last executing test programs: 2m30.593031217s ago: executing program 3 (id=386): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r1, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r2 = epoll_create$auto(0x1) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) r3 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r3, 0x0, 0x7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x830) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0xa00) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r6) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) 2m29.857950261s ago: executing program 3 (id=391): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r0, 0x0, 0xfffffdf1) fsetxattr$auto(r0, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r2, 0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r3, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/stack\x00', 0x501080, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r5) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40040) read$auto_proc_single_file_operations_base(r4, &(0x7f0000000ac0)=""/4096, 0x1000) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) r8 = socket(0x15, 0x5, 0x0) recvmmsg$auto(r8, &(0x7f0000001180)={{0x0, 0x3, &(0x7f0000000140)={0x0, 0x100}, 0x3, 0x0, 0x9, 0xc201}, 0x100}, 0x3, 0xb9, &(0x7f00000011c0)={0x0, 0x7}) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000100", @ANYRES16=r7, @ANYBLOB="0b1726bd7000fddbdf25150000001800018014000200767863616e3100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x4000840) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) close_range$auto(0x2, 0xa, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 2m28.907468873s ago: executing program 3 (id=395): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) r0 = io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) socket(0xa, 0x3, 0x3b) read$auto_proc_uid_map_operations_base(r0, &(0x7f0000000280)=""/253, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r1 = socket(0x2, 0x1, 0x0) ioctl$auto_FIONREAD(r1, 0x541b, 0x8) socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/xfrm0/ioam6_enabled\x00', 0x141241, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x45b9) write$auto(r3, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x4, 0x4, 0x0, 0x3}, 0xa8) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) 2m28.302842268s ago: executing program 3 (id=396): socket(0x11, 0x80003, 0x300) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/030/001\x00', 0x4000, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x109801, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000280), 0x109201, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0xeda5, 0xe) ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc018ae85, &(0x7f00000000c0)={0x2}) madvise$auto(0x0, 0x200007, 0x19) read$auto_nst_seq_fops_netdebug(0xffffffffffffffff, &(0x7f0000001680)=""/222, 0xde) fanotify_init$auto(0x65, 0x2) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x3) 2m27.78441733s ago: executing program 3 (id=397): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r1, 0x545c, 0x0) io_destroy$auto(0x70f) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) io_uring_setup$auto(0xa9, &(0x7f0000000080)={0x80000003, 0xfff, 0x2, 0x6, 0x400085, 0xc, r0, [0x8, 0x4, 0xd], {0xd74c, 0x10000, 0x6, 0xb, 0x2, 0x2, 0x4, 0x406, 0x17c}, {0xff, 0x1, 0x10001, 0x7, 0x5, 0x44, 0x8, 0x400005, 0xa88}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000240)={[0xe9, 0x9, 0x3, 0x1, 0x5, 0x721, 0x6, 0x8, 0x9, 0x100000000000000b, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x291805dd]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x4) mmap$auto(0x0, 0x30009, 0x0, 0x4000eb2, 0x401, 0x8000) mkdir$auto(0x0, 0x1) unshare$auto(0x40000080) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(r1, r1, 0x6) 2m25.493559648s ago: executing program 3 (id=407): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x400, 0x0) mmap$auto(0x3, 0xfbffffffffffffff, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0xa, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000ac0)="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") mmap$auto(0xfffffffffffffffe, 0xb, 0xdf, 0x9b7f, 0x2, 0x1) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000180), 0x66c001, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/mounts\x00', 0x6046c1, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/024/001\x00', 0x8600, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x21, 0x9, 0xfffffffd, &(0x7f0000000100)}) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x14be02, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000180)) ioctl$auto(0xc8, 0x800454de, 0x5c8d) read$auto(r2, 0x0, 0x2) syz_clone(0x8000000, &(0x7f0000000780)="052cba9e8031ae313b68127ce075e6b49ca9f4cd1c0e510a6eaf190a372eaeabbf7dd73f533c8699f9600dcd83392c03f09905f3be130b082344a7af2cbebb5624759a60425d37fc5df157a836c5129ecdabe98037bc723af1bb52f4657a653af899670ab73f9261fe7f9612953bec0d0f6f724160e1b4de2e8afd3dd24d32ba32d7954a154f064d7c47aab18a416937f3195235880a987801218ebae65df2f4ccef0fb36621cea755d3531fcf6f01f9e6c371c588ee79b56949e95ddfb4d850e90254f9bdb09e10d7e0cac3e25bd47f953c95b826e13152e320f91c9e47f7b44a1afffa9db0b20676f5315f62a8bef600ca3d8c95faf1f12510c5a725d0d5bc85e87b88978e984bbced295315", 0x25, &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000480)="0a08e2bafaa0dbec04d3858ac4b1c31555a61bb36bee2289f3da61c9de10eb4cf963a453c4511a9fb307b2ec026784077c8665e9aed313fdffffffffffffff31444b14a5813b4b213eddefed0fe3bf1460a3c9cc712f036f82492dc0fcec87df247be6b5369154fa0e4da6a8c1901c295736a46be2f77d4829318aa11eebd6d3700c2c0744750634df07a2942a18e71ead3acecf1b99b2e5ef0df22d87ccd13951b18027ccfef785c28c7c91aaed3c8d5934d9adea3479c82a8c852d29409e90c65b") sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, 0x0, 0x4008004) write$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000000680)="b0ddb52641e211c13804004b3fdc570483b34acaacd90f35c9ec62ee8d8e39b1f20fd7f4a3172fa001ad5970f811ad7bf38afc369a12efc12db31ca64d1a49085fed84ef192c4a8846ac0e5c2bc8c88a6d77ae4b631e7b279dccae978de7f51abafe301bf17c203a996239b18e45bd37263fd821c0d725b13c26564ce76663c325f0556060f25c369c5be7b08c1b45bdf71ce852940775be2784cba54c913d4c120580db75a003b3bf6ac861be35753408db0f76ed0858fb52c7d6934e233378000346dc2852255915e0f569b8dadaf723fa97d903c9f4c53f157e33f867081b", 0xe0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x301183, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x800000000007111}, 0x8) syz_clone3(&(0x7f0000000280)={0xe4194880, 0x0, 0x0, 0x0, {0x18}, 0x0, 0xfffffffffffffed9, 0x0, 0x0}, 0x58) 2m10.103773928s ago: executing program 32 (id=407): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x400, 0x0) mmap$auto(0x3, 0xfbffffffffffffff, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0xa, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000ac0)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528aa081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea6088ffffffffffffff7fc0551386501763ad098e0000000000000000399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb66bf56ed756851079631f5858d7fa38c2e0c72b380fa6efbca845bde90f767270800000000000000351374271d98f3e58d18bbe4e7965bd4f79861bc64fccd4e81cbce8a6ac5596c001b2b7e03a68686586eaca83ce8e93e8ab5cd19c8b97ba90b0b03f733b48b509f97540a30802b0939c04f2c94383d505398fe84d184d88669f857c0c5b95d4ab141cf92c1d27704131a502012db6f22c1d10bc91d85b35d6ca1f6629fee00bcdf7f32b4f7ba687b500b78cf3780ce21af8ff523b72a0a5c2307f37c4afa430ed2a57ebf615f132eaf67eda2e78b5f100ad1f18f65ddb3ecf03a3b32b86fc9d78c1e7973febe32671b816884245b26975ff4b1e485c69a4164bdaf039fa87c90a952e866f6143b66add1c15ed117cff2753f12cca0587ed4ca9808f4") mmap$auto(0xfffffffffffffffe, 0xb, 0xdf, 0x9b7f, 0x2, 0x1) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000180), 0x66c001, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/mounts\x00', 0x6046c1, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/024/001\x00', 0x8600, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x21, 0x9, 0xfffffffd, &(0x7f0000000100)}) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x14be02, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000180)) ioctl$auto(0xc8, 0x800454de, 0x5c8d) read$auto(r2, 0x0, 0x2) syz_clone(0x8000000, &(0x7f0000000780)="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", 0x25, &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000480)="0a08e2bafaa0dbec04d3858ac4b1c31555a61bb36bee2289f3da61c9de10eb4cf963a453c4511a9fb307b2ec026784077c8665e9aed313fdffffffffffffff31444b14a5813b4b213eddefed0fe3bf1460a3c9cc712f036f82492dc0fcec87df247be6b5369154fa0e4da6a8c1901c295736a46be2f77d4829318aa11eebd6d3700c2c0744750634df07a2942a18e71ead3acecf1b99b2e5ef0df22d87ccd13951b18027ccfef785c28c7c91aaed3c8d5934d9adea3479c82a8c852d29409e90c65b") sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, 0x0, 0x4008004) write$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000000680)="b0ddb52641e211c13804004b3fdc570483b34acaacd90f35c9ec62ee8d8e39b1f20fd7f4a3172fa001ad5970f811ad7bf38afc369a12efc12db31ca64d1a49085fed84ef192c4a8846ac0e5c2bc8c88a6d77ae4b631e7b279dccae978de7f51abafe301bf17c203a996239b18e45bd37263fd821c0d725b13c26564ce76663c325f0556060f25c369c5be7b08c1b45bdf71ce852940775be2784cba54c913d4c120580db75a003b3bf6ac861be35753408db0f76ed0858fb52c7d6934e233378000346dc2852255915e0f569b8dadaf723fa97d903c9f4c53f157e33f867081b", 0xe0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x301183, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x800000000007111}, 0x8) syz_clone3(&(0x7f0000000280)={0xe4194880, 0x0, 0x0, 0x0, {0x18}, 0x0, 0xfffffffffffffed9, 0x0, 0x0}, 0x58) 8.449908204s ago: executing program 2 (id=794): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r0, 0x0, 0xfffffdf1) fsetxattr$auto(r0, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) r2 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r2, 0x0, 0x0) sendmmsg$auto(r1, 0x0, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r3 = memfd_create$auto(0x0, 0x4) fallocate$auto(r3, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x501080, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ioam6(0x0, r5) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40040) read$auto_proc_single_file_operations_base(r4, &(0x7f0000000ac0)=""/4096, 0x1000) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) r8 = socket(0x15, 0x5, 0x0) recvmmsg$auto(r8, &(0x7f0000001180)={{0x0, 0x3, &(0x7f0000000140)={0x0, 0x100}, 0x3, 0x0, 0x9, 0xc201}, 0x100}, 0x3, 0xb9, &(0x7f00000011c0)={0x0, 0x7}) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000100", @ANYRES16=r7, @ANYBLOB="0b1726bd7000fddbdf25150000001800018014000200767863616e3100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x4000840) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) close_range$auto(0x2, 0xa, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 7.446636122s ago: executing program 2 (id=798): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto_PR_SET_MM_BRK(0x5, 0x7, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x6, 0x3ffc0000000000, 0x40eb2, r0, 0x308000000000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0x2, 0x0) r2 = socket(0x2b, 0x5, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x0, 0x0) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0xb, 0x0, 0x5, 0x10000}, 0x1}, 0x5, 0x1ffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0xffffffff, 0x0, 0x4005, &(0x7f0000000b40)={{0xffffffffffffffff}, {0xfffffffffffff4c5, 0x2}, 0x21, 0x10000, 0x0, 0xdd0, 0x7, 0x400000000000010, 0x0, 0x4, 0x20000000000007, 0x1, 0x100000, 0x96bd, 0x10000000000087ff, 0x6}) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x3, 0xe983, 0x1ff, 0xeb1, r1, 0x1404) r4 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24044841}, 0x4884) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf25020001000800030080004000080002"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.580169497s ago: executing program 2 (id=800): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0x5ecc52ad, 0x7, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r2, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0xb, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1d48, &(0x7f0000000180)={0x7fffefff, 0x5, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x9, 0x8000000400000001}, {0x8, 0x1, 0x10000052, 0x7, 0x11, 0x101, 0x0, 0x2, 0x3}}) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd7040ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x85, &(0x7f0000000100)={0x0, 0x100000000000fc2}, 0x2, &(0x7f0000000080)='\x00\x00\x00', 0x7, 0xa505}, 0x800}, 0x9, 0x400c) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/038/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) 6.576172595s ago: executing program 1 (id=801): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_submit$auto(0x2, 0xfffffffffffff096, &(0x7f0000000040)=0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x641, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x22, 0x0, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0xe, 0x3ff}, {0x10, 0xd}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SG_EMULATED_HOST2(0xffffffffffffffff, 0x2203, 0x0) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram11/events_poll_msecs\x00', 0x20681, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0xe, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_virt_wifi/base_reachable_time\x00', 0x9) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x8901, 0x0) ioctl$auto(r3, 0xc0105502, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000180)) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r2, 0x80044dff, &(0x7f0000000500)="abea1d71a22c2fb47a06ba2bf74770129de95f60df18198cbb6b7c63d1dc26560bf6d396320c7c001b03e8532e8cc9fded75360724716eab7bb45d899f44452bf543d452757a01dc0526e09ad69a34b6ea5b450e0a502f5c8d7fd9ab35c18a010984f5c84b24c94090f029f95ed37dbf4c1036ad0d41847ace2f390aea14004cebc87293069ac84bec173366d2f85305b4b5347443eb925aaa34d0726444e36d0231d2f287ad90b7c6851144") 6.326475201s ago: executing program 4 (id=802): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x4000007f) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000540)='q', 0x1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) chroot$auto(0xfffffffffffffffd) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4000011) r3 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0104d2e8a2d9ccba4cab7d68b3329d5d537ed7d394dc65451d5ab72e45beb9c5757adb50e7580f91554b8d3279a970060dba4569aef0bf4f9f7727bc6a2a3808d7ff51d891a12e1d6b2413300e38982aa820321c70829a73348179795952632128", @ANYRES16, @ANYRESHEX=r3], 0x1c}, 0x1, 0x0, 0x0, 0x854}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(r3, &(0x7f0000000240)={{0x0, 0x1bff, &(0x7f0000000600)={0x0, 0x8000000000000000}, 0x4000001, 0x0, 0x5, 0x9}, 0x200007}, 0x2, 0x20000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x4, 0xee01, 0x0, 0x2, 0xb, 0x3, 0xcd8e}, &(0x7f0000000280)=0xf8, &(0x7f00000002c0), 0x8, 0x356, 0x3, 0x800000000000000, 0x81, 0x1, 0xffff, 0x1000, @raw=0x389}) prctl$auto(0x4430, 0x1, 0x4, 0x400000005, 0x400000000007) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x101, 0x7fff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto(r5, &(0x7f0000000000)='\x00', 0x2) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\x9c\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xe9\xc31\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) 5.488858083s ago: executing program 1 (id=803): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r1 = epoll_create$auto(0x1) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r2, 0x0, 0x7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x830) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0xa00) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r5) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) 5.259879113s ago: executing program 4 (id=804): mmap$auto(0x40000, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x0) unshare$auto(0x40000080) setfsuid$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x401, 0x3ff, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r1 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000000c0)=@enable_stats={0x6}, 0xc0000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000000340)=""/4106, 0x100a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x5) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-touch3\x00', 0x16ba00, 0x0) ioctl$auto(r3, 0x80885659, r3) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x8000) mmap$auto(0x0, 0x400000400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x2, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) semget$auto(0xd, 0x33, 0x6) r4 = ioctl$auto_TUNSETGROUP(r1, 0x400454ce, &(0x7f0000000180)=0x7) mmap$auto(0x0, 0x20009, 0x10000df, 0xff, r4, 0x7ffd) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r5, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) 4.835189097s ago: executing program 2 (id=805): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000480)='\xbe$>\x04L`\xb0D\xb0\xbe{\xca\xd4\x17x\xef\x00\x92\x0e\x05\xbdm\x9a\x90\xb1\xf4K\xe06ECf\xf9\xa5\x88\xa8\x13U\xe0\xbcV\xc2\x003\x86l\xbb\f\xbb\xbd\xbb\x16\xf0\v\xd8\xe7\x95\xdf7\xa5\xc8\xac\xce\xcb\xf3\xed\xfbA\xf9N~\'\b \xc7\x7f\xe7\xce\tF\x99\xcf\x92s\x0f\xa5\xc7E9w\x80\x01\x00\x00\x00\xb9\x8f\x1c\xbc\xb5\x1b\x80\x1b1Z\xd9\xae\x1bI\x8f3\xd4@\x1ce\xef~\xef}\v&\x11\xcd\xe2{\xc9\xa5\xba\x05\'\x13\x1d\x00\x00\xd9T\x86\xf0x\x84{F/\xc3\xa7i\xa6\x9a\xf2P\x97R\xfa\xe8dt\xf5\x91f\x06\xff\x7f\x00\x00\x00\x00\x00\x004\x13j\x0e\x8b\xfb\xabn\xbf\xa9\xfe\x19{\xca\x8e\xb3w\xc3\x14\x05n\x97\xaa\x8d\xcfn\x02\x00\x00\x00\xc1\x8e\x10M?