x2b0 [ 1248.290032][ T3129] security_inode_alloc+0x3b/0x2b0 [ 1248.290048][ T3129] inode_init_always_gfp+0xced/0x1040 [ 1248.290068][ T3129] alloc_inode+0x86/0x240 [ 1248.290081][ T3129] new_inode+0x22/0x1c0 [ 1248.290095][ T3129] __debugfs_create_file+0x105/0x530 [ 1248.290114][ T3129] debugfs_create_file_full+0x41/0x60 [ 1248.290133][ T3129] kvm_dev_ioctl+0x14ca/0x1a80 [ 1248.290153][ T3129] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1248.290172][ T3129] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1248.290189][ T3129] __x64_sys_ioctl+0x18e/0x210 [ 1248.290204][ T3129] do_syscall_64+0xcd/0xf80 [ 1248.290224][ T3129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.290238][ T3129] RIP: 0033:0x7fac9c98f7c9 [ 1248.290248][ T3129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1248.290262][ T3129] RSP: 002b:00007fac9d869038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.290276][ T3129] RAX: ffffffffffffffda RBX: 00007fac9cbe6180 RCX: 00007fac9c98f7c9 [ 1248.290285][ T3129] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000b [ 1248.290294][ T3129] RBP: 00007fac9ca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1248.290302][ T3129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.290309][ T3129] R13: 00007fac9cbe6218 R14: 00007fac9cbe6180 R15: 00007ffe0a47ca28 [ 1248.290322][ T3129] [ 1248.290337][ T3129] debugfs: out of free dentries, can not create file 'mmu_shadow_zapped' [ 1248.936247][ T3140] random: crng reseeded on system resumption [ 1248.948268][ T3140] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1248.985978][ T3140] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1249.019619][ T3140] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1249.059277][ T3140] PM: hibernation: Basic memory bitmaps created [ 1249.102158][ T3141] PM: hibernation: Basic memory bitmaps freed [ 1249.504628][T23788] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1249.512209][T23788] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1249.522625][T23788] CPU: 0 UID: 0 PID: 23788 Comm: kworker/u11:4 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1249.522660][T23788] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1249.522668][T23788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1249.522678][T23788] Workqueue: hci0 hci_rx_work [ 1249.522707][T23788] Call Trace: [ 1249.522712][T23788] [ 1249.522718][T23788] dump_stack_lvl+0x16c/0x1f0 [ 1249.522740][T23788] sysfs_warn_dup+0x7f/0xa0 [ 1249.522755][T23788] sysfs_create_dir_ns+0x24b/0x2b0 [ 1249.522769][T23788] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1249.522783][T23788] ? kobject_add_internal+0x25b/0x9b0 [ 1249.522797][T23788] ? lock_release+0x201/0x2d0 [ 1249.522810][T23788] ? do_raw_spin_unlock+0x172/0x230 [ 1249.522825][T23788] kobject_add_internal+0x2c4/0x9b0 [ 1249.522839][T23788] kobject_add+0x16e/0x240 [ 1249.522852][T23788] ? __pfx_kobject_add+0x10/0x10 [ 1249.522864][T23788] ? lock_release+0x201/0x2d0 [ 1249.522876][T23788] ? do_raw_spin_unlock+0x172/0x230 [ 1249.522891][T23788] ? kobject_put+0xab/0x590 [ 1249.522905][T23788] device_add+0x288/0x1950 [ 1249.522918][T23788] ? __pfx_dev_set_name+0x10/0x10 [ 1249.522932][T23788] ? __pfx_device_add+0x10/0x10 [ 1249.522944][T23788] ? mgmt_send_event_skb+0x2fb/0x460 [ 1249.522964][T23788] hci_conn_add_sysfs+0x17e/0x230 [ 1249.522983][T23788] le_conn_complete_evt+0x11ed/0x1f20 [ 1249.523003][T23788] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1249.523019][T23788] ? __pfx_bt_warn+0x10/0x10 [ 1249.523036][T23788] hci_le_conn_complete_evt+0x23c/0x370 [ 1249.523055][T23788] hci_le_meta_evt+0x357/0x5e0 [ 1249.523074][T23788] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1249.523092][T23788] hci_event_packet+0x685/0x11c0 [ 1249.523109][T23788] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1249.523128][T23788] ? __pfx_hci_event_packet+0x10/0x10 [ 1249.523144][T23788] ? kcov_remote_start+0x34d/0x670 [ 1249.523161][T23788] ? rcu_watching_snap_stopped_since+0x70/0x110 [ 1249.523182][T23788] ? rcu_is_watching+0x12/0xc0 [ 1249.523201][T23788] hci_rx_work+0x2c9/0xeb0 [ 1249.523219][T23788] process_one_work+0x9ba/0x1b20 [ 1249.523236][T23788] ? __pfx_rxrpc_service_connection_reaper+0x10/0x10 [ 1249.523256][T23788] ? __pfx_process_one_work+0x10/0x10 [ 1249.523272][T23788] ? assign_work+0x1a0/0x250 [ 1249.523285][T23788] worker_thread+0x6c8/0xf10 [ 1249.523301][T23788] ? __kthread_parkme+0x19e/0x250 [ 1249.523320][T23788] ? __pfx_worker_thread+0x10/0x10 [ 1249.523333][T23788] kthread+0x3c5/0x780 [ 1249.523345][T23788] ? __pfx_kthread+0x10/0x10 [ 1249.523356][T23788] ? ret_from_fork+0x7a/0xb10 [ 1249.523370][T23788] ? rcu_is_watching+0x12/0xc0 [ 1249.523387][T23788] ? rcu_is_watching+0x12/0xc0 [ 1249.523404][T23788] ? __pfx_kthread+0x10/0x10 [ 1249.523417][T23788] ret_from_fork+0x983/0xb10 [ 1249.523430][T23788] ? __pfx_ret_from_fork+0x10/0x10 [ 1249.523443][T23788] ? __switch_to+0x7af/0x10d0 [ 1249.523459][T23788] ? __pfx_kthread+0x10/0x10 [ 1249.523472][T23788] ret_from_fork_asm+0x1a/0x30 [ 1249.523498][T23788] [ 1249.523574][T23788] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1249.845635][T23788] Bluetooth: hci0: failed to register connection device [ 1249.871537][ T3165] netlink: set zone limit has 8 unknown bytes [ 1249.896565][ T3165] netlink: set zone limit has 8 unknown bytes [ 1249.902963][ T3165] netlink: set zone limit has 8 unknown bytes [ 1250.007429][ T3171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6907'. [ 1250.064323][ T3155] syz.2.6903 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 1250.095752][ T3155] CPU: 0 UID: 0 PID: 3155 Comm: syz.2.6903 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1250.095785][ T3155] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1250.095793][ T3155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1250.095802][ T3155] Call Trace: [ 1250.095807][ T3155] [ 1250.095813][ T3155] dump_stack_lvl+0x16c/0x1f0 [ 1250.095836][ T3155] dump_header+0x101/0x960 [ 1250.095852][ T3155] oom_kill_process+0x176/0x910 [ 1250.095867][ T3155] out_of_memory+0x350/0x1700 [ 1250.095885][ T3155] ? __pfx_out_of_memory+0x10/0x10 [ 1250.095898][ T3155] ? lock_acquire+0x2cd/0x330 [ 1250.095913][ T3155] mem_cgroup_out_of_memory+0x118/0x130 [ 1250.095929][ T3155] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1250.095946][ T3155] ? do_raw_spin_unlock+0x172/0x230 [ 1250.095969][ T3155] try_charge_memcg+0x695/0xd30 [ 1250.095990][ T3155] ? rcu_is_watching+0x12/0xc0 [ 1250.096008][ T3155] ? __pfx_try_charge_memcg+0x10/0x10 [ 1250.096026][ T3155] ? rcu_read_unlock+0x17/0x60 [ 1250.096045][ T3155] ? rcu_is_watching+0x12/0xc0 [ 1250.096062][ T3155] ? lock_release+0x201/0x2d0 [ 1250.096075][ T3155] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1250.096092][ T3155] obj_cgroup_charge_account+0x336/0x670 [ 1250.096113][ T3155] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 1250.096135][ T3155] __kmalloc_node_track_caller_noprof+0x6e3/0x930 [ 1250.096155][ T3155] ? __pfx___register_sysctl_table+0x10/0x10 [ 1250.096173][ T3155] ? is_module_address+0x69/0xf0 [ 1250.096187][ T3155] ? __devinet_sysctl_register+0xbc/0x360 [ 1250.096202][ T3155] ? register_net_sysctl_sz+0x141/0x3d0 [ 1250.096217][ T3155] ? kmemdup_noprof+0x29/0x60 [ 1250.096232][ T3155] kmemdup_noprof+0x29/0x60 [ 1250.096246][ T3155] __devinet_sysctl_register+0xbc/0x360 [ 1250.096260][ T3155] ? call_netdevice_notifiers_info+0xbe/0x110 [ 1250.096274][ T3155] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 1250.096291][ T3155] ? inetdev_init+0x245/0x580 [ 1250.096304][ T3155] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1250.096319][ T3155] ? copy_net_ns+0x351/0x7c0 [ 1250.096338][ T3155] ? create_new_namespaces+0x3ea/0xab0 [ 1250.096355][ T3155] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1250.096375][ T3155] ? ksys_unshare+0x45b/0xa40 [ 1250.096394][ T3155] ? __x64_sys_unshare+0x31/0x40 [ 1250.096413][ T3155] ? do_syscall_64+0xcd/0xf80 [ 1250.096433][ T3155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.096448][ T3155] devinet_sysctl_register+0x17b/0x200 [ 1250.096462][ T3155] inetdev_init+0x2b8/0x580 [ 1250.096475][ T3155] inetdev_event+0xc32/0x1840 [ 1250.096489][ T3155] ? ib_netdevice_event+0xfc/0x330 [ 1250.096507][ T3155] ? __pfx_inetdev_event+0x10/0x10 [ 1250.096520][ T3155] ? cfg802154_netdev_notifier_call+0x405/0xad0 [ 1250.096534][ T3155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1250.096554][ T3155] notifier_call_chain+0xbc/0x3e0 [ 1250.096575][ T3155] ? __pfx_inetdev_event+0x10/0x10 [ 1250.096590][ T3155] call_netdevice_notifiers_info+0xbe/0x110 [ 1250.096603][ T3155] register_netdevice+0x1792/0x21d0 [ 1250.096624][ T3155] ? __pfx_register_netdevice+0x10/0x10 [ 1250.096646][ T3155] register_netdev+0x34/0x50 [ 1250.096664][ T3155] sit_init_net+0x286/0x630 [ 1250.096680][ T3155] ? __pfx_sit_init_net+0x10/0x10 [ 1250.096696][ T3155] ops_init+0x1e2/0x5f0 [ 1250.096713][ T3155] setup_net+0x11d/0x3a0 [ 1250.096731][ T3155] ? __pfx_setup_net+0x10/0x10 [ 1250.096748][ T3155] ? lockdep_init_map_type+0x5c/0x270 [ 1250.096761][ T3155] ? mutex_init_lockep+0x110/0x150 [ 1250.096775][ T3155] copy_net_ns+0x351/0x7c0 [ 1250.096798][ T3155] create_new_namespaces+0x3ea/0xab0 [ 1250.096817][ T3155] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1250.096835][ T3155] ksys_unshare+0x45b/0xa40 [ 1250.096855][ T3155] ? __pfx_ksys_unshare+0x10/0x10 [ 1250.096875][ T3155] ? xfd_validate_state+0x61/0x180 [ 1250.096890][ T3155] __x64_sys_unshare+0x31/0x40 [ 1250.096910][ T3155] do_syscall_64+0xcd/0xf80 [ 1250.096929][ T3155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.096943][ T3155] RIP: 0033:0x7f0cc9f8f7c9 [ 1250.096959][ T3155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.096973][ T3155] RSP: 002b:00007f0ccadd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1250.096987][ T3155] RAX: ffffffffffffffda RBX: 00007f0cca1e5fa0 RCX: 00007f0cc9f8f7c9 [ 1250.096997][ T3155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1250.097005][ T3155] RBP: 00007f0cca013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1250.097014][ T3155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.097023][ T3155] R13: 00007f0cca1e6038 R14: 00007f0cca1e5fa0 R15: 00007ffe8b42da18 [ 1250.097036][ T3155] [ 1250.098799][ T3155] memory: usage 3072kB, limit 3072kB, failcnt 90670 [ 1250.922427][ T3170] caif:caif_disconnect_client(): nothing to disconnect [ 1251.120567][ T3155] memory+swap: usage 3688kB, limit 9007199254740988kB, failcnt 0 [ 1251.138696][ T3155] kmem: usage 2864kB, limit 9007199254740988kB, failcnt 0 [ 1251.156162][ T3155] Memory cgroup stats for /syz2: [ 1251.156264][ T3155] cache 0 [ 1251.166211][ T3155] rss 0 [ 1251.168963][ T3155] rss_huge 0 [ 1251.180260][ T3155] shmem 0 [ 1251.183186][ T3155] mapped_file 0 [ 1251.196809][ T3155] dirty 0 [ 1251.199894][ T3155] writeback 0 [ 1251.203160][ T3155] workingset_refault_anon 21079 [ 1251.218257][ T3155] workingset_refault_file 14817 [ 1251.228189][ T3155] swap 630784 [ 1251.233835][ T3155] swapcached 212992 [ 1251.237625][ T3155] pgpgin 2205645 [ 1251.249241][ T3155] pgpgout 2292132 [ 1251.259240][ T3155] pgfault 1018013 [ 1251.262869][ T3155] pgmajfault 5574 [ 1251.276775][ T3155] inactive_anon 0 [ 1251.281385][ T3155] active_anon 212992 [ 1251.285259][ T3155] inactive_file 0 [ 1251.299786][ T3155] active_file 0 [ 1251.303246][ T3155] unevictable 0 [ 1251.306676][ T3155] hierarchical_memory_limit 3145728 [ 1251.322124][ T3155] hierarchical_memsw_limit 9223372036854771712 [ 1251.328521][ T3155] total_cache 0 [ 1251.342092][ T3155] total_rss 0 [ 1251.348762][ T3155] total_rss_huge 0 [ 1251.355449][ T3155] total_shmem 0 [ 1251.362578][ T3155] total_mapped_file 0 [ 1251.372629][ T3155] total_dirty 0 [ 1251.376072][ T3155] total_writeback 0 [ 1251.389271][ T3155] total_workingset_refault_anon 21079 [ 1251.399124][ T3155] total_workingset_refault_file 14817 [ 1251.404476][ T3155] total_swap 630784 [ 1251.418338][ T3155] total_swapcached 212992 [ 1251.428285][ T3155] total_pgpgin 2205645 [ 1251.432427][ T3155] total_pgpgout 2292132 [ 1251.446734][ T3155] total_pgfault 1018013 [ 1251.456801][ T3155] total_pgmajfault 5574 [ 1251.461185][ T3155] total_inactive_anon 0 [ 1251.465402][ T3155] total_active_anon 212992 [ 1251.479935][ T3155] total_inactive_file 0 [ 1251.484080][ T3155] total_active_file 0 [ 1251.498762][ T3155] total_unevictable 0 [ 1251.508652][ T3155] anon_cost 22 [ 1251.512008][ T3155] file_cost 0 [ 1251.517366][ T3155] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6903,pid=3154,uid=0 [ 1251.533691][ T3155] Memory cgroup out of memory: Killed process 3154 (syz.2.6903) total-vm:102556kB, anon-rss:1268kB, file-rss:21928kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1251.755429][ T3163] HfR: entered promiscuous mode [ 1251.760708][ T3171] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht' [ 1251.861391][ T9425] Bluetooth: hci0: command 0x0c1a tx timeout [ 1252.088192][ T3192] FAULT_INJECTION: forcing a failure. [ 1252.088192][ T3192] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.132966][ T3192] CPU: 0 UID: 0 PID: 3192 Comm: syz.1.6911 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1252.133000][ T3192] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1252.133009][ T3192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1252.133018][ T3192] Call Trace: [ 1252.133023][ T3192] [ 1252.133028][ T3192] dump_stack_lvl+0x16c/0x1f0 [ 1252.133053][ T3192] should_fail_ex+0x512/0x640 [ 1252.133073][ T3192] should_failslab+0xc2/0x120 [ 1252.133093][ T3192] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1252.133110][ T3192] ? alloc_inode+0x64/0x240 [ 1252.133125][ T3192] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1252.133143][ T3192] ? alloc_inode+0x64/0x240 [ 1252.133155][ T3192] alloc_inode+0x64/0x240 [ 1252.133168][ T3192] new_inode+0x22/0x1c0 [ 1252.133182][ T3192] __debugfs_create_file+0x105/0x530 [ 1252.133200][ T3192] debugfs_create_file_full+0x41/0x60 [ 1252.133219][ T3192] kvm_dev_ioctl+0x14ca/0x1a80 [ 1252.133239][ T3192] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1252.133258][ T3192] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1252.133274][ T3192] __x64_sys_ioctl+0x18e/0x210 [ 1252.133290][ T3192] do_syscall_64+0xcd/0xf80 [ 1252.133310][ T3192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.133324][ T3192] RIP: 0033:0x7fac9c98f7c9 [ 1252.133336][ T3192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.133350][ T3192] RSP: 002b:00007fac9d869038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.133364][ T3192] RAX: ffffffffffffffda RBX: 00007fac9cbe6180 RCX: 00007fac9c98f7c9 [ 1252.133373][ T3192] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000b [ 1252.133382][ T3192] RBP: 00007fac9ca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1252.133390][ T3192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1252.133398][ T3192] R13: 00007fac9cbe6218 R14: 00007fac9cbe6180 R15: 00007ffe0a47ca28 [ 1252.133412][ T3192] [ 1252.133418][ T3192] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [ 1253.311101][ T3214] PM: Image not found (code -6) [ 1253.558555][ T3235] FAULT_INJECTION: forcing a failure. [ 1253.558555][ T3235] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.595887][ T3235] CPU: 0 UID: 0 PID: 3235 Comm: syz.3.6923 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1253.595922][ T3235] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1253.595931][ T3235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1253.595940][ T3235] Call Trace: [ 1253.595945][ T3235] [ 1253.595950][ T3235] dump_stack_lvl+0x16c/0x1f0 [ 1253.595976][ T3235] should_fail_ex+0x512/0x640 [ 1253.595996][ T3235] should_failslab+0xc2/0x120 [ 1253.596017][ T3235] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1253.596033][ T3235] ? alloc_inode+0x64/0x240 [ 1253.596049][ T3235] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1253.596066][ T3235] ? alloc_inode+0x64/0x240 [ 1253.596079][ T3235] alloc_inode+0x64/0x240 [ 1253.596092][ T3235] new_inode+0x22/0x1c0 [ 1253.596106][ T3235] __debugfs_create_file+0x105/0x530 [ 1253.596125][ T3235] debugfs_create_file_full+0x41/0x60 [ 1253.596143][ T3235] kvm_dev_ioctl+0x14ca/0x1a80 [ 1253.596163][ T3235] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1253.596182][ T3235] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1253.596199][ T3235] __x64_sys_ioctl+0x18e/0x210 [ 1253.596214][ T3235] do_syscall_64+0xcd/0xf80 [ 1253.596234][ T3235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.596248][ T3235] RIP: 0033:0x7fdec058f7c9 [ 1253.596281][ T3235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.596296][ T3235] RSP: 002b:00007fdebe7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1253.596311][ T3235] RAX: ffffffffffffffda RBX: 00007fdec07e6180 RCX: 00007fdec058f7c9 [ 1253.596321][ T3235] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000b [ 1253.596331][ T3235] RBP: 00007fdec0613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1253.596339][ T3235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.596347][ T3235] R13: 00007fdec07e6218 R14: 00007fdec07e6180 R15: 00007ffda2cde2f8 [ 1253.596360][ T3235] [ 1253.596367][ T3235] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [ 1253.974489][ T9425] Bluetooth: hci0: command 0x0c1a tx timeout [ 1255.590665][ T3281] FAULT_INJECTION: forcing a failure. [ 1255.590665][ T3281] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.645845][ T3281] CPU: 0 UID: 0 PID: 3281 Comm: syz.5.6936 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1255.645884][ T3281] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1255.645892][ T3281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1255.645901][ T3281] Call Trace: [ 1255.645906][ T3281] [ 1255.645911][ T3281] dump_stack_lvl+0x16c/0x1f0 [ 1255.645935][ T3281] should_fail_ex+0x512/0x640 [ 1255.645956][ T3281] should_failslab+0xc2/0x120 [ 1255.645977][ T3281] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1255.645993][ T3281] ? lock_release+0x201/0x2d0 [ 1255.646007][ T3281] ? __d_alloc+0x35/0xa80 [ 1255.646027][ T3281] ? __d_alloc+0x35/0xa80 [ 1255.646045][ T3281] __d_alloc+0x35/0xa80 [ 1255.646064][ T3281] d_alloc+0x4a/0x1e0 [ 1255.646084][ T3281] lookup_one_qstr_excl+0x175/0x250 [ 1255.646100][ T3281] start_dirop+0x59/0xb0 [ 1255.646117][ T3281] simple_start_creating+0xf4/0x100 [ 1255.646134][ T3281] ? __pfx_simple_start_creating+0x10/0x10 [ 1255.646150][ T3281] ? do_raw_spin_unlock+0x172/0x230 [ 1255.646166][ T3281] ? simple_pin_fs+0xa3/0x190 [ 1255.646181][ T3281] debugfs_start_creating.part.0+0x82/0x190 [ 1255.646200][ T3281] __debugfs_create_file+0xb3/0x530 [ 1255.646222][ T3281] debugfs_create_file_full+0x41/0x60 [ 1255.646241][ T3281] kvm_dev_ioctl+0x14ca/0x1a80 [ 1255.646261][ T3281] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1255.646280][ T3281] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1255.646296][ T3281] __x64_sys_ioctl+0x18e/0x210 [ 1255.646311][ T3281] do_syscall_64+0xcd/0xf80 [ 1255.646336][ T3281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.646350][ T3281] RIP: 0033:0x7f7d4c18f7c9 [ 1255.646362][ T3281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.646376][ T3281] RSP: 002b:00007f7d4cf90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1255.646391][ T3281] RAX: ffffffffffffffda RBX: 00007f7d4c3e5fa0 RCX: 00007f7d4c18f7c9 [ 1255.646400][ T3281] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 1255.646408][ T3281] RBP: 00007f7d4c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1255.646417][ T3281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1255.646424][ T3281] R13: 00007f7d4c3e6038 R14: 00007f7d4c3e5fa0 R15: 00007fff04ac6308 [ 1255.646438][ T3281] [ 1256.536341][ T3301] FAULT_INJECTION: forcing a failure. [ 1256.536341][ T3301] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.548997][ T3301] CPU: 0 UID: 0 PID: 3301 Comm: syz.1.6941 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1256.549030][ T3301] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1256.549038][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1256.549047][ T3301] Call Trace: [ 1256.549053][ T3301] [ 1256.549058][ T3301] dump_stack_lvl+0x16c/0x1f0 [ 1256.549082][ T3301] should_fail_ex+0x512/0x640 [ 1256.549103][ T3301] should_failslab+0xc2/0x120 [ 1256.549124][ T3301] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1256.549140][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.549158][ T3301] ? __alloc_skb+0x156/0x410 [ 1256.549175][ T3301] ? __alloc_skb+0x156/0x410 [ 1256.549190][ T3301] __alloc_skb+0x156/0x410 [ 1256.549205][ T3301] ? __pfx___alloc_skb+0x10/0x10 [ 1256.549221][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.549238][ T3301] tipc_buf_acquire+0x26/0xe0 [ 1256.549254][ T3301] tipc_msg_create+0x39/0x1d0 [ 1256.549270][ T3301] tipc_group_proto_xmit+0x150/0x7c0 [ 1256.549351][ T3301] tipc_group_filter_msg+0xa40/0x1840 [ 1256.549374][ T3301] tipc_sk_filter_rcv+0x1b93/0x3030 [ 1256.549393][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.549410][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.549428][ T3301] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 1256.549443][ T3301] ? lock_release+0x201/0x2d0 [ 1256.549457][ T3301] ? tipc_sk_lookup+0x474/0xa00 [ 1256.549471][ T3301] ? tipc_sk_rcv+0x57e/0x1c00 [ 1256.549485][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.549502][ T3301] ? tipc_sk_rcv+0x57e/0x1c00 [ 1256.549516][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.549533][ T3301] ? trace_irq_enable.constprop.0+0xd4/0x110 [ 1256.549554][ T3301] tipc_sk_rcv+0xf87/0x1c00 [ 1256.549571][ T3301] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 1256.549587][ T3301] ? trace_irq_enable.constprop.0+0xd4/0x110 [ 1256.549610][ T3301] ? tipc_sk_mcast_rcv+0x871/0xfa0 [ 1256.549625][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.549642][ T3301] ? tipc_sk_mcast_rcv+0x871/0xfa0 [ 1256.549656][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.549673][ T3301] ? trace_irq_enable.constprop.0+0xd4/0x110 [ 1256.549693][ T3301] tipc_sk_mcast_rcv+0x885/0xfa0 [ 1256.549711][ T3301] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 1256.549726][ T3301] ? __pskb_copy_fclone+0x48e/0xb50 [ 1256.549749][ T3301] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 1256.549762][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.549779][ T3301] ? lock_release+0x201/0x2d0 [ 1256.549792][ T3301] tipc_mcast_xmit+0x711/0xfe0 [ 1256.549806][ T3301] ? __pfx__copy_from_iter+0x10/0x10 [ 1256.549823][ T3301] ? __pfx___alloc_skb+0x10/0x10 [ 1256.549839][ T3301] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 1256.549856][ T3301] ? lock_release+0x201/0x2d0 [ 1256.549872][ T3301] ? tipc_send_group_bcast+0x803/0xa50 [ 1256.549892][ T3301] tipc_send_group_bcast+0x803/0xa50 [ 1256.549914][ T3301] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1256.549936][ T3301] ? __pfx_woken_wake_function+0x10/0x10 [ 1256.549956][ T3301] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1256.549976][ T3301] __tipc_sendmsg+0x4ab/0x1970 [ 1256.549990][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.550008][ T3301] ? trace_ignore_this_task+0xbc/0x100 [ 1256.550027][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.550045][ T3301] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1256.550059][ T3301] ? trace_pid_list_is_set+0x22c/0x3a0 [ 1256.550076][ T3301] ? __pfx___might_resched+0x10/0x10 [ 1256.550094][ T3301] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1256.550112][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.550145][ T3301] ? aa_sk_perm+0x2f2/0xae0 [ 1256.550165][ T3301] ? tipc_sendmsg+0x41/0x70 [ 1256.550180][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.550198][ T3301] ? tipc_sendmsg+0x41/0x70 [ 1256.550213][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.550230][ T3301] ? tipc_sendmsg+0x41/0x70 [ 1256.550246][ T3301] tipc_sendmsg+0x4f/0x70 [ 1256.550261][ T3301] sock_write_iter+0x566/0x610 [ 1256.550274][ T3301] ? __pfx_sock_write_iter+0x10/0x10 [ 1256.550296][ T3301] ? preempt_schedule_common+0x44/0xc0 [ 1256.550317][ T3301] ? copy_iovec_from_user+0x131/0x170 [ 1256.550335][ T3301] do_iter_readv_writev+0x662/0x9e0 [ 1256.550353][ T3301] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1256.550369][ T3301] ? common_file_perm+0x1b1/0x500 [ 1256.550387][ T3301] ? bpf_lsm_file_permission+0x9/0x10 [ 1256.550403][ T3301] ? security_file_permission+0x71/0x210 [ 1256.550422][ T3301] ? rw_verify_area+0xcf/0x6c0 [ 1256.550437][ T3301] vfs_writev+0x35f/0xde0 [ 1256.550455][ T3301] ? __pfx_vfs_writev+0x10/0x10 [ 1256.550471][ T3301] ? do_writev+0x218/0x340 [ 1256.550486][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.550504][ T3301] ? rcu_is_watching+0x12/0xc0 [ 1256.550523][ T3301] ? __fget_files+0x20e/0x3c0 [ 1256.550543][ T3301] ? do_writev+0x28c/0x340 [ 1256.550557][ T3301] do_writev+0x28c/0x340 [ 1256.550572][ T3301] ? __pfx_do_writev+0x10/0x10 [ 1256.550590][ T3301] do_syscall_64+0xcd/0xf80 [ 1256.550611][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.550625][ T3301] RIP: 0033:0x7fac9c98f7c9 [ 1256.550637][ T3301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.550652][ T3301] RSP: 002b:00007fac9d8ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1256.550666][ T3301] RAX: ffffffffffffffda RBX: 00007fac9cbe5fa0 RCX: 00007fac9c98f7c9 [ 1256.550677][ T3301] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1256.550686][ T3301] RBP: 00007fac9ca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1256.550695][ T3301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.550704][ T3301] R13: 00007fac9cbe6038 R14: 00007fac9cbe5fa0 R15: 00007ffe0a47ca28 [ 1256.550717][ T3301] [ 1257.387705][ T3238] hub 27-0:1.0: USB hub found [ 1257.392532][ T3238] hub 27-0:1.0: 1 port detected [ 1258.436449][ T3337] random: crng reseeded on system resumption [ 1258.473492][ T3337] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1258.500654][ T3337] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1258.540436][ T3337] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1258.576446][ T3337] PM: hibernation: Basic memory bitmaps created [ 1258.647841][ T3336] PM: hibernation: Basic memory bitmaps freed [ 1258.895616][ T3361] FAULT_INJECTION: forcing a failure. [ 1258.895616][ T3361] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.017313][ T3361] CPU: 0 UID: 0 PID: 3361 Comm: syz.2.6958 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1259.017347][ T3361] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1259.017355][ T3361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1259.017364][ T3361] Call Trace: [ 1259.017369][ T3361] [ 1259.017374][ T3361] dump_stack_lvl+0x16c/0x1f0 [ 1259.017399][ T3361] should_fail_ex+0x512/0x640 [ 1259.017419][ T3361] should_failslab+0xc2/0x120 [ 1259.017440][ T3361] __kmalloc_noprof+0xeb/0x910 [ 1259.017453][ T3361] ? trace_kmem_cache_alloc+0x28/0xb0 [ 1259.017473][ T3361] ? kmem_cache_alloc_noprof+0x2af/0x770 [ 1259.017487][ T3361] ? sk_prot_alloc+0x1a8/0x2a0 [ 1259.017509][ T3361] ? sk_prot_alloc+0x1a8/0x2a0 [ 1259.017528][ T3361] sk_prot_alloc+0x1a8/0x2a0 [ 1259.017547][ T3361] sk_alloc+0x36/0xe30 [ 1259.017562][ T3361] pppoe_create+0x32/0x360 [ 1259.017582][ T3361] pppox_create+0x15c/0x2c0 [ 1259.017600][ T3361] __sock_create+0x339/0x8a0 [ 1259.017614][ T3361] __sys_socket+0x14d/0x260 [ 1259.017627][ T3361] ? __fget_files+0x20e/0x3c0 [ 1259.017644][ T3361] ? __pfx___sys_socket+0x10/0x10 [ 1259.017656][ T3361] ? xfd_validate_state+0x61/0x180 [ 1259.017671][ T3361] __x64_sys_socket+0x72/0xb0 [ 1259.017684][ T3361] do_syscall_64+0xcd/0xf80 [ 1259.017704][ T3361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.017719][ T3361] RIP: 0033:0x7f0cc9f8f7c9 [ 1259.017730][ T3361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1259.017743][ T3361] RSP: 002b:00007f0ccadb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1259.017757][ T3361] RAX: ffffffffffffffda RBX: 00007f0cca1e6090 RCX: 00007f0cc9f8f7c9 [ 1259.017767][ T3361] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 1259.017775][ T3361] RBP: 00007f0cca013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1259.017784][ T3361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.017792][ T3361] R13: 00007f0cca1e6128 R14: 00007f0cca1e6090 R15: 00007ffe8b42da18 [ 1259.017806][ T3361] [ 1259.697599][ T3372] ecryptfs_miscdev_write: Invalid packet size [32] [ 1259.706667][ T3372] ecryptfs_miscdev_write: Invalid packet size [110] [ 1259.857302][ T3382] mkiss: ax0: crc mode is auto. [ 1260.028742][ T3391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6970'. [ 1260.054785][ T3391] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 1260.074821][ T3391] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 1260.429928][ T9425] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1260.438769][ T9425] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1260.446510][ T9425] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1260.456984][ T9425] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1260.465195][ T9425] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1260.888928][ T9425] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7 [ 1260.947536][ T3411] chnl_net:caif_netlink_parms(): no params data found [ 1261.110056][T27724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.172749][ T9425] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1261.180718][ T9425] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 1261.213318][ T3411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.237497][ T3411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.254410][ T3411] bridge_slave_0: entered allmulticast mode [ 1261.268001][ T3411] bridge_slave_0: entered promiscuous mode [ 1261.284739][T27724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.307875][ T3411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.320475][ T3411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.339278][ T3411] bridge_slave_1: entered allmulticast mode [ 1261.352865][ T3411] bridge_slave_1: entered promiscuous mode [ 1261.362299][ T3430] FAULT_INJECTION: forcing a failure. [ 1261.362299][ T3430] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.380275][T27724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.391193][ T3430] CPU: 0 UID: 0 PID: 3430 Comm: syz.2.6979 