last executing test programs: 18.505223723s ago: executing program 1 (id=111): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptya1\x00', 0x109401, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000080)="1c71") mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x1}) io_uring_setup$auto(0x6, 0x0) 18.44252631s ago: executing program 1 (id=112): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x8002, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x5, 0x0) read$auto(r0, 0x0, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r5}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7020010000000800020000000000", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="0800070005000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 17.633792342s ago: executing program 1 (id=116): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x0, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x10001) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) socket(0x2, 0x1, 0x106) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x34, 0x28, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0x9b76, r0, 0xa) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x240100, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto(0xffffffffffffffff, 0x3b8e, r3) 16.179636426s ago: executing program 1 (id=122): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) modify_ldt$auto(0x11, 0x0, 0x10) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000700)="12") stat$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0xffff, 0x8, 0x7, 0x2, 0xee00, 0xee01, 0x0, 0x9, 0x7, 0x100000001, 0x1, 0xff, 0xc, 0xa8, 0xd50, 0x3, 0x8000000000000000}) sendmsg$auto_NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000740)={0x153c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_VIF_RADIO_MASK={0x7}, @NL80211_ATTR_PMKID={0xa9, 0x55, "69e085c15d7dcd12f0393b4b2d4faa6cd67c5d08ae06c3ff715742d5c6803df35b5a0dbde368933d994be505452d83d27b32e7d07902f2a26db8f7e5c863cddc80d8e3c11c0bafdadaa55f461e171d77abdf08b5efc6a73677eb83ba82c5627d201c7743d9b1ef6045fc2a4fbbdb479379ca9d86a09d4a1c90b81fcc64760904b69df4295d370791eeb49c727a1e466bdc14391e1c5faea68f553a6a7cc0c33931b2c1e9a0"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xffffffff}, @NL80211_ATTR_MNTR_FLAGS={0x47, 0x17, "974b5a578baa0830f9b7b252a2c580f71ebb20ef4d93258b7c9def43e0cd629cefa079750858d1c8e343e1c103af75a3db71c9eb35c4a07f45004c246c6672362de08f"}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x6}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x1411, 0x124, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x75, 0xcb, 0x0, 0x1, [@generic="b0d4b1c3c23cd5f10d49b6a144f8b55cc0ac477b3205ada68a45a6449426713ee044235e233e9649c364dbe3b4705980726acd72fb33e241d45448217dc11f0dfd14d979cfd9e984422ad5b9d24d6ef549438054cbb0940091f8375a3035cd41f158dc3aab1f9a2e211cba9eec8971aaa9"]}, @generic="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", @generic="3b4015f45e0915674119847fe985d0857c89448af500f89ed8b28af7cbde550056ea4c813f5afabf9d0ea11dbbafb18d085a87f02c81ef58fdb6e562001b99902b3e00eca1e528924c758794e4f8916f028dd1daea1878b6c52fad2d59e6a8248c33e4183f05607f5d02f9482772985e86fbb95fbef0c1668a28f7be5290a5dcac341df91f9431f1fe4ac5fc9a2314e152aebc0fffb1dce9e9668565cf9d71571759b5d0c6bba66f160cc2b38db33132f3f92d1cd619c93ee9950f48f0838f2161b0558da4", @generic="9cbf8621bee181e32ffbb17663c2c4bef5348f1bffc8cc929704bd7526e509ef27c58d4e73deb6dfd5f9cfff5829f9cdac25c88e22fe3839f1447ff932c681d86fb7b277424721af589e8e71722fecd00b7e11105e97515a4ca21efa6f53395df2cdc731bad5656d4d6187d78bb14e79281daf2fa9475dbe0a0d0a480ebdaed489bd33125ed35b148dd5ce8bd3deef5a8ced5b6adb49ec68bbe440477fab1b23bc050ccf5d8ee079fd", @generic="842a9441a64da5260f7fc2f46de4a6b5a2a84161499d0387031f5a6a1884f9ad941917ed10bd11ef290d2151ac92885edb532a461c7e5bdf261584498358b143e59edb", @nested={0x1c3, 0x1e, 0x0, 0x1, [@generic="9621dd24cab7090bcd435f813f2594c1c0e73f3b4695a213a1e9878b9d5bf6b4cceac2f098d0d78040cd3092fbe1d06e851866864ef12b41022ae33450decf043b16c816442407239a874165960394c5242789f1b972e138578558d4b172c8ec5800590ed299bc2971fe3acc0dd686758a518611aded20f8211661e169c6f012f959d79727248e918fd811e1ef", @generic="6bb960d83e8c601a20b7d162989754a2ca2c95e9463174116c44f0acce68f2006f3648774af3d647fdd7adb38e37644a0d119e7eea314f486b61d5", @typed={0x8, 0xd4, 0x0, 0x0, @uid}, @generic="b1359d7fe2b0ae43129263fef211f136e3143c5c81b951af8621cadb42061b0a10fbde8981d53dc19d79b7ad1321db98ec2298c3edf8124fff7714a8338017d8593ee391e5678afc4b405ed6feb13d5b76a5447983173851be012d3fd42338081fc5eb1e9277c6f582980943a648389c4eabf41bdd86c48562d7ff1de9db4c70b33590fd5200d4f2e288cd3f2e6f7670535f4ff9925e3d02f15738482eed198192119f1ec5e6f600933c0d26eeeb6e6becc923e9afc6ad0c74a34210e3262dd16d1efe35f9495e39875acb0c49f71ab975d19205c2713d69d352e1a10436ae953a6426ad5cefa4490e197503c2e82f"]}, @typed={0x8, 0x150, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x94, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0xb1, 0x0, 0x0, @pid}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x7}]}, 0x153c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) 15.192808444s ago: executing program 1 (id=127): read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x28, 0x3, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x9, 0xba46, 0x5, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x2000000400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x4, 0x20009, 0xdf, 0x20000000000e31, r2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r4 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/hwflags\x00', 0x80240, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) ioctl$auto_SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000040)="936c4952060076ffe426b6f0824c158080cbf1c0712783b7a68e220f80f20fd685579692e1b5125f5bf8fa41a6753f48ce271cc59bf1b2b69ef525a985cd28554d85031ee1c40f47401d1a8d3be4173c93855c140b7974c7f5d4ed2ad2042f3ce6be3b2628a0ee2ef19f25c2929190a2b84bcfadb62709fc627a03c7603a816662ffb40551c82ca1cdc4d3f060c719417581be7a2c8e96a811ee3e6d0d2fbb47ecf7ece69d24d7e30427f840c2d15a441d1d109bf8cdfe2c4b6b9cb3bf58c0a6d4") read$auto_hwflags_ops_debugfs(r4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyua/power/runtime_suspended_time\x00', 0x62142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 14.070840754s ago: executing program 1 (id=135): write$auto(0xffffffffffffffff, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x6, 0x20, 0x0, 0x21) clock_nanosleep$auto(0x0, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0x400454ca, 0x38) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffe) r4 = socket(0x2, 0x3, 0xa) setsockopt$auto(r4, 0x0, 0x20, 0x0, 0x5) pselect6$auto(0x6, &(0x7f0000000240)={[0x401, 0xc6, 0x4, 0x100, 0xfffffffffffffff9, 0x2, 0x9, 0x9, 0x40000000000c4f, 0x200, 0x3, 0x7, 0x100, 0x3, 0x5, 0x5]}, &(0x7f00000002c0)={[0x3, 0x9, 0x1, 0xd, 0x5, 0xac, 0x8000, 0x92d, 0xffffffffffffffdd, 0x7, 0x4, 0x80000001, 0xb, 0x40, 0x1, 0x4]}, &(0x7f0000000340)={[0x9, 0x3, 0x0, 0x8, 0x8, 0xf7, 0xfb, 0x3, 0x2, 0x2, 0xcc, 0x4, 0x7a7, 0x8, 0x8, 0x7fffffffffffffff]}, &(0x7f00000003c0)={0x7, 0x2}, &(0x7f0000000400)="4ff5c3a36a6c7ae40a24e87ea4822c6fcb2d3042b85faf747b9f6c7449f19c52b033cf47ad59755a2ad5e92ede600c0be260879dc0b7fa9ff2d8209f89b93d8ab27571dc1594424e646fc62317df2347e89ccd4bce008235a293c6e83ba9b5332f1d20f0608b90b5420b0493c93b7fe1e65adc1b2e8c80da5f1590859b7ff67e8d5445ebfc1429a611a70fb9110743b187b3338e") ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r0, 0x4004550a, &(0x7f0000000080)) r5 = getpid() r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)="0400") bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000100)=@task_fd_query={r5, 0xffffffffffffffff, 0x0, 0x8, 0xe2da, 0xb4bb, 0xffffffffffffffff, 0x3, 0xfa}, 0x9) socket(0x10, 0x2, 0x0) 5.217186532s ago: executing program 3 (id=173): mmap$auto(0x5, 0x2020009, 0x3, 0x2000000eb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0xa001, 0x0) socketpair$auto(0x800002, 0x5, 0x400, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, 0x0) 5.148712329s ago: executing program 3 (id=174): io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10003, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x44, 0x176c5, 0x400005, 0x100000005}}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4040ae9e, &(0x7f00000000c0)={0xdd}) 4.590062018s ago: executing program 3 (id=175): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x80400, 0x42) open_by_handle_at$auto(r0, &(0x7f0000000200)={0x8, 0xfe, "0200000000000000"}, 0x100004) 4.41785922s ago: executing program 3 (id=177): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x1, 0x3, 0x9, 0x6, 0xfffff0d3, 0x2, 0x6, 0x6, 0x4}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="9d6539c7693da74d7f814a952cdb582a06b35f8f74b4e8147bc95b0104", @ANYRES32, @ANYRES64=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0) ioctl$auto(r1, 0x400c4d02, r1) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/prev\x00', 0x101002, 0x0) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x7) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000006) capget$auto(0x0, &(0x7f00000000c0)={0x5, 0x3, 0x1}) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fcntl$auto_F_SETLKW(r3, 0x7, 0x3786e7c6) rseq$auto(0x0, 0x8002, 0x0, 0x6) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4.183287746s ago: executing program 0 (id=179): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0xa001, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) ioctl$auto_TUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)={0xfffd, &(0x7f0000000080)={0x3, 0x0, 0x7f, @raw=0xffffffb0}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r2 = socket(0x9, 0x3, 0x80000001) getsockopt$auto(r2, 0x65, 0x1, 0x0, 0x0) write$auto(r0, &(0x7f0000000b00)='7\x00\\\xa0\x04|\xfe\xca\x12\xfa\b\x1c\xc7k\xff\xfe\x8e\xaf\xeeu~\a\xc0/(d\n\x05\x13EE\xf0\xad\r\xcb\xd3\xa83\xda}v\xcc\xfb\xcdm\x8f\nd\xca+4i{G\x18\x81J\x92\xf7\xc5,H\x88\xf6KRg\xab\xf2<^\xc7\x8fG# \x06\xc8!\x177GA\x84n\x0e\xa3\xa1\xdb\x8au\xf1\xee\xb25\x04 \x16\xbd\x9d\xa1;>\x99\x8d\x1d\x83>\xf5cE\x06\xe8\xb8\xc1)\x15\xe8\x1a\xef{\xfd\x19\xa6\x84V\x7f\xf5\x9f\xf0\xa4\x1b\xf7\xa5\x91.q\xc21k\n\xca\x91L/{d\xf6#\xb5\xb4\x01\xc2/\xdf\xb4\x89y|\xc7^c,\xf3\x98\x9fo\xaa\xb1\xbf\x92\x9bX\xc8\x8f\x13\x10K+~\xde\x00gib\x8a\xebm\xc1\n\xf4\x8a\x9eQ\xea\xa4\xb4\x16?*$\x1a\b\xa7\x8e\xe7dd[\rWN\xc8<\x8a:\\\x98\xc3yX?