\xae\x93\xeeb\xb3\x00'/221, 0x6) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x4, 0x3, 0x4, 0x2d) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) r4 = setfsuid$auto(0xee00) fchown$auto(r3, r4, 0xffffffffffffffff) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x100006, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) fcntl$auto_F_RDLCK(r2, 0x1ff1, 0x0) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000003c0)='/proc/self/net/dev_snmp6/veth0_to_hsr\x00', &(0x7f0000000400)={0xc, 0x1, "7ba266e92bc849f45f630f02"}, &(0x7f0000000480), 0x200) keyctl$auto(0x9, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8) r5 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x170) execveat$auto(r5, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) mmap$auto(0x0, 0x2020009, 0x100000000000003, 0xebe, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) 4.830410471s ago: executing program 0 (id=814): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r1 = epoll_create$auto(0x1) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r2, 0x0, 0x7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x830) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0xa00) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r5) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) 4.829209034s ago: executing program 1 (id=806): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r1 = epoll_create$auto(0x1) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r2, 0x0, 0x7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x830) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0xa00) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r5) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) 4.145723401s ago: executing program 1 (id=807): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xb, 0xa, 0x300) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r1, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) prctl$auto_PR_SET_SECCOMP(0x16, 0xc8f, 0x3, 0xc1ce, 0x1) r3 = socket(0x2, 0x801, 0x100) prctl$auto(0x5, 0x1ffffffffffffffe, 0xffffffffffffffff, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) close_range$auto(0x2, 0x8, 0x0) fcntl$auto_F_ADD_SEALS(r0, 0x409, 0x7) socket(0x22, 0x5, 0x6) mmap$auto(0x0, 0x30009, 0x4000000400df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x8, 0x1, 0x9b72, r3, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) 4.1000735s ago: executing program 0 (id=809): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8000, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x36200, 0x0) getsockopt$auto_SO_MEMINFO(r0, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/rcutree/parameters/do_rcu_barrier\x00', 0x20461, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 3.538622589s ago: executing program 4 (id=810): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8000, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x36200, 0x0) getsockopt$auto_SO_MEMINFO(r0, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x2ab02, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9850000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25050000000400038028000180080003000000000008000100", @ANYRES32=r3, @ANYBLOB="140002007665743cebd37cffe3828fa445d03457"], 0x40}, 0x1, 0x0, 0x0, 0x200400d1}, 0x4000000) ioctl$auto(0x3, 0xae41, r2) ioctl$auto(r1, 0x3, r0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x42, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/rcutree/parameters/do_rcu_barrier\x00', 0x20461, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) r5 = io_uring_setup$auto(0x6, 0x0) read$auto_drm_connector_fops_drm_debugfs(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.738453122s ago: executing program 1 (id=811): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2d, 0x80002, 0x1000) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) bind$auto(r1, 0x0, 0x3) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') socket(0x1e, 0x5, 0x0) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x193104480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) socket(0xa, 0x2, 0x3a) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x8955, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x20000000064, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) read$auto_transactions_fops_(r4, &(0x7f0000000080)=""/18, 0x12) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000540)=0x5) 2.437295263s ago: executing program 0 (id=812): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x11, 0x3, 0x9) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) write$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) open(0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x4, 0x20009, 0xdf, 0x20000000000e31, 0xffffffffffffffff, 0x8000) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x14, 0x1, 0x5, 0x7fff, 0x1}, 0x4, 0x5, "fe8d9b558f71bf52c1b007f84f7613372ff6d08364797a3112971fcd943ca423f77d0c05bd7f9f2c7bd6f1fd3d73a184a65187d0716561a9be0c6637289c6a3c", "aa566f34addfb0091f7eb985bb325551f92a91b3e6e9f586a536da8de4242191aa523dea21503fe4a2c398b447f23392dbf57acbf61d22c3a8510b967db8959ee607340c28138e6ab55dd9d1ba1908e6", 0x8, 0x3, 0x0, 0xfff, 0x8, "c6c4df5c17cb06bdee801def8d4b20e329cb3ef4257a57c7170f8d1ba48d9497"}) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, r3, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x8, 0x1, 0x0, 0x1, [@generic="9668af89"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x9138d6c861f7b188}, 0x800) ioctl$auto(r2, 0x560a, r2) 2.078412651s ago: executing program 2 (id=813): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r1, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r2 = epoll_create$auto(0x1) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) r3 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r3, 0x0, 0x7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x830) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0xa00) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r6) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) 1.894766226s ago: executing program 4 (id=815): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8000, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x36200, 0x0) getsockopt$auto_SO_MEMINFO(r0, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x2ab02, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9850000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25050000000400038028000180080003000000000008000100", @ANYRES32=r3, @ANYBLOB="140002007665743cebd37cffe3828fa445d03457"], 0x40}, 0x1, 0x0, 0x0, 0x200400d1}, 0x4000000) ioctl$auto(0x3, 0xae41, r2) ioctl$auto(r1, 0x3, r0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x42, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/rcutree/parameters/do_rcu_barrier\x00', 0x20461, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) r5 = io_uring_setup$auto(0x6, 0x0) read$auto_drm_connector_fops_drm_debugfs(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.616995235s ago: executing program 1 (id=816): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0x5ecc52ad, 0x7, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r2, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0xb, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1d48, &(0x7f0000000180)={0x7fffefff, 0x5, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x9, 0x8000000400000001}, {0x8, 0x1, 0x10000052, 0x7, 0x11, 0x101, 0x0, 0x2, 0x3}}) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd7040ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x85, &(0x7f0000000100)={0x0, 0x100000000000fc2}, 0x2, &(0x7f0000000080)='\x00\x00\x00', 0x7, 0xa505}, 0x800}, 0x9, 0x400c) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/038/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) 1.328814289s ago: executing program 2 (id=817): openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf8\xfe\n\xa7\xfeD\xca\xd9\xb3\xc1\xe4\xf5j\x94\x7f\x00\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xed\x013\x87l\xb9\x1e\x05\x90\xa2', 0x2) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(r0, 0xffffff7f, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x9, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) r3 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x174) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, 0x0, 0x800) fcntl$getown(r3, 0x9) sendmsg$auto_OVS_FLOW_CMD_NEW(r3, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f00000001c0)={0x2a4, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_MASK={0x288, 0x7, 0x0, 0x1, [@nested={0x8, 0x6d, 0x0, 0x1, [@typed={0x4, 0x144}]}, @nested={0x27c, 0xf2, 0x0, 0x1, [@nested={0x4, 0x5c}, @typed={0x4, 0xfb}, @nested={0x4c, 0x3c, 0x0, 0x1, [@typed={0x14, 0x106, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="78878f54f6291fdaa06e44a21d64c57b8973f4b6848cf12ed556269f3fe0a7c72d3b22c275161f2f5488f062951255c40cab5f3b"]}, @generic="a553d82bc1b3a66cb97a7b496a70f17c65bd3dd62ae3a5ae714e9e5431c0937f3bb9c7c415122a8e5bc11189594c3dc12411f4860e618e874c6aa6ac4d5e87aadadc12f73b8bf5c4fc5160a3b99bf1ec1aa7659275e8bea75572c554849cd13a2e3a01b07bb5844507fad76559885fb2ee", @nested={0x4, 0xef}, @nested={0x4, 0x146}, @typed={0xeb, 0xdf, 0x0, 0x0, @binary="1565ec0b0fba76b7b26445eae15d6fa8f5e9e68df1baae87e23d8d58c7ea8dd3c68d4f1cb67d8c2c66b175e26ea8da2ed5409814535905064f68d579750c2e360d2c3efd29cbdf2e109293c937034e58d2b584eed608b288c8e2f495c5d2cd54b0114e8a802be7d7f4f545c9d4dde1393c476ba9d85cb85939a370bff9481f48acfdc5ce7732ad59d49c019897c5e3c39d183707c2a601f208ba3c25309ecd63a3dd7b7cf511bb266c0cf5a5d2178925a5587d07f79504e164db32489b6cce84296e0304556f3ef45e5f90ea9f597d769a07375076d1e88644d36744814a53fae9f790d911fb5d"}, @generic="db06f5f1b1428f293e692dccbc40b528e315cade05aefbdb5c7a5e7217acc6cf725eb47dae5f0d5c4cd46d5ab52fbf36bb8a5efa81fb89f798e2763fcb90f1b80679d8e0d331d80f5ec624fa56e77a1f84350cb4a27e425a77eb0f0795b3c674bacae4ba12ee4ea84f8b5d53a87906afaaaabd2391a67ccb56b431cd79dbe5d79234ce2c01edd46c00293e0df74ac25afc4e869eb35aa598a6dceb631855a649798d0f959118a1b59c4c6c37ccd9bdac323165f3e60f59b8d611340c82b4de"]}]}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x9}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/001/001\x00', 0x802, 0x0) 1.163307437s ago: executing program 0 (id=818): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r1 = epoll_create$auto(0x1) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r2, 0x0, 0x7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x830) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0xa00) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r5) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) 759.883411ms ago: executing program 4 (id=819): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) ustat$auto(0x801, 0x0) socket(0xa, 0x3, 0x3b) read$auto_proc_uid_map_operations_base(0xffffffffffffffff, &(0x7f0000000280)=""/253, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioctl$auto_FIONREAD(r0, 0x541b, 0x8) socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/xfrm0/ioam6_enabled\x00', 0x141241, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x45b9) write$auto(r2, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a2) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x4, 0x4, 0x0, 0x3}, 0xa8) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) 517.539133ms ago: executing program 0 (id=820): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r1 = epoll_create$auto(0x1) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r2, 0x0, 0x7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x830) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0xa00) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r5) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) 118.185139ms ago: executing program 4 (id=821): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8000, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x36200, 0x0) getsockopt$auto_SO_MEMINFO(r0, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x2ab02, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9850000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25050000000400038028000180080003000000000008000100", @ANYRES32=r3, @ANYBLOB="140002007665743cebd37cffe3828fa445d03457"], 0x40}, 0x1, 0x0, 0x0, 0x200400d1}, 0x4000000) ioctl$auto(0x3, 0xae41, r2) ioctl$auto(r1, 0x3, r0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x42, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/rcutree/parameters/do_rcu_barrier\x00', 0x20461, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) r5 = io_uring_setup$auto(0x6, 0x0) read$auto_drm_connector_fops_drm_debugfs(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=822): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_submit$auto(0x2, 0xfffffffffffff096, &(0x7f0000000040)=0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x641, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x22, 0x0, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0xe, 0x3ff}, {0x10, 0xd}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SG_EMULATED_HOST2(0xffffffffffffffff, 0x2203, 0x0) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram11/events_poll_msecs\x00', 0x20681, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0xe, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_virt_wifi/base_reachable_time\x00', 0x9) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x8901, 0x0) ioctl$auto(r3, 0xc0105502, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000180)) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r2, 0x80044dff, &(0x7f0000000500)="abea1d71a22c2fb47a06ba2bf74770129de95f60df18198cbb6b7c63d1dc26560bf6d396320c7c001b03e8532e8cc9fded75360724716eab7bb45d899f44452bf543d452757a01dc0526e09ad69a34b6ea5b450e0a502f5c8d7fd9ab35c18a010984f5c84b24c94090f029f95ed37dbf4c1036ad0d41847ace2f390aea14004cebc87293069ac84bec173366d2f85305b4b5347443eb925aaa34d0726444e36d0231d2f287ad90b7c6851144") kernel console output (not intermixed with test programs): timeout [ 82.443007][ T4940] Bluetooth: hci0: command tx timeout [ 82.449032][ T5625] Bluetooth: hci2: command tx timeout [ 82.457389][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.478698][ T5623] team0: Port device team_slave_1 added [ 82.542225][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.549724][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.575795][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.602083][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.609196][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.635582][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.648251][ T5624] team0: Port device team_slave_0 added [ 82.654485][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.661729][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.687749][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.699298][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.706518][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.732688][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.744339][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.751575][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.778160][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.791722][ T5624] team0: Port device team_slave_1 added [ 82.805812][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.812767][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.840788][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.886982][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.893934][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.920323][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.933162][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.940206][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.966385][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.029810][ T5623] hsr_slave_0: entered promiscuous mode [ 83.036735][ T5623] hsr_slave_1: entered promiscuous mode [ 83.068960][ T5627] hsr_slave_0: entered promiscuous mode [ 83.075410][ T5627] hsr_slave_1: entered promiscuous mode [ 83.081463][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 83.087349][ T5627] Cannot create hsr debugfs directory [ 83.098304][ T5622] hsr_slave_0: entered promiscuous mode [ 83.104821][ T5622] hsr_slave_1: entered promiscuous mode [ 83.111071][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 83.117019][ T5622] Cannot create hsr debugfs directory [ 83.173181][ T5624] hsr_slave_0: entered promiscuous mode [ 83.179443][ T5624] hsr_slave_1: entered promiscuous mode [ 83.185964][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 83.191706][ T5624] Cannot create hsr debugfs directory [ 83.617778][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.636054][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.644470][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.654041][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.661832][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.671187][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.682422][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.693495][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.767131][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.779060][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.804872][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.821713][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.830730][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.840342][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.859846][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.869838][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.938457][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.953404][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.971029][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.981019][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.989621][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.999030][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.015085][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.025513][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.114951][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.124635][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.133337][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.144723][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.159097][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.169699][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.179389][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.189527][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.212554][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.271154][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.299241][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.306673][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.334460][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.346968][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.354138][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.428387][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.450890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.458026][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.487403][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.500725][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.507853][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.517435][ T5625] Bluetooth: hci2: command tx timeout [ 84.517521][ T5638] Bluetooth: hci1: command tx timeout [ 84.522860][ T4940] Bluetooth: hci0: command tx timeout [ 84.523629][ T5635] Bluetooth: hci3: command tx timeout [ 84.562654][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.591068][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.627111][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.634305][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.669559][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.680767][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.687950][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.727437][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.734630][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.772925][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.780153][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.469363][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.613880][ T5623] veth0_vlan: entered promiscuous mode [ 85.662022][ T5623] veth1_vlan: entered promiscuous mode [ 85.714312][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.782642][ T5623] veth0_macvtap: entered promiscuous mode [ 85.809102][ T5623] veth1_macvtap: entered promiscuous mode [ 85.847892][ T5627] veth0_vlan: entered promiscuous mode [ 85.874396][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.900026][ T5627] veth1_vlan: entered promiscuous mode [ 85.919068][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.943986][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.968583][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.986874][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.996667][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.008590][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.018088][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.083125][ T5627] veth0_macvtap: entered promiscuous mode [ 86.120652][ T5627] veth1_macvtap: entered promiscuous mode [ 86.178009][ T5622] veth0_vlan: entered promiscuous mode [ 86.193728][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.207142][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.246095][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.259682][ T5622] veth1_vlan: entered promiscuous mode [ 86.277027][ T5624] veth0_vlan: entered promiscuous mode [ 86.284952][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.299854][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.312634][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.317530][ T5624] veth1_vlan: entered promiscuous mode [ 86.338017][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.348666][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.374536][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.383843][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.403808][ T5623] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.439575][ T5622] veth0_macvtap: entered promiscuous mode [ 86.472549][ T5622] veth1_macvtap: entered promiscuous mode [ 86.560624][ T5624] veth0_macvtap: entered promiscuous mode [ 86.580535][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.595335][ T5635] Bluetooth: hci3: command tx timeout [ 86.595908][ T5638] Bluetooth: hci2: command tx timeout [ 86.601089][ T4940] Bluetooth: hci1: command tx timeout [ 86.612760][ T5625] Bluetooth: hci0: command tx timeout [ 86.629800][ T5624] veth1_macvtap: entered promiscuous mode [ 86.640387][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.649953][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.660456][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.692142][ T42] cfg80211: failed to load regulatory.db [ 86.742319][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.763987][ T5781] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 86.798076][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.819202][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.863232][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.882813][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.913811][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.926229][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.943307][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.033906][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.063488][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.144472][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.153347][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.335257][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.375420][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.491103][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.507688][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.609711][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.636374][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.781570][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.831996][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.999799][ T5789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.204757][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.212284][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.222182][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.229992][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.388984][ T5789] Zero length message leads to an empty skb [ 88.676120][ T5635] Bluetooth: hci2: command tx timeout [ 88.681843][ T5625] Bluetooth: hci3: command tx timeout [ 88.687381][ T4940] Bluetooth: hci0: command tx timeout [ 88.687629][ T5638] Bluetooth: hci1: command tx timeout [ 89.247000][ T29] audit: type=1804 audit(1783144016.515:2): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0 [ 89.326474][ T29] audit: type=1804 audit(1783144016.525:3): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0 [ 89.698092][ T5798] syz.3.5 (5798) used greatest stack depth: 19648 bytes left [ 89.819250][ T5805] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.624665][ T5856] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 93.258364][ T5865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 93.683440][ T5874] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.725888][ T5867] netlink: 504 bytes leftover after parsing attributes in process `syz.1.18'. [ 93.754493][ T5867] netlink: 350 bytes leftover after parsing attributes in process `syz.1.18'. [ 93.770330][ T5872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 93.866190][ T5872] bond0: (slave bond_slave_0): Releasing backup interface [ 94.637370][ T5890] mmap: syz.2.23 (5890) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.101974][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 95.111308][ T5895] nbd: must specify a size in bytes for the device [ 96.996279][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.772597][ T5940] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 100.051597][ T5967] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.587257][ T5958] zram: Removed device: zram0 [ 100.713682][ T5974] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.637602][ T5993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.41'. [ 107.179493][ T6025] Process accounting resumed [ 107.681229][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 110.530938][ T6070] FAULT_INJECTION: forcing a failure. [ 110.530938][ T6070] name failslab, interval 1, probability 0, space 0, times 1 [ 110.547940][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(full) [ 110.547975][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.548000][ T6070] Call Trace: [ 110.548009][ T6070] [ 110.548019][ T6070] dump_stack_lvl+0x100/0x190 [ 110.548056][ T6070] should_fail_ex.cold+0x5/0xa [ 110.548090][ T6070] should_failslab+0xc2/0x120 [ 110.548126][ T6070] __kmalloc_flags_noprof+0x115/0x890 [ 110.548170][ T6070] ? find_held_lock+0x2b/0x80 [ 110.548209][ T6070] ? __pcs_replace_empty_main+0x13e/0x680 [ 110.548252][ T6070] ? __pcs_replace_empty_main+0x41a/0x680 [ 110.548303][ T6070] __pcs_replace_empty_main+0x41a/0x680 [ 110.548354][ T6070] kmem_cache_alloc_lru_noprof+0x46a/0x6a0 [ 110.548388][ T6070] ? aio_alloc_inode+0x25/0x70 [ 110.548431][ T6070] ? __pfx_aio_alloc_inode+0x10/0x10 [ 110.548474][ T6070] aio_alloc_inode+0x25/0x70 [ 110.548513][ T6070] alloc_inode+0x68/0x250 [ 110.548546][ T6070] alloc_anon_inode+0x2a/0x3e0 [ 110.548594][ T6070] ioctx_alloc+0x4dc/0x21a0 [ 110.548631][ T6070] ? find_held_lock+0x2b/0x80 [ 110.548663][ T6070] ? __pfx_ioctx_alloc+0x10/0x10 [ 110.548700][ T6070] __x64_sys_io_setup+0xc9/0x220 [ 110.548729][ T6070] do_syscall_64+0x115/0x840 [ 110.548771][ T6070] ? clear_bhb_loop+0x40/0x90 [ 110.548807][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.548836][ T6070] RIP: 0033:0x7f546d19de59 [ 110.548871][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.548904][ T6070] RSP: 002b:00007f546e098028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 110.548930][ T6070] RAX: ffffffffffffffda RBX: 00007f546d426180 RCX: 00007f546d19de59 [ 110.548949][ T6070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 110.548965][ T6070] RBP: 00007f546d233e6f R08: 0000000000000000 R09: 0000000000000000 [ 110.548982][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.549003][ T6070] R13: 00007f546d426218 R14: 00007f546d426180 R15: 00007fffb7330758 [ 110.549041][ T6070] [ 117.362023][ T6118] Process accounting resumed [ 119.273652][ T6144] Process accounting resumed [ 119.283142][ T6136] Process accounting resumed [ 120.546584][ T6158] bond0: option packets_per_slave: invalid value () [ 120.555477][ T6158] bond0: option packets_per_slave: allowed values 0 - 65535 [ 120.822509][ T6156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.850680][ T6156] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.928926][ T6156] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.992119][ T6156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.026070][ T6156] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.063372][ T6156] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.118574][ T6156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.142600][ T6183] process 'syz.1.69' launched './file0' with NULL argv: empty string added [ 121.143819][ T6156] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.224067][ T6156] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.268494][ T6156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.288062][ T6156] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.332826][ T6156] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.795324][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.910720][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 122.997565][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.155341][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.327510][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.875284][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.945569][ T5635] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 124.564805][ T6235] FAULT_INJECTION: forcing a failure. [ 124.564805][ T6235] name failslab, interval 1, probability 0, space 0, times 0 [ 124.622188][ T6235] CPU: 0 UID: 0 PID: 6235 Comm: syz.3.78 Not tainted syzkaller #0 PREEMPT(full) [ 124.622230][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.622248][ T6235] Call Trace: [ 124.622257][ T6235] [ 124.622267][ T6235] dump_stack_lvl+0x100/0x190 [ 124.622318][ T6235] should_fail_ex.cold+0x5/0xa [ 124.622351][ T6235] should_failslab+0xc2/0x120 [ 124.622388][ T6235] __kmalloc_node_noprof+0x101/0x830 [ 124.622417][ T6235] ? __get_vm_area_node+0x1dc/0x330 [ 124.622449][ T6235] ? __get_vm_area_node+0x208/0x330 [ 124.622480][ T6235] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 124.622525][ T6235] __vmalloc_node_range_noprof+0x409/0x1630 [ 124.622577][ T6235] ? n_tty_open+0x1a/0x170 [ 124.622637][ T6235] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 124.622677][ T6235] ? __pfx___might_resched+0x10/0x10 [ 124.622711][ T6235] ? do_raw_spin_lock+0x128/0x260 [ 124.622740][ T6235] ? find_held_lock+0x2b/0x80 [ 124.622769][ T6235] ? n_tty_open+0x12b/0x170 [ 124.622804][ T6235] ? n_tty_open+0x12b/0x170 [ 124.622841][ T6235] ? n_tty_open+0x1a/0x170 [ 124.622875][ T6235] __vmalloc_node_noprof+0xad/0xf0 [ 124.622911][ T6235] ? n_tty_open+0x1a/0x170 [ 124.622949][ T6235] ? __pfx_n_tty_open+0x10/0x10 [ 124.622986][ T6235] n_tty_open+0x1a/0x170 [ 124.623023][ T6235] tty_ldisc_open+0xa2/0x120 [ 124.623050][ T6235] tty_ldisc_setup+0x87/0xf0 [ 124.623081][ T6235] tty_init_dev.part.0+0x1b5/0x470 [ 124.623119][ T6235] tty_init_dev+0x60/0x80 [ 124.623149][ T6235] ? __pfx_ptmx_open+0x10/0x10 [ 124.623187][ T6235] ptmx_open+0x128/0x360 [ 124.623229][ T6235] ? __pfx_ptmx_open+0x10/0x10 [ 124.623271][ T6235] chrdev_open+0x234/0x6a0 [ 124.623315][ T6235] ? __pfx_chrdev_open+0x10/0x10 [ 124.623361][ T6235] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 124.623398][ T6235] do_dentry_open+0x6ab/0x14d0 [ 124.623441][ T6235] ? __pfx_chrdev_open+0x10/0x10 [ 124.623490][ T6235] vfs_open+0x82/0x3f0 [ 124.623526][ T6235] path_openat+0x2873/0x4280 [ 124.623592][ T6235] ? __pfx_path_openat+0x10/0x10 [ 124.623656][ T6235] do_file_open+0x20e/0x430 [ 124.623700][ T6235] ? __pfx_do_file_open+0x10/0x10 [ 124.623769][ T6235] ? alloc_fd+0x471/0x7a0 [ 124.623815][ T6235] ? do_getname+0x191/0x390 [ 124.623862][ T6235] do_sys_openat2+0x10f/0x1e0 [ 124.623895][ T6235] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.623926][ T6235] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.623978][ T6235] __x64_sys_openat+0x12d/0x210 [ 124.624012][ T6235] ? __pfx___x64_sys_openat+0x10/0x10 [ 124.624060][ T6235] do_syscall_64+0x115/0x840 [ 124.624101][ T6235] ? clear_bhb_loop+0x40/0x90 [ 124.624136][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.624165][ T6235] RIP: 0033:0x7fa9fc79de59 [ 124.624203][ T6235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.624231][ T6235] RSP: 002b:00007fa9fd5dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.624260][ T6235] RAX: ffffffffffffffda RBX: 00007fa9fca25fa0 RCX: 00007fa9fc79de59 [ 124.624279][ T6235] RDX: 00000000000c2b80 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 124.624299][ T6235] RBP: 00007fa9fc833e6f R08: 0000000000000000 R09: 0000000000000000 [ 124.624316][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.624334][ T6235] R13: 00007fa9fca26038 R14: 00007fa9fca25fa0 R15: 00007fff697442b8 [ 124.624375][ T6235] [ 124.959381][ T6235] syz.3.78: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 125.003545][ T6235] CPU: 1 UID: 0 PID: 6235 Comm: syz.3.78 Not tainted syzkaller #0 PREEMPT(full) [ 125.003586][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.003603][ T6235] Call Trace: [ 125.003613][ T6235] [ 125.003623][ T6235] dump_stack_lvl+0x100/0x190 [ 125.003662][ T6235] warn_alloc.cold+0x94/0xa8 [ 125.003692][ T6235] ? __pfx_warn_alloc+0x10/0x10 [ 125.003719][ T6235] ? dump_stack_lvl+0x17c/0x190 [ 125.003750][ T6235] ? rcu_is_watching+0x12/0xc0 [ 125.003784][ T6235] ? __kasan_kmalloc+0x8a/0xb0 [ 125.003833][ T6235] ? __kmalloc_node_noprof+0x357/0x830 [ 125.003865][ T6235] ? __get_vm_area_node+0x1dc/0x330 [ 125.003902][ T6235] ? __get_vm_area_node+0x208/0x330 [ 125.003938][ T6235] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 125.003987][ T6235] __vmalloc_node_range_noprof+0x1394/0x1630 [ 125.004041][ T6235] ? n_tty_open+0x1a/0x170 [ 125.004097][ T6235] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 125.004139][ T6235] ? __pfx___might_resched+0x10/0x10 [ 125.004178][ T6235] ? do_raw_spin_lock+0x128/0x260 [ 125.004209][ T6235] ? find_held_lock+0x2b/0x80 [ 125.004237][ T6235] ? n_tty_open+0x12b/0x170 [ 125.004273][ T6235] ? n_tty_open+0x12b/0x170 [ 125.004313][ T6235] ? n_tty_open+0x1a/0x170 [ 125.004349][ T6235] __vmalloc_node_noprof+0xad/0xf0 [ 125.004388][ T6235] ? n_tty_open+0x1a/0x170 [ 125.004427][ T6235] ? __pfx_n_tty_open+0x10/0x10 [ 125.004464][ T6235] n_tty_open+0x1a/0x170 [ 125.004503][ T6235] tty_ldisc_open+0xa2/0x120 [ 125.004532][ T6235] tty_ldisc_setup+0x87/0xf0 [ 125.004563][ T6235] tty_init_dev.part.0+0x1b5/0x470 [ 125.004602][ T6235] tty_init_dev+0x60/0x80 [ 125.004638][ T6235] ? __pfx_ptmx_open+0x10/0x10 [ 125.004679][ T6235] ptmx_open+0x128/0x360 [ 125.004724][ T6235] ? __pfx_ptmx_open+0x10/0x10 [ 125.004767][ T6235] chrdev_open+0x234/0x6a0 [ 125.004813][ T6235] ? __pfx_chrdev_open+0x10/0x10 [ 125.004859][ T6235] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 125.004897][ T6235] do_dentry_open+0x6ab/0x14d0 [ 125.004942][ T6235] ? __pfx_chrdev_open+0x10/0x10 [ 125.004995][ T6235] vfs_open+0x82/0x3f0 [ 125.005032][ T6235] path_openat+0x2873/0x4280 [ 125.005101][ T6235] ? __pfx_path_openat+0x10/0x10 [ 125.005152][ T6235] do_file_open+0x20e/0x430 [ 125.005199][ T6235] ? __pfx_do_file_open+0x10/0x10 [ 125.005270][ T6235] ? alloc_fd+0x471/0x7a0 [ 125.005315][ T6235] ? do_getname+0x191/0x390 [ 125.005350][ T6235] do_sys_openat2+0x10f/0x1e0 [ 125.005384][ T6235] ? __pfx_do_sys_openat2+0x10/0x10 [ 125.005419][ T6235] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.005475][ T6235] __x64_sys_openat+0x12d/0x210 [ 125.005509][ T6235] ? __pfx___x64_sys_openat+0x10/0x10 [ 125.005559][ T6235] do_syscall_64+0x115/0x840 [ 125.005599][ T6235] ? clear_bhb_loop+0x40/0x90 [ 125.005634][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.005663][ T6235] RIP: 0033:0x7fa9fc79de59 [ 125.005687][ T6235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.005713][ T6235] RSP: 002b:00007fa9fd5dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 125.005740][ T6235] RAX: ffffffffffffffda RBX: 00007fa9fca25fa0 RCX: 00007fa9fc79de59 [ 125.005760][ T6235] RDX: 00000000000c2b80 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 125.005778][ T6235] RBP: 00007fa9fc833e6f R08: 0000000000000000 R09: 0000000000000000 [ 125.005795][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.005812][ T6235] R13: 00007fa9fca26038 R14: 00007fa9fca25fa0 R15: 00007fff697442b8 [ 125.005851][ T6235] [ 125.116369][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.267410][ T5638] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.396493][ T6235] Mem-Info: [ 125.401538][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.457704][ T6235] active_anon:10138 inactive_anon:25 isolated_anon:0 [ 125.457704][ T6235] active_file:19 inactive_file:53884 isolated_file:0 [ 125.457704][ T6235] unevictable:768 dirty:732 writeback:0 [ 125.457704][ T6235] slab_reclaimable:10781 slab_unreclaimable:91021 [ 125.457704][ T6235] mapped:26671 shmem:3855 pagetables:1122 [ 125.457704][ T6235] sec_pagetables:0 bounce:0 [ 125.457704][ T6235] kernel_misc_reclaimable:0 [ 125.457704][ T6235] free:1321759 free_pcp:10392 free_cma:0 [ 125.609997][ T6235] Node 0 active_anon:40552kB inactive_anon:100kB active_file:76kB inactive_file:215404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106684kB dirty:2924kB writeback:0kB shmem:13884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11648kB pagetables:4424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 125.661625][ T6235] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 125.698232][ T6235] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.729658][ T6235] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 125.735834][ T6235] Node 0 DMA32 free:1326864kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40652kB inactive_anon:100kB active_file:76kB inactive_file:215404kB unevictable:1536kB writepending:2924kB zspages:148kB present:3129332kB managed:2532624kB mlocked:0kB bounce:0kB free_pcp:40836kB local_pcp:22136kB free_cma:0kB [ 125.771373][ T6235] lowmem_reserve[]: 0 0 0 0 0 [ 125.776369][ T6235] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:396kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.810106][ T6235] lowmem_reserve[]: 0 0 0 0 0 [ 125.814906][ T6235] Node 1 Normal free:3945080kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1456kB local_pcp:1456kB free_cma:0kB [ 125.849463][ T6235] lowmem_reserve[]: 0 0 0 0 0 [ 125.854254][ T6235] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.875262][ T6235] Node 0 DMA32: 3852*4kB (UME) 1460*8kB (UM) 1225*16kB (UM) 1239*32kB (UME) 689*64kB (UM) 312*128kB (UM) 150*256kB (UM) 49*512kB (UME) 12*1024kB (M) 6*2048kB (UME) 261*4096kB (UM) = 1327488kB [ 125.926855][ T6235] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 125.958708][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.983726][ T6235] Node 1 Normal: 10*4kB (UM) 10*8kB (UM) 8*16kB (UM) 14*32kB (UM) 11*64kB (UM) 8*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (U) 1*2048kB (U) 961*4096kB (UM) = 3945080kB [ 126.077045][ T6235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.148386][ T6235] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=2 hugepages_size=2048kB [ 126.175275][ T6235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.227042][ T6235] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.256097][ T6235] 57786 total pagecache pages [ 126.286284][ T6235] 34 pages in swap cache [ 126.292338][ T6235] Free swap = 122780kB [ 126.312859][ T6235] Total swap = 124996kB [ 126.329012][ T6235] 2097051 pages RAM [ 126.331802][ T6236] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.341639][ T6236] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.351788][ T6235] 0 pages HighMem/MovableOnly [ 126.382076][ T6236] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.385781][ T6235] 432181 pages reserved [ 126.434400][ T6235] 0 pages cma reserved [ 126.438196][ T6236] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.463640][ T6235] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 127.066685][ T6255] Process accounting resumed [ 128.196210][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.355234][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.437057][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.445550][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.204463][ T6300] FAULT_INJECTION: forcing a failure. [ 129.204463][ T6300] name failslab, interval 1, probability 0, space 0, times 0 [ 129.247689][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.1.87 Not tainted syzkaller #0 PREEMPT(full) [ 129.247728][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.247744][ T6300] Call Trace: [ 129.247754][ T6300] [ 129.247764][ T6300] dump_stack_lvl+0x100/0x190 [ 129.247803][ T6300] should_fail_ex.cold+0x5/0xa [ 129.247835][ T6300] should_failslab+0xc2/0x120 [ 129.247871][ T6300] __kmalloc_cache_noprof+0x91/0x6c0 [ 129.247912][ T6300] ? __pfx___might_resched+0x10/0x10 [ 129.247946][ T6300] ? crtc_crc_open+0x3ba/0x7e0 [ 129.247966][ T6300] crtc_crc_open+0x3ba/0x7e0 [ 129.247983][ T6300] ? __debugfs_file_get+0x1fc/0x860 [ 129.248007][ T6300] ? __pfx_crtc_crc_open+0x10/0x10 [ 129.248024][ T6300] ? __pfx_apparmor_file_open+0x10/0x10 [ 129.248047][ T6300] ? path_get+0x61/0x80 [ 129.248064][ T6300] ? __pfx_crtc_crc_open+0x10/0x10 [ 129.248080][ T6300] full_proxy_open_regular+0x1b6/0x370 [ 129.248097][ T6300] do_dentry_open+0x6ab/0x14d0 [ 129.248119][ T6300] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 129.248139][ T6300] vfs_open+0x82/0x3f0 [ 129.248157][ T6300] path_openat+0x2873/0x4280 [ 129.248187][ T6300] ? __pfx_path_openat+0x10/0x10 [ 129.248214][ T6300] do_file_open+0x20e/0x430 [ 129.248237][ T6300] ? __pfx_do_file_open+0x10/0x10 [ 129.248271][ T6300] ? alloc_fd+0x471/0x7a0 [ 129.248294][ T6300] ? do_getname+0x191/0x390 [ 129.248311][ T6300] do_sys_openat2+0x10f/0x1e0 [ 129.248328][ T6300] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.248346][ T6300] ? do_raw_spin_lock+0x128/0x260 [ 129.248365][ T6300] __x64_sys_openat+0x12d/0x210 [ 129.248382][ T6300] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.248406][ T6300] do_syscall_64+0x115/0x840 [ 129.248436][ T6300] ? clear_bhb_loop+0x40/0x90 [ 129.248455][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.248470][ T6300] RIP: 0033:0x7f8e2bf9de59 [ 129.248484][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.248497][ T6300] RSP: 002b:00007f8e2ce31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.248512][ T6300] RAX: ffffffffffffffda RBX: 00007f8e2c226090 RCX: 00007f8e2bf9de59 [ 129.248522][ T6300] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 129.248531][ T6300] RBP: 00007f8e2c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 129.248540][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.248548][ T6300] R13: 00007f8e2c226128 R14: 00007f8e2c226090 R15: 00007ffdc94e9e68 [ 129.248568][ T6300] [ 129.612020][ T6284] Process accounting resumed [ 129.732111][ T6300] bond0: invalid ARP target specified [ 130.687015][ T6312] vhci_hcd vhci_hcd.1: invalid port number 99 [ 130.732302][ T6312] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 132.764870][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.778490][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.184056][ T6357] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by ""[6357] [ 133.343849][ T6357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.96'. [ 135.375049][ T6377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.748630][ T6372] netlink: 346 bytes leftover after parsing attributes in process `syz.1.98'. [ 136.794141][ T6412] can0: slcan on pty155. [ 137.219546][ T6411] can0 (unregistered): slcan off pty155. [ 137.838722][ T6415] FAULT_INJECTION: forcing a failure. [ 137.838722][ T6415] name fail_futex, interval 1, probability 0, space 0, times 1 [ 137.923454][ T6415] CPU: 0 UID: 0 PID: 6415 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 137.923491][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.923508][ T6415] Call Trace: [ 137.923516][ T6415] [ 137.923526][ T6415] dump_stack_lvl+0x100/0x190 [ 137.923563][ T6415] should_fail_ex.cold+0x5/0xa [ 137.923594][ T6415] get_futex_key+0x1d2/0x14f0 [ 137.923641][ T6415] ? __pfx_get_futex_key+0x10/0x10 [ 137.923682][ T6415] ? __pfx_futex_hash+0x10/0x10 [ 137.923723][ T6415] ? get_pid_task+0xfc/0x250 [ 137.923754][ T6415] ? get_pid_task+0xfc/0x250 [ 137.923792][ T6415] futex_wake+0xf4/0x5e0 [ 137.923827][ T6415] ? find_held_lock+0x2b/0x80 [ 137.923857][ T6415] ? __pfx_futex_wake+0x10/0x10 [ 137.923898][ T6415] ? find_held_lock+0x2b/0x80 [ 137.923934][ T6415] do_futex+0x2b2/0x440 [ 137.923962][ T6415] ? __pfx_do_futex+0x10/0x10 [ 137.924000][ T6415] __x64_sys_futex+0x34f/0x4d0 [ 137.924029][ T6415] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 137.924064][ T6415] ? __pfx___x64_sys_futex+0x10/0x10 [ 137.924115][ T6415] do_syscall_64+0x115/0x840 [ 137.924158][ T6415] ? clear_bhb_loop+0x40/0x90 [ 137.924193][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.924221][ T6415] RIP: 0033:0x7fe8c419de59 [ 137.924245][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.924270][ T6415] RSP: 002b:00007fe8c509a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.924297][ T6415] RAX: ffffffffffffffda RBX: 00007fe8c4426098 RCX: 00007fe8c419de59 [ 137.924315][ T6415] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe8c442609c [ 137.924333][ T6415] RBP: 00007fe8c4426090 R08: 0000000000000001 R09: 0000000000000000 [ 137.924350][ T6415] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 137.924367][ T6415] R13: 00007fe8c4426128 R14: 00007ffdb4282e90 R15: 00007ffdb4282f78 [ 137.924404][ T6415] [ 139.049545][ T6455] FAULT_INJECTION: forcing a failure. [ 139.049545][ T6455] name failslab, interval 1, probability 0, space 0, times 0 [ 139.136128][ T6455] CPU: 1 UID: 0 PID: 6455 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 139.136168][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.136186][ T6455] Call Trace: [ 139.136195][ T6455] [ 139.136207][ T6455] dump_stack_lvl+0x100/0x190 [ 139.136245][ T6455] should_fail_ex.cold+0x5/0xa [ 139.136280][ T6455] should_failslab+0xc2/0x120 [ 139.136315][ T6455] __kmalloc_cache_noprof+0x91/0x6c0 [ 139.136359][ T6455] ? kobject_uevent_env+0x263/0x18b0 [ 139.136406][ T6455] kobject_uevent_env+0x263/0x18b0 [ 139.136449][ T6455] ? bus_to_subsys+0x114/0x150 [ 139.136507][ T6455] device_add+0x1173/0x1970 [ 139.136550][ T6455] ? __pfx_device_add+0x10/0x10 [ 139.136589][ T6455] ? lockdep_init_map_type+0x5c/0x250 [ 139.136634][ T6455] ? __init_waitqueue_head+0xca/0x150 [ 139.136688][ T6455] rfkill_register+0x1ad/0xb30 [ 139.136732][ T6455] nfc_register_device+0x11f/0x3e0 [ 139.136780][ T6455] nci_register_device+0x7f1/0xb80 [ 139.136818][ T6455] ? __pfx_nci_register_device+0x10/0x10 [ 139.136862][ T6455] ? lockdep_init_map_type+0x5c/0x250 [ 139.136912][ T6455] virtual_ncidev_open+0x141/0x220 [ 139.136953][ T6455] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 139.136990][ T6455] misc_open+0x26d/0x450 [ 139.137033][ T6455] ? __pfx_misc_open+0x10/0x10 [ 139.137074][ T6455] chrdev_open+0x234/0x6a0 [ 139.137114][ T6455] ? __pfx_apparmor_file_open+0x10/0x10 [ 139.137158][ T6455] ? __pfx_chrdev_open+0x10/0x10 [ 139.137204][ T6455] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 139.137242][ T6455] do_dentry_open+0x6ab/0x14d0 [ 139.137282][ T6455] ? __pfx_chrdev_open+0x10/0x10 [ 139.137334][ T6455] vfs_open+0x82/0x3f0 [ 139.137370][ T6455] path_openat+0x2873/0x4280 [ 139.137429][ T6455] ? __pfx_path_openat+0x10/0x10 [ 139.137480][ T6455] do_file_open+0x20e/0x430 [ 139.137535][ T6455] ? __pfx_do_file_open+0x10/0x10 [ 139.137605][ T6455] ? alloc_fd+0x471/0x7a0 [ 139.137652][ T6455] ? do_getname+0x191/0x390 [ 139.137685][ T6455] do_sys_openat2+0x10f/0x1e0 [ 139.137718][ T6455] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.137754][ T6455] ? __fget_files+0x21f/0x3d0 [ 139.137802][ T6455] __x64_sys_openat+0x12d/0x210 [ 139.137837][ T6455] ? __pfx___x64_sys_openat+0x10/0x10 [ 139.137886][ T6455] do_syscall_64+0x115/0x840 [ 139.137928][ T6455] ? clear_bhb_loop+0x40/0x90 [ 139.137964][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.137991][ T6455] RIP: 0033:0x7fe8c419de59 [ 139.138015][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.138041][ T6455] RSP: 002b:00007fe8c50bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.138068][ T6455] RAX: ffffffffffffffda RBX: 00007fe8c4425fa0 RCX: 00007fe8c419de59 [ 139.138087][ T6455] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 139.138104][ T6455] RBP: 00007fe8c4233e6f R08: 0000000000000000 R09: 0000000000000000 [ 139.138121][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.138137][ T6455] R13: 00007fe8c4426038 R14: 00007fe8c4425fa0 R15: 00007ffdb4282f78 [ 139.138176][ T6455] [ 139.665786][ T6446] FAULT_INJECTION: forcing a failure. [ 139.665786][ T6446] name failslab, interval 1, probability 0, space 0, times 0 [ 139.678669][ T6446] CPU: 1 UID: 0 PID: 6446 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT(full) [ 139.678705][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.678722][ T6446] Call Trace: [ 139.678731][ T6446] [ 139.678742][ T6446] dump_stack_lvl+0x100/0x190 [ 139.678778][ T6446] should_fail_ex.cold+0x5/0xa [ 139.678811][ T6446] should_failslab+0xc2/0x120 [ 139.678848][ T6446] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 139.678881][ T6446] ? __kmalloc_noprof+0x291/0x820 [ 139.678910][ T6446] ? lockdep_hardirqs_on+0x78/0x100 [ 139.678952][ T6446] ? ip6_route_net_init+0x30f/0x8d0 [ 139.678997][ T6446] kmemdup_noprof+0x29/0x60 [ 139.679027][ T6446] ip6_route_net_init+0x30f/0x8d0 [ 139.679069][ T6446] ? __pfx_ip6_route_net_init+0x10/0x10 [ 139.679107][ T6446] ops_init+0x1e2/0x5f0 [ 139.679144][ T6446] setup_net+0x118/0x3a0 [ 139.679179][ T6446] ? __pfx_setup_net+0x10/0x10 [ 139.679212][ T6446] ? mutex_init_lockdep+0xf1/0x120 [ 139.679262][ T6446] copy_net_ns+0x46f/0x7c0 [ 139.679303][ T6446] create_new_namespaces+0x3ea/0xac0 [ 139.679358][ T6446] unshare_nsproxy_namespaces+0xf2/0x220 [ 139.679408][ T6446] ksys_unshare+0x438/0xab0 [ 139.679444][ T6446] ? __pfx_ksys_unshare+0x10/0x10 [ 139.679500][ T6446] __x64_sys_unshare+0x31/0x40 [ 139.679533][ T6446] do_syscall_64+0x115/0x840 [ 139.679571][ T6446] ? clear_bhb_loop+0x40/0x90 [ 139.679605][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.679632][ T6446] RIP: 0033:0x7f546d19de59 [ 139.679656][ T6446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.679682][ T6446] RSP: 002b:00007f546e0da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 139.679709][ T6446] RAX: ffffffffffffffda RBX: 00007f546d425fa0 RCX: 00007f546d19de59 [ 139.679728][ T6446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 139.679745][ T6446] RBP: 00007f546d233e6f R08: 0000000000000000 R09: 0000000000000000 [ 139.679762][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.679779][ T6446] R13: 00007f546d426038 R14: 00007f546d425fa0 R15: 00007fffb7330758 [ 139.679817][ T6446] [ 140.056939][ T6456] ima: policy update failed [ 140.188210][ T6476] netlink: 354 bytes leftover after parsing attributes in process `syz.2.110'. [ 140.246964][ T29] audit: type=1802 audit(1783144067.525:4): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.110" res=0 errno=0 [ 140.850659][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 142.832029][ T6512] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 143.443312][ T6503] Process accounting resumed [ 144.208851][ T6537] FAULT_INJECTION: forcing a failure. [ 144.208851][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 144.249384][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.3.120 Not tainted syzkaller #0 PREEMPT(full) [ 144.249424][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.249440][ T6537] Call Trace: [ 144.249449][ T6537] [ 144.249461][ T6537] dump_stack_lvl+0x100/0x190 [ 144.249499][ T6537] should_fail_ex.cold+0x5/0xa [ 144.249532][ T6537] should_failslab+0xc2/0x120 [ 144.249569][ T6537] kmem_cache_alloc_noprof+0x91/0x6a0 [ 144.249612][ T6537] ? vm_area_alloc+0x1f/0x160 [ 144.249662][ T6537] vm_area_alloc+0x1f/0x160 [ 144.249705][ T6537] __mmap_region+0x1033/0x2db0 [ 144.249757][ T6537] ? __pfx___mmap_region+0x10/0x10 [ 144.249808][ T6537] ? __lock_acquire+0x49f/0x1a40 [ 144.249867][ T6537] ? find_held_lock+0x2b/0x80 [ 144.249897][ T6537] ? ima_match_policy+0x8c4/0x2350 [ 144.249931][ T6537] ? ima_match_policy+0x8c4/0x2350 [ 144.250002][ T6537] ? process_measurement+0x4c8/0x2350 [ 144.250029][ T6537] ? process_measurement+0x4c8/0x2350 [ 144.250058][ T6537] ? down_write+0x146/0x1f0 [ 144.250146][ T6537] mmap_region+0x527/0x620 [ 144.250178][ T6537] ? __pfx_mmap_region+0x10/0x10 [ 144.250212][ T6537] ? cap_mmap_addr+0x4b/0x120 [ 144.250253][ T6537] ? bpf_lsm_mmap_addr+0x9/0x30 [ 144.250294][ T6537] ? security_mmap_addr+0x71/0x1e0 [ 144.250328][ T6537] ? __get_unmapped_area+0x255/0x3e0 [ 144.250371][ T6537] do_mmap+0xc63/0x12f0 [ 144.250414][ T6537] ? __pfx_do_mmap+0x10/0x10 [ 144.250451][ T6537] ? __pfx_down_write_killable+0x10/0x10 [ 144.250488][ T6537] vm_mmap_pgoff+0x29e/0x470 [ 144.250530][ T6537] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 144.250563][ T6537] ? __fget_files+0x215/0x3d0 [ 144.250618][ T6537] ? __fget_files+0x21f/0x3d0 [ 144.250666][ T6537] ksys_mmap_pgoff+0x3cb/0x610 [ 144.250703][ T6537] ? __x64_sys_futex+0x358/0x4d0 [ 144.250733][ T6537] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 144.250768][ T6537] ? xfd_validate_state+0x129/0x190 [ 144.250805][ T6537] __x64_sys_mmap+0x125/0x190 [ 144.250842][ T6537] do_syscall_64+0x115/0x840 [ 144.250883][ T6537] ? clear_bhb_loop+0x40/0x90 [ 144.250918][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.250948][ T6537] RIP: 0033:0x7fa9fc79de59 [ 144.250973][ T6537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.250999][ T6537] RSP: 002b:00007fa9fd5dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 144.251026][ T6537] RAX: ffffffffffffffda RBX: 00007fa9fca25fa0 RCX: 00007fa9fc79de59 [ 144.251046][ T6537] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 144.251062][ T6537] RBP: 00007fa9fc833e6f R08: 00000000000000dd R09: 0000000000000000 [ 144.251080][ T6537] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 144.251095][ T6537] R13: 00007fa9fca26038 R14: 00007fa9fca25fa0 R15: 00007fff697442b8 [ 144.251134][ T6537] [ 144.643260][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 145.514088][ T6557] FAULT_INJECTION: forcing a failure. [ 145.514088][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 145.548335][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(full) [ 145.548358][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.548367][ T6557] Call Trace: [ 145.548372][ T6557] [ 145.548379][ T6557] dump_stack_lvl+0x100/0x190 [ 145.548400][ T6557] should_fail_ex.cold+0x5/0xa [ 145.548417][ T6557] should_failslab+0xc2/0x120 [ 145.548436][ T6557] kmem_cache_alloc_noprof+0x91/0x6a0 [ 145.548452][ T6557] ? submit_bio_noacct+0x651/0x1ff0 [ 145.548473][ T6557] ? ext4_init_io_end+0x24/0x170 [ 145.548499][ T6557] ext4_init_io_end+0x24/0x170 [ 145.548513][ T6557] ext4_do_writepages+0xaf9/0x3ed0 [ 145.548533][ T6557] ? rcu_is_watching+0x12/0xc0 [ 145.548550][ T6557] ? trace_hrtimer_start+0x77/0x220 [ 145.548566][ T6557] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 145.548589][ T6557] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 145.548615][ T6557] ? __pfx_ext4_do_writepages+0x10/0x10 [ 145.548644][ T6557] ? ext4_writepages+0x347/0x750 [ 145.548662][ T6557] ext4_writepages+0x347/0x750 [ 145.548681][ T6557] ? __pfx_ext4_writepages+0x10/0x10 [ 145.548710][ T6557] ? __pfx_ext4_writepages+0x10/0x10 [ 145.548730][ T6557] do_writepages+0x278/0x600 [ 145.548749][ T6557] ? __pfx_do_writepages+0x10/0x10 [ 145.548764][ T6557] ? do_raw_spin_unlock+0x145/0x1e0 [ 145.548779][ T6557] ? _raw_spin_unlock+0x28/0x50 [ 145.548800][ T6557] filemap_writeback+0x22d/0x2e0 [ 145.548819][ T6557] ? __pfx_filemap_writeback+0x10/0x10 [ 145.548835][ T6557] ? plist_check_list+0x1b8/0x280 [ 145.548875][ T6557] ? mt_find+0x45e/0x8e0 [ 145.548891][ T6557] ? __pfx_mt_find+0x10/0x10 [ 145.548908][ T6557] file_write_and_wait_range+0xcd/0x140 [ 145.548930][ T6557] ext4_sync_file+0x358/0xb60 [ 145.548949][ T6557] ? __pfx_ext4_sync_file+0x10/0x10 [ 145.548966][ T6557] ? __up_read+0x280/0x980 [ 145.548980][ T6557] ? __pfx___up_read+0x10/0x10 [ 145.548993][ T6557] ? __do_sys_msync+0x39b/0x590 [ 145.549008][ T6557] ? __pfx_ext4_sync_file+0x10/0x10 [ 145.549025][ T6557] vfs_fsync_range+0x9b/0x190 [ 145.549042][ T6557] __do_sys_msync+0x3ca/0x590 [ 145.549060][ T6557] do_syscall_64+0x115/0x840 [ 145.549081][ T6557] ? clear_bhb_loop+0x40/0x90 [ 145.549099][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.549114][ T6557] RIP: 0033:0x7fa9fc79de59 [ 145.549128][ T6557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.549141][ T6557] RSP: 002b:00007fa9fd59a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 145.549155][ T6557] RAX: ffffffffffffffda RBX: 00007fa9fca26180 RCX: 00007fa9fc79de59 [ 145.549165][ T6557] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 145.549174][ T6557] RBP: 00007fa9fc833e6f R08: 0000000000000000 R09: 0000000000000000 [ 145.549183][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.549191][ T6557] R13: 00007fa9fca26218 R14: 00007fa9fca26180 R15: 00007fff697442b8 [ 145.549211][ T6557] [ 145.910603][ T6553] openvswitch: netlink: Message has 4 unknown bytes. [ 145.970709][ T6547] netlink: 346 bytes leftover after parsing attributes in process `syz.2.122'. [ 146.547342][ T29] audit: type=1800 audit(1783144073.825:5): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.127" name="dbroot" dev="configfs" ino=12559 res=0 errno=0 [ 149.473939][ T6607] Process accounting paused [ 150.042163][ T6625] netlink: 346 bytes leftover after parsing attributes in process `syz.0.135'. [ 152.514655][ T6636] Process accounting resumed [ 153.775428][ T6686] FAULT_INJECTION: forcing a failure. [ 153.775428][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 153.805241][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.2.147 Not tainted syzkaller #0 PREEMPT(full) [ 153.805280][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.805296][ T6686] Call Trace: [ 153.805306][ T6686] [ 153.805317][ T6686] dump_stack_lvl+0x100/0x190 [ 153.805363][ T6686] should_fail_ex.cold+0x5/0xa [ 153.805395][ T6686] should_failslab+0xc2/0x120 [ 153.805432][ T6686] __kmalloc_noprof+0xfc/0x820 [ 153.805462][ T6686] ? ext4_find_extent+0x21b/0xa30 [ 153.805488][ T6686] ext4_find_extent+0x21b/0xa30 [ 153.805513][ T6686] ext4_ext_map_blocks+0x215/0x59a0 [ 153.805540][ T6686] ? __pfx_stack_trace_save+0x10/0x10 [ 153.805559][ T6686] ? stack_depot_save_flags+0x27/0x9d0 [ 153.805580][ T6686] ? folios_put_refs+0x58a/0xaa0 [ 153.805604][ T6686] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 153.805627][ T6686] ? __lock_acquire+0x49f/0x1a40 [ 153.805648][ T6686] ? vfs_fsync_range+0x9b/0x190 [ 153.805662][ T6686] ? __do_sys_msync+0x3ca/0x590 [ 153.805675][ T6686] ? do_syscall_64+0x115/0x840 [ 153.805695][ T6686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.805727][ T6686] ext4_map_create_blocks+0xec/0x5e0 [ 153.805743][ T6686] ? ext4_fc_eligible.isra.0+0x1/0x110 [ 153.805765][ T6686] ext4_map_blocks+0x46b/0xd30 [ 153.805784][ T6686] ? __pfx_ext4_map_blocks+0x10/0x10 [ 153.805803][ T6686] ? ext4_ext_index_trans_blocks+0x167/0x1a0 [ 153.805825][ T6686] ? __ext4_journal_ensure_credits+0x265/0x2f0 [ 153.805853][ T6686] ext4_do_writepages+0x224c/0x3ed0 [ 153.805876][ T6686] ? rcu_is_watching+0x12/0xc0 [ 153.805906][ T6686] ? __pfx_ext4_do_writepages+0x10/0x10 [ 153.805935][ T6686] ? ext4_writepages+0x347/0x750 [ 153.805955][ T6686] ext4_writepages+0x347/0x750 [ 153.805975][ T6686] ? __pfx_ext4_writepages+0x10/0x10 [ 153.806000][ T6686] ? do_writepages+0x4b5/0x600 [ 153.806015][ T6686] ? do_writepages+0x4b5/0x600 [ 153.806033][ T6686] ? __pfx_ext4_writepages+0x10/0x10 [ 153.806053][ T6686] do_writepages+0x278/0x600 [ 153.806072][ T6686] ? __pfx_do_writepages+0x10/0x10 [ 153.806087][ T6686] ? do_raw_spin_unlock+0x145/0x1e0 [ 153.806101][ T6686] ? _raw_spin_unlock+0x28/0x50 [ 153.806122][ T6686] filemap_writeback+0x22d/0x2e0 [ 153.806141][ T6686] ? __pfx_filemap_writeback+0x10/0x10 [ 153.806158][ T6686] ? plist_check_list+0x1b8/0x280 [ 153.806196][ T6686] ? mt_find+0x45e/0x8e0 [ 153.806212][ T6686] ? __pfx_mt_find+0x10/0x10 [ 153.806233][ T6686] file_write_and_wait_range+0xcd/0x140 [ 153.806255][ T6686] ext4_sync_file+0x358/0xb60 [ 153.806275][ T6686] ? __pfx_ext4_sync_file+0x10/0x10 [ 153.806292][ T6686] ? __up_read+0x280/0x980 [ 153.806307][ T6686] ? __pfx___up_read+0x10/0x10 [ 153.806319][ T6686] ? __do_sys_msync+0x39b/0x590 [ 153.806335][ T6686] ? __pfx_ext4_sync_file+0x10/0x10 [ 153.806351][ T6686] vfs_fsync_range+0x9b/0x190 [ 153.806374][ T6686] __do_sys_msync+0x3ca/0x590 [ 153.806393][ T6686] do_syscall_64+0x115/0x840 [ 153.806415][ T6686] ? clear_bhb_loop+0x40/0x90 [ 153.806432][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.806447][ T6686] RIP: 0033:0x7fe8c419de59 [ 153.806461][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.806474][ T6686] RSP: 002b:00007fe8c50bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 153.806489][ T6686] RAX: ffffffffffffffda RBX: 00007fe8c4425fa0 RCX: 00007fe8c419de59 [ 153.806499][ T6686] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 153.806509][ T6686] RBP: 00007fe8c4233e6f R08: 0000000000000000 R09: 0000000000000000 [ 153.806518][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.806526][ T6686] R13: 00007fe8c4426038 R14: 00007fe8c4425fa0 R15: 00007ffdb4282f78 [ 153.806547][ T6686] [ 154.297056][ T6691] openvswitch: netlink: Message has 4 unknown bytes. [ 157.414674][ T6711] Process accounting paused [ 157.944995][ T6734] Process accounting resumed [ 158.543941][ T29] audit: type=1800 audit(1783144085.815:6): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="dbroot" dev="configfs" ino=13113 res=0 errno=0 [ 159.618142][ T6767] FAULT_INJECTION: forcing a failure. [ 159.618142][ T6767] name failslab, interval 1, probability 0, space 0, times 0 [ 159.675273][ T6767] CPU: 1 UID: 0 PID: 6767 Comm: syz.2.167 Not tainted syzkaller #0 PREEMPT(full) [ 159.675311][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.675327][ T6767] Call Trace: [ 159.675337][ T6767] [ 159.675348][ T6767] dump_stack_lvl+0x100/0x190 [ 159.675382][ T6767] should_fail_ex.cold+0x5/0xa [ 159.675423][ T6767] should_failslab+0xc2/0x120 [ 159.675456][ T6767] __kmalloc_noprof+0xfc/0x820 [ 159.675487][ T6767] ? ext4_find_extent+0x21b/0xa30 [ 159.675531][ T6767] ext4_find_extent+0x21b/0xa30 [ 159.675573][ T6767] ext4_ext_map_blocks+0x215/0x59a0 [ 159.675622][ T6767] ? __pfx_stack_trace_save+0x10/0x10 [ 159.675657][ T6767] ? stack_depot_save_flags+0x27/0x9d0 [ 159.675694][ T6767] ? folios_put_refs+0x58a/0xaa0 [ 159.675738][ T6767] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 159.675779][ T6767] ? __lock_acquire+0x49f/0x1a40 [ 159.675816][ T6767] ? vfs_fsync_range+0x9b/0x190 [ 159.675841][ T6767] ? __do_sys_msync+0x3ca/0x590 [ 159.675865][ T6767] ? do_syscall_64+0x115/0x840 [ 159.675904][ T6767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.675968][ T6767] ext4_map_create_blocks+0xec/0x5e0 [ 159.675998][ T6767] ? ext4_fc_eligible.isra.0+0x1/0x110 [ 159.676040][ T6767] ext4_map_blocks+0x46b/0xd30 [ 159.676074][ T6767] ? __pfx_ext4_map_blocks+0x10/0x10 [ 159.676111][ T6767] ? ext4_ext_index_trans_blocks+0x167/0x1a0 [ 159.676150][ T6767] ? __ext4_journal_ensure_credits+0x265/0x2f0 [ 159.676190][ T6767] ext4_do_writepages+0x224c/0x3ed0 [ 159.676225][ T6767] ? rcu_is_watching+0x12/0xc0 [ 159.676283][ T6767] ? __pfx_ext4_do_writepages+0x10/0x10 [ 159.676338][ T6767] ? ext4_writepages+0x347/0x750 [ 159.676372][ T6767] ext4_writepages+0x347/0x750 [ 159.676418][ T6767] ? __pfx_ext4_writepages+0x10/0x10 [ 159.676466][ T6767] ? do_writepages+0x4b5/0x600 [ 159.676495][ T6767] ? do_writepages+0x4b5/0x600 [ 159.676528][ T6767] ? __pfx_ext4_writepages+0x10/0x10 [ 159.676565][ T6767] do_writepages+0x278/0x600 [ 159.676599][ T6767] ? __pfx_do_writepages+0x10/0x10 [ 159.676629][ T6767] ? do_raw_spin_unlock+0x145/0x1e0 [ 159.676656][ T6767] ? _raw_spin_unlock+0x28/0x50 [ 159.676696][ T6767] filemap_writeback+0x22d/0x2e0 [ 159.676735][ T6767] ? __pfx_filemap_writeback+0x10/0x10 [ 159.676810][ T6767] ? mt_find+0x45e/0x8e0 [ 159.676842][ T6767] ? __pfx_mt_find+0x10/0x10 [ 159.676874][ T6767] file_write_and_wait_range+0xcd/0x140 [ 159.676916][ T6767] ext4_sync_file+0x358/0xb60 [ 159.676955][ T6767] ? __pfx_ext4_sync_file+0x10/0x10 [ 159.676988][ T6767] ? __up_read+0x280/0x980 [ 159.677013][ T6767] ? __pfx___up_read+0x10/0x10 [ 159.677036][ T6767] ? __do_sys_msync+0x39b/0x590 [ 159.677065][ T6767] ? __pfx_ext4_sync_file+0x10/0x10 [ 159.677096][ T6767] vfs_fsync_range+0x9b/0x190 [ 159.677125][ T6767] __do_sys_msync+0x3ca/0x590 [ 159.677163][ T6767] do_syscall_64+0x115/0x840 [ 159.677202][ T6767] ? clear_bhb_loop+0x40/0x90 [ 159.677237][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.677266][ T6767] RIP: 0033:0x7fe8c419de59 [ 159.677290][ T6767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.677315][ T6767] RSP: 002b:00007fe8c50bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 159.677343][ T6767] RAX: ffffffffffffffda RBX: 00007fe8c4425fa0 RCX: 00007fe8c419de59 [ 159.677361][ T6767] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 159.677379][ T6767] RBP: 00007fe8c4233e6f R08: 0000000000000000 R09: 0000000000000000 [ 159.677396][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.677422][ T6767] R13: 00007fe8c4426038 R14: 00007fe8c4425fa0 R15: 00007ffdb4282f78 [ 159.677461][ T6767] [ 161.014791][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 162.292253][ T6806] FAULT_INJECTION: forcing a failure. [ 162.292253][ T6806] name failslab, interval 1, probability 0, space 0, times 0 [ 162.370870][ T6807] openvswitch: netlink: Message has 4 unknown bytes. [ 162.402166][ T6806] CPU: 0 UID: 0 PID: 6806 Comm: syz.1.165 Not tainted syzkaller #0 PREEMPT(full) [ 162.402186][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.402195][ T6806] Call Trace: [ 162.402206][ T6806] [ 162.402212][ T6806] dump_stack_lvl+0x100/0x190 [ 162.402233][ T6806] should_fail_ex.cold+0x5/0xa [ 162.402251][ T6806] should_failslab+0xc2/0x120 [ 162.402270][ T6806] __kmalloc_cache_noprof+0x91/0x6c0 [ 162.402293][ T6806] ? __lock_acquire+0x49f/0x1a40 [ 162.402314][ T6806] ? tty_open+0x139/0xfa0 [ 162.402333][ T6806] ? __pfx_tty_open+0x10/0x10 [ 162.402351][ T6806] tty_open+0x139/0xfa0 [ 162.402371][ T6806] ? __pfx_tty_open+0x10/0x10 [ 162.402388][ T6806] ? chrdev_open+0x10b/0x6a0 [ 162.402410][ T6806] ? chrdev_open+0x10b/0x6a0 [ 162.402434][ T6806] ? __pfx_tty_open+0x10/0x10 [ 162.402451][ T6806] chrdev_open+0x234/0x6a0 [ 162.402472][ T6806] ? __pfx_apparmor_file_open+0x10/0x10 [ 162.402496][ T6806] ? __pfx_chrdev_open+0x10/0x10 [ 162.402519][ T6806] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 162.402538][ T6806] do_dentry_open+0x6ab/0x14d0 [ 162.402560][ T6806] ? __pfx_chrdev_open+0x10/0x10 [ 162.402587][ T6806] vfs_open+0x82/0x3f0 [ 162.402605][ T6806] path_openat+0x2873/0x4280 [ 162.402635][ T6806] ? __pfx_path_openat+0x10/0x10 [ 162.402662][ T6806] do_file_open+0x20e/0x430 [ 162.402686][ T6806] ? __pfx_do_file_open+0x10/0x10 [ 162.402724][ T6806] ? alloc_fd+0x471/0x7a0 [ 162.402747][ T6806] ? do_getname+0x191/0x390 [ 162.402764][ T6806] do_sys_openat2+0x10f/0x1e0 [ 162.402781][ T6806] ? __pfx_do_sys_openat2+0x10/0x10 [ 162.402799][ T6806] ? find_held_lock+0x2b/0x80 [ 162.402819][ T6806] __x64_sys_openat+0x12d/0x210 [ 162.402837][ T6806] ? __pfx___x64_sys_openat+0x10/0x10 [ 162.402861][ T6806] do_syscall_64+0x115/0x840 [ 162.402882][ T6806] ? clear_bhb_loop+0x40/0x90 [ 162.402900][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.402915][ T6806] RIP: 0033:0x7f8e2bf9de59 [ 162.402929][ T6806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.402942][ T6806] RSP: 002b:00007f8e2ce31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.402956][ T6806] RAX: ffffffffffffffda RBX: 00007f8e2c226090 RCX: 00007f8e2bf9de59 [ 162.402966][ T6806] RDX: 0000000000040000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 162.402976][ T6806] RBP: 00007f8e2c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 162.402985][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.402994][ T6806] R13: 00007f8e2c226128 R14: 00007f8e2c226090 R15: 00007ffdc94e9e68 [ 162.403013][ T6806] [ 163.043230][ T29] audit: type=1800 audit(1783144090.315:7): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.168" name="dbroot" dev="configfs" ino=13289 res=0 errno=0 [ 167.034899][ T6875] openvswitch: netlink: Message has 4 unknown bytes. [ 167.118515][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 167.477552][ T29] audit: type=1800 audit(1783144094.755:8): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.180" name="dbroot" dev="configfs" ino=14564 res=0 errno=0 [ 168.750962][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 169.130696][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 169.307323][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'. [ 171.643447][ T29] audit: type=1800 audit(1783144098.915:9): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.192" name="dbroot" dev="configfs" ino=14178 res=0 errno=0 [ 171.810723][ T6927] FAULT_INJECTION: forcing a failure. [ 171.810723][ T6927] name failslab, interval 1, probability 0, space 0, times 0 [ 171.849639][ T6927] CPU: 0 UID: 0 PID: 6927 Comm: syz.2.187 Not tainted syzkaller #0 PREEMPT(full) [ 171.849679][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.849700][ T6927] Call Trace: [ 171.849709][ T6927] [ 171.849720][ T6927] dump_stack_lvl+0x100/0x190 [ 171.849761][ T6927] should_fail_ex.cold+0x5/0xa [ 171.849796][ T6927] should_failslab+0xc2/0x120 [ 171.849832][ T6927] __kmalloc_noprof+0xfc/0x820 [ 171.849864][ T6927] ? lockdep_init_map_type+0x5c/0x250 [ 171.849906][ T6927] ? ops_init+0x77/0x5f0 [ 171.849945][ T6927] ops_init+0x77/0x5f0 [ 171.849989][ T6927] setup_net+0x118/0x3a0 [ 171.850024][ T6927] ? __pfx_setup_net+0x10/0x10 [ 171.850059][ T6927] ? mutex_init_lockdep+0xf1/0x120 [ 171.850109][ T6927] copy_net_ns+0x46f/0x7c0 [ 171.850150][ T6927] create_new_namespaces+0x3ea/0xac0 [ 171.850204][ T6927] unshare_nsproxy_namespaces+0xf2/0x220 [ 171.850254][ T6927] ksys_unshare+0x438/0xab0 [ 171.850290][ T6927] ? __pfx_ksys_unshare+0x10/0x10 [ 171.850338][ T6927] __x64_sys_unshare+0x31/0x40 [ 171.850371][ T6927] do_syscall_64+0x115/0x840 [ 171.850413][ T6927] ? clear_bhb_loop+0x40/0x90 [ 171.850449][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.850478][ T6927] RIP: 0033:0x7fe8c419de59 [ 171.850498][ T6927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.850526][ T6927] RSP: 002b:00007fe8c50bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 171.850553][ T6927] RAX: ffffffffffffffda RBX: 00007fe8c4425fa0 RCX: 00007fe8c419de59 [ 171.850572][ T6927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 171.850589][ T6927] RBP: 00007fe8c4233e6f R08: 0000000000000000 R09: 0000000000000000 [ 171.850606][ T6927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.850623][ T6927] R13: 00007fe8c4426038 R14: 00007fe8c4425fa0 R15: 00007ffdb4282f78 [ 171.850661][ T6927] [ 174.062763][ T6967] Process accounting paused [ 174.453068][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 175.833764][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 175.874101][ T7034] nbd: must specify a size in bytes for the device [ 177.162083][ T7060] bridge0: port 3(team0) entered blocking state [ 177.171321][ T7060] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 177.180247][ T7060] bridge0: port 3(team0) entered disabled state [ 177.191954][ T7060] team0: entered allmulticast mode [ 177.199167][ T7060] team_slave_0: entered allmulticast mode [ 177.209125][ T7060] team_slave_1: entered allmulticast mode [ 177.225029][ T7060] team0: entered promiscuous mode [ 177.231555][ T7060] team_slave_0: entered promiscuous mode [ 177.239680][ T7060] team_slave_1: entered promiscuous mode [ 177.257631][ T7060] bridge0: port 3(team0) entered blocking state [ 177.264839][ T7060] bridge0: port 3(team0) entered forwarding state [ 178.061840][ T7079] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 179.340905][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 180.405300][ T7124] FAULT_INJECTION: forcing a failure. [ 180.405300][ T7124] name failslab, interval 1, probability 0, space 0, times 0 [ 180.418453][ T7124] CPU: 1 UID: 0 PID: 7124 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(full) [ 180.418489][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.418505][ T7124] Call Trace: [ 180.418516][ T7124] [ 180.418526][ T7124] dump_stack_lvl+0x100/0x190 [ 180.418562][ T7124] should_fail_ex.cold+0x5/0xa [ 180.418594][ T7124] should_failslab+0xc2/0x120 [ 180.418628][ T7124] kmem_cache_alloc_noprof+0x91/0x6a0 [ 180.418661][ T7124] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 180.418694][ T7124] ext4_alloc_io_end_vec+0x2b/0x1c0 [ 180.418724][ T7124] ext4_do_writepages+0x171c/0x3ed0 [ 180.418760][ T7124] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 180.418806][ T7124] ? trace_hrtimer_start+0x77/0x220 [ 180.418855][ T7124] ? __pfx_ext4_do_writepages+0x10/0x10 [ 180.418913][ T7124] ? ext4_writepages+0x347/0x750 [ 180.418949][ T7124] ext4_writepages+0x347/0x750 [ 180.418986][ T7124] ? __pfx_ext4_writepages+0x10/0x10 [ 180.419039][ T7124] ? do_writepages+0x4b5/0x600 [ 180.419074][ T7124] ? do_writepages+0x4b5/0x600 [ 180.419107][ T7124] ? __pfx_ext4_writepages+0x10/0x10 [ 180.419147][ T7124] do_writepages+0x278/0x600 [ 180.419183][ T7124] ? __pfx_do_writepages+0x10/0x10 [ 180.419213][ T7124] ? do_raw_spin_unlock+0x145/0x1e0 [ 180.419242][ T7124] ? _raw_spin_unlock+0x28/0x50 [ 180.419278][ T7124] filemap_writeback+0x22d/0x2e0 [ 180.419311][ T7124] ? __pfx_filemap_writeback+0x10/0x10 [ 180.419395][ T7124] ? mt_find+0x45e/0x8e0 [ 180.419427][ T7124] ? __pfx_mt_find+0x10/0x10 [ 180.419456][ T7124] file_write_and_wait_range+0xcd/0x140 [ 180.419495][ T7124] ext4_sync_file+0x358/0xb60 [ 180.419532][ T7124] ? __pfx_ext4_sync_file+0x10/0x10 [ 180.419580][ T7124] ? __up_read+0x280/0x980 [ 180.419606][ T7124] ? __pfx___up_read+0x10/0x10 [ 180.419630][ T7124] ? __do_sys_msync+0x39b/0x590 [ 180.419658][ T7124] ? __pfx_ext4_sync_file+0x10/0x10 [ 180.419688][ T7124] vfs_fsync_range+0x9b/0x190 [ 180.419718][ T7124] __do_sys_msync+0x3ca/0x590 [ 180.419752][ T7124] do_syscall_64+0x115/0x840 [ 180.419792][ T7124] ? clear_bhb_loop+0x40/0x90 [ 180.419827][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.419853][ T7124] RIP: 0033:0x7f546d19de59 [ 180.419878][ T7124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.419902][ T7124] RSP: 002b:00007f546e098028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 180.419929][ T7124] RAX: ffffffffffffffda RBX: 00007f546d426180 RCX: 00007f546d19de59 [ 180.419947][ T7124] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 180.419964][ T7124] RBP: 00007f546d233e6f R08: 0000000000000000 R09: 0000000000000000 [ 180.419979][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.419994][ T7124] R13: 00007f546d426218 R14: 00007f546d426180 R15: 00007fffb7330758 [ 180.420029][ T7124] [ 180.768310][ T7125] openvswitch: netlink: Message has 4 unknown bytes. [ 183.381313][ T7175] Process accounting paused [ 183.670340][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 183.900075][ T7189] FAULT_INJECTION: forcing a failure. [ 183.900075][ T7189] name failslab, interval 1, probability 0, space 0, times 0 [ 183.925877][ T7189] CPU: 0 UID: 0 PID: 7189 Comm: syz.1.232 Not tainted syzkaller #0 PREEMPT(full) [ 183.925915][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.925932][ T7189] Call Trace: [ 183.925941][ T7189] [ 183.925951][ T7189] dump_stack_lvl+0x100/0x190 [ 183.925989][ T7189] should_fail_ex.cold+0x5/0xa [ 183.926022][ T7189] should_failslab+0xc2/0x120 [ 183.926059][ T7189] kmem_cache_alloc_noprof+0x91/0x6a0 [ 183.926108][ T7189] ? jbd2__journal_start+0x194/0x6a0 [ 183.926143][ T7189] jbd2__journal_start+0x194/0x6a0 [ 183.926177][ T7189] __ext4_journal_start_sb+0x367/0x670 [ 183.926213][ T7189] ? ext4_do_writepages+0xc1c/0x3ed0 [ 183.926253][ T7189] ext4_do_writepages+0xc1c/0x3ed0 [ 183.926289][ T7189] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 183.926333][ T7189] ? trace_hrtimer_start+0x77/0x220 [ 183.926380][ T7189] ? __pfx_ext4_do_writepages+0x10/0x10 [ 183.926437][ T7189] ? ext4_writepages+0x347/0x750 [ 183.926469][ T7189] ext4_writepages+0x347/0x750 [ 183.926499][ T7189] ? __pfx_ext4_writepages+0x10/0x10 [ 183.926552][ T7189] ? __pfx_ext4_writepages+0x10/0x10 [ 183.926588][ T7189] do_writepages+0x278/0x600 [ 183.926623][ T7189] ? __pfx_do_writepages+0x10/0x10 [ 183.926656][ T7189] ? do_raw_spin_unlock+0x145/0x1e0 [ 183.926684][ T7189] ? _raw_spin_unlock+0x28/0x50 [ 183.926717][ T7189] filemap_writeback+0x22d/0x2e0 [ 183.926750][ T7189] ? __pfx_filemap_writeback+0x10/0x10 [ 183.926823][ T7189] ? mt_find+0x45e/0x8e0 [ 183.926855][ T7189] ? __pfx_mt_find+0x10/0x10 [ 183.926886][ T7189] file_write_and_wait_range+0xcd/0x140 [ 183.926929][ T7189] ext4_sync_file+0x358/0xb60 [ 183.926967][ T7189] ? __pfx_ext4_sync_file+0x10/0x10 [ 183.927000][ T7189] ? __up_read+0x280/0x980 [ 183.927028][ T7189] ? __pfx___up_read+0x10/0x10 [ 183.927052][ T7189] ? __do_sys_msync+0x39b/0x590 [ 183.927091][ T7189] ? __pfx_ext4_sync_file+0x10/0x10 [ 183.927126][ T7189] vfs_fsync_range+0x9b/0x190 [ 183.927159][ T7189] __do_sys_msync+0x3ca/0x590 [ 183.927196][ T7189] do_syscall_64+0x115/0x840 [ 183.927237][ T7189] ? clear_bhb_loop+0x40/0x90 [ 183.927272][ T7189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.927301][ T7189] RIP: 0033:0x7f8e2bf9de59 [ 183.927325][ T7189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.927350][ T7189] RSP: 002b:00007f8e2ce52028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 183.927377][ T7189] RAX: ffffffffffffffda RBX: 00007f8e2c225fa0 RCX: 00007f8e2bf9de59 [ 183.927397][ T7189] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 183.927415][ T7189] RBP: 00007f8e2c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 183.927433][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.927449][ T7189] R13: 00007f8e2c226038 R14: 00007f8e2c225fa0 R15: 00007ffdc94e9e68 [ 183.927486][ T7189] [ 183.927634][ T7189] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2022; err -12 [ 187.031081][ T29] audit: type=1800 audit(1783144114.305:10): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.248" name="dbroot" dev="configfs" ino=16175 res=0 errno=0 [ 187.440843][ T7261] Process accounting resumed [ 188.551350][ T7292] Process accounting paused [ 189.810837][ T7312] vhci_hcd vhci_hcd.1: invalid port number 99 [ 189.844040][ T7312] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 190.410385][ T29] audit: type=1800 audit(1783144117.685:11): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.259" name="dbroot" dev="configfs" ino=16892 res=0 errno=0 [ 191.350249][ T29] audit: type=1800 audit(1783144118.625:12): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.271" name="dbroot" dev="configfs" ino=17425 res=0 errno=0 [ 191.816758][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 193.354583][ T7384] ovs_: entered promiscuous mode [ 193.355197][ T7396] netlink: 342 bytes leftover after parsing attributes in process `syz.1.269'. [ 193.419492][ T7396] FAULT_INJECTION: forcing a failure. [ 193.419492][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 193.473510][ T7396] CPU: 0 UID: 0 PID: 7396 Comm: syz.1.269 Not tainted syzkaller #0 PREEMPT(full) [ 193.473549][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.473566][ T7396] Call Trace: [ 193.473575][ T7396] [ 193.473586][ T7396] dump_stack_lvl+0x100/0x190 [ 193.473623][ T7396] should_fail_ex.cold+0x5/0xa [ 193.473657][ T7396] should_failslab+0xc2/0x120 [ 193.473694][ T7396] __kmalloc_noprof+0xfc/0x820 [ 193.473724][ T7396] ? trace_kmem_cache_alloc+0xdd/0x100 [ 193.473764][ T7396] ? tnode_new+0x2f7/0x350 [ 193.473804][ T7396] tnode_new+0x2f7/0x350 [ 193.473841][ T7396] fib_insert_alias+0x6e7/0xe30 [ 193.473878][ T7396] ? lockdep_rtnl_is_held+0x26/0x40 [ 193.473928][ T7396] fib_trie_unmerge+0x289/0xbd0 [ 193.473974][ T7396] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 193.474012][ T7396] ? __pfx___mutex_lock+0x10/0x10 [ 193.474069][ T7396] fib_unmerge+0xee/0x510 [ 193.474110][ T7396] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 193.474153][ T7396] fib4_rule_configure+0x383/0x10c0 [ 193.474191][ T7396] fib_newrule+0x356/0x1ed0 [ 193.474244][ T7396] ? __pfx_fib_newrule+0x10/0x10 [ 193.474284][ T7396] ? __pfx_rcu_is_watching+0x10/0x10 [ 193.474324][ T7396] ? trace_sched_exit_tp+0x120/0x160 [ 193.474387][ T7396] ? find_held_lock+0x2b/0x80 [ 193.474418][ T7396] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 193.474452][ T7396] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 193.474488][ T7396] ? __pfx_fib_nl_newrule+0x10/0x10 [ 193.474530][ T7396] rtnetlink_rcv_msg+0x95e/0xe90 [ 193.474568][ T7396] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 193.474611][ T7396] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 193.474654][ T7396] netlink_rcv_skb+0x159/0x420 [ 193.474696][ T7396] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 193.474733][ T7396] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.474789][ T7396] ? netlink_deliver_tap+0x1ae/0xcc0 [ 193.474836][ T7396] netlink_unicast+0x585/0x850 [ 193.474883][ T7396] ? __pfx_netlink_unicast+0x10/0x10 [ 193.474930][ T7396] netlink_sendmsg+0x8b0/0xda0 [ 193.474976][ T7396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.475020][ T7396] ? apparmor_socket_sendmsg+0x15b/0x270 [ 193.475068][ T7396] ____sys_sendmsg+0xa4d/0xbe0 [ 193.475103][ T7396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.475146][ T7396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.475191][ T7396] ? rcu_is_watching+0x12/0xc0 [ 193.475221][ T7396] ? ___sys_sendmsg+0x19d/0x1e0 [ 193.475259][ T7396] ? kfree+0x1e5/0x6c0 [ 193.475304][ T7396] ___sys_sendmsg+0x190/0x1e0 [ 193.475358][ T7396] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.475401][ T7396] ? futex_hash+0x311/0x400 [ 193.475471][ T7396] ? __pfx___might_resched+0x10/0x10 [ 193.475519][ T7396] __sys_sendmmsg+0x20c/0x440 [ 193.475556][ T7396] ? __pfx___sys_sendmmsg+0x10/0x10 [ 193.475586][ T7396] ? __fget_files+0x215/0x3d0 [ 193.475637][ T7396] ? __pfx_do_futex+0x10/0x10 [ 193.475684][ T7396] ? xfd_validate_state+0x129/0x190 [ 193.475724][ T7396] __x64_sys_sendmmsg+0x9c/0x100 [ 193.475756][ T7396] ? lockdep_hardirqs_on+0x78/0x100 [ 193.475798][ T7396] do_syscall_64+0x115/0x840 [ 193.475838][ T7396] ? clear_bhb_loop+0x40/0x90 [ 193.475873][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.475902][ T7396] RIP: 0033:0x7f8e2bf9de59 [ 193.475926][ T7396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.475952][ T7396] RSP: 002b:00007f8e2ce31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 193.475979][ T7396] RAX: ffffffffffffffda RBX: 00007f8e2c226090 RCX: 00007f8e2bf9de59 [ 193.475998][ T7396] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 193.476015][ T7396] RBP: 00007f8e2c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 193.476032][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.476048][ T7396] R13: 00007f8e2c226128 R14: 00007f8e2c226090 R15: 00007ffdc94e9e68 [ 193.476086][ T7396] [ 194.197771][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204110][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.591581][ T7421] openvswitch: netlink: Message has 4 unknown bytes. [ 195.832358][ T29] audit: type=1800 audit(1783144123.105:13): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.275" name="dbroot" dev="configfs" ino=17657 res=0 errno=0 [ 196.699974][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 197.571517][ T7467] bridge0: port 3(team0) entered blocking state [ 197.621701][ T7467] bridge0: port 3(team0) entered disabled state [ 197.642054][ T7467] team0: entered allmulticast mode [ 197.676675][ T7467] team_slave_0: entered allmulticast mode [ 197.709828][ T7467] team_slave_1: entered allmulticast mode [ 197.752075][ T7467] team0: entered promiscuous mode [ 197.766079][ T7467] team_slave_0: entered promiscuous mode [ 197.786677][ T7467] team_slave_1: entered promiscuous mode [ 197.812821][ T7467] bridge0: port 3(team0) entered blocking state [ 197.819187][ T7467] bridge0: port 3(team0) entered forwarding state [ 198.424129][ T7472] netlink: 504 bytes leftover after parsing attributes in process `syz.0.282'. [ 198.520824][ T7472] netlink: 350 bytes leftover after parsing attributes in process `syz.0.282'. [ 200.203626][ T7501] FAULT_INJECTION: forcing a failure. [ 200.203626][ T7501] name failslab, interval 1, probability 0, space 0, times 0 [ 200.243025][ T7501] CPU: 1 UID: 0 PID: 7501 Comm: syz.2.286 Not tainted syzkaller #0 PREEMPT(full) [ 200.243064][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.243091][ T7501] Call Trace: [ 200.243100][ T7501] [ 200.243111][ T7501] dump_stack_lvl+0x100/0x190 [ 200.243150][ T7501] should_fail_ex.cold+0x5/0xa [ 200.243188][ T7501] should_failslab+0xc2/0x120 [ 200.243225][ T7501] kmem_cache_alloc_noprof+0x91/0x6a0 [ 200.243258][ T7501] ? jbd2__journal_start+0x24a/0x6a0 [ 200.243291][ T7501] jbd2__journal_start+0x24a/0x6a0 [ 200.243321][ T7501] __ext4_journal_start_sb+0x367/0x670 [ 200.243360][ T7501] ? ext4_do_writepages+0xc1c/0x3ed0 [ 200.243405][ T7501] ext4_do_writepages+0xc1c/0x3ed0 [ 200.243441][ T7501] ? rcu_is_watching+0x12/0xc0 [ 200.243472][ T7501] ? trace_hrtimer_start+0x77/0x220 [ 200.243504][ T7501] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 200.243548][ T7501] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 200.243600][ T7501] ? __pfx_ext4_do_writepages+0x10/0x10 [ 200.243656][ T7501] ? ext4_writepages+0x347/0x750 [ 200.243692][ T7501] ext4_writepages+0x347/0x750 [ 200.243731][ T7501] ? __pfx_ext4_writepages+0x10/0x10 [ 200.243800][ T7501] ? __pfx_ext4_writepages+0x10/0x10 [ 200.243841][ T7501] do_writepages+0x278/0x600 [ 200.243879][ T7501] ? __pfx_do_writepages+0x10/0x10 [ 200.243910][ T7501] ? do_raw_spin_unlock+0x145/0x1e0 [ 200.243939][ T7501] ? _raw_spin_unlock+0x28/0x50 [ 200.243979][ T7501] filemap_writeback+0x22d/0x2e0 [ 200.244016][ T7501] ? __pfx_filemap_writeback+0x10/0x10 [ 200.244056][ T7501] ? plist_check_list+0x1b8/0x280 [ 200.244136][ T7501] ? mt_find+0x45e/0x8e0 [ 200.244168][ T7501] ? __pfx_mt_find+0x10/0x10 [ 200.244201][ T7501] file_write_and_wait_range+0xcd/0x140 [ 200.244244][ T7501] ext4_sync_file+0x358/0xb60 [ 200.244282][ T7501] ? __pfx_ext4_sync_file+0x10/0x10 [ 200.244314][ T7501] ? __up_read+0x280/0x980 [ 200.244342][ T7501] ? __pfx___up_read+0x10/0x10 [ 200.244367][ T7501] ? __do_sys_msync+0x39b/0x590 [ 200.244397][ T7501] ? __pfx_ext4_sync_file+0x10/0x10 [ 200.244430][ T7501] vfs_fsync_range+0x9b/0x190 [ 200.244462][ T7501] __do_sys_msync+0x3ca/0x590 [ 200.244498][ T7501] do_syscall_64+0x115/0x840 [ 200.244550][ T7501] ? clear_bhb_loop+0x40/0x90 [ 200.244586][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.244615][ T7501] RIP: 0033:0x7fe8c419de59 [ 200.244640][ T7501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.244666][ T7501] RSP: 002b:00007fe8c50bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 200.244694][ T7501] RAX: ffffffffffffffda RBX: 00007fe8c4425fa0 RCX: 00007fe8c419de59 [ 200.244713][ T7501] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 200.244731][ T7501] RBP: 00007fe8c4233e6f R08: 0000000000000000 R09: 0000000000000000 [ 200.244749][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.244766][ T7501] R13: 00007fe8c4426038 R14: 00007fe8c4425fa0 R15: 00007ffdb4282f78 [ 200.244812][ T7501] [ 200.548101][ T7501] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2022; err -12 [ 201.564189][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 204.621126][ T7559] Process accounting resumed [ 205.205772][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 206.564540][ T7596] openvswitch: netlink: Message has 4 unknown bytes. [ 207.006914][ T29] audit: type=1800 audit(1783144134.275:14): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.307" name="dbroot" dev="configfs" ino=18772 res=0 errno=0 [ 211.442656][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 212.257379][ T29] audit: type=1800 audit(1783144139.535:15): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.318" name="dbroot" dev="configfs" ino=19558 res=0 errno=0 [ 213.481007][ T7701] random: crng reseeded on system resumption [ 213.573575][ T7697] Process accounting resumed [ 214.322471][ T7710] FAULT_INJECTION: forcing a failure. [ 214.322471][ T7710] name failslab, interval 1, probability 0, space 0, times 0 [ 214.364640][ T7710] CPU: 1 UID: 0 PID: 7710 Comm: syz.2.322 Not tainted syzkaller #0 PREEMPT(full) [ 214.364677][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.364693][ T7710] Call Trace: [ 214.364702][ T7710] [ 214.364712][ T7710] dump_stack_lvl+0x100/0x190 [ 214.364748][ T7710] should_fail_ex.cold+0x5/0xa [ 214.364780][ T7710] should_failslab+0xc2/0x120 [ 214.364817][ T7710] kmem_cache_alloc_noprof+0x91/0x6a0 [ 214.364850][ T7710] ? jbd2__journal_start+0x24a/0x6a0 [ 214.364887][ T7710] jbd2__journal_start+0x24a/0x6a0 [ 214.364921][ T7710] __ext4_journal_start_sb+0x367/0x670 [ 214.364958][ T7710] ? ext4_do_writepages+0xc1c/0x3ed0 [ 214.364999][ T7710] ext4_do_writepages+0xc1c/0x3ed0 [ 214.365037][ T7710] ? rcu_is_watching+0x12/0xc0 [ 214.365068][ T7710] ? trace_hrtimer_start+0x77/0x220 [ 214.365099][ T7710] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 214.365142][ T7710] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 214.365197][ T7710] ? __pfx_ext4_do_writepages+0x10/0x10 [ 214.365254][ T7710] ? ext4_writepages+0x347/0x750 [ 214.365289][ T7710] ext4_writepages+0x347/0x750 [ 214.365334][ T7710] ? __pfx_ext4_writepages+0x10/0x10 [ 214.365394][ T7710] ? __pfx_ext4_writepages+0x10/0x10 [ 214.365435][ T7710] do_writepages+0x278/0x600 [ 214.365473][ T7710] ? __pfx_do_writepages+0x10/0x10 [ 214.365505][ T7710] ? do_raw_spin_unlock+0x145/0x1e0 [ 214.365534][ T7710] ? _raw_spin_unlock+0x28/0x50 [ 214.365577][ T7710] filemap_writeback+0x22d/0x2e0 [ 214.365613][ T7710] ? __pfx_filemap_writeback+0x10/0x10 [ 214.365689][ T7710] ? mt_find+0x45e/0x8e0 [ 214.365721][ T7710] ? __pfx_mt_find+0x10/0x10 [ 214.365753][ T7710] file_write_and_wait_range+0xcd/0x140 [ 214.365796][ T7710] ext4_sync_file+0x358/0xb60 [ 214.365832][ T7710] ? __pfx_ext4_sync_file+0x10/0x10 [ 214.365865][ T7710] ? __up_read+0x280/0x980 [ 214.365893][ T7710] ? __pfx___up_read+0x10/0x10 [ 214.365917][ T7710] ? __do_sys_msync+0x39b/0x590 [ 214.365947][ T7710] ? __pfx_ext4_sync_file+0x10/0x10 [ 214.365980][ T7710] vfs_fsync_range+0x9b/0x190 [ 214.366013][ T7710] __do_sys_msync+0x3ca/0x590 [ 214.366049][ T7710] do_syscall_64+0x115/0x840 [ 214.366090][ T7710] ? clear_bhb_loop+0x40/0x90 [ 214.366125][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.366155][ T7710] RIP: 0033:0x7fe8c419de59 [ 214.366180][ T7710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.366207][ T7710] RSP: 002b:00007fe8c50bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 214.366234][ T7710] RAX: ffffffffffffffda RBX: 00007fe8c4425fa0 RCX: 00007fe8c419de59 [ 214.366254][ T7710] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 214.366271][ T7710] RBP: 00007fe8c4233e6f R08: 0000000000000000 R09: 0000000000000000 [ 214.366286][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.366301][ T7710] R13: 00007fe8c4426038 R14: 00007fe8c4425fa0 R15: 00007ffdb4282f78 [ 214.366343][ T7710] [ 214.724131][ T7710] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2022; err -12 [ 214.784203][ T7713] openvswitch: netlink: Message has 4 unknown bytes. [ 215.679322][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 217.924047][ T7719] Process accounting paused [ 217.945225][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 219.192654][ T7749] Process accounting resumed [ 219.588524][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 221.530428][ T7807] openvswitch: netlink: Message has 4 unknown bytes. [ 221.880600][ T7814] openvswitch: netlink: Message has 4 unknown bytes. [ 222.592135][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 224.731081][ T7878] openvswitch: netlink: Message has 4 unknown bytes. [ 225.685897][ T29] audit: type=1800 audit(4294967306.790:16): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.357" name="dbroot" dev="configfs" ino=21046 res=0 errno=0 [ 228.208917][ T7950] openvswitch: netlink: Message has 4 unknown bytes. [ 230.777404][ T8007] openvswitch: netlink: Message has 4 unknown bytes. [ 232.311272][ T8042] openvswitch: netlink: Message has 4 unknown bytes. [ 233.836360][ T8064] openvswitch: netlink: Message has 4 unknown bytes. [ 234.714119][ T8085] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist! [ 235.082951][ T8091] openvswitch: netlink: Message has 4 unknown bytes. [ 235.133403][ T8093] Process accounting paused [ 236.849828][ T8132] openvswitch: netlink: Message has 4 unknown bytes. [ 240.914084][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 241.347709][ T8229] openvswitch: netlink: Message has 4 unknown bytes. [ 242.429832][ T29] audit: type=1800 audit(4294967323.540:17): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.421" name="dbroot" dev="configfs" ino=22015 res=0 errno=0 [ 243.907978][ T8276] Process accounting paused [ 244.374951][ T8286] openvswitch: netlink: Message has 4 unknown bytes. [ 246.597042][ T29] audit: type=1800 audit(4294967327.700:18): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.433" name="dbroot" dev="configfs" ino=22266 res=0 errno=0 [ 248.850458][ T8319] Process accounting resumed [ 249.637002][ T8347] Process accounting paused [ 249.741731][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 252.052108][ T8401] openvswitch: netlink: Message has 4 unknown bytes. [ 252.513293][ T29] audit: type=1800 audit(4294967333.620:19): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.447" name="dbroot" dev="configfs" ino=24642 res=0 errno=0 [ 254.409262][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.422112][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.432267][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.445769][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.457319][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.640255][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.651708][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.905662][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.913690][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.924567][ T8440] bridge_slave_0: entered allmulticast mode [ 255.937039][ T8440] bridge_slave_0: entered promiscuous mode [ 255.946068][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.953796][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.962426][ T8440] bridge_slave_1: entered allmulticast mode [ 255.970544][ T8440] bridge_slave_1: entered promiscuous mode [ 256.027830][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.206208][ T8440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.385981][ T8440] team0: Port device team_slave_0 added [ 256.442544][ T8440] team0: Port device team_slave_1 added [ 256.516019][ T5635] Bluetooth: hci4: command tx timeout [ 256.610719][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.632641][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.716796][ T8440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.780528][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.804177][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.865206][ T8440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.037708][ T8440] hsr_slave_0: entered promiscuous mode [ 257.054475][ T8440] hsr_slave_1: entered promiscuous mode [ 257.070846][ T8440] debugfs: 'hsr0' already exists in 'hsr' [ 257.089838][ T8440] Cannot create hsr debugfs directory [ 258.596924][ T5635] Bluetooth: hci4: command tx timeout [ 258.689319][ T8440] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.722345][ T8440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 258.742627][ T8440] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.783714][ T8440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.873103][ T8440] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.901346][ T8440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.930690][ T8440] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.976271][ T8440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 259.471668][ T29] audit: type=1800 audit(4294967340.580:20): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.467" name="dbroot" dev="configfs" ino=24950 res=0 errno=0 [ 260.616147][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.675556][ T5635] Bluetooth: hci4: command tx timeout [ 260.691881][ T8440] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.747267][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.754399][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.822500][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.829712][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.529279][ T8440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.755302][ T5635] Bluetooth: hci4: command tx timeout [ 263.471179][ T8440] veth0_vlan: entered promiscuous mode [ 263.565470][ T8440] veth1_vlan: entered promiscuous mode [ 263.633850][ T8440] veth0_macvtap: entered promiscuous mode [ 263.677960][ T8440] veth1_macvtap: entered promiscuous mode [ 263.730717][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.762317][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.799390][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.849981][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.931759][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.966066][ T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.158747][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.217776][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.371868][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.403523][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.023330][ T8620] FAULT_INJECTION: forcing a failure. [ 265.023330][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 265.036421][ T8620] CPU: 0 UID: 0 PID: 8620 Comm: syz.1.479 Not tainted syzkaller #0 PREEMPT(full) [ 265.036462][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.036488][ T8620] Call Trace: [ 265.036497][ T8620] [ 265.036508][ T8620] dump_stack_lvl+0x100/0x190 [ 265.036548][ T8620] should_fail_ex.cold+0x5/0xa [ 265.036582][ T8620] should_failslab+0xc2/0x120 [ 265.036619][ T8620] kmem_cache_alloc_noprof+0x91/0x6a0 [ 265.036654][ T8620] ? vm_area_dup+0x27/0x8e0 [ 265.036704][ T8620] vm_area_dup+0x27/0x8e0 [ 265.036749][ T8620] dup_mmap+0x6f6/0x21b0 [ 265.036805][ T8620] ? __pfx_dup_mmap+0x10/0x10 [ 265.036840][ T8620] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.036888][ T8620] ? __lock_acquire+0x49f/0x1a40 [ 265.036932][ T8620] ? find_held_lock+0x2b/0x80 [ 265.036964][ T8620] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 265.037031][ T8620] copy_process+0x4588/0x8030 [ 265.037086][ T8620] ? __pfx_copy_process+0x10/0x10 [ 265.037117][ T8620] ? futex_wake+0x4ea/0x5e0 [ 265.037166][ T8620] kernel_clone+0x176/0x9d0 [ 265.037200][ T8620] ? __pfx_kernel_clone+0x10/0x10 [ 265.037254][ T8620] __do_sys_clone+0xd9/0x120 [ 265.037286][ T8620] ? __pfx___do_sys_clone+0x10/0x10 [ 265.037324][ T8620] ? fd_install+0x24f/0x580 [ 265.037395][ T8620] do_syscall_64+0x115/0x840 [ 265.037436][ T8620] ? clear_bhb_loop+0x40/0x90 [ 265.037470][ T8620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.037503][ T8620] RIP: 0033:0x7f8e2bf9de59 [ 265.037527][ T8620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.037555][ T8620] RSP: 002b:00007f8e2ce0ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 265.037589][ T8620] RAX: ffffffffffffffda RBX: 00007f8e2c226180 RCX: 00007f8e2bf9de59 [ 265.037608][ T8620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 265.037625][ T8620] RBP: 00007f8e2c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 265.037643][ T8620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 265.037660][ T8620] R13: 00007f8e2c226218 R14: 00007f8e2c226180 R15: 00007ffdc94e9e68 [ 265.037699][ T8620] [ 265.453502][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 267.515136][ T8649] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 267.822883][ T8649] openvswitch: netlink: Message has 4 unknown bytes. [ 274.194007][ T8756] Process accounting resumed [ 279.074249][ T8836] Process accounting paused [ 280.652440][ T8846] Process accounting resumed [ 292.073005][ T9055] openvswitch: netlink: Message has 4 unknown bytes. [ 293.138466][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 294.274504][ T9066] bond0: no command found in slaves file - use +ifname or -ifname [ 295.166092][ T9100] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 298.350604][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 299.779678][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 302.348268][ T29] audit: type=1800 audit(4294967383.460:21): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.578" name="dbroot" dev="configfs" ino=30361 res=0 errno=0 [ 302.945451][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 304.916418][ T9242] Process accounting paused [ 307.656373][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 309.703742][ T9294] Process accounting resumed [ 312.159499][ T9325] Process accounting paused [ 317.086661][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.094942][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.226239][ T9431] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 318.022491][ T29] audit: type=1800 audit(4294967399.130:22): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.619" name="dbroot" dev="configfs" ino=32282 res=0 errno=0 [ 320.641609][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'. [ 321.507936][ T9504] openvswitch: netlink: Message has 4 unknown bytes. [ 326.844485][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 328.923764][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 331.777102][ T9673] openvswitch: netlink: Message has 4 unknown bytes. [ 335.762988][ T9729] Process accounting resumed [ 336.219989][ T9742] openvswitch: netlink: Message has 4 unknown bytes. [ 336.386343][ T9760] random: crng reseeded on system resumption [ 336.970310][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.669'. [ 338.201966][ T9786] openvswitch: netlink: Message has 4 unknown bytes. [ 338.943070][ T9794] openvswitch: netlink: Message has 4 unknown bytes. [ 339.781706][ T9807] openvswitch: netlink: Message has 4 unknown bytes. [ 340.171238][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 340.696205][ T9813] Process accounting paused [ 343.238930][ T9856] Process accounting resumed [ 343.740135][ T9880] FAULT_INJECTION: forcing a failure. [ 343.740135][ T9880] name failslab, interval 1, probability 0, space 0, times 0 [ 343.765209][ T9880] CPU: 0 UID: 0 PID: 9880 Comm: syz.2.694 Not tainted syzkaller #0 PREEMPT(full) [ 343.765249][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 343.765265][ T9880] Call Trace: [ 343.765274][ T9880] [ 343.765284][ T9880] dump_stack_lvl+0x100/0x190 [ 343.765320][ T9880] should_fail_ex.cold+0x5/0xa [ 343.765361][ T9880] should_failslab+0xc2/0x120 [ 343.765398][ T9880] kmem_cache_alloc_noprof+0x91/0x6a0 [ 343.765430][ T9880] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 343.765466][ T9880] ext4_alloc_io_end_vec+0x2b/0x1c0 [ 343.765497][ T9880] ext4_do_writepages+0x171c/0x3ed0 [ 343.765534][ T9880] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 343.765577][ T9880] ? trace_hrtimer_start+0x77/0x220 [ 343.765625][ T9880] ? __pfx_ext4_do_writepages+0x10/0x10 [ 343.765679][ T9880] ? ext4_writepages+0x347/0x750 [ 343.765713][ T9880] ext4_writepages+0x347/0x750 [ 343.765750][ T9880] ? __pfx_ext4_writepages+0x10/0x10 [ 343.765800][ T9880] ? do_writepages+0x4b5/0x600 [ 343.765830][ T9880] ? do_writepages+0x4b5/0x600 [ 343.765863][ T9880] ? __pfx_ext4_writepages+0x10/0x10 [ 343.765903][ T9880] do_writepages+0x278/0x600 [ 343.765939][ T9880] ? __pfx_do_writepages+0x10/0x10 [ 343.765968][ T9880] ? do_raw_spin_unlock+0x145/0x1e0 [ 343.765997][ T9880] ? _raw_spin_unlock+0x28/0x50 [ 343.766036][ T9880] filemap_writeback+0x22d/0x2e0 [ 343.766073][ T9880] ? __pfx_filemap_writeback+0x10/0x10 [ 343.766149][ T9880] ? mt_find+0x45e/0x8e0 [ 343.766180][ T9880] ? __pfx_mt_find+0x10/0x10 [ 343.766212][ T9880] file_write_and_wait_range+0xcd/0x140 [ 343.766252][ T9880] ext4_sync_file+0x358/0xb60 [ 343.766290][ T9880] ? __pfx_ext4_sync_file+0x10/0x10 [ 343.766323][ T9880] ? __up_read+0x280/0x980 [ 343.766355][ T9880] ? __pfx___up_read+0x10/0x10 [ 343.766380][ T9880] ? __do_sys_msync+0x39b/0x590 [ 343.766411][ T9880] ? __pfx_ext4_sync_file+0x10/0x10 [ 343.766442][ T9880] vfs_fsync_range+0x9b/0x190 [ 343.766474][ T9880] __do_sys_msync+0x3ca/0x590 [ 343.766509][ T9880] do_syscall_64+0x115/0x840 [ 343.766546][ T9880] ? clear_bhb_loop+0x40/0x90 [ 343.766578][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.766604][ T9880] RIP: 0033:0x7fe8c419de59 [ 343.766627][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.766654][ T9880] RSP: 002b:00007fe8c50bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 343.766681][ T9880] RAX: ffffffffffffffda RBX: 00007fe8c4425fa0 RCX: 00007fe8c419de59 [ 343.766698][ T9880] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 343.766716][ T9880] RBP: 00007fe8c4233e6f R08: 0000000000000000 R09: 0000000000000000 [ 343.766732][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.766747][ T9880] R13: 00007fe8c4426038 R14: 00007fe8c4425fa0 R15: 00007ffdb4282f78 [ 343.766786][ T9880] [ 344.783111][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 345.257959][ T9910] FAULT_INJECTION: forcing a failure. [ 345.257959][ T9910] name failslab, interval 1, probability 0, space 0, times 0 [ 345.285269][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.4.698 Not tainted syzkaller #0 PREEMPT(full) [ 345.285306][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.285320][ T9910] Call Trace: [ 345.285329][ T9910] [ 345.285340][ T9910] dump_stack_lvl+0x100/0x190 [ 345.285376][ T9910] should_fail_ex.cold+0x5/0xa [ 345.285409][ T9910] should_failslab+0xc2/0x120 [ 345.285444][ T9910] kmem_cache_alloc_noprof+0x91/0x6a0 [ 345.285479][ T9910] ? jbd2__journal_start+0x194/0x6a0 [ 345.285516][ T9910] jbd2__journal_start+0x194/0x6a0 [ 345.285551][ T9910] __ext4_journal_start_sb+0x367/0x670 [ 345.285589][ T9910] ? ext4_do_writepages+0xc1c/0x3ed0 [ 345.285631][ T9910] ext4_do_writepages+0xc1c/0x3ed0 [ 345.285668][ T9910] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 345.285713][ T9910] ? timerqueue_linked_add+0x260/0x430 [ 345.285771][ T9910] ? __pfx_ext4_do_writepages+0x10/0x10 [ 345.285829][ T9910] ? ext4_writepages+0x347/0x750 [ 345.285865][ T9910] ext4_writepages+0x347/0x750 [ 345.285905][ T9910] ? __pfx_ext4_writepages+0x10/0x10 [ 345.285963][ T9910] ? __pfx_ext4_writepages+0x10/0x10 [ 345.286004][ T9910] do_writepages+0x278/0x600 [ 345.286041][ T9910] ? __pfx_do_writepages+0x10/0x10 [ 345.286072][ T9910] ? do_raw_spin_unlock+0x145/0x1e0 [ 345.286102][ T9910] ? _raw_spin_unlock+0x28/0x50 [ 345.286148][ T9910] filemap_writeback+0x22d/0x2e0 [ 345.286186][ T9910] ? __pfx_filemap_writeback+0x10/0x10 [ 345.286265][ T9910] ? mt_find+0x45e/0x8e0 [ 345.286296][ T9910] ? __pfx_mt_find+0x10/0x10 [ 345.286329][ T9910] file_write_and_wait_range+0xcd/0x140 [ 345.286372][ T9910] ext4_sync_file+0x358/0xb60 [ 345.286410][ T9910] ? __pfx_ext4_sync_file+0x10/0x10 [ 345.286444][ T9910] ? __up_read+0x280/0x980 [ 345.286472][ T9910] ? __pfx___up_read+0x10/0x10 [ 345.286497][ T9910] ? __do_sys_msync+0x39b/0x590 [ 345.286526][ T9910] ? __pfx_ext4_sync_file+0x10/0x10 [ 345.286560][ T9910] vfs_fsync_range+0x9b/0x190 [ 345.286593][ T9910] __do_sys_msync+0x3ca/0x590 [ 345.286629][ T9910] do_syscall_64+0x115/0x840 [ 345.286667][ T9910] ? clear_bhb_loop+0x40/0x90 [ 345.286699][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.286727][ T9910] RIP: 0033:0x7fc9e679de59 [ 345.286752][ T9910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.286776][ T9910] RSP: 002b:00007fc9e7697028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 345.286801][ T9910] RAX: ffffffffffffffda RBX: 00007fc9e6a26180 RCX: 00007fc9e679de59 [ 345.286819][ T9910] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 345.286837][ T9910] RBP: 00007fc9e6833e6f R08: 0000000000000000 R09: 0000000000000000 [ 345.286872][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.286889][ T9910] R13: 00007fc9e6a26218 R14: 00007fc9e6a26180 R15: 00007ffe4dde31f8 [ 345.286928][ T9910] [ 345.289608][ T9910] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2022; err -12 [ 345.548260][ T9909] openvswitch: netlink: Message has 4 unknown bytes. [ 346.960838][ T9921] openvswitch: netlink: Message has 4 unknown bytes. [ 349.427821][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 350.693782][ T9989] openvswitch: netlink: Message has 4 unknown bytes. [ 350.806401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 351.507699][T10018] random: crng reseeded on system resumption [ 351.940866][T10022] netlink: 342 bytes leftover after parsing attributes in process `syz.1.718'. [ 352.025850][T10022] FAULT_INJECTION: forcing a failure. [ 352.025850][T10022] name failslab, interval 1, probability 0, space 0, times 0 [ 352.045644][T10022] CPU: 0 UID: 0 PID: 10022 Comm: syz.1.718 Not tainted syzkaller #0 PREEMPT(full) [ 352.045683][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.045701][T10022] Call Trace: [ 352.045710][T10022] [ 352.045721][T10022] dump_stack_lvl+0x100/0x190 [ 352.045761][T10022] should_fail_ex.cold+0x5/0xa [ 352.045795][T10022] should_failslab+0xc2/0x120 [ 352.045831][T10022] __kmalloc_noprof+0xfc/0x820 [ 352.045864][T10022] ? tnode_new+0x2f7/0x350 [ 352.045903][T10022] tnode_new+0x2f7/0x350 [ 352.045944][T10022] resize+0xed4/0x22f0 [ 352.045998][T10022] fib_insert_alias+0x9b3/0xe30 [ 352.046045][T10022] fib_trie_unmerge+0x289/0xbd0 [ 352.046092][T10022] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 352.046137][T10022] ? __pfx___mutex_lock+0x10/0x10 [ 352.046195][T10022] fib_unmerge+0xee/0x510 [ 352.046236][T10022] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 352.046281][T10022] fib4_rule_configure+0x383/0x10c0 [ 352.046318][T10022] fib_newrule+0x356/0x1ed0 [ 352.046378][T10022] ? rcu_is_watching+0x12/0xc0 [ 352.046415][T10022] ? __pfx_fib_newrule+0x10/0x10 [ 352.046456][T10022] ? kfree_skbmem+0x110/0x210 [ 352.046493][T10022] ? kmem_cache_free+0x127/0x6b0 [ 352.046536][T10022] ? skb_release_data+0x6ca/0x8e0 [ 352.046600][T10022] ? find_held_lock+0x2b/0x80 [ 352.046630][T10022] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 352.046663][T10022] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 352.046700][T10022] ? __pfx_fib_nl_newrule+0x10/0x10 [ 352.046741][T10022] rtnetlink_rcv_msg+0x95e/0xe90 [ 352.046778][T10022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.046823][T10022] ? ref_tracker_free+0x37e/0x6c0 [ 352.046867][T10022] netlink_rcv_skb+0x159/0x420 [ 352.046909][T10022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.046946][T10022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.047001][T10022] ? netlink_deliver_tap+0x1ae/0xcc0 [ 352.047048][T10022] netlink_unicast+0x585/0x850 [ 352.047092][T10022] ? __pfx_netlink_unicast+0x10/0x10 [ 352.047146][T10022] netlink_sendmsg+0x8b0/0xda0 [ 352.047192][T10022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.047237][T10022] ? apparmor_socket_sendmsg+0x15b/0x270 [ 352.047282][T10022] ____sys_sendmsg+0xa4d/0xbe0 [ 352.047315][T10022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.047356][T10022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.047401][T10022] ? rcu_is_watching+0x12/0xc0 [ 352.047430][T10022] ? ___sys_sendmsg+0x19d/0x1e0 [ 352.047468][T10022] ? kfree+0x1e5/0x6c0 [ 352.047521][T10022] ___sys_sendmsg+0x190/0x1e0 [ 352.047566][T10022] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.047608][T10022] ? futex_hash+0x311/0x400 [ 352.047679][T10022] ? __pfx___might_resched+0x10/0x10 [ 352.047727][T10022] __sys_sendmmsg+0x20c/0x440 [ 352.047764][T10022] ? __pfx___sys_sendmmsg+0x10/0x10 [ 352.047794][T10022] ? __fget_files+0x215/0x3d0 [ 352.047845][T10022] ? __pfx_do_futex+0x10/0x10 [ 352.047891][T10022] ? xfd_validate_state+0x129/0x190 [ 352.047931][T10022] __x64_sys_sendmmsg+0x9c/0x100 [ 352.047963][T10022] ? lockdep_hardirqs_on+0x78/0x100 [ 352.048004][T10022] do_syscall_64+0x115/0x840 [ 352.048042][T10022] ? clear_bhb_loop+0x40/0x90 [ 352.048074][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.048095][T10022] RIP: 0033:0x7f8e2bf9de59 [ 352.048109][T10022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.048130][T10022] RSP: 002b:00007f8e2ce31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 352.048146][T10022] RAX: ffffffffffffffda RBX: 00007f8e2c226090 RCX: 00007f8e2bf9de59 [ 352.048156][T10022] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 352.048165][T10022] RBP: 00007f8e2c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 352.048174][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.048182][T10022] R13: 00007f8e2c226128 R14: 00007f8e2c226090 R15: 00007ffdc94e9e68 [ 352.048202][T10022] [ 352.768568][T10005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.716'. [ 354.639212][T10054] openvswitch: netlink: Message has 4 unknown bytes. [ 355.361401][T10068] openvswitch: netlink: Message has 4 unknown bytes. [ 356.378409][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 356.923882][T10096] FAULT_INJECTION: forcing a failure. [ 356.923882][T10096] name failslab, interval 1, probability 0, space 0, times 0 [ 356.936719][T10096] CPU: 1 UID: 0 PID: 10096 Comm: syz.1.735 Not tainted syzkaller #0 PREEMPT(full) [ 356.936757][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.936774][T10096] Call Trace: [ 356.936784][T10096] [ 356.936795][T10096] dump_stack_lvl+0x100/0x190 [ 356.936832][T10096] should_fail_ex.cold+0x5/0xa [ 356.936864][T10096] should_failslab+0xc2/0x120 [ 356.936901][T10096] kmem_cache_alloc_noprof+0x91/0x6a0 [ 356.936930][T10096] ? submit_bio_noacct+0x651/0x1ff0 [ 356.936970][T10096] ? ext4_init_io_end+0x24/0x170 [ 356.937004][T10096] ext4_init_io_end+0x24/0x170 [ 356.937032][T10096] ext4_do_writepages+0xaf9/0x3ed0 [ 356.937089][T10096] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 356.937142][T10096] ? __pfx_ext4_do_writepages+0x10/0x10 [ 356.937203][T10096] ? ext4_writepages+0x347/0x750 [ 356.937251][T10096] ext4_writepages+0x347/0x750 [ 356.937291][T10096] ? __pfx_ext4_writepages+0x10/0x10 [ 356.937341][T10096] ? do_writepages+0x4b5/0x600 [ 356.937373][T10096] ? do_writepages+0x4b5/0x600 [ 356.937407][T10096] ? __pfx_ext4_writepages+0x10/0x10 [ 356.937448][T10096] do_writepages+0x278/0x600 [ 356.937488][T10096] ? __pfx_do_writepages+0x10/0x10 [ 356.937519][T10096] ? do_raw_spin_unlock+0x145/0x1e0 [ 356.937548][T10096] ? _raw_spin_unlock+0x28/0x50 [ 356.937589][T10096] filemap_writeback+0x22d/0x2e0 [ 356.937625][T10096] ? __pfx_filemap_writeback+0x10/0x10 [ 356.937658][T10096] ? plist_check_list+0x1b8/0x280 [ 356.937732][T10096] ? mt_find+0x45e/0x8e0 [ 356.937763][T10096] ? __pfx_mt_find+0x10/0x10 [ 356.937795][T10096] file_write_and_wait_range+0xcd/0x140 [ 356.937837][T10096] ext4_sync_file+0x358/0xb60 [ 356.937875][T10096] ? __pfx_ext4_sync_file+0x10/0x10 [ 356.937908][T10096] ? __up_read+0x280/0x980 [ 356.937936][T10096] ? __pfx___up_read+0x10/0x10 [ 356.937960][T10096] ? __do_sys_msync+0x39b/0x590 [ 356.937990][T10096] ? __pfx_ext4_sync_file+0x10/0x10 [ 356.938025][T10096] vfs_fsync_range+0x9b/0x190 [ 356.938056][T10096] __do_sys_msync+0x3ca/0x590 [ 356.938090][T10096] do_syscall_64+0x115/0x840 [ 356.938127][T10096] ? clear_bhb_loop+0x40/0x90 [ 356.938162][T10096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.938191][T10096] RIP: 0033:0x7f8e2bf9de59 [ 356.938222][T10096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.938249][T10096] RSP: 002b:00007f8e2ce52028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 356.938276][T10096] RAX: ffffffffffffffda RBX: 00007f8e2c225fa0 RCX: 00007f8e2bf9de59 [ 356.938295][T10096] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 356.938313][T10096] RBP: 00007f8e2c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 356.938330][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.938346][T10096] R13: 00007f8e2c226038 R14: 00007f8e2c225fa0 R15: 00007ffdc94e9e68 [ 356.938384][T10096] [ 357.253193][T10100] openvswitch: netlink: Message has 4 unknown bytes. [ 361.026197][T10163] openvswitch: netlink: Message has 4 unknown bytes. [ 362.352812][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 366.699159][T10268] Process accounting paused [ 367.063978][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 368.587033][T10305] netlink: 342 bytes leftover after parsing attributes in process `syz.0.773'. [ 368.803538][T10305] FAULT_INJECTION: forcing a failure. [ 