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1261.391225][ T3430] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1261.391233][ T3430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1261.391242][ T3430] Call Trace: [ 1261.391248][ T3430] [ 1261.391253][ T3430] dump_stack_lvl+0x16c/0x1f0 [ 1261.391279][ T3430] should_fail_ex+0x512/0x640 [ 1261.391299][ T3430] should_failslab+0xc2/0x120 [ 1261.391320][ T3430] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1261.391336][ T3430] ? alloc_inode+0x64/0x240 [ 1261.391351][ T3430] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1261.391368][ T3430] ? alloc_inode+0x64/0x240 [ 1261.391381][ T3430] alloc_inode+0x64/0x240 [ 1261.391394][ T3430] new_inode+0x22/0x1c0 [ 1261.391407][ T3430] __debugfs_create_file+0x105/0x530 [ 1261.391426][ T3430] debugfs_create_file_full+0x41/0x60 [ 1261.391445][ T3430] kvm_dev_ioctl+0x14ca/0x1a80 [ 1261.391465][ T3430] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1261.391484][ T3430] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1261.391501][ T3430] __x64_sys_ioctl+0x18e/0x210 [ 1261.391516][ T3430] do_syscall_64+0xcd/0xf80 [ 1261.391536][ T3430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.391550][ T3430] RIP: 0033:0x7f0cc9f8f7c9 [ 1261.391562][ T3430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1261.391575][ T3430] RSP: 002b:00007f0ccadd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1261.391589][ T3430] RAX: ffffffffffffffda RBX: 00007f0cca1e5fa0 RCX: 00007f0cc9f8f7c9 [ 1261.391598][ T3430] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 1261.391606][ T3430] RBP: 00007f0cca013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1261.391615][ T3430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.391622][ T3430] R13: 00007f0cca1e6038 R14: 00007f0cca1e5fa0 R15: 00007ffe8b42da18 [ 1261.391636][ T3430] [ 1261.391642][ T3430] debugfs: out of free dentries, can not create file 'mmu_shadow_zapped' [ 1261.618501][ T3411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.629465][ T3411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.651350][ T3411] team0: Port device team_slave_0 added [ 1261.661251][T27724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.677821][ T3411] team0: Port device team_slave_1 added [ 1261.708645][ T3411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.718177][ T3411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.766096][ T3411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.859957][ T3411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.932170][ T3411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.065111][ T3411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.125920][ T8595] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 912 with max blocks 19 with error 117 [ 1262.139649][ T8595] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1262.139649][ T8595] [ 1262.209436][ T8595] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 7 with max blocks 7 with error 117 [ 1262.300781][ T8595] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1262.300781][ T8595] [ 1262.312784][T27724] HfR: left promiscuous mode [ 1262.337378][ T3411] hsr_slave_0: entered promiscuous mode [ 1262.363616][ T3411] hsr_slave_1: entered promiscuous mode [ 1262.395924][ T3411] debugfs: 'hsr0' already exists in 'hsr' [ 1262.418769][ T3411] Cannot create hsr debugfs directory [ 1262.520638][ T9425] Bluetooth: hci1: command tx timeout [ 1262.714139][T27724] hsr_slave_0: left promiscuous mode [ 1262.735780][T27724] hsr_slave_1: left promiscuous mode [ 1262.765513][T27724] veth1_macvtap: left promiscuous mode [ 1262.777572][T27724] veth1_vlan: left promiscuous mode [ 1262.797717][T27724] veth0_vlan: left promiscuous mode [ 1262.962540][T27724] team0 (unregistering): Port device team_slave_1 removed [ 1262.983004][T27724] team0 (unregistering): Port device team_slave_0 removed [ 1263.349768][ T3411] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1263.439397][ T3411] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1263.478480][ T3411] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1263.523608][ T3411] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1263.726884][ T3411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.802284][ T3411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.884529][T27724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.891617][T27724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.955171][T27724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.962254][T27724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.455238][ T3411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.529167][ T3411] veth0_vlan: entered promiscuous mode [ 1264.593460][ T9425] Bluetooth: hci1: command tx timeout [ 1264.630351][ T3411] veth1_vlan: entered promiscuous mode [ 1264.705278][ T3411] veth0_macvtap: entered promiscuous mode [ 1264.762974][ T3411] veth1_macvtap: entered promiscuous mode [ 1264.889411][ T3411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.950280][ T3564] FAULT_INJECTION: forcing a failure. [ 1264.950280][ T3564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.963781][ T3411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.004141][ T8587] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.067585][ T8587] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.096198][ T3564] CPU: 0 UID: 0 PID: 3564 Comm: syz.5.7005 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1265.096238][ T3564] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1265.096246][ T3564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1265.096255][ T3564] Call Trace: [ 1265.096260][ T3564] [ 1265.096265][ T3564] dump_stack_lvl+0x16c/0x1f0 [ 1265.096290][ T3564] should_fail_ex+0x512/0x640 [ 1265.096310][ T3564] _copy_from_iter+0x2a4/0x16c0 [ 1265.096335][ T3564] ? __pfx__copy_from_iter+0x10/0x10 [ 1265.096352][ T3564] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1265.096373][ T3564] ? rcu_is_watching+0x12/0xc0 [ 1265.096394][ T3564] copy_page_from_iter+0xde/0x180 [ 1265.096412][ T3564] tun_build_skb.constprop.0+0x2e8/0x1560 [ 1265.096434][ T3564] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1265.096451][ T3564] ? arch_stack_walk+0xa6/0x100 [ 1265.096472][ T3564] ? rcu_is_watching+0x12/0xc0 [ 1265.096491][ T3564] tun_get_user+0x149c/0x3cc0 [ 1265.096510][ T3564] ? __pfx_tun_get_user+0x10/0x10 [ 1265.096527][ T3564] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1265.096548][ T3564] ? tun_get+0x191/0x370 [ 1265.096562][ T3564] ? rcu_is_watching+0x12/0xc0 [ 1265.096579][ T3564] ? lock_release+0x201/0x2d0 [ 1265.096593][ T3564] tun_chr_write_iter+0xdc/0x210 [ 1265.096610][ T3564] vfs_write+0x7d3/0x11d0 [ 1265.096628][ T3564] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1265.096646][ T3564] ? __pfx_vfs_write+0x10/0x10 [ 1265.096663][ T3564] ? lock_release+0x201/0x2d0 [ 1265.096679][ T3564] __x64_sys_pwrite64+0x1eb/0x250 [ 1265.096697][ T3564] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1265.096718][ T3564] do_syscall_64+0xcd/0xf80 [ 1265.096746][ T3564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.096760][ T3564] RIP: 0033:0x7f7d4c18f7c9 [ 1265.096771][ T3564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.096785][ T3564] RSP: 002b:00007f7d4cf90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1265.096800][ T3564] RAX: ffffffffffffffda RBX: 00007f7d4c3e5fa0 RCX: 00007f7d4c18f7c9 [ 1265.096810][ T3564] RDX: 000000000000004c RSI: 0000200000000000 RDI: 00000000000000c8 [ 1265.096819][ T3564] RBP: 00007f7d4cf90090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.096828][ T3564] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 1265.096840][ T3564] R13: 00007f7d4c3e6038 R14: 00007f7d4c3e5fa0 R15: 00007fff04ac6308 [ 1265.096854][ T3564] [ 1265.648760][ T8587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.719682][ T3577] Loading of unsigned module is rejected [ 1265.734938][ T8587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.968828][ T3411] ieee80211 phy65: Selected rate control algorithm 'minstrel_ht' [ 1266.078270][ T8338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.087635][ T3411] ieee80211 phy66: Selected rate control algorithm 'minstrel_ht' [ 1266.121032][ T8338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.160871][ T8338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.198568][ T8338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.399162][ T3600] : Can't lookup blockdev [ 1266.440825][ T3601] caif:caif_disconnect_client(): nothing to disconnect [ 1266.660371][ T9425] Bluetooth: hci1: command tx timeout [ 1266.853904][ T3572] FAULT_INJECTION: forcing a failure. [ 1266.853904][ T3572] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.935631][ T3572] CPU: 0 UID: 0 PID: 3572 Comm: syz.2.7004 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1266.935671][ T3572] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1266.935680][ T3572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1266.935688][ T3572] Call Trace: [ 1266.935694][ T3572] [ 1266.935700][ T3572] dump_stack_lvl+0x16c/0x1f0 [ 1266.935725][ T3572] should_fail_ex+0x512/0x640 [ 1266.935744][ T3572] should_failslab+0xc2/0x120 [ 1266.935765][ T3572] __kmalloc_noprof+0xeb/0x910 [ 1266.935779][ T3572] ? lsm_blob_alloc+0x68/0x90 [ 1266.935795][ T3572] ? lsm_blob_alloc+0x68/0x90 [ 1266.935807][ T3572] lsm_blob_alloc+0x68/0x90 [ 1266.935820][ T3572] security_prepare_creds+0x2f/0x270 [ 1266.935844][ T3572] prepare_creds+0x5d6/0x940 [ 1266.935861][ T3572] __sys_setfsgid+0xe3/0x380 [ 1266.935882][ T3572] ? rcu_is_watching+0x12/0xc0 [ 1266.935901][ T3572] do_syscall_64+0xcd/0xf80 [ 1266.935921][ T3572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.935936][ T3572] RIP: 0033:0x7f0cc9f8f7c9 [ 1266.935947][ T3572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.935961][ T3572] RSP: 002b:00007f0ccadd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 1266.935975][ T3572] RAX: ffffffffffffffda RBX: 00007f0cca1e5fa0 RCX: 00007f0cc9f8f7c9 [ 1266.935984][ T3572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1266.935992][ T3572] RBP: 00007f0cca013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1266.936001][ T3572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.936009][ T3572] R13: 00007f0cca1e6038 R14: 00007f0cca1e5fa0 R15: 00007ffe8b42da18 [ 1266.936022][ T3572] [ 1267.414093][ T3594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1267.423721][ T3594] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1267.505188][ T3594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1267.524552][ T3594] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1267.544958][ T3594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1267.566394][ T3594] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1267.584965][ T3594] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1268.012359][ T3639] base_sock_release(ffff88805de32280) sk=ffff88805e8bd000 [ 1268.035377][ T3639] base_sock_release(ffff88805de31140) sk=ffff88805e8bf000 [ 1268.411484][ T9425] Bluetooth: hci3: command 0x0c1a tx timeout [ 1268.736249][ T3651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7024'. [ 1268.832546][ T3619] FAULT_INJECTION: forcing a failure. [ 1268.832546][ T3619] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.107563][ T3619] CPU: 0 UID: 0 PID: 3619 Comm: syz.5.7014 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1269.107598][ T3619] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1269.107606][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1269.107615][ T3619] Call Trace: [ 1269.107620][ T3619] [ 1269.107626][ T3619] dump_stack_lvl+0x16c/0x1f0 [ 1269.107650][ T3619] should_fail_ex+0x512/0x640 [ 1269.107669][ T3619] should_failslab+0xc2/0x120 [ 1269.107689][ T3619] kmem_cache_alloc_noprof+0x83/0x770 [ 1269.107705][ T3619] ? kcm_create+0x11e/0x690 [ 1269.107722][ T3619] ? kcm_create+0x11e/0x690 [ 1269.107737][ T3619] kcm_create+0x11e/0x690 [ 1269.107753][ T3619] __sock_create+0x339/0x8a0 [ 1269.107768][ T3619] __sys_socket+0x14d/0x260 [ 1269.107780][ T3619] ? fput+0x70/0xf0 [ 1269.107791][ T3619] ? __pfx___sys_socket+0x10/0x10 [ 1269.107804][ T3619] ? xfd_validate_state+0x61/0x180 [ 1269.107816][ T3619] ? __pfx_ksys_write+0x10/0x10 [ 1269.107835][ T3619] __x64_sys_socket+0x72/0xb0 [ 1269.107848][ T3619] do_syscall_64+0xcd/0xf80 [ 1269.107867][ T3619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.107881][ T3619] RIP: 0033:0x7f7d4c18f7c9 [ 1269.107892][ T3619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1269.107906][ T3619] RSP: 002b:00007f7d4cf6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1269.107920][ T3619] RAX: ffffffffffffffda RBX: 00007f7d4c3e6090 RCX: 00007f7d4c18f7c9 [ 1269.107929][ T3619] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 1269.107938][ T3619] RBP: 00007f7d4c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1269.107946][ T3619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.107955][ T3619] R13: 00007f7d4c3e6128 R14: 00007f7d4c3e6090 R15: 00007fff04ac6308 [ 1269.107968][ T3619] [ 1269.335772][ T3655] syz.2.7023 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 1269.347792][ T3655] CPU: 0 UID: 0 PID: 3655 Comm: syz.2.7023 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1269.347823][ T3655] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1269.347831][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1269.347840][ T3655] Call Trace: [ 1269.347844][ T3655] [ 1269.347850][ T3655] dump_stack_lvl+0x16c/0x1f0 [ 1269.347873][ T3655] dump_header+0x101/0x960 [ 1269.347889][ T3655] oom_kill_process+0x176/0x910 [ 1269.347903][ T3655] out_of_memory+0x350/0x1700 [ 1269.347918][ T3655] ? __pfx_out_of_memory+0x10/0x10 [ 1269.347932][ T3655] ? lock_acquire+0x2cd/0x330 [ 1269.347946][ T3655] mem_cgroup_out_of_memory+0x118/0x130 [ 1269.347962][ T3655] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1269.347978][ T3655] ? do_raw_spin_unlock+0x172/0x230 [ 1269.347995][ T3655] try_charge_memcg+0x695/0xd30 [ 1269.348015][ T3655] ? rcu_is_watching+0x12/0xc0 [ 1269.348033][ T3655] ? __pfx_try_charge_memcg+0x10/0x10 [ 1269.348051][ T3655] ? rcu_read_unlock+0x17/0x60 [ 1269.348070][ T3655] ? rcu_is_watching+0x12/0xc0 [ 1269.348087][ T3655] ? lock_release+0x201/0x2d0 [ 1269.348100][ T3655] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1269.348116][ T3655] obj_cgroup_charge_account+0x336/0x670 [ 1269.348137][ T3655] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 1269.348159][ T3655] __kmalloc_noprof+0x6c9/0x910 [ 1269.348174][ T3655] ? __register_sysctl_table+0xb3/0x1900 [ 1269.348192][ T3655] ? __register_sysctl_table+0xb3/0x1900 [ 1269.348209][ T3655] __register_sysctl_table+0xb3/0x1900 [ 1269.348225][ T3655] ? rcu_is_watching+0x12/0xc0 [ 1269.348242][ T3655] ? lock_release+0x201/0x2d0 [ 1269.348255][ T3655] ? __pfx___register_sysctl_table+0x10/0x10 [ 1269.348272][ T3655] ? is_module_address+0x69/0xf0 [ 1269.348286][ T3655] ? register_net_sysctl_sz+0x222/0x3d0 [ 1269.348302][ T3655] __addrconf_sysctl_register+0x1a2/0x360 [ 1269.348324][ T3655] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 1269.348346][ T3655] ? __asan_memcpy+0x3c/0x60 [ 1269.348361][ T3655] addrconf_init_net+0x53a/0x8e0 [ 1269.348380][ T3655] ? __pfx_addrconf_init_net+0x10/0x10 [ 1269.348400][ T3655] ops_init+0x1e2/0x5f0 [ 1269.348419][ T3655] setup_net+0x11d/0x3a0 [ 1269.348436][ T3655] ? __pfx_setup_net+0x10/0x10 [ 1269.348453][ T3655] ? lockdep_init_map_type+0x5c/0x270 [ 1269.348466][ T3655] ? mutex_init_lockep+0x110/0x150 [ 1269.348480][ T3655] copy_net_ns+0x351/0x7c0 [ 1269.348506][ T3655] create_new_namespaces+0x3ea/0xab0 [ 1269.348526][ T3655] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1269.348544][ T3655] ksys_unshare+0x45b/0xa40 [ 1269.348565][ T3655] ? __pfx_ksys_unshare+0x10/0x10 [ 1269.348584][ T3655] ? xfd_validate_state+0x61/0x180 [ 1269.348599][ T3655] __x64_sys_unshare+0x31/0x40 [ 1269.348619][ T3655] do_syscall_64+0xcd/0xf80 [ 1269.348639][ T3655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.348654][ T3655] RIP: 0033:0x7f0cc9f8f7c9 [ 1269.348666][ T3655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1269.348680][ T3655] RSP: 002b:00007f0ccadb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1269.348694][ T3655] RAX: ffffffffffffffda RBX: 00007f0cca1e6090 RCX: 00007f0cc9f8f7c9 [ 1269.348703][ T3655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1269.348711][ T3655] RBP: 00007f0cca013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1269.348720][ T3655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.348728][ T3655] R13: 00007f0cca1e6128 R14: 00007f0cca1e6090 R15: 00007ffe8b42da18 [ 1269.348741][ T3655] [ 1269.348746][ T3655] memory: usage 3068kB, limit 3072kB, failcnt 119606 [ 1269.725738][ T3670] bridge0: port 3(syz_tun) entered blocking state [ 1269.740968][ T8584] Bluetooth: hci1: command 0x0c1a tx timeout [ 1269.748035][ T9425] Bluetooth: hci4: command 0x0c1a tx timeout [ 1269.754741][T23788] Bluetooth: hci2: command 0x0406 tx timeout [ 1269.765923][ T3670] bridge0: port 3(syz_tun) entered disabled state [ 1269.775939][ T3670] syz_tun: entered allmulticast mode [ 1269.785937][ T3670] syz_tun: entered promiscuous mode [ 1269.791345][ T3670] bridge0: port 3(syz_tun) entered blocking state [ 1269.797811][ T3670] bridge0: port 3(syz_tun) entered forwarding state [ 1270.858221][ T3703] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1271.136304][ T3710] FAULT_INJECTION: forcing a failure. [ 1271.136304][ T3710] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.168082][ T3655] memory+swap: usage 32352kB, limit 9007199254740988kB, failcnt 0 [ 1271.188306][ T3655] kmem: usage 2884kB, limit 9007199254740988kB, failcnt 0 [ 1271.195842][ T3710] CPU: 0 UID: 0 PID: 3710 Comm: syz.1.7042 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1271.195877][ T3710] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1271.195886][ T3710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1271.195895][ T3710] Call Trace: [ 1271.195900][ T3710] [ 1271.195905][ T3710] dump_stack_lvl+0x16c/0x1f0 [ 1271.195930][ T3710] should_fail_ex+0x512/0x640 [ 1271.195951][ T3710] should_failslab+0xc2/0x120 [ 1271.195971][ T3710] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1271.195986][ T3710] ? lock_release+0x201/0x2d0 [ 1271.196000][ T3710] ? __d_alloc+0x35/0xa80 [ 1271.196024][ T3710] ? __d_alloc+0x35/0xa80 [ 1271.196041][ T3710] __d_alloc+0x35/0xa80 [ 1271.196061][ T3710] d_alloc+0x4a/0x1e0 [ 1271.196079][ T3710] lookup_one_qstr_excl+0x175/0x250 [ 1271.196095][ T3710] start_dirop+0x59/0xb0 [ 1271.196113][ T3710] simple_start_creating+0xf4/0x100 [ 1271.196130][ T3710] ? __pfx_simple_start_creating+0x10/0x10 [ 1271.196147][ T3710] ? do_raw_spin_unlock+0x172/0x230 [ 1271.196162][ T3710] ? simple_pin_fs+0xa3/0x190 [ 1271.196178][ T3710] debugfs_start_creating.part.0+0x82/0x190 [ 1271.196197][ T3710] __debugfs_create_file+0xb3/0x530 [ 1271.196216][ T3710] debugfs_create_file_full+0x41/0x60 [ 1271.196235][ T3710] kvm_dev_ioctl+0x14ca/0x1a80 [ 1271.196255][ T3710] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1271.196274][ T3710] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1271.196290][ T3710] __x64_sys_ioctl+0x18e/0x210 [ 1271.196305][ T3710] do_syscall_64+0xcd/0xf80 [ 1271.196326][ T3710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.196340][ T3710] RIP: 0033:0x7fe86118f7c9 [ 1271.196351][ T3710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1271.196365][ T3710] RSP: 002b:00007fe85f3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.196379][ T3710] RAX: ffffffffffffffda RBX: 00007fe8613e6180 RCX: 00007fe86118f7c9 [ 1271.196388][ T3710] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000b [ 1271.196396][ T3710] RBP: 00007fe861213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1271.196404][ T3710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1271.196413][ T3710] R13: 00007fe8613e6218 R14: 00007fe8613e6180 R15: 00007ffc9a38ee88 [ 1271.196427][ T3710] [ 1271.436877][ T3655] Memory cgroup stats for /syz2: [ 1271.436968][ T3655] cache 4096 [ 1271.445851][ T3655] rss 0 [ 1271.449252][ T3655] rss_huge 0 [ 1271.452465][ T3655] shmem 4096 [ 1271.455682][ T3655] mapped_file 0 [ 1271.459154][ T3655] dirty 0 [ 1271.462065][ T3655] writeback 0 [ 1271.465334][ T3655] workingset_refault_anon 24451 [ 1271.470184][ T3655] workingset_refault_file 14883 [ 1271.475029][ T3655] swap 29982720 [ 1271.478461][ T3655] swapcached 188416 [ 1271.482276][ T3655] pgpgin 2237349 [ 1271.485812][ T3655] pgpgout 2323841 [ 1271.502853][ T3655] pgfault 1043928 [ 1271.506518][ T3655] pgmajfault 7151 [ 1271.510130][ T3655] inactive_anon 65536 [ 1271.514122][ T3655] active_anon 126976 [ 1271.517991][ T3655] inactive_file 0 [ 1271.521595][ T3655] active_file 0 [ 1271.525055][ T3655] unevictable 0 [ 1271.528486][ T3655] hierarchical_memory_limit 3145728 [ 1271.533707][ T3655] hierarchical_memsw_limit 9223372036854771712 [ 1271.539833][ T3655] total_cache 4096 [ 1271.543523][ T3655] total_rss 0 [ 1271.546803][ T3655] total_rss_huge 0 [ 1271.550494][ T3655] total_shmem 4096 [ 1271.554204][ T3655] total_mapped_file 0 [ 1271.558155][ T3655] total_dirty 0 [ 1271.561585][ T3655] total_writeback 0 [ 1271.565383][ T3655] total_workingset_refault_anon 24451 [ 1271.570726][ T3655] total_workingset_refault_file 14883 [ 1271.576094][ T3655] total_swap 29982720 [ 1271.580048][ T3655] total_swapcached 188416 [ 1271.584360][ T3655] total_pgpgin 2237349 [ 1271.588715][ T3655] total_pgpgout 2323841 [ 1271.592851][ T3655] total_pgfault 1043928 [ 1271.597318][ T3655] total_pgmajfault 7151 [ 1271.601552][ T3655] total_inactive_anon 65536 [ 1271.606060][ T3655] total_active_anon 126976 [ 1271.610447][ T3655] total_inactive_file 0 [ 1271.614597][ T3655] total_active_file 0 [ 1271.618551][ T3655] total_unevictable 0 [ 1271.622504][ T3655] anon_cost 19 [ 1271.625865][ T3655] file_cost 0 [ 1271.629129][ T3655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7023,pid=3648,uid=0 [ 1271.643882][ T3655] Memory cgroup out of memory: Killed process 3648 (syz.2.7023) total-vm:98720kB, anon-rss:1132kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1271.800940][T23788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1271.882039][ T8584] Bluetooth: hci2: command 0x0406 tx timeout [ 1272.968342][ T3729] IPVS: length: 7562853 != 24 [ 1273.337702][ T3759] bond0: invalid ARP target specified [ 1273.517756][ T3759] bond0: invalid ARP target specified [ 1273.568794][ T3759] bond0: invalid ARP target specified [ 1273.614081][ T3759] bond0: invalid ARP target specified [ 1273.656477][ T3759] bond0: invalid ARP target specified [ 1273.690621][ T3759] bond0: invalid ARP target specified [ 1273.729922][ T3759] bond0: invalid ARP target specified [ 1273.772494][ T3759] bond0: invalid ARP target specified [ 1273.806655][ T3759] bond0: invalid ARP target specified [ 1273.822055][T23788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1273.849535][ T3759] bond0: invalid ARP target specified [ 1273.880611][ T3759] bond0: invalid ARP target specified [ 1273.899862][ T3759] bond0: invalid ARP target specified [ 1273.918099][ T3759] bond0: invalid ARP target specified [ 1273.938760][ T3759] bond0: invalid ARP target specified [ 1273.956888][ T3759] bond0: invalid ARP target specified [ 1273.974814][ T3759] bond0: invalid ARP target specified [ 1273.994156][ T3759] bond0: invalid ARP target specified [ 1275.624158][ T3833] nbd: socks must be embedded in a SOCK_ITEM attr [ 1279.188679][T23788] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1279.627761][ T3929] netlink: 334 bytes leftover after parsing attributes in process `syz.3.7099'. [ 1280.329440][ T3939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7103'. [ 1281.223375][ T8584] Bluetooth: hci4: command 0x0c1a tx timeout [ 1282.707038][ T3968] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1282.742618][ T3955] syz.2.7107 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1282.837436][ T3968] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1282.851599][ T3955] CPU: 0 UID: 0 PID: 3955 Comm: syz.2.7107 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1282.851632][ T3955] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1282.851646][ T3955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1282.851655][ T3955] Call Trace: [ 1282.851661][ T3955] [ 1282.851666][ T3955] dump_stack_lvl+0x16c/0x1f0 [ 1282.851691][ T3955] dump_header+0x101/0x960 [ 1282.851707][ T3955] oom_kill_process+0x176/0x910 [ 1282.851722][ T3955] out_of_memory+0x350/0x1700 [ 1282.851737][ T3955] ? __pfx_out_of_memory+0x10/0x10 [ 1282.851751][ T3955] ? lock_acquire+0x2cd/0x330 [ 1282.851766][ T3955] mem_cgroup_out_of_memory+0x118/0x130 [ 1282.851782][ T3955] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1282.851799][ T3955] ? do_raw_spin_unlock+0x172/0x230 [ 1282.851815][ T3955] try_charge_memcg+0x695/0xd30 [ 1282.851835][ T3955] ? lock_release+0x201/0x2d0 [ 1282.851847][ T3955] ? __pfx_try_charge_memcg+0x10/0x10 [ 1282.851866][ T3955] ? xa_load+0x153/0x2c0 [ 1282.851879][ T3955] ? rcu_read_unlock+0x17/0x60 [ 1282.851898][ T3955] ? rcu_is_watching+0x12/0xc0 [ 1282.851918][ T3955] charge_memcg+0x8a/0x230 [ 1282.851936][ T3955] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1282.851950][ T3955] __read_swap_cache_async+0x397/0x500 [ 1282.851968][ T3955] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1282.851984][ T3955] ? rcu_is_watching+0x12/0xc0 [ 1282.852001][ T3955] ? trace_irq_enable.constprop.0+0xd4/0x110 [ 1282.852025][ T3955] swap_cluster_readahead+0x432/0x770 [ 1282.852040][ T3955] ? zswap_entry_free+0x355/0x5e0 [ 1282.852055][ T3955] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1282.852070][ T3955] ? rcu_is_watching+0x12/0xc0 [ 1282.852087][ T3955] ? lock_release+0x130/0x2d0 [ 1282.852100][ T3955] ? do_raw_spin_unlock+0x172/0x230 [ 1282.852115][ T3955] ? _raw_spin_unlock+0x28/0x50 [ 1282.852134][ T3955] ? swap_entries_free+0x572/0x900 [ 1282.852151][ T3955] ? get_vma_policy+0x242/0x3c0 [ 1282.852171][ T3955] swapin_readahead+0x160/0x1220 [ 1282.852186][ T3955] ? lock_release+0x201/0x2d0 [ 1282.852198][ T3955] ? page_table_check_set+0x7e7/0xa40 [ 1282.852217][ T3955] ? __pfx_swapin_readahead+0x10/0x10 [ 1282.852231][ T3955] ? rcu_is_watching+0x12/0xc0 [ 1282.852249][ T3955] ? swap_cache_get_folio+0x267/0x8e0 [ 1282.852262][ T3955] ? rcu_is_watching+0x12/0xc0 [ 1282.852279][ T3955] ? swap_cache_get_folio+0x267/0x8e0 [ 1282.852293][ T3955] ? lock_release+0x201/0x2d0 [ 1282.852310][ T3955] ? swap_cache_get_folio+0x267/0x8e0 [ 1282.852324][ T3955] ? swap_cache_get_folio+0x293/0x8e0 [ 1282.852338][ T3955] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1282.852352][ T3955] ? __pfx_get_swap_device+0x10/0x10 [ 1282.852370][ T3955] ? lock_release+0x201/0x2d0 [ 1282.852382][ T3955] ? do_swap_page+0x962/0x64a0 [ 1282.852395][ T3955] do_swap_page+0x962/0x64a0 [ 1282.852411][ T3955] ? __pfx_do_swap_page+0x10/0x10 [ 1282.852424][ T3955] ? __pfx_default_wake_function+0x10/0x10 [ 1282.852442][ T3955] ? lock_acquire+0x2cd/0x330 [ 1282.852454][ T3955] ? __pfx_do_wp_page+0x10/0x10 [ 1282.852472][ T3955] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1282.852492][ T3955] ? ___pte_offset_map+0x50/0x380 [ 1282.852509][ T3955] ? ___pte_offset_map+0x175/0x380 [ 1282.852527][ T3955] __handle_mm_fault+0x19cb/0x2bb0 [ 1282.852546][ T3955] ? __pfx___handle_mm_fault+0x10/0x10 [ 1282.852560][ T3955] ? __pfx_vma_start_read+0x10/0x10 [ 1282.852572][ T3955] ? lock_vma_under_rcu+0x176/0x580 [ 1282.852585][ T3955] ? rcu_is_watching+0x12/0xc0 [ 1282.852607][ T3955] handle_mm_fault+0x3fe/0xad0 [ 1282.852621][ T3955] do_user_addr_fault+0x60c/0x1370 [ 1282.852642][ T3955] ? rcu_is_watching+0x12/0xc0 [ 1282.852660][ T3955] exc_page_fault+0x64/0xc0 [ 1282.852679][ T3955] asm_exc_page_fault+0x26/0x30 [ 1282.852693][ T3955] RIP: 0033:0x7f0cc9e4d71f [ 1282.852705][ T3955] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d f2 48 38 00 89 f0 4c 8d 05 e9 28 38 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 1282.852719][ T3955] RSP: 002b:00007ffe8b42da48 EFLAGS: 00010202 [ 1282.852732][ T3955] RAX: 000000008202738f RBX: 00007f0ccad15720 RCX: 0000000000000023 [ 1282.852741][ T3955] RDX: 000000000000138f RSI: ffffffff8202738f RDI: 0000000000000001 [ 1282.852750][ T3955] RBP: ffffffff8202738f R08: 00007f0cca1d0000 R09: 00007f0cca1d2000 [ 1282.852759][ T3955] R10: 0000000082027393 R11: 0000000000000001 R12: 0000000000000001 [ 1282.852767][ T3955] R13: 0000000000000023 R14: ffffffff820277f7 R15: 0000000000000023 [ 1282.852777][ T3955] ? vm_mmap_pgoff+0x277/0x470 [ 1282.852794][ T3955] ? __pfx_randomize_stack_top+0xf/0x10 [ 1282.852812][ T3955] ? __pfx_randomize_stack_top+0xf/0x10 [ 1282.852831][ T3955] [ 1282.852837][ T3955] memory: usage 3072kB, limit 3072kB, failcnt 131833 [ 1283.392178][ T3968] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1283.422488][ T3968] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1283.917806][ T3973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7113'. [ 1283.982044][ T3974] FAULT_INJECTION: forcing a failure. [ 1283.982044][ T3974] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.994684][ T3974] CPU: 0 UID: 0 PID: 3974 Comm: syz.5.7112 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1283.994718][ T3974] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1283.994727][ T3974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1283.994736][ T3974] Call Trace: [ 1283.994742][ T3974] [ 1283.994748][ T3974] dump_stack_lvl+0x16c/0x1f0 [ 1283.994773][ T3974] should_fail_ex+0x512/0x640 [ 1283.994793][ T3974] should_failslab+0xc2/0x120 [ 1283.994814][ T3974] kmem_cache_alloc_noprof+0x83/0x770 [ 1283.994830][ T3974] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1283.994854][ T3974] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1283.994870][ T3974] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1283.994889][ T3974] idr_get_free+0x528/0xa30 [ 1283.994910][ T3974] idr_alloc_u32+0x190/0x2f0 [ 1283.994929][ T3974] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1283.994948][ T3974] ? rcu_is_watching+0x12/0xc0 [ 1283.994967][ T3974] idr_alloc_cyclic+0x10b/0x230 [ 1283.994986][ T3974] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1283.995003][ T3974] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1283.995019][ T3974] ? lsm_blob_alloc+0x2b/0x90 [ 1283.995033][ T3974] map_create+0x143c/0x2a10 [ 1283.995051][ T3974] ? preempt_schedule_thunk+0x16/0x30 [ 1283.995066][ T3974] ? __pfx_map_create+0x10/0x10 [ 1283.995083][ T3974] ? __might_fault+0xe3/0x190 [ 1283.995096][ T3974] ? __might_fault+0x13b/0x190 [ 1283.995109][ T3974] ? rcu_is_watching+0x12/0xc0 [ 1283.995126][ T3974] ? __might_fault+0xe3/0x190 [ 1283.995139][ T3974] ? lock_release+0x201/0x2d0 [ 1283.995154][ T3974] __sys_bpf+0x3d9d/0x4980 [ 1283.995172][ T3974] ? futex_private_hash_put+0x160/0x1b0 [ 1283.995188][ T3974] ? __pfx___sys_bpf+0x10/0x10 [ 1283.995207][ T3974] ? __pfx_futex_wake+0x10/0x10 [ 1283.995223][ T3974] ? lock_release+0x201/0x2d0 [ 1283.995241][ T3974] ? ksys_write+0x190/0x250 [ 1283.995258][ T3974] ? rcu_is_watching+0x12/0xc0 [ 1283.995276][ T3974] ? lock_release+0x201/0x2d0 [ 1283.995288][ T3974] ? __pfx___mutex_lock+0x10/0x10 [ 1283.995302][ T3974] ? do_futex+0x122/0x350 [ 1283.995321][ T3974] ? fput+0x70/0xf0 [ 1283.995332][ T3974] ? xfd_validate_state+0x61/0x180 [ 1283.995344][ T3974] ? __pfx_ksys_write+0x10/0x10 [ 1283.995362][ T3974] __x64_sys_bpf+0x78/0xc0 [ 1283.995374][ T3974] ? trace_irq_enable.constprop.0+0xd4/0x110 [ 1283.995394][ T3974] do_syscall_64+0xcd/0xf80 [ 1283.995413][ T3974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.995427][ T3974] RIP: 0033:0x7f7d4c18f7c9 [ 1283.995439][ T3974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1283.995453][ T3974] RSP: 002b:00007f7d4cf6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1283.995467][ T3974] RAX: ffffffffffffffda RBX: 00007f7d4c3e6090 RCX: 00007f7d4c18f7c9 [ 1283.995476][ T3974] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 1283.995485][ T3974] RBP: 00007f7d4c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1283.995494][ T3974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.995503][ T3974] R13: 00007f7d4c3e6128 R14: 00007f7d4c3e6090 R15: 00007fff04ac6308 [ 1283.995517][ T3974] [ 1284.772820][ T8584] Bluetooth: hci3: command 0x0c1a tx timeout [ 1284.995418][ T8584] Bluetooth: hci4: command 0x0c1a tx timeout [ 1285.127111][ T3955] memory+swap: usage 58576kB, limit 9007199254740988kB, failcnt 0 [ 1285.141874][ T3955] kmem: usage 2772kB, limit 9007199254740988kB, failcnt 0 [ 1285.156755][ T3955] Memory cgroup stats for /syz2: [ 1285.156845][ T3955] cache 0 [ 1285.172935][ T3955] rss 0 [ 1285.182868][ T3955] rss_huge 0 [ 1285.190777][ T3955] shmem 0 [ 1285.194336][ T3955] mapped_file 0 [ 1285.197783][ T3955] dirty 0 [ 1285.200693][ T3955] writeback 0 [ 1285.212665][ T3955] workingset_refault_anon 26278 [ 1285.227673][ T3955] workingset_refault_file 14883 [ 1285.232692][ T3955] swap 56836096 [ 1285.236128][ T3955] swapcached 307200 [ 1285.278762][ T3955] pgpgin 2246953 [ 1285.302709][ T3955] pgpgout 2333417 [ 1285.317906][ T3955] pgfault 1047330 [ 1285.321563][ T3955] pgmajfault 8531 [ 1285.351776][ T3955] inactive_anon 73728 [ 1285.371892][ T3955] active_anon 233472 [ 1285.375787][ T3955] inactive_file 0 [ 1285.379398][ T3955] active_file 0 [ 1285.418415][ T3955] unevictable 0 [ 1285.426222][ T3955] hierarchical_memory_limit 3145728 [ 1285.454101][ T3955] hierarchical_memsw_limit 9223372036854771712 [ 1285.460597][ T8254] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 3581 with max blocks 3 with error 117 [ 1285.486174][ T3955] total_cache 0 [ 1285.489627][ T3955] total_rss 0 [ 1285.503135][ T8254] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1285.503135][ T8254] [ 1285.521349][ T3955] total_rss_huge 0 [ 1285.525120][T23788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1285.532633][ T8584] Bluetooth: hci2: command 0x0406 tx timeout [ 1285.544613][ T3955] total_shmem 0 [ 1285.548063][ T3955] total_mapped_file 0 [ 1285.572125][ T3955] total_dirty 0 [ 1285.575935][ T3955] total_writeback 0 [ 1285.579895][ T3955] total_workingset_refault_anon 26278 [ 1285.632583][ T3955] total_workingset_refault_file 14883 [ 1285.658196][ T3955] total_swap 56836096 [ 1285.681862][ T3955] total_swapcached 307200 [ 1285.710271][ T3955] total_pgpgin 2246953 [ 1285.714342][ T3955] total_pgpgout 2333417 [ 1285.742350][ T3955] total_pgfault 1047330 [ 1285.762885][ T3955] total_pgmajfault 8531 [ 1285.789145][ T3955] total_inactive_anon 73728 [ 1285.797499][ T3955] total_active_anon 233472 [ 1285.822090][ T3955] total_inactive_file 0 [ 1285.846428][ T3955] total_active_file 0 [ 1285.853006][ T3955] total_unevictable 0 [ 1285.856989][ T3955] anon_cost 22 [ 1285.899141][ T3955] file_cost 0 [ 1285.909011][ T3955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6996,pid=3505,uid=0 [ 1285.957635][ T3955] Memory cgroup out of memory: Killed process 3505 (syz.2.6996) total-vm:134932kB, anon-rss:1168kB, file-rss:42496kB, shmem-rss:0kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 1286.991499][ T3505] syz.2.6996 (3505) used greatest stack depth: 19192 bytes left [ 1287.811534][ T4038] zswap: compressor not available [ 1288.176204][ T4038] bridge0: port 4(gretap0) entered blocking state [ 1288.263495][ T4038] bridge0: port 4(gretap0) entered disabled state [ 1288.363223][ T4038] gretap0: entered allmulticast mode [ 1288.431159][ T4038] gretap0: entered promiscuous mode [ 1288.437544][ T8584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1288.444640][ T8584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1288.451767][ T8584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1288.459143][ T8584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1288.467177][ T8584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1288.548209][ T4038] bridge0: port 4(gretap0) entered blocking state [ 1288.554687][ T4038] bridge0: port 4(gretap0) entered forwarding state [ 1289.026395][T26935] bridge0: port 3(syz_tun) entered disabled state [ 1289.088343][T26935] syz_tun (unregistering): left allmulticast mode [ 1289.162009][T26935] syz_tun (unregistering): left promiscuous mode [ 1289.168392][T26935] bridge0: port 3(syz_tun) entered disabled state [ 1289.376603][ T4064] FAULT_INJECTION: forcing a failure. [ 1289.376603][ T4064] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1289.418422][ T4064] CPU: 0 UID: 0 PID: 4064 Comm: syz.5.7134 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1289.418455][ T4064] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1289.418463][ T4064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1289.418472][ T4064] Call Trace: [ 1289.418477][ T4064] [ 1289.418483][ T4064] dump_stack_lvl+0x16c/0x1f0 [ 1289.418508][ T4064] should_fail_ex+0x512/0x640 [ 1289.418528][ T4064] ? rcu_is_watching+0x12/0xc0 [ 1289.418548][ T4064] get_futex_key+0x1d0/0x15f0 [ 1289.418564][ T4064] ? __pfx_get_futex_key+0x10/0x10 [ 1289.418577][ T4064] ? lock_release+0x201/0x2d0 [ 1289.418592][ T4064] futex_wake+0xea/0x530 [ 1289.418610][ T4064] ? futex_wait+0x120/0x380 [ 1289.418627][ T4064] ? __pfx_futex_wait+0x10/0x10 [ 1289.418644][ T4064] ? __pfx_futex_wake+0x10/0x10 [ 1289.418662][ T4064] ? do_vfs_ioctl+0x128/0x14f0 [ 1289.418678][ T4064] do_futex+0x1e3/0x350 [ 1289.418693][ T4064] ? __pfx_do_futex+0x10/0x10 [ 1289.418707][ T4064] ? cap_task_prctl+0x2af/0xa80 [ 1289.418724][ T4064] __x64_sys_futex+0x1e0/0x4c0 [ 1289.418740][ T4064] ? __pfx___x64_sys_futex+0x10/0x10 [ 1289.418755][ T4064] ? __pfx___do_sys_prctl+0x10/0x10 [ 1289.418772][ T4064] do_syscall_64+0xcd/0xf80 [ 1289.418791][ T4064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.418806][ T4064] RIP: 0033:0x7f7d4c18f7c9 [ 1289.418816][ T4064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.418830][ T4064] RSP: 002b:00007f7d4cf900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1289.418844][ T4064] RAX: ffffffffffffffda RBX: 00007f7d4c3e5fa8 RCX: 00007f7d4c18f7c9 [ 1289.418853][ T4064] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7d4c3e5fac [ 1289.418861][ T4064] RBP: 00007f7d4c3e5fa0 R08: 00007f7d4cf91000 R09: 0000000000000000 [ 1289.418870][ T4064] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1289.418879][ T4064] R13: 00007f7d4c3e6038 R14: 00007fff04ac6220 R15: 00007fff04ac6308 [ 1289.418892][ T4064] [ 1290.249311][ T8254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.316729][ T4055] chnl_net:caif_netlink_parms(): no params data found [ 1290.484588][ T8254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.538504][ T8584] Bluetooth: hci0: command tx timeout [ 1290.548480][ T4055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.568252][ T4055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.579513][ T4055] bridge_slave_0: entered allmulticast mode [ 1290.602232][ T4055] bridge_slave_0: entered promiscuous mode [ 1290.625801][ T4055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.634344][ T4055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.663166][ T4055] bridge_slave_1: entered allmulticast mode [ 1290.679708][ T4055] bridge_slave_1: entered promiscuous mode [ 1290.703283][ T8254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.724048][ T4079] netlink: 'syz.5.7137': attribute type 33 has an invalid length. [ 1290.737295][ T4055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.770645][ T4055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.786118][ T4080] netlink: 'syz.5.7137': attribute type 33 has an invalid length. [ 1290.819192][ T8254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.830954][ T4079] netlink: 322 bytes leftover after parsing attributes in process `syz.5.7137'. [ 1290.922092][ T4055] team0: Port device team_slave_0 added [ 1290.932053][ T4080] netlink: 322 bytes leftover after parsing attributes in process `syz.5.7137'. [ 1290.969660][ T4055] team0: Port device team_slave_1 added [ 1291.056663][ T4055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.102689][ T4055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.212755][ T4055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.249507][ T8254] bridge_slave_1: left allmulticast mode [ 1291.275128][ T8254] bridge_slave_1: left promiscuous mode [ 1291.300964][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.331705][ T8254] bridge_slave_0: left allmulticast mode [ 1291.337346][ T8254] bridge_slave_0: left promiscuous mode [ 1291.380635][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.611566][ T8254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.670034][ T8254] bond0 (unregistering): Released all slaves [ 1291.717445][ T4055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.746314][ T4055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.858024][ T4055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.903974][ T4090] FAULT_INJECTION: forcing a failure. [ 1291.903974][ T4090] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1291.917030][ T4090] CPU: 0 UID: 0 PID: 4090 Comm: syz.2.7141 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1291.917065][ T4090] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1291.917073][ T4090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1291.917082][ T4090] Call Trace: [ 1291.917088][ T4090] [ 1291.917094][ T4090] dump_stack_lvl+0x16c/0x1f0 [ 1291.917162][ T4090] should_fail_ex+0x512/0x640 [ 1291.917186][ T4090] should_fail_futex+0x4c/0x60 [ 1291.917201][ T4090] futex_lock_pi_atomic+0x127/0xc50 [ 1291.917220][ T4090] futex_lock_pi+0x23f/0x7c0 [ 1291.917238][ T4090] ? __pfx_futex_lock_pi+0x10/0x10 [ 1291.917259][ T4090] ? __futex_wait+0x24b/0x2f0 [ 1291.917286][ T4090] ? futex_private_hash_put+0x160/0x1b0 [ 1291.917301][ T4090] ? __pfx_futex_wake_mark+0x10/0x10 [ 1291.917323][ T4090] ? ksys_write+0x190/0x250 [ 1291.917341][ T4090] ? rcu_is_watching+0x12/0xc0 [ 1291.917363][ T4090] ? lock_release+0x201/0x2d0 [ 1291.917375][ T4090] ? __pfx___mutex_lock+0x10/0x10 [ 1291.917388][ T4090] do_futex+0x11a/0x350 [ 1291.917402][ T4090] ? __pfx_do_futex+0x10/0x10 [ 1291.917418][ T4090] __x64_sys_futex+0x1e0/0x4c0 [ 1291.917433][ T4090] ? fput+0x70/0xf0 [ 1291.917444][ T4090] ? __pfx___x64_sys_futex+0x10/0x10 [ 1291.917463][ T4090] ? xfd_validate_state+0x61/0x180 [ 1291.917475][ T4090] ? __pfx_ksys_write+0x10/0x10 [ 1291.917494][ T4090] do_syscall_64+0xcd/0xf80 [ 1291.917514][ T4090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.917528][ T4090] RIP: 0033:0x7f0cc9f8f7c9 [ 1291.917539][ T4090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1291.917556][ T4090] RSP: 002b:00007f0ccadd9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1291.917571][ T4090] RAX: ffffffffffffffda RBX: 00007f0cca1e5fa0 RCX: 00007f0cc9f8f7c9 [ 1291.917585][ T4090] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 1291.917593][ T4090] RBP: 00007f0cca013f91 R08: 0000000000000000 R09: 000000008000fff5 [ 1291.917603][ T4090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.917611][ T4090] R13: 00007f0cca1e6038 R14: 00007f0cca1e5fa0 R15: 00007ffe8b42da18 [ 1291.917624][ T4090] [ 1292.571716][ T8254] tipc: Left network mode [ 1292.604064][ T8584] Bluetooth: hci0: command tx timeout [ 1292.739828][ T4055] hsr_slave_0: entered promiscuous mode [ 1292.765235][ T4055] hsr_slave_1: entered promiscuous mode [ 1292.848834][ T8254] hsr_slave_0: left promiscuous mode [ 1292.867145][ T8254] hsr_slave_1: left promiscuous mode [ 1292.885059][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.921433][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.951773][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.985575][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1293.023562][ T8254] veth1_macvtap: left promiscuous mode [ 1293.046543][ T8254] veth0_macvtap: left promiscuous mode [ 1293.072843][ T8254] veth1_vlan: left promiscuous mode [ 1293.101720][ T8254] veth0_vlan: left promiscuous mode [ 1293.603481][ T8254] team0 (unregistering): Port device team_slave_1 removed [ 1293.641230][ T8254] team0 (unregistering): Port device team_slave_0 removed [ 1293.735372][ T8254] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 1293.960871][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1293.969273][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.266931][ T4055] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1294.300613][ T4055] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1294.327678][ T4055] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1294.354056][ T4055] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1294.481202][ T4055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.522764][ T4055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.552456][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.559546][ T8254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.600636][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.607725][ T8254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.673843][ T8584] Bluetooth: hci0: command tx timeout [ 1294.970712][ T4181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7155'. [ 1295.016937][ T4181] mac80211_hwsim hwsim65 wlan1: entered promiscuous mode [ 1295.060989][ T4181] mac80211_hwsim hwsim65 wlan1: entered allmulticast mode [ 1295.097536][ T4055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.184047][ T4192] FAULT_INJECTION: forcing a failure. [ 1295.184047][ T4192] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.211647][ T4055] veth0_vlan: entered promiscuous mode [ 