\xfd3\x06\xaf\xb10\x11 \x836\xb7\xe1+\xe3|B\xe7\xc6H\fS\xe5Y@\xdfZ\xdf\x9e\xd0\xa6\r\x94\xf6\xe0\xe1\x98v\x8d\x06\xfa\x06$\xf9s\xdb\x9c\xfd\xf5\xa3\xa1\x1a\x96b]}\x86\xc1\x84\xe4\xfc\x17\xe4\xaa\x8dL\x11uO\xd8Y\x17\xc4FK\x8b\x05\xcd\xe2J\xf60oA\x91\xf0\xe6\xd9B7P\xbb\xb6\xf4s\x8cl\x03tJ\xfa;&\xa4\xce\xc0\x9b\xc4w)\x9f~\x8d\xc9S\x8e\xf0+\x14\xaf\xd9]*\xe5L\xc5\x0e\xf1\f j\x8c\n\\#\x8dY\f\xa4\x16\x80\xe1K\xacW\xa8\xcaf\xac\xc0\xd8\xc5S*\xe8\xfd\xc1FK\x878\xce\xea2\x11J\x8aMF\x13W\x9ePL\x91\x17fs}\xfb\xa9\xf3\xbdi\xd27\x9a\xd4\xd6\xb1qu\xf0`\xd5\xcd\x9e\xbb\x8f', 0x100) 3.284414477s ago: executing program 0 (id=182): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x4) 3.110590857s ago: executing program 0 (id=183): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) msync$auto(0x8, 0x5, 0xdfd) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mbind$auto(0xf4000000, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0xfeff) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x2}, 0x3) 2.459204776s ago: executing program 2 (id=187): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000080)="c80d1b5d399b3b3a90a2", 0xa) 2.338442714s ago: executing program 0 (id=188): bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)=@task_fd_query={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x3373, 0xffffffffffffffff, 0x4}, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x3a1342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_uring_setup$auto(0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x10) read$auto(0xffffffffffffffff, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e24, @empty}, 0x58) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001240)='4', 0x1) mmap$auto(0xcd, 0x4, 0xdf, 0x80000000eb1, r3, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) setreuid$auto(0x3, 0x7) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 2.27726603s ago: executing program 2 (id=189): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x2800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES2(r0, 0x40184152, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x8042, 0x0) (async, rerun: 32) mmap$auto(0x4, 0x8, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8003) (rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) (async, rerun: 64) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x58) (async) bind$auto(0x3, 0x0, 0x6a) (async, rerun: 64) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000000280)={0x10000, &(0x7f0000000240)=&(0x7f0000000140)="beb93fa080a16bf33a576b5dcfb5033cfa41bf25b475a515cc41b8199d1224974305e0d7c32868cf8c26b0ac5c234fc6f52a5e7fcde847ada639fa935c0b31b32f7d8da174eb2c82d03ae90654e200006093b5772308107ef0c9a35c9596bba80bec963f6b2bdd6c9f80f916320ce6511f97d4d38747c24b774813283abd043cd264374ce6d07039e9c155f7d6ea3f717f42ed3f1c1461cdea72ee291a1ba560e54496a8527b38ce60b3abac153b6050d729fb0517dfcaf522643286a0b7778778ff0beaca11d2c001bcfd0f3a198b77226cceebd7c4d454c8362e35822aa20e127d15a05693da", 0x7f}) (async, rerun: 64) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000000)={0xa, 0x1}) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x28001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)='n', 0x1) (async) ioctl$auto_SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, &(0x7f0000000080)={0x0, "e91a1ae2", 0x3, 0x0, 0xfffffffffffff002, 0x4, 0x6, 0xfffffffffffffff9, 0x1, 0x6cca, 0x2000000007fff, 0x3, 0x7, 0x180004, 0x1, 0x80000001, 0x7, 0x5, 0x400, "cec3ec4c01d0132df17dbe7378898800"}) r4 = socket(0x23, 0x80805, 0x0) (async, rerun: 64) write$auto(0x3, 0x0, 0xfdef) (rerun: 64) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/xfs/xqm\x00', 0x1c9802, 0x0) pread64$auto(r5, 0x0, 0x100000001, 0x2000006) (async) ioctl$auto(r4, 0x89ed, 0xfffffffffffff4e0) (async) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='\x00'/13], 0x1c}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) (async) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x2000002, 0xf8, 0xfffffffffffffffa, 0x8000) 1.951297977s ago: executing program 2 (id=190): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x301, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40000000000006, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x6f29, 0x0) io_uring_setup$auto(0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1adf82, 0x0) setreuid$auto(0x0, 0x0) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x201) setfsgid$auto(0x0) mmap$auto(0x1, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(r2, 0x0, 0x10000, 0x18e9, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r3, 0x0, 0x3, 0xe9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfc9, 0x9, 0x2, 0x4000000000000d]}, 0x0) 1.698482785s ago: executing program 3 (id=191): openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec7\x00', 0x2040, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) fcntl$auto(0x0, 0x3, 0x4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002d80)={0x3c, r3, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/fail-nth\x00', 0x400882, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)="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"/4096, 0x1000) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x84, 0x11, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) socket(0x11, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd13/trace/pid\x00', 0x642142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000100)=""/186, 0xba) mmap$auto(0x2000000000003, 0x420008, 0x2, 0x15, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0xc0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/msr/parameters/allow_writes\x00', 0xa0302, 0x0) sendfile$auto(r6, r6, 0x0, 0x7ffff000) 1.32276482s ago: executing program 0 (id=192): sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x4001}, 0x90) syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$auto(0x3, 0x0, 0x6a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) 1.101119304s ago: executing program 3 (id=193): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4ea02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop14/queue/stable_writes\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x2400000) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) 827.967412ms ago: executing program 2 (id=194): memfd_create$auto(0x0, 0x4) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/trace_options\x00', 0x2000, 0x0) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/afs/cells\x00', 0x181800, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x402000a, 0x1006, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) r6 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r6, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 363.342145ms ago: executing program 2 (id=195): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000480)='/dev/audio\x00', 0x7) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r1, 0x80044dfe, &(0x7f0000000040)) socket(0x1, 0x5, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) writev$auto(r0, &(0x7f0000000440)={&(0x7f0000000380)="31dd95fd7f097f03c3e8c2def55f53cf2c33a7b8a0e2791b558b146a6a5cc46f180ad59f82521f0f57a7a60417c79664f2e95dad66315772d0341ce6a08ee28555dc8a817f1d2577b1d449603f8321e5c6e90ae357e3f574edc6861ce73c7091a431443d1cf8423b209ecc151ebb42bd1f5fa178eee516f6dbef6b0aa9cbb8de7b3930e879db46172ad5ba60d64f9e706a265cd910ebf9997f56ed1cfff94c"}, 0x0) 212.791838ms ago: executing program 0 (id=196): open_tree$auto(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8001) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x8042, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x58) bind$auto(0x3, 0x0, 0x6a) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000000280)={0x10000, &(0x7f0000000240)=&(0x7f0000000140)="beb93fa080a16bf33a576b5dcfb5033cfa41bf25b475a515cc41b8199d1224974305e0d7c32868cf8c26b0ac5c234fc6f52a5e7fcde847ada639fa935c0b31b32f7d8da174eb2c82d03ae90654e200006093b5772308107ef0c9a35c9596bba80bec963f6b2bdd6c9f80f916320ce6511f97d4d38747c24b774813283abd043cd264374ce6d07039e9c155f7d6ea3f717f42ed3f1c1461cdea72ee291a1ba560e54496a8527b38ce60b3abac153b6050d729fb0517dfcaf522643286a0b7778778ff0beaca11d2c001bcfd0f3a198b77226cceebd7c4d454c8362e35822aa20e127d15a05693da", 0x7f}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x28001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)='n', 0x1) ioctl$auto_SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000080)={0xffffffff, "e91a1ae2", 0x3, 0x0, 0xfffffffffffff002, 0x4, 0x6, 0xfffffffffffffff9, 0x1, 0x6cca, 0x2000000007fff, 0x3, 0x7, 0x180004, 0x1, 0x80000001, 0x80000e07, 0x5, 0x400, "cec3ec4c01d0132df17dbe7378730314ad618988"}) socket(0x23, 0x80805, 0x0) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/xfs/xqm\x00', 0x1c9802, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x2000006) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '#'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) write$auto_console_fops_tty_io(r0, &(0x7f0000000080)="c80d1b5d399b3b4d90a2", 0xa) 0s ago: executing program 2 (id=197): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x20000, 0x0) pread64$auto(r0, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\x05\x00/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbfA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\xf5\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xa9\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\x04\x97\xea\x00\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq\x00'/221, 0x100003ffd, 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 89.830898][ T5618] cgroup: Unknown subsys name 'net' [ 89.929180][ T5618] cgroup: Unknown subsys name 'cpuset' [ 89.938830][ T5618] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.705664][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.058400][ T808] cfg80211: failed to load regulatory.db [ 93.762480][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.772255][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.780447][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.789334][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.797268][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.859134][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.872011][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.886650][ T4946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.895435][ T4946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.907080][ T4946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.919978][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.927792][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.935660][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.946678][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.955726][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.958000][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.968053][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.971192][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.985860][ T4946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.994861][ T4946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.630073][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.637512][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.644701][ T5632] bridge_slave_0: entered allmulticast mode [ 95.652499][ T5632] bridge_slave_0: entered promiscuous mode [ 95.701683][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.709036][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.716350][ T5632] bridge_slave_1: entered allmulticast mode [ 95.723684][ T5632] bridge_slave_1: entered promiscuous mode [ 95.779933][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.787252][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.794421][ T5641] bridge_slave_0: entered allmulticast mode [ 95.802043][ T5641] bridge_slave_0: entered promiscuous mode [ 95.834945][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.842189][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.849669][ T5641] bridge_slave_1: entered allmulticast mode [ 95.857297][ T5641] bridge_slave_1: entered promiscuous mode [ 95.874434][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.895531][ T50] Bluetooth: hci0: command tx timeout [ 95.933590][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.943065][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.950403][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.957666][ T5636] bridge_slave_0: entered allmulticast mode [ 95.965238][ T5636] bridge_slave_0: entered promiscuous mode [ 96.005468][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.012859][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.020185][ T5636] bridge_slave_1: entered allmulticast mode [ 96.028277][ T5636] bridge_slave_1: entered promiscuous mode [ 96.038709][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.055323][ T5633] Bluetooth: hci3: command tx timeout [ 96.061576][ T4946] Bluetooth: hci2: command tx timeout [ 96.067538][ T50] Bluetooth: hci1: command tx timeout [ 96.097708][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.107258][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.114475][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.122007][ T5635] bridge_slave_0: entered allmulticast mode [ 96.129583][ T5635] bridge_slave_0: entered promiscuous mode [ 96.139279][ T5632] team0: Port device team_slave_0 added [ 96.167426][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.174671][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.181961][ T5635] bridge_slave_1: entered allmulticast mode [ 96.189596][ T5635] bridge_slave_1: entered promiscuous mode [ 96.198427][ T5632] team0: Port device team_slave_1 added [ 96.207330][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.258113][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.269229][ T5641] team0: Port device team_slave_0 added [ 96.311451][ T5641] team0: Port device team_slave_1 added [ 96.320753][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.330944][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.338598][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.365120][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.401807][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.411591][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.418813][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.444817][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.466372][ T5636] team0: Port device team_slave_0 added [ 96.511269][ T5636] team0: Port device team_slave_1 added [ 96.517858][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.524981][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.555521][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.568759][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.576155][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.602152][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.615641][ T5635] team0: Port device team_slave_0 added [ 96.652706][ T5635] team0: Port device team_slave_1 added [ 96.689498][ T5632] hsr_slave_0: entered promiscuous mode [ 96.696841][ T5632] hsr_slave_1: entered promiscuous mode [ 96.715363][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.722358][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.748656][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.761484][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.768692][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.795065][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.839565][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.846738][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.872751][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.921558][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.928731][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.954761][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.971539][ T5641] hsr_slave_0: entered promiscuous mode [ 96.978287][ T5641] hsr_slave_1: entered promiscuous mode [ 96.985238][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 96.991066][ T5641] Cannot create hsr debugfs directory [ 97.030701][ T5636] hsr_slave_0: entered promiscuous mode [ 97.037321][ T5636] hsr_slave_1: entered promiscuous mode [ 97.043609][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 97.049527][ T5636] Cannot create hsr debugfs directory [ 97.149148][ T5635] hsr_slave_0: entered promiscuous mode [ 97.155817][ T5635] hsr_slave_1: entered promiscuous mode [ 97.161979][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 97.167839][ T5635] Cannot create hsr debugfs directory [ 97.592516][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.609999][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.618757][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.630946][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.639253][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.649978][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.659112][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.672451][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.763253][ T5636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.776860][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.786381][ T5636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.797601][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.806051][ T5636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.819382][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.827497][ T5636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.839014][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.934501][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.949840][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.963566][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.974939][ T50] Bluetooth: hci0: command tx timeout [ 97.980670][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.009119][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.020136][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.028586][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.040042][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.123024][ T5641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.133677][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.141862][ T4946] Bluetooth: hci2: command tx timeout [ 98.143669][ T5641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.147827][ T5633] Bluetooth: hci3: command tx timeout [ 98.152889][ T50] Bluetooth: hci1: command tx timeout [ 98.168958][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.187798][ T5641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.198339][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.207771][ T5641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.218230][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.290650][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.318983][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.359517][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.401568][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.409067][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.423976][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.461362][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.468534][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.481227][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.488461][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.529622][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.536996][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.591172][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.680242][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.712186][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.728624][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.735872][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.776599][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.783866][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.803166][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.900856][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.908103][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.939925][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.947154][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.775824][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.808882][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.941815][ T5632] veth0_vlan: entered promiscuous mode [ 99.995651][ T5632] veth1_vlan: entered promiscuous mode [ 100.004353][ T5636] veth0_vlan: entered promiscuous mode [ 100.041854][ T5636] veth1_vlan: entered promiscuous mode [ 100.057357][ T50] Bluetooth: hci0: command tx timeout [ 100.140755][ T5632] veth0_macvtap: entered promiscuous mode [ 100.171866][ T5632] veth1_macvtap: entered promiscuous mode [ 100.216522][ T50] Bluetooth: hci2: command tx timeout [ 100.216889][ T4946] Bluetooth: hci1: command tx timeout [ 100.221990][ T5633] Bluetooth: hci3: command tx timeout [ 100.252532][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.264346][ T5636] veth0_macvtap: entered promiscuous mode [ 100.279721][ T5636] veth1_macvtap: entered promiscuous mode [ 100.295543][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.310756][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.335374][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.376419][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.389017][ T1013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.398775][ T1013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.418167][ T1013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.427065][ T1013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.439952][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.468353][ T1013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.482604][ T1013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.492857][ T1013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.517395][ T1013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.542122][ T5635] veth0_vlan: entered promiscuous mode [ 100.583211][ T5635] veth1_vlan: entered promiscuous mode [ 100.660836][ T5641] veth0_vlan: entered promiscuous mode [ 100.711962][ T5641] veth1_vlan: entered promiscuous mode [ 100.758337][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.771234][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.808405][ T5635] veth0_macvtap: entered promiscuous mode [ 100.824006][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.836389][ T5635] veth1_macvtap: entered promiscuous mode [ 100.845647][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.901369][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.912166][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.939021][ T5641] veth0_macvtap: entered promiscuous mode [ 100.958279][ T5641] veth1_macvtap: entered promiscuous mode [ 100.966559][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.982576][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.031538][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.063896][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.084521][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.100008][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.109718][ T5636] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.139665][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.154602][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.164687][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.197286][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.219983][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.275925][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.310382][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.348763][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.458197][ T5782] FAULT_INJECTION: forcing a failure. [ 101.458197][ T5782] name failslab, interval 1, probability 0, space 0, times 1 [ 101.479487][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 101.479529][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.479558][ T5782] Call Trace: [ 101.479569][ T5782] [ 101.479581][ T5782] dump_stack_lvl+0x100/0x190 [ 101.479631][ T5782] should_fail_ex.cold+0x5/0xa [ 101.479676][ T5782] should_failslab+0xc2/0x120 [ 101.479718][ T5782] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 101.479771][ T5782] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 101.479830][ T5782] ext4_alloc_io_end_vec+0x2b/0x1c0 [ 101.479880][ T5782] ext4_do_writepages+0x1765/0x3f20 [ 101.479915][ T5782] ? do_raw_spin_lock+0x128/0x260 [ 101.479961][ T5782] ? trace_pelt_se_tp+0x13b/0x190 [ 101.480005][ T5782] ? hrtimer_start_range_ns+0x860/0x1a50 [ 101.480067][ T5782] ? __pfx_ext4_do_writepages+0x10/0x10 [ 101.480127][ T5782] ? ext4_writepages+0x347/0x790 [ 101.480163][ T5782] ext4_writepages+0x347/0x790 [ 101.480200][ T5782] ? __pfx_ext4_writepages+0x10/0x10 [ 101.480248][ T5782] ? do_writepages+0x4b5/0x600 [ 101.480287][ T5782] ? do_writepages+0x4b5/0x600 [ 101.480331][ T5782] ? __pfx_ext4_writepages+0x10/0x10 [ 101.480368][ T5782] do_writepages+0x278/0x600 [ 101.480418][ T5782] ? __pfx_do_writepages+0x10/0x10 [ 101.480460][ T5782] ? do_raw_spin_unlock+0x145/0x1e0 [ 101.480502][ T5782] ? _raw_spin_unlock+0x28/0x50 [ 101.480551][ T5782] filemap_writeback+0x22d/0x2e0 [ 101.480598][ T5782] ? __pfx_filemap_writeback+0x10/0x10 [ 101.480692][ T5782] ? mt_find+0x45e/0x8e0 [ 101.480726][ T5782] ? __pfx_mt_find+0x10/0x10 [ 101.480761][ T5782] file_write_and_wait_range+0xcd/0x140 [ 101.480815][ T5782] ext4_sync_file+0x358/0xb90 [ 101.480853][ T5782] ? __pfx_ext4_sync_file+0x10/0x10 [ 101.480885][ T5782] ? __up_read+0x1d0/0x6e0 [ 101.480923][ T5782] ? __pfx___up_read+0x10/0x10 [ 101.480957][ T5782] ? __do_sys_msync+0x39b/0x590 [ 101.480991][ T5782] ? __pfx_ext4_sync_file+0x10/0x10 [ 101.481021][ T5782] vfs_fsync_range+0x9b/0x190 [ 101.481078][ T5782] __do_sys_msync+0x3ca/0x590 [ 101.481118][ T5782] do_syscall_64+0x10b/0xf80 [ 101.481166][ T5782] ? clear_bhb_loop+0x40/0x90 [ 101.481205][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.481238][ T5782] RIP: 0033:0x7f093279ce59 [ 101.481264][ T5782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.481302][ T5782] RSP: 002b:00007f0933698028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 101.481339][ T5782] RAX: ffffffffffffffda RBX: 00007f0932a16090 RCX: 00007f093279ce59 [ 101.481364][ T5782] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 101.481385][ T5782] RBP: 00007f0932832d6f R08: 0000000000000000 R09: 0000000000000000 [ 101.481403][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.481422][ T5782] R13: 00007f0932a16128 R14: 00007f0932a16090 R15: 00007ffd2be51838 [ 101.481463][ T5782] [ 101.875386][ T5785] __vm_enough_memory: pid: 5785, comm: syz.1.5, bytes: 4398046457856 not enough memory for the allocation [ 102.040596][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.061451][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.134881][ T4946] Bluetooth: hci0: command tx timeout [ 102.295010][ T4946] Bluetooth: hci2: command tx timeout [ 102.296336][ T50] Bluetooth: hci3: command tx timeout [ 102.305134][ T4946] Bluetooth: hci1: command tx timeout [ 102.375396][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.391510][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.431413][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.471209][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.546412][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.589979][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.313688][ T5799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 103.357030][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.377351][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.570234][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.594879][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.818158][ T5799] Zero length message leads to an empty skb [ 103.901839][ T5792] block nbd0: not configured, cannot reconfigure [ 105.370059][ T5820] sg_write: data in/out 131052/209 bytes for SCSI command 0x67-- guessing data in; [ 105.370059][ T5820] program syz.3.10 not setting count and/or reply_len properly [ 105.775258][ T5835] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.256297][ T5843] syz.0.14 (5843) used greatest stack depth: 17688 bytes left [ 107.123772][ T5862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.551148][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.570636][ T5841] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.609839][ T5841] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.630742][ T5841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.639739][ T5841] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.652477][ T5841] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.670666][ T5841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.687257][ T5841] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 107.726046][ T5841] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 107.765554][ T5841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.787792][ T5841] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.828259][ T5841] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.135253][ T4946] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.316739][ T5880] [U] ^R [ 108.428480][ T5883] random: crng reseeded on system resumption [ 109.090935][ T5897] netlink: 330 bytes leftover after parsing attributes in process `syz.0.24'. [ 109.554883][ T5904] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 109.654912][ T4946] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.709290][ T5906] FAULT_INJECTION: forcing a failure. [ 109.709290][ T5906] name failslab, interval 1, probability 0, space 0, times 0 [ 109.738387][ T4946] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.757117][ T5906] CPU: 1 UID: 0 PID: 5906 Comm: syz.3.28 Not tainted syzkaller #0 PREEMPT(full) [ 109.757160][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.757179][ T5906] Call Trace: [ 109.757189][ T5906] [ 109.757201][ T5906] dump_stack_lvl+0x100/0x190 [ 109.757242][ T5906] should_fail_ex.cold+0x5/0xa [ 109.757282][ T5906] ? tomoyo_realpath_from_path+0xb6/0x690 [ 109.757325][ T5906] should_failslab+0xc2/0x120 [ 109.757364][ T5906] __kmalloc_noprof+0xe0/0x850 [ 109.757393][ T5906] ? kfree+0x1dd/0x6c0 [ 109.757445][ T5906] tomoyo_realpath_from_path+0xb6/0x690 [ 109.757508][ T5906] tomoyo_path_number_perm+0x23c/0x580 [ 109.757543][ T5906] ? tomoyo_path_number_perm+0x22e/0x580 [ 109.757581][ T5906] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 109.757658][ T5906] ? find_held_lock+0x2b/0x80 [ 109.757701][ T5906] ? __fget_files+0x215/0x3d0 [ 109.757737][ T5906] ? hook_file_ioctl_common+0x149/0x410 [ 109.757771][ T5906] ? __fget_files+0x215/0x3d0 [ 109.757816][ T5906] ? __fget_files+0x21f/0x3d0 [ 109.757862][ T5906] security_file_ioctl+0xd3/0x230 [ 109.757900][ T5906] __x64_sys_ioctl+0xb7/0x210 [ 109.757937][ T5906] do_syscall_64+0x10b/0xf80 [ 109.757984][ T5906] ? clear_bhb_loop+0x40/0x90 [ 109.758025][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.758058][ T5906] RIP: 0033:0x7f82a659ce59 [ 109.758084][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.758114][ T5906] RSP: 002b:00007f82a739c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.758144][ T5906] RAX: ffffffffffffffda RBX: 00007f82a6815fa0 RCX: 00007f82a659ce59 [ 109.758165][ T5906] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000006 [ 109.758185][ T5906] RBP: 00007f82a739c090 R08: 0000000000000000 R09: 0000000000000000 [ 109.758204][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.758223][ T5906] R13: 00007f82a6816038 R14: 00007f82a6815fa0 R15: 00007fffdf8fd288 [ 109.758266][ T5906] [ 109.758303][ T5906] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.855460][ T4946] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.216044][ T4946] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.019823][ T5935] futex_wake_op: syz.3.37 tries to shift op by -2048; fix this program [ 111.119726][ T5940] process 'syz.0.39' launched './file0' with NULL argv: empty string added [ 111.623627][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 111.735072][ T4946] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.802802][ T5960] netlink: 'syz.0.42': attribute type 11 has an invalid length. [ 111.815587][ T4946] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.820403][ T5960] netlink: 'syz.0.42': attribute type 11 has an invalid length. [ 111.850779][ T5960] netlink: 'syz.0.42': attribute type 11 has an invalid length. [ 112.065652][ T4946] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.295507][ T4946] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.759341][ T5974] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.829438][ T4946] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.894827][ T4946] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.137026][ T4946] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.630494][ T6002] netlink: 338 bytes leftover after parsing attributes in process `syz.2.52'. [ 114.650848][ T6002] netlink: 338 bytes leftover after parsing attributes in process `syz.2.52'. [ 114.707400][ T5999] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.744198][ T6002] netlink: 290 bytes leftover after parsing attributes in process `syz.2.52'. [ 114.855719][ T6005] FAULT_INJECTION: forcing a failure. [ 114.855719][ T6005] name failslab, interval 1, probability 0, space 0, times 0 [ 114.879840][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 114.879882][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.879902][ T6005] Call Trace: [ 114.879912][ T6005] [ 114.879924][ T6005] dump_stack_lvl+0x100/0x190 [ 114.879968][ T6005] should_fail_ex.cold+0x5/0xa [ 114.880010][ T6005] ? tomoyo_realpath_from_path+0xb6/0x690 [ 114.880055][ T6005] should_failslab+0xc2/0x120 [ 114.880094][ T6005] __kmalloc_noprof+0xe0/0x850 [ 114.880124][ T6005] ? kfree+0x1dd/0x6c0 [ 114.880177][ T6005] tomoyo_realpath_from_path+0xb6/0x690 [ 114.880230][ T6005] tomoyo_path_perm+0x276/0x460 [ 114.880263][ T6005] ? tomoyo_path_perm+0x262/0x460 [ 114.880301][ T6005] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 114.880356][ T6005] ? lockdown_is_locked_down+0x3d/0x140 [ 114.880425][ T6005] ? __pfx_ima_file_check+0x10/0x10 [ 114.880476][ T6005] ? hook_file_truncate+0xc3/0x240 [ 114.880526][ T6005] security_file_truncate+0xb5/0x1e0 [ 114.880569][ T6005] path_openat+0x1c6e/0x31a0 [ 114.880635][ T6005] ? __pfx_path_openat+0x10/0x10 [ 114.880695][ T6005] do_file_open+0x20e/0x430 [ 114.880741][ T6005] ? __pfx_do_file_open+0x10/0x10 [ 114.880812][ T6005] ? alloc_fd+0x476/0x790 [ 114.880858][ T6005] ? do_getname+0x191/0x390 [ 114.880914][ T6005] do_sys_openat2+0x10d/0x1e0 [ 114.880968][ T6005] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.881022][ T6005] ? __pfx_sched_core_share_pid+0x10/0x10 [ 114.881083][ T6005] __x64_sys_openat+0x12d/0x210 [ 114.881137][ T6005] ? __pfx___x64_sys_openat+0x10/0x10 [ 114.881198][ T6005] ? rcu_is_watching+0x12/0xc0 [ 114.881245][ T6005] do_syscall_64+0x10b/0xf80 [ 114.881295][ T6005] ? clear_bhb_loop+0x40/0x90 [ 114.881336][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.881369][ T6005] RIP: 0033:0x7f82a659ce59 [ 114.881396][ T6005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.881429][ T6005] RSP: 002b:00007f82a47f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.881460][ T6005] RAX: ffffffffffffffda RBX: 00007f82a6816180 RCX: 00007f82a659ce59 [ 114.881481][ T6005] RDX: 0000000000080240 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 114.881500][ T6005] RBP: 00007f82a6632d6f R08: 0000000000000000 R09: 0000000000000000 [ 114.881519][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.881538][ T6005] R13: 00007f82a6816218 R14: 00007f82a6816180 R15: 00007fffdf8fd288 [ 114.881581][ T6005] [ 115.155781][ T6005] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.978077][ T5995] FAULT_INJECTION: forcing a failure. [ 115.978077][ T5995] name failslab, interval 1, probability 0, space 0, times 0 [ 116.005942][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(full) [ 116.005985][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.006005][ T5995] Call Trace: [ 116.006015][ T5995] [ 116.006028][ T5995] dump_stack_lvl+0x100/0x190 [ 116.006071][ T5995] should_fail_ex.cold+0x5/0xa [ 116.006114][ T5995] should_failslab+0xc2/0x120 [ 116.006155][ T5995] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 116.006209][ T5995] ? __mpol_dup+0x74/0x390 [ 116.006261][ T5995] __mpol_dup+0x74/0x390 [ 116.006305][ T5995] ? __pfx___mpol_dup+0x10/0x10 [ 116.006362][ T5995] mbind_range+0x2ad/0x550 [ 116.006417][ T5995] do_mbind+0x7dc/0xfd0 [ 116.006475][ T5995] ? __pfx_do_mbind+0x10/0x10 [ 116.006530][ T5995] ? ksys_write+0x190/0x250 [ 116.006591][ T5995] ? __pfx_get_nodes+0x10/0x10 [ 116.006638][ T5995] kernel_mbind+0x1b7/0x200 [ 116.006689][ T5995] ? __pfx_kernel_mbind+0x10/0x10 [ 116.006751][ T5995] ? rcu_is_watching+0x12/0xc0 [ 116.006798][ T5995] do_syscall_64+0x10b/0xf80 [ 116.006846][ T5995] ? clear_bhb_loop+0x40/0x90 [ 116.006887][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.006920][ T5995] RIP: 0033:0x7effc659ce59 [ 116.006946][ T5995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.006977][ T5995] RSP: 002b:00007effc73c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 116.007008][ T5995] RAX: ffffffffffffffda RBX: 00007effc6815fa0 RCX: 00007effc659ce59 [ 116.007029][ T5995] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 116.007048][ T5995] RBP: 00007effc6632d6f R08: 0000000000000006 R09: 0000000000000002 [ 116.007067][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.007087][ T5995] R13: 00007effc6816038 R14: 00007effc6815fa0 R15: 00007fff8172db28 [ 116.007130][ T5995] [ 116.309279][ T6017] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.542104][ T6042] netlink: 208 bytes leftover after parsing attributes in process `syz.2.63'. [ 117.584973][ T6042] FAULT_INJECTION: forcing a failure. [ 117.584973][ T6042] name failslab, interval 1, probability 0, space 0, times 0 [ 117.620723][ T6042] CPU: 1 UID: 0 PID: 6042 Comm: syz.2.63 Not tainted syzkaller #0 PREEMPT(full) [ 117.620761][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.620779][ T6042] Call Trace: [ 117.620788][ T6042] [ 117.620798][ T6042] dump_stack_lvl+0x100/0x190 [ 117.620852][ T6042] should_fail_ex.cold+0x5/0xa [ 117.620889][ T6042] should_failslab+0xc2/0x120 [ 117.620924][ T6042] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 117.620970][ T6042] ? __kernfs_new_node+0xd2/0x9f0 [ 117.621009][ T6042] __kernfs_new_node+0xd2/0x9f0 [ 117.621045][ T6042] ? __pfx___kernfs_new_node+0x10/0x10 [ 117.621087][ T6042] ? find_held_lock+0x2b/0x80 [ 117.621124][ T6042] ? kernfs_root+0xee/0x2a0 [ 117.621154][ T6042] ? kernfs_root+0xee/0x2a0 [ 117.621192][ T6042] kernfs_new_node+0x11b/0x1a0 [ 117.621233][ T6042] __kernfs_create_file+0x53/0x350 [ 117.621281][ T6042] sysfs_add_file_mode_ns+0x207/0x3c0 [ 117.621319][ T6042] sysfs_merge_group+0x194/0x340 [ 117.621362][ T6042] ? __pfx_sysfs_merge_group+0x10/0x10 [ 117.621396][ T6042] ? bus_add_device+0x368/0x6b0 [ 117.621427][ T6042] ? __pfx_bus_add_device+0x10/0x10 [ 117.621451][ T6042] ? __pfx_dev_add_physical_location+0x10/0x10 [ 117.621498][ T6042] dpm_sysfs_add+0x237/0x280 [ 117.621540][ T6042] device_add+0x9ef/0x1950 [ 117.621587][ T6042] ? __pfx_device_add+0x10/0x10 [ 117.621626][ T6042] ? kfree_const+0x5a/0x70 [ 117.621654][ T6042] ? kfree+0x1dd/0x6c0 [ 117.621705][ T6042] device_create_groups_vargs+0x1f8/0x270 [ 117.621749][ T6042] device_create+0xed/0x130 [ 117.621788][ T6042] ? __pfx_device_create+0x10/0x10 [ 117.621823][ T6042] ? lockdep_init_map_type+0x5c/0x250 [ 117.621852][ T6042] ? timer_init_key+0x155/0x330 [ 117.621901][ T6042] ? ieee80211_roc_setup+0x136/0x270 [ 117.621939][ T6042] ? ieee80211_alloc_hw_nm+0x19f8/0x22e0 [ 117.621990][ T6042] mac80211_hwsim_new_radio+0x379/0x5aa0 [ 117.622023][ T6042] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 117.622074][ T6042] ? rcu_is_watching+0x12/0xc0 [ 117.622109][ T6042] ? do_trace_netlink_extack+0x74/0x1f0 [ 117.622144][ T6042] ? __nla_validate_parse+0x1e7/0x28b0 [ 117.622187][ T6042] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 117.622228][ T6042] hwsim_new_radio_nl+0xc5f/0x1370 [ 117.622259][ T6042] ? rcu_is_watching+0x12/0xc0 [ 117.622294][ T6042] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 117.622341][ T6042] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 117.622390][ T6042] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 117.622446][ T6042] genl_family_rcv_msg_doit+0x214/0x300 [ 117.622497][ T6042] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 117.622544][ T6042] ? genl_get_cmd+0x3e7/0x760 [ 117.622596][ T6042] ? bpf_lsm_capable+0x9/0x10 [ 117.622629][ T6042] ? security_capable+0x80/0x260 [ 117.622673][ T6042] ? ns_capable+0xd2/0xf0 [ 117.622710][ T6042] genl_rcv_msg+0x560/0x800 [ 117.622740][ T6042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.622787][ T6042] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 117.622829][ T6042] netlink_rcv_skb+0x159/0x420 [ 117.622871][ T6042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.622918][ T6042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.622973][ T6042] ? netlink_deliver_tap+0x1ae/0xcc0 [ 117.623017][ T6042] genl_rcv+0x28/0x40 [ 117.623058][ T6042] netlink_unicast+0x585/0x850 [ 117.623108][ T6042] ? __pfx_netlink_unicast+0x10/0x10 [ 117.623159][ T6042] netlink_sendmsg+0x8b0/0xda0 [ 117.623206][ T6042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.623253][ T6042] ? __import_iovec+0x1d2/0x640 [ 117.623286][ T6042] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 117.623343][ T6042] ____sys_sendmsg+0x9e1/0xb70 [ 117.623384][ T6042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.623429][ T6042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.623478][ T6042] ? __pfx_futex_wake_mark+0x10/0x10 [ 117.623522][ T6042] ___sys_sendmsg+0x190/0x1e0 [ 117.623567][ T6042] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.623651][ T6042] __sys_sendmsg+0x170/0x220 [ 117.623684][ T6042] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.623716][ T6042] ? __x64_sys_futex+0x34f/0x4d0 [ 117.623760][ T6042] ? rcu_is_watching+0x12/0xc0 [ 117.623800][ T6042] do_syscall_64+0x10b/0xf80 [ 117.623843][ T6042] ? clear_bhb_loop+0x40/0x90 [ 117.623878][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.623907][ T6042] RIP: 0033:0x7ff25ab9ce59 [ 117.623937][ T6042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.623970][ T6042] RSP: 002b:00007ff25b990028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.623996][ T6042] RAX: ffffffffffffffda RBX: 00007ff25ae15fa0 RCX: 00007ff25ab9ce59 [ 117.624015][ T6042] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000009 [ 117.624033][ T6042] RBP: 00007ff25ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 117.624050][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.624067][ T6042] R13: 00007ff25ae16038 R14: 00007ff25ae15fa0 R15: 00007ffcecce0778 [ 117.624103][ T6042] [ 118.668351][ T6060] FAULT_INJECTION: forcing a failure. [ 118.668351][ T6060] name failslab, interval 1, probability 0, space 0, times 0 [ 118.682899][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT(full) [ 118.682941][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.682961][ T6060] Call Trace: [ 118.682972][ T6060] [ 118.682983][ T6060] dump_stack_lvl+0x100/0x190 [ 118.683026][ T6060] should_fail_ex.cold+0x5/0xa [ 118.683069][ T6060] should_failslab+0xc2/0x120 [ 118.683109][ T6060] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 118.683163][ T6060] ? ext4_init_io_end+0x24/0x170 [ 118.683218][ T6060] ext4_init_io_end+0x24/0x170 [ 118.683272][ T6060] ext4_do_writepages+0x9d4/0x3f20 [ 118.683311][ T6060] ? do_raw_spin_lock+0x128/0x260 [ 118.683371][ T6060] ? debug_object_free+0x295/0x550 [ 118.683430][ T6060] ? __pfx_ext4_do_writepages+0x10/0x10 [ 118.683487][ T6060] ? ext4_writepages+0x347/0x790 [ 118.683520][ T6060] ext4_writepages+0x347/0x790 [ 118.683557][ T6060] ? __pfx_ext4_writepages+0x10/0x10 [ 118.683614][ T6060] ? __pfx_ext4_writepages+0x10/0x10 [ 118.683656][ T6060] do_writepages+0x278/0x600 [ 118.683706][ T6060] ? __pfx_do_writepages+0x10/0x10 [ 118.683749][ T6060] ? do_raw_spin_unlock+0x145/0x1e0 [ 118.683791][ T6060] ? _raw_spin_unlock+0x28/0x50 [ 118.683841][ T6060] filemap_writeback+0x22d/0x2e0 [ 118.683889][ T6060] ? __pfx_filemap_writeback+0x10/0x10 [ 118.683934][ T6060] ? bio_await+0x19b/0x240 [ 118.684023][ T6060] ? mt_find+0x45e/0x8e0 [ 118.684057][ T6060] ? __pfx_mt_find+0x10/0x10 [ 118.684092][ T6060] file_write_and_wait_range+0xcd/0x140 [ 118.684148][ T6060] ext4_sync_file+0x358/0xb90 [ 118.684185][ T6060] ? __pfx_ext4_sync_file+0x10/0x10 [ 118.684215][ T6060] ? __up_read+0x1d0/0x6e0 [ 118.684266][ T6060] ? __pfx___up_read+0x10/0x10 [ 118.684306][ T6060] ? __do_sys_msync+0x39b/0x590 [ 118.684342][ T6060] ? __pfx_ext4_sync_file+0x10/0x10 [ 118.684374][ T6060] vfs_fsync_range+0x9b/0x190 [ 118.684425][ T6060] __do_sys_msync+0x3ca/0x590 [ 118.684467][ T6060] do_syscall_64+0x10b/0xf80 [ 118.684517][ T6060] ? clear_bhb_loop+0x40/0x90 [ 118.684559][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.684593][ T6060] RIP: 0033:0x7f093279ce59 [ 118.684620][ T6060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.684653][ T6060] RSP: 002b:00007f0933698028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 118.684686][ T6060] RAX: ffffffffffffffda RBX: 00007f0932a16090 RCX: 00007f093279ce59 [ 118.684707][ T6060] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 118.684729][ T6060] RBP: 00007f0932832d6f R08: 0000000000000000 R09: 0000000000000000 [ 118.684748][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.684767][ T6060] R13: 00007f0932a16128 R14: 00007f0932a16090 R15: 00007ffd2be51838 [ 118.684807][ T6060] [ 119.147997][ T6062] FAULT_INJECTION: forcing a failure. [ 119.147997][ T6062] name failslab, interval 1, probability 0, space 0, times 0 [ 119.197961][ T4946] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 119.251786][ T6062] CPU: 1 UID: 0 PID: 6062 