last executing test programs: 1m13.299286064s ago: executing program 2 (id=529): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82", 0x37) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1, 0x20000001, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0xa, 0xa, 0x40) socket(0x27, 0x2, 0x4001) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x6) eventfd$auto(0x4) r1 = socket(0x28, 0xc, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4}, 0xa3) 1m11.750604336s ago: executing program 2 (id=535): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) (async) r1 = io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) (async) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) (async, rerun: 64) r2 = io_uring_setup$auto(0x6, 0x0) (rerun: 64) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r3, 0x9) (async) setreuid$auto(0x4, 0x8) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') (async) readv$auto(r1, &(0x7f0000000a80)={0x0, 0xfffe}, 0xfffffffffffffff9) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) read$auto_ima_measure_policy_ops_ima_fs(r2, &(0x7f0000000040)=""/23, 0x17) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) (async) ioctl$auto_BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"2b153df8aace8dc679bbeeb3712cb525", 0x2, 0x40, {0xab7, 0x3}, {0x1ff, 0x9}, 0xb, [0x5, 0x4842, 0x3b, 0x5, 0x9, 0x8, 0xc, 0xfff, 0xffffffff00000001, 0x80000000000000, 0x2d4, 0x400, 0x9, 0x18000000000, 0x4, 0x4]}) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) unshare$auto(0x40000080) (rerun: 32) 1m10.694198792s ago: executing program 2 (id=544): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0x4) io_uring_setup$auto(0x6, 0x0) socket(0xf, 0xa, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop11/io-timeout-fail\x00', 0x3c7181, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x103742, 0x0) socket(0xa, 0x801, 0x106) getsockopt$auto(0x8, 0x6, 0x4, 0xfffffffffffffffd, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x55) write$auto(0x3, 0x0, 0xfdef) 1m10.56892648s ago: executing program 2 (id=545): mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x591083, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b48, 0x9) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) close_range$auto(0x2, 0x8, 0x0) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) io_uring_setup$auto(0x7, 0x0) clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff) mmap$auto(0xfffffffffffffffd, 0x1, 0x400000072, 0x15, 0x1000000002, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch12\x00', 0x0, 0x0) ioctl$auto_LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$auto(r3, 0x5, r3) 1m9.645127958s ago: executing program 2 (id=549): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty58\x00', 0x40900, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(0x0, 0x0) ioctl$auto(0x3, 0x40104d06, 0x5) 1m9.370956155s ago: executing program 2 (id=551): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002fbd7000fddbdf250c00000014000380100003800c00058008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r5], 0x34}}, 0x24048084) r6 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000040)=0xfff) fcntl$auto_F_GETOWN_EX(r6, 0x10, 0x1) read$auto_hsr_node_table_fops_(r6, &(0x7f0000000200)=""/228, 0xe4) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) mseal$auto(0x1000000000000000, 0x0, 0x0) r7 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(r7, 0x400454dc, &(0x7f0000000040)=0x2) write$auto(0x3, 0x0, 0xfdf3) creat$auto(0x0, 0x7) 54.21103418s ago: executing program 32 (id=551): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002fbd7000fddbdf250c00000014000380100003800c00058008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r5], 0x34}}, 0x24048084) r6 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000040)=0xfff) fcntl$auto_F_GETOWN_EX(r6, 0x10, 0x1) read$auto_hsr_node_table_fops_(r6, &(0x7f0000000200)=""/228, 0xe4) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) mseal$auto(0x1000000000000000, 0x0, 0x0) r7 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(r7, 0x400454dc, &(0x7f0000000040)=0x2) write$auto(0x3, 0x0, 0xfdf3) creat$auto(0x0, 0x7) 12.008730752s ago: executing program 0 (id=768): socket(0x2b, 0x1, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/vhci_hcd.5/usb20/manufacturer\x00', 0x102b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto_F_SETSIG(r1, 0xa, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) syslog$auto_SYSLOG_ACTION_CONSOLE_ON(0x9, &(0x7f0000001080)='\x00', 0x8000) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001040)='/proc/version\x00', 0x20202, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000000040)=""/4080, 0x1036) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x2001, 0x0) ioctl$auto(r3, 0x4018620d, 0x9) r4 = socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, 0x0) sendmmsg$auto(r4, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) mmap$auto(0x12, 0x2b, 0xdf, 0x9b72, 0x1000, 0x7) setrlimit$auto(0xb, 0x0) 9.229734422s ago: executing program 0 (id=776): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0x40000000c4, 0x9, 0x4, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x6, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffffff, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0x6, 0x1, 0x71, 0x3, 0x8, 0x5, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x1ff, 0x40a, 0xd, 0xe62, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0xb, 0xa5cf, 0x8, 0x7, 0x3, 0x8000, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x7, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x7fffffff, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff5, 0x8], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) write$auto(0xffffffffffffffff, &(0x7f0000000080)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0xdda) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f0, 0x17) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) read$auto(0x4, 0x0, 0xfdef) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x3, 0xa) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f00000000c0)=""/238, 0xee) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r2, 0xc004ae0a, 0x0) r3 = socket(0xa, 0x1, 0x84) setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x6f7250c4) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x10, 0x2, 0x4) setsockopt$auto(r4, 0x104000000000010e, 0x1, 0x0, 0x16) 6.024573409s ago: executing program 0 (id=786): r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xffffffffffffffff, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x7, &(0x7f0000000280)={0x0, 0x2}) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0xd, 0x5, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x8}, 0x4, 0x965, 0x3, @raw=0x8, @integer={0x800000000000400e, 0x2000000b752, 0x9}, "6cc1294d63a4f1b4bf3373a1183bedbd31b6429794e5311121c760cb9611c78eaec7a99807bcc100"}) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xfce8, 0x200, 0x3, 0x7, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x8000005, 0x7, 0x6, 0x6}, 0x10) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x80503d0a, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x39, 0x80006, 0x88a) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd0\x00', 0x64080, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) pwritev2$auto(r3, &(0x7f0000001fc0)={0x0, 0x7}, 0x9, 0x2, 0x1aa1, 0x8) ioctl$auto_BLKROTATIONAL(r2, 0x127e, 0x0) 5.544994377s ago: executing program 3 (id=787): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = prctl$auto_PR_SET_MM_END_CODE(0x10, 0x2, 0x0, 0x8000, 0x10) read$auto_fb_fops_fb_chrdev(r0, &(0x7f0000000280)=""/156, 0x9c) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, r1) getpid() sendmsg$auto_TIPC_NL_BEARER_ADD(r1, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={0x0, 0x224c}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/xfs/stats/stats\x00', 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x1b, 0x0, &(0x7f0000000040)=0x400) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0090000", @ANYRES16=r3, @ANYBLOB="131f2cbd700023723ab36bf877ac08000300", @ANYRES32=r5], 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'nicvf0\x00'}) sendmsg$auto_NL80211_CMD_SET_REG(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x7fff}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x40081) 4.018927423s ago: executing program 4 (id=789): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) utimensat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) fsconfig$auto_FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, 0x0) ioctl$auto_FS_IOC_UNRESVSP64(r1, 0x4030582b, 0x1) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x0, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r3 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r3, 0x0, 0x8fb5) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) 4.015589608s ago: executing program 0 (id=797): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/ram11/trace/act_mask\x00', 0x8a401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) semctl$auto(0x7, 0x2, 0x13, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(r1, 0x0, 0x2, 0x2) 3.787384693s ago: executing program 0 (id=790): mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x591083, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b48, 0x9) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) close_range$auto(0x2, 0x8, 0x0) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) io_uring_setup$auto(0x7, 0x0) clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff) mmap$auto(0xfffffffffffffffd, 0x1, 0x400000072, 0x15, 0x1000000002, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch12\x00', 0x0, 0x0) ioctl$auto_LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$auto(r4, 0x5, r4) 3.761442482s ago: executing program 1 (id=791): mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) prctl$auto(0x1000000003b, 0x100001, 0x4, 0x80a, 0x6) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) exit$auto(0x4) mmap$auto(0x0, 0x20009, 0x10000000000e0, 0x16, r1, 0x100) r2 = socket(0x2, 0x2, 0x0) getsockopt$auto(r2, 0x4, 0x2, 0xfffffffffffffffc, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x130, 0x8, 0x10001}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x448380, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1", 0x6d) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c001300fcdbbc2353f74fa9256563b979e41af25e403ec2c853d4662dc2477fb8ce947bdc0f5c0513ff03a03e2f969bf97ff8acf360d119aec1eb971d4cc78fc8e0d10db928bac2c986c79fec"], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) 3.557196259s ago: executing program 3 (id=792): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = open(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2c4440, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) write$auto_vhci_fops_hci_vhci(r0, &(0x7f0000001580)="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", 0x1000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, 0x6a) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) mmap$auto(0x5, 0x20009, 0x0, 0x40000000000eb1, r2, 0x2000000000007fff) capset$auto(0x0, 0x0) sendfile$auto(r3, r3, 0x0, 0x1ff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x40100000100023, 0x8000002000000000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xfffffffffffffbff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x4, 0x0, 0x0, &(0x7f00000002c0)={[0x80, 0x207, 0xd, 0x2, 0x948b, 0x4, 0xaa0, 0x2, 0x4, 0x0, 0x80000023, 0x1000, 0x6d3e, 0x75, 0x40000000000002, 0x9]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x1002, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x2020009, 0x1008000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = gettid() process_vm_writev$auto(r5, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) 2.494025347s ago: executing program 1 (id=793): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_GET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044058}, 0x4000000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000019c0), r2) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPP(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x285, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x880) msgctl$auto_MSG_STAT_ANY(0xccf, 0xd, &(0x7f0000000340)={{0xffff, 0x0, 0xffffffffffffffff, 0xbb79, 0x3, 0x3, 0x80}, &(0x7f0000000240)=0x7, &(0x7f0000000280)=0x10, 0x37, 0x0, 0x62b, 0x2, 0x3, 0x100, 0x4, 0xed, @raw=0x2, @raw=0xc}) r9 = waitid$auto_P_PIDFD(0x3, r0, &(0x7f00000003c0)={@_si_pad}, 0x1cb, &(0x7f0000000440)={{0x1}, {0x3ff, 0xfffffffffffffffa}, 0x1, 0x0, 0x2, 0x8000000000000000, 0x6, 0xd5, 0x7, 0x9, 0xffff, 0x2, 0x805, 0x3, 0xd035, 0x1ff}) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000a80)={0x494, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, "ed0aafb77172b865187b75a82dd07571695d"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_MAC={0x81, 0x6, "2651b9853621cfaa8dc84cb32796aceac93fe70f7ea4474fa60e31625fc9647918eb939a00628fd48b2b7e5ad9388c69d247de2665b0a8397ddb0c05f9943c951cf2d14330bf4465fb180962ec47dd2020038ccdad727cef1633686576eb3de23298e03dc4b69eda2f9a99d885aacc5bbff37ccf36219d804326f9faf6"}, @NL80211_ATTR_NAN_FUNC={0x3db, 0xf0, 0x0, 0x1, [@nested={0x1c, 0xf5, 0x0, 0x1, [@nested={0x4, 0x6a}, @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @typed={0xb6, 0x24, 0x0, 0x0, @binary="1c1938b221c1deec0f3580873dcda80146c9d56de873e4096c1d6a695db8685c71d5cbe41ff2365129a65dea61a3d5e0e1eb834f4c4a3fa91cff0fcbd6d6577a80fe882a6a2fb5ce5e9e9fc8b1296596a6fb9f56431de64581f1f8727f2dee08dbab9033ef15c983f2725bc40f959810a87745209608ca7c418d7509ba8f682d5379338de2cf04a223e235fa800870d3bfb0ff9e40966f8965f58851db29035e819de36e28d90fee006047ca4d8092409b85"}, @nested={0xa4, 0x70, 0x0, 0x1, [@nested={0x4, 0xd2}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0xd661}, @typed={0x8, 0x5f, 0x0, 0x0, @uid=0xee01}, @typed={0x73, 0x12c, 0x0, 0x0, @binary="470497315ab634e0de75df7bae654b98a3f9b1b27f83d521779d9dabf5a862571560e3f6a1ea9fcf731ef99e68ea07c8499c453cdc6d48c333ed88d317e48a4fae84ab535e3bb465c5b45149d0842713b1cc9eaa90ffadb6b6dcf087a6118bd8bfcbc2d179c6a8fda21c67509c853b"}, @nested={0x4, 0xe2}, @nested={0x4, 0xfa}, @typed={0x8, 0x156, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0xb8, 0x0, 0x0, @uid=r8}]}, @typed={0x4, 0x79}, @typed={0x8, 0x144, 0x0, 0x0, @pid=r9}, @nested={0x1e0, 0x45, 0x0, 0x1, [@generic="96c68e8071fafed026b0bf7847e6dc7104c4289b25c4e42516c60ca5ef6780844d1cd0efd075bb0e1cbcb58a4c9b80d30ee5bb62e069de366b166f5cfc26fbde0c2b1cb064ea2d52594ad52bbd931ac64fdcffe09f823d8382ded8050bd8e336fae33733141c3f75765a233f6d1ac3b6030c02d5deae4e8027613a5e47e0d0d96091721e6e5f27bb0be669c7f028c57d3e566e434e6c676b95e3b544f99119b6839c7781645b32d3372840710719713bf394bdfc3682dd31adaaffada2bcc1c2873f6e8fc7d7b4798096b0220669ae73542dce2c429910a36d0125089a72c34b88585214d0edb704ec6780dcae0320a59c", @generic="cefb86dc94bfab2dc758a6926d8cee329005833e8460d3f2bd15a2ea8ea19b72cf062873f18e90db481a155a462a077d2c99a51b8019d7c1a33d0d92b784cc35ed07cde7bc0560e5d005655efe8b1b1fe4dc94dc2877ecad5a24b1c51558f6182b4761d0451cb24c9f30b19b71ce36e2f694606c4598450486b52c4739b40eae8cca72c50a1e6ee416254af0c808fd8b3b0a77ef2316970ca45bbb5b8c6099f880915652eff1fbe5badb5b11795fd2d9b862ae741bb6d7d9194303409837ae766973dbd1545512a0fc2d9257a85daffed72a01463d2881343c6efb60a0a075", @nested={0x4, 0x6}, @typed={0x8, 0xe0, 0x0, 0x0, @ipv4=@loopback}]}, @generic="11573e297182ad42a6b378f1eb93e2547fa29c7ec44008878cebce92652705fccfe458f75ae7ddadac8d73e6f81663bdc4c372fff7b17753fb32bc7c2c131fa7c9c4861911cb62243471890b6b8e7f7931461d8c1fbe267e25424d467dc0815c53c59ac1adccfd", @typed={0xc, 0x4d, 0x0, 0x0, @u64=0x7ff}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030527bd7000fbdfdf25040000000c000180080001001808f1be57"], 0x20}, 0x1, 0x0, 0x0, 0x48011}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r10 = fsopen$auto(0x0, 0x1) fsconfig$auto(r10, 0x8, 0x0, 0x0, 0x0) r11 = fsopen$auto(0x0, 0x1) fsconfig$auto(r11, 0x6, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)={0x14, r12, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x2400f000}, 0x20008080) unshare$auto(0x6) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x403c6f2b, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.265416935s ago: executing program 3 (id=794): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x5) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0) writev$auto(0xca, &(0x7f0000000500)={&(0x7f0000000800)="86d9b0bf291e5e5e8ec53c06000000fe69f6414866bfbe23c315161d44c858285ce900000000000000000000e4cbc079d847d343534f33cb11052d9a64e340584ac5a1a69922566dbe974278ee90575dd977215fb0fa0099144c0b0f61141ab10e39e14017d6b2704e27c54b2599842e214463ceb23217c464375466b80311f58e05c77ecd6c92aea5df645b0a84f51a5fb7b53914632059f161b818c25a8eca6c2025aff2f18730bf3e2830a22bfa37", 0x1}, 0x5) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000005c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4051) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00'}) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0028bd7000fbdbdf25917f00000800030000", @ANYRES32=r6, @ANYBLOB='\b\x00<\x00@\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'xfrm0\x00'}) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 1.875846693s ago: executing program 1 (id=795): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1c, 0x1, 0x6, 0xee00, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0x90001, 0x0) fdatasync$auto(r2) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="fdff0700", @ANYRES16=r3, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x80000, 0x0) madvise$auto(0x0, 0x2003f0, 0x17) (async) madvise$auto(0x0, 0x2003f0, 0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) (async) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) ioctl$auto_SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000480)) (async) ioctl$auto_SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000480)) 1.838939125s ago: executing program 3 (id=796): bpf$auto(0x68, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x6, 0x5, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x632, 0x57d, 0x1ff, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, 0xa3) socket(0x11, 0x3, 0x9) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000140)="6acb040b07a656fa323a6f993d75e5a12ddb24caae0e84ddded65bd7a18b38c703f31c569899558f82691aa52aebf2d566c76e9a72edafa3d849e73ad443fc") bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=r0, 0x4, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000280)=""/125, 0x7d) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb80"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0x400a507}, 0x800}, 0xa, 0x8) 1.828330866s ago: executing program 4 (id=805): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_GET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044058}, 0x4000000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000019c0), r2) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPP(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x285, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x880) msgctl$auto_MSG_STAT_ANY(0xccf, 0xd, &(0x7f0000000340)={{0xffff, 0x0, 0xffffffffffffffff, 0xbb79, 0x3, 0x3, 0x80}, &(0x7f0000000240)=0x7, &(0x7f0000000280)=0x10, 0x37, 0x0, 0x62b, 0x2, 0x3, 0x100, 0x4, 0xed, @raw=0x2, @raw=0xc}) r9 = waitid$auto_P_PIDFD(0x3, r0, &(0x7f00000003c0)={@_si_pad}, 0x1cb, &(0x7f0000000440)={{0x1}, {0x3ff, 0xfffffffffffffffa}, 0x1, 0x0, 0x2, 0x8000000000000000, 0x6, 0xd5, 0x7, 0x9, 0xffff, 0x2, 0x805, 0x3, 0xd035, 0x1ff}) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000a80)={0x494, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, "ed0aafb77172b865187b75a82dd07571695d"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_MAC={0x81, 0x6, "2651b9853621cfaa8dc84cb32796aceac93fe70f7ea4474fa60e31625fc9647918eb939a00628fd48b2b7e5ad9388c69d247de2665b0a8397ddb0c05f9943c951cf2d14330bf4465fb180962ec47dd2020038ccdad727cef1633686576eb3de23298e03dc4b69eda2f9a99d885aacc5bbff37ccf36219d804326f9faf6"}, @NL80211_ATTR_NAN_FUNC={0x3db, 0xf0, 0x0, 0x1, [@nested={0x1c, 0xf5, 0x0, 0x1, [@nested={0x4, 0x6a}, @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @typed={0xb6, 0x24, 0x0, 0x0, @binary="1c1938b221c1deec0f3580873dcda80146c9d56de873e4096c1d6a695db8685c71d5cbe41ff2365129a65dea61a3d5e0e1eb834f4c4a3fa91cff0fcbd6d6577a80fe882a6a2fb5ce5e9e9fc8b1296596a6fb9f56431de64581f1f8727f2dee08dbab9033ef15c983f2725bc40f959810a87745209608ca7c418d7509ba8f682d5379338de2cf04a223e235fa800870d3bfb0ff9e40966f8965f58851db29035e819de36e28d90fee006047ca4d8092409b85"}, @nested={0xa4, 0x70, 0x0, 0x1, [@nested={0x4, 0xd2}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0xd661}, @typed={0x8, 0x5f, 0x0, 0x0, @uid=0xee01}, @typed={0x73, 0x12c, 0x0, 0x0, @binary="470497315ab634e0de75df7bae654b98a3f9b1b27f83d521779d9dabf5a862571560e3f6a1ea9fcf731ef99e68ea07c8499c453cdc6d48c333ed88d317e48a4fae84ab535e3bb465c5b45149d0842713b1cc9eaa90ffadb6b6dcf087a6118bd8bfcbc2d179c6a8fda21c67509c853b"}, @nested={0x4, 0xe2}, @nested={0x4, 0xfa}, @typed={0x8, 0x156, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0xb8, 0x0, 0x0, @uid=r8}]}, @typed={0x4, 0x79}, @typed={0x8, 0x144, 0x0, 0x0, @pid=r9}, @nested={0x1e0, 0x45, 0x0, 0x1, [@generic="96c68e8071fafed026b0bf7847e6dc7104c4289b25c4e42516c60ca5ef6780844d1cd0efd075bb0e1cbcb58a4c9b80d30ee5bb62e069de366b166f5cfc26fbde0c2b1cb064ea2d52594ad52bbd931ac64fdcffe09f823d8382ded8050bd8e336fae33733141c3f75765a233f6d1ac3b6030c02d5deae4e8027613a5e47e0d0d96091721e6e5f27bb0be669c7f028c57d3e566e434e6c676b95e3b544f99119b6839c7781645b32d3372840710719713bf394bdfc3682dd31adaaffada2bcc1c2873f6e8fc7d7b4798096b0220669ae73542dce2c429910a36d0125089a72c34b88585214d0edb704ec6780dcae0320a59c", @generic="cefb86dc94bfab2dc758a6926d8cee329005833e8460d3f2bd15a2ea8ea19b72cf062873f18e90db481a155a462a077d2c99a51b8019d7c1a33d0d92b784cc35ed07cde7bc0560e5d005655efe8b1b1fe4dc94dc2877ecad5a24b1c51558f6182b4761d0451cb24c9f30b19b71ce36e2f694606c4598450486b52c4739b40eae8cca72c50a1e6ee416254af0c808fd8b3b0a77ef2316970ca45bbb5b8c6099f880915652eff1fbe5badb5b11795fd2d9b862ae741bb6d7d9194303409837ae766973dbd1545512a0fc2d9257a85daffed72a01463d2881343c6efb60a0a075", @nested={0x4, 0x6}, @typed={0x8, 0xe0, 0x0, 0x0, @ipv4=@loopback}]}, @generic="11573e297182ad42a6b378f1eb93e2547fa29c7ec44008878cebce92652705fccfe458f75ae7ddadac8d73e6f81663bdc4c372fff7b17753fb32bc7c2c131fa7c9c4861911cb62243471890b6b8e7f7931461d8c1fbe267e25424d467dc0815c53c59ac1adccfd", @typed={0xc, 0x4d, 0x0, 0x0, @u64=0x7ff}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030527bd7000fbdfdf25040000000c000180080001001808f1be57"], 0x20}, 0x1, 0x0, 0x0, 0x48011}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r10 = fsopen$auto(0x0, 0x1) fsconfig$auto(r10, 0x8, 0x0, 0x0, 0x0) r11 = fsopen$auto(0x0, 0x1) fsconfig$auto(r11, 0x6, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)={0x14, r12, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x2400f000}, 0x20008080) unshare$auto(0x6) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x403c6f2b, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.358801975s ago: executing program 3 (id=798): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyq2\x00', 0x446001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video47\x00', 0xc0480, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r0, 0x9, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x7, 0x948e, 0x7fffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0xfffffffffffffff9, 0x6, 0x2, 0x6]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xea182, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/environ\x00', 0x640, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0xc4) madvise$auto(0x8000000000000001, 0xfffdffffffff0000, 0x8000015) prctl$auto(0x1000000003b, 0x6, 0x4, 0x105, 0x5) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x1, 0x84) r3 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r3, 0x0, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) 1.349662469s ago: executing program 4 (id=807): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_GET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044058}, 0x4000000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000019c0), r2) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPP(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x285, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x880) msgctl$auto_MSG_STAT_ANY(0xccf, 0xd, &(0x7f0000000340)={{0xffff, 0x0, 0xffffffffffffffff, 0xbb79, 0x3, 0x3, 0x80}, &(0x7f0000000240)=0x7, &(0x7f0000000280)=0x10, 0x37, 0x0, 0x62b, 0x2, 0x3, 0x100, 0x4, 0xed, @raw=0x2, @raw=0xc}) r9 = waitid$auto_P_PIDFD(0x3, r0, &(0x7f00000003c0)={@_si_pad}, 0x1cb, &(0x7f0000000440)={{0x1}, {0x3ff, 0xfffffffffffffffa}, 0x1, 0x0, 0x2, 0x8000000000000000, 0x6, 0xd5, 0x7, 0x9, 0xffff, 0x2, 0x805, 0x3, 0xd035, 0x1ff}) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000a80)={0x494, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, "ed0aafb77172b865187b75a82dd07571695d"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_MAC={0x81, 0x6, "2651b9853621cfaa8dc84cb32796aceac93fe70f7ea4474fa60e31625fc9647918eb939a00628fd48b2b7e5ad9388c69d247de2665b0a8397ddb0c05f9943c951cf2d14330bf4465fb180962ec47dd2020038ccdad727cef1633686576eb3de23298e03dc4b69eda2f9a99d885aacc5bbff37ccf36219d804326f9faf6"}, @NL80211_ATTR_NAN_FUNC={0x3db, 0xf0, 0x0, 0x1, [@nested={0x1c, 0xf5, 0x0, 0x1, [@nested={0x4, 0x6a}, @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @typed={0xb6, 0x24, 0x0, 0x0, @binary="1c1938b221c1deec0f3580873dcda80146c9d56de873e4096c1d6a695db8685c71d5cbe41ff2365129a65dea61a3d5e0e1eb834f4c4a3fa91cff0fcbd6d6577a80fe882a6a2fb5ce5e9e9fc8b1296596a6fb9f56431de64581f1f8727f2dee08dbab9033ef15c983f2725bc40f959810a87745209608ca7c418d7509ba8f682d5379338de2cf04a223e235fa800870d3bfb0ff9e40966f8965f58851db29035e819de36e28d90fee006047ca4d8092409b85"}, @nested={0xa4, 0x70, 0x0, 0x1, [@nested={0x4, 0xd2}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0xd661}, @typed={0x8, 0x5f, 0x0, 0x0, @uid=0xee01}, @typed={0x73, 0x12c, 0x0, 0x0, @binary="470497315ab634e0de75df7bae654b98a3f9b1b27f83d521779d9dabf5a862571560e3f6a1ea9fcf731ef99e68ea07c8499c453cdc6d48c333ed88d317e48a4fae84ab535e3bb465c5b45149d0842713b1cc9eaa90ffadb6b6dcf087a6118bd8bfcbc2d179c6a8fda21c67509c853b"}, @nested={0x4, 0xe2}, @nested={0x4, 0xfa}, @typed={0x8, 0x156, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0xb8, 0x0, 0x0, @uid=r8}]}, @typed={0x4, 0x79}, @typed={0x8, 0x144, 0x0, 0x0, @pid=r9}, @nested={0x1e0, 0x45, 0x0, 0x1, [@generic="96c68e8071fafed026b0bf7847e6dc7104c4289b25c4e42516c60ca5ef6780844d1cd0efd075bb0e1cbcb58a4c9b80d30ee5bb62e069de366b166f5cfc26fbde0c2b1cb064ea2d52594ad52bbd931ac64fdcffe09f823d8382ded8050bd8e336fae33733141c3f75765a233f6d1ac3b6030c02d5deae4e8027613a5e47e0d0d96091721e6e5f27bb0be669c7f028c57d3e566e434e6c676b95e3b544f99119b6839c7781645b32d3372840710719713bf394bdfc3682dd31adaaffada2bcc1c2873f6e8fc7d7b4798096b0220669ae73542dce2c429910a36d0125089a72c34b88585214d0edb704ec6780dcae0320a59c", @generic="cefb86dc94bfab2dc758a6926d8cee329005833e8460d3f2bd15a2ea8ea19b72cf062873f18e90db481a155a462a077d2c99a51b8019d7c1a33d0d92b784cc35ed07cde7bc0560e5d005655efe8b1b1fe4dc94dc2877ecad5a24b1c51558f6182b4761d0451cb24c9f30b19b71ce36e2f694606c4598450486b52c4739b40eae8cca72c50a1e6ee416254af0c808fd8b3b0a77ef2316970ca45bbb5b8c6099f880915652eff1fbe5badb5b11795fd2d9b862ae741bb6d7d9194303409837ae766973dbd1545512a0fc2d9257a85daffed72a01463d2881343c6efb60a0a075", @nested={0x4, 0x6}, @typed={0x8, 0xe0, 0x0, 0x0, @ipv4=@loopback}]}, @generic="11573e297182ad42a6b378f1eb93e2547fa29c7ec44008878cebce92652705fccfe458f75ae7ddadac8d73e6f81663bdc4c372fff7b17753fb32bc7c2c131fa7c9c4861911cb62243471890b6b8e7f7931461d8c1fbe267e25424d467dc0815c53c59ac1adccfd", @typed={0xc, 0x4d, 0x0, 0x0, @u64=0x7ff}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030527bd7000fbdfdf25040000000c000180080001001808f1be57"], 0x20}, 0x1, 0x0, 0x0, 0x48011}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r10 = fsopen$auto(0x0, 0x1) fsconfig$auto(r10, 0x8, 0x0, 0x0, 0x0) r11 = fsopen$auto(0x0, 0x1) fsconfig$auto(r11, 0x6, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)={0x14, r12, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x2400f000}, 0x20008080) unshare$auto(0x6) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x403c6f2b, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.254026783s ago: executing program 0 (id=799): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye5\x00', 0x141c83, 0x0) socket(0xa, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) timer_create$auto(0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(r0, 0x8, &(0x7f0000000180)="5b4f86914e718a1edd48cebfd066d5935e5a68b33619569242e6ebb217c53b87c14922f1d603ca8ac4cb895ab69dcc5e194efb554126198a7c9173d4bc0fbf23e98ca91465037b56c1556303ef4f3194643b8e4b3961b7f6946083b16c4c356b3fd4acb8770b15336cdfb9b3d8b162194e53694c0f6726759583b654ffb9017bb1e2d211c1fe91", 0x83) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x9, 0x2000e, 0x800000000077, 0xebd, 0x40000000000a5, 0x4000008001) io_setup$auto(0x1, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = getsockopt$auto(r1, 0x11b, 0x8, 0x0, 0x0) set_mempolicy_home_node$auto(0x8, 0x2c, 0x9, 0x7f) socket(0x2, 0x1, 0x0) setuid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)="807ea26a6f25b62e8d7320d84f2b5cbdc1069a7eeed14273e9a20aaca69eb5a54485423680be8af672972bc74b7e94298bdbfbc0c1ace18fd69278c68b11d4885ac7caa291f42507b9f0ecc3469608eb3f843c89dd30b1fcdb995d9a828c6c8562f75e072cad2acfc224d7575404a025fa7d40acdc4d1e7468", 0x79) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x3496c2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x9000aea4, &(0x7f0000000040)={0x7}) 1.122022799s ago: executing program 1 (id=800): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/ram11/trace/act_mask\x00', 0x8a401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) semctl$auto(0x7, 0x2, 0x13, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(r1, 0x0, 0x2, 0x2) 1.103261656s ago: executing program 4 (id=801): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x100010008000) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf2503000000080004", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, 0x0, 0x9) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 979.777076ms ago: executing program 1 (id=802): bpf$auto(0x68, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x6, 0x5, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x632, 0x57d, 0x1ff, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, 0xa3) socket(0x11, 0x3, 0x9) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000140)="6acb040b07a656fa323a6f993d75e5a12ddb24caae0e84ddded65bd7a18b38c703f31c569899558f82691aa52aebf2d566c76e9a72edafa3d849e73ad443fc") bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=r0, 0x4, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000280)=""/125, 0x7d) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb80"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0x400a507}, 0x800}, 0xa, 0x8) 951.818702ms ago: executing program 4 (id=803): close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/250, 0xfa) fcntl$auto(0x2, 0x401, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x10000000000eb1, 0xfffffffffffffffa, 0x1000000000008004) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x8, 0x2000000000002) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 215.616605ms ago: executing program 3 (id=804): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x89f0, r0) rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00') acct$auto(&(0x7f0000000300)='TIPCv2\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) semctl$auto(0x7, 0x6, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4605, 0x0) 54.275486ms ago: executing program 4 (id=806): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x5) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0) writev$auto(0xca, &(0x7f0000000500)={&(0x7f0000000800)="86d9b0bf291e5e5e8ec53c06000000fe69f6414866bfbe23c315161d44c858285ce900000000000000000000e4cbc079d847d343534f33cb11052d9a64e340584ac5a1a69922566dbe974278ee90575dd977215fb0fa0099144c0b0f61141ab10e39e14017d6b2704e27c54b2599842e214463ceb23217c464375466b80311f58e05c77ecd6c92aea5df645b0a84f51a5fb7b53914632059f161b818c25a8eca6c2025aff2f18730bf3e2830a22bfa37", 0x1}, 0x5) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000005c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4051) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00'}) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0028bd7000fbdbdf25917f00000800030000", @ANYRES32=r6, @ANYBLOB='\b\x00<\x00@\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'xfrm0\x00'}) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 0s ago: executing program 1 (id=808): bpf$auto(0x68, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x6, 0x5, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x632, 0x57d, 0x1ff, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, 0xa3) socket(0x11, 0x3, 0x9) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000140)="6acb040b07a656fa323a6f993d75e5a12ddb24caae0e84ddded65bd7a18b38c703f31c569899558f82691aa52aebf2d566c76e9a72edafa3d849e73ad443fc") bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=r0, 0x4, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x10, 0x2, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000280)=""/125, 0x7d) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0x400a507}, 0x800}, 0xa, 0x8) kernel console output (not intermixed with test programs): 7311] RAX: ffffffffffffffda RBX: 00007f368f815fa0 RCX: 00007f368f59acb9 [ 171.321093][ T7311] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 0000000000000007 [ 171.321111][ T7311] RBP: 00007f368f608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 171.321127][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.321142][ T7311] R13: 00007f368f816038 R14: 00007f368f815fa0 R15: 00007ffd68a17ad8 [ 171.321182][ T7311] [ 171.321221][ T7311] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 171.668908][ T7311] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 173.710599][ T7356] FAULT_INJECTION: forcing a failure. [ 173.710599][ T7356] name failslab, interval 1, probability 0, space 0, times 0 [ 173.785294][ T7356] CPU: 1 UID: 0 PID: 7356 Comm: syz.1.315 Not tainted syzkaller #0 PREEMPT(full) [ 173.785335][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 173.785350][ T7356] Call Trace: [ 173.785357][ T7356] [ 173.785366][ T7356] dump_stack_lvl+0x100/0x190 [ 173.785401][ T7356] should_fail_ex.cold+0x5/0xa [ 173.785443][ T7356] should_failslab+0xc2/0x120 [ 173.785478][ T7356] kmem_cache_alloc_noprof+0x83/0x780 [ 173.785511][ T7356] ? __pfx_map_id_range_down+0x10/0x10 [ 173.785537][ T7356] ? security_inode_alloc+0x3b/0x2c0 [ 173.785576][ T7356] ? security_inode_alloc+0x3b/0x2c0 [ 173.785605][ T7356] security_inode_alloc+0x3b/0x2c0 [ 173.785642][ T7356] inode_init_always_gfp+0xced/0x1040 [ 173.785678][ T7356] alloc_inode+0x8e/0x250 [ 173.785716][ T7356] new_inode+0x22/0x1c0 [ 173.785755][ T7356] shmem_get_inode+0x197/0xf30 [ 173.785808][ T7356] shmem_mknod+0x1a2/0x3b0 [ 173.785837][ T7356] vfs_mknod+0x6d9/0xa90 [ 173.785886][ T7356] do_mknodat+0x5f2/0x7a0 [ 173.785918][ T7356] ? __pfx_do_mknodat+0x10/0x10 [ 173.785944][ T7356] ? strncpy_from_user+0x19d/0x2d0 [ 173.785985][ T7356] ? getname_flags.part.0+0x1c5/0x540 [ 173.786026][ T7356] __x64_sys_mknod+0x118/0x170 [ 173.786059][ T7356] do_syscall_64+0xc9/0xf80 [ 173.786090][ T7356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.786114][ T7356] RIP: 0033:0x7febd4b9acb9 [ 173.786133][ T7356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.786153][ T7356] RSP: 002b:00007febd5993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 173.786175][ T7356] RAX: ffffffffffffffda RBX: 00007febd4e16090 RCX: 00007febd4b9acb9 [ 173.786192][ T7356] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 173.786208][ T7356] RBP: 00007febd4c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 173.786225][ T7356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.786240][ T7356] R13: 00007febd4e16128 R14: 00007febd4e16090 R15: 00007ffc62fecc68 [ 173.786277][ T7356] [ 174.300838][ T7363] ubi31: attaching mtd0 [ 174.318754][ T7363] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 174.377973][ T7361] usbip-vudc usbip-vudc.0: gadget not bound [ 174.391809][ T7363] ubi31 error: validate_ec_hdr: bad EC header [ 174.391863][ T7363] Erase counter header dump: [ 174.391873][ T7363] magic 0x55424923 [ 174.391885][ T7363] version 1 [ 174.391896][ T7363] ec 1 [ 174.391904][ T7363] vid_hdr_offset 64 [ 174.391914][ T7363] data_offset 128 [ 174.391925][ T7363] image_seq -1888003156 [ 174.391935][ T7363] hdr_crc 0x2e6a7641 [ 174.391947][ T7363] erase counter header hexdump: [ 174.392017][ T7363] CPU: 0 UID: 0 PID: 7363 Comm: syz.2.318 Not tainted syzkaller #0 PREEMPT(full) [ 174.392049][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 174.392065][ T7363] Call Trace: [ 174.392074][ T7363] [ 174.392085][ T7363] dump_stack_lvl+0x100/0x190 [ 174.392119][ T7363] validate_ec_hdr+0x2d0/0x330 [ 174.392154][ T7363] ubi_io_read_ec_hdr+0x656/0x6d0 [ 174.392191][ T7363] ubi_attach+0x601/0x4d30 [ 174.392230][ T7363] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 174.392275][ T7363] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.392322][ T7363] ? ubi_msg+0x114/0x159 [ 174.392355][ T7363] ? __pfx_ubi_msg+0x10/0x10 [ 174.392388][ T7363] ? __pfx_ubi_attach+0x10/0x10 [ 174.392422][ T7363] ? lockdep_init_map_type+0x5c/0x250 [ 174.392462][ T7363] ? ubi_attach_mtd_dev+0x1587/0x3370 [ 174.392501][ T7363] ? __vmalloc_node_noprof+0xad/0xf0 [ 174.392546][ T7363] ? ubi_attach_mtd_dev+0x1587/0x3370 [ 174.392594][ T7363] ubi_attach_mtd_dev+0x15d3/0x3370 [ 174.392650][ T7363] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 174.392693][ T7363] ? __pfx_get_mtd_device+0x10/0x10 [ 174.392734][ T7363] ctrl_cdev_ioctl+0x36a/0x400 [ 174.392775][ T7363] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 174.392822][ T7363] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 174.392861][ T7363] __x64_sys_ioctl+0x18e/0x210 [ 174.392905][ T7363] do_syscall_64+0xc9/0xf80 [ 174.392939][ T7363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.392967][ T7363] RIP: 0033:0x7f9e5df9acb9 [ 174.392988][ T7363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.393013][ T7363] RSP: 002b:00007f9e5ed85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.393040][ T7363] RAX: ffffffffffffffda RBX: 00007f9e5e215fa0 RCX: 00007f9e5df9acb9 [ 174.393058][ T7363] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 0000000000000007 [ 174.393074][ T7363] RBP: 00007f9e5e008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 174.393089][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.393104][ T7363] R13: 00007f9e5e216038 R14: 00007f9e5e215fa0 R15: 00007fff3d0b7df8 [ 174.393136][ T7363] [ 174.393145][ T7363] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 174.435036][ T7363] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 175.762100][ T7405] FAULT_INJECTION: forcing a failure. [ 175.762100][ T7405] name failslab, interval 1, probability 0, space 0, times 0 [ 175.813963][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(full) [ 175.813999][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 175.814014][ T7405] Call Trace: [ 175.814022][ T7405] [ 175.814032][ T7405] dump_stack_lvl+0x100/0x190 [ 175.814068][ T7405] should_fail_ex.cold+0x5/0xa [ 175.814106][ T7405] should_failslab+0xc2/0x120 [ 175.814141][ T7405] ? snd_pcm_plugin_build+0x434/0x650 [ 175.814181][ T7405] __kmalloc_noprof+0xf6/0x9c0 [ 175.814219][ T7405] ? snd_pcm_plugin_build+0x434/0x650 [ 175.814252][ T7405] snd_pcm_plugin_build+0x434/0x650 [ 175.814290][ T7405] snd_pcm_plugin_build_mulaw+0x280/0x760 [ 175.814329][ T7405] ? __pfx_mulaw_encode+0x10/0x10 [ 175.814364][ T7405] ? __pfx_snd_pcm_plugin_build_mulaw+0x10/0x10 [ 175.814407][ T7405] ? snd_pcm_hw_params+0x262/0x1cb0 [ 175.814449][ T7405] snd_pcm_plug_format_plugins+0xbdd/0x1430 [ 175.814490][ T7405] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 175.814531][ T7405] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 175.814576][ T7405] snd_pcm_oss_change_params_locked+0x2e3c/0x39f0 [ 175.814631][ T7405] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 175.814663][ T7405] ? __pfx___mutex_lock+0x10/0x10 [ 175.814723][ T7405] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 175.814759][ T7405] snd_pcm_oss_sync+0x1de/0x840 [ 175.814797][ T7405] snd_pcm_oss_release+0x238/0x300 [ 175.814830][ T7405] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 175.814863][ T7405] __fput+0x3ff/0xb40 [ 175.814905][ T7405] task_work_run+0x150/0x240 [ 175.814947][ T7405] ? __pfx_task_work_run+0x10/0x10 [ 175.814988][ T7405] ? do_raw_spin_unlock+0x145/0x1e0 [ 175.815035][ T7405] do_exit+0x829/0x2a30 [ 175.815080][ T7405] ? __pfx_do_exit+0x10/0x10 [ 175.815118][ T7405] ? do_raw_spin_lock+0x128/0x260 [ 175.815164][ T7405] ? find_held_lock+0x2b/0x80 [ 175.815189][ T7405] ? get_signal+0x7e0/0x21e0 [ 175.815222][ T7405] do_group_exit+0xd5/0x2a0 [ 175.815262][ T7405] get_signal+0x1ec7/0x21e0 [ 175.815308][ T7405] ? __pfx_get_signal+0x10/0x10 [ 175.815341][ T7405] ? do_futex+0x192/0x350 [ 175.815382][ T7405] arch_do_signal_or_restart+0x91/0x770 [ 175.815422][ T7405] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 175.815469][ T7405] ? __pfx___x64_sys_futex+0x10/0x10 [ 175.815504][ T7405] ? xfd_validate_state+0x129/0x190 [ 175.815553][ T7405] exit_to_user_mode_loop+0x86/0x4b0 [ 175.815588][ T7405] ? rcu_is_watching+0x12/0xc0 [ 175.815612][ T7405] do_syscall_64+0x4ea/0xf80 [ 175.815636][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.815657][ T7405] RIP: 0033:0x7febd4b9acb9 [ 175.815673][ T7405] Code: Unable to access opcode bytes at 0x7febd4b9ac8f. [ 175.815681][ T7405] RSP: 002b:00007febd59b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 175.815700][ T7405] RAX: 0000000000000001 RBX: 00007febd4e15fa8 RCX: 00007febd4b9acb9 [ 175.815713][ T7405] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007febd4e15fac [ 175.815725][ T7405] RBP: 00007febd4e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 175.815738][ T7405] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 175.815750][ T7405] R13: 00007febd4e16038 R14: 00007ffc62fecb80 R15: 00007ffc62fecc68 [ 175.815779][ T7405] [ 176.749869][ T7415] netlink: 'syz.1.332': attribute type 33 has an invalid length. [ 178.027591][ T7458] FAULT_INJECTION: forcing a failure. [ 178.027591][ T7458] name failslab, interval 1, probability 0, space 0, times 0 [ 178.248627][ T7458] CPU: 0 UID: 0 PID: 7458 Comm: syz.2.341 Not tainted syzkaller #0 PREEMPT(full) [ 178.248663][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 178.248678][ T7458] Call Trace: [ 178.248687][ T7458] [ 178.248697][ T7458] dump_stack_lvl+0x100/0x190 [ 178.248735][ T7458] should_fail_ex.cold+0x5/0xa [ 178.248779][ T7458] should_failslab+0xc2/0x120 [ 178.248815][ T7458] ? constrain_params_by_rules+0x175/0xcc0 [ 178.248850][ T7458] __kmalloc_noprof+0xf6/0x9c0 [ 178.248877][ T7458] ? kasan_quarantine_put+0x104/0x240 [ 178.248908][ T7458] ? lockdep_hardirqs_on+0x78/0x100 [ 178.248945][ T7458] ? constrain_params_by_rules+0x175/0xcc0 [ 178.248979][ T7458] constrain_params_by_rules+0x175/0xcc0 [ 178.249028][ T7458] ? constrain_params_by_rules+0xa1d/0xcc0 [ 178.249063][ T7458] ? constrain_params_by_rules+0xa22/0xcc0 [ 178.249103][ T7458] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 178.249147][ T7458] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 178.249182][ T7458] ? snd_pcm_oss_release+0x238/0x300 [ 178.249212][ T7458] ? __fput+0x3ff/0xb40 [ 178.249254][ T7458] ? snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 178.249286][ T7458] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 178.249319][ T7458] ? snd_interval_refine+0x2d0/0x580 [ 178.249363][ T7458] snd_pcm_hw_refine+0x7e7/0xad0 [ 178.249405][ T7458] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 178.249447][ T7458] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 178.249496][ T7458] snd_pcm_hw_param_first+0x2b0/0x680 [ 178.249537][ T7458] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 178.249574][ T7458] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 178.249605][ T7458] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 178.249639][ T7458] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 178.249685][ T7458] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 178.249703][ T7458] ? __pfx___mutex_lock+0x10/0x10 [ 178.249734][ T7458] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 178.249756][ T7458] snd_pcm_oss_sync+0x1de/0x840 [ 178.249776][ T7458] snd_pcm_oss_release+0x238/0x300 [ 178.249794][ T7458] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 178.249811][ T7458] __fput+0x3ff/0xb40 [ 178.249834][ T7458] task_work_run+0x150/0x240 [ 178.249858][ T7458] ? __pfx_task_work_run+0x10/0x10 [ 178.249880][ T7458] ? do_raw_spin_unlock+0x145/0x1e0 [ 178.249906][ T7458] do_exit+0x829/0x2a30 [ 178.249931][ T7458] ? __pfx_do_exit+0x10/0x10 [ 178.249951][ T7458] ? do_raw_spin_lock+0x128/0x260 [ 178.249972][ T7458] ? find_held_lock+0x2b/0x80 [ 178.249985][ T7458] ? get_signal+0x7e0/0x21e0 [ 