last executing test programs: 15.557700279s ago: executing program 1 (id=938): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r3 = dup$auto(r2) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r4, 0x81004523, r3) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00'}) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726", 0xfffffffffffffffe) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) 14.159559992s ago: executing program 2 (id=941): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4241, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r2 = socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000300), r2) openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000340), 0x140081, 0x0) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4805}, 0x8000) getsockopt$auto(r2, 0x84, 0x80, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) lstat$auto(0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, r2) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/threads-max\x00', 0x20202, 0x0) sendfile$auto(r3, r4, 0x0, 0x4) lseek$auto(r3, 0x7fffffffffffffff, 0x1) setxattrat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x7fffffff, 0x0, &(0x7f00000002c0)={0x5, 0x5, 0xfffffffb}, 0x837) write$auto(r0, 0x0, 0x6) 13.939596131s ago: executing program 3 (id=942): close_range$auto(0x0, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x7ffd) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x7) write$auto(r1, 0x0, 0xe) socket(0x23, 0x80805, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x240001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.prio.class\x00', 0x183042, 0x0) mmap$auto(0x0, 0x20019, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) mmap$auto(0x0, 0x83, 0xe2, 0xeb1, 0x405, 0x8000) setsockopt$auto(r0, 0x11d, 0x3, 0xffffffffffffffff, 0x9) semctl$auto(0x7, 0x2, 0x13, 0x1) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r6, 0x3a, 0x1, 0x0, 0x0) ioctl$auto(r5, 0x560a, 0x7) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x2000, 0x0) userfaultfd$auto(0x4) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010027bd70dbdf251b0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) r7 = socketpair$auto(0x1c, 0x4, 0x200001ff, 0x0) ioctl$auto(r2, 0x541c, r7) r8 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x0, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000180)={@inferred=r0, 0x2, 0x5, @btrfs_ioctl_vol_args_v2_3_0={0x3, &(0x7f0000000100)={0x4, 0x10000, 0x7, 0x101, {0x2, 0x7f, 0x1, 0x9, 0xfffffffffffff000}, [0x3, 0x7, 0x5, 0x8]}}, @subvolid=0x180a}) 12.936506787s ago: executing program 3 (id=943): unshare$auto(0x40000080) get_mempolicy$auto(0x0, 0x0, 0x2, 0x400000000000085, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x6dc401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x886) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) bpf$auto(0x5, 0x0, 0xc) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = socket(0x10, 0x2, 0x8) recvfrom$auto(r4, 0x0, 0x0, 0x40, 0x0, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x6, 0x3, 0x2000000eb1, 0xfffffffffffffffa, 0xc000) mmap$auto(0xfffffffffffffffe, 0x2, 0x100000002, 0xde, 0xffffffffffffffff, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_conntrack_log_invalid\x00', 0x101202, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sysfs$auto(0x2, 0x0, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) ioctl$auto(r5, 0x64c4, 0xffffffffffffffff) 12.748251048s ago: executing program 2 (id=944): r0 = open(&(0x7f0000000000)='./file0\x00', 0x43c2, 0xe1d2b27bdc14aaf1) flock$auto(r0, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r2, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r3, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/xrun_injection\x00', 0x401c0, 0x0) open(0x0, 0x163340, 