1295.256939][ T4055] veth1_vlan: entered promiscuous mode [ 1295.272938][ T4192] CPU: 0 UID: 0 PID: 4192 Comm: syz.5.7157 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1295.272972][ T4192] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1295.272980][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1295.272989][ T4192] Call Trace: [ 1295.272994][ T4192] [ 1295.273000][ T4192] dump_stack_lvl+0x16c/0x1f0 [ 1295.273024][ T4192] should_fail_ex+0x512/0x640 [ 1295.273044][ T4192] should_failslab+0xc2/0x120 [ 1295.273064][ T4192] __kmalloc_noprof+0xeb/0x910 [ 1295.273078][ T4192] ? lsm_blob_alloc+0x68/0x90 [ 1295.273093][ T4192] ? lsm_blob_alloc+0x68/0x90 [ 1295.273105][ T4192] lsm_blob_alloc+0x68/0x90 [ 1295.273118][ T4192] security_prepare_creds+0x2f/0x270 [ 1295.273139][ T4192] prepare_creds+0x5d6/0x940 [ 1295.273155][ T4192] __sys_setfsgid+0xe3/0x380 [ 1295.273172][ T4192] ? rcu_is_watching+0x12/0xc0 [ 1295.273190][ T4192] do_syscall_64+0xcd/0xf80 [ 1295.273210][ T4192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.273224][ T4192] RIP: 0033:0x7f7d4c18f7c9 [ 1295.273235][ T4192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1295.273248][ T4192] RSP: 002b:00007f7d4cf6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 1295.273262][ T4192] RAX: ffffffffffffffda RBX: 00007f7d4c3e6090 RCX: 00007f7d4c18f7c9 [ 1295.273272][ T4192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1295.273280][ T4192] RBP: 00007f7d4c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1295.273288][ T4192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.273296][ T4192] R13: 00007f7d4c3e6128 R14: 00007f7d4c3e6090 R15: 00007fff04ac6308 [ 1295.273309][ T4192] [ 1295.876878][ T4055] veth0_macvtap: entered promiscuous mode [ 1295.908426][ T4055] veth1_macvtap: entered promiscuous mode [ 1295.995260][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.141335][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.150232][ T4220] FAULT_INJECTION: forcing a failure. [ 1296.150232][ T4220] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.218472][ T4220] CPU: 0 UID: 0 PID: 4220 Comm: syz.1.7162 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1296.218505][ T4220] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1296.218514][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1296.218523][ T4220] Call Trace: [ 1296.218528][ T4220] [ 1296.218533][ T4220] dump_stack_lvl+0x16c/0x1f0 [ 1296.218558][ T4220] should_fail_ex+0x512/0x640 [ 1296.218578][ T4220] should_failslab+0xc2/0x120 [ 1296.218598][ T4220] __kmalloc_noprof+0xeb/0x910 [ 1296.218612][ T4220] ? __register_sysctl_table+0xb3/0x1900 [ 1296.218631][ T4220] ? __register_sysctl_table+0xb3/0x1900 [ 1296.218648][ T4220] __register_sysctl_table+0xb3/0x1900 [ 1296.218664][ T4220] ? rcu_is_watching+0x12/0xc0 [ 1296.218682][ T4220] ? lock_release+0x201/0x2d0 [ 1296.218696][ T4220] ? __pfx___register_sysctl_table+0x10/0x10 [ 1296.218712][ T4220] ? is_module_address+0x69/0xf0 [ 1296.218727][ T4220] ? register_net_sysctl_sz+0x222/0x3d0 [ 1296.218742][ T4220] brnf_init_net+0x289/0x450 [ 1296.218762][ T4220] ? __pfx_brnf_init_net+0x10/0x10 [ 1296.218779][ T4220] ops_init+0x1e2/0x5f0 [ 1296.218798][ T4220] setup_net+0x11d/0x3a0 [ 1296.218816][ T4220] ? __pfx_setup_net+0x10/0x10 [ 1296.218833][ T4220] ? lockdep_init_map_type+0x5c/0x270 [ 1296.218846][ T4220] ? mutex_init_lockep+0x110/0x150 [ 1296.218860][ T4220] copy_net_ns+0x351/0x7c0 [ 1296.218880][ T4220] create_new_namespaces+0x3ea/0xab0 [ 1296.218900][ T4220] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1296.218918][ T4220] ksys_unshare+0x45b/0xa40 [ 1296.218938][ T4220] ? __pfx_ksys_unshare+0x10/0x10 [ 1296.218958][ T4220] ? xfd_validate_state+0x61/0x180 [ 1296.218973][ T4220] __x64_sys_unshare+0x31/0x40 [ 1296.218992][ T4220] do_syscall_64+0xcd/0xf80 [ 1296.219013][ T4220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.219027][ T4220] RIP: 0033:0x7fe86118f7c9 [ 1296.219038][ T4220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1296.219052][ T4220] RSP: 002b:00007fe861f59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1296.219066][ T4220] RAX: ffffffffffffffda RBX: 00007fe8613e5fa0 RCX: 00007fe86118f7c9 [ 1296.219075][ T4220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1296.219083][ T4220] RBP: 00007fe861213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1296.219092][ T4220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1296.219101][ T4220] R13: 00007fe8613e6038 R14: 00007fe8613e5fa0 R15: 00007ffc9a38ee88 [ 1296.219114][ T4220] [ 1296.683096][T27715] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.691944][T27715] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.700686][T27715] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.709488][T27715] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.774716][ T8584] Bluetooth: hci0: command tx timeout [ 1297.121420][ T4055] ieee80211 phy67: Selected rate control algorithm 'minstrel_ht' [ 1297.133504][ T4242] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7166'. [ 1297.191595][ T4242] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 1297.216394][ T4242] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 1297.262816][T25818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.274978][ T4055] ieee80211 phy68: Selected rate control algorithm 'minstrel_ht' [ 1297.286948][T25818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.294914][ T4246] FAULT_INJECTION: forcing a failure. [ 1297.294914][ T4246] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.354319][ T4246] CPU: 0 UID: 0 PID: 4246 Comm: syz.1.7167 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1297.354352][ T4246] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1297.354360][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1297.354369][ T4246] Call Trace: [ 1297.354374][ T4246] [ 1297.354380][ T4246] dump_stack_lvl+0x16c/0x1f0 [ 1297.354404][ T4246] should_fail_ex+0x512/0x640 [ 1297.354425][ T4246] should_failslab+0xc2/0x120 [ 1297.354446][ T4246] __kmalloc_noprof+0xeb/0x910 [ 1297.354461][ T4246] ? lsm_blob_alloc+0x68/0x90 [ 1297.354477][ T4246] ? lsm_blob_alloc+0x68/0x90 [ 1297.354489][ T4246] lsm_blob_alloc+0x68/0x90 [ 1297.354502][ T4246] security_prepare_creds+0x2f/0x270 [ 1297.354524][ T4246] prepare_creds+0x5d6/0x940 [ 1297.354540][ T4246] __sys_setfsgid+0xe3/0x380 [ 1297.354556][ T4246] ? rcu_is_watching+0x12/0xc0 [ 1297.354576][ T4246] do_syscall_64+0xcd/0xf80 [ 1297.354596][ T4246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.354610][ T4246] RIP: 0033:0x7fe86118f7c9 [ 1297.354621][ T4246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1297.354634][ T4246] RSP: 002b:00007fe85f3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 1297.354648][ T4246] RAX: ffffffffffffffda RBX: 00007fe8613e6090 RCX: 00007fe86118f7c9 [ 1297.354657][ T4246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1297.354665][ T4246] RBP: 00007fe861213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1297.354676][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.354684][ T4246] R13: 00007fe8613e6128 R14: 00007fe8613e6090 R15: 00007ffc9a38ee88 [ 1297.354697][ T4246] [ 1297.358296][T27727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.637488][ T4259] FAULT_INJECTION: forcing a failure. [ 1297.637488][ T4259] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.690428][ T4259] CPU: 0 UID: 0 PID: 4259 Comm: syz.5.7168 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1297.690463][ T4259] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1297.690471][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1297.690480][ T4259] Call Trace: [ 1297.690485][ T4259] [ 1297.690491][ T4259] dump_stack_lvl+0x16c/0x1f0 [ 1297.690515][ T4259] should_fail_ex+0x512/0x640 [ 1297.690536][ T4259] should_failslab+0xc2/0x120 [ 1297.690557][ T4259] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1297.690574][ T4259] ? lock_release+0x201/0x2d0 [ 1297.690587][ T4259] ? __d_alloc+0x35/0xa80 [ 1297.690607][ T4259] ? __d_alloc+0x35/0xa80 [ 1297.690624][ T4259] __d_alloc+0x35/0xa80 [ 1297.690643][ T4259] d_alloc+0x4a/0x1e0 [ 1297.690662][ T4259] lookup_one_qstr_excl+0x175/0x250 [ 1297.690677][ T4259] start_dirop+0x59/0xb0 [ 1297.690693][ T4259] simple_start_creating+0xf4/0x100 [ 1297.690710][ T4259] ? __pfx_simple_start_creating+0x10/0x10 [ 1297.690732][ T4259] ? do_raw_spin_unlock+0x172/0x230 [ 1297.690760][ T4259] ? simple_pin_fs+0xa3/0x190 [ 1297.690780][ T4259] debugfs_start_creating.part.0+0x82/0x190 [ 1297.690801][ T4259] __debugfs_create_file+0xb3/0x530 [ 1297.690820][ T4259] debugfs_create_file_full+0x41/0x60 [ 1297.690840][ T4259] kvm_dev_ioctl+0x14ca/0x1a80 [ 1297.690860][ T4259] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1297.690882][ T4259] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1297.690899][ T4259] __x64_sys_ioctl+0x18e/0x210 [ 1297.690914][ T4259] do_syscall_64+0xcd/0xf80 [ 1297.690935][ T4259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.690948][ T4259] RIP: 0033:0x7f7d4c18f7c9 [ 1297.690959][ T4259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1297.690973][ T4259] RSP: 002b:00007f7d4cf6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1297.690987][ T4259] RAX: ffffffffffffffda RBX: 00007f7d4c3e6090 RCX: 00007f7d4c18f7c9 [ 1297.690996][ T4259] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 1297.691004][ T4259] RBP: 00007f7d4c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1297.691013][ T4259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.691020][ T4259] R13: 00007f7d4c3e6128 R14: 00007f7d4c3e6090 R15: 00007fff04ac6308 [ 1297.691033][ T4259] [ 1297.984083][T27727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.024455][ T4264] FAULT_INJECTION: forcing a failure. [ 1298.024455][ T4264] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1298.037969][ T4264] CPU: 0 UID: 0 PID: 4264 Comm: syz.1.7172 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1298.038005][ T4264] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1298.038014][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1298.038023][ T4264] Call Trace: [ 1298.038028][ T4264] [ 1298.038034][ T4264] dump_stack_lvl+0x16c/0x1f0 [ 1298.038059][ T4264] should_fail_ex+0x512/0x640 [ 1298.038080][ T4264] should_fail_alloc_page+0xe7/0x130 [ 1298.038101][ T4264] prepare_alloc_pages+0x401/0x670 [ 1298.038123][ T4264] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1298.038138][ T4264] ? mas_find+0x156/0x6d0 [ 1298.038151][ T4264] ? validate_mm+0x403/0x560 [ 1298.038165][ T4264] ? __pfx_validate_mm+0x10/0x10 [ 1298.038178][ T4264] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1298.038202][ T4264] ? kmem_cache_free+0x171/0x770 [ 1298.038222][ T4264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1298.038241][ T4264] ? vma_wants_writenotify+0x10b/0x390 [ 1298.038258][ T4264] ? vma_set_page_prot+0xb1/0x120 [ 1298.038276][ T4264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1298.038299][ T4264] ? policy_nodemask+0xea/0x4e0 [ 1298.038318][ T4264] alloc_pages_mpol+0x1fb/0x550 [ 1298.038337][ T4264] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1298.038362][ T4264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1298.038382][ T4264] alloc_pages_noprof+0x131/0x390 [ 1298.038401][ T4264] __pmd_alloc+0x3b/0x9c0 [ 1298.038420][ T4264] ? mt_find+0x358/0xa20 [ 1298.038436][ T4264] __handle_mm_fault+0xbeb/0x2bb0 [ 1298.038451][ T4264] ? __pfx___handle_mm_fault+0x10/0x10 [ 1298.038468][ T4264] ? find_vma+0xbf/0x140 [ 1298.038483][ T4264] ? __pfx_find_vma+0x10/0x10 [ 1298.038505][ T4264] handle_mm_fault+0x3fe/0xad0 [ 1298.038520][ T4264] __get_user_pages+0x54e/0x3590 [ 1298.038541][ T4264] ? __pfx___get_user_pages+0x10/0x10 [ 1298.038560][ T4264] ? __pfx___might_resched+0x10/0x10 [ 1298.038579][ T4264] ? cap_capable+0x10d/0x3f0 [ 1298.038595][ T4264] populate_vma_page_range+0x267/0x3f0 [ 1298.038615][ T4264] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1298.038634][ T4264] ? __pfx_find_vma_intersection+0x10/0x10 [ 1298.038652][ T4264] ? do_mmap+0x69c/0x1210 [ 1298.038670][ T4264] __mm_populate+0x1d8/0x380 [ 1298.038689][ T4264] ? __pfx___mm_populate+0x10/0x10 [ 1298.038764][ T4264] ? up_write+0x282/0x4e0 [ 1298.038781][ T4264] vm_mmap_pgoff+0x37f/0x470 [ 1298.038801][ T4264] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1298.038818][ T4264] ? __pfx___might_resched+0x10/0x10 [ 1298.038837][ T4264] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 1298.038858][ T4264] ? __x64_sys_futex+0x1e0/0x4c0 [ 1298.038873][ T4264] ? __x64_sys_futex+0x1e9/0x4c0 [ 1298.038893][ T4264] ksys_mmap_pgoff+0x7d/0x5c0 [ 1298.038910][ T4264] ? xfd_validate_state+0x61/0x180 [ 1298.038923][ T4264] ? __pfx_ksys_write+0x10/0x10 [ 1298.038943][ T4264] __x64_sys_mmap+0x125/0x190 [ 1298.038961][ T4264] do_syscall_64+0xcd/0xf80 [ 1298.038992][ T4264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.039008][ T4264] RIP: 0033:0x7fe86118f7c9 [ 1298.039023][ T4264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1298.039040][ T4264] RSP: 002b:00007fe861f59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1298.039054][ T4264] RAX: ffffffffffffffda RBX: 00007fe8613e5fa0 RCX: 00007fe86118f7c9 [ 1298.039065][ T4264] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1298.039074][ T4264] RBP: 00007fe861213f91 R08: 0000000000000002 R09: 0000000000008000 [ 1298.039082][ T4264] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1298.039091][ T4264] R13: 00007fe8613e6038 R14: 00007fe8613e5fa0 R15: 00007ffc9a38ee88 [ 1298.039105][ T4264] [ 1298.432605][ T4267] sp0: Synchronizing with TNC [ 1298.457640][ T4262] FAULT_INJECTION: forcing a failure. [ 1298.457640][ T4262] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1298.470527][ T4262] CPU: 0 UID: 0 PID: 4262 Comm: syz.2.7171 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1298.470558][ T4262] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1298.470565][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1298.470574][ T4262] Call Trace: [ 1298.470580][ T4262] [ 1298.470585][ T4262] dump_stack_lvl+0x16c/0x1f0 [ 1298.470610][ T4262] should_fail_ex+0x512/0x640 [ 1298.470631][ T4262] get_futex_key+0x1d0/0x15f0 [ 1298.470646][ T4262] ? __pfx_get_futex_key+0x10/0x10 [ 1298.470664][ T4262] futex_wake+0xea/0x530 [ 1298.470687][ T4262] ? trace_irq_enable.constprop.0+0xd4/0x110 [ 1298.470710][ T4262] ? __pfx_futex_wake+0x10/0x10 [ 1298.470728][ T4262] ? fd_install+0x223/0x570 [ 1298.470746][ T4262] ? putname+0xf5/0x1a0 [ 1298.470768][ T4262] do_futex+0x1e3/0x350 [ 1298.470782][ T4262] ? __pfx_do_futex+0x10/0x10 [ 1298.470798][ T4262] __x64_sys_futex+0x1e0/0x4c0 [ 1298.470813][ T4262] ? __x64_sys_openat+0x174/0x210 [ 1298.470827][ T4262] ? __pfx___x64_sys_futex+0x10/0x10 [ 1298.470846][ T4262] do_syscall_64+0xcd/0xf80 [ 1298.470866][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.470880][ T4262] RIP: 0033:0x7f0cc9f8f7c9 [ 1298.470891][ T4262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1298.470905][ T4262] RSP: 002b:00007f0ccadd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1298.470919][ T4262] RAX: ffffffffffffffda RBX: 00007f0cca1e5fa8 RCX: 00007f0cc9f8f7c9 [ 1298.470928][ T4262] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0cca1e5fac [ 1298.470937][ T4262] RBP: 00007f0cca1e5fa0 R08: 00007f0ccadda000 R09: 0000000000000000 [ 1298.470946][ T4262] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 1298.470954][ T4262] R13: 00007f0cca1e6038 R14: 00007ffe8b42d930 R15: 00007ffe8b42da18 [ 1298.470967][ T4262] [ 1298.852046][ T4282] FAULT_INJECTION: forcing a failure. [ 1298.852046][ T4282] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1298.864931][ T4282] CPU: 0 UID: 0 PID: 4282 Comm: syz.1.7176 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1298.864963][ T4282] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1298.864971][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1298.864980][ T4282] Call Trace: [ 1298.864985][ T4282] [ 1298.864991][ T4282] dump_stack_lvl+0x16c/0x1f0 [ 1298.865016][ T4282] should_fail_ex+0x512/0x640 [ 1298.865041][ T4282] get_futex_key+0x1d0/0x15f0 [ 1298.865057][ T4282] ? __pfx_get_futex_key+0x10/0x10 [ 1298.865075][ T4282] futex_wait_setup+0x9d/0x570 [ 1298.865096][ T4282] __futex_wait+0x193/0x2f0 [ 1298.865115][ T4282] ? __pfx___futex_wait+0x10/0x10 [ 1298.865134][ T4282] ? __pfx_futex_wake_mark+0x10/0x10 [ 1298.865152][ T4282] ? futex_wake+0x456/0x530 [ 1298.865168][ T4282] ? rcu_is_watching+0x12/0xc0 [ 1298.865186][ T4282] ? futex_private_hash_put+0x160/0x1b0 [ 1298.865200][ T4282] futex_wait+0xe8/0x380 [ 1298.865217][ T4282] ? __pfx_futex_wait+0x10/0x10 [ 1298.865238][ T4282] do_futex+0x229/0x350 [ 1298.865253][ T4282] ? __pfx_do_futex+0x10/0x10 [ 1298.865269][ T4282] __x64_sys_futex+0x1e0/0x4c0 [ 1298.865285][ T4282] ? __pfx___x64_sys_futex+0x10/0x10 [ 1298.865300][ T4282] ? xfd_validate_state+0x61/0x180 [ 1298.865315][ T4282] do_syscall_64+0xcd/0xf80 [ 1298.865335][ T4282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.865349][ T4282] RIP: 0033:0x7fe86118f7c9 [ 1298.865360][ T4282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1298.865373][ T4282] RSP: 002b:00007fe85f3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1298.865388][ T4282] RAX: ffffffffffffffda RBX: 00007fe8613e6098 RCX: 00007fe86118f7c9 [ 1298.865398][ T4282] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe8613e6098 [ 1298.865406][ T4282] RBP: 00007fe8613e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.865415][ T4282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.865423][ T4282] R13: 00007fe8613e6128 R14: 00007ffc9a38eda0 R15: 00007ffc9a38ee88 [ 1298.865436][ T4282] [ 1299.004740][ T4286] ieee80211 phy69: Selected rate control algorithm 'minstrel_ht' [ 1299.293322][ T4262] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1299.315889][ T4262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1299.338639][ T4262] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1299.359221][ T4262] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1299.378214][ T4262] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1299.401451][ T4262] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1299.434053][ T4297] Loading of unsigned module is rejected [ 1299.571010][ T4302] FAULT_INJECTION: forcing a failure. [ 1299.571010][ T4302] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.682312][ T4302] CPU: 0 UID: 0 PID: 4302 Comm: syz.3.7182 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1299.682345][ T4302] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1299.682354][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1299.682363][ T4302] Call Trace: [ 1299.682368][ T4302] [ 1299.682374][ T4302] dump_stack_lvl+0x16c/0x1f0 [ 1299.682399][ T4302] should_fail_ex+0x512/0x640 [ 1299.682419][ T4302] should_failslab+0xc2/0x120 [ 1299.682439][ T4302] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1299.682455][ T4302] ? alloc_inode+0x64/0x240 [ 1299.682470][ T4302] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1299.682489][ T4302] ? alloc_inode+0x64/0x240 [ 1299.682502][ T4302] alloc_inode+0x64/0x240 [ 1299.682515][ T4302] new_inode+0x22/0x1c0 [ 1299.682529][ T4302] __debugfs_create_file+0x105/0x530 [ 1299.682548][ T4302] debugfs_create_file_full+0x41/0x60 [ 1299.682567][ T4302] kvm_dev_ioctl+0x14ca/0x1a80 [ 1299.682586][ T4302] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1299.682605][ T4302] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1299.682622][ T4302] __x64_sys_ioctl+0x18e/0x210 [ 1299.682638][ T4302] do_syscall_64+0xcd/0xf80 [ 1299.682658][ T4302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.682673][ T4302] RIP: 0033:0x7f81ad18f7c9 [ 1299.682683][ T4302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1299.682702][ T4302] RSP: 002b:00007f81ae02a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.682717][ T4302] RAX: ffffffffffffffda RBX: 00007f81ad3e6090 RCX: 00007f81ad18f7c9 [ 1299.682727][ T4302] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000b [ 1299.682736][ T4302] RBP: 00007f81ad213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1299.682744][ T4302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1299.682753][ T4302] R13: 00007f81ad3e6128 R14: 00007f81ad3e6090 R15: 00007fff66b3f588 [ 1299.682767][ T4302] [ 1299.682773][ T4302] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [ 1299.966115][ T4312] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7186'. [ 1299.988476][ T4313] FAULT_INJECTION: forcing a failure. [ 1299.988476][ T4313] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1300.036345][ T4313] CPU: 0 UID: 0 PID: 4313 Comm: syz.1.7185 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1300.036379][ T4313] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1300.036387][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1300.036397][ T4313] Call Trace: [ 1300.036402][ T4313] [ 1300.036408][ T4313] dump_stack_lvl+0x16c/0x1f0 [ 1300.036432][ T4313] should_fail_ex+0x512/0x640 [ 1300.036453][ T4313] get_futex_key+0x1d0/0x15f0 [ 1300.036469][ T4313] ? __pfx_get_futex_key+0x10/0x10 [ 1300.036485][ T4313] futex_wait_setup+0x9d/0x570 [ 1300.036506][ T4313] __futex_wait+0x193/0x2f0 [ 1300.036524][ T4313] ? __pfx___futex_wait+0x10/0x10 [ 1300.036542][ T4313] ? __pfx_futex_wake_mark+0x10/0x10 [ 1300.036561][ T4313] ? futex_wake+0x456/0x530 [ 1300.036576][ T4313] ? rcu_is_watching+0x12/0xc0 [ 1300.036595][ T4313] ? futex_private_hash_put+0x160/0x1b0 [ 1300.036609][ T4313] futex_wait+0xe8/0x380 [ 1300.036637][ T4313] ? __pfx_futex_wait+0x10/0x10 [ 1300.036660][ T4313] do_futex+0x229/0x350 [ 1300.036675][ T4313] ? __pfx_do_futex+0x10/0x10 [ 1300.036693][ T4313] __x64_sys_futex+0x1e0/0x4c0 [ 1300.036710][ T4313] ? __pfx___x64_sys_futex+0x10/0x10 [ 1300.036726][ T4313] ? xfd_validate_state+0x61/0x180 [ 1300.036742][ T4313] do_syscall_64+0xcd/0xf80 [ 1300.036762][ T4313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.036776][ T4313] RIP: 0033:0x7fe86118f7c9 [ 1300.036787][ T4313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1300.036800][ T4313] RSP: 002b:00007fe85f3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1300.036815][ T4313] RAX: ffffffffffffffda RBX: 00007fe8613e6098 RCX: 00007fe86118f7c9 [ 1300.036825][ T4313] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe8613e6098 [ 1300.036833][ T4313] RBP: 00007fe8613e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.036841][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.036849][ T4313] R13: 00007fe8613e6128 R14: 00007ffc9a38eda0 R15: 00007ffc9a38ee88 [ 1300.036862][ T4313] [ 1300.722263][ T8584] Bluetooth: hci3: command 0x0c1a tx timeout [ 1300.888108][ T4339] netlink: 'syz.5.7190': attribute type 12 has an invalid length. [ 1301.360252][ T9425] Bluetooth: hci2: command 0x0406 tx timeout [ 1301.366303][T23788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1301.372356][ T8584] Bluetooth: hci0: command 0x0c1a tx timeout [ 1301.539185][ T4357] FAULT_INJECTION: forcing a failure. [ 1301.539185][ T4357] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1301.683898][ T4357] CPU: 0 UID: 0 PID: 4357 Comm: syz.1.7196 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1301.683933][ T4357] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1301.683943][ T4357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1301.683951][ T4357] Call Trace: [ 1301.683957][ T4357] [ 1301.683962][ T4357] dump_stack_lvl+0x16c/0x1f0 [ 1301.683988][ T4357] should_fail_ex+0x512/0x640 [ 1301.684007][ T4357] get_futex_key+0x1d0/0x15f0 [ 1301.684024][ T4357] ? __pfx_get_futex_key+0x10/0x10 [ 1301.684040][ T4357] futex_wait_setup+0x9d/0x570 [ 1301.684060][ T4357] __futex_wait+0x193/0x2f0 [ 1301.684077][ T4357] ? __pfx___futex_wait+0x10/0x10 [ 1301.684095][ T4357] ? __pfx_futex_wake_mark+0x10/0x10 [ 1301.684114][ T4357] ? futex_wake+0x456/0x530 [ 1301.684129][ T4357] ? rcu_is_watching+0x12/0xc0 [ 1301.684149][ T4357] ? futex_private_hash_put+0x160/0x1b0 [ 1301.684166][ T4357] futex_wait+0xe8/0x380 [ 1301.684183][ T4357] ? __pfx_futex_wait+0x10/0x10 [ 1301.684204][ T4357] do_futex+0x229/0x350 [ 1301.684219][ T4357] ? __pfx_do_futex+0x10/0x10 [ 1301.684236][ T4357] __x64_sys_futex+0x1e0/0x4c0 [ 1301.684252][ T4357] ? __pfx___x64_sys_futex+0x10/0x10 [ 1301.684268][ T4357] ? xfd_validate_state+0x61/0x180 [ 1301.684283][ T4357] do_syscall_64+0xcd/0xf80 [ 1301.684304][ T4357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.684317][ T4357] RIP: 0033:0x7fe86118f7c9 [ 1301.684329][ T4357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1301.684343][ T4357] RSP: 002b:00007fe85f3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1301.684357][ T4357] RAX: ffffffffffffffda RBX: 00007fe8613e6098 RCX: 00007fe86118f7c9 [ 1301.684366][ T4357] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe8613e6098 [ 1301.684374][ T4357] RBP: 00007fe8613e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.684383][ T4357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1301.684391][ T4357] R13: 00007fe8613e6128 R14: 00007ffc9a38eda0 R15: 00007ffc9a38ee88 [ 1301.684405][ T4357] [ 1303.428479][ T8584] Bluetooth: hci0: command 0x0c1a tx timeout [ 1304.134711][ T4401] FAULT_INJECTION: forcing a failure. [ 1304.134711][ T4401] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.197362][ T4401] CPU: 0 UID: 0 PID: 4401 Comm: syz.2.7204 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1304.197396][ T4401] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1304.197405][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1304.197414][ T4401] Call Trace: [ 1304.197418][ T4401] [ 1304.197424][ T4401] dump_stack_lvl+0x16c/0x1f0 [ 1304.197451][ T4401] should_fail_ex+0x512/0x640 [ 1304.197470][ T4401] should_failslab+0xc2/0x120 [ 1304.197491][ T4401] __kmalloc_cache_noprof+0x80/0x800 [ 1304.197506][ T4401] ? kvm_dev_ioctl+0x1358/0x1a80 [ 1304.197526][ T4401] ? kvm_dev_ioctl+0x1358/0x1a80 [ 1304.197542][ T4401] kvm_dev_ioctl+0x1358/0x1a80 [ 1304.197564][ T4401] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1304.197583][ T4401] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1304.197599][ T4401] __x64_sys_ioctl+0x18e/0x210 [ 1304.197615][ T4401] do_syscall_64+0xcd/0xf80 [ 1304.197635][ T4401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.197650][ T4401] RIP: 0033:0x7f0cc9f8f7c9 [ 1304.197661][ T4401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1304.197675][ T4401] RSP: 002b:00007f0ccad97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1304.197690][ T4401] RAX: ffffffffffffffda RBX: 00007f0cca1e6180 RCX: 00007f0cc9f8f7c9 [ 1304.197700][ T4401] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000b [ 1304.197709][ T4401] RBP: 00007f0cca013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1304.197717][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.197725][ T4401] R13: 00007f0cca1e6218 R14: 00007f0cca1e6180 R15: 00007ffe8b42da18 [ 1304.197738][ T4401] [ 1304.651787][ T4405] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.7206: iget: checksum invalid [ 1304.721611][ T4410] FAULT_INJECTION: forcing a failure. [ 1304.721611][ T4410] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1304.753099][ T4409] HfR: entered promiscuous mode [ 1304.770854][ T4410] CPU: 0 UID: 0 PID: 4410 Comm: syz.5.7208 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1304.770888][ T4410] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1304.770896][ T4410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1304.770904][ T4410] Call Trace: [ 1304.770910][ T4410] [ 1304.770916][ T4410] dump_stack_lvl+0x16c/0x1f0 [ 1304.770939][ T4410] should_fail_ex+0x512/0x640 [ 1304.770959][ T4410] get_futex_key+0x1d0/0x15f0 [ 1304.770975][ T4410] ? __pfx_get_futex_key+0x10/0x10 [ 1304.770988][ T4410] ? trace_ignore_this_task+0xbc/0x100 [ 1304.771010][ T4410] futex_wait_setup+0x9d/0x570 [ 1304.771030][ T4410] __futex_wait+0x193/0x2f0 [ 1304.771047][ T4410] ? __pfx___futex_wait+0x10/0x10 [ 1304.771065][ T4410] ? __pfx_futex_wake_mark+0x10/0x10 [ 1304.771083][ T4410] ? futex_wake+0x456/0x530 [ 1304.771099][ T4410] ? rcu_is_watching+0x12/0xc0 [ 1304.771117][ T4410] ? futex_private_hash_put+0x160/0x1b0 [ 1304.771131][ T4410] futex_wait+0xe8/0x380 [ 1304.771148][ T4410] ? __pfx_futex_wait+0x10/0x10 [ 1304.771169][ T4410] do_futex+0x229/0x350 [ 1304.771183][ T4410] ? __pfx_do_futex+0x10/0x10 [ 1304.771200][ T4410] __x64_sys_futex+0x1e0/0x4c0 [ 1304.771216][ T4410] ? __pfx___x64_sys_futex+0x10/0x10 [ 1304.771231][ T4410] ? xfd_validate_state+0x61/0x180 [ 1304.771246][ T4410] do_syscall_64+0xcd/0xf80 [ 1304.771266][ T4410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.771280][ T4410] RIP: 0033:0x7f7d4c18f7c9 [ 1304.771291][ T4410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1304.771304][ T4410] RSP: 002b:00007f7d4cf6f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1304.771326][ T4410] RAX: ffffffffffffffda RBX: 00007f7d4c3e6098 RCX: 00007f7d4c18f7c9 [ 1304.771336][ T4410] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7d4c3e6098 [ 1304.771344][ T4410] RBP: 00007f7d4c3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.771353][ T4410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.771362][ T4410] R13: 00007f7d4c3e6128 R14: 00007fff04ac6220 R15: 00007fff04ac6308 [ 1304.771376][ T4410] [ 1305.248430][ T4405] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1305.306354][ T4405] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.7206: iget: checksum invalid [ 1305.353027][ T4405] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1305.414270][ T4405] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.7206: iget: checksum invalid [ 1305.511712][ T4405] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1305.530653][ T8584] Bluetooth: hci0: command 0x0c1a tx timeout [ 1305.594691][ T4405] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.7206: iget: checksum invalid [ 1305.785669][ T4405] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1305.795063][ T4405] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1305.998654][ T4405] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1306.367780][ T4454] FAULT_INJECTION: forcing a failure. [ 1306.367780][ T4454] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1306.422326][ T4454] CPU: 0 UID: 0 PID: 4454 Comm: syz.3.7218 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1306.422361][ T4454] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1306.422370][ T4454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1306.422379][ T4454] Call Trace: [ 1306.422385][ T4454] [ 1306.422391][ T4454] dump_stack_lvl+0x16c/0x1f0 [ 1306.422417][ T4454] should_fail_ex+0x512/0x640 [ 1306.422436][ T4454] get_futex_key+0x1d0/0x15f0 [ 1306.422453][ T4454] ? __pfx_get_futex_key+0x10/0x10 [ 1306.422470][ T4454] futex_wait_setup+0x9d/0x570 [ 1306.422490][ T4454] __futex_wait+0x193/0x2f0 [ 1306.422507][ T4454] ? __pfx___futex_wait+0x10/0x10 [ 1306.422525][ T4454] ? __pfx_futex_wake_mark+0x10/0x10 [ 1306.422544][ T4454] ? futex_wake+0x456/0x530 [ 1306.422559][ T4454] ? rcu_is_watching+0x12/0xc0 [ 1306.422578][ T4454] ? futex_private_hash_put+0x160/0x1b0 [ 1306.422592][ T4454] futex_wait+0xe8/0x380 [ 1306.422609][ T4454] ? __pfx_futex_wait+0x10/0x10 [ 1306.422630][ T4454] do_futex+0x229/0x350 [ 1306.422644][ T4454] ? __pfx_do_futex+0x10/0x10 [ 1306.422661][ T4454] __x64_sys_futex+0x1e0/0x4c0 [ 1306.422677][ T4454] ? __pfx___x64_sys_futex+0x10/0x10 [ 1306.422692][ T4454] ? xfd_validate_state+0x61/0x180 [ 1306.422707][ T4454] do_syscall_64+0xcd/0xf80 [ 1306.422727][ T4454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.422741][ T4454] RIP: 0033:0x7f81ad18f7c9 [ 1306.422753][ T4454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1306.422766][ T4454] RSP: 002b:00007f81ae02a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1306.422780][ T4454] RAX: ffffffffffffffda RBX: 00007f81ad3e6098 RCX: 00007f81ad18f7c9 [ 1306.422789][ T4454] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f81ad3e6098 [ 1306.422798][ T4454] RBP: 00007f81ad3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1306.422806][ T4454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1306.422814][ T4454] R13: 00007f81ad3e6128 R14: 00007fff66b3f4a0 R15: 00007fff66b3f588 [ 1306.422827][ T4454] [ 1308.786107][ T4501] ================================================================== [ 1308.786123][ T4501] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 1308.786149][ T4501] Read of size 256 at addr ffff888040c3ffe2 by task syz.1.7231/4501 [ 1308.786161][ T4501] [ 1308.786171][ T4501] CPU: 0 UID: 0 PID: 4501 Comm: syz.1.7231 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1308.786199][ T4501] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1308.786207][ T4501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1308.786216][ T4501] Call Trace: [ 1308.786221][ T4501] [ 1308.786228][ T4501] dump_stack_lvl+0x116/0x1f0 [ 1308.786250][ T4501] print_report+0xcd/0x630 [ 1308.786270][ T4501] ? __virt_addr_valid+0x81/0x610 [ 1308.786291][ T4501] ? __phys_addr+0xe8/0x180 [ 1308.786310][ T4501] ? fbcon_prepare_logo+0xa03/0xc70 [ 1308.786327][ T4501] kasan_report+0xe0/0x110 [ 1308.786345][ T4501] ? fbcon_prepare_logo+0xa03/0xc70 [ 1308.786364][ T4501] kasan_check_range+0x100/0x1b0 [ 1308.786377][ T4501] __asan_memcpy+0x23/0x60 [ 1308.786395][ T4501] fbcon_prepare_logo+0xa03/0xc70 [ 1308.786415][ T4501] fbcon_init+0xda0/0x1930 [ 1308.786432][ T4501] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1308.786452][ T4501] visual_init+0x320/0x620 [ 1308.786470][ T4501] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1308.786492][ T4501] store_bind+0x61d/0x760 [ 1308.786513][ T4501] ? __pfx_store_bind+0x10/0x10 [ 1308.786532][ T4501] dev_attr_store+0x58/0x80 [ 1308.786552][ T4501] ? __pfx_dev_attr_store+0x10/0x10 [ 1308.786571][ T4501] sysfs_kf_write+0xf2/0x150 [ 1308.786584][ T4501] kernfs_fop_write_iter+0x3af/0x570 [ 1308.786602][ T4501] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1308.786615][ T4501] iter_file_splice_write+0xa24/0x12b0 [ 1308.786638][ T4501] ? copy_splice_read+0x89c/0xc20 [ 1308.786655][ T4501] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1308.786676][ T4501] ? __pfx_copy_splice_read+0x10/0x10 [ 1308.786694][ T4501] ? look_up_lock_class+0x6b/0x130 [ 1308.786715][ T4501] ? __pfx___might_resched+0x10/0x10 [ 1308.786733][ T4501] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1308.786750][ T4501] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1308.786769][ T4501] direct_splice_actor+0x192/0x6c0 [ 1308.786788][ T4501] splice_direct_to_actor+0x345/0xa30 [ 1308.786807][ T4501] ? __pfx_direct_splice_actor+0x10/0x10 [ 1308.786826][ T4501] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1308.786845][ T4501] ? futex_private_hash_put+0x160/0x1b0 [ 1308.786860][ T4501] do_splice_direct+0x174/0x240 [ 1308.786878][ T4501] ? __pfx_do_splice_direct+0x10/0x10 [ 1308.786896][ T4501] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1308.786914][ T4501] ? bpf_lsm_file_permission+0x9/0x10 [ 1308.786943][ T4501] ? security_file_permission+0x71/0x210 [ 1308.786967][ T4501] ? rw_verify_area+0xcf/0x6c0 [ 1308.786984][ T4501] do_sendfile+0xb06/0xe50 [ 1308.787002][ T4501] ? __pfx_do_sendfile+0x10/0x10 [ 1308.787019][ T4501] ? __x64_sys_futex+0x1e0/0x4c0 [ 1308.787034][ T4501] ? __x64_sys_futex+0x1e9/0x4c0 [ 1308.787049][ T4501] __x64_sys_sendfile64+0x1d8/0x220 [ 1308.787070][ T4501] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1308.787097][ T4501] do_syscall_64+0xcd/0xf80 [ 1308.787119][ T4501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.787134][ T4501] RIP: 0033:0x7fe86118f7c9 [ 1308.787146][ T4501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1308.787160][ T4501] RSP: 002b:00007fe861f59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1308.787174][ T4501] RAX: ffffffffffffffda RBX: 00007fe8613e5fa0 RCX: 00007fe86118f7c9 [ 1308.787185][ T4501] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 1308.787194][ T4501] RBP: 00007fe861213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1308.787203][ T4501] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1308.787211][ T4501] R13: 00007fe8613e6038 R14: 00007fe8613e5fa0 R15: 00007ffc9a38ee88 [ 1308.787225][ T4501] [ 1308.787231][ T4501] [ 1308.787234][ T4501] Allocated by task 8594: [ 1308.787241][ T4501] kasan_save_stack+0x33/0x60 [ 1308.787258][ T4501] kasan_save_track+0x14/0x30 [ 1308.787273][ T4501] __kasan_kmalloc+0xaa/0xb0 [ 1308.787288][ T4501] __kmalloc_node_track_caller_noprof+0x353/0x930 [ 1308.787307][ T4501] kmalloc_reserve+0xef/0x2c0 [ 1308.787327][ T4501] __alloc_skb+0x186/0x410 [ 1308.787339][ T4501] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 1308.787355][ T4501] process_one_work+0x9ba/0x1b20 [ 1308.787369][ T4501] worker_thread+0x6c8/0xf10 [ 1308.787381][ T4501] kthread+0x3c5/0x780 [ 1308.787392][ T4501] ret_from_fork+0x983/0xb10 [ 1308.787404][ T4501] ret_from_fork_asm+0x1a/0x30 [ 1308.787423][ T4501] [ 1308.787426][ T4501] Freed by task 8594: [ 1308.787432][ T4501] kasan_save_stack+0x33/0x60 [ 1308.787447][ T4501] kasan_save_track+0x14/0x30 [ 1308.787462][ T4501] kasan_save_free_info+0x3b/0x60 [ 1308.787475][ T4501] __kasan_slab_free+0x5f/0x80 [ 1308.787491][ T4501] kfree+0x2f8/0x6e0 [ 1308.787502][ T4501] skb_free_head+0x114/0x210 [ 1308.787515][ T4501] skb_release_data+0x795/0x9e0 [ 1308.787530][ T4501] consume_skb+0xbf/0x100 [ 1308.787546][ T4501] nsim_dev_trap_report_work+0x8bd/0xcf0 [ 1308.787561][ T4501] process_one_work+0x9ba/0x1b20 [ 1308.787574][ T4501] worker_thread+0x6c8/0xf10 [ 1308.787586][ T4501] kthread+0x3c5/0x780 [ 1308.787597][ T4501] ret_from_fork+0x983/0xb10 [ 1308.787609][ T4501] ret_from_fork_asm+0x1a/0x30 [ 1308.787626][ T4501] [ 1308.787629][ T4501] The buggy address belongs to the object at ffff888040c3e000 [ 1308.787629][ T4501] which belongs to the cache kmalloc-4k of size 4096 [ 1308.787641][ T4501] The buggy address is located 4066 bytes to the right of [ 1308.787641][ T4501] allocated 4096-byte region [ffff888040c3e000, ffff888040c3f000) [ 1308.787655][ T4501] [ 1308.787659][ T4501] The buggy address belongs to the physical page: [ 1308.787665][ T4501] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40c38 [ 1308.787678][ T4501] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1308.787689][ T4501] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1308.787701][ T4501] page_type: f5(slab) [ 1308.787713][ T4501] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122 [ 1308.787725][ T4501] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1308.787738][ T4501] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122 [ 1308.787750][ T4501] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1308.787762][ T4501] head: 00fff00000000003 ffffea0001030e01 00000000ffffffff 00000000ffffffff [ 1308.787774][ T4501] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1308.787783][ T4501] page dumped because: kasan: bad access detected [ 1308.787790][ T4501] page_owner tracks the page as allocated [ 1308.787795][ T4501] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11792, tgid 11792 (kworker/u10:44), ts 395620157186, free_ts 395512997300 [ 1308.787819][ T4501] post_alloc_hook+0x1af/0x220 [ 1308.787832][ T4501] get_page_from_freelist+0xd0b/0x31a0 [ 1308.787846][ T4501] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1308.787861][ T4501] alloc_pages_mpol+0x1fb/0x550 [ 1308.787880][ T4501] new_slab+0x2c3/0x430 [ 1308.787891][ T4501] ___slab_alloc+0xe18/0x1c90 [ 1308.787902][ T4501] __slab_alloc.constprop.0+0x63/0x110 [ 1308.787915][ T4501] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 1308.787932][ T4501] kmalloc_reserve+0xef/0x2c0 [ 1308.787953][ T4501] __alloc_skb+0x186/0x410 [ 1308.787966][ T4501] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 1308.787982][ T4501] process_one_work+0x9ba/0x1b20 [ 1308.787995][ T4501] worker_thread+0x6c8/0xf10 [ 1308.788007][ T4501] kthread+0x3c5/0x780 [ 1308.788018][ T4501] ret_from_fork+0x983/0xb10 [ 1308.788030][ T4501] ret_from_fork_asm+0x1a/0x30 [ 1308.788047][ T4501] page last free pid 13210 tgid 13209 stack trace: [ 1308.788056][ T4501] __free_frozen_pages+0x7df/0x1170 [ 1308.788067][ T4501] __put_partials+0x130/0x170 [ 1308.788088][ T4501] qlist_free_all+0x4c/0xf0 [ 1308.788103][ T4501] kasan_quarantine_reduce+0x195/0x1e0 [ 1308.788119][ T4501] __kasan_slab_alloc+0x69/0x90 [ 1308.788136][ T4501] __kmalloc_node_track_caller_noprof+0x30b/0x930 [ 1308.788153][ T4501] kstrdup+0x53/0x100 [ 1308.788167][ T4501] kstrdup_const+0x63/0x80 [ 1308.788181][ T4501] kvasprintf_const+0x10f/0x1a0 [ 1308.788198][ T4501] kobject_set_name_vargs+0x5a/0x140 [ 1308.788212][ T4501] dev_set_name+0xc7/0x100 [ 1308.788225][ T4501] netdev_register_kobject+0xc5/0x3d0 [ 1308.788237][ T4501] register_netdevice+0x13ac/0x21d0 [ 1308.788256][ T4501] register_netdev+0x34/0x50 [ 1308.788273][ T4501] sit_init_net+0x286/0x630 [ 1308.788288][ T4501] ops_init+0x1e2/0x5f0 [ 1308.788304][ T4501] [ 1308.788308][ T4501] Memory state around the buggy address: [ 1308.788315][ T4501] ffff888040c3fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1308.788325][ T4501] ffff888040c3ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1308.788334][ T4501] >ffff888040c3ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1308.788342][ T4501] ^ [ 1308.788350][ T4501] ffff888040c40000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1308.788359][ T4501] ffff888040c40080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1308.788367][ T4501] ================================================================== [ 1308.796695][ T4501] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1308.796712][ T4501] CPU: 0 UID: 0 PID: 4501 Comm: syz.1.7231 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1308.796741][ T4501] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1308.796749][ T4501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1308.796759][ T4501] Call Trace: [ 1308.796764][ T4501] [ 1308.796770][ T4501] dump_stack_lvl+0x3d/0x1f0 [ 1308.796793][ T4501] vpanic+0x640/0x6f0 [ 1308.796808][ T4501] panic+0xca/0xd0 [ 1308.796821][ T4501] ? __pfx_panic+0x10/0x10 [ 1308.796834][ T4501] ? fbcon_prepare_logo+0xa03/0xc70 [ 1308.796853][ T4501] ? preempt_schedule_common+0x44/0xc0 [ 1308.796873][ T4501] ? preempt_schedule_thunk+0x16/0x30 [ 1308.796888][ T4501] check_panic_on_warn+0xab/0xb0 [ 1308.796902][ T4501] end_report+0x107/0x160 [ 1308.796921][ T4501] kasan_report+0xee/0x110 [ 1308.796940][ T4501] ? fbcon_prepare_logo+0xa03/0xc70 [ 1308.796959][ T4501] kasan_check_range+0x100/0x1b0 [ 1308.796972][ T4501] __asan_memcpy+0x23/0x60 [ 1308.796988][ T4501] fbcon_prepare_logo+0xa03/0xc70 [ 1308.797008][ T4501] fbcon_init+0xda0/0x1930 [ 1308.797026][ T4501] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1308.797046][ T4501] visual_init+0x320/0x620 [ 1308.797064][ T4501] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1308.797092][ T4501] store_bind+0x61d/0x760 [ 1308.797113][ T4501] ? __pfx_store_bind+0x10/0x10 [ 1308.797133][ T4501] dev_attr_store+0x58/0x80 [ 1308.797154][ T4501] ? __pfx_dev_attr_store+0x10/0x10 [ 1308.797173][ T4501] sysfs_kf_write+0xf2/0x150 [ 1308.797187][ T4501] kernfs_fop_write_iter+0x3af/0x570 [ 1308.797206][ T4501] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1308.797219][ T4501] iter_file_splice_write+0xa24/0x12b0 [ 1308.797243][ T4501] ? copy_splice_read+0x89c/0xc20 [ 1308.797261][ T4501] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1308.797282][ T4501] ? __pfx_copy_splice_read+0x10/0x10 [ 1308.797301][ T4501] ? look_up_lock_class+0x6b/0x130 [ 1308.797322][ T4501] ? __pfx___might_resched+0x10/0x10 [ 1308.797341][ T4501] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1308.797359][ T4501] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1308.797379][ T4501] direct_splice_actor+0x192/0x6c0 [ 1308.797399][ T4501] splice_direct_to_actor+0x345/0xa30 [ 1308.797418][ T4501] ? __pfx_direct_splice_actor+0x10/0x10 [ 1308.797438][ T4501] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1308.797458][ T4501] ? futex_private_hash_put+0x160/0x1b0 [ 1308.797473][ T4501] do_splice_direct+0x174/0x240 [ 1308.797492][ T4501] ? __pfx_do_splice_direct+0x10/0x10 [ 1308.797510][ T4501] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1308.797529][ T4501] ? bpf_lsm_file_permission+0x9/0x10 [ 1308.797545][ T4501] ? security_file_permission+0x71/0x210 [ 1308.797565][ T4501] ? rw_verify_area+0xcf/0x6c0 [ 1308.797583][ T4501] do_sendfile+0xb06/0xe50 [ 1308.797601][ T4501] ? __pfx_do_sendfile+0x10/0x10 [ 1308.797619][ T4501] ? __x64_sys_futex+0x1e0/0x4c0 [ 1308.797634][ T4501] ? __x64_sys_futex+0x1e9/0x4c0 [ 1308.797650][ T4501] __x64_sys_sendfile64+0x1d8/0x220 [ 1308.797670][ T4501] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1308.797693][ T4501] do_syscall_64+0xcd/0xf80 [ 1308.797714][ T4501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.797731][ T4501] RIP: 0033:0x7fe86118f7c9 [ 1308.797743][ T4501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1308.797757][ T4501] RSP: 002b:00007fe861f59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1308.797772][ T4501] RAX: ffffffffffffffda RBX: 00007fe8613e5fa0 RCX: 00007fe86118f7c9 [ 1308.797782][ T4501] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 1308.797791][ T4501] RBP: 00007fe861213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1308.797800][ T4501] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1308.797809][ T4501] R13: 00007fe8613e6038 R14: 00007fe8613e5fa0 R15: 00007ffc9a38ee88 [ 1308.797822][ T4501] [ 1308.797879][ T4501] Kernel Offset: disabled