Comm: syz.3.68 Not tainted syzkaller #0 PREEMPT(full) [ 119.251828][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.251847][ T6062] Call Trace: [ 119.251857][ T6062] [ 119.251869][ T6062] dump_stack_lvl+0x100/0x190 [ 119.251912][ T6062] should_fail_ex.cold+0x5/0xa [ 119.251955][ T6062] should_failslab+0xc2/0x120 [ 119.251998][ T6062] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 119.252057][ T6062] ? jbd2__journal_start+0x194/0x6a0 [ 119.252113][ T6062] jbd2__journal_start+0x194/0x6a0 [ 119.252165][ T6062] __ext4_journal_start_sb+0x36d/0x670 [ 119.252209][ T6062] ? ext4_do_writepages+0xc21/0x3f20 [ 119.252251][ T6062] ext4_do_writepages+0xc21/0x3f20 [ 119.252288][ T6062] ? do_raw_spin_lock+0x128/0x260 [ 119.252354][ T6062] ? __pfx_ext4_do_writepages+0x10/0x10 [ 119.252413][ T6062] ? ext4_writepages+0x347/0x790 [ 119.252438][ T6062] ext4_writepages+0x347/0x790 [ 119.252465][ T6062] ? __pfx_ext4_writepages+0x10/0x10 [ 119.252506][ T6062] ? __pfx_ext4_writepages+0x10/0x10 [ 119.252533][ T6062] do_writepages+0x278/0x600 [ 119.252568][ T6062] ? __pfx_do_writepages+0x10/0x10 [ 119.252597][ T6062] ? do_raw_spin_unlock+0x145/0x1e0 [ 119.252627][ T6062] ? _raw_spin_unlock+0x28/0x50 [ 119.252662][ T6062] filemap_writeback+0x22d/0x2e0 [ 119.252696][ T6062] ? __pfx_filemap_writeback+0x10/0x10 [ 119.252728][ T6062] ? wakeup_preempt_fair+0x630/0x1050 [ 119.252793][ T6062] ? wake_up_q+0xae/0x130 [ 119.252828][ T6062] file_write_and_wait_range+0xcd/0x140 [ 119.252868][ T6062] ext4_sync_file+0x358/0xb90 [ 119.252894][ T6062] ? __pfx_ext4_sync_file+0x10/0x10 [ 119.252916][ T6062] ? __up_read+0x1d0/0x6e0 [ 119.252944][ T6062] ? __pfx___up_read+0x10/0x10 [ 119.252969][ T6062] ? __do_sys_msync+0x39b/0x590 [ 119.252993][ T6062] ? __pfx_ext4_sync_file+0x10/0x10 [ 119.253015][ T6062] vfs_fsync_range+0x9b/0x190 [ 119.253051][ T6062] __do_sys_msync+0x3ca/0x590 [ 119.253080][ T6062] do_syscall_64+0x10b/0xf80 [ 119.253116][ T6062] ? clear_bhb_loop+0x40/0x90 [ 119.253145][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.253175][ T6062] RIP: 0033:0x7f82a659ce59 [ 119.253195][ T6062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.253218][ T6062] RSP: 002b:00007f82a737b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 119.253240][ T6062] RAX: ffffffffffffffda RBX: 00007f82a6816090 RCX: 00007f82a659ce59 [ 119.253256][ T6062] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 119.253271][ T6062] RBP: 00007f82a6632d6f R08: 0000000000000000 R09: 0000000000000000 [ 119.253286][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.253299][ T6062] R13: 00007f82a6816128 R14: 00007f82a6816090 R15: 00007fffdf8fd288 [ 119.253329][ T6062] [ 119.603223][ T6062] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2033; err -12 [ 124.989609][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 125.021235][ T6159] veth0_macvtap: left promiscuous mode [ 125.055303][ T6159] macvtap0: entered promiscuous mode [ 125.073538][ T6159] macvtap0: entered allmulticast mode [ 126.116752][ T6183] FAULT_INJECTION: forcing a failure. [ 126.116752][ T6183] name failslab, interval 1, probability 0, space 0, times 0 [ 126.191130][ T6183] CPU: 0 UID: 0 PID: 6183 Comm: syz.3.99 Not tainted syzkaller #0 PREEMPT(full) [ 126.191161][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.191176][ T6183] Call Trace: [ 126.191183][ T6183] [ 126.191192][ T6183] dump_stack_lvl+0x100/0x190 [ 126.191223][ T6183] should_fail_ex.cold+0x5/0xa [ 126.191254][ T6183] should_failslab+0xc2/0x120 [ 126.191283][ T6183] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 126.191322][ T6183] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 126.191362][ T6183] ext4_alloc_io_end_vec+0x2b/0x1c0 [ 126.191399][ T6183] ext4_do_writepages+0x1765/0x3f20 [ 126.191425][ T6183] ? do_raw_spin_lock+0x128/0x260 [ 126.191472][ T6183] ? hrtimer_start_range_ns+0x860/0x1a50 [ 126.191509][ T6183] ? __pfx_ext4_do_writepages+0x10/0x10 [ 126.191549][ T6183] ? ext4_writepages+0x347/0x790 [ 126.191574][ T6183] ext4_writepages+0x347/0x790 [ 126.191601][ T6183] ? __pfx_ext4_writepages+0x10/0x10 [ 126.191636][ T6183] ? do_writepages+0x4b5/0x600 [ 126.191666][ T6183] ? do_writepages+0x4b5/0x600 [ 126.191701][ T6183] ? __pfx_ext4_writepages+0x10/0x10 [ 126.191729][ T6183] do_writepages+0x278/0x600 [ 126.191762][ T6183] ? __pfx_do_writepages+0x10/0x10 [ 126.191792][ T6183] ? do_raw_spin_unlock+0x145/0x1e0 [ 126.191825][ T6183] ? _raw_spin_unlock+0x28/0x50 [ 126.191860][ T6183] filemap_writeback+0x22d/0x2e0 [ 126.191893][ T6183] ? __pfx_filemap_writeback+0x10/0x10 [ 126.191958][ T6183] ? mt_find+0x45e/0x8e0 [ 126.191982][ T6183] ? __pfx_mt_find+0x10/0x10 [ 126.192006][ T6183] file_write_and_wait_range+0xcd/0x140 [ 126.192046][ T6183] ext4_sync_file+0x358/0xb90 [ 126.192098][ T6183] ? __pfx_ext4_sync_file+0x10/0x10 [ 126.192130][ T6183] ? __up_read+0x1d0/0x6e0 [ 126.192168][ T6183] ? __pfx___up_read+0x10/0x10 [ 126.192203][ T6183] ? __do_sys_msync+0x39b/0x590 [ 126.192237][ T6183] ? __pfx_ext4_sync_file+0x10/0x10 [ 126.192268][ T6183] vfs_fsync_range+0x9b/0x190 [ 126.192317][ T6183] __do_sys_msync+0x3ca/0x590 [ 126.192358][ T6183] do_syscall_64+0x10b/0xf80 [ 126.192407][ T6183] ? clear_bhb_loop+0x40/0x90 [ 126.192456][ T6183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.192491][ T6183] RIP: 0033:0x7f82a659ce59 [ 126.192517][ T6183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.192547][ T6183] RSP: 002b:00007f82a737b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 126.192578][ T6183] RAX: ffffffffffffffda RBX: 00007f82a6816090 RCX: 00007f82a659ce59 [ 126.192600][ T6183] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 126.192620][ T6183] RBP: 00007f82a6632d6f R08: 0000000000000000 R09: 0000000000000000 [ 126.192638][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.192657][ T6183] R13: 00007f82a6816128 R14: 00007f82a6816090 R15: 00007fffdf8fd288 [ 126.192700][ T6183] [ 126.674389][ T6190] busy [ 127.087864][ T6198] FAULT_INJECTION: forcing a failure. [ 127.087864][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 127.108844][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(full) [ 127.108884][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.108901][ T6198] Call Trace: [ 127.108909][ T6198] [ 127.108919][ T6198] dump_stack_lvl+0x100/0x190 [ 127.108954][ T6198] should_fail_ex.cold+0x5/0xa [ 127.108988][ T6198] ? alloc_pipe_info+0x1ec/0x590 [ 127.109023][ T6198] should_failslab+0xc2/0x120 [ 127.109056][ T6198] __kmalloc_noprof+0xe0/0x850 [ 127.109088][ T6198] alloc_pipe_info+0x1ec/0x590 [ 127.109127][ T6198] splice_direct_to_actor+0x78f/0xa30 [ 127.109165][ T6198] ? __lock_acquire+0x4a5/0x2630 [ 127.109189][ T6198] ? __pfx_direct_splice_actor+0x10/0x10 [ 127.109226][ T6198] ? __pfx_aa_file_perm+0x10/0x10 [ 127.109266][ T6198] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 127.109311][ T6198] do_splice_direct+0x174/0x240 [ 127.109347][ T6198] ? __pfx_do_splice_direct+0x10/0x10 [ 127.109394][ T6198] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 127.109433][ T6198] ? rw_verify_area+0xce/0x6d0 [ 127.109463][ T6198] do_sendfile+0xadc/0xe20 [ 127.109499][ T6198] ? __pfx_do_sendfile+0x10/0x10 [ 127.109529][ T6198] ? __fget_files+0x21f/0x3d0 [ 127.109569][ T6198] __x64_sys_sendfile64+0x1d8/0x220 [ 127.109607][ T6198] ? ksys_write+0x1ac/0x250 [ 127.109638][ T6198] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 127.109679][ T6198] ? rcu_is_watching+0x12/0xc0 [ 127.109717][ T6198] do_syscall_64+0x10b/0xf80 [ 127.109758][ T6198] ? clear_bhb_loop+0x40/0x90 [ 127.109791][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.109818][ T6198] RIP: 0033:0x7ff25ab9ce59 [ 127.109839][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.109865][ T6198] RSP: 002b:00007ff25b990028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 127.109890][ T6198] RAX: ffffffffffffffda RBX: 00007ff25ae15fa0 RCX: 00007ff25ab9ce59 [ 127.109908][ T6198] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 127.109923][ T6198] RBP: 00007ff25b990090 R08: 0000000000000000 R09: 0000000000000000 [ 127.109939][ T6198] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 127.109958][ T6198] R13: 00007ff25ae16038 R14: 00007ff25ae15fa0 R15: 00007ffcecce0778 [ 127.109992][ T6198] [ 128.362555][ T6221] FAULT_INJECTION: forcing a failure. [ 128.362555][ T6221] name failslab, interval 1, probability 0, space 0, times 0 [ 128.389507][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.0.107 Not tainted syzkaller #0 PREEMPT(full) [ 128.389550][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.389569][ T6221] Call Trace: [ 128.389579][ T6221] [ 128.389592][ T6221] dump_stack_lvl+0x100/0x190 [ 128.389634][ T6221] should_fail_ex.cold+0x5/0xa [ 128.389676][ T6221] ? tomoyo_realpath_from_path+0xb6/0x690 [ 128.389722][ T6221] should_failslab+0xc2/0x120 [ 128.389761][ T6221] __kmalloc_noprof+0xe0/0x850 [ 128.389791][ T6221] ? kfree+0x1dd/0x6c0 [ 128.389844][ T6221] tomoyo_realpath_from_path+0xb6/0x690 [ 128.389898][ T6221] tomoyo_check_open_permission+0x2af/0x3c0 [ 128.389939][ T6221] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 128.389993][ T6221] ? hook_file_open+0x24e/0x7a0 [ 128.390061][ T6221] ? path_get+0x61/0x80 [ 128.390112][ T6221] tomoyo_file_open+0x6b/0x90 [ 128.390166][ T6221] security_file_open+0xb5/0x1e0 [ 128.390208][ T6221] do_dentry_open+0x5aa/0x1660 [ 128.390254][ T6221] ? security_inode_permission+0xbf/0x250 [ 128.390297][ T6221] vfs_open+0x82/0x3f0 [ 128.390351][ T6221] path_openat+0x208c/0x31a0 [ 128.390409][ T6221] ? __pfx_path_openat+0x10/0x10 [ 128.390475][ T6221] do_file_open+0x20e/0x430 [ 128.390524][ T6221] ? __pfx_do_file_open+0x10/0x10 [ 128.390600][ T6221] ? alloc_fd+0x476/0x790 [ 128.390646][ T6221] ? do_getname+0x191/0x390 [ 128.390699][ T6221] do_sys_openat2+0x10d/0x1e0 [ 128.390750][ T6221] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.390819][ T6221] __x64_sys_openat+0x12d/0x210 [ 128.390873][ T6221] ? __pfx___x64_sys_openat+0x10/0x10 [ 128.390926][ T6221] ? ksys_write+0x1ac/0x250 [ 128.390971][ T6221] ? rcu_is_watching+0x12/0xc0 [ 128.391019][ T6221] do_syscall_64+0x10b/0xf80 [ 128.391070][ T6221] ? clear_bhb_loop+0x40/0x90 [ 128.391112][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.391145][ T6221] RIP: 0033:0x7f093279ce59 [ 128.391172][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.391203][ T6221] RSP: 002b:00007f09336b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.391234][ T6221] RAX: ffffffffffffffda RBX: 00007f0932a15fa0 RCX: 00007f093279ce59 [ 128.391256][ T6221] RDX: 0000000000020802 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 128.391277][ T6221] RBP: 00007f0932832d6f R08: 0000000000000000 R09: 0000000000000000 [ 128.391297][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.391316][ T6221] R13: 00007f0932a16038 R14: 00007f0932a15fa0 R15: 00007ffd2be51838 [ 128.391359][ T6221] [ 128.392389][ T6221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.926385][ T6246] ovs_: entered promiscuous mode [ 130.183351][ T6255] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 130.201071][ T6254] FAULT_INJECTION: forcing a failure. [ 130.201071][ T6254] name failslab, interval 1, probability 0, space 0, times 0 [ 130.223828][ T6254] CPU: 1 UID: 0 PID: 6254 Comm: syz.3.114 Not tainted syzkaller #0 PREEMPT(full) [ 