0x2a) r4 = socket(0x2a, 0x2, 0x1) connect$auto(r4, 0x0, 0x57) sendmsg$auto_NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60044094}, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40c242, 0x44) openat$auto_rts_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy16/rts_threshold\x00', 0x100, 0x0) r6 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x80044944, 0x0) flock$auto(r5, 0x2) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x60a02, 0x0) close_range$auto(0x2, 0x8, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) 12.405225742s ago: executing program 2 (id=946): r0 = prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video22\x00', 0xc0c02, 0x0) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x4440c2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) prctl$auto(0x23, 0x16a, 0x7fffffffefff, 0x0, 0x0) r3 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) read$auto_proc_pid_cmdline_ops_base(r3, &(0x7f0000000040)=""/159, 0x9f) umount2$auto(&(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x1) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/timer_source\x00', 0x400601, 0x0) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0x800, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r4, 0x77e237c7, &(0x7f0000000240)='@\x00', &(0x7f0000000280)="11ca59451c260b3f8e41d59654deb35b3f11ab259d23a1", 0x5) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmdt$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x149041, 0x0) getsockopt$auto_SO_REUSEADDR(r0, 0x8000, 0x2, &(0x7f0000000040)='^\x92[\x00', &(0x7f00000000c0)=0x6) fcntl$auto_F_OFD_SETLK(0xffffffffffffffff, 0x25, 0x66c3) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/failslab/probability\x00', 0x22042, 0x0) 11.022294056s ago: executing program 0 (id=947): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) pwrite64$auto(0xc8, &(0x7f0000000480)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05e\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\b2[\x05\xbdn\x1d\x00\xeb]B\xa0\x99\xb0B\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a0\xeb\xbf\xcfwU&[\xde?\x81\x9a@\xb8h\xc0\x88_\xa0u\xa2\xddH\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xe, 0x10000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) pwrite64$auto(0xc8, 0x0, 0x4e, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) r3 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x25c, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x808000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x11c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CDEV_ID={0x8, 0xf, 0x9}, @THERMAL_GENL_ATTR_TZ_TRIP={0xfd, 0x4, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @ipv4=@multicast1}, @generic="f5e3c918b76807fb2e12c284c4441f65d230912d5b7f0df25b5db333ed51b3a5de98aa15fbfaf5bfff4547c7e26e98a8aa9fbad7edc566c1e7897e7e9858ff91e9bb6e14112fe9a2baccc708ca8e232b4f4c668006ef9f7f50b8037134465d9653fb3994daebb797e666146f11fc8265846936cf9500d9a9fa4e2def83400a3101a9b2f2f0598b6099f5dc648af1fdb27293154152e8a0df684d8f4b8df36e9503842475bd767c0526b2ac61a1c4727b69475d17519acd1cd6a86718376cae0173eaea8c4258e8b94c31031a5cfb9df6b70de257888496de0be52cf0f9cae72898", @typed={0x4, 0x70}, @nested={0xc, 0x100, 0x0, 0x1, [@typed={0x4, 0x37}, @typed={0x4, 0xde}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000) getsockopt$auto(r3, 0x84, 0x81, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x22, 0x3, 0x0) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\xd3', 0xfdef) 10.137081156s ago: executing program 1 (id=948): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.max_usage_in_bytes\x00', 0x1002, 0x0) r0 = socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pts/ptmx\x00', 0xa0540, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x800, 0x0) ioctl$auto(r4, 