last executing test programs: 44.052681232s ago: executing program 2 (id=2545): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) write$auto(r2, 0x0, 0x41000008004) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r3) iopl$auto(0x3) clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r4, 0x0, 0x7) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r6) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(r1, r1, 0x0, 0x1) write$auto_proc_mem_operations_base(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0x40942, 0x0) mmap$auto(0x2000, 0x9, 0x8, 0x8000000008011, r9, 0x0) r10 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001440), 0xffffffffffffffff) r11 = socket(0xa, 0x3, 0x8) getsockopt$auto(r11, 0x3a, 0x1, 0x0, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001480)={0x14, r10, 0x949398432f28d783, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4040) 43.31047356s ago: executing program 2 (id=2550): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) madvise$auto(0x108000, 0x2, 0x5) (async) mlock$auto(0x8a84, 0xff) symlinkat$auto(0x0, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) (async) write$auto(0x3, 0x0, 0x81) (async, rerun: 64) write$auto(0x3, 0x0, 0x20000006) (async, rerun: 64) bind$auto(0xffffffffffffffff, 0x0, 0x66) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 40.336874267s ago: executing program 2 (id=2559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001180)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x10001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x700000000000000) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) 39.498572819s ago: executing program 2 (id=2563): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = memfd_create$auto(0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x3, 0x3a) statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x14, 0x0, 0x56b) setsockopt$auto(r1, 0x29, 0x15, 0x0, 0x52b) 36.293556855s ago: executing program 2 (id=2570): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 33.095034773s ago: executing program 2 (id=2577): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev$auto(r0, &(0x7f0000000380)={&(0x7f00000002c0)="ff", 0xe0d}, 0x8) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x41, 0x100000002000, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x6, 0x4, 0x200, 0x1, 0x4, 0xffffffffffffffff, 0xa, "97184c79045d00001b00000000001000", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, 0xffffffffffffffff, 0x8}, 0x92) close_range$auto(0x2, r1, 0x0) r2 = socket(0x10, 0x2, 0x4) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) shmctl$auto_SHM_STAT_ANY(0x6, 0xf, &(0x7f00000001c0)={{0x38d34b0a, 0xffffffffffffffff, 0xee01, 0x0, 0x2, 0x2}, 0x7fffffff, 0x5, 0x32, 0x101, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x42f8, 0x0, &(0x7f0000000680)="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", &(0x7f0000000100)="00dd147318274ae5ebadf69e351dd1bdb18841f7c2335e704f858b27926b6f5825c48549954a1d1da244"}) r4 = setfsgid$auto(0x0) setresgid$auto(r4, 0x0, r4) msgctl$auto_IPC_SET(0x13, 0x1, &(0x7f0000000080)={{0xffffffff, 0xee01, r4, 0x5, 0x25, 0x6, 0x10}, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x5, 0x1, 0x4, 0x20000006, 0x819, 0xc8, 0x3, 0x23, 0x0, @raw}) chown$auto(&(0x7f0000000140)='./file0\x00', r3, r4) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) unshare$auto(0x40000080) 16.741276758s ago: executing program 32 (id=2577): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev$auto(r0, &(0x7f0000000380)={&(0x7f00000002c0)="ff", 0xe0d}, 0x8) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x41, 0x100000002000, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x6, 0x4, 0x200, 0x1, 0x4, 0xffffffffffffffff, 0xa, "97184c79045d00001b00000000001000", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, 0xffffffffffffffff, 0x8}, 0x92) close_range$auto(0x2, r1, 0x0) r2 = socket(0x10, 0x2, 0x4) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) shmctl$auto_SHM_STAT_ANY(0x6, 0xf, &(0x7f00000001c0)={{0x38d34b0a, 0xffffffffffffffff, 0xee01, 0x0, 0x2, 0x2}, 0x7fffffff, 0x5, 0x32, 0x101, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x42f8, 0x0, &(0x7f0000000680)="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", &(0x7f0000000100)="00dd147318274ae5ebadf69e351dd1bdb18841f7c2335e704f858b27926b6f5825c48549954a1d1da244"}) r4 = setfsgid$auto(0x0) setresgid$auto(r4, 0x0, r4) msgctl$auto_IPC_SET(0x13, 0x1, &(0x7f0000000080)={{0xffffffff, 0xee01, r4, 0x5, 0x25, 0x6, 0x10}, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x5, 0x1, 0x4, 0x20000006, 0x819, 0xc8, 0x3, 0x23, 0x0, @raw}) chown$auto(&(0x7f0000000140)='./file0\x00', r3, r4) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) unshare$auto(0x40000080) 6.598401714s ago: executing program 0 (id=2666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f000000ac80)={0x14, r1, 0x401, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x9effffff, 0x2400c001}, 0x8000) 6.453093185s ago: executing program 0 (id=2667): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 5.880957712s ago: executing program 3 (id=2671): mmap$auto(0x0, 0x402000c, 0x0, 0x1d, 0x401, 0x7f) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 5.516717619s ago: executing program 3 (id=2673): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) (async) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x1, 0x40000006, 0x0, 0x0, 0x80000001) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) (async) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) mmap$auto(0x0, 0x400, 0xfffffffffffffffa, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400, 0xfffffffffffffffa, 0xeb1, 0x401, 0x8000) madvise$auto(0x4, 0x2004, 0x15) (async) madvise$auto(0x4, 0x2004, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000084) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0xd08, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc28, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x1de, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x2d8, 0x2, "c32e3b552c994603fee5d64d07797abdca2c528d5a17170567f5bdbf467c892ef1389e35126864d0c372f254574cd8e6ff96947685c3dae24701b1067dba5e36ae20a9f99afe208e75ba8b3af6c1d5d220a9009098de0e18c11d6ab286a7011aad151d41e57069d9d63af78ddd69d0a8209c3a52b89f88dea1b2e59b2c370a751fdd3a5ad0c86820f84bfd350b8d2a45a5a4f43b852a21b2446d6c5eb9584e492bb84cfd18bed7b886e920e367b2b469c976f1d8edb962b073f57a450853c8f8721db848181a87595be4443fdeca8cd7b24d22e4ec785f4a3ef9ba7bb2c3492015820a8f04b3bb8d24399f77edc6761565cdc544fa6af0f48376e230186c929a2af8d42096cde30cd1743ed95d935abec0add4e4db1691b6222480090f48a516edc43aea954213fe6e35f5a41fc971d0eee78551216dfdf0872f611da1db2de70e144d0149d4ecf267fdf0894ab5eeefcad93c116434f4f83f5332c854ab4594b8d239b4e2941b04484573a800c3f3c2cd4b1e28dcb3cb28a0ae2d76474e0fa3264b82a4976d45b9b604c937c0c872d1280e9b75ba978dfd80c07409c8f39a2132e2007224eb253e635785c8524af59c77b6e8a3330bb6930293c309a362b3342b143669431e681d32510c001be1a90517e4cb9df653f42193fe00e1f2aff570c769876e4ca78b776afbe9cbc8fa8ae6072e313dafbac888db2cc47591666c0eda3ba08bfd4bff0ee47598bf9d22c7bde75d60ca34095fad5b83fa50beedb6ebe74c4015cb2d180198628bcf18e23c8b9e30e26961c78dc1b59000a45529b431328347c653a7eee6304d4e8d40c39d98d2473a0525c8cf90a9e93dc2d381b2b21d052f68aaaa37f3de15a03a42ce6810c10b5f93ccfa9a82fa0504b9248af1e5fa6c81319041838f9a930285c320340e3abbc2086871508cbb680a47f11ffe20f1d1073674db2603b70cfa6aca9dc6bbca337399513203e65bcd090b6f5364a2b294f7cd139de48dcdf920a072730ad3d16566ee"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xfffffff8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x751, 0x2, "655e74ed6d91330b6e1df49b15bca50c996e59cfe5d75aa3241644b59f532b49fc86724e72fb0f2b2846cf3685cc138d4560fc73035ebba112651a39dba0a678e5bc62ba919fc3d91a4ac568380a302c8e2b7756fb52dd3e936102510ea9c0e71c1d55b1fa5507ee6bcc3f19fff8c84230439b725c127d66fad35ec790a767d1d208d4a104e8c29a552e407360f1ea0a7f3b615a185e1fb082e7e456d4fcf5f4d5dff809b7efaa2482965ae0cc80bda39f8e320abefcb0a361f007422287bc0cdc5464b889acf155fce00ec9fa2de26c6b69d36556ead54e160f327e8d04e7562d6d374c2bce750ace631532eed1bdd480dfc6853bfb7067ef8217311f5309fe5c4d86b30e9a4fad01aaf67fd77ec8fa34f35bf5aee19afcff093e277d162ecaf7bfacbc276a9faced19b3bb6c87f65f55b21975e23504b28ddb7afa4abb3657abae7e2ec5105ed683bc6b321ea73d9cccd9ddf6b99280b68810bb8dd2c0797dd419a3e252e41ea5381d48097f3fe66fa1e4a530debeca9955d7da1a549f84c58e30527fe7f5d21a88c1904624f0719cda31b62f25ff3881880c1927bfa007b537973dfabca32e3793be738386b76557bc62a0ae99b894ff4d37c78d641446114a8e7462570d8af166fe89da895d8ce1d4ace40ea1c66ec5d6af932cce29968d17a25cb17bf724171d7f20f389ed97b350c8ef315230879a94c048109e70024e16046e61193d803387239051ece25b716fadda411b18e140cc00cbe851dfb53cd55af71301a84c649ac5c5095bf1af80fdfba6088a30760f0052bc655064550afd3a40e76e02d6762698af4b5fb1aa3e23a8b84e46b14997fcda854e845d43a3fa40c74b88ed9eefd37dabd14978cc13eb2de888b9ad8742bc7cd3e75dab89e3f51433172bedeaf2df240d5fe7682dc9268aa456dea297e480a3fb6ce6cb6956593dec48cfe8d852cc4e755231efcd95e1afee384c99e1c2999510812c469e827411149b04a1a7ffcb8d50c7852c577755e600d175d57384c4c4c61981f12e5feaa94de9f66461c4f31722f31eb83416c878fd75109aa8a7ff02d5f5ef7fe16d9349d1a721fc540a30efa115915b13a2dc480e2d5dcae1e2248f66b3d9a8ef38c5d36564ed0d6dde21dbc9c516344b20a6a8bf4dfdd6f76374cc44520d4347ddee3447d2d7003b45721684ab360d38d6eac3bf7be3df6ac5f83dc9cf9f69af078ca95cc6e8955f4a42f35a5ccd4d5777965636752d22e99df912a529e77842c4d298ea10f35959755c6f373f6f540bde950f89154d2fa078ce591f581b1dbfd878a4b869663c781aa1ebd51913246735303734a6da4f9e616287db4712ab6da1ae8491411d6b3f1adfe19f8fc113b640671a42f25acf3afcd7a5a7a56609f2e5a8a766e8c647effc46550beb0af28e0991a1d972e82fe5ead10d3ee194256e6cad0572b9183fd23b6673855cac55d79ecf34f86a60b6fba242f87d0529d86d5e3050ab663ae7bb47e0ad69f011668ac3e4aae2072b5cd3448db40897efadc162c3035a3b4522ed15e394c0ce3fa5f698a5dd6599025f9ad006ba26231b395b4fda5824d9b96412f2e9898fb6b1fbda1fb567eb77dfcad62c4a0ddbab3b828a2cd18e69371e79878363be1c001a96f93fbf78a074416a6859c718d487a3c45f0819d5f7f81823a6c7107ea57e09c65ce28130f2ff1bafd475f426395a7757c86176f882bc93783e72de0e5924bfdfbe58cf970d4beea5aefb96b3c9fd3b4af6ac559a326de044c21920e5058e0d93d3186f4cfd448a5d2c6fa041c1f1b67349e7467de9a85bc182b138466070d161bb4f1b9b3dbf53fa016bd176f4b2a34bd74cb0e4cffc0b07b5c62f92c00231804fc2443021203bae6c7f0ca7c7eae13fc5756d3194d86b8c21c65bafa8275023c38adac0786bd6eecaed17b989af4e21128ae2768587955769cbc0a7cfb87f2edb3797e98582a39a4637814f3d695fa033a0f31acbd8854da8f80714d3f1e086a230d591db670d16ddfc50a7102a436274e774074a77747cb0da704cc40b95dc9a49ccd951dad782e89f05da4d44e8b9cde98cddf7db947afa16684f8306a7cfce5fb7ac6dafde7d1637858337409c02a390f0b9a701a4471a0a6acef2385246298cbcdfb0809d81bc90733f3d21abcc6c4bbc28b564810378cd5a755bd5161da97a1f7a23c4f7fa22e539138d731b3e0369d4addc5a2b9314e14c7105b6c65a8c3e67f2d729cb46048d6cd637260c2466f869ab18e8672baab3d51892d2dd7048561646a47d085076f2d49a913c4dbe8f708f4d7991aaa82930609d16360525c0e2bedae1e53d90f9acc43dacf990ec8c0b884250bf695ee226e4ea3f4ed0e964174bd522f635599135ac10acc29ea1e9663330cd2189fb2bc090107550cf3afb19c5d9a04cd60f4db6959670df45f02b75a1f1b20a3eea75d2299590ff3fc3d882507755d6a56ba6452443fbbe8931fca0ed21e38c29650179f6a18352d795426308912ee86c0da1e2233f5696fdb14f4361b3d7c8a34448cc0e18be47e707afed7caf27d11355786df394d0d22cde7f1f72a136b73c366d00f392374d52da97d201e2f9cb00d98eab95156f4101bc06e1d99a60b86d8d5f2572726545ba"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x8000}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}]}, @NL80211_ATTR_EHT_CAPABILITY={0xb3, 0x136, "38340b639e080eab0ccd0dcd8bac14fba6544fb982dd7271c78dd7ededf357293e8440de7ae0afd13caa628c6dd6deeecdacd5218d955fd149e0ad8d83561fede55437fce6612bc326ab9ba30f54e8437a1ac0c472e2c4dd904a6136a440db0d5d654fef0e2028c35e277356a48421f62166feefa07363cb9d1b50db234d63ae59f735db452c62d132c988f1a30662512107ccc7b54b7db66a5209a2651ce7112ee74beb7397fa1b1cb38daf4b8ce3"}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x80}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, [@typed={0x4, 0x123}]}]}, 0xd08}, 0x1, 0x0, 0x0, 0x4}, 0x8800) (async) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0xd08, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc28, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x1de, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x2d8, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xfffffff8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x751, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x8000}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}]}, @NL80211_ATTR_EHT_CAPABILITY={0xb3, 0x136, "38340b639e080eab0ccd0dcd8bac14fba6544fb982dd7271c78dd7ededf357293e8440de7ae0afd13caa628c6dd6deeecdacd5218d955fd149e0ad8d83561fede55437fce6612bc326ab9ba30f54e8437a1ac0c472e2c4dd904a6136a440db0d5d654fef0e2028c35e277356a48421f62166feefa07363cb9d1b50db234d63ae59f735db452c62d132c988f1a30662512107ccc7b54b7db66a5209a2651ce7112ee74beb7397fa1b1cb38daf4b8ce3"}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x80}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, [@typed={0x4, 0x123}]}]}, 0xd08}, 0x1, 0x0, 0x0, 0x4}, 0x8800) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r5, 0x311, 0x70bd2c, 0x25dfdc01, {}, [@ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 4.434871455s ago: executing program 0 (id=2675): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/13/actions\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x480, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) 4.285922042s ago: executing program 3 (id=2676): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_to_hsr/proxy_ndp\x00', 0x82002, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r0, r1, 0x0, 0x1) socket(0x2, 0x1, 0x0) socket(0x18, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x3, 0x13, 0x3, 0x400180000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ppoll$auto(&(0x7f0000003600)={0x8, 0x800, 0x1}, 0xd6, 0x0, 0x0, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0xf562, 0xfff, 0x1) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x7) write$auto(0x3, 0x0, 0xffd8) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x40, 0x0, 0x4, 0x4070bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2b, 0x3, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cae6daa2115d54", @nested={0x4, 0x49}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) 3.514108011s ago: executing program 1 (id=2677): r0 = socket(0x2a, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) getsockname$auto(r0, 0x0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101001, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram1/integrity/tag_size\x00', 0x68e00, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x8, 0xeb5, 0xfffffffffffffffa, 0x4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio15\x00', 0x8a240, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x96782, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c1080, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xc, 0x7, 0xa, 0x3, 0x10, 0x5, 0x0, 0x3, 0x2000000000003, 0x7, 0x6c8, 0x5, 0x20000000003, 0x5, 0xb4, 0xa, 0x10000002, 0xfff, 0x5, 0x7, 0x1, 0x0, 0x4, 0x40000000, 0x0, 0xff, 0x2, 0x0, 0x2, 0x0, 0x0, [0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8000, 0x5f23, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xbe66, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x40081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.367665187s ago: executing program 0 (id=2678): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x4) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) mmap$auto(0x20000000000, 0x1000000020009, 0x40, 0xeb1, r1, 0x9) mmap$auto(0x8000000000000000, 0x400008, 0x11, 0x1c, r1, 0x800007) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/devcoredump/disabled\x00', 0x1a6502, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0x3f, 0x5, 0x2000000000948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x6, 0x13) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/softnet_stat\x00', 0x1c1802, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x100) 3.30154836s ago: executing program 1 (id=2679): mmap$auto(0x0, 0x402000c, 0x0, 0x1d, 0x401, 0x7f) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 2.911969617s ago: executing program 1 (id=2680): mmap$auto(0x0, 0x402000c, 0x0, 0x1d, 0x401, 0x7f) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 2.625007552s ago: executing program 3 (id=2681): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) socket(0xa, 0x1, 0x84) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getdents$auto(r0, 0x0, 0x18) 2.500153681s ago: executing program 1 (id=2682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x60}, 0x4000000) 2.298120128s ago: executing program 1 (id=2683): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1.534814704s ago: executing program 4 (id=2632): set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pselect6$auto(0x5, 0x0, &(0x7f0000000180)={[0x2, 0x8, 0x9, 0x3, 0x80000000101, 0x1c00000, 0xa1, 0x400000008, 0xfffffffffffffffe, 0x8, 0x1, 0x4, 0x1, 0x0, 0x80e, 0x9]}, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) syz_genetlink_get_family_id$auto_batadv(0x0, r0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000380), r0) shmctl$auto_IPC_RMID(0x2c, 0x0, &(0x7f00000004c0)={{0xfffffffb, 0xee00, 0x0, 0x0, 0x8, 0x3, 0x3}, 0x10000, 0x10000, 0xa, 0xfa5, @inferred, @raw=0x3, 0x5, 0x0, 0x0, 0x0}) setresuid$auto(0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) fallocate$auto(0x8000000000000003, 0x0, 0xf, 0x200000002) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(r2, r2, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) pwrite64$auto(r2, &(0x7f0000000040)='(+\\-\x00', 0x5, 0x9) 1.139121826s ago: executing program 0 (id=2684): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1.088021872s ago: executing program 3 (id=2685): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/13/actions\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x480, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) 882.406872ms ago: executing program 3 (id=2686): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdc, 0x9b73, 0x7, 0x4000800008000) r0 = socket(0x2, 0x6, 0x2) getsockopt$auto_SO_SNDBUF(r0, 0x0, 0x7, 0x0, &(0x7f0000000100)) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/DebugData\x00', 0x149402, 0x0) read$auto(r1, &(0x7f0000000240)='/proc/scsi/sg\x00\x00\x00\x00ices\x00\r\xe2\xc9\x04\x986\xbc\xb0FI\xb9-E\xe3\x87j\xdes1\xa7\xdf\xc4\b\xb3\xeelc\x7f\xfdg\x18*\a:_\xb0\x92\xacwH\x9c\x9dF\xb1\xc47\x85\xc7\x13\xe1\x19UR\x96\xd8\x86\xd3\xe4\xa9R\x1c\xeb\xc8\xe5X\xfcR\xc7\vdU\x8b\xaa^\xfd\x83#\xc1o\x04\xeca\xbf\x8bYz\xd9\r\xcbk\xfd\x9e\x97\xcbOf\x80', 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pnp0/00:02/power/runtime_active_time\x00', 0x8681, 0x0) write$auto(0x3, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x40000000, 0x2, 0x6}]}) pwrite64$auto(0xc8, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99?