178.250010][ T7458] do_group_exit+0xd5/0x2a0 [ 178.250033][ T7458] get_signal+0x1ec7/0x21e0 [ 178.250057][ T7458] ? __pfx_get_signal+0x10/0x10 [ 178.250075][ T7458] ? do_futex+0x192/0x350 [ 178.250097][ T7458] arch_do_signal_or_restart+0x91/0x770 [ 178.250119][ T7458] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 178.250144][ T7458] ? __pfx___x64_sys_futex+0x10/0x10 [ 178.250163][ T7458] ? xfd_validate_state+0x129/0x190 [ 178.250189][ T7458] exit_to_user_mode_loop+0x86/0x4b0 [ 178.250209][ T7458] ? rcu_is_watching+0x12/0xc0 [ 178.250224][ T7458] do_syscall_64+0x4ea/0xf80 [ 178.250243][ T7458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.250258][ T7458] RIP: 0033:0x7f9e5df9acb9 [ 178.250269][ T7458] Code: Unable to access opcode bytes at 0x7f9e5df9ac8f. [ 178.250275][ T7458] RSP: 002b:00007f9e5ed850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 178.250289][ T7458] RAX: fffffffffffffe00 RBX: 00007f9e5e215fa8 RCX: 00007f9e5df9acb9 [ 178.250299][ T7458] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e5e215fa8 [ 178.250307][ T7458] RBP: 00007f9e5e215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 178.250315][ T7458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.250323][ T7458] R13: 00007f9e5e216038 R14: 00007fff3d0b7d10 R15: 00007fff3d0b7df8 [ 178.250342][ T7458] [ 178.667788][ T7457] FAULT_INJECTION: forcing a failure. [ 178.667788][ T7457] name fail_futex, interval 1, probability 0, space 0, times 1 [ 178.681219][ T7457] CPU: 0 UID: 0 PID: 7457 Comm: syz.3.342 Not tainted syzkaller #0 PREEMPT(full) [ 178.681256][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 178.681273][ T7457] Call Trace: [ 178.681282][ T7457] [ 178.681293][ T7457] dump_stack_lvl+0x100/0x190 [ 178.681332][ T7457] should_fail_ex.cold+0x5/0xa [ 178.681377][ T7457] get_futex_key+0x1d2/0x1620 [ 178.681414][ T7457] ? __pfx_get_futex_key+0x10/0x10 [ 178.681463][ T7457] futex_wait_setup+0x81/0x500 [ 178.681499][ T7457] __futex_wait+0x19f/0x300 [ 178.681528][ T7457] ? __pfx___futex_wait+0x10/0x10 [ 178.681559][ T7457] ? __pfx_futex_wake_mark+0x10/0x10 [ 178.681606][ T7457] ? futex_hash+0x2c5/0x380 [ 178.681646][ T7457] futex_wait+0xed/0x380 [ 178.681669][ T7457] ? __pfx_futex_wait+0x10/0x10 [ 178.681699][ T7457] ? __fget_files+0x215/0x3d0 [ 178.681732][ T7457] do_futex+0x1ef/0x350 [ 178.681766][ T7457] ? __pfx_do_futex+0x10/0x10 [ 178.681800][ T7457] ? fdget+0x18b/0x210 [ 178.681825][ T7457] ? __sys_sendmsg+0x18f/0x220 [ 178.681866][ T7457] __x64_sys_futex+0x34f/0x4d0 [ 178.681908][ T7457] ? __pfx___x64_sys_futex+0x10/0x10 [ 178.681971][ T7457] do_syscall_64+0xc9/0xf80 [ 178.682007][ T7457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.682034][ T7457] RIP: 0033:0x7f368f59acb9 [ 178.682055][ T7457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.682079][ T7457] RSP: 002b:00007f36903b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 178.682102][ T7457] RAX: ffffffffffffffda RBX: 00007f368f815fa8 RCX: 00007f368f59acb9 [ 178.682120][ T7457] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f368f815fa8 [ 178.682136][ T7457] RBP: 00007f368f815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 178.682153][ T7457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.682166][ T7457] R13: 00007f368f816038 R14: 00007ffd68a179f0 R15: 00007ffd68a17ad8 [ 178.682201][ T7457] [ 179.334154][ T7464] FAULT_INJECTION: forcing a failure. [ 179.334154][ T7464] name failslab, interval 1, probability 0, space 0, times 0 [ 179.436296][ T7464] CPU: 1 UID: 0 PID: 7464 Comm: syz.0.344 Not tainted syzkaller #0 PREEMPT(full) [ 179.436332][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 179.436348][ T7464] Call Trace: [ 179.436356][ T7464] [ 179.436366][ T7464] dump_stack_lvl+0x100/0x190 [ 179.436404][ T7464] should_fail_ex.cold+0x5/0xa [ 179.436447][ T7464] should_failslab+0xc2/0x120 [ 179.436484][ T7464] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 179.436519][ T7464] ? dquot_alloc_inode+0x51b/0xb10 [ 179.436558][ T7464] ? __d_alloc+0x34/0xa80 [ 179.436596][ T7464] ? __d_alloc+0x34/0xa80 [ 179.436628][ T7464] __d_alloc+0x34/0xa80 [ 179.436670][ T7464] d_alloc_pseudo+0x1c/0xc0 [ 179.436710][ T7464] alloc_file_pseudo+0xcf/0x230 [ 179.436750][ T7464] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 179.436799][ T7464] __shmem_file_setup+0x1a3/0x330 [ 179.436832][ T7464] shmem_zero_setup+0x93/0x1b0 [ 179.436867][ T7464] __mmap_region+0x2101/0x2820 [ 179.436901][ T7464] ? __pfx___mmap_region+0x10/0x10 [ 179.436939][ T7464] ? __lock_acquire+0x4a5/0x2630 [ 179.436988][ T7464] ? lock_acquire+0x17c/0x330 [ 179.437021][ T7464] ? find_held_lock+0x2b/0x80 [ 179.437064][ T7464] ? rcu_is_watching+0x12/0xc0 [ 179.437090][ T7464] ? trace_sched_exit_tp+0xcd/0x100 [ 179.437121][ T7464] ? __schedule+0xf65/0x5e10 [ 179.437194][ T7464] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 179.437236][ T7464] ? rcu_is_watching+0x12/0xc0 [ 179.437271][ T7464] mmap_region+0x180/0x3e0 [ 179.437310][ T7464] do_mmap+0xc63/0x12f0 [ 179.437355][ T7464] ? __pfx_do_mmap+0x10/0x10 [ 179.437394][ T7464] ? __pfx_down_write_killable+0x10/0x10 [ 179.437428][ T7464] ? rcu_read_lock_any_held+0x6a/0xa0 [ 179.437464][ T7464] vm_mmap_pgoff+0x29e/0x470 [ 179.437509][ T7464] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 179.437557][ T7464] ? __x64_sys_futex+0x34f/0x4d0 [ 179.437591][ T7464] ? __x64_sys_futex+0x358/0x4d0 [ 179.437632][ T7464] ksys_mmap_pgoff+0x7d/0x5b0 [ 179.437675][ T7464] ? syscall_user_dispatch+0x76/0x130 [ 179.437718][ T7464] __x64_sys_mmap+0x125/0x190 [ 179.437749][ T7464] do_syscall_64+0xc9/0xf80 [ 179.437783][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.437811][ T7464] RIP: 0033:0x7ff5ff19acb9 [ 179.437832][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.437858][ T7464] RSP: 002b:00007ff60003d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 179.437884][ T7464] RAX: ffffffffffffffda RBX: 00007ff5ff415fa0 RCX: 00007ff5ff19acb9 [ 179.437902][ T7464] RDX: 0100001000000004 RSI: 0000000000000061 RDI: 0000000000000000 [ 179.437918][ T7464] RBP: 00007ff5ff208bf7 R08: 0000000000000400 R09: 0000000000008000 [ 179.437935][ T7464] R10: 000000000000fa31 R11: 0000000000000246 R12: 0000000000000000 [ 179.437951][ T7464] R13: 00007ff5ff416038 R14: 00007ff5ff415fa0 R15: 00007ffda687b578 [ 179.437989][ T7464] [ 180.047931][ T30] audit: type=1800 audit(1769187122.364:6): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.346" name="dbroot" dev="configfs" ino=15222 res=0 errno=0 [ 181.559596][ T30] audit: type=1800 audit(1769187123.874:7): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.349" name="file0" dev="tmpfs" ino=507 res=0 errno=0 [ 181.760814][ T7489] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 181.775479][ T7489] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 182.758842][ T7511] FAULT_INJECTION: forcing a failure. [ 182.758842][ T7511] name failslab, interval 1, probability 0, space 0, times 0 [ 182.772098][ T7511] CPU: 1 UID: 0 PID: 7511 Comm: syz.0.353 Not tainted syzkaller #0 PREEMPT(full) [ 182.772138][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 182.772156][ T7511] Call Trace: [ 182.772166][ T7511] [ 182.772177][ T7511] dump_stack_lvl+0x100/0x190 [ 182.772216][ T7511] should_fail_ex.cold+0x5/0xa [ 182.772263][ T7511] should_failslab+0xc2/0x120 [ 182.772304][ T7511] __kmalloc_cache_noprof+0x80/0x810 [ 182.772334][ T7511] ? do_raw_spin_unlock+0x145/0x1e0 [ 182.772376][ T7511] ? snd_rawmidi_open+0x3b3/0xba0 [ 182.772421][ T7511] ? snd_rawmidi_open+0x3b3/0xba0 [ 182.772459][ T7511] snd_rawmidi_open+0x3b3/0xba0 [ 182.772505][ T7511] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 182.772549][ T7511] ? soundcore_open+0x231/0x5a0 [ 182.772577][ T7511] ? soundcore_open+0x231/0x5a0 [ 182.772608][ T7511] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 182.772660][ T7511] soundcore_open+0x2e3/0x5a0 [ 182.772693][ T7511] ? __pfx_soundcore_open+0x10/0x10 [ 182.772723][ T7511] chrdev_open+0x234/0x6a0 [ 182.772758][ T7511] ? __pfx_apparmor_file_open+0x10/0x10 [ 182.772795][ T7511] ? __pfx_chrdev_open+0x10/0x10 [ 182.772832][ T7511] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 182.772873][ T7511] do_dentry_open+0x73e/0x1570 [ 182.772906][ T7511] ? __pfx_chrdev_open+0x10/0x10 [ 182.772940][ T7511] ? security_inode_permission+0xbf/0x250 [ 182.772988][ T7511] vfs_open+0x82/0x3f0 [ 182.773033][ T7511] path_openat+0x21dc/0x3120 [ 182.773080][ T7511] ? __pfx_path_openat+0x10/0x10 [ 182.773128][ T7511] do_filp_open+0x1f7/0x420 [ 182.773164][ T7511] ? __pfx_do_filp_open+0x10/0x10 [ 182.773225][ T7511] ? _raw_spin_unlock+0x28/0x50 [ 182.773251][ T7511] ? alloc_fd+0x476/0x790 [ 182.773294][ T7511] do_sys_openat2+0x12e/0x220 [ 182.773337][ T7511] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.773394][ T7511] __x64_sys_openat+0x12d/0x210 [ 182.773438][ T7511] ? __pfx___x64_sys_openat+0x10/0x10 [ 182.773493][ T7511] do_syscall_64+0xc9/0xf80 [ 182.773530][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.773559][ T7511] RIP: 0033:0x7ff5ff19acb9 [ 182.773582][ T7511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.773609][ T7511] RSP: 002b:00007ff60003d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.773637][ T7511] RAX: ffffffffffffffda RBX: 00007ff5ff415fa0 RCX: 00007ff5ff19acb9 [ 182.773662][ T7511] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 182.773680][ T7511] RBP: 00007ff5ff208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 182.773698][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.773715][ T7511] R13: 00007ff5ff416038 R14: 00007ff5ff415fa0 R15: 00007ffda687b578 [ 182.773756][ T7511] [ 183.130133][ T7518] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(16) [ 184.897358][ T7547] vivid-007: ================= START STATUS ================= [ 184.916275][ T7547] vivid-007: Generate PTS: true [ 184.932875][ T7547] vivid-007: Generate SCR: true [ 184.932921][ T7547] tpg source WxH: 320x240 (Y'CbCr) [ 184.932936][ T7547] tpg field: 1 [ 184.932942][ T7547] tpg crop: (0,0)/320x240 [ 184.932952][ T7547] tpg compose: (0,0)/320x240 [ 184.932961][ T7547] tpg colorspace: 8 [ 184.932968][ T7547] tpg transfer function: 0/0 [ 184.932975][ T7547] tpg Y'CbCr encoding: 0/0 [ 184.932982][ T7547] tpg quantization: 0/0 [ 184.932989][ T7547] tpg RGB range: 0/2 [ 184.932996][ T7547] vivid-007: ================== END STATUS ================== [ 185.862114][ T7555] __vm_enough_memory: pid: 7555, comm: syz.3.362, bytes: 8589938688 not enough memory for the allocation [ 185.957215][ T7561] program syz.3.362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.991330][ T7577] FAULT_INJECTION: forcing a failure. [ 186.991330][ T7577] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.017026][ T7578] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(16) [ 187.035840][ T7577] CPU: 0 UID: 0 PID: 7577 Comm: syz.3.368 Not tainted syzkaller #0 PREEMPT(full) [ 187.035877][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 187.035894][ T7577] Call Trace: [ 187.035902][ T7577] [ 187.035913][ T7577] dump_stack_lvl+0x100/0x190 [ 187.035951][ T7577] should_fail_ex.cold+0x5/0xa [ 187.035992][ T7577] ? prepare_alloc_pages+0x16d/0x5f0 [ 187.036044][ T7577] should_fail_alloc_page+0xeb/0x140 [ 187.036087][ T7577] prepare_alloc_pages+0x1f0/0x5f0 [ 187.036127][ T7577] ? rcu_is_watching+0x12/0xc0 [ 187.036159][ T7577] __alloc_frozen_pages_noprof+0x193/0x2410 [ 187.036194][ T7577] ? __lock_acquire+0x4a5/0x2630 [ 187.036242][ T7577] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 187.036273][ T7577] ? do_raw_spin_lock+0x128/0x260 [ 187.036315][ T7577] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 187.036356][ T7577] ? find_held_lock+0x2b/0x80 [ 187.036395][ T7577] ? __lock_acquire+0x4a5/0x2630 [ 187.036431][ T7577] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.036463][ T7577] ? policy_nodemask+0xed/0x4f0 [ 187.036505][ T7577] alloc_pages_mpol+0x1fb/0x550 [ 187.036546][ T7577] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 187.036585][ T7577] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 187.036622][ T7577] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 187.036665][ T7577] folio_alloc_mpol_noprof+0x36/0x340 [ 187.036712][ T7577] shmem_alloc_folio+0x135/0x160 [ 187.036741][ T7577] shmem_alloc_and_add_folio+0x371/0xd40 [ 187.036784][ T7577] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 187.036821][ T7577] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 187.036864][ T7577] shmem_get_folio_gfp+0x6ab/0x1900 [ 187.036906][ T7577] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 187.036942][ T7577] ? filemap_map_pages+0x9e0/0x2110 [ 187.036983][ T7577] shmem_fault+0x1f9/0xa20 [ 187.037015][ T7577] ? __lock_acquire+0x4a5/0x2630 [ 187.037058][ T7577] ? __pfx_shmem_fault+0x10/0x10 [ 187.037100][ T7577] ? __pfx_filemap_map_pages+0x10/0x10 [ 187.037146][ T7577] __do_fault+0x10d/0x550 [ 187.037189][ T7577] do_fault+0xaf9/0x1990 [ 187.037237][ T7577] __handle_mm_fault+0x1807/0x2b50 [ 187.037274][ T7577] ? mt_find+0x45e/0x8e0 [ 187.037309][ T7577] ? __pfx___handle_mm_fault+0x10/0x10 [ 187.037346][ T7577] ? __pfx_mt_find+0x10/0x10 [ 187.037401][ T7577] ? find_vma+0xbf/0x140 [ 187.037439][ T7577] ? __pfx_find_vma+0x10/0x10 [ 187.037479][ T7577] handle_mm_fault+0x36d/0xa20 [ 187.037524][ T7577] do_user_addr_fault+0x74c/0x12f0 [ 187.037567][ T7577] exc_page_fault+0x6f/0xd0 [ 187.037599][ T7577] asm_exc_page_fault+0x26/0x30 [ 187.037626][ T7577] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 187.037667][ T7577] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 187.037694][ T7577] RSP: 0018:ffffc90003377c60 EFLAGS: 00050202 [ 187.037718][ T7577] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000004aff [ 187.037735][ T7577] RDX: 0000000000000001 RSI: 000000000000a000 RDI: ffff88805946a000 [ 187.037753][ T7577] RBP: 000000000000eaff R08: 0000000000000001 R09: ffffed100b28dd5f [ 187.037770][ T7577] R10: 0000000000000006 R11: 00000000000003ac R12: 0000000000000000 [ 187.037786][ T7577] R13: ffff888059460000 R14: 000000000000eaff R15: ffffc90003377e98 [ 187.037822][ T7577] _copy_from_user+0x98/0xd0 [ 187.037865][ T7577] memdup_user+0x6b/0xe0 [ 187.037901][ T7577] edid_write+0x6f/0x180 [ 187.037930][ T7577] full_proxy_write+0x135/0x1a0 [ 187.037977][ T7577] vfs_write+0x2aa/0x1070 [ 187.038009][ T7577] ? __pfx_full_proxy_write+0x10/0x10 [ 187.038064][ T7577] ? __pfx_vfs_write+0x10/0x10 [ 187.038092][ T7577] ? do_futex+0x192/0x350 [ 187.038132][ T7577] ? __pfx_do_futex+0x10/0x10 [ 187.038167][ T7577] ? __pfx_do_sys_openat2+0x10/0x10 [ 187.038217][ T7577] ? __x64_sys_futex+0x34f/0x4d0 [ 187.038253][ T7577] ? __x64_sys_futex+0x358/0x4d0 [ 187.038295][ T7577] ksys_write+0x12a/0x250 [ 187.038326][ T7577] ? __pfx_ksys_write+0x10/0x10 [ 187.038362][ T7577] do_syscall_64+0xc9/0xf80 [ 187.038396][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.038424][ T7577] RIP: 0033:0x7f368f59acb9 [ 187.038447][ T7577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.038473][ T7577] RSP: 002b:00007f36903b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.038499][ T7577] RAX: ffffffffffffffda RBX: 00007f368f815fa0 RCX: 00007f368f59acb9 [ 187.038518][ T7577] RDX: 000000000000eaff RSI: 0000000000000000 RDI: 0000000000000008 [ 187.038535][ T7577] RBP: 00007f368f608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 187.038552][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.038569][ T7577] R13: 00007f368f816038 R14: 00007f368f815fa0 R15: 00007ffd68a17ad8 [ 187.038609][ T7577] [ 188.325472][ T7598] qrtr: Invalid version 0 [ 188.642064][ T7602] nbd: must specify an index to disconnect [ 190.748795][ T7632] netlink: 5 bytes leftover after parsing attributes in process `syz.0.381'. [ 193.511877][ T7671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.544296][ T7671] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 193.626625][ T7671] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 193.664442][ T7671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 193.678390][ T7671] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 193.702150][ T7668] capability: warning: `syz.1.384' uses 32-bit capabilities (legacy support in use) [ 193.713518][ T7671] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 193.731290][ T7671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.748890][ T7671] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 193.759720][ T7671] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 193.779981][ T7671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.787570][ T7671] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 193.797253][ T7671] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 194.702063][ T7705] __vm_enough_memory: pid: 7705, comm: syz.1.393, bytes: 8589938688 not enough memory for the allocation [ 194.714325][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.987365][ T7709] FAULT_INJECTION: forcing a failure. [ 194.987365][ T7709] name failslab, interval 1, probability 0, space 0, times 0 [ 195.034297][ T7709] CPU: 0 UID: 0 PID: 7709 Comm: syz.0.394 Not tainted syzkaller #0 PREEMPT(full) [ 195.034319][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 195.034328][ T7709] Call Trace: [ 195.034334][ T7709] [ 195.034339][ T7709] dump_stack_lvl+0x100/0x190 [ 195.034362][ T7709] should_fail_ex.cold+0x5/0xa [ 195.034387][ T7709] should_failslab+0xc2/0x120 [ 195.034407][ T7709] kmem_cache_alloc_noprof+0x83/0x780 [ 195.034426][ T7709] ? __pmd_alloc+0xbf/0x9c0 [ 195.034467][ T7709] ? __pmd_alloc+0xbf/0x9c0 [ 195.034487][ T7709] __pmd_alloc+0xbf/0x9c0 [ 195.034511][ T7709] move_page_tables+0x314a/0x43e0 [ 195.034543][ T7709] ? __pfx_move_page_tables+0x10/0x10 [ 195.034574][ T7709] copy_vma_and_data+0x25c/0x7c0 [ 195.034595][ T7709] ? __pfx_copy_vma_and_data+0x10/0x10 [ 195.034620][ T7709] ? find_held_lock+0x2b/0x80 [ 195.034634][ T7709] ? move_vma+0x50c/0x1990 [ 195.034648][ T7709] ? move_vma+0x50c/0x1990 [ 195.034663][ T7709] ? __vm_enough_memory+0x184/0x390 [ 195.034688][ T7709] move_vma+0x51e/0x1990 [ 195.034710][ T7709] ? __pfx_move_vma+0x10/0x10 [ 195.034728][ T7709] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 195.034750][ T7709] ? cap_mmap_addr+0x4b/0x120 [ 195.034767][ T7709] ? bpf_lsm_mmap_addr+0x9/0x10 [ 195.034787][ T7709] ? security_mmap_addr+0x71/0x1e0 [ 195.034826][ T7709] ? __get_unmapped_area+0x255/0x3e0 [ 195.034855][ T7709] ? vrm_set_new_addr+0x204/0x290 [ 195.034873][ T7709] mremap_to+0x1b7/0x450 [ 195.034890][ T7709] do_mremap+0xb76/0x2130 [ 195.034915][ T7709] ? __pfx_do_mremap+0x10/0x10 [ 195.034941][ T7709] __do_sys_mremap+0x126/0x170 [ 195.034958][ T7709] ? __pfx___do_sys_mremap+0x10/0x10 [ 195.034974][ T7709] ? fdget+0x18b/0x210 [ 195.034989][ T7709] ? __sys_sendmsg+0x18f/0x220 [ 195.035012][ T7709] ? __x64_sys_futex+0x34f/0x4d0 [ 195.035042][ T7709] do_syscall_64+0xc9/0xf80 [ 195.035061][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.035076][ T7709] RIP: 0033:0x7ff5ff19acb9 [ 195.035088][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.035103][ T7709] RSP: 002b:00007ff60003d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 195.035117][ T7709] RAX: ffffffffffffffda RBX: 00007ff5ff415fa0 RCX: 00007ff5ff19acb9 [ 195.035127][ T7709] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 195.035135][ T7709] RBP: 00007ff5ff208bf7 R08: 0000000100000000 R09: 0000000000000000 [ 195.035144][ T7709] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 195.035152][ T7709] R13: 00007ff5ff416038 R14: 00007ff5ff415fa0 R15: 00007ffda687b578 [ 195.035172][ T7709] [ 195.675006][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.748533][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.828672][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 196.789059][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.866392][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.398'. [ 197.754483][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.828589][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.908724][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.707512][ T7758] syz.1.405 (7758) used greatest stack depth: 19688 bytes left [ 198.870889][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.386227][ T7794] __vm_enough_memory: pid: 7794, comm: syz.1.412, bytes: 8589938688 not enough memory for the allocation [ 199.436429][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.445730][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.828510][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.908596][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.988749][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.022568][ T7788] Process accounting paused [ 200.401762][ T5850] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 200.455908][ T5850] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 202.735853][ T7878] FAULT_INJECTION: forcing a failure. [ 202.735853][ T7878] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.750259][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.2.430 Not tainted syzkaller #0 PREEMPT(full) [ 202.750297][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 202.750312][ T7878] Call Trace: [ 202.750321][ T7878] [ 202.750330][ T7878] dump_stack_lvl+0x100/0x190 [ 202.750367][ T7878] should_fail_ex.cold+0x5/0xa [ 202.750389][ T7878] ? prepare_alloc_pages+0x16d/0x5f0 [ 202.750412][ T7878] should_fail_alloc_page+0xeb/0x140 [ 202.750434][ T7878] prepare_alloc_pages+0x1f0/0x5f0 [ 202.750458][ T7878] __alloc_frozen_pages_noprof+0x193/0x2410 [ 202.750475][ T7878] ? folio_unlock+0xf5/0x190 [ 202.750490][ T7878] ? do_fault+0x6a4/0x1990 [ 202.750514][ T7878] ? __handle_mm_fault+0x4ec/0x2b50 [ 202.750532][ T7878] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 202.750550][ T7878] ? css_rstat_updated+0x1ce/0x5a0 [ 202.750566][ T7878] ? __pfx___handle_mm_fault+0x10/0x10 [ 202.750586][ T7878] ? __pfx_mt_find+0x10/0x10 [ 202.750604][ T7878] ? __pfx_css_rstat_updated+0x10/0x10 [ 202.750627][ T7878] ? find_held_lock+0x2b/0x80 [ 202.750641][ T7878] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.750659][ T7878] ? policy_nodemask+0xed/0x4f0 [ 202.750681][ T7878] alloc_pages_mpol+0x1fb/0x550 [ 202.750702][ T7878] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 202.750727][ T7878] ___kmalloc_large_node+0x104/0x150 [ 202.750750][ T7878] __kmalloc_large_node_noprof+0x1c/0x70 [ 202.750774][ T7878] __kmalloc_node_track_caller_noprof+0x6ba/0x9d0 [ 202.750801][ T7878] ? drm_edid_alloc+0x4d/0x120 [ 202.750845][ T7878] ? kmemdup_noprof+0x29/0x60 [ 202.750863][ T7878] kmemdup_noprof+0x29/0x60 [ 202.750882][ T7878] drm_edid_alloc+0x4d/0x120 [ 202.750903][ T7878] drm_edid_override_set+0x27/0x2c0 [ 