0x90006441, 0xc35) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 10.0823103s ago: executing program 0 (id=949): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4003, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) madvise$auto(0x0, 0x200007, 0x19) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680), 0x0) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) futex_wake$auto(&(0x7f0000000000)="facff2b53ab3522cb329b5a87bdbc091f5a6ad597f2789e870d64db4cf6503135f5a750abc973b65703b664991ab45d13445d9c4df1d25210345f44468854c9689b943d1c65073bf11fd0c98fb48f9f4d67c0908e747", 0xfffffffffffffff8, 0xfff, 0x7f) sysfs$auto(0x2, 0x20, 0x0) shmget$auto(0x8, 0x10563, 0x568d1af2) 9.044494375s ago: executing program 1 (id=951): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) pwrite64$auto(0xc8, &(0x7f0000000480)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05e\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\b2[\x05\xbdn\x1d\x00\xeb]B\xa0\x99\xb0B\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a0\xeb\xbf\xcfwU&[\xde?\x81\x9a@\xb8h\xc0\x88_\xa0u\xa2\xddH\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xe, 0x10000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x22, 0x3, 0x0) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) 8.841671247s ago: executing program 2 (id=952): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x200000001000000, 0xfffff7fffffffff7, 0x3ee) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0) r1 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x100, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3c, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x9, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2000000ffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x5]}, 0x202, 0x2000000d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x3) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r4, 0x0, 0x1ff) 8.343171903s ago: executing program 0 (id=953): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/workqueue/parameters/watchdog_thresh\x00', 0x1e2142, 0x0) r0 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/i8042/serio1/description\x00', 0x8000, 0x0) open_by_handle_at$auto(r0, &(0x7f0000000000)={0x8, 0x2, "8b00000000000000"}, 0x36c) socket(0x1d, 0x2, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_frmr_depth\x00', 0x40302, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) memfd_secret$auto(0x0) socket(0xa, 0x2, 0x3a) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = socket(0x1e, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101300, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop11/queue/io_poll\x00', 0x8882, 0x0) sendfile$auto(r2, r2, &(0x7f0000000200)=0x2, 0x2) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = getpid() r5 = pidfd_open$auto(r4, 0x8) setns(r5, 0x60020000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) 8.138663229s ago: executing program 3 (id=954): prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video22\x00', 0xc0c02, 0x0) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x4440c2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) prctl$auto(0x23, 0x16a, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, &(0x7f0000000040)=""/159, 0x9f) umount2$auto(&(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x1) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/timer_source\x00', 0x400601, 0x0) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0x800, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r3, 0x77e237c7, &(0x7f0000000240)='@\x00', &(0x7f0000000280)="11ca59451c260b3f8e41d59654deb35b3f11ab259d23a1", 0x5) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmdt$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x149041, 0x0) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x490042, 