\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xad\x83\x13\x82\xdfT\x916;CL\"\x81\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2SZ\xf6\x8d\xdb\xcb\r\xcaN_\xa6h\xe2\xf9*w_\x84\xb8\x1aY>%:\xad9\xb8\x87\xfc\x85\x90\xfaB\xb6\xe3I\x18$\x1f\xc1YG\x94\xec\x82\xb7b[8n(\xd1Y\a\x04w\xd53\xce\xee\xdbw\xb0\xd4\xae\x0f\xce\x8e+\xaa\xcf\x86\xcd@~\xe0', 0xfded, 0x3) pidfd_open$auto(0x1, 0x0) socket(0x27, 0x5, 0x10000000000002) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r4, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x1, 0xe983, 0xdf, 0x17, 0x401, 0x8000) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000340)='/dev/usbmon19\x00', 0x400, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) 335.176641ms ago: executing program 1 (id=2687): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r1, 0x92106405, r1) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) ioctl$auto(r2, 0xc0285628, r2) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x20000010) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) arch_prctl$auto_ARCH_GET_XCOMP_PERM(0x1022, 0x7) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) 141.225642ms ago: executing program 0 (id=2688): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) write$auto(0x3, 0x0, 0x100082) r0 = socket(0x10, 0x3, 0x6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x50) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, r0, 0x200008000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000000c0)={0x4, r1, 0x1, "af00"}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) mmap$auto(0xfffffffffffffff4, 0x2020009, 0x3, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8002) r4 = socket(0x11, 0x80003, 0xffff) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/sctp/snmp\x00', 0x4000, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000500)={@sival_ptr=&(0x7f0000000580)="85ae91802a12e940c8d57b2f3b6f5de144f4c5928ddbf71b85c0a086ee86f17c506b55fa613c366c66fcc1781c0cf990da050000000000000057ed7b21acd4c1abb8d916409a6022ef8f16a0909085db425970e42e67d0f3d4181fc60802bd2cfd166a08ed5074d30ad2be137b2c5f2336d40f146c9f8766f9a952e18ce5df950c7cfce968a966128c5cc2645ecc8efdf06c95c1969d1ae0daf07caa8565e70e9dc76584a68716d31e839c0cb3b8f1f8074a56e4dc2800474a1e7f3301738057f2b4c74ccc1a292601e4b6fb6ab4820e5c61d7915ac2a0067591aaf61bf596f7a1a226ab78f230f32a77a78299c3400f157020d93f", @inferred=r4, 0x0, @_sigev_thread={&(0x7f0000000400)=&(0x7f0000000340)=0x7f, &(0x7f0000000440)="ac365ae6fefafdc889048abf6bc40074178a933f68730bec17b92a83731504fc5a53c3f84346c534421292e777290a43439277da35f30a0f4937a74273af291672f46e773f40ec62825ff481abccc863670aa9b0a4b46b8f9d3c69af797341df326d11a357cc689624a5ea0756bbcb4072ea2b992d4267ea3e073715cd2e64b3a1a9a1aad0655d92e54957f06a19a70336c53e534b87"}}, &(0x7f0000000540)=0x7) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002f80)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f00000001c0)={0x7, 0x9, 0x0, 0x2, 0xd0f, 0x0}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r8, 0x0, 0x2, 0x0) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00012dbd7000fcdbdf2519000000480002803b004d8004007e8095165cbb54ae884c642fbfbc2f445808001000", @ANYRES32=r7, @ANYBLOB="04002b8004006b8014002e00ff0100000000000000000000000000010008007600", @ANYRES32=r8, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x841}, 0x4) 0s ago: executing program 4 (id=2689): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000500)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x4044090) (async) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000500)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x4044090) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r3, 0x0, 0x100000001) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r4, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x2}, 0x3) (async) writev$auto(r2, &(0x7f0000000200)={0x0, 0x2}, 0x3) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) kernel console output (not intermixed with test programs): c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.392778][T14468] RSP: 002b:00007f6b7317e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.392793][T14468] RAX: ffffffffffffffda RBX: 00007f6b72615fa0 RCX: 00007f6b7239c629 [ 530.392804][T14468] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 530.392813][T14468] RBP: 00007f6b72432b39 R08: 0000000000000000 R09: 0000000000000000 [ 530.392825][T14468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.392833][T14468] R13: 00007f6b72616038 R14: 00007f6b72615fa0 R15: 00007ffd83c3e5e8 [ 530.392853][T14468] [ 530.396157][T14468] syz.0.2154: vmalloc error: size 4096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 530.771573][T11752] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 531.464132][T14475] veth1_to_batadv: entered promiscuous mode [ 531.480155][T14475] veth1_to_batadv: left promiscuous mode [ 531.644179][T14468] ,cpuset=/,mems_allowed=0-1 [ 531.662049][T14468] CPU: 0 UID: 0 PID: 14468 Comm: syz.0.2154 Tainted: G U L syzkaller #0 PREEMPT(full) [ 531.662076][T14468] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 531.662082][T14468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.662091][T14468] Call Trace: [ 531.662096][T14468] [ 531.662102][T14468] dump_stack_lvl+0x100/0x190 [ 531.662129][T14468] warn_alloc.cold+0x95/0x1c1 [ 531.662156][T14468] ? __pfx_warn_alloc+0x10/0x10 [ 531.662175][T14468] ? trace_kmalloc+0x101/0x130 [ 531.662192][T14468] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 531.662216][T14468] ? __kasan_kmalloc+0x8a/0xb0 [ 531.662238][T14468] ? __get_vm_area_node+0x208/0x330 [ 531.662263][T14468] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 531.662280][T14468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.662301][T14468] ? vb2_vmalloc_alloc+0x135/0x410 [ 531.662329][T14468] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 531.662354][T14468] ? vb2_vmalloc_alloc+0x135/0x410 [ 531.662376][T14468] vmalloc_user_noprof+0x9e/0xe0 [ 531.662392][T14468] ? vb2_vmalloc_alloc+0x135/0x410 [ 531.662414][T14468] vb2_vmalloc_alloc+0x135/0x410 [ 531.662435][T14468] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 531.662457][T14468] __vb2_queue_alloc+0x8d5/0x1160 [ 531.662488][T14468] vb2_core_reqbufs+0x899/0xf30 [ 531.662512][T14468] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 531.662543][T14468] __vb2_init_fileio+0x32d/0x1000 [ 531.662563][T14468] ? vb2_fop_read+0xe5/0x520 [ 531.662581][T14468] ? aa_file_perm+0x7f3/0x14d0 [ 531.662605][T14468] __vb2_perform_fileio+0x91e/0x1380 [ 531.662631][T14468] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 531.662652][T14468] ? __pfx___might_resched+0x10/0x10 [ 531.662679][T14468] vb2_fop_read+0x211/0x520 [ 531.662701][T14468] v4l2_read+0x229/0x2c0 [ 531.662720][T14468] ? __pfx_v4l2_read+0x10/0x10 [ 531.662738][T14468] vfs_read+0x1e4/0xb30 [ 531.662763][T14468] ? __pfx_vfs_read+0x10/0x10 [ 531.662783][T14468] ? find_held_lock+0x2b/0x80 [ 531.662796][T14468] ? __fget_files+0x215/0x3d0 [ 531.662818][T14468] ? __fget_files+0x215/0x3d0 [ 531.662842][T14468] ? __fget_files+0x21f/0x3d0 [ 531.662869][T14468] ksys_read+0x12a/0x250 [ 531.662889][T14468] ? __pfx_ksys_read+0x10/0x10 [ 531.662916][T14468] do_syscall_64+0x106/0xf80 [ 531.662932][T14468] ? clear_bhb_loop+0x40/0x90 [ 531.662950][T14468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.662966][T14468] RIP: 0033:0x7f6b7239c629 [ 531.662979][T14468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.662993][T14468] RSP: 002b:00007f6b7317e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.663008][T14468] RAX: ffffffffffffffda RBX: 00007f6b72615fa0 RCX: 00007f6b7239c629 [ 531.663018][T14468] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 531.663027][T14468] RBP: 00007f6b72432b39 R08: 0000000000000000 R09: 0000000000000000 [ 531.663035][T14468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.663044][T14468] R13: 00007f6b72616038 R14: 00007f6b72615fa0 R15: 00007ffd83c3e5e8 [ 531.663063][T14468] [ 531.663117][T14468] Mem-Info: [ 532.404620][T14482] FAULT_INJECTION: forcing a failure. [ 532.404620][T14482] name failslab, interval 1, probability 0, space 0, times 0 [ 532.482720][T14482] CPU: 0 UID: 0 PID: 14482 Comm: syz.3.2157 Tainted: G U L syzkaller #0 PREEMPT(full) [ 532.482748][T14482] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 532.482754][T14482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.482763][T14482] Call Trace: [ 532.482768][T14482] [ 532.482775][T14482] dump_stack_lvl+0x100/0x190 [ 532.482802][T14482] should_fail_ex.cold+0x5/0xa [ 532.482820][T14482] ? sk_prot_alloc+0x10b/0x2a0 [ 532.482838][T14482] should_failslab+0xc2/0x120 [ 532.482853][T14482] __kmalloc_noprof+0xe0/0x850 [ 532.482877][T14482] sk_prot_alloc+0x10b/0x2a0 [ 532.482897][T14482] sk_alloc+0x36/0xe80 [ 532.482912][T14482] mISDN_sock_create+0x267/0x420 [ 532.482936][T14482] __sock_create+0x339/0x860 [ 532.482959][T14482] __sys_socket+0x14d/0x260 [ 532.482981][T14482] ? __pfx___sys_socket+0x10/0x10 [ 532.483008][T14482] __x64_sys_socket+0x72/0xb0 [ 532.483027][T14482] ? lockdep_hardirqs_on+0x78/0x100 [ 532.483044][T14482] do_syscall_64+0x106/0xf80 [ 532.483059][T14482] ? clear_bhb_loop+0x40/0x90 [ 532.483078][T14482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.483094][T14482] RIP: 0033:0x7f8dbeb9c629 [ 532.483107][T14482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.483121][T14482] RSP: 002b:00007f8dbfb3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 532.483136][T14482] RAX: ffffffffffffffda RBX: 00007f8dbee15fa0 RCX: 00007f8dbeb9c629 [ 532.483146][T14482] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000022 [ 532.483154][T14482] RBP: 00007f8dbec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 532.483163][T14482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.483171][T14482] R13: 00007f8dbee16038 R14: 00007f8dbee15fa0 R15: 00007ffd779e96c8 [ 532.483190][T14482] [ 532.963846][T14468] active_anon:6759 inactive_anon:29485 isolated_anon:0 [ 532.963846][T14468] active_file:18996 inactive_file:42513 isolated_file:0 [ 532.963846][T14468] unevictable:768 dirty:657 writeback:0 [ 532.963846][T14468] slab_reclaimable:12349 slab_unreclaimable:96139 [ 532.963846][T14468] mapped:37471 shmem:28502 pagetables:1185 [ 532.963846][T14468] sec_pagetables:0 bounce:0 [ 532.963846][T14468] kernel_misc_reclaimable:0 [ 532.963846][T14468] free:1265224 free_pcp:31740 free_cma:0 [ 533.082693][T14468] Node 0 active_anon:26276kB inactive_anon:117260kB active_file:75980kB inactive_file:169928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149904kB dirty:2632kB writeback:0kB shmem:111024kB shmem_thp:30720kB shmem_pmdmapped:30720kB anon_thp:0kB kernel_stack:11072kB pagetables:4644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 533.165017][T14468] Node 1 active_anon:760kB inactive_anon:704kB active_file:4kB inactive_file:124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 533.270838][T14468] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.377107][T14468] lowmem_reserve[]: 0 2477 2479 2479 2479 [ 533.397294][T14468] Node 0 DMA32 free:1150604kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26276kB inactive_anon:106600kB active_file:75980kB inactive_file:169928kB unevictable:1536kB writepending:2632kB zspages:544kB present:3129332kB managed:2537464kB mlocked:0kB bounce:0kB free_pcp:88608kB local_pcp:88608kB free_cma:0kB [ 533.518506][T14468] lowmem_reserve[]: 0 0 1 1 1 [ 533.539182][T14468] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1064kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 533.640965][T14468] lowmem_reserve[]: 0 0 0 0 0 [ 533.651071][T14468] Node 1 Normal free:3917808kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:760kB inactive_anon:704kB active_file:4kB inactive_file:124kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27076kB local_pcp:27076kB free_cma:0kB [ 533.743249][T14468] lowmem_reserve[]: 0 0 0 0 0 [ 533.753850][T14468] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 533.785071][T14468] Node 0 DMA32: 4016*4kB (UME) 4195*8kB (UME) 2665*16kB (UME) 707*32kB (UME) 229*64kB (UME) 549*128kB (UME) 361*256kB (UME) 232*512kB (UM) 105*1024kB (UME) 8*2048kB (UM) 168*4096kB (UM) = 1223048kB [ 533.828890][T14468] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 533.926869][T14468] Node 1 Normal: 15*4kB (UME) 14*8kB (U) 17*16kB (UME) 15*32kB (UME) 14*64kB (UE) 10*128kB (UME) 6*256kB (U) 5*512kB (UM) 7*1024kB (UME) 4*2048kB (UME) 951*4096kB (M) = 3917852kB [ 534.006601][T14468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.061575][T14468] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 534.061606][T14468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.061618][T14468] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 534.061631][T14468] 67942 total pagecache pages [ 534.061637][T14468] 27 pages in swap cache [ 534.061642][T14468] Free swap = 119084kB [ 534.061648][T14468] Total swap = 124996kB [ 534.061655][T14468] 2097051 pages RAM [ 534.061661][T14468] 0 pages HighMem/MovableOnly [ 534.061666][T14468] 430804 pages reserved [ 534.061672][T14468] 0 pages cma reserved [ 534.580857][T14486] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 534.581075][T14486] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 534.581212][T14486] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 534.581340][T14486] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 535.618825][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2166'. [ 536.074670][T11752] Bluetooth: hci0: command 0x0c1a tx timeout [ 536.212520][T14529] veth1_to_batadv: entered promiscuous mode [ 536.251208][T14533] FAULT_INJECTION: forcing a failure. [ 536.251208][T14533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.313767][T14529] veth1_to_batadv: left promiscuous mode [ 536.330224][T14533] CPU: 0 UID: 0 PID: 14533 Comm: syz.1.2172 Tainted: G U L syzkaller #0 PREEMPT(full) [ 536.330252][T14533] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 536.330258][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.330267][T14533] Call Trace: [ 536.330272][T14533] [ 536.330278][T14533] dump_stack_lvl+0x100/0x190 [ 536.330304][T14533] should_fail_ex.cold+0x5/0xa [ 536.330319][T14533] ? page_copy_sane+0x17c/0x2d0 [ 536.330342][T14533] copy_folio_from_iter_atomic+0x427/0x1e70 [ 536.330371][T14533] ? fault_in_readable+0x118/0x190 [ 536.330396][T14533] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 536.330419][T14533] ? shmem_write_begin+0x1ba/0x420 [ 536.330448][T14533] ? __pfx_shmem_write_begin+0x10/0x10 [ 536.330471][T14533] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 536.330491][T14533] generic_perform_write+0x4cb/0xa40 [ 536.330517][T14533] ? __pfx_generic_perform_write+0x10/0x10 [ 536.330539][T14533] ? file_update_time_flags+0x373/0x500 [ 536.330559][T14533] shmem_file_write_iter+0x10e/0x140 [ 536.330579][T14533] vfs_write+0x6ac/0x1070 [ 536.330603][T14533] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 536.330619][T14533] ? __pfx_vfs_write+0x10/0x10 [ 536.330653][T14533] ksys_write+0x12a/0x250 [ 536.330674][T14533] ? __pfx_ksys_write+0x10/0x10 [ 536.330701][T14533] do_syscall_64+0x106/0xf80 [ 536.330717][T14533] ? clear_bhb_loop+0x40/0x90 [ 536.330735][T14533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.330749][T14533] RIP: 0033:0x7f7c0f79c629 [ 536.330762][T14533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.330776][T14533] RSP: 002b:00007f7c105db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.330790][T14533] RAX: ffffffffffffffda RBX: 00007f7c0fa15fa0 RCX: 00007f7c0f79c629 [ 536.330800][T14533] RDX: 00000000000049a2 RSI: 0000200000000080 RDI: 0000000000000005 [ 536.330809][T14533] RBP: 00007f7c105db090 R08: 0000000000000000 R09: 0000000000000000 [ 536.330817][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.330825][T14533] R13: 00007f7c0fa16038 R14: 00007f7c0fa15fa0 R15: 00007ffc62850838 [ 536.330845][T14533] [ 536.937434][T11752] Bluetooth: hci3: command 0x0c1a tx timeout [ 536.943456][T11752] Bluetooth: hci2: command 0x0c1a tx timeout [ 536.952389][T11752] Bluetooth: hci1: command 0x0c1a tx timeout [ 536.988999][T14540] netlink: 114 bytes leftover after parsing attributes in process `syz.1.2173'. [ 537.162407][T14542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2174'. [ 537.253616][T14543] bonding: no command found in bonding_masters - use +ifname or -ifname [ 538.285440][T14575] input: ¶š9ã%v”ûJ,6¾¦ï/rk [ 538.285440][T14575] lt°²ýxè õb6>94ÞY#zíñÿÿ as /devices/virtual/input/input106 [ 539.731597][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2183'. [ 540.324372][T14608] veth1_to_batadv: entered promiscuous mode [ 540.373570][T14608] veth1_to_batadv: left promiscuous mode [ 541.244587][T14629] FAULT_INJECTION: forcing a failure. [ 541.244587][T14629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.535371][T14629] CPU: 