202.750922][ T7878] edid_write+0xe3/0x180 [ 202.750939][ T7878] full_proxy_write+0x135/0x1a0 [ 202.750964][ T7878] vfs_write+0x2aa/0x1070 [ 202.750980][ T7878] ? __pfx_full_proxy_write+0x10/0x10 [ 202.751004][ T7878] ? __pfx_vfs_write+0x10/0x10 [ 202.751019][ T7878] ? do_futex+0x192/0x350 [ 202.751038][ T7878] ? __pfx_do_futex+0x10/0x10 [ 202.751056][ T7878] ? __pfx_do_sys_openat2+0x10/0x10 [ 202.751081][ T7878] ? __x64_sys_futex+0x34f/0x4d0 [ 202.751099][ T7878] ? __x64_sys_futex+0x358/0x4d0 [ 202.751121][ T7878] ksys_write+0x12a/0x250 [ 202.751136][ T7878] ? __pfx_ksys_write+0x10/0x10 [ 202.751157][ T7878] do_syscall_64+0xc9/0xf80 [ 202.751182][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.751197][ T7878] RIP: 0033:0x7f9e5df9acb9 [ 202.751211][ T7878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.751224][ T7878] RSP: 002b:00007f9e5ed85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.751239][ T7878] RAX: ffffffffffffffda RBX: 00007f9e5e215fa0 RCX: 00007f9e5df9acb9 [ 202.751249][ T7878] RDX: 000000000000eaff RSI: 0000000000000000 RDI: 0000000000000008 [ 202.751257][ T7878] RBP: 00007f9e5e008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 202.751266][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.751275][ T7878] R13: 00007f9e5e216038 R14: 00007f9e5e215fa0 R15: 00007fff3d0b7df8 [ 202.751294][ T7878] [ 203.386320][ T7891] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(2) [ 205.072846][ T30] audit: type=1800 audit(1769197596.379:8): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.442" name="lu_gp_id" dev="configfs" ino=17485 res=0 errno=0 [ 205.147113][ T7923] ALUA LU Group already has a valid ID, ignoring request [ 205.475624][ T30] audit: type=1800 audit(1769197596.779:9): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.445" name="dbroot" dev="configfs" ino=17522 res=0 errno=0 [ 205.491231][ T7941] db_root: not a directory: /dev/audio1 [ 205.558949][ T7946] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(2) [ 205.628031][ T7941] db_root: cannot open: /85 [ 208.096252][ T7985] FAULT_INJECTION: forcing a failure. [ 208.096252][ T7985] name failslab, interval 1, probability 0, space 0, times 0 [ 208.118717][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.1.456 Not tainted syzkaller #0 PREEMPT(full) [ 208.118749][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 208.118763][ T7985] Call Trace: [ 208.118771][ T7985] [ 208.118783][ T7985] dump_stack_lvl+0x100/0x190 [ 208.118818][ T7985] should_fail_ex.cold+0x5/0xa [ 208.118861][ T7985] should_failslab+0xc2/0x120 [ 208.118898][ T7985] ? tomoyo_realpath_from_path+0xb6/0x690 [ 208.118924][ T7985] __kmalloc_noprof+0xf6/0x9c0 [ 208.118960][ T7985] ? tomoyo_realpath_from_path+0xb6/0x690 [ 208.118984][ T7985] tomoyo_realpath_from_path+0xb6/0x690 [ 208.119016][ T7985] tomoyo_path_number_perm+0x23c/0x580 [ 208.119050][ T7985] ? tomoyo_path_number_perm+0x22e/0x580 [ 208.119088][ T7985] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 208.119141][ T7985] ? rcu_read_lock_any_held+0x6a/0xa0 [ 208.119190][ T7985] ? fd_install+0x24f/0x580 [ 208.119218][ T7985] ? hook_file_ioctl_common+0x146/0x410 [ 208.119275][ T7985] security_file_ioctl+0xd3/0x230 [ 208.119314][ T7985] __x64_sys_ioctl+0xb7/0x210 [ 208.119356][ T7985] do_syscall_64+0xc9/0xf80 [ 208.119389][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.119414][ T7985] RIP: 0033:0x7febd4b9acb9 [ 208.119434][ T7985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.119459][ T7985] RSP: 002b:00007febd59b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.119493][ T7985] RAX: ffffffffffffffda RBX: 00007febd4e15fa0 RCX: 00007febd4b9acb9 [ 208.119511][ T7985] RDX: 0000000000000003 RSI: 00000000c0104d03 RDI: 0000000000000003 [ 208.119527][ T7985] RBP: 00007febd59b4090 R08: 0000000000000000 R09: 0000000000000000 [ 208.119542][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.119557][ T7985] R13: 00007febd4e16038 R14: 00007febd4e15fa0 R15: 00007ffc62fecc68 [ 208.119593][ T7985] [ 208.122207][ T7985] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.731085][ T8003] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(2) [ 208.949922][ T5850] Bluetooth: hci1: Malformed LE Event: 0x0b [ 209.927147][ T8047] FAULT_INJECTION: forcing a failure. [ 209.927147][ T8047] name failslab, interval 1, probability 0, space 0, times 0 [ 209.970103][ T8047] CPU: 0 UID: 0 PID: 8047 Comm: syz.0.468 Not tainted syzkaller #0 PREEMPT(full) [ 209.970139][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 209.970155][ T8047] Call Trace: [ 209.970163][ T8047] [ 209.970172][ T8047] dump_stack_lvl+0x100/0x190 [ 209.970209][ T8047] should_fail_ex.cold+0x5/0xa [ 209.970251][ T8047] should_failslab+0xc2/0x120 [ 209.970286][ T8047] ? tomoyo_encode2+0xfb/0x3c0 [ 209.970308][ T8047] __kmalloc_noprof+0xf6/0x9c0 [ 209.970342][ T8047] ? tomoyo_encode2+0xfb/0x3c0 [ 209.970363][ T8047] tomoyo_encode2+0xfb/0x3c0 [ 209.970392][ T8047] tomoyo_encode+0x29/0x50 [ 209.970421][ T8047] tomoyo_realpath_from_path+0x18c/0x690 [ 209.970453][ T8047] tomoyo_path_number_perm+0x23c/0x580 [ 209.970485][ T8047] ? tomoyo_path_number_perm+0x22e/0x580 [ 209.970519][ T8047] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 209.970569][ T8047] ? rcu_read_lock_any_held+0x6a/0xa0 [ 209.970618][ T8047] ? fd_install+0x24f/0x580 [ 209.970642][ T8047] ? hook_file_ioctl_common+0x146/0x410 [ 209.970694][ T8047] security_file_ioctl+0xd3/0x230 [ 209.970733][ T8047] __x64_sys_ioctl+0xb7/0x210 [ 209.970775][ T8047] do_syscall_64+0xc9/0xf80 [ 209.970808][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.970835][ T8047] RIP: 0033:0x7ff5ff19acb9 [ 209.970856][ T8047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.970880][ T8047] RSP: 002b:00007ff60003d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.970906][ T8047] RAX: ffffffffffffffda RBX: 00007ff5ff415fa0 RCX: 00007ff5ff19acb9 [ 209.970924][ T8047] RDX: 0000000000000003 RSI: 00000000c0104d03 RDI: 0000000000000003 [ 209.970940][ T8047] RBP: 00007ff60003d090 R08: 0000000000000000 R09: 0000000000000000 [ 209.970956][ T8047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.970972][ T8047] R13: 00007ff5ff416038 R14: 00007ff5ff415fa0 R15: 00007ffda687b578 [ 209.971009][ T8047] [ 209.971032][ T8047] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.275600][ T8099] random: crng reseeded on system resumption [ 212.332926][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 213.667604][ T8116] Invalid ELF header magic: != ELF [ 219.383306][ T8239] zero sized request [ 221.025355][ T8278] zero sized request [ 221.472478][ T8290] FAULT_INJECTION: forcing a failure. [ 221.472478][ T8290] name failslab, interval 1, probability 0, space 0, times 0 [ 221.498532][ T8290] CPU: 1 UID: 0 PID: 8290 Comm: syz.1.520 Not tainted syzkaller #0 PREEMPT(full) [ 221.498570][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 221.498586][ T8290] Call Trace: [ 221.498596][ T8290] [ 221.498606][ T8290] dump_stack_lvl+0x100/0x190 [ 221.498647][ T8290] should_fail_ex.cold+0x5/0xa [ 221.498693][ T8290] should_failslab+0xc2/0x120 [ 221.498729][ T8290] ? tomoyo_encode2+0xfb/0x3c0 [ 221.498754][ T8290] __kmalloc_noprof+0xf6/0x9c0 [ 221.498797][ T8290] ? tomoyo_encode2+0xfb/0x3c0 [ 221.498821][ T8290] tomoyo_encode2+0xfb/0x3c0 [ 221.498853][ T8290] tomoyo_encode+0x29/0x50 [ 221.498878][ T8290] tomoyo_realpath_from_path+0x18c/0x690 [ 221.498915][ T8290] tomoyo_mkdev_perm+0x231/0x570 [ 221.498950][ T8290] ? tomoyo_mkdev_perm+0x21d/0x570 [ 221.498996][ T8290] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 221.499050][ T8290] ? do_raw_spin_unlock+0x145/0x1e0 [ 221.499111][ T8290] ? __pfx_current_check_access_path+0x10/0x10 [ 221.499157][ T8290] ? simple_lookup+0x105/0x1d0 [ 221.499191][ T8290] tomoyo_path_mknod+0xe2/0x190 [ 221.499218][ T8290] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 221.499251][ T8290] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.499288][ T8290] security_path_mknod+0x161/0x300 [ 221.499319][ T8290] do_mknodat+0x247/0x7a0 [ 221.499352][ T8290] ? __pfx_do_mknodat+0x10/0x10 [ 221.499379][ T8290] ? strncpy_from_user+0x19d/0x2d0 [ 221.499423][ T8290] ? getname_flags.part.0+0x1c5/0x540 [ 221.499468][ T8290] __x64_sys_mknod+0x118/0x170 [ 221.499513][ T8290] do_syscall_64+0xc9/0xf80 [ 221.499547][ T8290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.499575][ T8290] RIP: 0033:0x7febd4b9acb9 [ 221.499596][ T8290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.499622][ T8290] RSP: 002b:00007febd5993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 221.499650][ T8290] RAX: ffffffffffffffda RBX: 00007febd4e16090 RCX: 00007febd4b9acb9 [ 221.499669][ T8290] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 221.499686][ T8290] RBP: 00007febd4c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 221.499703][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.499718][ T8290] R13: 00007febd4e16128 R14: 00007febd4e16090 R15: 00007ffc62fecc68 [ 221.499753][ T8290] [ 221.506530][ T8290] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.840765][ T8296] FAULT_INJECTION: forcing a failure. [ 221.840765][ T8296] name failslab, interval 1, probability 0, space 0, times 0 [ 221.898298][ T8296] CPU: 1 UID: 0 PID: 8296 Comm: syz.0.522 Not tainted syzkaller #0 PREEMPT(full) [ 221.898338][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 221.898355][ T8296] Call Trace: [ 221.898368][ T8296] [ 221.898378][ T8296] dump_stack_lvl+0x100/0x190 [ 221.898414][ T8296] should_fail_ex.cold+0x5/0xa [ 221.898467][ T8296] should_failslab+0xc2/0x120 [ 221.898506][ T8296] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 221.898551][ T8296] ? __d_alloc+0x34/0xa80 [ 221.898590][ T8296] ? __d_alloc+0x34/0xa80 [ 221.898620][ T8296] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 221.898655][ T8296] __d_alloc+0x34/0xa80 [ 221.898686][ T8296] ? new_inode+0x15a/0x1c0 [ 221.898725][ T8296] d_alloc_pseudo+0x1c/0xc0 [ 221.898763][ T8296] alloc_file_pseudo+0xcf/0x230 [ 221.898807][ T8296] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 221.898850][ T8296] ? hugetlbfs_get_inode+0x36e/0x6f0 [ 221.898882][ T8296] hugetlb_file_setup+0x2a8/0x5b0 [ 221.898914][ T8296] ksys_mmap_pgoff+0x185/0x5b0 [ 221.898955][ T8296] __x64_sys_mmap+0x125/0x190 [ 221.898986][ T8296] do_syscall_64+0xc9/0xf80 [ 221.899019][ T8296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.899046][ T8296] RIP: 0033:0x7ff5ff19acb9 [ 221.899069][ T8296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.899095][ T8296] RSP: 002b:00007ff60001c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 221.899121][ T8296] RAX: ffffffffffffffda RBX: 00007ff5ff416090 RCX: 00007ff5ff19acb9 [ 221.899141][ T8296] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 221.899159][ T8296] RBP: 00007ff5ff208bf7 R08: 0000000000000401 R09: 0000300000000000 [ 221.899177][ T8296] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 221.899194][ T8296] R13: 00007ff5ff416128 R14: 00007ff5ff416090 R15: 00007ffda687b578 [ 221.899228][ T8296] [ 222.787324][ T8316] zero sized request [ 223.919836][ T8346] FAULT_INJECTION: forcing a failure. [ 223.919836][ T8346] name failslab, interval 1, probability 0, space 0, times 0 [ 223.936952][ T8346] CPU: 0 UID: 0 PID: 8346 Comm: syz.0.542 Not tainted syzkaller #0 PREEMPT(full) [ 223.936994][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 223.937012][ T8346] Call Trace: [ 223.937021][ T8346] [ 223.937031][ T8346] dump_stack_lvl+0x100/0x190 [ 223.937070][ T8346] should_fail_ex.cold+0x5/0xa [ 223.937117][ T8346] should_failslab+0xc2/0x120 [ 223.937156][ T8346] ? usb_hcd_submit_urb+0x601/0x2150 [ 223.937198][ T8346] __kmalloc_noprof+0xf6/0x9c0 [ 223.937235][ T8346] ? usb_hcd_submit_urb+0x601/0x2150 [ 223.937272][ T8346] usb_hcd_submit_urb+0x601/0x2150 [ 223.937326][ T8346] usb_submit_urb+0x8aa/0x1910 [ 223.937361][ T8346] ? __init_swait_queue_head+0xca/0x150 [ 223.937410][ T8346] usb_start_wait_urb+0x106/0x4c0 [ 223.937445][ T8346] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 223.937484][ T8346] ? __asan_memset+0x23/0x50 [ 223.937519][ T8346] usb_control_msg+0x326/0x4a0 [ 223.937550][ T8346] ? __pfx_usb_control_msg+0x10/0x10 [ 223.937599][ T8346] hub_ext_port_status+0x152/0x600 [ 223.937638][ T8346] hub_activate+0x6d8/0x1d50 [ 223.937676][ T8346] ? __pfx_hub_activate+0x10/0x10 [ 223.937703][ T8346] ? find_held_lock+0x2b/0x80 [ 223.937729][ T8346] ? usb_generic_driver_resume+0x70/0xa0 [ 223.937758][ T8346] ? usb_generic_driver_resume+0x70/0xa0 [ 223.937797][ T8346] hub_resume+0xb0/0x400 [ 223.937825][ T8346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.937862][ T8346] ? __pfx_hub_resume+0x10/0x10 [ 223.937893][ T8346] ? __pfx_hcd_bus_resume+0x10/0x10 [ 223.937945][ T8346] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 223.937989][ T8346] usb_resume_both+0x237/0x9a0 [ 223.938031][ T8346] ? __pfx_usb_resume_both+0x10/0x10 [ 223.938066][ T8346] ? __rpm_callback+0x272/0x620 [ 223.938096][ T8346] ? __rpm_callback+0x272/0x620 [ 223.938126][ T8346] ? __pfx_usb_runtime_resume+0x10/0x10 [ 223.938172][ T8346] ? __pfx_usb_runtime_resume+0x10/0x10 [ 223.938215][ T8346] __rpm_callback+0xc8/0x620 [ 223.938243][ T8346] ? read_tsc+0x9/0x20 [ 223.938275][ T8346] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 223.938310][ T8346] ? __pfx_usb_runtime_resume+0x10/0x10 [ 223.938353][ T8346] rpm_callback+0x16a/0x1b0 [ 223.938379][ T8346] ? __pfx_usb_runtime_resume+0x10/0x10 [ 223.938420][ T8346] rpm_resume+0xcec/0x12f0 [ 223.938460][ T8346] ? __pfx_rpm_resume+0x10/0x10 [ 223.938488][ T8346] ? do_raw_spin_lock+0x128/0x260 [ 223.938529][ T8346] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 223.938586][ T8346] __pm_runtime_resume+0xb6/0x170 [ 223.938618][ T8346] usb_autoresume_device+0x23/0xe0 [ 223.938658][ T8346] usbdev_open+0x228/0x870 [ 223.938696][ T8346] ? do_raw_spin_lock+0x128/0x260 [ 223.938733][ T8346] ? __pfx_usbdev_open+0x10/0x10 [ 223.938769][ T8346] ? chrdev_open+0x589/0x6a0 [ 223.938801][ T8346] ? chrdev_open+0x589/0x6a0 [ 223.938839][ T8346] ? __pfx_usbdev_open+0x10/0x10 [ 223.938881][ T8346] chrdev_open+0x234/0x6a0 [ 223.938916][ T8346] ? __pfx_chrdev_open+0x10/0x10 [ 223.938953][ T8346] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 223.938994][ T8346] do_dentry_open+0x73e/0x1570 [ 223.939028][ T8346] ? __pfx_chrdev_open+0x10/0x10 [ 223.939062][ T8346] ? security_inode_permission+0xbf/0x250 [ 223.939111][ T8346] vfs_open+0x82/0x3f0 [ 223.939155][ T8346] path_openat+0x21dc/0x3120 [ 223.939202][ T8346] ? __pfx_path_openat+0x10/0x10 [ 223.939250][ T8346] do_filp_open+0x1f7/0x420 [ 223.939286][ T8346] ? __pfx_do_filp_open+0x10/0x10 [ 223.939344][ T8346] ? _raw_spin_unlock+0x28/0x50 [ 223.939371][ T8346] ? alloc_fd+0x476/0x790 [ 223.939414][ T8346] do_sys_openat2+0x12e/0x220 [ 223.939456][ T8346] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.939502][ T8346] ? __fget_files+0x21f/0x3d0 [ 223.939540][ T8346] __x64_sys_openat+0x12d/0x210 [ 223.939591][ T8346] ? __pfx___x64_sys_openat+0x10/0x10 [ 223.939634][ T8346] ? xfd_validate_state+0x129/0x190 [ 223.939692][ T8346] do_syscall_64+0xc9/0xf80 [ 223.939729][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.939759][ T8346] RIP: 0033:0x7ff5ff19acb9 [ 223.939780][ T8346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.939807][ T8346] RSP: 002b:00007ff60003d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.939835][ T8346] RAX: ffffffffffffffda RBX: 00007ff5ff415fa0 RCX: 00007ff5ff19acb9 [ 223.939854][ T8346] RDX: 000000000000a901 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 223.939873][ T8346] RBP: 00007ff5ff208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 223.939890][ T8346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.939907][ T8346] R13: 00007ff5ff416038 R14: 00007ff5ff415fa0 R15: 00007ffda687b578 [ 223.939946][ T8346] [ 224.404043][ T8346] hub 36-0:1.0: hub_ext_port_status failed (err = -12) [ 224.960999][ T8361] zero sized request [ 225.019668][ T8357] zswap: compressor not available [ 225.233606][ T8371] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(16) [ 226.823545][ T8411] zero sized request [ 227.258066][ T8416] zswap: compressor not available [ 228.027727][ T8435] zswap: compressor òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 228.265579][ T8437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.554'. [ 229.314731][ T8443] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(16) [ 229.345855][ T8443] FAULT_INJECTION: forcing a failure. [ 229.345855][ T8443] name failslab, interval 1, probability 0, space 0, times 0 [ 229.364180][ T8443] CPU: 0 UID: 0 PID: 8443 Comm: syz.0.556 Not tainted syzkaller #0 PREEMPT(full) [ 229.364213][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 229.364226][ T8443] Call Trace: [ 229.364234][ T8443] [ 229.364243][ T8443] dump_stack_lvl+0x100/0x190 [ 229.364278][ T8443] should_fail_ex.cold+0x5/0xa [ 229.364319][ T8443] should_failslab+0xc2/0x120 [ 229.364352][ T8443] ? tomoyo_realpath_from_path+0xb6/0x690 [ 229.364378][ T8443] __kmalloc_noprof+0xf6/0x9c0 [ 229.364401][ T8443] ? tomoyo_realpath_from_path+0xb6/0x690 [ 229.364414][ T8443] tomoyo_realpath_from_path+0xb6/0x690 [ 229.364433][ T8443] tomoyo_path_number_perm+0x23c/0x580 [ 229.364453][ T8443] ? tomoyo_path_number_perm+0x22e/0x580 [ 229.364475][ T8443] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 229.364515][ T8443] ? find_held_lock+0x2b/0x80 [ 229.364529][ T8443] ? hook_file_ioctl_common+0x146/0x410 [ 229.364549][ T8443] ? __fget_files+0x215/0x3d0 [ 229.364569][ T8443] ? __fget_files+0x21f/0x3d0 [ 229.364587][ T8443] security_file_ioctl+0xd3/0x230 [ 229.364609][ T8443] __x64_sys_ioctl+0xb7/0x210 [ 229.364634][ T8443] do_syscall_64+0xc9/0xf80 [ 229.364653][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.364668][ T8443] RIP: 0033:0x7ff5ff19acb9 [ 229.364680][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.364693][ T8443] RSP: 002b:00007ff60001c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.364708][ T8443] RAX: ffffffffffffffda RBX: 00007ff5ff416090 RCX: 00007ff5ff19acb9 [ 229.364717][ T8443] RDX: 00002000000001c0 RSI: fffffffffffffd02 RDI: 0000000000000005 [ 229.364726][ T8443] RBP: 00007ff60001c090 R08: 0000000000000000 R09: 0000000000000000 [ 229.364734][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.364742][ T8443] R13: 00007ff5ff416128 R14: 00007ff5ff416090 R15: 00007ffda687b578 [ 229.364761][ T8443] [ 229.364768][ T8443] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.955282][ T8446] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(16) [ 230.910915][ T8457] zero sized request [ 232.695823][ T8479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.564'. [ 234.985627][ T8488] Invalid ELF header magic: != ELF [ 235.234030][ T8491] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input8 [ 235.297334][ T8491] FAULT_INJECTION: forcing a failure. [ 235.297334][ T8491] name failslab, interval 1, probability 0, space 0, times 0 [ 235.346602][ T8491] CPU: 1 UID: 0 PID: 8491 Comm: syz.3.568 Not tainted syzkaller #0 PREEMPT(full) [ 235.346646][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 235.346663][ T8491] Call Trace: [ 235.346673][ T8491] [ 235.346684][ T8491] dump_stack_lvl+0x100/0x190 [ 235.346726][ T8491] should_fail_ex.cold+0x5/0xa [ 235.346775][ T8491] should_failslab+0xc2/0x120 [ 235.346815][ T8491] kmem_cache_alloc_noprof+0x83/0x780 [ 235.346854][ T8491] ? __kernfs_new_node+0xd2/0x960 [ 235.346899][ T8491] ? __kernfs_new_node+0xd2/0x960 [ 235.346933][ T8491] __kernfs_new_node+0xd2/0x960 [ 235.346977][ T8491] ? __pfx___kernfs_new_node+0x10/0x10 [ 235.347025][ T8491] ? find_held_lock+0x2b/0x80 [ 235.347052][ T8491] ? kernfs_root+0xee/0x2a0 [ 235.347087][ T8491] ? kernfs_root+0xee/0x2a0 [ 235.347133][ T8491] kernfs_new_node+0x11b/0x1a0 [ 235.347182][ T8491] __kernfs_create_file+0x53/0x350 [ 235.347219][ T8491] sysfs_add_file_mode_ns+0x207/0x3c0 [ 235.347265][ T8491] sysfs_merge_group+0x194/0x340 [ 235.347299][ T8491] ? __pfx_sysfs_merge_group+0x10/0x10 [ 235.347336][ T8491] ? __pfx_dev_add_physical_location+0x10/0x10 [ 235.347371][ T8491] ? bus_to_subsys+0x114/0x150 [ 235.347417][ T8491] dpm_sysfs_add+0x237/0x280 [ 235.347456][ T8491] device_add+0x9ef/0x1950 [ 235.347497][ T8491] ? __pfx_device_add+0x10/0x10 [ 235.347549][ T8491] ? kobject_get+0xbb/0x150 [ 235.347590][ T8491] cdev_device_add+0x12b/0x270 [ 235.347628][ T8491] evdev_connect+0x3a8/0x4b0 [ 235.347670][ T8491] input_attach_handler.isra.0+0x177/0x1e0 [ 235.347711][ T8491] input_register_device.cold+0x139/0x375 [ 235.347765][ T8491] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 235.347810][ T8491] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 235.347855][ T8491] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 235.347909][ T8491] ? find_held_lock+0x2b/0x80 [ 235.347937][ T8491] ? hook_file_ioctl_common+0x146/0x410 [ 235.347997][ T8491] ? __pfx_uinput_ioctl+0x10/0x10 [ 235.348043][ T8491] __x64_sys_ioctl+0x18e/0x210 [ 235.348091][ T8491] do_syscall_64+0xc9/0xf80 [ 235.348127][ T8491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.348155][ T8491] RIP: 0033:0x7f368f59acb9 [ 235.348179][ T8491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.348208][ T8491] RSP: 002b:00007f3690394028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.348237][ T8491] RAX: ffffffffffffffda RBX: 00007f368f816090 RCX: 00007f368f59acb9 [ 235.348257][ T8491] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 235.348275][ T8491] RBP: 00007f368f608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 235.348294][ T8491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.348312][ T8491] R13: 00007f368f816128 R14: 00007f368f816090 R15: 00007ffd68a17ad8 [ 235.348353][ T8491] [ 235.890884][ T8491] input: failed to attach handler evdev to device input8, error: -12 [ 236.219774][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 236.518285][ T8505] FAULT_INJECTION: forcing a failure. [ 236.518285][ T8505] name failslab, interval 1, probability 0, space 0, times 0 [ 236.552359][ T8505] CPU: 1 UID: 0 PID: 8505 Comm: syz.3.571 Not tainted syzkaller #0 PREEMPT(full) [ 236.552398][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 236.552421][ T8505] Call Trace: [ 236.552430][ T8505] [ 236.552441][ T8505] dump_stack_lvl+0x100/0x190 [ 236.552477][ T8505] should_fail_ex.cold+0x5/0xa [ 236.552522][ T8505] should_failslab+0xc2/0x120 [ 236.552559][ T8505] ? tomoyo_realpath_from_path+0xb6/0x690 [ 236.552586][ T8505] __kmalloc_noprof+0xf6/0x9c0 [ 236.552624][ T8505] ? tomoyo_realpath_from_path+0xb6/0x690 [ 236.552651][ T8505] tomoyo_realpath_from_path+0xb6/0x690 [ 236.552687][ T8505] tomoyo_path_number_perm+0x23c/0x580 [ 236.552724][ T8505] ? tomoyo_path_number_perm+0x22e/0x580 [ 236.552768][ T8505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 236.552845][ T8505] ? find_held_lock+0x2b/0x80 [ 236.552871][ T8505] ? hook_file_ioctl_common+0x146/0x410 [ 236.552907][ T8505] ? __fget_files+0x215/0x3d0 [ 236.552941][ T8505] ? __fget_files+0x21f/0x3d0 [ 236.552973][ T8505] security_file_ioctl+0xd3/0x230 [ 236.553020][ T8505] __x64_sys_ioctl+0xb7/0x210 [ 236.553064][ T8505] do_syscall_64+0xc9/0xf80 [ 236.553099][ T8505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.553127][ T8505] RIP: 0033:0x7f368f59acb9 [ 236.553149][ T8505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.553176][ T8505] RSP: 002b:00007f36903b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.553202][ T8505] RAX: ffffffffffffffda RBX: 00007f368f815fa0 RCX: 00007f368f59acb9 [ 236.553221][ T8505] RDX: 0000000000000005 RSI: 0000000040104d06 RDI: 0000000000000003 [ 236.553238][ T8505] RBP: 00007f36903b5090 R08: 0000000000000000 R09: 0000000000000000 [ 236.553255][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.553272][ T8505] R13: 00007f368f816038 R14: 00007f368f815fa0 R15: 00007ffd68a17ad8 [ 236.553310][ T8505] [ 236.553397][ T8505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.233117][ T8517] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(16) [ 240.452731][ T8562] FAULT_INJECTION: forcing a failure. [ 240.452731][ T8562] name failslab, interval 1, probability 0, space 0, times 0 [ 240.488485][ T8562] CPU: 1 UID: 0 PID: 8562 Comm: syz.0.586 Not tainted syzkaller #0 PREEMPT(full) [ 240.488525][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 240.488541][ T8562] Call Trace: [ 240.488549][ T8562] [ 240.488558][ T8562] dump_stack_lvl+0x100/0x190 [ 240.488594][ T8562] should_fail_ex.cold+0x5/0xa [ 240.488626][ T8562] should_failslab+0xc2/0x120 [ 240.488647][ T8562] ? tomoyo_encode2+0xfb/0x3c0 [ 240.488659][ T8562] __kmalloc_noprof+0xf6/0x9c0 [ 240.488673][ T8562] ? __pfx_tomoyo_get_local_path+0x10/0x10 [ 240.488688][ T8562] ? tomoyo_realpath_from_path+0xb6/0x690 [ 240.488706][ T8562] ? tomoyo_encode2+0xfb/0x3c0 [ 240.488718][ T8562] tomoyo_encode2+0xfb/0x3c0 [ 240.488735][ T8562] tomoyo_encode+0x29/0x50 [ 240.488748][ T8562] tomoyo_realpath_from_path+0x18c/0x690 [ 240.488766][ T8562] tomoyo_path_number_perm+0x23c/0x580 [ 240.488787][ T8562] ? tomoyo_path_number_perm+0x22e/0x580 [ 240.488809][ T8562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 240.488848][ T8562] ? find_held_lock+0x2b/0x80 [ 240.488862][ T8562] ? hook_file_ioctl_common+0x146/0x410 [ 240.488883][ T8562] ? __fget_files+0x215/0x3d0 [ 240.488902][ T8562] ? __fget_files+0x21f/0x3d0 [ 240.488920][ T8562] security_file_ioctl+0xd3/0x230 [ 240.488942][ T8562] __x64_sys_ioctl+0xb7/0x210 [ 240.488967][ T8562] do_syscall_64+0xc9/0xf80 [ 240.488986][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.489001][ T8562] RIP: 0033:0x7ff5ff19acb9 [ 240.489014][ T8562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.489028][ T8562] RSP: 002b:00007ff60003d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.489043][ T8562] RAX: ffffffffffffffda RBX: 00007ff5ff415fa0 RCX: 00007ff5ff19acb9 [ 240.489052][ T8562] RDX: 0000000000000005 RSI: 0000000040104d06 RDI: 0000000000000003 [ 240.489067][ T8562] RBP: 00007ff60003d090 R08: 0000000000000000 R09: 0000000000000000 [ 240.489076][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.489085][ T8562] R13: 00007ff5ff416038 R14: 00007ff5ff415fa0 R15: 00007ffda687b578 [ 240.489104][ T8562] [ 240.490352][ T8562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 240.952400][ T8571] FAULT_INJECTION: forcing a failure. [ 240.952400][ T8571] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.967335][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz.3.589 Not tainted syzkaller #0 PREEMPT(full) [ 240.967367][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 240.967376][ T8571] Call Trace: [ 240.967382][ T8571] [ 240.967388][ T8571] dump_stack_lvl+0x100/0x190 [ 240.967411][ T8571] should_fail_ex.cold+0x5/0xa [ 240.967432][ T8571] ? prepare_alloc_pages+0x16d/0x5f0 [ 240.967456][ T8571] should_fail_alloc_page+0xeb/0x140 [ 240.967477][ T8571] prepare_alloc_pages+0x1f0/0x5f0 [ 240.967498][ T8571] ? rcu_is_watching+0x12/0xc0 [ 240.967514][ T8571] __alloc_frozen_pages_noprof+0x193/0x2410 [ 240.967533][ T8571] ? __lock_acquire+0x4a5/0x2630 [ 240.967559][ T8571] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 240.967576][ T8571] ? do_raw_spin_lock+0x128/0x260 [ 240.967598][ T8571] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 240.967619][ T8571] ? find_held_lock+0x2b/0x80 [ 240.967638][ T8571] ? __lock_acquire+0x4a5/0x2630 [ 240.967656][ T8571] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.967672][ T8571] ? policy_nodemask+0xed/0x4f0 [ 240.967694][ T8571] alloc_pages_mpol+0x1fb/0x550 [ 240.967715][ T8571] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 240.967735][ T8571] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 240.967754][ T8571] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 240.967780][ T8571] folio_alloc_mpol_noprof+0x36/0x340 [ 240.967804][ T8571] shmem_alloc_folio+0x135/0x160 [ 240.967820][ T8571] shmem_alloc_and_add_folio+0x371/0xd40 [ 240.967843][ T8571] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 240.967862][ T8571] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 240.967884][ T8571] shmem_get_folio_gfp+0x6ab/0x1900 [ 240.967905][ T8571] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 240.967924][ T8571] ? filemap_map_pages+0x9e0/0x2110 [ 240.967944][ T8571] shmem_fault+0x1f9/0xa20 [ 240.967961][ T8571] ? __lock_acquire+0x4a5/0x2630 [ 240.967979][ T8571] ? __pfx_shmem_fault+0x10/0x10 [ 240.968000][ T8571] ? __pfx_filemap_map_pages+0x10/0x10 [ 240.968023][ T8571] __do_fault+0x10d/0x550 [ 240.968045][ T8571] do_fault+0xaf9/0x1990 [ 240.968069][ T8571] __handle_mm_fault+0x1807/0x2b50 [ 240.968095][ T8571] ? mt_find+0x45e/0x8e0 [ 240.968127][ T8571] ? __pfx___handle_mm_fault+0x10/0x10 [ 240.968152][ T8571] ? __pfx_mt_find+0x10/0x10 [ 240.968201][ T8571] ? find_vma+0xbf/0x140 [ 240.968227][ T8571] ? __pfx_find_vma+0x10/0x10 [ 240.968248][ T8571] handle_mm_fault+0x36d/0xa20 [ 240.968267][ T8571] do_user_addr_fault+0x74c/0x12f0 [ 240.968289][ T8571] exc_page_fault+0x6f/0xd0 [ 240.968306][ T8571] asm_exc_page_fault+0x26/0x30 [ 240.968320][ T8571] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 240.968346][ T8571] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 240.968361][ T8571] RSP: 0018:ffffc90002e97c60 EFLAGS: 00050202 [ 240.968382][ T8571] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000006aff [ 240.968396][ T8571] RDX: 0000000000000001 RSI: 0000000000008000 RDI: ffff88804ee78000 [ 240.968412][ T8571] RBP: 000000000000eaff R08: 0000000000000001 R09: ffffed1009dcfd5f [ 240.968429][ T8571] R10: 0000000000000006 R11: 00000000000003ac R12: 0000000000000000 [ 240.968437][ T8571] R13: ffff88804ee70000 R14: 000000000000eaff R15: ffffc90002e97e98 [ 240.968457][ T8571] _copy_from_user+0x98/0xd0 [ 240.968480][ T8571] memdup_user+0x6b/0xe0 [ 240.968499][ T8571] edid_write+0x6f/0x180 [ 240.968515][ T8571] full_proxy_write+0x135/0x1a0 [ 240.968540][ T8571] vfs_write+0x2aa/0x1070 [ 240.968557][ T8571] ? __pfx_full_proxy_write+0x10/0x10 [ 240.968581][ T8571] ? __pfx_vfs_write+0x10/0x10 [ 240.968595][ T8571] ? do_futex+0x192/0x350 [ 240.968616][ T8571] ? __pfx_do_futex+0x10/0x10 [ 240.968633][ T8571] ? __pfx_do_sys_openat2+0x10/0x10 [ 240.968659][ T8571] ? __x64_sys_futex+0x34f/0x4d0 [ 240.968677][ T8571] ? __x64_sys_futex+0x358/0x4d0 [ 240.968699][ T8571] ksys_write+0x12a/0x250 [ 240.968714][ T8571] ? __pfx_ksys_write+0x10/0x10 [ 240.968735][ T8571] do_syscall_64+0xc9/0xf80 [ 240.968753][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.968768][ T8571] RIP: 0033:0x7f368f59acb9 [ 240.968780][ T8571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.968793][ T8571] RSP: 002b:00007f36903b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 240.968807][ T8571] RAX: ffffffffffffffda RBX: 00007f368f815fa0 RCX: 00007f368f59acb9 [ 240.968816][ T8571] RDX: 000000000000eaff RSI: 0000000000000000 RDI: 0000000000000008 [ 240.968825][ T8571] RBP: 00007f368f608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 240.968833][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.968842][ T8571] R13: 00007f368f816038 R14: 00007f368f815fa0 R15: 00007ffd68a17ad8 [ 240.968862][ T8571] [ 241.970412][ T8579] __vm_enough_memory: pid: 8579, comm: syz.1.591, bytes: 4398046511104 not enough memory for the allocation [ 242.089039][ T5838] Process accounting resumed [ 243.245085][ T8586] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.251705][ T8586] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.267875][ T8586] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.337244][ T8586] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.349995][ T8586] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 243.537513][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.548969][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.568217][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.579334][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.588199][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.401568][ T8620] Invalid ELF header magic: != ELF [ 244.539703][ T8592] chnl_net:caif_netlink_parms(): no params data found [ 244.597484][ T8626] FAULT_INJECTION: forcing a failure. [ 244.597484][ T8626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.646338][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 244.655430][ T798] smpboot: CPU 1 is now offline [ 244.752927][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.0.597 Not tainted syzkaller #0 PREEMPT(full) [ 244.752951][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 244.752969][ T8626] Call Trace: [ 244.752976][ T8626] [ 244.752982][ T8626] dump_stack_lvl+0x100/0x190 [ 244.753004][ T8626] should_fail_ex.cold+0x5/0xa [ 244.753031][ T8626] _copy_from_user+0x2e/0xd0 [ 244.753055][ T8626] mtrr_ioctl+0x350/0xcf0 [ 244.753078][ T8626] ? __pfx_mtrr_ioctl+0x10/0x10 [ 244.753103][ T8626] ? find_held_lock+0x2b/0x80 [ 244.753122][ T8626] ? __fget_files+0x21f/0x3d0 [ 244.753139][ T8626] ? __pfx_mtrr_ioctl+0x10/0x10 [ 244.753160][ T8626] proc_reg_unlocked_ioctl+0x229/0x320 [ 244.753182][ T8626] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 244.753208][ T8626] __x64_sys_ioctl+0x18e/0x210 [ 244.753233][ T8626] do_syscall_64+0xc9/0xf80 [ 244.753252][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.753267][ T8626] RIP: 0033:0x7ff5ff19acb9 [ 244.753279][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.753293][ T8626] RSP: 002b:00007ff60003d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.753308][ T8626] RAX: ffffffffffffffda RBX: 00007ff5ff415fa0 RCX: 00007ff5ff19acb9 [ 244.753317][ T8626] RDX: 0000000000000005 RSI: 0000000040104d06 RDI: 0000000000000003 [ 244.753326][ T8626] RBP: 00007ff60003d090 R08: 0000000000000000 R09: 0000000000000000 [ 244.753335][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.753343][ T8626] R13: 00007ff5ff416038 R14: 00007ff5ff415fa0 R15: 00007ffda687b578 [ 244.753362][ T8626] [ 245.328689][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.392857][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.403414][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.678508][ T5850] Bluetooth: hci4: command tx timeout [ 245.700147][ T8642] Invalid ELF header magic: != ELF [ 246.020578][ T8592] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.057146][ T8592] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.081604][ T8644] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input9 [ 246.114934][ T8592] bridge_slave_0: entered allmulticast mode [ 246.138554][ T8592] bridge_slave_0: entered promiscuous mode [ 246.185220][ T8644] FAULT_INJECTION: forcing a failure. [ 246.185220][ T8644] name failslab, interval 1, probability 0, space 0, times 0 [ 246.201654][ T8592] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.243018][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.278580][ T8592] bridge_slave_1: entered allmulticast mode [ 246.318538][ T8592] bridge_slave_1: entered promiscuous mode [ 246.371585][ T8644] CPU: 0 UID: 0 PID: 8644 Comm: syz.1.604 Not tainted syzkaller #0 PREEMPT(full) [ 246.371610][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 246.371619][ T8644] Call Trace: [ 246.371625][ T8644] [ 246.371631][ T8644] dump_stack_lvl+0x100/0x190 [ 246.371655][ T8644] should_fail_ex.cold+0x5/0xa [ 246.371679][ T8644] should_failslab+0xc2/0x120 [ 246.371699][ T8644] kmem_cache_alloc_noprof+0x83/0x780 [ 246.371718][ T8644] ? __asan_memcpy+0x3c/0x60 [ 246.371732][ T8644] ? __kernfs_new_node+0xd2/0x960 [ 246.371755][ T8644] ? __kernfs_new_node+0xd2/0x960 [ 246.371775][ T8644] __kernfs_new_node+0xd2/0x960 [ 246.371797][ T8644] ? __pfx___kernfs_new_node+0x10/0x10 [ 246.371821][ T8644] ? find_held_lock+0x2b/0x80 [ 246.371835][ T8644] ? kernfs_root+0xee/0x2a0 [ 246.371852][ T8644] ? kernfs_root+0xee/0x2a0 [ 246.371882][ T8644] kernfs_new_node+0x11b/0x1a0 [ 246.371908][ T8644] kernfs_create_link+0xcc/0x240 [ 246.371927][ T8644] sysfs_do_create_link_sd+0x90/0x140 [ 246.371948][ T8644] sysfs_create_link+0x61/0xc0 [ 246.371967][ T8644] device_add+0x675/0x1950 [ 246.371989][ T8644] ? __pfx_device_add+0x10/0x10 [ 246.372011][ T8644] ? kobject_get+0xbb/0x150 [ 246.372031][ T8644] cdev_device_add+0x12b/0x270 [ 246.372049][ T8644] evdev_connect+0x3a8/0x4b0 [ 246.372071][ T8644] input_attach_handler.isra.0+0x177/0x1e0 [ 246.372091][ T8644] input_register_device.cold+0x139/0x375 [ 246.372117][ T8644] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 246.372140][ T8644] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.372162][ T8644] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 246.372189][ T8644] ? find_held_lock+0x2b/0x80 [ 246.372202][ T8644] ? hook_file_ioctl_common+0x146/0x410 [ 246.372232][ T8644] ? __pfx_uinput_ioctl+0x10/0x10 [ 246.372254][ T8644] __x64_sys_ioctl+0x18e/0x210 [ 246.372278][ T8644] do_syscall_64+0xc9/0xf80 [ 246.372295][ T8644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.372310][ T8644] RIP: 0033:0x7febd4b9acb9 [ 246.372323][ T8644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.372337][ T8644] RSP: 002b:00007febd5993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.372353][ T8644] RAX: ffffffffffffffda RBX: 00007febd4e16090 RCX: 00007febd4b9acb9 [ 246.372363][ T8644] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 246.372372][ T8644] RBP: 00007febd4c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 246.372381][ T8644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.372390][ T8644] R13: 00007febd4e16128 R14: 00007febd4e16090 R15: 00007ffc62fecc68 [ 246.372410][ T8644] [ 246.666175][ T8592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.677602][ T8592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.713524][ T8592] team0: Port device team_slave_0 added [ 246.790306][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 246.802343][ T8592] team0: Port device team_slave_1 added [ 246.826084][ T8592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.834157][ T8592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.860297][ T8592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.872452][ T8592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.879699][ T8592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.913232][ T8592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.938537][ T8644] input: failed to attach handler evdev to device input9, error: -12 [ 247.040288][ T8592] hsr_slave_0: entered promiscuous mode [ 247.046520][ T8592] hsr_slave_1: entered promiscuous mode [ 247.089111][ T8592] debugfs: 'hsr0' already exists in 'hsr' [ 247.094894][ T8592] Cannot create hsr debugfs directory [ 247.484655][ T8658] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(16) [ 247.508856][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 247.520666][ T8658] FAULT_INJECTION: forcing a failure. [ 247.520666][ T8658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.570398][ T8658] CPU: 0 UID: 0 PID: 8658 Comm: syz.1.608 Not tainted syzkaller #0 PREEMPT(full) [ 247.570421][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 247.570430][ T8658] Call Trace: [ 247.570435][ T8658] [ 247.570441][ T8658] dump_stack_lvl+0x100/0x190 [ 247.570463][ T8658] should_fail_ex.cold+0x5/0xa [ 247.570499][ T8658] _copy_from_user+0x2e/0xd0 [ 247.570524][ T8658] ctl_ioctl+0x292/0xcd0 [ 247.570539][ T8658] ? __pfx_list_devices+0x10/0x10 [ 247.570554][ T8658] ? __pfx_ctl_ioctl+0x10/0x10 [ 247.570591][ T8658] ? __fget_files+0x21f/0x3d0 [ 247.570611][ T8658] dm_ctl_ioctl+0x22/0x30 [ 247.570625][ T8658] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 247.570639][ T8658] __x64_sys_ioctl+0x18e/0x210 [ 247.570664][ T8658] do_syscall_64+0xc9/0xf80 [ 247.570683][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.570699][ T8658] RIP: 0033:0x7febd4b9acb9 [ 247.570711][ T8658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.570725][ T8658] RSP: 002b:00007febd5993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.570740][ T8658] RAX: ffffffffffffffda RBX: 00007febd4e16090 RCX: 00007febd4b9acb9 [ 247.570750][ T8658] RDX: 00002000000001c0 RSI: fffffffffffffd02 RDI: 0000000000000005 [ 247.570761][ T8658] RBP: 00007febd5993090 R08: 0000000000000000 R09: 0000000000000000 [ 247.570770][ T8658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.570778][ T8658] R13: 00007febd4e16128 R14: 00007febd4e16090 R15: 00007ffc62fecc68 [ 247.570797][ T8658] [ 247.748473][ T5850] Bluetooth: hci4: command tx timeout [ 248.477934][ T8662] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 248.926103][ T8592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.030088][ T8592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.086666][ T8592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.147276][ T8592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.423130][ T8688] FAULT_INJECTION: forcing a failure. [ 249.423130][ T8688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.449474][ T8688] CPU: 1 UID: 0 PID: 8688 Comm: syz.0.615 Not tainted syzkaller #0 PREEMPT(full) [ 249.449510][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 249.449525][ T8688] Call Trace: [ 249.449533][ T8688] [ 249.449543][ T8688] dump_stack_lvl+0x100/0x190 [ 249.449579][ T8688] should_fail_ex.cold+0x5/0xa [ 249.449621][ T8688] _copy_to_user+0x32/0xd0 [ 249.449661][ T8688] simple_read_from_buffer+0xcb/0x170 [ 249.449690][ T8688] proc_fail_nth_read+0x1af/0x230 [ 249.449722][ T8688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.449755][ T8688] ? rw_verify_area+0xce/0x6d0 [ 249.449779][ T8688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.449809][ T8688] vfs_read+0x1e4/0xb30 [ 249.449842][ T8688] ? __pfx_vfs_read+0x10/0x10 [ 249.449868][ T8688] ? find_held_lock+0x2b/0x80 [ 249.449895][ T8688] ? __fget_files+0x215/0x3d0 [ 249.449929][ T8688] ? __fget_files+0x21f/0x3d0 [ 249.449965][ T8688] ksys_read+0x12a/0x250 [ 249.449992][ T8688] ? __pfx_ksys_read+0x10/0x10 [ 249.450021][ T8688] ? fput+0x79/0x100 [ 249.450060][ T8688] do_syscall_64+0xc9/0xf80 [ 249.450095][ T8688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.450121][ T8688] RIP: 0033:0x7ff5ff15b58e [ 249.450142][ T8688] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.450167][ T8688] RSP: 002b:00007ff60003cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.450193][ T8688] RAX: ffffffffffffffda RBX: 00007ff60003d6c0 RCX: 00007ff5ff15b58e [ 249.450211][ T8688] RDX: 000000000000000f RSI: 00007ff60003d0a0 RDI: 0000000000000004 [ 249.450228][ T8688] RBP: 00007ff60003d090 R08: 0000000000000000 R09: 0000000000000000 [ 249.450245][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.450261][ T8688] R13: 00007ff5ff416038 R14: 00007ff5ff415fa0 R15: 00007ffda687b578 [ 249.450298][ T8688] [ 249.797741][ T8592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.832914][ T5850] Bluetooth: hci4: command tx timeout [ 249.842859][ T8694] FAULT_INJECTION: forcing a failure. [ 249.842859][ T8694] name failslab, interval 1, probability 0, space 0, times 0 [ 249.861460][ T8592] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.927559][ T8378] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.930424][ T8694] CPU: 1 UID: 0 PID: 8694 Comm: syz.0.617 Not tainted syzkaller #0 PREEMPT(full) [ 249.930459][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 249.930475][ T8694] Call Trace: [ 249.930484][ T8694] [ 249.930493][ T8694] dump_stack_lvl+0x100/0x190 [ 249.930531][ T8694] should_fail_ex.cold+0x5/0xa [ 249.930573][ T8694] should_failslab+0xc2/0x120 [ 249.930615][ T8694] ? tomoyo_realpath_from_path+0xb6/0x690 [ 249.930641][ T8694] __kmalloc_noprof+0xf6/0x9c0 [ 249.930667][ T8694] ? kfree+0x2a9/0x690 [ 249.930699][ T8694] ? tomoyo_realpath_from_path+0xb6/0x690 [ 249.930726][ T8694] tomoyo_realpath_from_path+0xb6/0x690 [ 249.930761][ T8694] tomoyo_check_open_permission+0x2af/0x3c0 [ 249.930802][ T8694] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 249.930872][ T8694] ? lock_acquire+0x17c/0x330 [ 249.930905][ T8694] ? find_held_lock+0x2b/0x80 [ 249.930939][ T8694] tomoyo_file_open+0x6b/0x90 [ 249.930971][ T8694] security_file_open+0xb5/0x1e0 [ 249.930997][ T8694] do_dentry_open+0x58c/0x1570 [ 249.931030][ T8694] ? security_inode_permission+0xbf/0x250 [ 249.931073][ T8694] vfs_open+0x82/0x3f0 [ 249.931114][ T8694] path_openat+0x21dc/0x3120 [ 249.931156][ T8694] ? __pfx_path_openat+0x10/0x10 [ 249.931200][ T8694] do_filp_open+0x1f7/0x420 [ 249.931234][ T8694] ? __pfx_do_filp_open+0x10/0x10 [ 249.931277][ T8694] ? __pfx_kfree_link+0x10/0x10 [ 249.931325][ T8694] ? _raw_spin_unlock+0x28/0x50 [ 249.931349][ T8694] ? alloc_fd+0x476/0x790 [ 249.931389][ T8694] do_sys_openat2+0x12e/0x220 [ 249.931427][ T8694] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.931482][ T8694] __x64_sys_openat+0x12d/0x210 [ 249.931521][ T8694] ? __pfx___x64_sys_openat+0x10/0x10 [ 249.931558][ T8694] ? xfd_validate_state+0x129/0x190 [ 249.931615][ T8694] do_syscall_64+0xc9/0xf80 [ 249.931648][ T8694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.931674][ T8694] RIP: 0033:0x7ff5ff15b58e [ 249.931696][ T8694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.931722][ T8694] RSP: 002b:00007ff60003cf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.931748][ T8694] RAX: ffffffffffffffda RBX: 00007ff60003d6c0 RCX: 00007ff5ff15b58e [ 249.931766][ T8694] RDX: 0000000000000002 RSI: 00007ff5ff2057c5 RDI: ffffffffffffff9c [ 249.931783][ T8694] RBP: 