0x0) fcntl$auto_F_OFD_SETLK(r4, 0x25, 0x66c3) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/failslab/probability\x00', 0x22042, 0x0) 7.978604224s ago: executing program 1 (id=955): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/v4l-subdev6\x00', 0x8a240, 0x0) read$auto_configfs_file_operations_configfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/19, 0x13) ioctl$auto(r0, 0x5646, r0) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/setgroups\x00', 0x80000, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28) ioctl$auto(r0, 0x2400000, 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x9, 0x7ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x80000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="100026bd7000fedbff2503000000080004000800000006000700008000000800513a", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa3a000008000200", @ANYRES32=r4, @ANYBLOB="08000300faffffff"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_gl861/parameters/adapter_nr\x00', 0x101800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000380)=""/172, 0xac) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0x0) 6.657614087s ago: executing program 2 (id=956): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795e56f01adc6944105d7bf5c917ab81c899a21ee50a5ef56db545f7c67b8077183bc65"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) 6.566423434s ago: executing program 0 (id=957): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="0100f90200d1d093080c4d90900008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000280)={0x9, 0xffffff93, 0x0}) io_uring_setup$auto(0x9, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000200)=""/36, 0xfd48) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/config/target/dbroot\x00', 0x40180, 0x0) setfsuid$auto(0xee00) keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x2) fchmod$auto(r3, 0x0) socket(0x2, 0x801, 0x100) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0x6, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x8, 0x90, 0x6, 0xbdcc, 0x10000, 0xfffffffffffffffe, 0x0, 0x100]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0x5}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) pread64$auto(0xffffffffffffffff, &(0x7f00000000c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\xe4\x8a\x00\x00$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq\xf5\x9eP\xfcd\xd93\x9f%\r\x80/:\x87\xc3\x1c:;g\x18\xe5\xdeU#\xd2\xa8\x9a\xd8Yeo\xd9\x8f\xea\x12M#\x824\xa7\x95B\xc6\xb0\xf82\xf0Rp\x1b i\xa4p\xa7\xec\t\xc7}_\xd0\x8dy\x9b\xe1\x98\t\x9f\x90\xe4', 0x100003ffd, 0x6) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) fcntl$auto_F_SETPIPE_SZ(r2, 0x407, 0x10001) 5.353016596s ago: executing program 3 (id=958): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r3 = dup$auto(r2) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r4, 0x81004523, r3) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00'}) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726", 0xfffffffffffffffe) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) 4.758872878s ago: executing program 0 (id=959): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r3 = dup$auto(r2) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r4, 0x81004523, r3) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00'}) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e", 0xfffffffffffffffe) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) 4.384488266s ago: executing program 1 (id=960): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) r0 = gettid() close_range$auto(0x2, 0x8, 0x0) r1 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd5100fad506fdff15d6e1000001800c0001800400068104000480"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) r4 