0 UID: 0 PID: 14629 Comm: syz.3.2189 Tainted: G U L syzkaller #0 PREEMPT(full) [ 541.535402][T14629] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 541.535408][T14629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.535417][T14629] Call Trace: [ 541.535422][T14629] [ 541.535428][T14629] dump_stack_lvl+0x100/0x190 [ 541.535454][T14629] should_fail_ex.cold+0x5/0xa [ 541.535472][T14629] _copy_from_user+0x2e/0xd0 [ 541.535496][T14629] copy_mount_options+0x76/0x190 [ 541.535525][T14629] __x64_sys_mount+0x1ab/0x310 [ 541.535542][T14629] ? __pfx___x64_sys_mount+0x10/0x10 [ 541.535564][T14629] do_syscall_64+0x106/0xf80 [ 541.535580][T14629] ? clear_bhb_loop+0x40/0x90 [ 541.535598][T14629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.535614][T14629] RIP: 0033:0x7f8dbeb9c629 [ 541.535628][T14629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.535643][T14629] RSP: 002b:00007f8dbfaf8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 541.535658][T14629] RAX: ffffffffffffffda RBX: 00007f8dbee16180 RCX: 00007f8dbeb9c629 [ 541.535668][T14629] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 541.535677][T14629] RBP: 00007f8dbec32b39 R08: 0000200000000280 R09: 0000000000000000 [ 541.535686][T14629] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 541.535695][T14629] R13: 00007f8dbee16218 R14: 00007f8dbee16180 R15: 00007ffd779e96c8 [ 541.535715][T14629] [ 542.320578][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2195'. [ 543.689710][T14671] FAULT_INJECTION: forcing a failure. [ 543.689710][T14671] name failslab, interval 1, probability 0, space 0, times 0 [ 543.750525][T14671] CPU: 0 UID: 0 PID: 14671 Comm: syz.0.2203 Tainted: G U L syzkaller #0 PREEMPT(full) [ 543.750557][T14671] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 543.750563][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.750574][T14671] Call Trace: [ 543.750580][T14671] [ 543.750586][T14671] dump_stack_lvl+0x100/0x190 [ 543.750615][T14671] should_fail_ex.cold+0x5/0xa [ 543.750633][T14671] should_failslab+0xc2/0x120 [ 543.750649][T14671] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 543.750669][T14671] ? ep_ptable_queue_proc+0x5b/0x280 [ 543.750691][T14671] ? obj_cgroup_charge_account+0x2c4/0x640 [ 543.750711][T14671] ep_ptable_queue_proc+0x5b/0x280 [ 543.750733][T14671] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 543.750755][T14671] snd_seq_oss_readq_poll+0x56/0xb0 [ 543.750773][T14671] snd_seq_oss_poll+0x122/0x1d0 [ 543.750796][T14671] ? __pfx_odev_poll+0x10/0x10 [ 543.750814][T14671] odev_poll+0x4a/0x90 [ 543.750834][T14671] ep_item_poll+0x141/0x1f0 [ 543.750858][T14671] do_epoll_ctl+0x1f33/0x36a0 [ 543.750879][T14671] ? __pfx_do_epoll_ctl+0x10/0x10 [ 543.750893][T14671] ? find_held_lock+0x2b/0x80 [ 543.750906][T14671] ? __might_fault+0xc5/0x140 [ 543.750925][T14671] ? __might_fault+0xc5/0x140 [ 543.750942][T14671] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 543.750971][T14671] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 543.750984][T14671] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 543.750999][T14671] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 543.751020][T14671] do_syscall_64+0x106/0xf80 [ 543.751036][T14671] ? clear_bhb_loop+0x40/0x90 [ 543.751054][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.751070][T14671] RIP: 0033:0x7f6b7239c629 [ 543.751084][T14671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.751098][T14671] RSP: 002b:00007f6b7317e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 543.751113][T14671] RAX: ffffffffffffffda RBX: 00007f6b72615fa0 RCX: 00007f6b7239c629 [ 543.751123][T14671] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 543.751132][T14671] RBP: 00007f6b72432b39 R08: 0000000000000000 R09: 0000000000000000 [ 543.751141][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.751150][T14671] R13: 00007f6b72616038 R14: 00007f6b72615fa0 R15: 00007ffd83c3e5e8 [ 543.751169][T14671] [ 544.620312][T14681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2202'. [ 545.190006][T14687] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(905090050.201326592.142606592), cmd(16) [ 545.219193][T14681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.239363][ T30] audit: type=1326 audit(4294968410.580:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14683 comm="syz.3.2205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8dbeb9c629 code=0x0 [ 545.269363][T14687] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 545.328804][T14681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.430634][T14681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.549056][T14681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.613888][T14696] input: f¬ as /devices/virtual/input/input107 [ 546.125296][T14705] netlink: 306 bytes leftover after parsing attributes in process `syz.0.2211'. [ 547.049941][T14729] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(905090050.201326592.142606592), cmd(16) [ 547.115984][T14729] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 547.674904][T14743] netlink: NAT attribute has 4 unknown bytes [ 549.103371][T14763] veth1_to_batadv: entered promiscuous mode [ 549.191182][T14763] veth1_to_batadv: left promiscuous mode [ 549.787129][T14772] openvswitch: Â: Dropping previously announced user features [ 550.341968][T14775] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(905090050.201326592.142606592), cmd(16) [ 550.392112][T14775] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 550.712612][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'. [ 551.583692][T14780] FAULT_INJECTION: forcing a failure. [ 551.583692][T14780] name failslab, interval 1, probability 0, space 0, times 0 [ 551.642496][T14780] CPU: 0 UID: 0 PID: 14780 Comm: syz.3.2226 Tainted: G U L syzkaller #0 PREEMPT(full) [ 551.642524][T14780] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 551.642530][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 551.642540][T14780] Call Trace: [ 551.642547][T14780] [ 551.642553][T14780] dump_stack_lvl+0x100/0x190 [ 551.642581][T14780] should_fail_ex.cold+0x5/0xa [ 551.642599][T14780] ? tomoyo_encode2+0xfb/0x3c0 [ 551.642615][T14780] should_failslab+0xc2/0x120 [ 551.642631][T14780] __kmalloc_noprof+0xe0/0x850 [ 551.642651][T14780] ? d_absolute_path+0x136/0x1b0 [ 551.642674][T14780] tomoyo_encode2+0xfb/0x3c0 [ 551.642692][T14780] tomoyo_encode+0x29/0x50 [ 551.642707][T14780] tomoyo_realpath_from_path+0x18c/0x690 [ 551.642727][T14780] tomoyo_path_number_perm+0x23c/0x580 [ 551.642756][T14780] ? tomoyo_path_number_perm+0x22e/0x580 [ 551.642780][T14780] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 551.642809][T14780] ? do_raw_spin_lock+0x128/0x260 [ 551.642831][T14780] ? find_held_lock+0x2b/0x80 [ 551.642856][T14780] ? __pfx_d_add+0x10/0x10 [ 551.642872][T14780] ? d_alloc+0x176/0x1e0 [ 551.642886][T14780] ? current_check_access_path+0x281/0x460 [ 551.642911][T14780] ? __pfx_current_check_access_path+0x10/0x10 [ 551.642936][T14780] ? simple_lookup+0x105/0x1d0 [ 551.642958][T14780] ? lookup_one_qstr_excl+0xb3/0x250 [ 551.642978][T14780] tomoyo_path_mkdir+0x9b/0xe0 [ 551.642995][T14780] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 551.643018][T14780] security_path_mkdir+0x154/0x2e0 [ 551.643036][T14780] filename_mkdirat+0x168/0x5e0 [ 551.643053][T14780] ? __pfx_filename_mkdirat+0x10/0x10 [ 551.643068][T14780] ? strncpy_from_user+0x19d/0x2d0 [ 551.643091][T14780] ? do_getname+0x191/0x390 [ 551.643110][T14780] __x64_sys_mkdir+0x6b/0x90 [ 551.643125][T14780] do_syscall_64+0x106/0xf80 [ 551.643141][T14780] ? clear_bhb_loop+0x40/0x90 [ 551.643159][T14780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.643174][T14780] RIP: 0033:0x7f8dbeb9c629 [ 551.643188][T14780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.643203][T14780] RSP: 002b:00007f8dbfb3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 551.643219][T14780] RAX: ffffffffffffffda RBX: 00007f8dbee15fa0 RCX: 00007f8dbeb9c629 [ 551.643229][T14780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 551.643239][T14780] RBP: 00007f8dbec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 551.643248][T14780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.643257][T14780] R13: 00007f8dbee16038 R14: 00007f8dbee15fa0 R15: 00007ffd779e96c8 [ 551.643278][T14780] [ 551.643294][T14780] ERROR: Out of memory at tomoyo_realpath_from_path. [ 551.935134][T14794] FAULT_INJECTION: forcing a failure. [ 551.935134][T14794] name failslab, interval 1, probability 0, space 0, times 0 [ 551.992189][T14794] CPU: 0 UID: 0 PID: 14794 Comm: syz.1.2229 Tainted: G U L syzkaller #0 PREEMPT(full) [ 551.992219][T14794] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 551.992226][T14794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 551.992235][T14794] Call Trace: [ 551.992241][T14794] [ 551.992248][T14794] dump_stack_lvl+0x100/0x190 [ 551.992277][T14794] should_fail_ex.cold+0x5/0xa [ 551.992296][T14794] should_failslab+0xc2/0x120 [ 551.992311][T14794] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 551.992333][T14794] ? can_rx_register+0x582/0x6f0 [ 551.992351][T14794] can_rx_register+0x582/0x6f0 [ 551.992365][T14794] ? __pfx_raw_rcv+0x10/0x10 [ 551.992384][T14794] ? __pfx_can_rx_register+0x10/0x10 [ 551.992406][T14794] raw_enable_filters+0xe0/0x210 [ 551.992427][T14794] raw_enable_allfilters+0x8b/0x2b0 [ 551.992444][T14794] ? __local_bh_enable_ip+0x9e/0x120 [ 551.992463][T14794] raw_bind+0x1bd/0xdf0 [ 551.992478][T14794] ? apparmor_socket_bind+0x105/0x1e0 [ 551.992500][T14794] __sys_bind+0x1a9/0x260 [ 551.992522][T14794] ? __pfx___sys_bind+0x10/0x10 [ 551.992557][T14794] __x64_sys_bind+0x72/0xb0 [ 551.992582][T14794] ? lockdep_hardirqs_on+0x78/0x100 [ 551.992605][T14794] do_syscall_64+0x106/0xf80 [ 551.992622][T14794] ? clear_bhb_loop+0x40/0x90 [ 551.992642][T14794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.992658][T14794] RIP: 0033:0x7f7c0f79c629 [ 551.992671][T14794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.992686][T14794] RSP: 002b:00007f7c105db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 551.992701][T14794] RAX: ffffffffffffffda RBX: 00007f7c0fa15fa0 RCX: 00007f7c0f79c629 [ 551.992712][T14794] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 551.992721][T14794] RBP: 00007f7c0f832b39 R08: 0000000000000000 R09: 0000000000000000 [ 551.992736][T14794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.992746][T14794] R13: 00007f7c0fa16038 R14: 00007f7c0fa15fa0 R15: 00007ffc62850838 [ 551.992767][T14794] [ 553.709139][T14818] Invalid ELF header magic: != ELF [ 554.091084][T14821] zswap: compressor not available [ 554.549797][T14834] zswap: compressor not available [ 555.595583][ T30] audit: type=1326 audit(4294968420.925:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.3.2244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8dbeb9c629 code=0x0 [ 555.826301][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'. [ 556.129829][T14856] zswap: compressor not available [ 556.454087][T14868] openvswitch: ovs_datapath: Dropping previously announced user features [ 556.839902][T14884] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2253'. [ 557.696906][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2257'. [ 558.073974][T14903] veth1_to_batadv: entered promiscuous mode [ 558.171914][T14903] veth1_to_batadv: left promiscuous mode [ 558.386655][T14905] zswap: compressor not available [ 558.673750][T14912] zswap: compressor not available [ 558.912833][T14932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2263'. [ 559.023365][T14934] FAULT_INJECTION: forcing a failure. [ 559.023365][T14934] name failslab, interval 1, probability 0, space 0, times 0 [ 559.052229][T14932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.088363][T14934] CPU: 0 UID: 0 PID: 14934 Comm: syz.1.2265 Tainted: G U L syzkaller #0 PREEMPT(full) [ 559.088393][T14934] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 559.088399][T14934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 559.088409][T14934] Call Trace: [ 559.088415][T14934] [ 559.088422][T14934] dump_stack_lvl+0x100/0x190 [ 559.088450][T14934] should_fail_ex.cold+0x5/0xa [ 559.088470][T14934] should_failslab+0xc2/0x120 [ 559.088486][T14934] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 559.088507][T14934] ? ptlock_alloc+0x1f/0x70 [ 559.088529][T14934] ptlock_alloc+0x1f/0x70 [ 559.088547][T14934] pte_alloc_one+0x84/0x3e0 [ 559.088564][T14934] __pte_alloc+0x6d/0x3f0 [ 559.088577][T14934] ? __pfx___pte_alloc+0x10/0x10 [ 559.088592][T14934] ? do_raw_spin_lock+0x128/0x260 [ 559.088620][T14934] ? find_held_lock+0x2b/0x80 [ 559.088635][T14934] do_anonymous_page+0x13cc/0x1fb0 [ 559.088655][T14934] ? do_raw_spin_unlock+0x145/0x1e0 [ 559.088677][T14934] ? _raw_spin_unlock+0x28/0x50 [ 559.088699][T14934] ? __pmd_alloc+0x6aa/0x9c0 [ 559.088716][T14934] __handle_mm_fault+0x1d42/0x2b60 [ 559.088738][T14934] ? mt_find+0x45e/0x8e0 [ 559.088756][T14934] ? __pfx___handle_mm_fault+0x10/0x10 [ 559.088773][T14934] ? __pfx_mt_find+0x10/0x10 [ 559.088806][T14934] handle_mm_fault+0x36d/0xa20 [ 559.088829][T14934] __get_user_pages+0xf9c/0x34d0 [ 559.088852][T14934] ? __pfx___get_user_pages+0x10/0x10 [ 559.088873][T14934] populate_vma_page_range+0x267/0x3f0 [ 559.088891][T14934] ? __pfx_populate_vma_page_range+0x10/0x10 [ 559.088907][T14934] ? __pfx_find_vma_intersection+0x10/0x10 [ 559.088931][T14934] ? do_mmap+0x93f/0x12f0 [ 559.088948][T14934] __mm_populate+0x107/0x3a0 [ 559.088965][T14934] ? __pfx___mm_populate+0x10/0x10 [ 559.088983][T14934] ? up_write+0x290/0x4f0 [ 559.089009][T14934] vm_mmap_pgoff+0x37f/0x470 [ 559.089027][T14934] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 559.089044][T14934] ? do_futex+0x192/0x350 [ 559.089063][T14934] ? __pfx_do_futex+0x10/0x10 [ 559.089085][T14934] ksys_mmap_pgoff+0xe1/0x650 [ 559.089100][T14934] ? __x64_sys_futex+0x34f/0x4d0 [ 559.089122][T14934] ? __x64_sys_futex+0x358/0x4d0 [ 559.089141][T14934] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 559.089156][T14934] ? xfd_validate_state+0x129/0x190 [ 559.089188][T14934] __x64_sys_mmap+0x125/0x190 [ 559.089212][T14934] do_syscall_64+0x106/0xf80 [ 559.089229][T14934] ? clear_bhb_loop+0x40/0x90 [ 559.089247][T14934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.089262][T14934] RIP: 0033:0x7f7c0f79c629 [ 559.089276][T14934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.089290][T14934] RSP: 002b:00007f7c105db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 559.089306][T14934] RAX: ffffffffffffffda RBX: 00007f7c0fa15fa0 RCX: 00007f7c0f79c629 [ 559.089316][T14934] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000802000 [ 559.089326][T14934] RBP: 00007f7c0f832b39 R08: 0000000000000002 R09: 0000000000008000 [ 559.089335][T14934] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 559.089344][T14934] R13: 00007f7c0fa16038 R14: 00007f7c0fa15fa0 R15: 00007ffc62850838 [ 559.089365][T14934] [ 559.976428][T14942] zswap: compressor not available [ 559.986436][T14932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.064864][T14932] bond0 (unregistering): Released all slaves [ 560.153266][T14940] veth1_to_batadv: entered promiscuous mode [ 560.163440][T14940] veth1_to_batadv: left promiscuous mode [ 560.317009][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 561.113640][T14982] veth1_to_batadv: entered promiscuous mode [ 561.199308][T14982] veth1_to_batadv: left promiscuous mode [ 561.651155][T14989] zswap: compressor not available [ 561.816332][T15005] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2280'. [ 561.848817][ T30] audit: type=1326 audit(4294968427.182:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14995 comm="syz.3.2281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8dbeb9c629 code=0x0 [ 562.084842][ T30] audit: type=1326 audit(4294968427.402:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.1.2282" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c0f79c629 code=0x0 [ 562.129844][T15011] FAULT_INJECTION: forcing a failure. [ 562.129844][T15011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.195972][T15011] CPU: 0 UID: 0 PID: 15011 Comm: syz.1.2282 Tainted: G U L syzkaller #0 PREEMPT(full) [ 562.195999][T15011] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 562.196005][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.196014][T15011] Call Trace: [ 562.196020][T15011] [ 562.196026][T15011] dump_stack_lvl+0x100/0x190 [ 562.196052][T15011] should_fail_ex.cold+0x5/0xa [ 562.196070][T15011] _copy_to_user+0x32/0xd0 [ 562.196095][T15011] simple_read_from_buffer+0xcb/0x170 [ 562.196118][T15011] proc_fail_nth_read+0x1af/0x230 [ 562.196136][T15011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.196153][T15011] ? rw_verify_area+0xce/0x6d0 [ 562.196173][T15011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.196190][T15011] vfs_read+0x1e4/0xb30 [ 562.196213][T15011] ? __pfx_vfs_read+0x10/0x10 [ 562.196234][T15011] ? __fget_files+0x215/0x3d0 [ 562.196260][T15011] ? __fget_files+0x21f/0x3d0 [ 562.196287][T15011] ksys_read+0x12a/0x250 [ 562.196308][T15011] ? __pfx_ksys_read+0x10/0x10 [ 562.196335][T15011] do_syscall_64+0x106/0xf80 [ 562.196351][T15011] ? clear_bhb_loop+0x40/0x90 [ 562.196369][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.196385][T15011] RIP: 0033:0x7f7c0f75cece [ 562.196398][T15011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 562.196412][T15011] RSP: 002b:00007f7c10598fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.196427][T15011] RAX: ffffffffffffffda RBX: 00007f7c105996c0 RCX: 00007f7c0f75cece [ 562.196437][T15011] RDX: 000000000000000f RSI: 00007f7c105990a0 RDI: 0000000000000002 [ 562.196446][T15011] RBP: 00007f7c10599090 R08: 0000000000000000 R09: 0000000000000000 [ 562.196455][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.196463][T15011] R13: 