368.803538][T10305] name failslab, interval 1, probability 0, space 0, times 0 [ 368.871769][T10305] CPU: 1 UID: 0 PID: 10305 Comm: syz.0.773 Not tainted syzkaller #0 PREEMPT(full) [ 368.871808][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.871834][T10305] Call Trace: [ 368.871844][T10305] [ 368.871854][T10305] dump_stack_lvl+0x100/0x190 [ 368.871891][T10305] should_fail_ex.cold+0x5/0xa [ 368.871923][T10305] should_failslab+0xc2/0x120 [ 368.871958][T10305] kmem_cache_alloc_noprof+0x91/0x6a0 [ 368.871991][T10305] ? fib_trie_unmerge+0x220/0xbd0 [ 368.872035][T10305] fib_trie_unmerge+0x220/0xbd0 [ 368.872083][T10305] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 368.872120][T10305] ? __pfx___mutex_lock+0x10/0x10 [ 368.872170][T10305] fib_unmerge+0xee/0x510 [ 368.872208][T10305] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 368.872247][T10305] fib4_rule_configure+0x383/0x10c0 [ 368.872280][T10305] fib_newrule+0x356/0x1ed0 [ 368.872321][T10305] ? rcu_is_watching+0x12/0xc0 [ 368.872355][T10305] ? __pfx_fib_newrule+0x10/0x10 [ 368.872394][T10305] ? kfree_skbmem+0x110/0x210 [ 368.872429][T10305] ? kmem_cache_free+0x127/0x6b0 [ 368.872470][T10305] ? skb_release_data+0x6ca/0x8e0 [ 368.872525][T10305] ? find_held_lock+0x2b/0x80 [ 368.872553][T10305] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 368.872588][T10305] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 368.872625][T10305] ? __pfx_fib_nl_newrule+0x10/0x10 [ 368.872673][T10305] rtnetlink_rcv_msg+0x95e/0xe90 [ 368.872712][T10305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.872759][T10305] ? ref_tracker_free+0x37e/0x6c0 [ 368.872804][T10305] netlink_rcv_skb+0x159/0x420 [ 368.872855][T10305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.872893][T10305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.872950][T10305] ? netlink_deliver_tap+0x1ae/0xcc0 [ 368.872997][T10305] netlink_unicast+0x585/0x850 [ 368.873046][T10305] ? __pfx_netlink_unicast+0x10/0x10 [ 368.873097][T10305] netlink_sendmsg+0x8b0/0xda0 [ 368.873142][T10305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.873187][T10305] ? apparmor_socket_sendmsg+0x15b/0x270 [ 368.873235][T10305] ____sys_sendmsg+0xa4d/0xbe0 [ 368.873272][T10305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.873316][T10305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.873352][T10305] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 368.873400][T10305] ? rcu_is_watching+0x12/0xc0 [ 368.873428][T10305] ? ___sys_sendmsg+0x19d/0x1e0 [ 368.873467][T10305] ? kfree+0x1e5/0x6c0 [ 368.873507][T10305] ? preempt_schedule_thunk+0x16/0x40 [ 368.873555][T10305] ___sys_sendmsg+0x190/0x1e0 [ 368.873599][T10305] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.873641][T10305] ? futex_hash+0x311/0x400 [ 368.873719][T10305] ? __pfx___might_resched+0x10/0x10 [ 368.873769][T10305] __sys_sendmmsg+0x20c/0x440 [ 368.873806][T10305] ? __pfx___sys_sendmmsg+0x10/0x10 [ 368.873845][T10305] ? __fget_files+0x215/0x3d0 [ 368.873898][T10305] ? __pfx_do_futex+0x10/0x10 [ 368.873944][T10305] ? xfd_validate_state+0x129/0x190 [ 368.873985][T10305] __x64_sys_sendmmsg+0x9c/0x100 [ 368.874016][T10305] ? lockdep_hardirqs_on+0x78/0x100 [ 368.874060][T10305] do_syscall_64+0x115/0x840 [ 368.874101][T10305] ? clear_bhb_loop+0x40/0x90 [ 368.874137][T10305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.874165][T10305] RIP: 0033:0x7f546d19de59 [ 368.874190][T10305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.874216][T10305] RSP: 002b:00007f546e0b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 368.874244][T10305] RAX: ffffffffffffffda RBX: 00007f546d426090 RCX: 00007f546d19de59 [ 368.874264][T10305] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 368.874282][T10305] RBP: 00007f546d233e6f R08: 0000000000000000 R09: 0000000000000000 [ 368.874300][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.874318][T10305] R13: 00007f546d426128 R14: 00007f546d426090 R15: 00007fffb7330758 [ 368.874357][T10305] [ 371.685559][T10337] Process accounting resumed [ 373.909593][T10374] Process accounting paused [ 374.890163][T10399] openvswitch: netlink: Message has 4 unknown bytes. [ 378.514701][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.524671][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.585656][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 381.502962][T10517] FAULT_INJECTION: forcing a failure. [ 381.502962][T10517] name failslab, interval 1, probability 0, space 0, times 0 [ 381.536584][T10517] CPU: 0 UID: 0 PID: 10517 Comm: syz.0.812 Not tainted syzkaller #0 PREEMPT(full) [ 381.536626][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.536643][T10517] Call Trace: [ 381.536652][T10517] [ 381.536664][T10517] dump_stack_lvl+0x100/0x190 [ 381.536703][T10517] should_fail_ex.cold+0x5/0xa [ 381.536737][T10517] should_failslab+0xc2/0x120 [ 381.536774][T10517] kmem_cache_alloc_noprof+0x91/0x6a0 [ 381.536809][T10517] ? jbd2__journal_start+0x24a/0x6a0 [ 381.536846][T10517] jbd2__journal_start+0x24a/0x6a0 [ 381.536888][T10517] __ext4_journal_start_sb+0x367/0x670 [ 381.536927][T10517] ? ext4_do_writepages+0xc1c/0x3ed0 [ 381.536969][T10517] ext4_do_writepages+0xc1c/0x3ed0 [ 381.537009][T10517] ? timerqueue_linked_add+0x260/0x430 [ 381.537047][T10517] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 381.537092][T10517] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 381.537145][T10517] ? __pfx_ext4_do_writepages+0x10/0x10 [ 381.537201][T10517] ? ext4_writepages+0x347/0x750 [ 381.537236][T10517] ext4_writepages+0x347/0x750 [ 381.537275][T10517] ? __pfx_ext4_writepages+0x10/0x10 [ 381.537332][T10517] ? __pfx_ext4_writepages+0x10/0x10 [ 381.537372][T10517] do_writepages+0x278/0x600 [ 381.537409][T10517] ? __pfx_do_writepages+0x10/0x10 [ 381.537439][T10517] ? do_raw_spin_unlock+0x145/0x1e0 [ 381.537469][T10517] ? _raw_spin_unlock+0x28/0x50 [ 381.537513][T10517] filemap_writeback+0x22d/0x2e0 [ 381.537550][T10517] ? __pfx_filemap_writeback+0x10/0x10 [ 381.537583][T10517] ? plist_check_list+0x1b8/0x280 [ 381.537659][T10517] ? mt_find+0x45e/0x8e0 [ 381.537689][T10517] ? __pfx_mt_find+0x10/0x10 [ 381.537721][T10517] file_write_and_wait_range+0xcd/0x140 [ 381.537760][T10517] ext4_sync_file+0x358/0xb60 [ 381.537796][T10517] ? __pfx_ext4_sync_file+0x10/0x10 [ 381.537826][T10517] ? __up_read+0x280/0x980 [ 381.537860][T10517] ? __pfx___up_read+0x10/0x10 [ 381.537883][T10517] ? __do_sys_msync+0x39b/0x590 [ 381.537912][T10517] ? __pfx_ext4_sync_file+0x10/0x10 [ 381.537944][T10517] vfs_fsync_range+0x9b/0x190 [ 381.537976][T10517] __do_sys_msync+0x3ca/0x590 [ 381.538012][T10517] do_syscall_64+0x115/0x840 [ 381.538052][T10517] ? clear_bhb_loop+0x40/0x90 [ 381.538083][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.538111][T10517] RIP: 0033:0x7f546d19de59 [ 381.538133][T10517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.538159][T10517] RSP: 002b:00007f546e098028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 381.538186][T10517] RAX: ffffffffffffffda RBX: 00007f546d426180 RCX: 00007f546d19de59 [ 381.538204][T10517] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 381.538221][T10517] RBP: 00007f546d233e6f R08: 0000000000000000 R09: 0000000000000000 [ 381.538238][T10517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.538255][T10517] R13: 00007f546d426218 R14: 00007f546d426180 R15: 00007fffb7330758 [ 381.538292][T10517] [ 381.541939][T10517] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2022; err -12 [ 383.625681][ T30] INFO: task syz.3.407:8168 blocked for more than 143 seconds. [ 383.654086][ T30] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 383.678560][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.715133][ T30] task:syz.3.407 state:D stack:26920 pid:8168 tgid:8166 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 383.765934][ T30] Call Trace: [ 383.781902][ T30] [ 383.795460][ T30] __schedule+0x125c/0x6730 [ 383.807514][ T30] ? do_raw_spin_lock+0x128/0x260 [ 383.829332][ T30] ? __pfx___schedule+0x10/0x10 [ 383.844002][ T30] ? find_held_lock+0x2b/0x80 [ 383.854164][ T30] ? schedule+0x225/0x2c0 [ 383.861584][ T30] schedule+0xdd/0x2c0 [ 383.873926][ T30] schedule_preempt_disabled+0x13/0x30 [ 383.897849][ T30] __mutex_lock+0xccc/0x1bd0 [ 383.913950][ T30] ? fdget_pos+0x2aa/0x380 [ 383.934782][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 383.971266][ T30] ? __fget_files+0x215/0x3d0 [ 383.990753][ T30] ? __fget_files+0x21f/0x3d0 [ 384.013579][ T30] ? fdget_pos+0x2aa/0x380 [ 384.045441][ T30] fdget_pos+0x2aa/0x380 [ 384.062705][ T30] do_writev+0x77/0x340 [ 384.083009][ T30] ? __pfx_do_writev+0x10/0x10 [ 384.104369][ T30] do_syscall_64+0x115/0x840 [ 384.116180][ T30] ? clear_bhb_loop+0x40/0x90 [ 384.128444][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.143888][ T30] RIP: 0033:0x7fa9fc79de59 [ 384.150684][ T30] RSP: 002b:00007fa9fd5bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 384.173798][ T30] RAX: ffffffffffffffda RBX: 00007fa9fca26090 RCX: 00007fa9fc79de59 [ 384.186507][ T30] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 384.203705][ T30] RBP: 00007fa9fc833e6f R08: 0000000000000000 R09: 0000000000000000 [ 384.227474][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.248588][ T30] R13: 00007fa9fca26128 R14: 00007fa9fca26090 R15: 00007fff697442b8 [ 384.266877][ T30] [ 384.273636][ T30] [ 384.273636][ T30] Showing all locks held in the system: [ 384.301795][ T30] 1 lock held by khungtaskd/30: [ 384.342675][ T30] #0: ffffffff8ebe5f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 384.382613][ T30] 2 locks held by kworker/u8:3/47: [ 384.403170][ T30] #0: ffff888020bf5140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 384.441446][ T30] #1: ffffc90000b77d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 384.493503][ T30] 5 locks held by kworker/u8:8/270: [ 384.509272][ T30] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 384.531088][ T30] #1: ffffc90002ecfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 384.544635][ T30] #2: ffffffff90a85168 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 384.554324][ T30] #3: ffffffff90a9dd80 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xc10 [ 384.564677][ T30] #4: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 384.577514][ T30] 2 locks held by getty/5381: [ 384.582231][ T30] #0: ffff88803777f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 384.597841][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 384.608332][ T30] 1 lock held by syz-executor/5619: [ 384.613780][ T30] 2 locks held by syz.3.407/8167: [ 384.619050][ T30] 1 lock held by syz.3.407/8168: [ 384.633575][ T30] #0: ffff88807ad8b430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 384.653797][ T30] 2 locks held by syz.2.817/10541: [ 384.659922][ T30] 6 locks held by syz.4.821/10559: [ 384.673865][ T30] #0: ffff888078aedcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 384.696160][ T30] #1: ffff888034b44450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 384.713583][ T30] #2: ffff88805abef880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 384.733555][ T30] #3: ffff888034647c38 (kn->active#4){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 384.755008][ T30] #4: ffffffff8ea978c0 (param_lock){+.+.}-{4:4}, at: param_attr_store+0xec/0x300 [ 384.768950][ T30] #5: ffffffff8ebf1878 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 384.779387][ T30] [ 384.781760][ T30] ============================================= [ 384.781760][ T30] [ 384.887141][ T30] NMI backtrace for cpu 1 [ 384.887161][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 384.887192][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 384.887207][ T30] Call Trace: [ 384.887216][ T30] [ 384.887225][ T30] dump_stack_lvl+0x100/0x190 [ 384.887260][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 384.887294][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 384.887326][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 384.887367][ T30] sys_info+0x141/0x190 [ 384.887396][ T30] watchdog+0xcb1/0x1030 [ 384.887441][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 384.887478][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.887513][ T30] ? __kthread_parkme+0x18c/0x230 [ 384.887544][ T30] ? kthread+0x13a/0x450 [ 384.887581][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.887612][ T30] kthread+0x370/0x450 [ 384.887642][ T30] ? __pfx_kthread+0x10/0x10 [ 384.887676][ T30] ret_from_fork+0x72b/0xd50 [ 384.887707][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 384.887740][ T30] ? __switch_to+0x800/0x10f0 [ 384.887778][ T30] ? __switch_to_asm+0x39/0x70 [ 384.887813][ T30] ? __pfx_kthread+0x10/0x10 [ 384.887848][ T30] ret_from_fork_asm+0x1a/0x30 [ 384.887901][ T30] [ 384.887920][ T30] Sending NMI from CPU 1 to CPUs 0: [ 385.023589][ C0] NMI backtrace for cpu 0 [ 385.023608][ C0] CPU: 0 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 385.023637][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 385.023652][ C0] RIP: 0010:__lock_acquire+0x65d/0x1a40 [ 385.023697][ C0] Code: 89 85 90 0b 00 00 8b 85 98 0b 00 00 83 c0 01 89 85 98 0b 00 00 83 f8 2f 0f 87 e8 0a 00 00 39 05 3d b4 84 14 0f 82 2f 0b 00 00 01 00 00 00 e9 2b fd ff ff 44 8b 0d 62 60 8d 19 45 85 c9 75 0a [ 385.023720][ C0] RSP: 0018:ffffc90003d7ef18 EFLAGS: 00000002 [ 385.023739][ C0] RAX: 0000000000000003 RBX: ffff888034e368f0 RCX: 684b6403b5ba8b16 [ 385.023755][ C0] RDX: 684b6403b5ba8b16 RSI: 000000007d32cc97 RDI: 00000000e03083f0 [ 385.023771][ C0] RBP: ffff888034e35d00 R08: 00000000944fa0e2 R09: 0000000000000028 [ 385.023805][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 684b6403b5ba8b16 [ 385.023820][ C0] R13: ffffffff97b4f660 R14: 000000000001bef8 R15: 0000000000020000 [ 385.023836][ C0] FS: 0000000000000000(0000) GS:ffff888123df5000(0000) knlGS:0000000000000000 [ 385.023859][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.023875][ C0] CR2: 000055d86ba8ff40 CR3: 000000007aca2000 CR4: 00000000003526f0 [ 385.023891][ C0] Call Trace: [ 385.023897][ C0] [ 385.023906][ C0] ? find_held_lock+0x2b/0x80 [ 385.023932][ C0] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 385.023971][ C0] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 385.024012][ C0] lock_acquire+0x1b9/0x370 [ 385.024044][ C0] ? __free_one_page+0x109/0x10d0 [ 385.024080][ C0] bad_range+0xc6/0x3f0 [ 385.024107][ C0] ? __free_one_page+0x109/0x10d0 [ 385.024138][ C0] ? do_raw_spin_lock+0x128/0x260 [ 385.024162][ C0] __free_one_page+0x109/0x10d0 [ 385.024192][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 385.024224][ C0] ? __get_pfnblock_flags_mask+0x128/0x240 [ 385.024256][ C0] free_pcppages_bulk+0x2f5/0x6a0 [ 385.024296][ C0] free_frozen_page_commit+0x79e/0x1050 [ 385.024333][ C0] free_unref_folios+0x7cc/0x1710 [ 385.024373][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 385.024408][ C0] folios_put_refs+0x585/0xaa0 [ 385.024445][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 385.024479][ C0] ? __pfx_workingset_update_node+0x10/0x10 [ 385.024506][ C0] ? folio_mapping+0x11a/0x250 [ 385.024535][ C0] truncate_inode_pages_range+0x30c/0x1050 [ 385.024564][ C0] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 385.024616][ C0] ? truncate_inode_pages_final+0x62/0x90 [ 385.024642][ C0] ? rcu_is_watching+0x12/0xc0 [ 385.024667][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.024704][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 385.024740][ C0] ext4_evict_inode+0x3e3/0x1960 [ 385.024772][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 385.024810][ C0] ? __pfx_ext4_evict_inode+0x10/0x10 [ 385.024844][ C0] ? evict+0x37e/0xad0 [ 385.024866][ C0] ? evict+0x37e/0xad0 [ 385.024891][ C0] ? __pfx_ext4_evict_inode+0x10/0x10 [ 385.024922][ C0] evict+0x3c2/0xad0 [ 385.024947][ C0] ? __pfx_evict+0x10/0x10 [ 385.024973][ C0] ? iput.part.0+0x981/0x1050 [ 385.025000][ C0] iput.part.0+0x989/0x1050 [ 385.025027][ C0] iput+0x35/0x40 [ 385.025050][ C0] dentry_unlink_inode+0x284/0x470 [ 385.025073][ C0] dentry_kill+0x25d/0xc20 [ 385.025101][ C0] dput.part.0+0xd7/0x240 [ 385.025127][ C0] dput+0x1f/0x30 [ 385.025150][ C0] __fput+0x519/0xb50 [ 385.025177][ C0] task_work_run+0x150/0x240 [ 385.025208][ C0] ? __pfx_task_work_run+0x10/0x10 [ 385.025243][ C0] do_exit+0x951/0x2ae0 [ 385.025274][ C0] ? __pfx_do_exit+0x10/0x10 [ 385.025302][ C0] ? do_raw_spin_lock+0x128/0x260 [ 385.025324][ C0] ? find_held_lock+0x2b/0x80 [ 385.025349][ C0] ? get_signal+0x7e0/0x21e0 [ 385.025372][ C0] do_group_exit+0xd5/0x2a0 [ 385.025402][ C0] get_signal+0x1ec7/0x21e0 [ 385.025424][ C0] ? kernel_wait4+0x1d6/0x280 [ 385.025454][ C0] ? __pfx_kernel_wait4+0x10/0x10 [ 385.025486][ C0] ? __pfx_child_wait_callback+0x10/0x10 [ 385.025517][ C0] ? __pfx_get_signal+0x10/0x10 [ 385.025543][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 385.025579][ C0] ? __pfx___do_sys_wait4+0x10/0x10 [ 385.025611][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 385.025655][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 385.025696][ C0] ? rcu_is_watching+0x12/0xc0 [ 385.025721][ C0] do_syscall_64+0x652/0x840 [ 385.025756][ C0] ? clear_bhb_loop+0x40/0x90 [ 385.025783][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.025807][ C0] RIP: 0033:0x7f8e2bf58fd7 [ 385.025824][ C0] Code: Unable to access opcode bytes at 0x7f8e2bf58fad. [ 385.025835][ C0] RSP: 002b:00007ffdc94ea350 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 385.025856][ C0] RAX: fffffffffffffe00 RBX: 0000555564926500 RCX: 00007f8e2bf58fd7 [ 385.025875][ C0] RDX: 0000000040000000 RSI: 00007ffdc94ea3ac RDI: ffffffffffffffff [ 385.025891][ C0] RBP: 00007ffdc94ea3ac R08: 0000000000000000 R09: 0000000000000000 [ 385.025906][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 385.025920][ C0] R13: 0000000000000003 R14: 00007ffdc94ea608 R15: 0000000000000000 [ 385.025942][ C0] [ 385.710233][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 385.717127][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 385.726256][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 385.736324][ T30] Call Trace: [ 385.739611][ T30] [ 385.742545][ T30] dump_stack_lvl+0x100/0x190 [ 385.747245][ T30] vpanic+0x552/0x970 [ 385.751245][ T30] ? __pfx_vpanic+0x10/0x10 [ 385.755764][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 385.761949][ T30] panic+0xd1/0xe0 [ 385.765690][ T30] ? __pfx_panic+0x10/0x10 [ 385.770137][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 385.776325][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 385.782513][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 385.788691][ T30] ? watchdog.cold+0x1ec/0x234 [ 385.793475][ T30] ? watchdog+0xcc1/0x1030 [ 385.797924][ T30] watchdog.cold+0x1fd/0x234 [ 385.802537][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 385.808367][ T30] ? __pfx_watchdog+0x10/0x10 [ 385.813066][ T30] ? __kthread_parkme+0x18c/0x230 [ 385.818120][ T30] ? kthread+0x13a/0x450 [ 385.822389][ T30] ? __pfx_watchdog+0x10/0x10 [ 385.827098][ T30] kthread+0x370/0x450 [ 385.831194][ T30] ? __pfx_kthread+0x10/0x10 [ 385.835818][ T30] ret_from_fork+0x72b/0xd50 [ 385.840435][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 385.845578][ T30] ? __switch_to+0x800/0x10f0 [ 385.850283][ T30] ? __switch_to_asm+0x39/0x70 [ 385.855094][ T30] ? __pfx_kthread+0x10/0x10 [ 385.859713][ T30] ret_from_fork_asm+0x1a/0x30 [ 385.864572][ T30] [ 385.867883][ T30] Kernel Offset: disabled [ 385.872228][ T30] Rebooting in 86400 seconds..