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0x2, 0x0, 0x5, &(0x7f0000000b40)={{0x2000000000003b}, {0xfffffffffffff4c5, 0x2}, 0x408, 0x8, 0x0, 0xdd0, 0x7, 0x10, 0x0, 0x4, 0x7, 0x7, 0x0, 0x96bd, 0x7ff, 0xbf0}) write$auto(r5, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) r6 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/available_tracers\x00', 0x20880, 0x0) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x422a02, 0x0) msgctl$auto_IPC_INFO(0x6, 0x3, &(0x7f0000000200)={{0x5, 0xee01, 0x0, 0x6, 0x5, 0x4, 0x2}, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x2, 0x7fff, 0x5, 0x1ff, 0x39, 0x7bb1afd, 0x2, 0x800, 0x1, @raw=0x8, @inferred=r0}) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x2703dfbe, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x7, 0x9, 0x7f}, &(0x7f0000000280), &(0x7f00000002c0)=0x9, 0xffffffffffffffff, 0x534, 0x1, 0x8, 0x0, 0x7f, 0x6, 0x4, @inferred=r0, @inferred=r0}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000004c0)={{0xe1, 0x0, 0xee01, 0x300, 0x6, 0x2, 0x9}, 0x4, 0xfff, 0x8, 0x7, @raw=0x3, @raw=0xdd, 0xfff8, 0x0, &(0x7f0000000380)="71f66c65c46d6d3c2f1dbd16dd35f02124254ca68f23c0b3328d8555f61e9f29028d9b3cf802aacd529a148df392f5721dca50c8c7f23b446971a5ea3a8573c3ab9e87ccc33e434931cdca94670893b3a80d638b41d0f5eeba920c3186c9eebafa16e108598642f8a164a89f784ff2", &(0x7f0000000400)="e0e9e67f12e1700a6a0b6f6a81833dca87e2d2d90109e11ef0bfaad6b6357ca977e12c3b1a53d3bdeb0412d2ed01a44f585d55b540965651c879863cabe71ac31fb540c5b67ad32b2a979f94bf68d4dab4683646688dfed771b789b53039cb5a6ec3b9027217fe07c0b804e5becfd00bcca2cfc46b40331cf0c9276fa514c922c009424dd89aef0e70430eae8c30701afa9279d7578e4974f01159"}) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB='X,\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf2503000000961101800c0002000100000001000000d1009280040011800400ce0004002080", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="100500000000000000005900", @ANYRES32=0xee00, @ANYBLOB="c90001800800130000000000e88f7754175f0fd57942355b56ced0f7907ab293e8e1d03c01e9899e69e56e896f608eec2edae73242785482bd8dea67f26ef70f6ad3e810d05e7661e817cad7c4d6b05ee43fb8c54ddc60c7039eda1ed81e43ca38f3be99a0469d9f6e865fdfafe7834c09e776182cc2794ade1a9ae0a32a8b80af52", @ANYRES32=r6, @ANYBLOB='\b\x00\t\x00', @ANYBLOB="040013800c002f800400648004001c000000003800018085c5d6b35fc7752575051d5be888e32982a2cf52b7f6423d0565af0077af1a8a7438fb509dc99e9417392b1e4ff7608f43aca6f1850201800c000a000f00000000000000787e4d9fe7123dd4fa1ddfabd83a4f26070144e70facca65e23eea5a43169d9724f9525603ce2a1f960cd96048f9443edbca1969f601a717bc287e34a3d9615265fdbe638c464a0176ca4c32a9b67b0b52f1", @ANYRES32=r7, @ANYBLOB="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", @ANYBLOB="141092800400308090423c56d13c6ac68f870f6cdd039144b31668bf1701b6c2da43943eeb0d042db40b83d74499bf6ff0b91a3992c517726dd627eea9fc3fd2bfb06b5410ccda9cf7ce7e53bebb3859b2eefc46b92cb73a6146f9a23e3b12ec4069e24c0d2eefd939242d7569df901d88459b3c2743358752c0e2dd3e7d09e4492d4d46379ead6453f7df00cc3fc1bff901564e26ea1d78903a46eab2e9d931a622165cbec2c4b13796aa5ed1fd4f3b86a3c46d77a27f98705036a47ed2493efd0425dd222d90a5fc10aa4ccd0726c5742dd03d86ebff9e99dd2f2f1444415a8e5c36ff316671e5213d8b0e690d91788f0132212ce166bda1397cea8677bd5a1f8c3fa0ae1a2078cd9cbd54be71ab3373832694dc7de9c038f1f7b94c8cacae072e93dcf7910a01b5aa82cd84856ff3f2f701ab1b20fe2552d9572a67685973a27e3e6f30b0644175fb7164e7aca70c2559c4f847a2c24dbac21e471ab0f77dc22393e6803fa07ae600cec5657c7f5c1d0d3376b415c2a2824688b8b639d57fd81b52cdc2f131ef8269a1eb36c4bf0286aed6edbf8790d51634e1c680de2131c9630cc5b8a86e5b42181d18c4b3f2ba5097e2c03274f7405bae78d69aeb5023f972a8d73f64a423e7c9ae8b59be699f90c57dab1acd15aa681bc5eb128482f9f09ec46fd24654d4784e4665767cd24031ff13bfb5629f3d4090004510db25908050ba3707ebb137c86edb4caff2b8f0770f566610532fea9a8ea6