00007f7c0fa16218 R14: 00007f7c0fa16180 R15: 00007ffc62850838 [ 562.196483][T15011] [ 563.080946][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.097834][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.256993][T15041] zswap: compressor not available [ 564.363906][T15053] veth1_to_batadv: entered promiscuous mode [ 564.429374][T15053] veth1_to_batadv: left promiscuous mode [ 564.607915][T15058] input: f¬ as /devices/virtual/input/input110 [ 565.046207][T15065] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2297'. [ 565.228718][T15068] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 565.257798][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2299'. [ 565.328220][T15068] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 565.415491][T15068] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 565.993577][T11752] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 566.003327][T11752] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 566.012987][T11752] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 566.020621][T11752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 566.028081][T11752] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 566.907428][T15097] zswap: compressor  not available [ 567.126423][T11724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.226757][T15088] chnl_net:caif_netlink_parms(): no params data found [ 567.278370][T15107] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 567.324040][T15107] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 567.367613][T11724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.554976][T11724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.583623][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 567.673458][T11724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.757778][T11646] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 6 with max blocks 1 with error 117 [ 567.826671][T11646] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.826671][T11646] [ 567.869648][T15088] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.897029][T15088] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.918877][T15088] bridge_slave_0: entered allmulticast mode [ 567.938145][T11646] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 3217 with max blocks 143 with error 117 [ 567.970521][T15088] bridge_slave_0: entered promiscuous mode [ 567.998025][T11646] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.998025][T11646] [ 568.022156][T15088] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.035973][T15088] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.075732][T15088] bridge_slave_1: entered allmulticast mode [ 568.091813][T11650] Bluetooth: hci4: command tx timeout [ 568.105896][T15088] bridge_slave_1: entered promiscuous mode [ 568.306694][T15088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.396634][T15088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.634296][T15088] team0: Port device team_slave_0 added [ 568.674262][T11724] batadv0: left allmulticast mode [ 568.679841][T11724] batadv0: left promiscuous mode [ 568.748852][T11724] bridge0: port 3(batadv0) entered disabled state [ 568.858310][T15138] zswap: compressor not available [ 568.941947][T11724] bridge_slave_1: left allmulticast mode [ 569.001934][T11724] bridge_slave_1: left promiscuous mode [ 569.007625][T11724] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.106576][T11724] bridge_slave_0: left allmulticast mode [ 569.139832][T11724] bridge_slave_0: left promiscuous mode [ 569.183639][T11724] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.281375][T15159] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 569.385672][T15165] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 569.825997][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2319'. [ 569.951538][T11724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.984321][T11724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.039947][T11724] bond0 (unregistering): Released all slaves [ 570.067243][T15088] team0: Port device team_slave_1 added [ 570.127949][T11724] Â: left promiscuous mode [ 570.171445][T11650] Bluetooth: hci4: command tx timeout [ 570.368100][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2321'. [ 570.504819][T15088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.535759][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.671283][T15088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.767085][T15088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.799617][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.913081][T15088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.440879][T15088] hsr_slave_0: entered promiscuous mode [ 571.500151][T15088] hsr_slave_1: entered promiscuous mode [ 571.543127][T15088] debugfs: 'hsr0' already exists in 'hsr' [ 571.574909][T15088] Cannot create hsr debugfs directory [ 571.587125][T15190] zswap: compressor not available [ 572.252603][T11650] Bluetooth: hci4: command tx timeout [ 573.163680][T15212] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 573.232415][T15212] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 573.421445][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'. [ 573.900829][T15221] veth1_to_batadv: entered promiscuous mode [ 573.938520][T15221] veth1_to_batadv: left promiscuous mode [ 574.333332][T11650] Bluetooth: hci4: command tx timeout [ 574.351789][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'. [ 574.588943][T11724] hsr_slave_0: left promiscuous mode [ 574.681767][T11724] hsr_slave_1: left promiscuous mode [ 574.719073][T11724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.752651][T15238] input: f¬ as /devices/virtual/input/input111 [ 574.780856][T11724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.880157][T11724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.903744][T11724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.948107][T15245] FAULT_INJECTION: forcing a failure. [ 574.948107][T15245] name failslab, interval 1, probability 0, space 0, times 0 [ 574.969681][T11724] veth1_macvtap: left promiscuous mode [ 574.978037][T11724] veth0_macvtap: left promiscuous mode [ 575.004312][T11724] veth1_vlan: left promiscuous mode [ 575.011901][T15245] CPU: 0 UID: 0 PID: 15245 Comm: syz.2.2334 Tainted: G U L syzkaller #0 PREEMPT(full) [ 575.011930][T15245] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 575.011936][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.011946][T15245] Call Trace: [ 575.011952][T15245] [ 575.011959][T15245] dump_stack_lvl+0x100/0x190 [ 575.011993][T15245] should_fail_ex.cold+0x5/0xa [ 575.012013][T15245] should_failslab+0xc2/0x120 [ 575.012028][T15245] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 575.012049][T15245] ? __anon_vma_prepare+0xae/0x5e0 [ 575.012073][T15245] __anon_vma_prepare+0xae/0x5e0 [ 575.012091][T15245] ? __pfx___pte_alloc+0x10/0x10 [ 575.012107][T15245] __vmf_anon_prepare+0x11f/0x250 [ 575.012124][T15245] do_anonymous_page+0x552/0x1fb0 [ 575.012144][T15245] ? do_raw_spin_unlock+0x145/0x1e0 [ 575.012167][T15245] ? __pmd_alloc+0x6aa/0x9c0 [ 575.012183][T15245] __handle_mm_fault+0x1d42/0x2b60 [ 575.012205][T15245] ? mt_find+0x45e/0x8e0 [ 575.012224][T15245] ? __pfx___handle_mm_fault+0x10/0x10 [ 575.012241][T15245] ? __pfx_mt_find+0x10/0x10 [ 575.012273][T15245] handle_mm_fault+0x36d/0xa20 [ 575.012295][T15245] __get_user_pages+0xf9c/0x34d0 [ 575.012319][T15245] ? __pfx___get_user_pages+0x10/0x10 [ 575.012340][T15245] populate_vma_page_range+0x267/0x3f0 [ 575.012358][T15245] ? __pfx_populate_vma_page_range+0x10/0x10 [ 575.012374][T15245] ? __pfx_find_vma_intersection+0x10/0x10 [ 575.012398][T15245] ? do_mmap+0x93f/0x12f0 [ 575.012415][T15245] __mm_populate+0x107/0x3a0 [ 575.012432][T15245] ? __pfx___mm_populate+0x10/0x10 [ 575.012449][T15245] ? up_write+0x290/0x4f0 [ 575.012471][T15245] vm_mmap_pgoff+0x37f/0x470 [ 575.012489][T15245] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 575.012506][T15245] ? do_futex+0x192/0x350 [ 575.012525][T15245] ? __pfx_do_futex+0x10/0x10 [ 575.012547][T15245] ksys_mmap_pgoff+0xe1/0x650 [ 575.012562][T15245] ? __x64_sys_futex+0x34f/0x4d0 [ 575.012579][T15245] ? __x64_sys_futex+0x358/0x4d0 [ 575.012598][T15245] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 575.012613][T15245] ? xfd_validate_state+0x129/0x190 [ 575.012637][T15245] __x64_sys_mmap+0x125/0x190 [ 575.012660][T15245] do_syscall_64+0x106/0xf80 [ 575.012675][T15245] ? clear_bhb_loop+0x40/0x90 [ 575.012693][T15245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.012708][T15245] RIP: 0033:0x7f7667d9c629 [ 575.012722][T15245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.012736][T15245] RSP: 002b:00007f7668bec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 575.012751][T15245] RAX: ffffffffffffffda RBX: 00007f7668015fa0 RCX: 00007f7667d9c629 [ 575.012762][T15245] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000401000 [ 575.012772][T15245] RBP: 00007f7667e32b39 R08: 0000000000000002 R09: 0000000000008000 [ 575.012781][T15245] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 575.012790][T15245] R13: 00007f7668016038 R14: 00007f7668015fa0 R15: 00007ffffa793d08 [ 575.012811][T15245] [ 575.347776][T11724] veth0_vlan: left promiscuous mode [ 576.113861][T15231] [U] ^\ [ 576.303078][T15088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 576.324800][T15250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 576.331156][T15250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 576.358407][T15250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 576.390338][T15088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 576.397588][T15250] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 576.403525][T15250] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 576.449460][T15088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 576.478461][T15250] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 576.607924][T15088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 577.427301][T15088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.782998][T15088] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.842330][T14917] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.849477][T14917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.027730][T14917] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.034861][T14917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.232186][T15088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 578.320469][T15088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 578.335308][T11650] Bluetooth: hci1: command 0x0c1a tx timeout [ 578.341322][T11752] Bluetooth: hci0: command 0x0c1a tx timeout [ 578.418908][T11752] Bluetooth: hci4: command 0x0c1a tx timeout [ 578.424945][T11650] Bluetooth: hci3: command 0x0c1a tx timeout [ 579.168480][T15088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.328276][T15088] veth0_vlan: entered promiscuous mode [ 579.393764][T15088] veth1_vlan: entered promiscuous mode [ 579.524526][T15088] veth0_macvtap: entered promiscuous mode [ 579.589523][T15088] veth1_macvtap: entered promiscuous mode [ 579.688456][T15088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.766541][T15088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.884032][T15325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2343'. [ 580.024592][T11732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.086176][T11732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.094881][T11732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.191145][T11732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.234646][T15332] FAULT_INJECTION: forcing a failure. [ 580.234646][T15332] name failslab, interval 1, probability 0, space 0, times 0 [ 580.350007][T15332] CPU: 0 UID: 0 PID: 15332 Comm: syz.0.2345 Tainted: G U L syzkaller #0 PREEMPT(full) [ 580.350035][T15332] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 580.350042][T15332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.350052][T15332] Call Trace: [ 580.350057][T15332] [ 580.350064][T15332] dump_stack_lvl+0x100/0x190 [ 580.350092][T15332] should_fail_ex.cold+0x5/0xa [ 580.350111][T15332] should_failslab+0xc2/0x120 [ 580.350126][T15332] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 580.350147][T15332] ? ptlock_alloc+0x1f/0x70 [ 580.350170][T15332] ptlock_alloc+0x1f/0x70 [ 580.350188][T15332] pte_alloc_one+0x84/0x3e0 [ 580.350205][T15332] __pte_alloc+0x6d/0x3f0 [ 580.350218][T15332] ? __pfx___pte_alloc+0x10/0x10 [ 580.350234][T15332] ? do_raw_spin_lock+0x128/0x260 [ 580.350256][T15332] ? find_held_lock+0x2b/0x80 [ 580.350271][T15332] do_anonymous_page+0x13cc/0x1fb0 [ 580.350290][T15332] ? do_raw_spin_unlock+0x145/0x1e0 [ 580.350311][T15332] ? _raw_spin_unlock+0x28/0x50 [ 580.350333][T15332] ? __pmd_alloc+0x6aa/0x9c0 [ 580.350350][T15332] __handle_mm_fault+0x1d42/0x2b60 [ 580.350372][T15332] ? mt_find+0x45e/0x8e0 [ 580.350389][T15332] ? __pfx___handle_mm_fault+0x10/0x10 [ 580.350407][T15332] ? __pfx_mt_find+0x10/0x10 [ 580.350440][T15332] handle_mm_fault+0x36d/0xa20 [ 580.350467][T15332] __get_user_pages+0xf9c/0x34d0 [ 580.350494][T15332] ? __pfx___get_user_pages+0x10/0x10 [ 580.350516][T15332] populate_vma_page_range+0x267/0x3f0 [ 580.350534][T15332] ? __pfx_populate_vma_page_range+0x10/0x10 [ 580.350550][T15332] ? __pfx_find_vma_intersection+0x10/0x10 [ 580.350573][T15332] ? do_mmap+0x93f/0x12f0 [ 580.350590][T15332] __mm_populate+0x107/0x3a0 [ 580.350607][T15332] ? __pfx___mm_populate+0x10/0x10 [ 580.350625][T15332] ? up_write+0x290/0x4f0 [ 580.350654][T15332] vm_mmap_pgoff+0x37f/0x470 [ 580.350673][T15332] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 580.350690][T15332] ? do_futex+0x192/0x350 [ 580.350710][T15332] ? __pfx_do_futex+0x10/0x10 [ 580.350733][T15332] ksys_mmap_pgoff+0xe1/0x650 [ 580.350749][T15332] ? __x64_sys_futex+0x34f/0x4d0 [ 580.350767][T15332] ? __x64_sys_futex+0x358/0x4d0 [ 580.350785][T15332] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 580.350800][T15332] ? xfd_validate_state+0x129/0x190 [ 580.350824][T15332] __x64_sys_mmap+0x125/0x190 [ 580.350847][T15332] do_syscall_64+0x106/0xf80 [ 580.350862][T15332] ? clear_bhb_loop+0x40/0x90 [ 580.350880][T15332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.350895][T15332] RIP: 0033:0x7f6b7239c629 [ 580.350910][T15332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.350924][T15332] RSP: 002b:00007f6b7317e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 580.350939][T15332] RAX: ffffffffffffffda RBX: 00007f6b72615fa0 RCX: 00007f6b7239c629 [ 580.350950][T15332] RDX: 00000000000000df RSI: 0000000000400008 RDI: 00000000fffff000 [ 580.350959][T15332] RBP: 00007f6b72432b39 R08: 0000000000000002 R09: 0000000000008000 [ 580.350969][T15332] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 580.350978][T15332] R13: 00007f6b72616038 R14: 00007f6b72615fa0 R15: 00007ffd83c3e5e8 [ 580.350999][T15332] [ 581.045697][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 581.058669][T11732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.067988][T11724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.075785][T11724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.106752][T11752] Bluetooth: hci4: command 0x0c1a tx timeout [ 581.136682][T11732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.261304][T15375] zswap: compressor b°Z²¢Y*Pôå¾WZ{QD¶yq[~«)/ÊÀül`iÙ$§²£xLòïeŒÈíê!