130.223870][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.223889][ T6254] Call Trace: [ 130.223900][ T6254] [ 130.223912][ T6254] dump_stack_lvl+0x100/0x190 [ 130.223954][ T6254] should_fail_ex.cold+0x5/0xa [ 130.223996][ T6254] should_failslab+0xc2/0x120 [ 130.224056][ T6254] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 130.224118][ T6254] ? jbd2__journal_start+0x194/0x6a0 [ 130.224174][ T6254] jbd2__journal_start+0x194/0x6a0 [ 130.224226][ T6254] __ext4_journal_start_sb+0x36d/0x670 [ 130.224262][ T6254] ? ext4_do_writepages+0xc21/0x3f20 [ 130.224309][ T6254] ext4_do_writepages+0xc21/0x3f20 [ 130.224345][ T6254] ? do_raw_spin_lock+0x128/0x260 [ 130.224401][ T6254] ? hrtimer_start_range_ns+0x860/0x1a50 [ 130.224451][ T6254] ? __pfx_ext4_do_writepages+0x10/0x10 [ 130.224509][ T6254] ? ext4_writepages+0x347/0x790 [ 130.224544][ T6254] ext4_writepages+0x347/0x790 [ 130.224583][ T6254] ? __pfx_ext4_writepages+0x10/0x10 [ 130.224632][ T6254] ? do_writepages+0x4b5/0x600 [ 130.224672][ T6254] ? do_writepages+0x4b5/0x600 [ 130.224716][ T6254] ? __pfx_ext4_writepages+0x10/0x10 [ 130.224755][ T6254] do_writepages+0x278/0x600 [ 130.224801][ T6254] ? __pfx_do_writepages+0x10/0x10 [ 130.224841][ T6254] ? do_raw_spin_unlock+0x145/0x1e0 [ 130.224882][ T6254] ? _raw_spin_unlock+0x28/0x50 [ 130.224931][ T6254] filemap_writeback+0x22d/0x2e0 [ 130.224978][ T6254] ? __pfx_filemap_writeback+0x10/0x10 [ 130.225075][ T6254] ? mt_find+0x45e/0x8e0 [ 130.225109][ T6254] ? __pfx_mt_find+0x10/0x10 [ 130.225143][ T6254] file_write_and_wait_range+0xcd/0x140 [ 130.225197][ T6254] ext4_sync_file+0x358/0xb90 [ 130.225233][ T6254] ? __pfx_ext4_sync_file+0x10/0x10 [ 130.225264][ T6254] ? __up_read+0x1d0/0x6e0 [ 130.225303][ T6254] ? __pfx___up_read+0x10/0x10 [ 130.225338][ T6254] ? __do_sys_msync+0x39b/0x590 [ 130.225372][ T6254] ? __pfx_ext4_sync_file+0x10/0x10 [ 130.225402][ T6254] vfs_fsync_range+0x9b/0x190 [ 130.225451][ T6254] __do_sys_msync+0x3ca/0x590 [ 130.225493][ T6254] do_syscall_64+0x10b/0xf80 [ 130.225543][ T6254] ? clear_bhb_loop+0x40/0x90 [ 130.225582][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.225615][ T6254] RIP: 0033:0x7f82a659ce59 [ 130.225642][ T6254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.225674][ T6254] RSP: 002b:00007f82a737b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 130.225706][ T6254] RAX: ffffffffffffffda RBX: 00007f82a6816090 RCX: 00007f82a659ce59 [ 130.225728][ T6254] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 130.225747][ T6254] RBP: 00007f82a6632d6f R08: 0000000000000000 R09: 0000000000000000 [ 130.225767][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.225786][ T6254] R13: 00007f82a6816128 R14: 00007f82a6816090 R15: 00007fffdf8fd288 [ 130.225827][ T6254] [ 130.537330][ T6254] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2022; err -12 [ 131.148825][ T6263] zram0: detected capacity change from 0 to 16 [ 131.997612][ T6289] [U] ^R [ 132.068511][ T6287] FAULT_INJECTION: forcing a failure. [ 132.068511][ T6287] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 132.097870][ T6287] CPU: 1 UID: 0 PID: 6287 Comm: syz.0.123 Not tainted syzkaller #0 PREEMPT(full) [ 132.097911][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.097931][ T6287] Call Trace: [ 132.097942][ T6287] [ 132.097953][ T6287] dump_stack_lvl+0x100/0x190 [ 132.097996][ T6287] should_fail_ex.cold+0x5/0xa [ 132.098037][ T6287] _copy_to_user+0x32/0xd0 [ 132.098072][ T6287] simple_read_from_buffer+0xcb/0x170 [ 132.098121][ T6287] proc_fail_nth_read+0x1af/0x230 [ 132.098175][ T6287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.098229][ T6287] ? rw_verify_area+0xce/0x6d0 [ 132.098262][ T6287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.098313][ T6287] vfs_read+0x1e4/0xb30 [ 132.098360][ T6287] ? __pfx_vfs_read+0x10/0x10 [ 132.098396][ T6287] ? __fget_files+0x215/0x3d0 [ 132.098442][ T6287] ? __fget_files+0x21f/0x3d0 [ 132.098491][ T6287] ksys_read+0x12a/0x250 [ 132.098527][ T6287] ? __pfx_ksys_read+0x10/0x10 [ 132.098566][ T6287] ? rcu_is_watching+0x12/0xc0 [ 132.098611][ T6287] do_syscall_64+0x10b/0xf80 [ 132.098657][ T6287] ? clear_bhb_loop+0x40/0x90 [ 132.098696][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.098728][ T6287] RIP: 0033:0x7f093275d68e [ 132.098753][ T6287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.098782][ T6287] RSP: 002b:00007f09336b8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.098811][ T6287] RAX: ffffffffffffffda RBX: 00007f09336b96c0 RCX: 00007f093275d68e [ 132.098830][ T6287] RDX: 000000000000000f RSI: 00007f09336b90a0 RDI: 000000000000000d [ 132.098849][ T6287] RBP: 00007f09336b9090 R08: 0000000000000000 R09: 0000000000000000 [ 132.098867][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.098889][ T6287] R13: 00007f0932a16038 R14: 00007f0932a15fa0 R15: 00007ffd2be51838 [ 132.098931][ T6287] [ 132.856300][ T6299] FAULT_INJECTION: forcing a failure. [ 132.856300][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 132.877452][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.1.127 Not tainted syzkaller #0 PREEMPT(full) [ 132.877496][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.877535][ T6299] Call Trace: [ 132.877546][ T6299] [ 132.877557][ T6299] dump_stack_lvl+0x100/0x190 [ 132.877599][ T6299] should_fail_ex.cold+0x5/0xa [ 132.877640][ T6299] should_failslab+0xc2/0x120 [ 132.877681][ T6299] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 132.877735][ T6299] ? jbd2__journal_start+0x194/0x6a0 [ 132.877791][ T6299] jbd2__journal_start+0x194/0x6a0 [ 132.877841][ T6299] __ext4_journal_start_sb+0x36d/0x670 [ 132.877877][ T6299] ? ext4_do_writepages+0xc21/0x3f20 [ 132.877919][ T6299] ext4_do_writepages+0xc21/0x3f20 [ 132.877954][ T6299] ? do_raw_spin_lock+0x128/0x260 [ 132.877999][ T6299] ? trace_pelt_se_tp+0x13b/0x190 [ 132.878042][ T6299] ? hrtimer_start_range_ns+0x860/0x1a50 [ 132.878100][ T6299] ? __pfx_ext4_do_writepages+0x10/0x10 [ 132.878153][ T6299] ? ext4_writepages+0x347/0x790 [ 132.878185][ T6299] ext4_writepages+0x347/0x790 [ 132.878223][ T6299] ? __pfx_ext4_writepages+0x10/0x10 [ 132.878271][ T6299] ? do_writepages+0x4b5/0x600 [ 132.878312][ T6299] ? do_writepages+0x4b5/0x600 [ 132.878361][ T6299] ? __pfx_ext4_writepages+0x10/0x10 [ 132.878400][ T6299] do_writepages+0x278/0x600 [ 132.878452][ T6299] ? __pfx_do_writepages+0x10/0x10 [ 132.878493][ T6299] ? do_raw_spin_unlock+0x145/0x1e0 [ 132.878535][ T6299] ? _raw_spin_unlock+0x28/0x50 [ 132.878583][ T6299] filemap_writeback+0x22d/0x2e0 [ 132.878631][ T6299] ? __pfx_filemap_writeback+0x10/0x10 [ 132.878723][ T6299] ? mt_find+0x45e/0x8e0 [ 132.878757][ T6299] ? __pfx_mt_find+0x10/0x10 [ 132.878791][ T6299] file_write_and_wait_range+0xcd/0x140 [ 132.878846][ T6299] ext4_sync_file+0x358/0xb90 [ 132.878883][ T6299] ? __pfx_ext4_sync_file+0x10/0x10 [ 132.878914][ T6299] ? __up_read+0x1d0/0x6e0 [ 132.878952][ T6299] ? __pfx___up_read+0x10/0x10 [ 132.878988][ T6299] ? __do_sys_msync+0x39b/0x590 [ 132.879023][ T6299] ? __pfx_ext4_sync_file+0x10/0x10 [ 132.879054][ T6299] vfs_fsync_range+0x9b/0x190 [ 132.879113][ T6299] __do_sys_msync+0x3ca/0x590 [ 132.879155][ T6299] do_syscall_64+0x10b/0xf80 [ 132.879204][ T6299] ? clear_bhb_loop+0x40/0x90 [ 132.879246][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.879280][ T6299] RIP: 0033:0x7effc659ce59 [ 132.879306][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.879338][ T6299] RSP: 002b:00007effc73a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 132.879370][ T6299] RAX: ffffffffffffffda RBX: 00007effc6816090 RCX: 00007effc659ce59 [ 132.879392][ T6299] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 132.879413][ T6299] RBP: 00007effc6632d6f R08: 0000000000000000 R09: 0000000000000000 [ 132.879433][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.879452][ T6299] R13: 00007effc6816128 R14: 00007effc6816090 R15: 00007fff8172db28 [ 132.879496][ T6299] [ 133.198725][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.205744][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.266156][ T6299] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2022; err -12 [ 133.535445][ T6272] kexec: Could not allocate control_code_buffer [ 133.680248][ T6312] binder: 6311:6312 ioctl c0306201 0 returned -14 [ 135.339226][ T6345] netlink: 25 bytes leftover after parsing attributes in process `syz.3.143'. [ 135.458657][ T6347] [U] ^R [ 136.034647][ T6354] netlink: 330 bytes leftover after parsing attributes in process `syz.0.145'. [ 138.342885][ T6399] FAULT_INJECTION: forcing a failure. [ 138.342885][ T6399] name failslab, interval 1, probability 0, space 0, times 0 [ 138.378368][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT(full) [ 138.378409][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.378428][ T6399] Call Trace: [ 138.378439][ T6399] [ 138.378457][ T6399] dump_stack_lvl+0x100/0x190 [ 138.378499][ T6399] should_fail_ex.cold+0x5/0xa [ 138.378540][ T6399] ? tomoyo_encode2+0xfb/0x3c0 [ 138.378579][ T6399] should_failslab+0xc2/0x120 [ 138.378619][ T6399] __kmalloc_noprof+0xe0/0x850 [ 138.378648][ T6399] ? rcu_is_watching+0x12/0xc0 [ 138.378695][ T6399] tomoyo_encode2+0xfb/0x3c0 [ 138.378742][ T6399] tomoyo_encode+0x29/0x50 [ 138.378782][ T6399] tomoyo_realpath_from_path+0x18c/0x690 [ 138.378835][ T6399] tomoyo_path_number_perm+0x23c/0x580 [ 138.378869][ T6399] ? tomoyo_path_number_perm+0x22e/0x580 [ 138.378907][ T6399] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 138.378984][ T6399] ? find_held_lock+0x2b/0x80 [ 138.379026][ T6399] ? __fget_files+0x215/0x3d0 [ 138.379062][ T6399] ? hook_file_ioctl_common+0x149/0x410 [ 138.379097][ T6399] ? __fget_files+0x215/0x3d0 [ 138.379142][ T6399] ? __fget_files+0x21f/0x3d0 [ 138.379188][ T6399] security_file_ioctl+0xd3/0x230 [ 138.379226][ T6399] __x64_sys_ioctl+0xb7/0x210 [ 138.379263][ T6399] do_syscall_64+0x10b/0xf80 [ 138.379311][ T6399] ? clear_bhb_loop+0x40/0x90 [ 138.379350][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.379386][ T6399] RIP: 0033:0x7f82a659ce59 [ 138.379412][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.379442][ T6399] RSP: 002b:00007f82a739c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.379478][ T6399] RAX: ffffffffffffffda RBX: 00007f82a6815fa0 RCX: 00007f82a659ce59 [ 138.379499][ T6399] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000006 [ 138.379518][ T6399] RBP: 00007f82a739c090 R08: 0000000000000000 R09: 0000000000000000 [ 138.379537][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.379555][ T6399] R13: 00007f82a6816038 R14: 00007f82a6815fa0 R15: 00007fffdf8fd288 [ 138.379598][ T6399] [ 138.381925][ T6399] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.531451][ T6417] capability: warning: `syz.3.160' uses 32-bit capabilities (legacy support in use) [ 140.848605][ T6428] FAULT_INJECTION: forcing a failure. [ 140.848605][ T6428] name failslab, interval 1, probability 0, space 0, times 0 [ 140.906131][ T6428] CPU: 1 UID: 0 PID: 6428 Comm: syz.3.163 Not tainted syzkaller #0 PREEMPT(full) [ 140.906177][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.906198][ T6428] Call Trace: [ 140.906209][ T6428] [ 140.906239][ T6428] dump_stack_lvl+0x100/0x190 [ 140.906294][ T6428] should_fail_ex.cold+0x5/0xa [ 140.906337][ T6428] ? get_callchain_buffers+0x123/0x380 [ 140.906383][ T6428] should_failslab+0xc2/0x120 [ 140.906423][ T6428] __kmalloc_noprof+0xe0/0x850 [ 140.906455][ T6428] ? __pfx_rcu_is_watching+0x10/0x10 [ 140.906510][ T6428] get_callchain_buffers+0x123/0x380 [ 140.906554][ T6428] ? bpf_lsm_capable+0x9/0x10 [ 140.906592][ T6428] ? security_capable+0x80/0x260 [ 140.906646][ T6428] stack_map_alloc+0x316/0x610 [ 140.906693][ T6428] ? __pfx_stack_map_mem_usage+0x10/0x10 [ 140.906735][ T6428] map_create+0x84e/0x2bc0 [ 140.906783][ T6428] ? futex_unqueue+0x13d/0x2c0 [ 140.906820][ T6428] ? __futex_wait+0x256/0x300 [ 140.906873][ T6428] ? __pfx_map_create+0x10/0x10 [ 140.906922][ T6428] ? __might_fault+0xc5/0x140 [ 140.906971][ T6428] ? __might_fault+0xc5/0x140 [ 140.907048][ T6428] __sys_bpf+0x2091/0x4b90 [ 140.907088][ T6428] ? __pfx___sys_bpf+0x10/0x10 [ 140.907122][ T6428] ? __pfx_futex_wait+0x10/0x10 [ 140.907176][ T6428] ? ksys_write+0x190/0x250 [ 140.907244][ T6428] ? do_futex+0x192/0x350 [ 140.907305][ T6428] ? xfd_validate_state+0x129/0x190 [ 140.907353][ T6428] __x64_sys_bpf+0x7b/0xc0 [ 140.907389][ T6428] ? lockdep_hardirqs_on+0x78/0x100 [ 140.907440][ T6428] do_syscall_64+0x10b/0xf80 [ 140.907488][ T6428] ? clear_bhb_loop+0x40/0x90 [ 140.907529][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.907564][ T6428] RIP: 0033:0x7f82a659ce59 [ 140.907590][ T6428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.907622][ T6428] RSP: 002b:00007f82a739c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.907654][ T6428] RAX: ffffffffffffffda RBX: 00007f82a6815fa0 RCX: 00007f82a659ce59 [ 140.907676][ T6428] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 140.907696][ T6428] RBP: 00007f82a6632d6f R08: 0000000000000000 R09: 0000000000000000 [ 140.907716][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.907735][ T6428] R13: 00007f82a6816038 R14: 00007f82a6815fa0 R15: 00007fffdf8fd288 [ 140.907779][ T6428] [ 141.180141][ T6430] sysfs_service_op_show: Client not running :-5: [ 141.831081][ T6436] futex_wake_op: syz.3.168 tries to shift op by -2048; fix this program [ 142.795957][ T6451] FAULT_INJECTION: forcing a failure. [ 142.795957][ T6451] name failslab, interval 1, probability 0, space 0, times 0 [ 142.855474][ T6451] CPU: 1 UID: 0 PID: 6451 Comm: syz.2.171 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.855526][ T6451] Tainted: [L]=SOFTLOCKUP [ 142.855539][ T6451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.855559][ T6451] Call Trace: [ 142.855570][ T6451] [ 142.855583][ T6451] dump_stack_lvl+0x100/0x190 [ 142.855626][ T6451] should_fail_ex.cold+0x5/0xa [ 142.855669][ T6451] should_failslab+0xc2/0x120 [ 142.855711][ T6451] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 142.855767][ T6451] ? jbd2__journal_start+0x194/0x6a0 [ 142.855825][ T6451] jbd2__journal_start+0x194/0x6a0 [ 142.855879][ T6451] __ext4_journal_start_sb+0x36d/0x670 [ 142.855915][ T6451] ? ext4_do_writepages+0xc21/0x3f20 [ 142.855959][ T6451] ext4_do_writepages+0xc21/0x3f20 [ 142.855996][ T6451] ? do_raw_spin_lock+0x128/0x260 [ 142.856041][ T6451] ? find_held_lock+0x2b/0x80 [ 142.856107][ T6451] ? hrtimer_start_range_ns+0x860/0x1a50 [ 142.856162][ T6451] ? __pfx_ext4_do_writepages+0x10/0x10 [ 142.856220][ T6451] ? ext4_writepages+0x347/0x790 [ 142.856256][ T6451] ext4_writepages+0x347/0x790 [ 142.856295][ T6451] ? __pfx_ext4_writepages+0x10/0x10 [ 142.856346][ T6451] ? do_writepages+0x4b5/0x600 [ 142.856388][ T6451] ? do_writepages+0x4b5/0x600 [ 142.856435][ T6451] ? __pfx_ext4_writepages+0x10/0x10 [ 142.856475][ T6451] do_writepages+0x278/0x600 [ 142.856523][ T6451] ? __pfx_do_writepages+0x10/0x10 [ 142.856564][ T6451] ? do_raw_spin_unlock+0x145/0x1e0 [ 142.856606][ T6451] ? _raw_spin_unlock+0x28/0x50 [ 142.856656][ T6451] filemap_writeback+0x22d/0x2e0 [ 142.856704][ T6451] ? __pfx_filemap_writeback+0x10/0x10 [ 142.856795][ T6451] ? mt_find+0x45e/0x8e0 [ 142.856829][ T6451] ? __pfx_mt_find+0x10/0x10 [ 142.856863][ T6451] file_write_and_wait_range+0xcd/0x140 [ 142.856919][ T6451] ext4_sync_file+0x358/0xb90 [ 142.856956][ T6451] ? __pfx_ext4_sync_file+0x10/0x10 [ 142.856988][ T6451] ? __up_read+0x1d0/0x6e0 [ 142.857028][ T6451] ? __pfx___up_read+0x10/0x10 [ 142.857071][ T6451] ? __do_sys_msync+0x39b/0x590 [ 142.857107][ T6451] ? __pfx_ext4_sync_file+0x10/0x10 [ 142.857139][ T6451] vfs_fsync_range+0x9b/0x190 [ 142.857191][ T6451] __do_sys_msync+0x3ca/0x590 [ 142.857233][ T6451] do_syscall_64+0x10b/0xf80 [ 142.857283][ T6451] ? clear_bhb_loop+0x40/0x90 [ 142.857326][ T6451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.857361][ T6451] RIP: 0033:0x7ff25ab9ce59 [ 142.857388][ T6451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.857420][ T6451] RSP: 002b:00007ff25b96f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 142.857451][ T6451] RAX: ffffffffffffffda RBX: 00007ff25ae16090 RCX: 00007ff25ab9ce59 [ 142.857473][ T6451] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 142.857495][ T6451] RBP: 00007ff25ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 142.857516][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.857535][ T6451] R13: 00007ff25ae16128 R14: 00007ff25ae16090 R15: 00007ffcecce0778 [ 142.857578][ T6451] [ 143.225065][ T6451] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2022; err -12 [ 143.888586][ T6466] MTRR 1 not used [ 146.904248][ T6518] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 147.621968][ T6530] netlink: 342 bytes leftover after parsing attributes in process `syz.2.195'. [ 147.662871][ T6530] netlink: 342 bytes leftover after parsing attributes in process `syz.2.195'. [ 147.692918][ T6530] netlink: 342 bytes leftover after parsing attributes in process `syz.2.195'. [ 147.727720][ T6530] netlink: 342 bytes leftover after parsing attributes in process `syz.2.195'. [ 147.756567][ T6530] netlink: 342 bytes leftover after parsing attributes in process `syz.2.195'. [ 147.959378][ T6536] BUG: unable to handle page fault for address: fffff52000926200 [ 147.959408][ T6536] #PF: supervisor read access in kernel mode [ 147.959428][ T6536] #PF: error_code(0x0000) - not-present page [ 147.959451][ T6536] PGD 23fff5067 P4D 23fff5067 PUD 1c6b2067 PMD 23756067 PTE 0 [ 147.959523][ T6536] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 147.959562][ T6536] CPU: 1 UID: 0 PID: 6536 Comm: syz.0.196 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.959609][ T6536] Tainted: [L]=SOFTLOCKUP [ 147.959621][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.959640][ T6536] RIP: 0010:sys_fillrect+0xc77/0x1910 [ 147.959697][ T6536] Code: 00 00 48 8d 3c f5 00 00 00 00 48 89 44 24 20 48 89 7c 24 10 48 89 74 24 30 eb 03 45 89 ef e8 b0 f9 c2 fc 4c 89 e1 48 c1 e9 03 <42> 80 3c 31 00 0f 85 c0 0a 00 00 48 8b 44 24 08 49 89 2c 24 49 8d [ 147.959730][ T6536] RSP: 0018:ffffc900044975a8 EFLAGS: 00010a06 [ 147.959758][ T6536] RAX: 0000000000011fb8 RBX: 0000000000000180 RCX: 1ffff92000926200 [ 147.959779][ T6536] RDX: 0000000000080000 RSI: ffffffff85451110 RDI: 0000000000000010 [ 147.959801][ T6536] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000004 [ 147.959821][ T6536] R10: 0000000000000180 R11: 0000000000000000 R12: ffffc90004931000 [ 147.959842][ T6536] R13: ffffc90004931000 R14: dffffc0000000000 R15: 0000000000000004 [ 147.959865][ T6536] FS: 00007f09336776c0(0000) GS:ffff888124477000(0000) knlGS:0000000000000000 [ 147.959897][ T6536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.959920][ T6536] CR2: fffff52000926200 CR3: 00000000331f2000 CR4: 00000000003526f0 [ 147.959943][ T6536] Call Trace: [ 147.959953][ T6536] [ 147.959974][ T6536] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 147.960019][ T6536] bit_clear+0x17d/0x220 [ 147.960061][ T6536] ? __pfx_bit_clear+0x10/0x10 [ 147.960103][ T6536] ? fb_get_color_depth+0x120/0x250 [ 147.960141][ T6536] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.960196][ T6536] __fbcon_clear+0x633/0x760 [ 147.960235][ T6536] ? __pfx_bit_clear+0x10/0x10 [ 147.960291][ T6536] fbcon_scroll+0x48b/0x650 [ 147.960348][ T6536] con_scroll+0x464/0x690 [ 147.960402][ T6536] csi_ECMA.constprop.0+0x1238/0x3b60 [ 147.960466][ T6536] ? find_held_lock+0x2b/0x80 [ 147.960513][ T6536] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 147.960576][ T6536] do_con_write+0x3946/0x4a10 [ 147.960631][ T6536] ? trace_contention_end+0x122/0x170 [ 147.960678][ T6536] ? __pfx_do_con_write+0x10/0x10 [ 147.960742][ T6536] con_write+0x23/0xb0 [ 147.960782][ T6536] n_tty_write+0x431/0x11c0 [ 147.960829][ T6536] ? __pfx_n_tty_write+0x10/0x10 [ 147.960888][ T6536] ? trace_kmalloc+0xe3/0x110 [ 147.960930][ T6536] ? __pfx_woken_wake_function+0x10/0x10 [ 147.960973][ T6536] ? rcu_is_watching+0x12/0xc0 [ 147.961014][ T6536] ? file_tty_write.isra.0+0x694/0x890 [ 147.961066][ T6536] ? kfree+0x1dd/0x6c0 [ 147.961115][ T6536] ? __pfx_n_tty_write+0x10/0x10 [ 147.961152][ T6536] file_tty_write.isra.0+0x4d2/0x890 [ 147.961209][ T6536] redirected_tty_write+0xd4/0x120 [ 147.961263][ T6536] vfs_write+0x6ac/0x1070 [ 147.961303][ T6536] ? __pfx_redirected_tty_write+0x10/0x10 [ 147.961359][ T6536] ? __pfx_vfs_write+0x10/0x10 [ 147.961395][ T6536] ? find_held_lock+0x2b/0x80 [ 147.961451][ T6536] ksys_write+0x12a/0x250 [ 147.961505][ T6536] ? __pfx_ksys_write+0x10/0x10 [ 147.961545][ T6536] ? kcov_ioctl+0x16a/0x720 [ 147.961594][ T6536] ? rcu_is_watching+0x12/0xc0 [ 147.961638][ T6536] do_syscall_64+0x10b/0xf80 [ 147.961689][ T6536] ? clear_bhb_loop+0x40/0x90 [ 147.961727][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.961762][ T6536] RIP: 0033:0x7f093279ce59 [ 147.961788][ T6536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.961821][ T6536] RSP: 002b:00007f0933677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.961854][ T6536] RAX: ffffffffffffffda RBX: 00007f0932a16180 RCX: 00007f093279ce59 [ 147.961876][ T6536] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000004 [ 147.961897][ T6536] RBP: 00007f0932832d6f R08: 0000000000000000 R09: 0000000000000000 [ 147.961917][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.961937][ T6536] R13: 00007f0932a16218 R14: 00007f0932a16180 R15: 00007ffd2be51838 [ 147.961970][ T6536] [ 147.961981][ T6536] Modules linked in: [ 147.962011][ T6536] CR2: fffff52000926200 [ 147.962034][ T6536] ---[ end trace 0000000000000000 ]--- [ 147.962058][ T6536] RIP: 0010:sys_fillrect+0xc77/0x1910 [ 147.962128][ T6536] Code: 00 00 48 8d 3c f5 00 00 00 00 48 89 44 24 20 48 89 7c 24 10 48 89 74 24 30 eb 03 45 89 ef e8 b0 f9 c2 fc 4c 89 e1 48 c1 e9 03 <42> 80 3c 31 00 0f 85 c0 0a 00 00 48 8b 44 24 08 49 89 2c 24 49 8d [ 147.962162][ T6536] RSP: 0018:ffffc900044975a8 EFLAGS: 00010a06 [ 147.962210][ T6536] RAX: 0000000000011fb8 RBX: 0000000000000180 RCX: 1ffff92000926200 [ 147.962233][ T6536] RDX: 0000000000080000 RSI: ffffffff85451110 RDI: 0000000000000010 [ 147.962254][ T6536] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000004 [ 147.962275][ T6536] R10: 0000000000000180 R11: 0000000000000000 R12: ffffc90004931000 [ 147.962297][ T6536] R13: ffffc90004931000 R14: dffffc0000000000 R15: 0000000000000004 [ 147.962319][ T6536] FS: 00007f09336776c0(0000) GS:ffff888124477000(0000) knlGS:0000000000000000 [ 147.962351][ T6536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.962374][ T6536] CR2: fffff52000926200 CR3: 00000000331f2000 CR4: 00000000003526f0 [ 147.962400][ T6536] Kernel panic - not syncing: Fatal exception [ 147.962994][ T6536] Kernel Offset: disabled