ffa1960b9a42e3c6354369ad5adb33847090a41bf622f73fec447b8d826b10d2f71e34a1e9fc9b3c126abf165c350d152dfd47cea3d846495ac0715519468f90466abe3bc91016c7d0dfcb92538ff618f08384778704d19071ea118354904ebfe5c71b3f59a0b24b1e84b84376ae051ecd5176a9c538f254e492da649fc6a9584be875977eb2f102e6b99a2388a394879f81b838d320c6aac6f170e3cfa13cba5b53d7a0332432e3efee214e30658824e2b62b09d96994aecf1b75ecf6e3caa6ec0863a3b2cdde0cb449c73168a1471c912bd4437bfa46edeb5aefbee50fbf39f94e4fad7963475bd1827914d6d4ebefd2426017ab3444bd31da86832288fe12591ef931b6f49ced7894a0f82cfa45db7307c75c80c812214d21420747380a6398b5d2fea95359f67152b561afbff71f3b05b0ac30ea2ebc69f3d17cb895b2f89ba4bba2ed3018e7f775e1e923b503e34eb815f2af4c37aaa44ec88cca4587b0657c30337eb597ae8703f41339fe131b436a360f3151a25d673f82dd9550062f8535abe94b4377618595f71bd99a370d3ff88f82bcd877e94a887ce8de4bc2dca1507936fbf7b3ad2a0691eac9cf6f011fd8d333bd4158a89805b0c4d076ee41db1b8baae1f4bb6271c04c646e6085b5ddb1c8662961a3cbcc3cda9c489d820e9c704c060cde070ca694c94b01fd2cd7feac410afd1045078e4679b96f854cc28abe9283101edc1cfd967ea96beb378a6c188898c17c72470745aa4b6047c030eef889c04c1f8d82f393751780967e70da1588132fa96618acd4f2f3a13fc03c30162a402c81a566c354a508452671fea88e5dac19fd867ef84aa4cb83b15c0285e5c3b03592136ced0dfb2368fec9f8410998275576f584f30290767e4ad00b3a780b1f0bcc8eb4c82655de13a365332dcd034ec2928cd122f6ea1161692a7e78fe345993d39f48c8161ad077d463b26026c7003acc8725973c8ae67b178f54c83b172dd4708c762d50482772d694bb9351c550e3d349a0f54b24ec2a18b8d19d524946181b638a8566606240dc24228f55a92026d389cefe167799ec3db7872bd54c752f30f335f6af94aa1ff8aa2e78b5c76ceca5ccab377282758d35922493d0bb3a66a0892791cf7712eda864525bc23b04bb930d78dde3525b263fcf78bf29c301767704389b25e8c9c78d2f927e902dd674713ed6404ad8c7904339cb1ca1bf13a1b5ebff139943d1c6c88cd00a4d41447848b4618e3015435b736162ad1307427aae6d67d6a9634036766a0b10ea253c0a3a89f7a899a30e74c59c01d7e86ff17eda7a844603df0dc7654d79368df1e3a6ca7d439691a3e515fe85c92f905a46b6d27b0f288c4fc3e48f33d3bfff4a487e76cef4b6af2ede7778061af03e3b10945a35ce35ed67fe866226f8c92dd5061e9004ae12024e3ead02b9c672088ba417da80b4d4900140695c3fd760fe090ab687d98c3aa77465210d39854a035fa860a8073e6c84d7f1d513eb6fd55b36e59c0a6b55636c6bbfb070b600c2a8c948e3c39fb30da72e53585217ce240134c111bc7f927e14df584f144fb95110143ef4508e3b6dbff443b2c8cea6e3a43a819013fdf245bde4a41987f97ac8930e8e6305cba8f5034795d9dae33b77362737ebe1c7193bc99c057ff6b29a213a2a52bdafa04d4c4da1e834e5c3448f359488ef055972cfebcf63bf2368d25ffa3d2776ba366a5192b40be4dff7c6d3c7b8afbcab576e11b902ce0eb49a6d4ccb1f55150d2b961a0c8e4281ddab33e7f48dfea3202c57c51ffec967b1e19ff6fe8668d9bed8cdc42dd2c61211b519ed3909c6709fff17f15f767d58f9b10812772bdd7a43fe06dc83cee63bb6c8ccd70f53427caa48fd899170020a8de489c21ea24f00ff94f0bcc3cfac9cd49246556bc8ef1b6d929dca84401b9110da43a4717663f105f1754212bffe50f942c76f187c00e3c1fcc6aeef34817945ec61769fdfa021193a8ec1bdd0d14d7dd9543d0398c921707ea88b475f6dd5a952a3653b379daef019623e23926492ae89302b4f119fc4fc86e1982414322c6eb0e0e64f48353dda046d0c12bc952c4bf3721fa13eb66f2a1bc49b66d5107e4642a4dadb09325e2a132e1775f9384478bfaa57710729909f04d32fbe1a02071dde831c57e60bd81da5735ba52dc52eb52b182ce8e12d3256016e5f6813e8c598dbe4a9477fbf98ecae28a440235a0c8ccc70075cc0aa544837b4b60b62465f42d0b90b1320e79db2787deaf090f7643085aeb79724c0df05aea6f20b017caf559b044fe10fe0c99b21672dccc5a977d0e73a41ad7c2deaca912c1db677e00b8a7e8ccacec1dda8ebff694a85e1099465b4c1bcac857baa8d6f9dfa2d7c8141047d9cfd064c7c8dc1248b50ba9ab8c0ec7777a49afc495a2d8398771e7ce178e168da413f8d05f05238f3a18c68c7fafa14948521d1d8493acc4a2af0b6d61d26c5bc062d30a2bc3ad210c8e2fcaeea6281b9da0112f51425434ef7b47a792ff713e1e582c4c5d931ec5121d1a74fe8cb626eb8b1dfd5113290745f2a08ece896878b136a0f57e769c152001473f7c7bc5eaeac62f73c6bef5bc0e1a60f310ea6f9183b26b2d5b87fdf52c1444de3230b76b8ae9811c408ca0a3e9de8b9f7a846cf7cac3e00fd7fb7d373