ÃçÃŽsÁÒ%ÿ Ü× not available [ 582.288482][T15368] random: crng reseeded on system resumption [ 582.350143][T15365] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 582.523368][T15368] Invalid ELF header magic: != ELF [ 583.048111][T15393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'. [ 583.141600][T11752] Bluetooth: hci4: command 0x0c1a tx timeout [ 585.060656][T11650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.078880][T11650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 585.086816][T11650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.094681][T11650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.102643][T11650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 585.875106][T15425] chnl_net:caif_netlink_parms(): no params data found [ 586.292482][T15425] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.335155][T15425] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.369776][T15425] bridge_slave_0: entered allmulticast mode [ 586.394234][T15425] bridge_slave_0: entered promiscuous mode [ 586.438059][T15425] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.468245][T15447] random: crng reseeded on system resumption [ 586.479436][T15425] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.486609][T15425] bridge_slave_1: entered allmulticast mode [ 586.533205][T15425] bridge_slave_1: entered promiscuous mode [ 586.672656][T15425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.724066][T15425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.829879][T15452] FAULT_INJECTION: forcing a failure. [ 586.829879][T15452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 586.924835][T15425] team0: Port device team_slave_0 added [ 586.946200][T15452] CPU: 0 UID: 0 PID: 15452 Comm: syz.0.2369 Tainted: G U L syzkaller #0 PREEMPT(full) [ 586.946230][T15452] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 586.946237][T15452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.946246][T15452] Call Trace: [ 586.946252][T15452] [ 586.946259][T15452] dump_stack_lvl+0x100/0x190 [ 586.946287][T15452] should_fail_ex.cold+0x5/0xa [ 586.946303][T15452] ? prepare_alloc_pages+0x16d/0x5f0 [ 586.946321][T15452] should_fail_alloc_page+0xeb/0x140 [ 586.946338][T15452] prepare_alloc_pages+0x1f0/0x5f0 [ 586.946353][T15452] ? bpf_ksym_find+0x124/0x1c0 [ 586.946372][T15452] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 586.946394][T15452] ? kernel_text_address+0x8d/0x100 [ 586.946416][T15452] ? __kernel_text_address+0xd/0x30 [ 586.946437][T15452] ? unwind_get_return_address+0x59/0xa0 [ 586.946454][T15452] ? arch_stack_walk+0xa6/0xf0 [ 586.946474][T15452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 586.946495][T15452] ? stack_trace_save+0x8e/0xc0 [ 586.946512][T15452] ? stack_depot_save_flags+0x27/0x9d0 [ 586.946539][T15452] ? kasan_save_stack+0x3f/0x50 [ 586.946559][T15452] ? kasan_save_stack+0x30/0x50 [ 586.946579][T15452] ? kasan_save_track+0x14/0x30 [ 586.946598][T15452] ? __kasan_slab_alloc+0x89/0x90 [ 586.946619][T15452] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 586.946640][T15452] ? __pmd_alloc+0xbf/0x9c0 [ 586.946654][T15452] ? __handle_mm_fault+0xa99/0x2b60 [ 586.946671][T15452] ? handle_mm_fault+0x36d/0xa20 [ 586.946687][T15452] ? __get_user_pages+0xf9c/0x34d0 [ 586.946701][T15452] ? populate_vma_page_range+0x267/0x3f0 [ 586.946717][T15452] ? __mm_populate+0x107/0x3a0 [ 586.946731][T15452] ? vm_mmap_pgoff+0x37f/0x470 [ 586.946745][T15452] ? ksys_mmap_pgoff+0xe1/0x650 [ 586.946758][T15452] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 586.946783][T15452] ? policy_nodemask+0xed/0x4f0 [ 586.946798][T15452] alloc_pages_mpol+0x1fb/0x550 [ 586.946814][T15452] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 586.946834][T15452] alloc_pages_noprof+0x131/0x390 [ 586.946850][T15452] pte_alloc_one+0x1e/0x3e0 [ 586.946867][T15452] __pte_alloc+0x6d/0x3f0 [ 586.946881][T15452] ? __pfx___pte_alloc+0x10/0x10 [ 586.946896][T15452] ? do_raw_spin_lock+0x128/0x260 [ 586.946916][T15452] ? find_held_lock+0x2b/0x80 [ 586.946930][T15452] do_anonymous_page+0x13cc/0x1fb0 [ 586.946950][T15452] ? do_raw_spin_unlock+0x145/0x1e0 [ 586.946971][T15452] ? _raw_spin_unlock+0x28/0x50 [ 586.946994][T15452] ? __pmd_alloc+0x6aa/0x9c0 [ 586.947011][T15452] __handle_mm_fault+0x1d42/0x2b60 [ 586.947032][T15452] ? mt_find+0x45e/0x8e0 [ 586.947050][T15452] ? __pfx___handle_mm_fault+0x10/0x10 [ 586.947067][T15452] ? __pfx_mt_find+0x10/0x10 [ 586.947100][T15452] handle_mm_fault+0x36d/0xa20 [ 586.947123][T15452] __get_user_pages+0xf9c/0x34d0 [ 586.947152][T15452] ? __pfx___get_user_pages+0x10/0x10 [ 586.947176][T15452] populate_vma_page_range+0x267/0x3f0 [ 586.947194][T15452] ? __pfx_populate_vma_page_range+0x10/0x10 [ 586.947211][T15452] ? __pfx_find_vma_intersection+0x10/0x10 [ 586.947237][T15452] ? do_mmap+0x93f/0x12f0 [ 586.947255][T15452] __mm_populate+0x107/0x3a0 [ 586.947272][T15452] ? __pfx___mm_populate+0x10/0x10 [ 586.947290][T15452] ? up_write+0x290/0x4f0 [ 586.947312][T15452] vm_mmap_pgoff+0x37f/0x470 [ 586.947329][T15452] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 586.947346][T15452] ? do_futex+0x192/0x350 [ 586.947365][T15452] ? __pfx_do_futex+0x10/0x10 [ 586.947386][T15452] ksys_mmap_pgoff+0xe1/0x650 [ 586.947401][T15452] ? __x64_sys_futex+0x34f/0x4d0 [ 586.947419][T15452] ? __x64_sys_futex+0x358/0x4d0 [ 586.947438][T15452] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 586.947453][T15452] ? xfd_validate_state+0x129/0x190 [ 586.947477][T15452] __x64_sys_mmap+0x125/0x190 [ 586.947500][T15452] do_syscall_64+0x106/0xf80 [ 586.947516][T15452] ? clear_bhb_loop+0x40/0x90 [ 586.947534][T15452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.947550][T15452] RIP: 0033:0x7f6b7239c629 [ 586.947568][T15452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.947583][T15452] RSP: 002b:00007f6b705f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 586.947599][T15452] RAX: ffffffffffffffda RBX: 00007f6b72616090 RCX: 00007f6b7239c629 [ 586.947609][T15452] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 586.947618][T15452] RBP: 00007f6b72432b39 R08: ffffffffffffffff R09: 0000000000008000 [ 586.947628][T15452] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 586.947637][T15452] R13: 00007f6b72616128 R14: 00007f6b72616090 R15: 00007ffd83c3e5e8 [ 586.947658][T15452] [ 588.070335][T11650] Bluetooth: hci2: command tx timeout [ 588.929947][T15425] team0: Port device team_slave_1 added [ 589.068538][T14917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.350349][T14917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.482861][T15425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.489849][T15425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.621831][T15425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.822064][T14917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.000559][T15425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.033894][T15425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.106498][T11650] Bluetooth: hci2: command tx timeout [ 590.155513][T15425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.355340][T14917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.907308][T15425] hsr_slave_0: entered promiscuous mode [ 590.953781][T15425] hsr_slave_1: entered promiscuous mode [ 590.960061][T15425] debugfs: 'hsr0' already exists in 'hsr' [ 590.999444][T15425] Cannot create hsr debugfs directory [ 591.256761][T15488] zswap: compressor  not available [ 591.700891][T14917] bridge_slave_1: left allmulticast mode [ 591.725965][T14917] bridge_slave_1: left promiscuous mode [ 591.749564][T14917] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.779134][T14917] bridge_slave_0: left allmulticast mode [ 591.796823][T14917] bridge_slave_0: left promiscuous mode [ 591.816795][T14917] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.185358][T11650] Bluetooth: hci2: command tx timeout [ 592.505656][T14917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.552464][T14917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.583447][T14917] bond0 (unregistering): Released all slaves [ 592.698924][T14917] Â: left promiscuous mode [ 593.045635][T15505] ima: policy update failed [ 593.078601][ T30] audit: type=1802 audit(4294968458.386:57): pid=15505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2381" res=0 errno=0 [ 593.582541][T15523] veth1_to_batadv: entered promiscuous mode [ 593.638485][T15523] veth1_to_batadv: left promiscuous mode [ 594.248938][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2386'. [ 594.266344][T11650] Bluetooth: hci2: command tx timeout [ 594.756105][T14917] hsr_slave_0: left promiscuous mode [ 594.769495][T14917] hsr_slave_1: left promiscuous mode [ 594.789030][T15555] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 594.805385][T14917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.828841][T15555] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 594.839088][T14917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.851448][T14917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.876666][T14917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.921520][T14917] veth1_macvtap: left promiscuous mode [ 594.939700][T14917] veth0_macvtap: left promiscuous mode [ 594.959578][T14917] veth1_vlan: left promiscuous mode [ 594.977630][T14917] veth0_vlan: left promiscuous mode [ 595.444544][T14917] team0 (unregistering): Port device team_slave_1 removed [ 595.514047][T14917] team0 (unregistering): Port device team_slave_0 removed [ 595.937039][T15425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 596.002399][T15567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2392'. [ 596.041508][T15425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 596.138729][T15425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 596.244039][T15425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 596.795664][T15425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.032663][T15425] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.182430][T11668] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.189656][T11668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.512415][T11668] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.519575][T11668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.761909][T15606] ovs_datapath: entered promiscuous mode [ 598.141169][T15425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.201434][T15425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.901202][T15425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.051962][T15425] veth0_vlan: entered promiscuous mode [ 599.140140][T15425] veth1_vlan: entered promiscuous mode [ 599.261320][T15425] veth0_macvtap: entered promiscuous mode [ 599.304846][T15425] veth1_macvtap: entered promiscuous mode [ 599.406504][T15425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.448788][T15425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.599188][T11668] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.634280][T11668] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.691861][T11668] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.736221][T11668] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.927386][T11732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.935209][T11732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.052625][T11668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.077227][T11668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.940024][T15680] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2407'. [ 602.218911][T15694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2409'. [ 603.994386][T15709] veth1_to_batadv: entered promiscuous mode [ 604.015805][T15709] veth1_to_batadv: left promiscuous mode [ 604.200449][T15718] input: f¬ as /devices/virtual/input/input112 [ 604.929985][ T30] audit: type=1326 audit(4294969493.244:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15722 comm="syz.3.2417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f240f59c629 code=0x0 [ 605.962291][T15741] netlink: 'syz.1.2421': attribute type 11 has an invalid length. [ 606.387191][T15740] openvswitch: ovs_datapath: Dropping previously announced user features [ 606.780521][T15756] FAULT_INJECTION: forcing a failure. [ 606.780521][T15756] name failslab, interval 1, probability 0, space 0, times 0 [ 606.998441][T15756] CPU: 0 UID: 0 PID: 15756 Comm: syz.2.2423 Tainted: G U L syzkaller #0 PREEMPT(full) [ 606.998470][T15756] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 606.998476][T15756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 606.998485][T15756] Call Trace: [ 606.998490][T15756] [ 606.998497][T15756] dump_stack_lvl+0x100/0x190 [ 606.998525][T15756] should_fail_ex.cold+0x5/0xa [ 606.998544][T15756] should_failslab+0xc2/0x120 [ 606.998566][T15756] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 606.998588][T15756] ? skb_clone+0x190/0x400 [ 606.998608][T15756] skb_clone+0x190/0x400 [ 606.998624][T15756] netlink_deliver_tap+0xaed/0xcc0 [ 606.998643][T15756] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 606.998664][T15756] netlink_dump+0xa60/0xd30 [ 606.998682][T15756] ? __pfx_netlink_dump+0x10/0x10 [ 606.998699][T15756] ? kasan_quarantine_put+0x104/0x240 [ 606.998728][T15756] ? kfree_skbmem+0x19f/0x210 [ 606.998750][T15756] netlink_recvmsg+0x7dc/0xa90 [ 606.998768][T15756] ? __pfx_netlink_recvmsg+0x10/0x10 [ 606.998793][T15756] ____sys_recvmsg+0x5f7/0x6b0 [ 606.998817][T15756] ? __pfx_____sys_recvmsg+0x10/0x10 [ 606.998844][T15756] ? ___sys_recvmsg+0x177/0x1a0 [ 606.998863][T15756] ? kfree+0x2ec/0x6b0 [ 606.998883][T15756] ___sys_recvmsg+0x16a/0x1a0 [ 606.998904][T15756] ? __pfx____sys_recvmsg+0x10/0x10 [ 606.998936][T15756] ? __pfx___might_resched+0x10/0x10 [ 606.998961][T15756] do_recvmmsg+0x301/0x760 [ 606.998985][T15756] ? __pfx_do_recvmmsg+0x10/0x10 [ 606.999004][T15756] ? ksys_write+0x190/0x250 [ 606.999026][T15756] ? ksys_write+0x190/0x250 [ 606.999050][T15756] ? __mutex_unlock_slowpath+0x15c/0x790 [ 606.999074][T15756] ? __fget_files+0x21f/0x3d0 [ 606.999101][T15756] __x64_sys_recvmmsg+0x22a/0x280 [ 606.999120][T15756] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 606.999142][T15756] do_syscall_64+0x106/0xf80 [ 606.999158][T15756] ? clear_bhb_loop+0x40/0x90 [ 606.999176][T15756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.999192][T15756] RIP: 0033:0x7f7667d9c629 [ 606.999205][T15756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.999220][T15756] RSP: 002b:00007f7668bcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 606.999235][T15756] RAX: ffffffffffffffda RBX: 00007f7668016090 RCX: 00007f7667d9c629 [ 606.999245][T15756] RDX: 000000000000010a RSI: 0000200000000140 RDI: 0000000000000003 [ 606.999254][T15756] RBP: 00007f7668bcb090 R08: 0000000000000000 R09: 0000000000000000 [ 606.999263][T15756] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 606.999272][T15756] R13: 00007f7668016128 R14: 00007f7668016090 R15: 00007ffffa793d08 [ 606.999292][T15756] [ 607.712211][T15762] Invalid ELF header magic: != ELF [ 608.476157][T15781] veth1_to_batadv: entered promiscuous mode [ 608.524530][T15781] veth1_to_batadv: left promiscuous mode [ 608.688131][T15785] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3535508.786432.557057), cmd(16) [ 608.742719][T15785] device-mapper: ioctl: Invalid data size in the ioctl structure: 3 [ 609.786494][T15815] FAULT_INJECTION: forcing a failure. [ 609.786494][T15815] name failslab, interval 1, probability 0, space 0, times 0 [ 609.844873][T15815] CPU: 0 UID: 0 PID: 15815 Comm: syz.1.2443 Tainted: G U L syzkaller #0 PREEMPT(full) [ 609.844903][T15815] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 609.844910][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.844919][T15815] Call Trace: [ 609.844925][T15815] [ 609.844931][T15815] dump_stack_lvl+0x100/0x190 [ 609.844959][T15815] should_fail_ex.cold+0x5/0xa [ 609.844977][T15815] should_failslab+0xc2/0x120 [ 609.844992][T15815] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 609.845015][T15815] ? can_rx_register+0x582/0x6f0 [ 609.845033][T15815] can_rx_register+0x582/0x6f0 [ 609.845047][T15815] ? __pfx_raw_rcv+0x10/0x10 [ 609.845066][T15815] ? __pfx_can_rx_register+0x10/0x10 [ 609.845087][T15815] raw_enable_filters+0xe0/0x210 [ 609.845108][T15815] raw_enable_allfilters+0x8b/0x2b0 [ 609.845124][T15815] ? __local_bh_enable_ip+0x9e/0x120 [ 609.845142][T15815] raw_bind+0x1bd/0xdf0 [ 609.845157][T15815] ? apparmor_socket_bind+0x105/0x1e0 [ 609.845179][T15815] __sys_bind+0x1a9/0x260 [ 609.845203][T15815] ? __pfx___sys_bind+0x10/0x10 [ 609.845238][T15815] __x64_sys_bind+0x72/0xb0 [ 609.845258][T15815] ? lockdep_hardirqs_on+0x78/0x100 [ 609.845275][T15815] do_syscall_64+0x106/0xf80 [ 609.845291][T15815] ? clear_bhb_loop+0x40/0x90 [ 609.845310][T15815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.845325][T15815] RIP: 0033:0x7fe9a919c629 [ 609.845340][T15815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.845355][T15815] RSP: 002b:00007fe9aa026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 609.845380][T15815] RAX: ffffffffffffffda RBX: 00007fe9a9415fa0 RCX: 00007fe9a919c629 [ 609.845391][T15815] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 609.845402][T15815] RBP: 00007fe9a9232b39 R08: 0000000000000000 R09: 0000000000000000 [ 609.845413][T15815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.845421][T15815] R13: 00007fe9a9416038 R14: 00007fe9a9415fa0 R15: 00007fffd01b1168 [ 609.845442][T15815] [ 610.932782][T11752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.946489][T11752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.955529][T11752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.963350][T11752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.970756][T11752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 611.914693][T11668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.084971][T11668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.205031][T11668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.321235][T15826] chnl_net:caif_netlink_parms(): no params data found [ 612.411367][T11668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.532231][T15844] input: f¬ as /devices/virtual/input/input113 [ 612.771951][T15826] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.800542][T15826] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.824924][T15826] bridge_slave_0: entered allmulticast mode [ 612.849247][T15826] bridge_slave_0: entered promiscuous mode [ 612.872282][T15826] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.891553][ T30] audit: type=1800 audit(4294969501.190:59): pid=15853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2453" name="dbroot" dev="configfs" ino=64816 res=0 errno=0 [ 612.930568][T15826] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.962754][T15826] bridge_slave_1: entered allmulticast mode [ 612.988295][T15826] bridge_slave_1: entered promiscuous mode [ 613.074186][T11752] Bluetooth: hci1: command tx timeout [ 613.128844][T15826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.187901][T15826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.373416][T15826] team0: Port device team_slave_0 added [ 613.411495][T15826] team0: Port device team_slave_1 added [ 613.563115][T15826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.590358][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.712827][T15826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.812779][T11668] bridge_slave_1: left allmulticast mode [ 613.824127][T11668] bridge_slave_1: left promiscuous mode [ 613.849019][T11668] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.921852][T11668] bridge_slave_0: left allmulticast mode [ 613.942146][T11668] bridge_slave_0: left promiscuous mode [ 613.975139][T11668] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.661459][T15826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.718622][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.869194][T15826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.883517][T15888] zswap: compressor not available [ 614.936852][T11668] ovs_datapath: left promiscuous mode [ 615.126431][T15826] hsr_slave_0: entered promiscuous mode [ 615.153652][T11752] Bluetooth: hci1: command tx timeout [ 615.167347][T15826] hsr_slave_1: entered promiscuous mode [ 615.205706][T15826] debugfs: 'hsr0' already exists in 'hsr' [ 615.211450][T15826] Cannot create hsr debugfs directory [ 615.975666][T15921] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 616.286228][T11668] hsr_slave_0: left promiscuous mode [ 616.372262][T11668] hsr_slave_1: left promiscuous mode [ 616.400806][T11668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.438638][T11668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.488596][T11668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.525039][T11668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.576469][T11668] veth0_macvtap: left promiscuous mode [ 616.865118][T15940] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(13810.16780288.50333824), cmd(16) [ 616.936838][T15940] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 617.020391][T15936] zswap: compressor not available [ 617.204049][T11668] team0 (unregistering): Port device team_slave_1 removed [ 617.235874][T11752] Bluetooth: hci1: command tx timeout [ 617.289877][T11668] team0 (unregistering): Port device team_slave_0 removed [ 617.670528][T15948] veth1_to_batadv: entered promiscuous mode [ 617.918849][T15948] veth1_to_batadv: left promiscuous mode [ 619.316255][T11752] Bluetooth: hci1: command tx timeout [ 619.490113][T15826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 619.654375][T15826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 619.715529][T15826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 619.787949][T15826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 620.098448][T15826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.174627][T15826] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.221959][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.229188][T11646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.338996][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.346104][T11646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.481572][T15826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 620.535408][T15826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 621.136312][T15826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.309918][T15826] veth0_vlan: entered promiscuous mode [ 621.373553][T15826] veth1_vlan: entered promiscuous mode [ 621.449885][T16032] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.2482: bg 4: bad block bitmap checksum [ 621.510916][T15826] veth0_macvtap: entered promiscuous mode [ 621.554811][T15826] veth1_macvtap: entered promiscuous mode [ 621.656498][T15826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.703347][T15826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.786377][T14917] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.810052][T16032] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2051 with max blocks 1 with error 74 [ 621.836683][T14917] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.875017][T14917] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.912875][T14917] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.214794][T14917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.225777][T16032] EXT4-fs (sda1): This should not happen!! Data will be lost [ 622.225777][T16032] [ 622.259710][T14917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.365470][T14917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.395563][T14917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.040505][T16045] FAULT_INJECTION: forcing a failure. [ 623.040505][T16045] name failslab, interval 1, probability 0, space 0, times 0 [ 623.119991][T16045] CPU: 0 UID: 0 PID: 16045 Comm: syz.1.2484 Tainted: G U L syzkaller #0 PREEMPT(full) [ 623.120020][T16045] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 623.120027][T16045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.120037][T16045] Call Trace: [ 623.120043][T16045] [ 623.120049][T16045] dump_stack_lvl+0x100/0x190 [ 623.120076][T16045] should_fail_ex.cold+0x5/0xa [ 623.120095][T16045] ? tomoyo_realpath_from_path+0xb6/0x690 [ 623.120112][T16045] should_failslab+0xc2/0x120 [ 623.120128][T16045] __kmalloc_noprof+0xe0/0x850 [ 623.120153][T16045] tomoyo_realpath_from_path+0xb6/0x690 [ 623.120173][T16045] tomoyo_get_exe+0x63/0xa0 [ 623.120193][T16045] tomoyo_write_control+0x69e/0x13a0 [ 623.120220][T16045] ? __pfx_tomoyo_write_control+0x10/0x10 [ 623.120245][T16045] vfs_write+0x2aa/0x1070 [ 623.120267][T16045] ? __pfx_tomoyo_write+0x10/0x10 [ 623.120284][T16045] ? __pfx_vfs_write+0x10/0x10 [ 623.120305][T16045] ? __fget_files+0x215/0x3d0 [ 623.120331][T16045] ? __fget_files+0x21f/0x3d0 [ 623.120358][T16045] ksys_write+0x12a/0x250 [ 623.120379][T16045] ? __pfx_ksys_write+0x10/0x10 [ 623.120406][T16045] do_syscall_64+0x106/0xf80 [ 623.120423][T16045] ? clear_bhb_loop+0x40/0x90 [ 623.120441][T16045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.120465][T16045] RIP: 0033:0x7fe9a919c629 [ 623.120480][T16045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.120496][T16045] RSP: 002b:00007fe9aa005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 623.120511][T16045] RAX: ffffffffffffffda RBX: 00007fe9a9416090 RCX: 00007fe9a919c629 [ 623.120521][T16045] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 623.120530][T16045] RBP: 00007fe9a9232b39 R08: 0000000000000000 R09: 0000000000000000 [ 623.120539][T16045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.120547][T16045] R13: 00007fe9a9416128 R14: 00007fe9a9416090 R15: 00007fffd01b1168 [ 623.120569][T16045] [ 623.120576][T16045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 623.634934][T16071] FAULT_INJECTION: forcing a failure. [ 623.634934][T16071] name failslab, interval 1, probability 0, space 0, times 0 [ 623.698092][T16071] CPU: 0 UID: 0 PID: 16071 Comm: syz.0.2487 Tainted: G U L syzkaller #0 PREEMPT(full) [ 623.698121][T16071] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 623.698127][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.698136][T16071] Call Trace: [ 623.698142][T16071] [ 623.698148][T16071] dump_stack_lvl+0x100/0x190 [ 623.698175][T16071] should_fail_ex.cold+0x5/0xa [ 623.698193][T16071] ? tomoyo_realpath_from_path+0xb6/0x690 [ 623.698209][T16071] should_failslab+0xc2/0x120 [ 623.698224][T16071] __kmalloc_noprof+0xe0/0x850 [ 623.698248][T16071] tomoyo_realpath_from_path+0xb6/0x690 [ 623.698268][T16071] tomoyo_path_number_perm+0x23c/0x580 [ 623.698289][T16071] ? tomoyo_path_number_perm+0x22e/0x580 [ 623.698312][T16071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 623.698359][T16071] ? find_held_lock+0x2b/0x80 [ 623.698372][T16071] ? __fget_files+0x215/0x3d0 [ 623.698393][T16071] ? hook_file_ioctl_common+0x146/0x410 [ 623.698419][T16071] ? __fget_files+0x21f/0x3d0 [ 623.698449][T16071] security_file_ioctl+0xd3/0x230 [ 623.698473][T16071] __x64_sys_ioctl+0xb7/0x210 [ 623.698494][T16071] do_syscall_64+0x106/0xf80 [ 623.698511][T16071] ? clear_bhb_loop+0x40/0x90 [ 623.698529][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.698544][T16071] RIP: 0033:0x7f721419c629 [ 623.698557][T16071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.698572][T16071] RSP: 002b:00007f72150d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.698586][T16071] RAX: ffffffffffffffda RBX: 00007f7214415fa0 RCX: 00007f721419c629 [ 623.698597][T16071] RDX: 0000200000000100 RSI: 00000000c0984124 RDI: 0000000000000003 [ 623.698606][T16071] RBP: 00007f72150d4090 R08: 0000000000000000 R09: 0000000000000000 [ 623.698615][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.698623][T16071] R13: 00007f7214416038 R14: 00007f7214415fa0 R15: 00007ffff74506c8 [ 623.698643][T16071] [ 623.698650][T16071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 624.524017][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.532680][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.811046][T16091] FAULT_INJECTION: forcing a failure. [ 624.811046][T16091] name failslab, interval 1, probability 0, space 0, times 0 [ 624.926304][T16091] CPU: 0 UID: 0 PID: 16091 Comm: syz.2.2492 Tainted: G U L syzkaller #0 PREEMPT(full) [ 624.926333][T16091] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 624.926340][T16091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.926350][T16091] Call Trace: [ 624.926356][T16091] [ 624.926362][T16091] dump_stack_lvl+0x100/0x190 [ 624.926390][T16091] should_fail_ex.cold+0x5/0xa [ 624.926409][T16091] should_failslab+0xc2/0x120 [ 624.926424][T16091] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 624.926445][T16091] ? vm_area_alloc+0x1f/0x160 [ 624.926462][T16091] ? vma_merge_new_range+0x38b/0xa30 [ 624.926485][T16091] vm_area_alloc+0x1f/0x160 [ 624.926503][T16091] __mmap_region+0x10cc/0x29e0 [ 624.926525][T16091] ? __pfx___mmap_region+0x10/0x10 [ 624.926566][T16091] ? sched_clock+0x38/0x60 [ 624.926593][T16091] ? lockdep_hardirqs_on+0x78/0x100 [ 624.926610][T16091] ? finish_task_switch.isra.0+0x205/0xb80 [ 624.926626][T16091] ? rcu_is_watching+0x12/0xc0 [ 624.926674][T16091] ? rcu_is_watching+0x12/0xc0 [ 624.926694][T16091] ? cap_capable+0x107/0x460 [ 624.926716][T16091] mmap_region+0x180/0x3e0 [ 624.926740][T16091] do_mmap+0xc63/0x12f0 [ 624.926758][T16091] ? __pfx_do_mmap+0x10/0x10 [ 624.926773][T16091] ? __pfx_down_write_killable+0x10/0x10 [ 624.926797][T16091] vm_mmap_pgoff+0x29e/0x470 [ 624.926816][T16091] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 624.926833][T16091] ? do_futex+0x192/0x350 [ 624.926851][T16091] ? __pfx_do_futex+0x10/0x10 [ 624.926873][T16091] ksys_mmap_pgoff+0xe1/0x650 [ 624.926887][T16091] ? __x64_sys_futex+0x34f/0x4d0 [ 624.926908][T16091] ? __x64_sys_futex+0x358/0x4d0 [ 624.926927][T16091] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 624.926942][T16091] ? xfd_validate_state+0x129/0x190 [ 624.926965][T16091] __x64_sys_mmap+0x125/0x190 [ 624.926988][T16091] do_syscall_64+0x106/0xf80 [ 624.927004][T16091] ? clear_bhb_loop+0x40/0x90 [ 624.927022][T16091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.927037][T16091] RIP: 0033:0x7f7667d9c629 [ 624.927050][T16091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.927065][T16091] RSP: 002b:00007f7668baa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 624.927080][T16091] RAX: ffffffffffffffda RBX: 00007f7668016180 RCX: 00007f7667d9c629 [ 624.927090][T16091] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 624.927100][T16091] RBP: 00007f7667e32b39 R08: 0000000000000401 R09: 0000000000008000 [ 624.927109][T16091] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 624.927119][T16091] R13: 00007f7668016218 R14: 00007f7668016180 R15: 00007ffffa793d08 [ 624.927139][T16091] [ 626.871775][T16137] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.1.2501: Error -117 reading block bitmap for 4 [ 627.358508][T11650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 627.380599][T11650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 627.388575][T11650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 627.396453][T11650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 627.405153][T11650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 627.665684][T16141] bridge0: port 3(gretap0) entered blocking state [ 627.741715][T16141] bridge0: port 3(gretap0) entered disabled state [ 627.810415][T16141] gretap0: entered allmulticast mode [ 627.842113][T16141] gretap0: entered promiscuous mode [ 627.874561][T16141] bridge0: port 3(gretap0) entered blocking state [ 627.881108][T16141] bridge0: port 3(gretap0) entered forwarding state [ 628.163493][T11724] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 3224 with max blocks 136 with error 117 [ 628.226395][T11724] EXT4-fs (sda1): This should not happen!! Data will be lost [ 628.226395][T11724] [ 628.707013][T16165] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 628.718590][T16164] program syz.1.2507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 628.993829][T14917] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.265443][T14917] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.375537][T16146] chnl_net:caif_netlink_parms(): no params data found [ 629.480894][T11650] Bluetooth: hci3: command tx timeout [ 629.716331][T14917] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.983550][T16179] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 629.993235][T14917] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.082228][T16179] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 630.318810][T16146] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.346857][T16146] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.383075][T16146] bridge_slave_0: entered allmulticast mode [ 630.416072][T16146] bridge_slave_0: entered promiscuous mode [ 630.445447][T16146] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.477701][T16146] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.515567][T16146] bridge_slave_1: entered allmulticast mode [ 630.549133][T16146] bridge_slave_1: entered promiscuous mode [ 630.735765][T16187] netlink: zone id is out of range [ 630.794298][T16146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.905760][T16146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.989995][T14917] bond0: left allmulticast mode [ 631.006220][T14917] bond_slave_0: left allmulticast mode [ 631.040440][T14917] bond0: left promiscuous mode [ 631.052299][T14917] bond_slave_0: left promiscuous mode [ 631.088454][T14917] bridge0: port 4(bond0) entered disabled state [ 631.154275][T14917] gretap0: left allmulticast mode [ 631.171852][T16194] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114 [ 631.196528][T14917] gretap0: left promiscuous mode [ 631.221731][T14917] bridge0: port 3(gretap0) entered disabled state [ 631.298392][T14917] bridge_slave_1: left allmulticast mode [ 631.331794][T14917] bridge_slave_1: left promiscuous mode [ 631.370216][T14917] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.556476][T14917] bridge_slave_0: left allmulticast mode [ 631.566479][T11650] Bluetooth: hci3: command tx timeout [ 631.591453][T14917] bridge_slave_0: left promiscuous mode [ 631.633259][T14917] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.185612][T14917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.228282][T14917] bond0 (unregistering): Released all slaves [ 632.302850][T16146] team0: Port device team_slave_0 added [ 632.347137][T16146] team0: Port device team_slave_1 added [ 632.590507][T16146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.638541][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.724295][T16146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.780598][T16146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.822470][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.930353][T16146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.300223][T16146] hsr_slave_0: entered promiscuous mode [ 633.341572][T16146] hsr_slave_1: entered promiscuous mode [ 633.378937][T16146] debugfs: 'hsr0' already exists in 'hsr' [ 633.424959][T16146] Cannot create hsr debugfs directory [ 633.643024][T11650] Bluetooth: hci3: command tx timeout [ 634.935257][T11668] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3526 with max blocks 4 with error 117 [ 635.013655][T11668] EXT4-fs (sda1): This should not happen!! Data will be lost [ 635.013655][T11668] [ 635.392697][T11646] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:1: bg 5: bad block bitmap checksum [ 635.444567][T16278] random: crng reseeded on system resumption [ 635.456986][T11646] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2055 with max blocks 1 with error 74 [ 635.533858][T11646] EXT4-fs (sda1): This should not happen!! Data will be lost [ 635.533858][T11646] [ 635.723997][T11650] Bluetooth: hci3: command tx timeout [ 635.900597][T14917] hsr_slave_0: left promiscuous mode [ 635.984139][T14917] hsr_slave_1: left promiscuous mode [ 636.035012][T14917] veth1_macvtap: left promiscuous mode [ 636.043573][T14917] veth0_macvtap: left promiscuous mode [ 637.747236][T16146] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 637.783211][T16307] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2061 with max blocks 2 with error 117 [ 637.805461][T16146] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 637.852113][T16146] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 637.896230][T16146] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 637.931015][T16307] EXT4-fs (sda1): This should not happen!! Data will be lost [ 637.931015][T16307] [ 638.033208][T11732] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2067 with max blocks 1 with error 117 [ 638.098971][T11732] EXT4-fs (sda1): This should not happen!! Data will be lost [ 638.098971][T11732] [ 638.180401][T11732] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2070 with max blocks 1 with error 117 [ 638.199063][T16146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.251912][T11732] EXT4-fs (sda1): This should not happen!! Data will be lost [ 638.251912][T11732] [ 638.294055][T16146] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.351927][T11668] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.359090][T11668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.469261][T11732] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.476453][T11732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.574221][T16146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 638.665673][T16146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.267620][T16146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.429411][T16146] veth0_vlan: entered promiscuous mode [ 639.492985][T16146] veth1_vlan: entered promiscuous mode [ 639.594394][T16146] veth0_macvtap: entered promiscuous mode [ 639.641247][T16146] veth1_macvtap: entered promiscuous mode [ 639.718545][T16146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.768924][T16146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.869397][T11732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.926117][T11732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.934856][T11732] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.056794][T11732] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.096782][T16365] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2077 with max blocks 1 with error 117 [ 640.185680][T16365] EXT4-fs (sda1): This should not happen!! Data will be lost [ 640.185680][T16365] [ 640.294192][T11668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.346492][T11668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.637534][T11732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.675543][T11732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.758145][T16380] zswap: compressor b°Z²¢Y*Pôå¾WZ{QD¶yq[~«)/ÊÀül`iÙ$§²£xLòïeŒÈíê!