00007ff5ff208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 249.931800][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.931815][ T8694] R13: 00007ff5ff416038 R14: 00007ff5ff415fa0 R15: 00007ffda687b578 [ 249.931851][ T8694] [ 249.938455][ T8694] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.944172][ T8378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.284027][ T5903] smpboot: CPU 1 is now offline [ 250.360018][ T8703] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 250.442111][ T8378] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.449293][ T8378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.562910][ T1322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.639602][ T8711] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 250.928313][ T1322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.022013][ T1322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.124078][ T1322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.385798][ T1322] bridge_slave_1: left allmulticast mode [ 251.392717][ T1322] bridge_slave_1: left promiscuous mode [ 251.401166][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.471265][ T1322] bridge_slave_0: left allmulticast mode [ 251.476940][ T1322] bridge_slave_0: left promiscuous mode [ 251.509405][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.911727][ T5850] Bluetooth: hci4: command tx timeout [ 252.464228][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.508705][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.530252][ T1322] bond0 (unregistering): Released all slaves [ 253.126651][ T8592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.318251][ T8750] [U]  [ 253.321096][ T8750] [U] [ 253.323816][ T8750] [U] [ 253.326534][ T8750] [U] [ 253.351263][ T8750] [U] [ 253.354018][ T8750] [U] [ 253.356739][ T8750] [U] [ 253.359470][ T8750] [U] [ 253.398725][ T1322] hsr_slave_0: left promiscuous mode [ 253.406185][ T1322] hsr_slave_1: left promiscuous mode [ 253.412912][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.429821][ T8750] [U] [ 253.432578][ T8750] [U] [ 253.435297][ T8750] [U] [ 253.438020][ T8750] [U] [ 253.445195][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.454391][ T8750] [U] [ 253.457144][ T8750] [U] [ 253.459866][ T8750] [U] [ 253.462596][ T8750] [U] [ 253.466750][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.474843][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.483374][ T8750] [U] [ 253.486114][ T8750] [U] [ 253.488842][ T8750] [U] [ 253.491559][ T8750] [U] [ 253.524582][ T1322] veth1_macvtap: left promiscuous mode [ 253.528621][ T8750] [U] [ 253.532975][ T8750] [U] [ 253.535696][ T8750] [U] [ 253.538408][ T8750] [U] [ 253.538689][ T1322] veth0_macvtap: left promiscuous mode [ 253.547351][ T1322] veth1_vlan: left promiscuous mode [ 253.555674][ T1322] veth0_vlan: left promiscuous mode [ 253.585246][ T8750] [U] [ 253.587996][ T8750] [U] [ 253.590716][ T8750] [U] [ 253.593435][ T8750] [U] [ 253.607665][ T8750] [U] [ 253.610417][ T8750] [U] [ 253.613132][ T8750] [U] [ 253.615848][ T8750] [U] [ 253.646352][ T8750] [U] [ 254.110701][ T8770] FAULT_INJECTION: forcing a failure. [ 254.110701][ T8770] name failslab, interval 1, probability 0, space 0, times 0 [ 254.127515][ T8770] CPU: 0 UID: 0 PID: 8770 Comm: syz.3.630 Not tainted syzkaller #0 PREEMPT(full) [ 254.127555][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 254.127573][ T8770] Call Trace: [ 254.127582][ T8770] [ 254.127593][ T8770] dump_stack_lvl+0x100/0x190 [ 254.127634][ T8770] should_fail_ex.cold+0x5/0xa [ 254.127680][ T8770] should_failslab+0xc2/0x120 [ 254.127713][ T8770] ? drm_atomic_state_init+0x183/0x540 [ 254.127745][ T8770] __kmalloc_noprof+0xf6/0x9c0 [ 254.127789][ T8770] ? drm_atomic_state_init+0x183/0x540 [ 254.127822][ T8770] drm_atomic_state_init+0x183/0x540 [ 254.127855][ T8770] ? kasan_save_track+0x14/0x30 [ 254.127893][ T8770] drm_atomic_state_alloc+0xd3/0x120 [ 254.127925][ T8770] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 254.127964][ T8770] ? trace_contention_end+0xd6/0x110 [ 254.128002][ T8770] ? __mutex_lock+0x26a/0x1b90 [ 254.128041][ T8770] ? __mutex_lock+0x26a/0x1b90 [ 254.128072][ T8770] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 254.128111][ T8770] ? drm_master_internal_acquire+0x21/0x80 [ 254.128184][ T8770] drm_client_modeset_commit_locked+0x14d/0x580 [ 254.128229][ T8770] drm_client_modeset_commit+0x4f/0x80 [ 254.128269][ T8770] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 254.128314][ T8770] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 254.128356][ T8770] drm_fbdev_client_restore+0x1b/0x30 [ 254.128382][ T8770] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 254.128409][ T8770] drm_client_dev_restore+0x205/0x2a0 [ 254.128455][ T8770] drm_release+0x2c6/0x360 [ 254.128491][ T8770] ? __pfx_drm_release+0x10/0x10 [ 254.128526][ T8770] __fput+0x3ff/0xb40 [ 254.128574][ T8770] task_work_run+0x150/0x240 [ 254.128619][ T8770] ? __pfx_task_work_run+0x10/0x10 [ 254.128674][ T8770] exit_to_user_mode_loop+0x100/0x4b0 [ 254.128710][ T8770] ? rcu_is_watching+0x12/0xc0 [ 254.128739][ T8770] do_syscall_64+0x4ea/0xf80 [ 254.128773][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.128801][ T8770] RIP: 0033:0x7f368f59acb9 [ 254.128824][ T8770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.128852][ T8770] RSP: 002b:00007f36903b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 254.128880][ T8770] RAX: 0000000000000000 RBX: 00007f368f815fa0 RCX: 00007f368f59acb9 [ 254.128898][ T8770] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 254.128914][ T8770] RBP: 00007f368f608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 254.128932][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.128948][ T8770] R13: 00007f368f816038 R14: 00007f368f815fa0 R15: 00007ffd68a17ad8 [ 254.128988][ T8770] [ 254.657630][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 254.730426][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 255.823294][ T8592] veth0_vlan: entered promiscuous mode [ 255.854408][ T8592] veth1_vlan: entered promiscuous mode [ 256.031593][ T8791] usbip-vudc usbip-vudc.0: gadget not bound [ 256.112566][ T8592] veth0_macvtap: entered promiscuous mode [ 256.125468][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 256.134317][ T984] smpboot: CPU 1 is now offline [ 256.189349][ T8592] veth1_macvtap: entered promiscuous mode [ 256.268238][ T8795] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 256.765592][ T8592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.855443][ T8592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.924310][ T8376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.924367][ T8376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.924410][ T8376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.924452][ T8376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.403883][ T8376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.429088][ T8376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.655051][ T8376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.708452][ T8376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.788926][ T8832] netlink: 206 bytes leftover after parsing attributes in process `syz.3.639'. [ 259.593364][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.599938][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.930565][ T8876] usbip-vudc usbip-vudc.0: gadget not bound [ 260.357209][ T8896] netlink: 206 bytes leftover after parsing attributes in process `syz.0.648'. [ 260.642917][ T8884] kafs: addr_prefs: Invalid Command [ 260.811573][ T8892] FAULT_INJECTION: forcing a failure. [ 260.811573][ T8892] name failslab, interval 1, probability 0, space 0, times 0 [ 260.811620][ T8892] CPU: 1 UID: 0 PID: 8892 Comm: syz.1.647 Not tainted syzkaller #0 PREEMPT(full) [ 260.811656][ T8892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 260.811673][ T8892] Call Trace: [ 260.811682][ T8892] [ 260.811692][ T8892] dump_stack_lvl+0x100/0x190 [ 260.811730][ T8892] should_fail_ex.cold+0x5/0xa [ 260.811775][ T8892] should_failslab+0xc2/0x120 [ 260.811815][ T8892] kmem_cache_alloc_noprof+0x83/0x780 [ 260.811853][ T8892] ? security_file_alloc+0x34/0x2c0 [ 260.811904][ T8892] ? security_file_alloc+0x34/0x2c0 [ 260.811944][ T8892] security_file_alloc+0x34/0x2c0 [ 260.811988][ T8892] init_file+0x93/0x4c0 [ 260.812027][ T8892] alloc_empty_file+0x73/0x1c0 [ 260.812067][ T8892] alloc_file_pseudo+0x13a/0x230 [ 260.812108][ T8892] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 260.812146][ T8892] ? alloc_fd+0x476/0x790 [ 260.812184][ T8892] sock_alloc_file+0x50/0x210 [ 260.812226][ T8892] __sys_socket+0x1c0/0x260 [ 260.812259][ T8892] ? __pfx___sys_socket+0x10/0x10 [ 260.812290][ T8892] ? xfd_validate_state+0x129/0x190 [ 260.812343][ T8892] __x64_sys_socket+0x72/0xb0 [ 260.812373][ T8892] ? lockdep_hardirqs_on+0x78/0x100 [ 260.812404][ T8892] do_syscall_64+0xc9/0xf80 [ 260.812438][ T8892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.812467][ T8892] RIP: 0033:0x7febd4b9acb9 [ 260.812495][ T8892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.812523][ T8892] RSP: 002b:00007febd5993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 260.812558][ T8892] RAX: ffffffffffffffda RBX: 00007febd4e16090 RCX: 00007febd4b9acb9 [ 260.812578][ T8892] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 260.812599][ T8892] RBP: 00007febd4c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 260.812617][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.812635][ T8892] R13: 00007febd4e16128 R14: 00007febd4e16090 R15: 00007ffc62fecc68 [ 260.812673][ T8892] [ 262.122190][ T8930] FAULT_INJECTION: forcing a failure. [ 262.122190][ T8930] name fail_futex, interval 1, probability 0, space 0, times 0 [ 262.167258][ T8930] CPU: 0 UID: 0 PID: 8930 Comm: syz.4.655 Not tainted syzkaller #0 PREEMPT(full) [ 262.167301][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 262.167319][ T8930] Call Trace: [ 262.167328][ T8930] [ 262.167339][ T8930] dump_stack_lvl+0x100/0x190 [ 262.167379][ T8930] should_fail_ex.cold+0x5/0xa [ 262.167426][ T8930] get_futex_key+0x1d2/0x1620 [ 262.167478][ T8930] ? __pfx_get_futex_key+0x10/0x10 [ 262.167528][ T8930] futex_wake+0xea/0x530 [ 262.167575][ T8930] ? __pfx_futex_wake+0x10/0x10 [ 262.167625][ T8930] ? getname_flags.part.0+0x3ad/0x540 [ 262.167666][ T8930] ? getname_flags.part.0+0x1c5/0x540 [ 262.167712][ T8930] do_futex+0x32b/0x350 [ 262.167750][ T8930] ? __pfx_do_futex+0x10/0x10 [ 262.167788][ T8930] ? __pfx_do_sys_openat2+0x10/0x10 [ 262.167840][ T8930] __x64_sys_futex+0x34f/0x4d0 [ 262.167879][ T8930] ? __x64_sys_openat+0x12d/0x210 [ 262.167921][ T8930] ? __pfx___x64_sys_futex+0x10/0x10 [ 262.167957][ T8930] ? xfd_validate_state+0x129/0x190 [ 262.168011][ T8930] do_syscall_64+0xc9/0xf80 [ 262.168046][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.168073][ T8930] RIP: 0033:0x7f748e79acb9 [ 262.168095][ T8930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.168119][ T8930] RSP: 002b:00007f748f7050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 262.168135][ T8930] RAX: ffffffffffffffda RBX: 00007f748ea15fa8 RCX: 00007f748e79acb9 [ 262.168145][ T8930] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f748ea15fac [ 262.168155][ T8930] RBP: 00007f748ea15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 262.168164][ T8930] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 262.168173][ T8930] R13: 00007f748ea16038 R14: 00007ffeaa387f00 R15: 00007ffeaa387fe8 [ 262.168193][ T8930] [ 262.957989][ T8946] FAULT_INJECTION: forcing a failure. [ 262.957989][ T8946] name failslab, interval 1, probability 0, space 0, times 0 [ 263.011660][ T8946] CPU: 0 UID: 0 PID: 8946 Comm: syz.4.659 Not tainted syzkaller #0 PREEMPT(full) [ 263.011701][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 263.011718][ T8946] Call Trace: [ 263.011727][ T8946] [ 263.011737][ T8946] dump_stack_lvl+0x100/0x190 [ 263.011779][ T8946] should_fail_ex.cold+0x5/0xa [ 263.011826][ T8946] should_failslab+0xc2/0x120 [ 263.011864][ T8946] __kmalloc_cache_noprof+0x80/0x810 [ 263.011894][ T8946] ? do_raw_spin_unlock+0x145/0x1e0 [ 263.011935][ T8946] ? snd_rawmidi_open+0x3b3/0xba0 [ 263.011979][ T8946] ? snd_rawmidi_open+0x3b3/0xba0 [ 263.012017][ T8946] snd_rawmidi_open+0x3b3/0xba0 [ 263.012064][ T8946] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 263.012108][ T8946] ? soundcore_open+0x231/0x5a0 [ 263.012134][ T8946] ? soundcore_open+0x231/0x5a0 [ 263.012166][ T8946] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 263.012205][ T8946] soundcore_open+0x2e3/0x5a0 [ 263.012237][ T8946] ? __pfx_soundcore_open+0x10/0x10 [ 263.012266][ T8946] chrdev_open+0x234/0x6a0 [ 263.012299][ T8946] ? __pfx_apparmor_file_open+0x10/0x10 [ 263.012337][ T8946] ? __pfx_chrdev_open+0x10/0x10 [ 263.012373][ T8946] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 263.012413][ T8946] do_dentry_open+0x73e/0x1570 [ 263.012445][ T8946] ? __pfx_chrdev_open+0x10/0x10 [ 263.012479][ T8946] ? security_inode_permission+0xbf/0x250 [ 263.012527][ T8946] vfs_open+0x82/0x3f0 [ 263.012571][ T8946] path_openat+0x21dc/0x3120 [ 263.012616][ T8946] ? __pfx_path_openat+0x10/0x10 [ 263.012669][ T8946] do_filp_open+0x1f7/0x420 [ 263.012705][ T8946] ? __pfx_do_filp_open+0x10/0x10 [ 263.012766][ T8946] ? _raw_spin_unlock+0x28/0x50 [ 263.012792][ T8946] ? alloc_fd+0x476/0x790 [ 263.012834][ T8946] do_sys_openat2+0x12e/0x220 [ 263.012876][ T8946] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.012930][ T8946] __x64_sys_openat+0x12d/0x210 [ 263.012971][ T8946] ? __pfx___x64_sys_openat+0x10/0x10 [ 263.013006][ T8946] ? xfd_validate_state+0x129/0x190 [ 263.013057][ T8946] do_syscall_64+0xc9/0xf80 [ 263.013091][ T8946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.013120][ T8946] RIP: 0033:0x7f748e79acb9 [ 263.013143][ T8946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.013169][ T8946] RSP: 002b:00007f748f705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.013198][ T8946] RAX: ffffffffffffffda RBX: 00007f748ea15fa0 RCX: 00007f748e79acb9 [ 263.013217][ T8946] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 263.013236][ T8946] RBP: 00007f748e808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 263.013253][ T8946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.013269][ T8946] R13: 00007f748ea16038 R14: 00007f748ea15fa0 R15: 00007ffeaa387fe8 [ 263.013304][ T8946] [ 263.558970][ T30] audit: type=1804 audit(1769197654.859:10): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.660" name="/newroot/182/file0" dev="tmpfs" ino=1002 res=1 errno=0 [ 263.633051][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'. [ 263.864489][ T8970] netlink: 206 bytes leftover after parsing attributes in process `syz.4.665'. [ 263.995955][ T8959] bond0: (slave bond_slave_1): Releasing backup interface [ 265.187127][ T30] audit: type=1800 audit(1769197656.489:11): pid=8990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.669" name="file0" dev="tmpfs" ino=71 res=0 errno=0 [ 265.244994][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 265.253519][ T5889] smpboot: CPU 1 is now offline [ 265.643493][ T8989] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 265.720431][ T8989] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 266.067504][ T9018] netlink: 206 bytes leftover after parsing attributes in process `syz.3.674'. [ 266.358510][ T9023] FAULT_INJECTION: forcing a failure. [ 266.358510][ T9023] name failslab, interval 1, probability 0, space 0, times 0 [ 266.425015][ T9023] CPU: 0 UID: 0 PID: 9023 Comm: syz.3.676 Not tainted syzkaller #0 PREEMPT(full) [ 266.425038][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 266.425048][ T9023] Call Trace: [ 266.425053][ T9023] [ 266.425059][ T9023] dump_stack_lvl+0x100/0x190 [ 266.425082][ T9023] should_fail_ex.cold+0x5/0xa [ 266.425115][ T9023] should_failslab+0xc2/0x120 [ 266.425136][ T9023] __kmalloc_cache_noprof+0x80/0x810 [ 266.425153][ T9023] ? drm_atomic_state_alloc+0xb8/0x120 [ 266.425175][ T9023] ? drm_atomic_state_alloc+0xb8/0x120 [ 266.425193][ T9023] drm_atomic_state_alloc+0xb8/0x120 [ 266.425211][ T9023] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 266.425233][ T9023] ? trace_contention_end+0xd6/0x110 [ 266.425253][ T9023] ? __mutex_lock+0x26a/0x1b90 [ 266.425271][ T9023] ? __mutex_lock+0x26a/0x1b90 [ 266.425288][ T9023] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 266.425308][ T9023] ? drm_master_internal_acquire+0x21/0x80 [ 266.425345][ T9023] drm_client_modeset_commit_locked+0x14d/0x580 [ 266.425369][ T9023] drm_client_modeset_commit+0x4f/0x80 [ 266.425389][ T9023] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 266.425411][ T9023] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 266.425433][ T9023] drm_fbdev_client_restore+0x1b/0x30 [ 266.425449][ T9023] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 266.425464][ T9023] drm_client_dev_restore+0x205/0x2a0 [ 266.425488][ T9023] drm_release+0x2c6/0x360 [ 266.425506][ T9023] ? __pfx_drm_release+0x10/0x10 [ 266.425524][ T9023] __fput+0x3ff/0xb40 [ 266.425549][ T9023] task_work_run+0x150/0x240 [ 266.425572][ T9023] ? __pfx_task_work_run+0x10/0x10 [ 266.425599][ T9023] exit_to_user_mode_loop+0x100/0x4b0 [ 266.425622][ T9023] ? rcu_is_watching+0x12/0xc0 [ 266.425638][ T9023] do_syscall_64+0x4ea/0xf80 [ 266.425656][ T9023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.425671][ T9023] RIP: 0033:0x7f368f59acb9 [ 266.425684][ T9023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.425699][ T9023] RSP: 002b:00007f36903b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 266.425713][ T9023] RAX: 0000000000000000 RBX: 00007f368f815fa0 RCX: 00007f368f59acb9 [ 266.425723][ T9023] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 266.425732][ T9023] RBP: 00007f368f608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 266.425741][ T9023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.425750][ T9023] R13: 00007f368f816038 R14: 00007f368f815fa0 R15: 00007ffd68a17ad8 [ 266.425771][ T9023] [ 267.039401][ T9035] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 267.876395][ T9064] netlink: 206 bytes leftover after parsing attributes in process `syz.3.686'. [ 268.738761][ T9079] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(16) [ 269.222774][ T9091] FAULT_INJECTION: forcing a failure. [ 269.222774][ T9091] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.254087][ T9091] CPU: 1 UID: 0 PID: 9091 Comm: syz.4.692 Not tainted syzkaller #0 PREEMPT(full) [ 269.254127][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 269.254152][ T9091] Call Trace: [ 269.254161][ T9091] [ 269.254172][ T9091] dump_stack_lvl+0x100/0x190 [ 269.254220][ T9091] should_fail_ex.cold+0x5/0xa [ 269.254259][ T9091] ? prepare_alloc_pages+0x16d/0x5f0 [ 269.254305][ T9091] should_fail_alloc_page+0xeb/0x140 [ 269.254345][ T9091] prepare_alloc_pages+0x1f0/0x5f0 [ 269.254386][ T9091] ? rcu_is_watching+0x12/0xc0 [ 269.254418][ T9091] __alloc_frozen_pages_noprof+0x193/0x2410 [ 269.254455][ T9091] ? __lock_acquire+0x4a5/0x2630 [ 269.254507][ T9091] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 269.254542][ T9091] ? do_raw_spin_lock+0x128/0x260 [ 269.254585][ T9091] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 269.254627][ T9091] ? find_held_lock+0x2b/0x80 [ 269.254666][ T9091] ? __lock_acquire+0x4a5/0x2630 [ 269.254702][ T9091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 269.254733][ T9091] ? policy_nodemask+0xed/0x4f0 [ 269.254773][ T9091] alloc_pages_mpol+0x1fb/0x550 [ 269.254813][ T9091] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 269.254852][ T9091] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 269.254890][ T9091] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 269.254932][ T9091] folio_alloc_mpol_noprof+0x36/0x340 [ 269.254978][ T9091] shmem_alloc_folio+0x135/0x160 [ 269.255008][ T9091] shmem_alloc_and_add_folio+0x371/0xd40 [ 269.255052][ T9091] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 269.255089][ T9091] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 269.255133][ T9091] shmem_get_folio_gfp+0x6ab/0x1900 [ 269.255183][ T9091] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 269.255220][ T9091] ? filemap_map_pages+0x9e0/0x2110 [ 269.255262][ T9091] shmem_fault+0x1f9/0xa20 [ 269.255295][ T9091] ? __lock_acquire+0x4a5/0x2630 [ 269.255331][ T9091] ? __pfx_shmem_fault+0x10/0x10 [ 269.255372][ T9091] ? __pfx_filemap_map_pages+0x10/0x10 [ 269.255419][ T9091] __do_fault+0x10d/0x550 [ 269.255460][ T9091] do_fault+0xaf9/0x1990 [ 269.255508][ T9091] __handle_mm_fault+0x1807/0x2b50 [ 269.255544][ T9091] ? mt_find+0x45e/0x8e0 [ 269.255580][ T9091] ? __pfx___handle_mm_fault+0x10/0x10 [ 269.255608][ T9091] ? __pfx_mt_find+0x10/0x10 [ 269.255663][ T9091] ? find_vma+0xbf/0x140 [ 269.255699][ T9091] ? __pfx_find_vma+0x10/0x10 [ 269.255740][ T9091] handle_mm_fault+0x36d/0xa20 [ 269.255776][ T9091] do_user_addr_fault+0x74c/0x12f0 [ 269.255819][ T9091] exc_page_fault+0x6f/0xd0 [ 269.255851][ T9091] asm_exc_page_fault+0x26/0x30 [ 269.255878][ T9091] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 269.255920][ T9091] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 269.255947][ T9091] RSP: 0018:ffffc90004e3fc60 EFLAGS: 00050202 [ 269.255970][ T9091] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000005aff [ 269.255987][ T9091] RDX: 0000000000000001 RSI: 0000000000009000 RDI: ffff888077599000 [ 269.256005][ T9091] RBP: 000000000000eaff R08: 0000000000000001 R09: ffffed100eeb3d5f [ 269.256023][ T9091] R10: 0000000000000006 R11: 00000000000003ac R12: 0000000000000000 [ 269.256040][ T9091] R13: ffff888077590000 R14: 000000000000eaff R15: ffffc90004e3fe98 [ 269.256078][ T9091] _copy_from_user+0x98/0xd0 [ 269.256121][ T9091] memdup_user+0x6b/0xe0 [ 269.256180][ T9091] edid_write+0x6f/0x180 [ 269.256211][ T9091] full_proxy_write+0x135/0x1a0 [ 269.256260][ T9091] vfs_write+0x2aa/0x1070 [ 269.256294][ T9091] ? __pfx_full_proxy_write+0x10/0x10 [ 269.256342][ T9091] ? __pfx_vfs_write+0x10/0x10 [ 269.256370][ T9091] ? do_futex+0x192/0x350 [ 269.256409][ T9091] ? __pfx_do_futex+0x10/0x10 [ 269.256443][ T9091] ? __pfx_do_sys_openat2+0x10/0x10 [ 269.256495][ T9091] ? __x64_sys_futex+0x34f/0x4d0 [ 269.256531][ T9091] ? __x64_sys_futex+0x358/0x4d0 [ 269.256573][ T9091] ksys_write+0x12a/0x250 [ 269.256603][ T9091] ? __pfx_ksys_write+0x10/0x10 [ 269.256645][ T9091] do_syscall_64+0xc9/0xf80 [ 269.256680][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.256709][ T9091] RIP: 0033:0x7f748e79acb9 [ 269.256730][ T9091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.256756][ T9091] RSP: 002b:00007f748f705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.256781][ T9091] RAX: ffffffffffffffda RBX: 00007f748ea15fa0 RCX: 00007f748e79acb9 [ 269.256799][ T9091] RDX: 000000000000eaff RSI: 0000000000000000 RDI: 0000000000000008 [ 269.256816][ T9091] RBP: 00007f748e808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 269.256833][ T9091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.256850][ T9091] R13: 00007f748ea16038 R14: 00007f748ea15fa0 R15: 00007ffeaa387fe8 [ 269.256889][ T9091] [ 270.195395][ T9106] netlink: 206 bytes leftover after parsing attributes in process `syz.3.696'. [ 270.571951][ T30] audit: type=1804 audit(1769197661.879:12): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.697" name="/newroot/16/file0" dev="tmpfs" ino=104 res=1 errno=0 [ 270.877037][ T9114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.697'. [ 271.238119][ T9114] bond0: (slave bond_slave_1): Releasing backup interface [ 271.954454][ T9142] FAULT_INJECTION: forcing a failure. [ 271.954454][ T9142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 271.989295][ T9142] CPU: 0 UID: 0 PID: 9142 Comm: syz.3.708 Not tainted syzkaller #0 PREEMPT(full) [ 271.989335][ T9142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 271.989353][ T9142] Call Trace: [ 271.989362][ T9142] [ 271.989374][ T9142] dump_stack_lvl+0x100/0x190 [ 271.989412][ T9142] should_fail_ex.cold+0x5/0xa [ 271.989452][ T9142] ? prepare_alloc_pages+0x16d/0x5f0 [ 271.989502][ T9142] should_fail_alloc_page+0xeb/0x140 [ 271.989545][ T9142] prepare_alloc_pages+0x1f0/0x5f0 [ 271.989587][ T9142] ? rcu_is_watching+0x12/0xc0 [ 271.989619][ T9142] __alloc_frozen_pages_noprof+0x193/0x2410 [ 271.989656][ T9142] ? __lock_acquire+0x4a5/0x2630 [ 271.989717][ T9142] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 271.989752][ T9142] ? do_raw_spin_lock+0x128/0x260 [ 271.989794][ T9142] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 271.989835][ T9142] ? find_held_lock+0x2b/0x80 [ 271.989873][ T9142] ? __lock_acquire+0x4a5/0x2630 [ 271.989910][ T9142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 271.989943][ T9142] ? policy_nodemask+0xed/0x4f0 [ 271.989984][ T9142] alloc_pages_mpol+0x1fb/0x550 [ 271.990026][ T9142] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 271.990066][ T9142] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 271.990104][ T9142] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 271.990149][ T9142] folio_alloc_mpol_noprof+0x36/0x340 [ 271.990195][ T9142] shmem_alloc_folio+0x135/0x160 [ 271.990226][ T9142] shmem_alloc_and_add_folio+0x371/0xd40 [ 271.990269][ T9142] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 271.990306][ T9142] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 271.990349][ T9142] shmem_get_folio_gfp+0x6ab/0x1900 [ 271.990392][ T9142] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 271.990428][ T9142] ? filemap_map_pages+0x9e0/0x2110 [ 271.990469][ T9142] shmem_fault+0x1f9/0xa20 [ 271.990500][ T9142] ? __lock_acquire+0x4a5/0x2630 [ 271.990536][ T9142] ? __pfx_shmem_fault+0x10/0x10 [ 271.990576][ T9142] ? __pfx_filemap_map_pages+0x10/0x10 [ 271.990623][ T9142] __do_fault+0x10d/0x550 [ 271.990664][ T9142] do_fault+0xaf9/0x1990 [ 271.990753][ T9142] __handle_mm_fault+0x1807/0x2b50 [ 271.990790][ T9142] ? mt_find+0x45e/0x8e0 [ 271.990826][ T9142] ? __pfx___handle_mm_fault+0x10/0x10 [ 271.990855][ T9142] ? __pfx_mt_find+0x10/0x10 [ 271.990911][ T9142] ? find_vma+0xbf/0x140 [ 271.990947][ T9142] ? __pfx_find_vma+0x10/0x10 [ 271.990988][ T9142] handle_mm_fault+0x36d/0xa20 [ 271.991026][ T9142] do_user_addr_fault+0x74c/0x12f0 [ 271.991068][ T9142] exc_page_fault+0x6f/0xd0 [ 271.991100][ T9142] asm_exc_page_fault+0x26/0x30 [ 271.991127][ T9142] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 271.991167][ T9142] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 271.991193][ T9142] RSP: 0018:ffffc90005127c60 EFLAGS: 00050202 [ 271.991217][ T9142] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000005aff [ 271.991233][ T9142] RDX: 0000000000000001 RSI: 0000000000009000 RDI: ffff888031029000 [ 271.991251][ T9142] RBP: 000000000000eaff R08: 0000000000000001 R09: ffffed1006205d5f [ 271.991269][ T9142] R10: 0000000000000006 R11: 00000000000003ac R12: 0000000000000000 [ 271.991286][ T9142] R13: ffff888031020000 R14: 000000000000eaff R15: ffffc90005127e98 [ 271.991323][ T9142] _copy_from_user+0x98/0xd0 [ 271.991367][ T9142] memdup_user+0x6b/0xe0 [ 271.991404][ T9142] edid_write+0x6f/0x180 [ 271.991435][ T9142] full_proxy_write+0x135/0x1a0 [ 271.991482][ T9142] vfs_write+0x2aa/0x1070 [ 271.991515][ T9142] ? __pfx_full_proxy_write+0x10/0x10 [ 271.991563][ T9142] ? __pfx_vfs_write+0x10/0x10 [ 271.991592][ T9142] ? do_futex+0x192/0x350 [ 271.991630][ T9142] ? __pfx_do_futex+0x10/0x10 [ 271.991664][ T9142] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.991724][ T9142] ? __x64_sys_futex+0x34f/0x4d0 [ 271.991760][ T9142] ? __x64_sys_futex+0x358/0x4d0 [ 271.991804][ T9142] ksys_write+0x12a/0x250 [ 271.991834][ T9142] ? __pfx_ksys_write+0x10/0x10 [ 271.991876][ T9142] do_syscall_64+0xc9/0xf80 [ 271.991911][ T9142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.991939][ T9142] RIP: 0033:0x7f368f59acb9 [ 271.991960][ T9142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.991988][ T9142] RSP: 002b:00007f36903b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.992015][ T9142] RAX: ffffffffffffffda RBX: 00007f368f815fa0 RCX: 00007f368f59acb9 [ 271.992034][ T9142] RDX: 000000000000eaff RSI: 0000000000000000 RDI: 0000000000000008 [ 271.992052][ T9142] RBP: 00007f368f608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 271.992069][ T9142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.992085][ T9142] R13: 00007f368f816038 R14: 00007f368f815fa0 R15: 00007ffd68a17ad8 [ 271.992125][ T9142] [ 273.033207][ T9149] mkiss: ax0: crc mode is auto. [ 273.258098][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 274.907651][ T9210] netlink: 206 bytes leftover after parsing attributes in process `syz.1.718'. [ 275.657417][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 275.668777][ T5889] smpboot: CPU 1 is now offline [ 275.727403][ T9233] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 276.324859][ T9259] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(16) [ 276.687257][ T9268] FAULT_INJECTION: forcing a failure. [ 276.687257][ T9268] name fail_futex, interval 1, probability 0, space 0, times 0 [ 276.743764][ T9268] CPU: 1 UID: 0 PID: 9268 Comm: syz.4.730 Not tainted syzkaller #0 PREEMPT(full) [ 276.743803][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 276.743820][ T9268] Call Trace: [ 276.743830][ T9268] [ 276.743840][ T9268] dump_stack_lvl+0x100/0x190 [ 276.743879][ T9268] should_fail_ex.cold+0x5/0xa [ 276.743926][ T9268] get_futex_key+0x1d2/0x1620 [ 276.743967][ T9268] ? __pfx_get_futex_key+0x10/0x10 [ 276.744015][ T9268] futex_wake+0xea/0x530 [ 276.744062][ T9268] ? __pfx_futex_wake+0x10/0x10 [ 276.744111][ T9268] ? getname_flags.part.0+0x3ad/0x540 [ 276.744151][ T9268] ? getname_flags.part.0+0x1c5/0x540 [ 276.744197][ T9268] do_futex+0x32b/0x350 [ 276.744235][ T9268] ? __pfx_do_futex+0x10/0x10 [ 276.744269][ T9268] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.744318][ T9268] __x64_sys_futex+0x34f/0x4d0 [ 276.744367][ T9268] ? __x64_sys_openat+0x12d/0x210 [ 276.744407][ T9268] ? __pfx___x64_sys_futex+0x10/0x10 [ 276.744456][ T9268] do_syscall_64+0xc9/0xf80 [ 276.744491][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.744518][ T9268] RIP: 0033:0x7f748e79acb9 [ 276.744540][ T9268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.744566][ T9268] RSP: 002b:00007f748f7050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 276.744592][ T9268] RAX: ffffffffffffffda RBX: 00007f748ea15fa8 RCX: 00007f748e79acb9 [ 276.744611][ T9268] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f748ea15fac [ 276.744628][ T9268] RBP: 00007f748ea15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 276.744644][ T9268] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 276.744662][ T9268] R13: 00007f748ea16038 R14: 00007ffeaa387f00 R15: 00007ffeaa387fe8 [ 276.744698][ T9268] [ 279.572889][ T9344] snd_virmidi snd_virmidi.0: control 61675:216:3:yª:0 is already present [ 279.902809][ T9359] FAULT_INJECTION: forcing a failure. [ 279.902809][ T9359] name failslab, interval 1, probability 0, space 0, times 0 [ 279.934959][ T9359] CPU: 1 UID: 0 PID: 9359 Comm: syz.4.750 Not tainted syzkaller #0 PREEMPT(full) [ 279.934998][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 279.935016][ T9359] Call Trace: [ 279.935025][ T9359] [ 279.935036][ T9359] dump_stack_lvl+0x100/0x190 [ 279.935076][ T9359] should_fail_ex.cold+0x5/0xa [ 279.935123][ T9359] should_failslab+0xc2/0x120 [ 279.935161][ T9359] ? drm_atomic_state_init+0x183/0x540 [ 279.935194][ T9359] __kmalloc_noprof+0xf6/0x9c0 [ 279.935234][ T9359] ? drm_atomic_state_init+0x183/0x540 [ 279.935267][ T9359] drm_atomic_state_init+0x183/0x540 [ 279.935300][ T9359] ? kasan_save_track+0x14/0x30 [ 279.935338][ T9359] drm_atomic_state_alloc+0xd3/0x120 [ 279.935373][ T9359] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 279.935421][ T9359] ? trace_contention_end+0xd6/0x110 [ 279.935461][ T9359] ? __mutex_lock+0x26a/0x1b90 [ 279.935496][ T9359] ? __mutex_lock+0x26a/0x1b90 [ 279.935529][ T9359] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 279.935569][ T9359] ? drm_master_internal_acquire+0x21/0x80 [ 279.935644][ T9359] drm_client_modeset_commit_locked+0x14d/0x580 [ 279.935689][ T9359] drm_client_modeset_commit+0x4f/0x80 [ 279.935729][ T9359] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 279.935771][ T9359] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 279.935814][ T9359] drm_fbdev_client_restore+0x1b/0x30 [ 279.935845][ T9359] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 279.935875][ T9359] drm_client_dev_restore+0x205/0x2a0 [ 279.935919][ T9359] drm_release+0x2c6/0x360 [ 279.935959][ T9359] ? __pfx_drm_release+0x10/0x10 [ 279.935994][ T9359] __fput+0x3ff/0xb40 [ 279.936040][ T9359] task_work_run+0x150/0x240 [ 279.936085][ T9359] ? __pfx_task_work_run+0x10/0x10 [ 279.936138][ T9359] exit_to_user_mode_loop+0x100/0x4b0 [ 279.936177][ T9359] ? rcu_is_watching+0x12/0xc0 [ 279.936207][ T9359] do_syscall_64+0x4ea/0xf80 [ 279.936242][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.936271][ T9359] RIP: 0033:0x7f748e79acb9 [ 279.936292][ T9359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.936320][ T9359] RSP: 002b:00007f748f705028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 279.936347][ T9359] RAX: 0000000000000000 RBX: 00007f748ea15fa0 RCX: 00007f748e79acb9 [ 279.936366][ T9359] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 279.936383][ T9359] RBP: 00007f748e808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 279.936405][ T9359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.936421][ T9359] R13: 00007f748ea16038 R14: 00007f748ea15fa0 R15: 00007ffeaa387fe8 [ 279.936461][ T9359] [ 283.267203][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 283.277778][ T8704] smpboot: CPU 1 is now offline [ 286.109935][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.764'. [ 286.994899][ T9463] FAULT_INJECTION: forcing a failure. [ 286.994899][ T9463] name fail_futex, interval 1, probability 0, space 0, times 0 [ 287.077484][ T9463] CPU: 0 UID: 0 PID: 9463 Comm: syz.1.774 Not tainted syzkaller #0 PREEMPT(full) [ 287.077508][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 287.077518][ T9463] Call Trace: [ 287.077523][ T9463] [ 287.077529][ T9463] dump_stack_lvl+0x100/0x190 [ 287.077561][ T9463] should_fail_ex.cold+0x5/0xa [ 287.077586][ T9463] get_futex_key+0x1d2/0x1620 [ 287.077608][ T9463] ? __pfx_get_futex_key+0x10/0x10 [ 287.077625][ T9463] ? stack_depot_save_flags+0x27/0x9c0 [ 287.077647][ T9463] ? __lock_acquire+0x4a5/0x2630 [ 287.077671][ T9463] futex_wait_setup+0x81/0x500 [ 287.077690][ T9463] __futex_wait+0x19f/0x300 [ 287.077706][ T9463] ? __pfx___futex_wait+0x10/0x10 [ 287.077722][ T9463] ? __pfx_futex_wake_mark+0x10/0x10 [ 287.077749][ T9463] ? futex_hash+0x2c5/0x380 [ 287.077773][ T9463] futex_wait+0xed/0x380 [ 287.077786][ T9463] ? __pfx_futex_wait+0x10/0x10 [ 287.077804][ T9463] ? getname_flags.part.0+0x3ad/0x540 [ 287.077824][ T9463] ? getname_flags.part.0+0x1c5/0x540 [ 287.077847][ T9463] do_futex+0x1ef/0x350 [ 287.077866][ T9463] ? __pfx_do_futex+0x10/0x10 [ 287.077884][ T9463] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.077909][ T9463] __x64_sys_futex+0x34f/0x4d0 [ 287.077930][ T9463] ? __x64_sys_openat+0x12d/0x210 [ 287.077951][ T9463] ? __pfx___x64_sys_futex+0x10/0x10 [ 287.077969][ T9463] ? xfd_validate_state+0x129/0x190 [ 287.077997][ T9463] do_syscall_64+0xc9/0xf80 [ 287.078016][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.078031][ T9463] RIP: 0033:0x7febd4b9acb9 [ 287.078043][ T9463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.078058][ T9463] RSP: 002b:00007febd59b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 287.078072][ T9463] RAX: ffffffffffffffda RBX: 00007febd4e15fa8 RCX: 00007febd4b9acb9 [ 287.078082][ T9463] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007febd4e15fa8 [ 287.078091][ T9463] RBP: 00007febd4e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 287.078100][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.078108][ T9463] R13: 00007febd4e16038 R14: 00007ffc62fecb80 R15: 00007ffc62fecc68 [ 287.078127][ T9463] [ 290.799944][ T9502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.780'. [ 291.700732][ T9487] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 294.126718][ T9553] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 296.484283][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 296.494085][ T5896] smpboot: CPU 1 is now offline [ 296.641645][ T9603] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 296.682824][ T9580] ------------[ cut here ]------------ [ 296.683791][ T9580] [ 296.683804][ T9580] ====================================================== [ 296.683814][ T9580] WARNING: possible circular locking dependency detected [ 296.683825][ T9580] syzkaller #0 Not tainted [ 296.683838][ T9580] ------------------------------------------------------ [ 296.683847][ T9580] syz.0.799/9580 is trying to acquire lock: [ 296.683863][ T9580] ffffffff8e4eef60 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 296.683940][ T9580] [ 296.683940][ T9580] but task is already holding lock: [ 296.683948][ T9580] ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 296.684005][ T9580] [ 296.684005][ T9580] which lock already depends on the new lock. [ 296.684005][ T9580] [ 296.684014][ T9580] [ 296.684014][ T9580] the existing dependency chain (in reverse order) is: [ 296.684023][ T9580] [ 296.684023][ T9580] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 296.684058][ T9580] _raw_spin_lock_nested+0x31/0x40 [ 296.684082][ T9580] raw_spin_rq_lock_nested+0x29/0x130 [ 296.684109][ T9580] task_rq_lock+0xcf/0x490 [ 296.684135][ T9580] cgroup_move_task+0x81/0x2a0 [ 296.684162][ T9580] css_set_move_task+0x285/0x600 [ 296.684189][ T9580] cgroup_post_fork+0x1fe/0x9b0 [ 296.684215][ T9580] copy_process+0x57b0/0x7890 [ 296.684248][ T9580] kernel_clone+0xfc/0x930 [ 296.684278][ T9580] user_mode_thread+0xcc/0x110 [ 296.684311][ T9580] rest_init+0x21/0x260 [ 296.684343][ T9580] start_kernel+0x47a/0x480 [ 296.684380][ T9580] x86_64_start_reservations+0x24/0x30 [ 296.684406][ T9580] x86_64_start_kernel+0x122/0x130 [ 296.684429][ T9580] common_startup_64+0x13e/0x148 [ 296.684458][ T9580] [ 296.684458][ T9580] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 296.684491][ T9580] _raw_spin_lock_irqsave+0x3a/0x60 [ 296.684515][ T9580] try_to_wake_up+0xb2/0x1a60 [ 296.684539][ T9580] __wake_up_common+0x135/0x1f0 [ 296.684572][ T9580] __wake_up+0x31/0x60 [ 296.684598][ T9580] tty_port_default_wakeup+0x47/0x60 [ 296.684640][ T9580] serial8250_tx_chars+0x68f/0x860 [ 296.684678][ T9580] serial8250_handle_irq+0x73e/0xcb0 [ 296.684703][ T9580] serial8250_default_handle_irq+0x9e/0x270 [ 296.684729][ T9580] serial8250_interrupt+0xf8/0x1d0 [ 296.684756][ T9580] __handle_irq_event_percpu+0x232/0x800 [ 296.684781][ T9580] handle_irq_event+0xab/0x1e0 [ 296.684809][ T9580] handle_edge_irq+0x375/0x970 [ 296.684847][ T9580] __common_interrupt+0xd8/0x2f0 [ 296.684881][ T9580] common_interrupt+0xb9/0xe0 [ 296.684916][ T9580] asm_common_interrupt+0x26/0x40 [ 296.684942][ T9580] stack_access_ok+0xc/0x1d0 [ 296.684971][ T9580] unwind_next_frame+0xb0b/0x1ea0 [ 296.685000][ T9580] arch_stack_walk+0x94/0xf0 [ 296.685027][ T9580] stack_trace_save+0x8e/0xc0 [ 296.685053][ T9580] save_stack+0x162/0x1e0 [ 296.685081][ T9580] __set_page_owner+0x8c/0x540 [ 296.685110][ T9580] post_alloc_hook+0x1e1/0x250 [ 296.685136][ T9580] get_page_from_freelist+0xe3d/0x2e10 [ 296.685164][ T9580] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 296.685194][ T9580] alloc_pages_mpol+0x1fb/0x550 [ 296.685227][ T9580] folio_alloc_mpol_noprof+0x36/0x340 [ 296.685265][ T9580] vma_alloc_folio_noprof+0xed/0x1d0 [ 296.685303][ T9580] do_wp_page+0x1eb4/0x4c10 [ 296.685338][ T9580] __handle_mm_fault+0x1ac0/0x2b50 [ 296.685364][ T9580] handle_mm_fault+0x36d/0xa20 [ 296.685389][ T9580] do_user_addr_fault+0x5a3/0x12f0 [ 296.685416][ T9580] exc_page_fault+0x6f/0xd0 [ 296.685441][ T9580] asm_exc_page_fault+0x26/0x30 [ 296.685465][ T9580] [ 296.685465][ T9580] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 296.685499][ T9580] _raw_spin_lock_irqsave+0x3a/0x60 [ 296.685523][ T9580] __wake_up+0x1c/0x60 [ 296.685548][ T9580] tty_port_default_wakeup+0x47/0x60 [ 296.685587][ T9580] serial8250_tx_chars+0x68f/0x860 [ 296.685625][ T9580] serial8250_handle_irq+0x73e/0xcb0 [ 296.685649][ T9580] serial8250_default_handle_irq+0x9e/0x270 [ 296.685675][ T9580] serial8250_interrupt+0xf8/0x1d0 [ 296.685702][ T9580] __handle_irq_event_percpu+0x232/0x800 [ 296.685726][ T9580] handle_irq_event+0xab/0x1e0 [ 296.685748][ T9580] handle_edge_irq+0x375/0x970 [ 296.685784][ T9580] __common_interrupt+0xd8/0x2f0 [ 296.685823][ T9580] common_interrupt+0xb9/0xe0 [ 296.685857][ T9580] asm_common_interrupt+0x26/0x40 [ 296.685882][ T9580] pv_native_safe_halt+0xf/0x20 [ 296.685907][ T9580] default_idle+0x9/0x10 [ 296.685937][ T9580] default_idle_call+0x6c/0xb0 [ 296.685968][ T9580] do_idle+0x35b/0x4b0 [ 296.685991][ T9580] cpu_startup_entry+0x4f/0x60 [ 296.686015][ T9580] rest_init+0x251/0x260 [ 296.686047][ T9580] start_kernel+0x47a/0x480 [ 296.686082][ T9580] x86_64_start_reservations+0x24/0x30 [ 296.686107][ T9580] x86_64_start_kernel+0x122/0x130 [ 296.686131][ T9580] common_startup_64+0x13e/0x148 [ 296.686159][ T9580] [ 296.686159][ T9580] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 296.686192][ T9580] _raw_spin_lock_irqsave+0x3a/0x60 [ 296.686215][ T9580] serial8250_console_write+0x17e/0x1900 [ 296.686242][ T9580] console_flush_one_record+0x790/0xe50 [ 296.686266][ T9580] console_unlock+0x103/0x260 [ 296.686287][ T9580] vprintk_emit+0x407/0x6b0 [ 296.686310][ T9580] _printk+0xcf/0x110 [ 296.686332][ T9580] register_console.cold+0xc0/0x248 [ 296.686357][ T9580] univ8250_console_init+0x6f/0x80 [ 296.686388][ T9580] console_init+0x371/0x520 [ 296.686415][ T9580] start_kernel+0x300/0x480 [ 296.686450][ T9580] x86_64_start_reservations+0x24/0x30 [ 296.686475][ T9580] x86_64_start_kernel+0x122/0x130 [ 296.686499][ T9580] common_startup_64+0x13e/0x148 [ 296.686527][ T9580] [ 296.686527][ T9580] -> #0 (console_owner){-...