ÃçÃŽsÁÒ%ÿ Ü× not available [ 641.520871][T16409] random: crng reseeded on system resumption [ 641.957634][T16415] Unrecognized hibernate image header format! [ 641.989353][T16415] PM: hibernation: Image mismatch: architecture specific data [ 642.122232][T16431] Invalid ELF header magic: != ELF [ 642.836440][T16436] cgroup: fork rejected by pids controller in /syz2 [ 642.882303][T16466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2553'. [ 643.086148][T16437] FAULT_INJECTION: forcing a failure. [ 643.086148][T16437] name fail_futex, interval 1, probability 0, space 0, times 0 [ 643.323292][T16437] CPU: 0 UID: 0 PID: 16437 Comm: syz.2.2550 Tainted: G U L syzkaller #0 PREEMPT(full) [ 643.323320][T16437] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 643.323326][T16437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.323335][T16437] Call Trace: [ 643.323341][T16437] [ 643.323348][T16437] dump_stack_lvl+0x100/0x190 [ 643.323375][T16437] should_fail_ex.cold+0x5/0xa [ 643.323393][T16437] get_futex_key+0x106f/0x1620 [ 643.323413][T16437] ? __pfx_get_futex_key+0x10/0x10 [ 643.323429][T16437] ? lock_acquire+0x1cf/0x380 [ 643.323453][T16437] futex_wake+0xea/0x530 [ 643.323477][T16437] ? __pfx_futex_wake+0x10/0x10 [ 643.323499][T16437] ? exit_mm_release+0x19/0x30 [ 643.323522][T16437] do_futex+0x32b/0x350 [ 643.323540][T16437] ? __pfx_do_futex+0x10/0x10 [ 643.323558][T16437] ? __might_fault+0xc5/0x140 [ 643.323582][T16437] mm_release+0x24a/0x2f0 [ 643.323597][T16437] do_exit+0x675/0x2aa0 [ 643.323619][T16437] ? __pfx_do_exit+0x10/0x10 [ 643.323638][T16437] ? do_raw_spin_lock+0x128/0x260 [ 643.323658][T16437] ? find_held_lock+0x2b/0x80 [ 643.323671][T16437] ? get_signal+0x7e0/0x21e0 [ 643.323688][T16437] do_group_exit+0xd5/0x2a0 [ 643.323708][T16437] get_signal+0x1ec7/0x21e0 [ 643.323730][T16437] ? __pfx_get_signal+0x10/0x10 [ 643.323746][T16437] ? do_futex+0x192/0x350 [ 643.323766][T16437] arch_do_signal_or_restart+0x91/0x770 [ 643.323786][T16437] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 643.323809][T16437] ? xfd_validate_state+0x129/0x190 [ 643.323834][T16437] exit_to_user_mode_loop+0x86/0x4a0 [ 643.323855][T16437] do_syscall_64+0x668/0xf80 [ 643.323871][T16437] ? clear_bhb_loop+0x40/0x90 [ 643.323889][T16437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.323905][T16437] RIP: 0033:0x7ff2dbd9c629 [ 643.323923][T16437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.323938][T16437] RSP: 002b:00007ff2dcc9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 643.323953][T16437] RAX: fffffffffffffffc RBX: 00007ff2dc016090 RCX: 00007ff2dbd9c629 [ 643.323963][T16437] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 643.323972][T16437] RBP: 00007ff2dbe32b39 R08: 0000000000000002 R09: 0000000000008000 [ 643.323981][T16437] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 643.323990][T16437] R13: 00007ff2dc016128 R14: 00007ff2dc016090 R15: 00007ffd5a0695f8 [ 643.324010][T16437] [ 644.243306][T16493] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2557'. [ 646.007844][T16500] Invalid ELF header magic: != ELF [ 646.057989][T16509] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2059 with max blocks 1 with error 117 [ 646.192655][T16509] EXT4-fs (sda1): This should not happen!! Data will be lost [ 646.192655][T16509] [ 647.581238][T16528] FAULT_INJECTION: forcing a failure. [ 647.581238][T16528] name failslab, interval 1, probability 0, space 0, times 0 [ 647.659530][T16528] CPU: 0 UID: 0 PID: 16528 Comm: syz.3.2569 Tainted: G U L syzkaller #0 PREEMPT(full) [ 647.659560][T16528] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 647.659567][T16528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.659577][T16528] Call Trace: [ 647.659583][T16528] [ 647.659590][T16528] dump_stack_lvl+0x100/0x190 [ 647.659618][T16528] should_fail_ex.cold+0x5/0xa [ 647.659636][T16528] should_failslab+0xc2/0x120 [ 647.659651][T16528] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 647.659674][T16528] ? __alloc_skb+0x140/0x710 [ 647.659693][T16528] __alloc_skb+0x140/0x710 [ 647.659708][T16528] ? __alloc_skb+0x5b7/0x710 [ 647.659722][T16528] ? __pfx___alloc_skb+0x10/0x10 [ 647.659737][T16528] ? netlink_has_listeners+0x20f/0x430 [ 647.659754][T16528] ? netlink_has_listeners+0x20f/0x430 [ 647.659774][T16528] alloc_uevent_skb+0x7d/0x210 [ 647.659800][T16528] kobject_uevent_env+0xd2d/0x18b0 [ 647.659824][T16528] ? bus_to_subsys+0x114/0x150 [ 647.659844][T16528] device_add+0x116e/0x1950 [ 647.659868][T16528] ? __pfx_device_add+0x10/0x10 [ 647.659897][T16528] nfc_register_device+0x41/0x3e0 [ 647.659916][T16528] nci_register_device+0x7f1/0xb80 [ 647.659938][T16528] ? __pfx_nci_register_device+0x10/0x10 [ 647.659962][T16528] ? lockdep_init_map_type+0x5c/0x250 [ 647.659985][T16528] virtual_ncidev_open+0x141/0x220 [ 647.660001][T16528] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 647.660016][T16528] misc_open+0x26d/0x450 [ 647.660039][T16528] ? __pfx_misc_open+0x10/0x10 [ 647.660060][T16528] chrdev_open+0x234/0x6a0 [ 647.660074][T16528] ? __pfx_apparmor_file_open+0x10/0x10 [ 647.660094][T16528] ? __pfx_chrdev_open+0x10/0x10 [ 647.660108][T16528] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 647.660136][T16528] do_dentry_open+0x6d8/0x1660 [ 647.660159][T16528] ? __pfx_chrdev_open+0x10/0x10 [ 647.660177][T16528] vfs_open+0x82/0x3f0 [ 647.660197][T16528] path_openat+0x208c/0x31a0 [ 647.660218][T16528] ? __pfx_path_openat+0x10/0x10 [ 647.660239][T16528] do_file_open+0x20e/0x430 [ 647.660255][T16528] ? __pfx_do_file_open+0x10/0x10 [ 647.660284][T16528] ? alloc_fd+0x476/0x790 [ 647.660308][T16528] ? do_getname+0x191/0x390 [ 647.660327][T16528] do_sys_openat2+0x10d/0x1e0 [ 647.660345][T16528] ? __pfx_do_sys_openat2+0x10/0x10 [ 647.660370][T16528] __x64_sys_openat+0x12d/0x210 [ 647.660389][T16528] ? __pfx___x64_sys_openat+0x10/0x10 [ 647.660415][T16528] do_syscall_64+0x106/0xf80 [ 647.660431][T16528] ? clear_bhb_loop+0x40/0x90 [ 647.660449][T16528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.660464][T16528] RIP: 0033:0x7f240f59c629 [ 647.660479][T16528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.660494][T16528] RSP: 002b:00007f2410518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 647.660509][T16528] RAX: ffffffffffffffda RBX: 00007f240f815fa0 RCX: 00007f240f59c629 [ 647.660525][T16528] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 647.660535][T16528] RBP: 00007f240f632b39 R08: 0000000000000000 R09: 0000000000000000 [ 647.660544][T16528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.660554][T16528] R13: 00007f240f816038 R14: 00007f240f815fa0 R15: 00007fffe704b668 [ 647.660575][T16528] [ 650.480008][T16550] ======================================================= [ 650.480008][T16550] WARNING: The mand mount option has been deprecated and [ 650.480008][T16550] and is ignored by this kernel. Remove the mand [ 650.480008][T16550] option from the mount to silence this warning. [ 650.480008][T16550] ======================================================= [ 654.375584][T16603] Â: entered promiscuous mode [ 659.191177][T16632] bridge0: port 3(dummy0) entered blocking state [ 659.239528][T16632] bridge0: port 3(dummy0) entered disabled state [ 659.285842][T16632] dummy0: entered allmulticast mode [ 659.322215][T16632] dummy0: entered promiscuous mode [ 659.350524][T16632] bridge0: port 3(dummy0) entered blocking state [ 659.357001][T16632] bridge0: port 3(dummy0) entered forwarding state [ 660.615072][T16667] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(905090050.201326592.142606592), cmd(2) [ 660.836081][T16675] zswap: compressor b°Z²¢Y*Pôå¾WZ{QD¶yq[~«)/ÊÀül`iÙ$§²£xLòïeŒÈíê!ÃçÃŽsÁÒ%ÿ Ü× not available [ 661.576539][T16688] FAULT_INJECTION: forcing a failure. [ 661.576539][T16688] name failslab, interval 1, probability 0, space 0, times 0 [ 661.635150][T16688] CPU: 0 UID: 0 PID: 16688 Comm: syz.1.2605 Tainted: G U L syzkaller #0 PREEMPT(full) [ 661.635180][T16688] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 661.635186][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.635195][T16688] Call Trace: [ 661.635201][T16688] [ 661.635207][T16688] dump_stack_lvl+0x100/0x190 [ 661.635235][T16688] should_fail_ex.cold+0x5/0xa [ 661.635254][T16688] should_failslab+0xc2/0x120 [ 661.635269][T16688] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 661.635290][T16688] ? ptlock_alloc+0x1f/0x70 [ 661.635311][T16688] ptlock_alloc+0x1f/0x70 [ 661.635330][T16688] pte_alloc_one+0x84/0x3e0 [ 661.635347][T16688] __pte_alloc+0x6d/0x3f0 [ 661.635360][T16688] ? __pfx___pte_alloc+0x10/0x10 [ 661.635375][T16688] ? do_raw_spin_lock+0x128/0x260 [ 661.635396][T16688] ? find_held_lock+0x2b/0x80 [ 661.635410][T16688] do_anonymous_page+0x13cc/0x1fb0 [ 661.635429][T16688] ? do_raw_spin_unlock+0x145/0x1e0 [ 661.635450][T16688] ? _raw_spin_unlock+0x28/0x50 [ 661.635472][T16688] ? __pmd_alloc+0x6aa/0x9c0 [ 661.635489][T16688] __handle_mm_fault+0x1d42/0x2b60 [ 661.635521][T16688] ? mt_find+0x45e/0x8e0 [ 661.635540][T16688] ? __pfx___handle_mm_fault+0x10/0x10 [ 661.635558][T16688] ? __pfx_mt_find+0x10/0x10 [ 661.635591][T16688] handle_mm_fault+0x36d/0xa20 [ 661.635614][T16688] __get_user_pages+0xf9c/0x34d0 [ 661.635638][T16688] ? __pfx___get_user_pages+0x10/0x10 [ 661.635659][T16688] populate_vma_page_range+0x267/0x3f0 [ 661.635677][T16688] ? __pfx_populate_vma_page_range+0x10/0x10 [ 661.635693][T16688] ? __pfx_find_vma_intersection+0x10/0x10 [ 661.635717][T16688] ? do_mmap+0x93f/0x12f0 [ 661.635734][T16688] __mm_populate+0x107/0x3a0 [ 661.635751][T16688] ? __pfx___mm_populate+0x10/0x10 [ 661.635769][T16688] ? up_write+0x290/0x4f0 [ 661.635791][T16688] vm_mmap_pgoff+0x37f/0x470 [ 661.635809][T16688] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 661.635825][T16688] ? do_futex+0x192/0x350 [ 661.635844][T16688] ? __pfx_do_futex+0x10/0x10 [ 661.635869][T16688] ksys_mmap_pgoff+0xe1/0x650 [ 661.635884][T16688] ? __x64_sys_futex+0x34f/0x4d0 [ 661.635901][T16688] ? __x64_sys_futex+0x358/0x4d0 [ 661.635920][T16688] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 661.635935][T16688] ? xfd_validate_state+0x129/0x190 [ 661.635959][T16688] __x64_sys_mmap+0x125/0x190 [ 661.635984][T16688] do_syscall_64+0x106/0xf80 [ 661.636009][T16688] ? clear_bhb_loop+0x40/0x90 [ 661.636028][T16688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.636044][T16688] RIP: 0033:0x7fe9a919c629 [ 661.636058][T16688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.636073][T16688] RSP: 002b:00007fe9aa026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 661.636089][T16688] RAX: ffffffffffffffda RBX: 00007fe9a9415fa0 RCX: 00007fe9a919c629 [ 661.636099][T16688] RDX: 00000000000000df RSI: 0000000000400008 RDI: 00000000ff0f4000 [ 661.636109][T16688] RBP: 00007fe9a9232b39 R08: 0000000000000002 R09: 0000000000008000 [ 661.636119][T16688] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 661.636128][T16688] R13: 00007fe9a9416038 R14: 00007fe9a9415fa0 R15: 00007fffd01b1168 [ 661.636148][T16688] [ 662.349673][T16692] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2059 with max blocks 1 with error 117 [ 662.400029][T16692] EXT4-fs (sda1): This should not happen!! Data will be lost [ 662.400029][T16692] [ 662.526307][T11646] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2070 with max blocks 1 with error 117 [ 662.579677][T11646] EXT4-fs (sda1): This should not happen!! Data will be lost [ 662.579677][T11646] [ 662.594630][T11646] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2075 with max blocks 1 with error 117 [ 662.607646][T11646] EXT4-fs (sda1): This should not happen!! Data will be lost [ 662.607646][T11646] [ 662.647959][T11646] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2081 with max blocks 3 with error 117 [ 662.677630][T11646] EXT4-fs (sda1): This should not happen!! Data will be lost [ 662.677630][T11646] [ 662.977771][T11646] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2088 with max blocks 2 with error 117 [ 662.990657][T11646] EXT4-fs (sda1): This should not happen!! Data will be lost [ 662.990657][T11646] [ 663.065020][T16700] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(905090050.201326592.142606592), cmd(2) [ 663.137359][T16701] zswap: compressor b°Z²¢Y*Pôå¾WZ{QD¶yq[~«)/ÊÀül`iÙ$§²£xLòïeŒÈíê!ÃçÃŽsÁÒ%ÿ Ü× not available [ 664.037416][T16720] Console: switching to colour VGA+ 80x25 [ 664.746335][T16722] openvswitch: ovs_datapath: Dropping previously announced user features [ 664.851647][T16732] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(905090050.201326592.142606592), cmd(16) [ 664.959349][ T30] audit: type=1800 audit(4294970576.238:60): pid=16734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2619" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 666.584285][T16463] syz.2.2550 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 666.970164][T16771] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(905090050.201326592.142606592), cmd(16) [ 667.149208][T16463] CPU: 0 UID: 0 PID: 16463 Comm: syz.2.2550 Tainted: G U L syzkaller #0 PREEMPT(full) [ 667.149236][T16463] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 667.149242][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 667.149251][T16463] Call Trace: [ 667.149258][T16463] [ 667.149264][T16463] dump_stack_lvl+0x100/0x190 [ 667.149291][T16463] dump_header+0xfb/0x606 [ 667.149309][T16463] oom_kill_process.cold+0xd/0x330 [ 667.149327][T16463] out_of_memory+0x340/0x14f0 [ 667.149359][T16463] ? __pfx_out_of_memory+0x10/0x10 [ 667.149385][T16463] mem_cgroup_out_of_memory+0xc6/0x130 [ 667.149405][T16463] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 667.149423][T16463] ? find_held_lock+0x2b/0x80 [ 667.149440][T16463] ? do_raw_spin_unlock+0x145/0x1e0 [ 667.149462][T16463] ? _raw_spin_unlock+0x28/0x50 [ 667.149488][T16463] try_charge_memcg+0x652/0xc90 [ 667.149507][T16463] ? __pfx_try_charge_memcg+0x10/0x10 [ 667.149524][T16463] ? find_held_lock+0x2b/0x80 [ 667.149537][T16463] ? rcu_read_unlock+0x17/0x60 [ 667.149552][T16463] ? rcu_read_unlock+0x17/0x60 [ 667.149573][T16463] charge_memcg+0xa6/0x280 [ 667.149588][T16463] __mem_cgroup_charge+0x2b/0x1e0 [ 667.149605][T16463] shmem_alloc_and_add_folio+0x451/0xd40 [ 667.149632][T16463] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 667.149655][T16463] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 667.149681][T16463] shmem_get_folio_gfp+0x6ab/0x1900 [ 667.149706][T16463] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 667.149729][T16463] ? timestamp_truncate+0x22e/0x2f0 [ 667.149746][T16463] shmem_write_begin+0x1a4/0x420 [ 667.149769][T16463] ? __pfx_shmem_write_begin+0x10/0x10 [ 667.149789][T16463] ? rcu_is_watching+0x12/0xc0 [ 667.149812][T16463] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 667.149832][T16463] generic_perform_write+0x292/0xa40 [ 667.149858][T16463] ? __pfx_generic_perform_write+0x10/0x10 [ 667.149877][T16463] ? __mark_inode_dirty+0x55c/0x1790 [ 667.149898][T16463] ? mnt_put_write_access_file+0x4e/0x100 [ 667.149921][T16463] ? file_update_time_flags+0x373/0x500 [ 667.149940][T16463] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 667.149955][T16463] shmem_file_write_iter+0x10e/0x140 [ 667.149971][T16463] __kernel_write_iter+0x2ac/0x920 [ 667.149995][T16463] ? __pfx___kernel_write_iter+0x10/0x10 [ 667.150017][T16463] ? __up_read+0x2c5/0x700 [ 667.150040][T16463] ? dump_user_range+0x73b/0xb50 [ 667.150054][T16463] ? copy_mc_enhanced_fast_string+0x6/0xf [ 667.150079][T16463] dump_user_range+0x3f9/0xb50 [ 667.150098][T16463] ? __pfx_dump_user_range+0x10/0x10 [ 667.150120][T16463] ? __pfx_writenote+0x10/0x10 [ 667.150141][T16463] elf_core_dump+0x2d5f/0x3d10 [ 667.150168][T16463] ? __pfx_elf_core_dump+0x10/0x10 [ 667.150190][T16463] ? find_held_lock+0x2b/0x80 [ 667.150204][T16463] ? 0xffffffffff600000 [ 667.150218][T16463] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 667.150232][T16463] ? lockdep_hardirqs_on+0x78/0x100 [ 667.150277][T16463] ? vfs_coredump+0x27bc/0x5570 [ 667.150290][T16463] vfs_coredump+0x27bc/0x5570 [ 667.150313][T16463] ? __pfx_vfs_coredump+0x10/0x10 [ 667.150329][T16463] ? __lock_acquire+0x4a5/0x2630 [ 667.150359][T16463] ? lock_acquire+0x1cf/0x380 [ 667.150385][T16463] ? is_bpf_text_address+0x8a/0x1a0 [ 667.150407][T16463] ? bpf_ksym_find+0x124/0x1c0 [ 667.150429][T16463] ? __kernel_text_address+0xd/0x30 [ 667.150449][T16463] ? unwind_get_return_address+0x59/0xa0 [ 667.150465][T16463] ? arch_stack_walk+0xa6/0xf0 [ 667.150485][T16463] ? __sigqueue_free+0xbe/0x2a0 [ 667.150504][T16463] ? stack_trace_save+0x8e/0xc0 [ 667.150518][T16463] ? __pfx_stack_trace_save+0x10/0x10 [ 667.150533][T16463] ? stack_depot_save_flags+0x27/0x9d0 [ 667.150558][T16463] ? __lock_acquire+0x4a5/0x2630 [ 667.150608][T16463] ? proc_coredump_connector+0x2d3/0x4f0 [ 667.150624][T16463] ? __pfx_proc_coredump_connector+0x10/0x10 [ 667.150645][T16463] ? rcu_is_watching+0x12/0xc0 [ 667.150669][T16463] get_signal+0x1f2a/0x21e0 [ 667.150692][T16463] ? __pfx_get_signal+0x10/0x10 [ 667.150706][T16463] ? __pfx_force_sig_fault+0x10/0x10 [ 667.150726][T16463] arch_do_signal_or_restart+0x91/0x770 [ 667.150746][T16463] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 667.150770][T16463] ? do_user_addr_fault+0x8d6/0x12f0 [ 667.150798][T16463] irqentry_exit+0x1f8/0x670 [ 667.150816][T16463] asm_exc_page_fault+0x26/0x30 [ 667.150830][T16463] RIP: 0033:0x400fff [ 667.150847][T16463] Code: Unable to access opcode bytes at 0x400fd5. [ 667.150854][T16463] RSP: 002b:000000000000000a EFLAGS: 00010297 [ 667.150867][T16463] RAX: 00000000000000da RBX: 00007ff2dc015fa0 RCX: 00007ff2dbd9c629 [ 667.150876][T16463] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 667.150885][T16463] RBP: 00007ff2dbe32b39 R08: 0000000000000002 R09: 0000000000000000 [ 667.150895][T16463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.150903][T16463] R13: 00007ff2dc016038 R14: 00007ff2dc015fa0 R15: 00007ffd5a0695f8 [ 667.150923][T16463] [ 668.979963][T11752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 669.016210][T11752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 669.034923][T11752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 669.047065][T11752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 669.061992][T11752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 669.218018][T16463] memory: usage 307200kB, limit 307200kB, failcnt 31616 [ 669.733119][T16463] memory+swap: usage 348960kB, limit 9007199254740988kB, failcnt 0 [ 669.824791][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2635'. [ 669.881044][T14917] EXT4-fs: 58 callbacks suppressed [ 669.881059][T14917] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2211 with max blocks 1 with error 117 [ 669.948680][T14917] EXT4-fs (sda1): This should not happen!! Data will be lost [ 669.948680][T14917] [ 670.009427][T14917] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2217 with max blocks 1 with error 117 [ 670.076707][T14917] EXT4-fs (sda1): This should not happen!! Data will be lost [ 670.076707][T14917] [ 670.388455][T16463] kmem: usage 3648kB, limit 9007199254740988kB, failcnt 0 [ 670.591867][T11646] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2217 with max blocks 1 with error 117 [ 670.614834][T11646] EXT4-fs (sda1): This should not happen!! Data will be lost [ 670.614834][T11646] [ 670.648908][T11646] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2068 with max blocks 1 with error 117 [ 670.671990][T11646] EXT4-fs (sda1): This should not happen!! Data will be lost [ 670.671990][T11646] [ 670.702695][T11646] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2071 with max blocks 1 with error 117 [ 670.725644][T11646] EXT4-fs (sda1): This should not happen!! Data will be lost [ 670.725644][T11646] [ 670.796444][T16463] Memory cgroup stats for /syz2: [ 670.796675][T16463] cache 212361216 [ 670.969965][T16463] rss 3870720 [ 671.061549][T16463] rss_huge 0 [ 671.102606][T11752] Bluetooth: hci0: command tx timeout [ 671.240635][T16463] shmem 212344832 [ 671.421808][T16463] mapped_file 4096 [ 671.425553][T16463] dirty 0 [ 671.524698][T16805] zswap: compressor b°Z²¢Y*Pôå¾WZ{QD¶yq[~«)/ÊÀül`iÙ$§²£xLòïeŒÈíê!ÃçÃŽsÁÒ%ÿ Ü× not available [ 671.655798][T16463] writeback 0 [ 671.783545][T16463] workingset_refault_anon 9828 [ 671.921201][T16463] workingset_refault_file 9363 [ 671.934881][T16811] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(905090050.201326592.142606592), cmd(16) [ 671.998222][T16463] swap 4059136 [ 672.001615][T16463] swapcached 198754304 [ 672.034656][T16463] pgpgin 1037798 [ 672.046613][T16463] pgpgout 993210 [ 672.061902][T16463] pgfault 519820 [ 672.083643][T16463] pgmajfault 1583 [ 672.102637][T16463] inactive_anon 213118976 [ 672.133709][T16463] active_anon 3633152 [ 672.137708][T16463] inactive_file 12288 [ 672.183617][T16463] active_file 4096 [ 672.187548][T16463] unevictable 0 [ 672.245602][T16463] hierarchical_memory_limit 314572800 [ 672.251012][T16463] hierarchical_memsw_limit 9223372036854771712 [ 672.315226][T16463] total_cache 212361216 [ 672.344527][T16463] total_rss 3870720 [ 672.430013][T16463] total_rss_huge 0 [ 672.465508][T16463] total_shmem 212344832 [ 672.499185][T16463] total_mapped_file 4096 [ 672.517801][T16463] total_dirty 0 [ 672.521284][T16463] total_writeback 0 [ 672.564663][T16463] total_workingset_refault_anon 9828 [ 672.569970][T16463] total_workingset_refault_file 9363 [ 672.636179][T16463] total_swap 4059136 [ 672.684871][T16463] total_swapcached 198754304 [ 672.689567][T16463] total_pgpgin 1037798 [ 672.752245][T16463] total_pgpgout 993210 [ 672.777912][T16463] total_pgfault 519820 [ 672.806752][T16463] total_pgmajfault 1583 [ 672.830407][T16463] total_inactive_anon 213118976 [ 672.856755][T16463] total_active_anon 3633152 [ 672.881725][T16463] total_inactive_file 12288 [ 672.911195][T16463] total_active_file 4096 [ 672.945816][T16463] total_unevictable 0 [ 672.965439][T16463] anon_cost 0 [ 672.988917][T16787] chnl_net:caif_netlink_parms(): no params data found [ 673.002682][T16463] file_cost 11148 [ 673.032747][T16463] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2550,pid=16472,uid=0 [ 673.137523][T16463] Memory cgroup out of memory: OOM victim 16472 (syz.2.2550) is already exiting. Skip killing the task [ 673.185463][T11752] Bluetooth: hci0: command tx timeout [ 673.522355][T16787] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.563437][T16787] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.613035][T16787] bridge_slave_0: entered allmulticast mode [ 673.643014][T16787] bridge_slave_0: entered promiscuous mode [ 673.697308][T16787] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.740999][T16787] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.771389][T16787] bridge_slave_1: entered allmulticast mode [ 673.803145][T16787] bridge_slave_1: entered promiscuous mode [ 673.931810][T16787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.975986][T16787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.059602][T16831] kexec: Could not allocate control_code_buffer [ 674.139303][T16787] team0: Port device team_slave_0 added [ 674.165000][T16787] team0: Port device team_slave_1 added [ 674.221050][T16848] zswap: compressor b°Z²¢Y*Pôå¾WZ{QD¶yq[~«)/ÊÀül`iÙ$§²£xLòïeŒÈíê!ÃçÃŽsÁÒ%ÿ Ü× not available [ 674.392823][T11668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.645924][T11668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.715796][T16787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.730466][T16787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.798191][T16787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.870284][T11668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.956702][T16787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.977885][T16787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.057188][T16787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.116296][T11668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.205411][T16787] hsr_slave_0: entered promiscuous mode [ 675.215552][T16787] hsr_slave_1: entered promiscuous mode [ 675.263801][T11752] Bluetooth: hci0: command tx timeout [ 675.514512][T11668] bridge_slave_1: left allmulticast mode [ 675.528959][T11668] bridge_slave_1: left promiscuous mode [ 675.547937][T11668] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.588353][T11668] bridge_slave_0: left allmulticast mode [ 675.609417][T11668] bridge_slave_0: left promiscuous mode [ 675.627580][T11668] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.114643][T16876] EXT4-fs: 14 callbacks suppressed [ 676.114660][T16876] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2066 with max blocks 2 with error 117 [ 676.162654][T16876] EXT4-fs (sda1): This should not happen!! Data will be lost [ 676.162654][T16876] [ 676.241336][T11668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.287992][T11668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.347481][T11668] bond0 (unregistering): Released all slaves [ 676.479946][ T30] audit: type=1800 audit(4294970587.753:61): pid=16880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2657" name="dbroot" dev="configfs" ino=71102 res=0 errno=0 [ 676.797251][T16886] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2078 with max blocks 2 with error 117 [ 676.986373][T16886] EXT4-fs (sda1): This should not happen!! Data will be lost [ 676.986373][T16886] [ 677.027300][T11668] hsr_slave_0: left promiscuous mode [ 677.055489][T11668] hsr_slave_1: left promiscuous mode [ 677.081774][T11668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.114390][T11668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.167986][T11668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.211653][T11668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.317976][T11668] veth1_macvtap: left promiscuous mode [ 677.323523][T11668] veth0_macvtap: left promiscuous mode [ 677.346675][T11752] Bluetooth: hci0: command tx timeout [ 677.376807][ T30] audit: type=1800 audit(4294970588.642:62): pid=16900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2660" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 677.404921][T11668] veth1_vlan: left promiscuous mode [ 677.433754][T11668] veth0_vlan: left promiscuous mode [ 679.135265][T11668] team0 (unregistering): Port device team_slave_1 removed [ 679.173786][T11668] team0 (unregistering): Port device team_slave_0 removed [ 679.184697][T16934] zswap: compressor b°Z²¢Y*Pôå¾WZ{QD¶yq[~«)/ÊÀül`iÙ$§²£xLòïeŒÈíê!ÃçÃŽsÁÒ%ÿ Ü× not available [ 679.539313][T16787] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 679.710288][T16787] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 679.806849][T16787] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 679.964012][T16787] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 680.331163][T16787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.403165][T16787] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.455692][T11732] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.463002][T11732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.551456][T11732] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.558624][T11732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.275112][T16787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.205433][T16787] veth0_vlan: entered promiscuous mode [ 682.281973][T16787] veth1_vlan: entered promiscuous mode [ 682.527990][T16787] veth0_macvtap: entered promiscuous mode [ 682.591219][T16787] veth1_macvtap: entered promiscuous mode [ 682.683717][T16787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.730119][T16787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.797316][T11732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.859917][T11732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.895315][T11732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.055890][T11732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.280101][T11732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.321660][T11732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.450796][T11668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.488348][T11668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.557821][T11668] ------------[ cut here ]------------ [ 685.563571][T11668] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 685.570602][T11668] WARNING: net/mac80211/driver-ops.h:1723 at ieee80211_set_active_links+0x2d0/0x9d0, CPU#0: kworker/u10:3/11668 [ 685.582472][T11668] Modules linked in: [ 685.586570][T11668] CPU: 0 UID: 0 PID: 11668 Comm: kworker/u10:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 685.598480][T11668] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 685.603963][T11668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 685.614460][T11668] Workqueue: events_unbound cfg80211_wiphy_work [ 685.621072][T11668] RIP: 0010:ieee80211_set_active_links+0x2d7/0x9d0 [ 685.627562][T11668] Code: 06 00 00 e8 fb 8e 05 f7 48 8b 34 24 48 81 c6 20 01 00 00 48 89 34 24 e8 e7 8e 05 f7 48 8d 3d 20 ef e7 05 48 8b 34 24 44 89 fa <67> 48 0f b9 3a e9 e0 fe ff ff e8 ca 8e 05 f7 0f b7 c5 4c 8d bb 30 [ 685.647397][T11668] RSP: 0018:ffffc90004947af0 EFLAGS: 00010293 [ 685.654057][T11668] RAX: 0000000000000000 RBX: ffff888029d2aa90 RCX: ffffffff8b026bfe [ 685.662054][T11668] RDX: 0000000000000000 RSI: ffff888029d28120 RDI: ffffffff90ea5b80 [ 685.670656][T11668] RBP: 000000000000000a R08: 0000000000000005 R09: 0000000000000000 [ 685.678616][T11668] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888029d297f8 [ 685.687247][T11668] R13: 0000000000000000 R14: ffff8881446c8e80 R15: 0000000000000000 [ 685.695470][T11668] FS: 0000000000000000(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 685.704719][T11668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.711374][T11668] CR2: 00005641c1b014d8 CR3: 000000002d732000 CR4: 00000000003526f0 [ 685.719789][T11668] Call Trace: [ 685.723053][T11668] [ 685.725971][T11668] ? __lock_acquire+0x4a5/0x2630 [ 685.731237][T11668] ieee80211_if_parse_active_links+0xbb/0x120 [ 685.737302][T11668] ? __pfx_ieee80211_if_parse_active_links+0x10/0x10 [ 685.744145][T11668] ? lockdep_count_backward_deps+0xfa/0x140 [ 685.750634][T11668] ? ieee80211_if_write_sdata_handler+0x1a/0x90 [ 685.756899][T11668] ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10 [ 685.763975][T11668] wiphy_locked_debugfs_write_work+0xe6/0x1c0 [ 685.770074][T11668] ? trace_wiphy_work_run+0x73/0x240 [ 685.775355][T11668] cfg80211_wiphy_work+0x446/0x5c0 [ 685.780505][T11668] process_one_work+0x9d7/0x1920 [ 685.785448][T11668] ? __pfx_process_one_work+0x10/0x10 [ 685.790860][T11668] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 685.796740][T11668] worker_thread+0x5da/0xe40 [ 685.801572][T11668] ? kthread+0x13a/0x450 [ 685.805819][T11668] ? __pfx_worker_thread+0x10/0x10 [ 685.810973][T11668] kthread+0x370/0x450 [ 685.815040][T11668] ? __pfx_kthread+0x10/0x10 [ 685.820116][T11668] ret_from_fork+0x754/0xd80 [ 685.824707][T11668] ? __pfx_ret_from_fork+0x10/0x10 [ 685.830366][T11668] ? __switch_to+0x7b4/0x1120 [ 685.835039][T11668] ? __pfx_kthread+0x10/0x10 [ 685.840028][T11668] ret_from_fork_asm+0x1a/0x30 [ 685.844925][T11668] [ 685.847932][T11668] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 685.855202][T11668] CPU: 0 UID: 0 PID: 11668 Comm: kworker/u10:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 685.866381][T11668] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 685.871552][T11668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 685.881711][T11668] Workqueue: events_unbound cfg80211_wiphy_work [ 685.887944][T11668] Call Trace: [ 685.891206][T11668] [ 685.894122][T11668] dump_stack_lvl+0x100/0x190 [ 685.898790][T11668] vpanic+0x552/0x970 [ 685.902754][T11668] ? __pfx_vpanic+0x10/0x10 [ 685.907507][T11668] panic+0xd1/0xe0 [ 685.911209][T11668] ? __pfx_panic+0x10/0x10 [ 685.915610][T11668] ? check_panic_on_warn+0x1f/0x90 [ 685.920730][T11668] check_panic_on_warn.cold+0x19/0x34 [ 685.926083][T11668] ? ieee80211_set_active_links+0x2d0/0x9d0 [ 685.931959][T11668] __warn.cold+0x191/0x348 [ 685.936361][T11668] __report_bug+0x296/0x3d0 [ 685.940843][T11668] ? ieee80211_set_active_links+0x2d0/0x9d0 [ 685.946717][T11668] ? __pfx___report_bug+0x10/0x10 [ 685.951720][T11668] ? __lock_acquire+0x4a5/0x2630 [ 685.956641][T11668] ? ieee80211_set_active_links+0x26e/0x9d0 [ 685.962521][T11668] ? update_cfs_rq_load_avg+0x51/0x550 [ 685.967966][T11668] report_bug_entry+0xe1/0x290 [ 685.972710][T11668] ? ieee80211_set_active_links+0x2d7/0x9d0 [ 685.978586][T11668] handle_bug+0x1c9/0x2a0 [ 685.982904][T11668] exc_invalid_op+0x17/0x50 [ 685.987393][T11668] asm_exc_invalid_op+0x1a/0x20 [ 685.992224][T11668] RIP: 0010:ieee80211_set_active_links+0x2d7/0x9d0 [ 685.998709][T11668] Code: 06 00 00 e8 fb 8e 05 f7 48 8b 34 24 48 81 c6 20 01 00 00 48 89 34 24 e8 e7 8e 05 f7 48 8d 3d 20 ef e7 05 48 8b 34 24 44 89 fa <67> 48 0f b9 3a e9 e0 fe ff ff e8 ca 8e 05 f7 0f b7 c5 4c 8d bb 30 [ 686.018296][T11668] RSP: 0018:ffffc90004947af0 EFLAGS: 00010293 [ 686.024346][T11668] RAX: 0000000000000000 RBX: ffff888029d2aa90 RCX: ffffffff8b026bfe [ 686.032298][T11668] RDX: 0000000000000000 RSI: ffff888029d28120 RDI: ffffffff90ea5b80 [ 686.040256][T11668] RBP: 000000000000000a R08: 0000000000000005 R09: 0000000000000000 [ 686.048207][T11668] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888029d297f8 [ 686.056159][T11668] R13: 0000000000000000 R14: ffff8881446c8e80 R15: 0000000000000000 [ 686.064118][T11668] ? ieee80211_set_active_links+0x26e/0x9d0 [ 686.070002][T11668] ? __lock_acquire+0x4a5/0x2630 [ 686.074934][T11668] ieee80211_if_parse_active_links+0xbb/0x120 [ 686.080995][T11668] ? __pfx_ieee80211_if_parse_active_links+0x10/0x10 [ 686.087664][T11668] ? lockdep_count_backward_deps+0xfa/0x140 [ 686.093549][T11668] ? ieee80211_if_write_sdata_handler+0x1a/0x90 [ 686.099779][T11668] ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10 [ 686.106529][T11668] wiphy_locked_debugfs_write_work+0xe6/0x1c0 [ 686.112587][T11668] ? trace_wiphy_work_run+0x73/0x240 [ 686.117867][T11668] cfg80211_wiphy_work+0x446/0x5c0 [ 686.122965][T11668] process_one_work+0x9d7/0x1920 [ 686.127900][T11668] ? __pfx_process_one_work+0x10/0x10 [ 686.133351][T11668] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 686.138966][T11668] worker_thread+0x5da/0xe40 [ 686.143552][T11668] ? kthread+0x13a/0x450 [ 686.147962][T11668] ? __pfx_worker_thread+0x10/0x10 [ 686.153059][T11668] kthread+0x370/0x450 [ 686.157113][T11668] ? __pfx_kthread+0x10/0x10 [ 686.161690][T11668] ret_from_fork+0x754/0xd80 [ 686.166356][T11668] ? __pfx_ret_from_fork+0x10/0x10 [ 686.171454][T11668] ? __switch_to+0x7b4/0x1120 [ 686.176113][T11668] ? __pfx_kthread+0x10/0x10 [ 686.180703][T11668] ret_from_fork_asm+0x1a/0x30 [ 686.185481][T11668] [ 686.188547][T11668] Kernel Offset: disabled [ 686.192866][T11668] Rebooting in 86400 seconds..