}-{0:0}: [ 296.686560][ T9580] __lock_acquire+0x14b8/0x2630 [ 296.686591][ T9580] lock_acquire+0x17c/0x330 [ 296.686621][ T9580] console_lock_spinning_enable+0x72/0x80 [ 296.686660][ T9580] console_flush_one_record+0x739/0xe50 [ 296.686684][ T9580] console_unlock+0x103/0x260 [ 296.686705][ T9580] vprintk_emit+0x407/0x6b0 [ 296.686728][ T9580] _printk+0xcf/0x110 [ 296.686749][ T9580] __report_bug.cold+0x15/0x137 [ 296.686775][ T9580] report_bug+0xb2/0x220 [ 296.686816][ T9580] handle_bug+0x166/0x2a0 [ 296.686846][ T9580] exc_invalid_op+0x17/0x50 [ 296.686876][ T9580] asm_exc_invalid_op+0x1a/0x20 [ 296.686900][ T9580] update_rq_clock+0x34a/0xd30 [ 296.686927][ T9580] __schedule+0x1b0d/0x5e10 [ 296.686950][ T9580] preempt_schedule_irq+0x50/0x90 [ 296.686976][ T9580] irqentry_exit+0x17b/0x670 [ 296.687003][ T9580] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 296.687029][ T9580] kasan_check_range+0x180/0x1e0 [ 296.687066][ T9580] __asan_memset+0x23/0x50 [ 296.687090][ T9580] __unwind_start+0x2e/0x7f0 [ 296.687118][ T9580] arch_stack_walk+0x73/0xf0 [ 296.687144][ T9580] stack_trace_save+0x8e/0xc0 [ 296.687170][ T9580] save_stack+0x162/0x1e0 [ 296.687196][ T9580] __reset_page_owner+0x84/0x190 [ 296.687226][ T9580] free_unref_folios+0xb2a/0x1760 [ 296.687252][ T9580] folios_put_refs+0x53c/0x840 [ 296.687284][ T9580] shmem_undo_range+0x5d8/0x14b0 [ 296.687314][ T9580] shmem_evict_inode+0x39e/0xbd0 [ 296.687343][ T9580] evict+0x3c2/0xad0 [ 296.687374][ T9580] iput.part.0+0x624/0x1150 [ 296.687406][ T9580] iput+0x35/0x40 [ 296.687436][ T9580] dentry_unlink_inode+0x2a1/0x490 [ 296.687467][ T9580] __dentry_kill+0x1d0/0x600 [ 296.687499][ T9580] finish_dput+0x76/0x480 [ 296.687532][ T9580] dput.part.0+0x456/0x570 [ 296.687565][ T9580] dput+0x1f/0x30 [ 296.687596][ T9580] __fput+0x519/0xb40 [ 296.687627][ T9580] task_work_run+0x150/0x240 [ 296.687662][ T9580] do_exit+0x829/0x2a30 [ 296.687696][ T9580] do_group_exit+0xd5/0x2a0 [ 296.687731][ T9580] get_signal+0x1ec7/0x21e0 [ 296.687758][ T9580] arch_do_signal_or_restart+0x91/0x770 [ 296.687792][ T9580] exit_to_user_mode_loop+0x86/0x4b0 [ 296.687831][ T9580] do_syscall_64+0x4ea/0xf80 [ 296.687858][ T9580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.687883][ T9580] [ 296.687883][ T9580] other info that might help us debug this: [ 296.687883][ T9580] [ 296.687891][ T9580] Chain exists of: [ 296.687891][ T9580] console_owner --> &p->pi_lock --> &rq->__lock [ 296.687891][ T9580] [ 296.687928][ T9580] Possible unsafe locking scenario: [ 296.687928][ T9580] [ 296.687934][ T9580] CPU0 CPU1 [ 296.687942][ T9580] ---- ---- [ 296.687948][ T9580] lock(&rq->__lock); [ 296.687964][ T9580] lock(&p->pi_lock); [ 296.687981][ T9580] lock(&rq->__lock); [ 296.687999][ T9580] lock(console_owner); [ 296.688015][ T9580] [ 296.688015][ T9580] *** DEADLOCK *** [ 296.688015][ T9580] [ 296.688021][ T9580] 3 locks held by syz.0.799/9580: [ 296.688036][ T9580] #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 296.688097][ T9580] #1: ffffffff8e5cf3a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 296.688154][ T9580] #2: ffffffff8e5cf418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 296.688213][ T9580] [ 296.688213][ T9580] stack backtrace: [ 296.688225][ T9580] CPU: 0 UID: 0 PID: 9580 Comm: syz.0.799 Not tainted syzkaller #0 PREEMPT(full) [ 296.688257][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 296.688273][ T9580] Call Trace: [ 296.688281][ T9580] [ 296.688291][ T9580] dump_stack_lvl+0x100/0x190 [ 296.688321][ T9580] print_circular_bug.cold+0x178/0x1c7 [ 296.688363][ T9580] check_noncircular+0x146/0x160 [ 296.688398][ T9580] __lock_acquire+0x14b8/0x2630 [ 296.688437][ T9580] lock_acquire+0x17c/0x330 [ 296.688469][ T9580] ? console_lock_spinning_enable+0x61/0x80 [ 296.688511][ T9580] ? console_lock_spinning_enable+0x4a/0x80 [ 296.688555][ T9580] console_lock_spinning_enable+0x72/0x80 [ 296.688595][ T9580] ? console_lock_spinning_enable+0x61/0x80 [ 296.688635][ T9580] console_flush_one_record+0x739/0xe50 [ 296.688664][ T9580] ? __pfx_console_flush_one_record+0x10/0x10 [ 296.688695][ T9580] ? is_printk_cpu_sync_owner+0x32/0x40 [ 296.688727][ T9580] console_unlock+0x103/0x260 [ 296.688751][ T9580] ? __pfx_console_unlock+0x10/0x10 [ 296.688777][ T9580] ? do_raw_spin_unlock+0x145/0x1e0 [ 296.688821][ T9580] ? _printk+0xcf/0x110 [ 296.688846][ T9580] vprintk_emit+0x407/0x6b0 [ 296.688872][ T9580] ? __pfx_vprintk_emit+0x10/0x10 [ 296.688897][ T9580] ? lock_acquire+0x17c/0x330 [ 296.688929][ T9580] ? find_held_lock+0x2b/0x80 [ 296.688958][ T9580] _printk+0xcf/0x110 [ 296.688981][ T9580] ? __pfx__printk+0x10/0x10 [ 296.689006][ T9580] ? rcu_is_watching+0x12/0xc0 [ 296.689032][ T9580] ? trace_sched_exit_tp+0xcd/0x100 [ 296.689063][ T9580] ? __schedule+0xf65/0x5e10 [ 296.689087][ T9580] ? __report_bug.cold+0x5/0x137 [ 296.689115][ T9580] ? __report_bug+0x377/0x3d0 [ 296.689141][ T9580] __report_bug.cold+0x15/0x137 [ 296.689168][ T9580] ? update_rq_clock+0x34a/0xd30 [ 296.689198][ T9580] ? __pfx___report_bug+0x10/0x10 [ 296.689224][ T9580] ? __lock_acquire+0x4a5/0x2630 [ 296.689263][ T9580] ? update_rq_clock+0x34a/0xd30 [ 296.689292][ T9580] report_bug+0xb2/0x220 [ 296.689317][ T9580] ? update_rq_clock+0x34a/0xd30 [ 296.689346][ T9580] handle_bug+0x166/0x2a0 [ 296.689378][ T9580] exc_invalid_op+0x17/0x50 [ 296.689411][ T9580] asm_exc_invalid_op+0x1a/0x20 [ 296.689437][ T9580] RIP: 0010:update_rq_clock+0x34a/0xd30 [ 296.689468][ T9580] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 eb a2 09 a8 04 0f 84 9e fd ff ff 90 0f 0b 90 e9 95 fd ff ff 90 <0f> 0b 90 e9 51 fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 296.689494][ T9580] RSP: 0018:ffffc900050b6c40 EFLAGS: 00010046 [ 296.689515][ T9580] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 296.689533][ T9580] RDX: 0000000000000046 RSI: ffffffff8dc1b2ac RDI: ffffffff8bfa32a0 [ 296.689551][ T9580] RBP: ffffc900050b6de8 R08: 0000000000000001 R09: 0000000000000001 [ 296.689568][ T9580] R10: ffffffff90b75dd7 R11: 0000000000000000 R12: ffffffff90b78e54 [ 296.689586][ T9580] R13: ffff8880b853bbf0 R14: ffff88801dedbd00 R15: ffff8880b853adc0 [ 296.689616][ T9580] __schedule+0x1b0d/0x5e10 [ 296.689641][ T9580] ? finish_task_switch.isra.0+0x204/0xb70 [ 296.689671][ T9580] ? lockdep_hardirqs_on+0x78/0x100 [ 296.689708][ T9580] ? __pfx___schedule+0x10/0x10 [ 296.689738][ T9580] preempt_schedule_irq+0x50/0x90 [ 296.689766][ T9580] irqentry_exit+0x17b/0x670 [ 296.689802][ T9580] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 296.689830][ T9580] RIP: 0010:kasan_check_range+0x180/0x1e0 [ 296.689871][ T9580] Code: ff ff ff 48 85 d2 74 98 48 01 ea eb 1a 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 83 c0 01 48 39 d0 0f 84 79 ff ff ff 80 38 00 <74> ee e9 57 ff ff ff b8 01 00 00 00 e9 7f 70 07 09 48 29 c3 48 89 [ 296.689897][ T9580] RSP: 0018:ffffc900050b6ef0 EFLAGS: 00000246 [ 296.689917][ T9580] RAX: fffff52000a16df0 RBX: fffff52000a16dfc RCX: ffffffff81b65eae [ 296.689936][ T9580] RDX: fffff52000a16dfc RSI: 0000000000000060 RDI: ffffc900050b6f80 [ 296.689954][ T9580] RBP: fffff52000a16df0 R08: 0000000000000001 R09: fffff52000a16dfb [ 296.689972][ T9580] R10: ffffc900050b6fdf R11: 0000000000000000 R12: 0000000000000000 [ 296.689989][ T9580] R13: ffffc900050b7040 R14: ffffc900050b6f80 R15: ffffc900050b6fa8 [ 296.690012][ T9580] ? __unwind_start+0x2e/0x7f0 [ 296.690046][ T9580] __asan_memset+0x23/0x50 [ 296.690072][ T9580] __unwind_start+0x2e/0x7f0 [ 296.690103][ T9580] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.690134][ T9580] arch_stack_walk+0x73/0xf0 [ 296.690169][ T9580] stack_trace_save+0x8e/0xc0 [ 296.690197][ T9580] ? __pfx_stack_trace_save+0x10/0x10 [ 296.690227][ T9580] ? __lock_acquire+0x4a5/0x2630 [ 296.690260][ T9580] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 296.690287][ T9580] ? lockdep_hardirqs_on+0x78/0x100 [ 296.690317][ T9580] save_stack+0x162/0x1e0 [ 296.690346][ T9580] ? __pfx_save_stack+0x10/0x10 [ 296.690381][ T9580] ? page_ext_put+0x3e/0xd0 [ 296.690413][ T9580] __reset_page_owner+0x84/0x190 [ 296.690446][ T9580] free_unref_folios+0xb2a/0x1760 [ 296.690476][ T9580] ? folios_put_refs+0x450/0x840 [ 296.690509][ T9580] ? rcu_is_watching+0x12/0xc0 [ 296.690535][ T9580] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 296.690563][ T9580] folios_put_refs+0x53c/0x840 [ 296.690600][ T9580] ? __pfx_folios_put_refs+0x10/0x10 [ 296.690635][ T9580] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 296.690679][ T9580] shmem_undo_range+0x5d8/0x14b0 [ 296.690715][ T9580] ? __pfx_shmem_undo_range+0x10/0x10 [ 296.690763][ T9580] ? find_held_lock+0x2b/0x80 [ 296.690807][ T9580] ? percpu_counter_add_batch+0xb9/0x230 [ 296.690847][ T9580] shmem_evict_inode+0x39e/0xbd0 [ 296.690881][ T9580] ? inode_wait_for_writeback+0x171/0x390 [ 296.690907][ T9580] ? __pfx_shmem_evict_inode+0x10/0x10 [ 296.690940][ T9580] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 296.690985][ T9580] ? find_held_lock+0x2b/0x80 [ 296.691009][ T9580] ? evict+0x37e/0xad0 [ 296.691041][ T9580] ? evict+0x37e/0xad0 [ 296.691075][ T9580] ? __pfx_shmem_evict_inode+0x10/0x10 [ 296.691108][ T9580] evict+0x3c2/0xad0 [ 296.691140][ T9580] ? find_held_lock+0x2b/0x80 [ 296.691167][ T9580] ? __pfx_evict+0x10/0x10 [ 296.691202][ T9580] ? iput.part.0+0x61c/0x1150 [ 296.691241][ T9580] iput.part.0+0x624/0x1150 [ 296.691277][ T9580] iput+0x35/0x40 [ 296.691310][ T9580] dentry_unlink_inode+0x2a1/0x490 [ 296.691344][ T9580] __dentry_kill+0x1d0/0x600 [ 296.691379][ T9580] finish_dput+0x76/0x480 [ 296.691415][ T9580] dput.part.0+0x456/0x570 [ 296.691451][ T9580] dput+0x1f/0x30 [ 296.691485][ T9580] __fput+0x519/0xb40 [ 296.691521][ T9580] task_work_run+0x150/0x240 [ 296.691560][ T9580] ? __pfx_task_work_run+0x10/0x10 [ 296.691599][ T9580] ? do_raw_spin_unlock+0x145/0x1e0 [ 296.691641][ T9580] do_exit+0x829/0x2a30 [ 296.691676][ T9580] ? __pfx___might_resched+0x10/0x10 [ 296.691714][ T9580] ? rcu_is_watching+0x12/0xc0 [ 296.691741][ T9580] ? __pfx_do_exit+0x10/0x10 [ 296.691777][ T9580] ? do_raw_spin_lock+0x128/0x260 [ 296.691819][ T9580] ? find_held_lock+0x2b/0x80 [ 296.691844][ T9580] ? get_signal+0x7e0/0x21e0 [ 296.691875][ T9580] do_group_exit+0xd5/0x2a0 [ 296.691914][ T9580] get_signal+0x1ec7/0x21e0 [ 296.691943][ T9580] ? madvise_unlock+0x172/0x220 [ 296.691983][ T9580] ? madvise_unlock+0xa9/0x220 [ 296.692020][ T9580] ? __pfx_get_signal+0x10/0x10 [ 296.692049][ T9580] ? __pfx_do_madvise+0x10/0x10 [ 296.692087][ T9580] ? do_futex+0x192/0x350 [ 296.692124][ T9580] arch_do_signal_or_restart+0x91/0x770 [ 296.692160][ T9580] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 296.692201][ T9580] ? xfd_validate_state+0x129/0x190 [ 296.692244][ T9580] exit_to_user_mode_loop+0x86/0x4b0 [ 296.692279][ T9580] ? rcu_is_watching+0x12/0xc0 [ 296.692305][ T9580] do_syscall_64+0x4ea/0xf80 [ 296.692335][ T9580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.692362][ T9580] RIP: 0033:0x7ff5ff19acb9 [ 296.692382][ T9580] Code: Unable to access opcode bytes at 0x7ff5ff19ac8f. [ 296.692394][ T9580] RSP: 002b:00007ff60001c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 296.692419][ T9580] RAX: fffffffffffffffc RBX: 00007ff5ff416090 RCX: 00007ff5ff19acb9 [ 296.692437][ T9580] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 296.692455][ T9580] RBP: 00007ff5ff208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 296.692471][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.692487][ T9580] R13: 00007ff5ff416128 R14: 00007ff5ff416090 R15: 00007ffda687b578 [ 296.692514][ T9580] [ 298.392558][ T9580] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 298.392587][ T9580] WARNING: kernel/sched/sched.h:1571 at update_rq_clock+0x34a/0xd30, CPU#0: syz.0.799/9580 [ 298.410378][ T9580] Modules linked in: [ 298.414293][ T9580] CPU: 0 UID: 0 PID: 9580 Comm: syz.0.799 Not tainted syzkaller #0 PREEMPT(full) [ 298.423504][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 298.433565][ T9580] RIP: 0010:update_rq_clock+0x34a/0xd30 [ 298.439127][ T9580] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 eb a2 09 a8 04 0f 84 9e fd ff ff 90 0f 0b 90 e9 95 fd ff ff 90 <0f> 0b 90 e9 51 fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 298.458749][ T9580] RSP: 0018:ffffc900050b6c40 EFLAGS: 00010046 [ 298.464821][ T9580] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 298.472798][ T9580] RDX: 0000000000000046 RSI: ffffffff8dc1b2ac RDI: ffffffff8bfa32a0 [ 298.480780][ T9580] RBP: ffffc900050b6de8 R08: 0000000000000001 R09: 0000000000000001 [ 298.488923][ T9580] R10: ffffffff90b75dd7 R11: 0000000000000000 R12: ffffffff90b78e54 [ 298.496897][ T9580] R13: ffff8880b853bbf0 R14: ffff88801dedbd00 R15: ffff8880b853adc0 [ 298.504871][ T9580] FS: 0000000000000000(0000) GS:ffff8881245e5000(0000) knlGS:0000000000000000 [ 298.513804][ T9580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.520387][ T9580] CR2: 00007f090f860a10 CR3: 0000000065170000 CR4: 00000000003526f0 [ 298.528361][ T9580] Call Trace: [ 298.531642][ T9580] [ 298.534577][ T9580] __schedule+0x1b0d/0x5e10 [ 298.539089][ T9580] ? finish_task_switch.isra.0+0x204/0xb70 [ 298.544910][ T9580] ? lockdep_hardirqs_on+0x78/0x100 [ 298.550125][ T9580] ? __pfx___schedule+0x10/0x10 [ 298.554981][ T9580] preempt_schedule_irq+0x50/0x90 [ 298.560014][ T9580] irqentry_exit+0x17b/0x670 [ 298.564611][ T9580] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 298.570077][ T9580] RIP: 0010:kasan_check_range+0x180/0x1e0 [ 298.575820][ T9580] Code: ff ff ff 48 85 d2 74 98 48 01 ea eb 1a 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 83 c0 01 48 39 d0 0f 84 79 ff ff ff 80 38 00 <74> ee e9 57 ff ff ff b8 01 00 00 00 e9 7f 70 07 09 48 29 c3 48 89 [ 298.595444][ T9580] RSP: 0018:ffffc900050b6ef0 EFLAGS: 00000246 [ 298.601530][ T9580] RAX: fffff52000a16df0 RBX: fffff52000a16dfc RCX: ffffffff81b65eae [ 298.609512][ T9580] RDX: fffff52000a16dfc RSI: 0000000000000060 RDI: ffffc900050b6f80 [ 298.617484][ T9580] RBP: fffff52000a16df0 R08: 0000000000000001 R09: fffff52000a16dfb [ 298.625452][ T9580] R10: ffffc900050b6fdf R11: 0000000000000000 R12: 0000000000000000 [ 298.633422][ T9580] R13: ffffc900050b7040 R14: ffffc900050b6f80 R15: ffffc900050b6fa8 [ 298.641398][ T9580] ? __unwind_start+0x2e/0x7f0 [ 298.646178][ T9580] __asan_memset+0x23/0x50 [ 298.650601][ T9580] __unwind_start+0x2e/0x7f0 [ 298.655198][ T9580] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.661359][ T9580] arch_stack_walk+0x73/0xf0 [ 298.665975][ T9580] stack_trace_save+0x8e/0xc0 [ 298.670776][ T9580] ? __pfx_stack_trace_save+0x10/0x10 [ 298.676163][ T9580] ? __lock_acquire+0x4a5/0x2630 [ 298.681108][ T9580] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 298.686919][ T9580] ? lockdep_hardirqs_on+0x78/0x100 [ 298.692124][ T9580] save_stack+0x162/0x1e0 [ 298.696718][ T9580] ? __pfx_save_stack+0x10/0x10 [ 298.701578][ T9580] ? page_ext_put+0x3e/0xd0 [ 298.706086][ T9580] __reset_page_owner+0x84/0x190 [ 298.711031][ T9580] free_unref_folios+0xb2a/0x1760 [ 298.716066][ T9580] ? folios_put_refs+0x450/0x840 [ 298.721016][ T9580] ? rcu_is_watching+0x12/0xc0 [ 298.725781][ T9580] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 298.731592][ T9580] folios_put_refs+0x53c/0x840 [ 298.736370][ T9580] ? __pfx_folios_put_refs+0x10/0x10 [ 298.741667][ T9580] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 298.748020][ T9580] shmem_undo_range+0x5d8/0x14b0 [ 298.752972][ T9580] ? __pfx_shmem_undo_range+0x10/0x10 [ 298.758366][ T9580] ? find_held_lock+0x2b/0x80 [ 298.763060][ T9580] ? percpu_counter_add_batch+0xb9/0x230 [ 298.768712][ T9580] shmem_evict_inode+0x39e/0xbd0 [ 298.773658][ T9580] ? inode_wait_for_writeback+0x171/0x390 [ 298.779383][ T9580] ? __pfx_shmem_evict_inode+0x10/0x10 [ 298.784852][ T9580] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 298.790944][ T9580] ? find_held_lock+0x2b/0x80 [ 298.795632][ T9580] ? evict+0x37e/0xad0 [ 298.799718][ T9580] ? evict+0x37e/0xad0 [ 298.803799][ T9580] ? __pfx_shmem_evict_inode+0x10/0x10 [ 298.809270][ T9580] evict+0x3c2/0xad0 [ 298.813174][ T9580] ? find_held_lock+0x2b/0x80 [ 298.817853][ T9580] ? __pfx_evict+0x10/0x10 [ 298.822280][ T9580] ? iput.part.0+0x61c/0x1150 [ 298.827061][ T9580] iput.part.0+0x624/0x1150 [ 298.831576][ T9580] iput+0x35/0x40 [ 298.835222][ T9580] dentry_unlink_inode+0x2a1/0x490 [ 298.840342][ T9580] __dentry_kill+0x1d0/0x600 [ 298.844946][ T9580] finish_dput+0x76/0x480 [ 298.849291][ T9580] dput.part.0+0x456/0x570 [ 298.853721][ T9580] dput+0x1f/0x30 [ 298.857363][ T9580] __fput+0x519/0xb40 [ 298.861357][ T9580] task_work_run+0x150/0x240 [ 298.865964][ T9580] ? __pfx_task_work_run+0x10/0x10 [ 298.871094][ T9580] ? do_raw_spin_unlock+0x145/0x1e0 [ 298.876316][ T9580] do_exit+0x829/0x2a30 [ 298.880486][ T9580] ? __pfx___might_resched+0x10/0x10 [ 298.885789][ T9580] ? rcu_is_watching+0x12/0xc0 [ 298.890555][ T9580] ? __pfx_do_exit+0x10/0x10 [ 298.895242][ T9580] ? do_raw_spin_lock+0x128/0x260 [ 298.900284][ T9580] ? find_held_lock+0x2b/0x80 [ 298.904961][ T9580] ? get_signal+0x7e0/0x21e0 [ 298.909557][ T9580] do_group_exit+0xd5/0x2a0 [ 298.914075][ T9580] get_signal+0x1ec7/0x21e0 [ 298.918581][ T9580] ? madvise_unlock+0x172/0x220 [ 298.923458][ T9580] ? madvise_unlock+0xa9/0x220 [ 298.928235][ T9580] ? __pfx_get_signal+0x10/0x10 [ 298.933091][ T9580] ? __pfx_do_madvise+0x10/0x10 [ 298.937954][ T9580] ? do_futex+0x192/0x350 [ 298.942304][ T9580] arch_do_signal_or_restart+0x91/0x770 [ 298.947865][ T9580] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 298.954122][ T9580] ? xfd_validate_state+0x129/0x190 [ 298.959337][ T9580] exit_to_user_mode_loop+0x86/0x4b0 [ 298.964635][ T9580] ? rcu_is_watching+0x12/0xc0 [ 298.969406][ T9580] do_syscall_64+0x4ea/0xf80 [ 298.974006][ T9580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.979901][ T9580] RIP: 0033:0x7ff5ff19acb9 [ 298.984313][ T9580] Code: Unable to access opcode bytes at 0x7ff5ff19ac8f. [ 298.991323][ T9580] RSP: 002b:00007ff60001c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 298.999739][ T9580] RAX: fffffffffffffffc RBX: 00007ff5ff416090 RCX: 00007ff5ff19acb9 [ 299.007707][ T9580] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 299.015678][ T9580] RBP: 00007ff5ff208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 299.023645][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.031616][ T9580] R13: 00007ff5ff416128 R14: 00007ff5ff416090 R15: 00007ffda687b578 [ 299.039599][ T9580] [ 299.042614][ T9580] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 299.049896][ T9580] CPU: 0 UID: 0 PID: 9580 Comm: syz.0.799 Not tainted syzkaller #0 PREEMPT(full) [ 299.059111][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 299.069165][ T9580] Call Trace: [ 299.072447][ T9580] [ 299.075375][ T9580] dump_stack_lvl+0x100/0x190 [ 299.080067][ T9580] vpanic+0x20d/0x630 [ 299.084054][ T9580] panic+0xd1/0xd1 [ 299.087777][ T9580] ? __pfx_panic+0x10/0x10 [ 299.092198][ T9580] ? check_panic_on_warn+0x1f/0x90 [ 299.097355][ T9580] check_panic_on_warn.cold+0x19/0x34 [ 299.102731][ T9580] ? update_rq_clock+0x34a/0xd30 [ 299.107761][ T9580] __warn.cold+0x191/0x2f8 [ 299.112178][ T9580] __report_bug+0x296/0x3d0 [ 299.116689][ T9580] ? update_rq_clock+0x34a/0xd30 [ 299.121660][ T9580] ? __pfx___report_bug+0x10/0x10 [ 299.126695][ T9580] ? __lock_acquire+0x4a5/0x2630 [ 299.131654][ T9580] ? update_rq_clock+0x34a/0xd30 [ 299.136599][ T9580] report_bug+0xb2/0x220 [ 299.140851][ T9580] ? update_rq_clock+0x34a/0xd30 [ 299.145794][ T9580] handle_bug+0x166/0x2a0 [ 299.150136][ T9580] exc_invalid_op+0x17/0x50 [ 299.154656][ T9580] asm_exc_invalid_op+0x1a/0x20 [ 299.159508][ T9580] RIP: 0010:update_rq_clock+0x34a/0xd30 [ 299.165149][ T9580] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 eb a2 09 a8 04 0f 84 9e fd ff ff 90 0f 0b 90 e9 95 fd ff ff 90 <0f> 0b 90 e9 51 fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 299.185195][ T9580] RSP: 0018:ffffc900050b6c40 EFLAGS: 00010046 [ 299.191265][ T9580] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 299.199236][ T9580] RDX: 0000000000000046 RSI: ffffffff8dc1b2ac RDI: ffffffff8bfa32a0 [ 299.207216][ T9580] RBP: ffffc900050b6de8 R08: 0000000000000001 R09: 0000000000000001 [ 299.215186][ T9580] R10: ffffffff90b75dd7 R11: 0000000000000000 R12: ffffffff90b78e54 [ 299.223159][ T9580] R13: ffff8880b853bbf0 R14: ffff88801dedbd00 R15: ffff8880b853adc0 [ 299.231145][ T9580] __schedule+0x1b0d/0x5e10 [ 299.235668][ T9580] ? finish_task_switch.isra.0+0x204/0xb70 [ 299.241493][ T9580] ? lockdep_hardirqs_on+0x78/0x100 [ 299.246724][ T9580] ? __pfx___schedule+0x10/0x10 [ 299.251601][ T9580] preempt_schedule_irq+0x50/0x90 [ 299.256650][ T9580] irqentry_exit+0x17b/0x670 [ 299.261255][ T9580] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 299.266992][ T9580] RIP: 0010:kasan_check_range+0x180/0x1e0 [ 299.272836][ T9580] Code: ff ff ff 48 85 d2 74 98 48 01 ea eb 1a 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 83 c0 01 48 39 d0 0f 84 79 ff ff ff 80 38 00 <74> ee e9 57 ff ff ff b8 01 00 00 00 e9 7f 70 07 09 48 29 c3 48 89 [ 299.292453][ T9580] RSP: 0018:ffffc900050b6ef0 EFLAGS: 00000246 [ 299.298524][ T9580] RAX: fffff52000a16df0 RBX: fffff52000a16dfc RCX: ffffffff81b65eae [ 299.306502][ T9580] RDX: fffff52000a16dfc RSI: 0000000000000060 RDI: ffffc900050b6f80 [ 299.314483][ T9580] RBP: fffff52000a16df0 R08: 0000000000000001 R09: fffff52000a16dfb [ 299.322456][ T9580] R10: ffffc900050b6fdf R11: 0000000000000000 R12: 0000000000000000 [ 299.330439][ T9580] R13: ffffc900050b7040 R14: ffffc900050b6f80 R15: ffffc900050b6fa8 [ 299.338435][ T9580] ? __unwind_start+0x2e/0x7f0 [ 299.343255][ T9580] __asan_memset+0x23/0x50 [ 299.347692][ T9580] __unwind_start+0x2e/0x7f0 [ 299.352298][ T9580] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.358553][ T9580] arch_stack_walk+0x73/0xf0 [ 299.363168][ T9580] stack_trace_save+0x8e/0xc0 [ 299.367870][ T9580] ? __pfx_stack_trace_save+0x10/0x10 [ 299.373252][ T9580] ? __lock_acquire+0x4a5/0x2630 [ 299.378201][ T9580] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 299.384026][ T9580] ? lockdep_hardirqs_on+0x78/0x100 [ 299.389246][ T9580] save_stack+0x162/0x1e0 [ 299.393595][ T9580] ? __pfx_save_stack+0x10/0x10 [ 299.398474][ T9580] ? page_ext_put+0x3e/0xd0 [ 299.403075][ T9580] __reset_page_owner+0x84/0x190 [ 299.408023][ T9580] free_unref_folios+0xb2a/0x1760 [ 299.413069][ T9580] ? folios_put_refs+0x450/0x840 [ 299.418031][ T9580] ? rcu_is_watching+0x12/0xc0 [ 299.422814][ T9580] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 299.428640][ T9580] folios_put_refs+0x53c/0x840 [ 299.433438][ T9580] ? __pfx_folios_put_refs+0x10/0x10 [ 299.438780][ T9580] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 299.445149][ T9580] shmem_undo_range+0x5d8/0x14b0 [ 299.450112][ T9580] ? __pfx_shmem_undo_range+0x10/0x10 [ 299.455514][ T9580] ? find_held_lock+0x2b/0x80 [ 299.460214][ T9580] ? percpu_counter_add_batch+0xb9/0x230 [ 299.465868][ T9580] shmem_evict_inode+0x39e/0xbd0 [ 299.470830][ T9580] ? inode_wait_for_writeback+0x171/0x390 [ 299.476557][ T9580] ? __pfx_shmem_evict_inode+0x10/0x10 [ 299.482030][ T9580] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 299.488122][ T9580] ? find_held_lock+0x2b/0x80 [ 299.492804][ T9580] ? evict+0x37e/0xad0 [ 299.496895][ T9580] ? evict+0x37e/0xad0 [ 299.500978][ T9580] ? __pfx_shmem_evict_inode+0x10/0x10 [ 299.506444][ T9580] evict+0x3c2/0xad0 [ 299.510353][ T9580] ? find_held_lock+0x2b/0x80 [ 299.515031][ T9580] ? __pfx_evict+0x10/0x10 [ 299.519461][ T9580] ? iput.part.0+0x61c/0x1150 [ 299.524152][ T9580] iput.part.0+0x624/0x1150 [ 299.528671][ T9580] iput+0x35/0x40 [ 299.532315][ T9580] dentry_unlink_inode+0x2a1/0x490 [ 299.537436][ T9580] __dentry_kill+0x1d0/0x600 [ 299.542042][ T9580] finish_dput+0x76/0x480 [ 299.546387][ T9580] dput.part.0+0x456/0x570 [ 299.550816][ T9580] dput+0x1f/0x30 [ 299.554477][ T9580] __fput+0x519/0xb40 [ 299.558479][ T9580] task_work_run+0x150/0x240 [ 299.563087][ T9580] ? __pfx_task_work_run+0x10/0x10 [ 299.568219][ T9580] ? do_raw_spin_unlock+0x145/0x1e0 [ 299.573435][ T9580] do_exit+0x829/0x2a30 [ 299.577607][ T9580] ? __pfx___might_resched+0x10/0x10 [ 299.582908][ T9580] ? rcu_is_watching+0x12/0xc0 [ 299.587680][ T9580] ? __pfx_do_exit+0x10/0x10 [ 299.592284][ T9580] ? do_raw_spin_lock+0x128/0x260 [ 299.597327][ T9580] ? find_held_lock+0x2b/0x80 [ 299.602010][ T9580] ? get_signal+0x7e0/0x21e0 [ 299.606607][ T9580] do_group_exit+0xd5/0x2a0 [ 299.611128][ T9580] get_signal+0x1ec7/0x21e0 [ 299.615639][ T9580] ? madvise_unlock+0x172/0x220 [ 299.620506][ T9580] ? madvise_unlock+0xa9/0x220 [ 299.625287][ T9580] ? __pfx_get_signal+0x10/0x10 [ 299.630147][ T9580] ? __pfx_do_madvise+0x10/0x10 [ 299.635020][ T9580] ? do_futex+0x192/0x350 [ 299.639364][ T9580] arch_do_signal_or_restart+0x91/0x770 [ 299.644924][ T9580] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 299.651100][ T9580] ? xfd_validate_state+0x129/0x190 [ 299.656319][ T9580] exit_to_user_mode_loop+0x86/0x4b0 [ 299.661648][ T9580] ? rcu_is_watching+0x12/0xc0 [ 299.666422][ T9580] do_syscall_64+0x4ea/0xf80 [ 299.671021][ T9580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.676917][ T9580] RIP: 0033:0x7ff5ff19acb9 [ 299.681335][ T9580] Code: Unable to access opcode bytes at 0x7ff5ff19ac8f. [ 299.688343][ T9580] RSP: 002b:00007ff60001c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 299.696870][ T9580] RAX: fffffffffffffffc RBX: 00007ff5ff416090 RCX: 00007ff5ff19acb9 [ 299.704847][ T9580] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 299.712821][ T9580] RBP: 00007ff5ff208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 299.720799][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.728780][ T9580] R13: 00007ff5ff416128 R14: 00007ff5ff416090 R15: 00007ffda687b578 [ 299.736781][ T9580] [ 299.740077][ T9580] Kernel Offset: disabled [ 299.744410][ T9580] Rebooting in 86400 seconds..