d4c5d2148e646e883e58a78080c9b312c6a34a1da228d8fab16d8bf670e8d16eb0eb9db396d457569c1e113d88f1e889faba87eb9779ee76e05efb867b3e7e2b61c9d91956d44ad308c5f567e91f5fef1090d52cc89a2f1be91bfded4e4ca3c5aa361cccdbbba8d7f3be3f71c7ec18e6e3d50de20de65c8a3465c1f3f283c98e07fbc20353f67a02c09ff752133ae35e57284fd1573d05e7f5129ec1e52e8882728a190d28b9273e31f62288c2601285753604d3bd99ab49bd01e61daf169f9c861cc03538dc09a72d51217f82022e5cb9d625f23d09613889b59555667e1e7336dbdf54aace50518a43504274bc530e10db475501028e920f94a4eae2ae3d65e3cbaee8add45ffc648d6b3354802633dbe7ad97ac6a4918d0be18406d2ff25753e9fe56a96f98e0577118df3fa89d877a1232fdf5678e6269bc06aff0016ed27a8ab2ec1c1c27a60e041fdb8b2ae570376246896ff1d89ab518a6bf030b868cbcd53a4dfcb0d571c96548e8b8e078c07c221728565a4772a6b49ce85cc755626bc5dfa247c1a81837b9e16c806121c4bb837c0407d09277090c1c851338c63319f2e010becfb5a981f15bf9ef68c600a0ee6c91ee9094697dbffc12dbfa54b411defeffced22e316a8eda30587c60ca8d3cf2dd5bfe990fd55df4ddb95513f73eb5841054bfc33c399caaa97baacd1528b0540f4cbdb035d44e092973610d74e0b82b302064704744ef6ab51c72229c90ebb7977f345f726774e5529c15d327484edf75540b18f57bc7fb8430c9efd4fe631b0dfda388d4060947d05f1efa5eccc7f655086c203cfa7b810f79fa3f0cbb34825b32ec99d3e40f029e925f9dba360976d5edde7a17f35c992689b61d4d3006f3dd75d5aa87df545cb8d1894e29ac1ad6aefcadb0e491b7f124d94450501df2b0761b3638887733405dabfe8d828d959dd2d852a49a3dfe7305a47228d6c4ef1ea8aaedea9ec47fdfa945922e7036bdba474c97678727bd30c3fef3e037891fc00be62b5d63962b81ccb4210a67c6504045d4d60159afcdaf07189db46a1f8e86dc4d5aa6b84ed85d90d7042c3f9f41bd7cc973fce22cf6d7cb8986e683abe58ce9c9cbad2d492b0c19cbbc0fa8b85021f07388dc8cc488f36855cb718cfd6d411c7fb543a1aa101c62034e3c25afdeb7c5dc4df51318574bbc8db22d0b3a131cf85897ff30d09f6563bdb66022d7691c2f2f92e8fe"], 0x2c58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000) r8 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r8, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x1b182af4640a09fd, 0x0, 0x7a, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/bus/usb/drivers/kaweth/unbind\x00', 0x10400, 0x0) 596.583162ms ago: executing program 2 (id=961): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x4000, 0x0) fsetxattr$auto(r0, &(0x7f0000000200)='*,{:}{{*\x00', &(0x7f0000000240)="d7f63a0a1536873db32404dbd31639b80bb07fb2046c6b4106d3849e0ef09e349d847569f9cfbcd7621925a4270e9768f7832d8caab2fb3350", 0x100, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x8000000000002, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(r1, 0x0, 0x20009a6, 0x3) close_range$auto(0x2, 0x8, 0x0) rseq$auto(&(0x7f00000001c0)={0xe, 0xfffffff7, 0x1, 0x9, 0xffffffff, 0x9}, 0x8000, 0x0, 0x6) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r3, 0x454f, 0xfff, 0x0, 0x0, r2, 0x80000000}, 0x6d4) flock$auto(r2, 0xc6) r4 = open(0x0, 0x4242, 0x59) flock$auto(r4, 0x6) r5 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc) ioctl$auto_RTC_UIE_ON(r5, 0x7003, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x7fffffff, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff9, 0x0, 0x0, 0x80000, 0x4, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x90, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 590.999216ms ago: executing program 1 (id=962): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') close_range$auto(r1, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) r4 = socket(0x18, 0x3, 0x2) setsockopt$auto_SO_LINGER(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)='(,\x00:\x00\\\xb3\xc7\xaf\x19\xadz\xbf3\xc5S\x13+', 0x9) bind$auto(r4, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_ptr=0x0, @raw=0x3, 0x2, @_sigev_thread={0x0, 0x0}}) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000002c0)={0x0, 0x5e, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x40004c5) sendmsg$auto_NL80211_CMD_ADD_LINK(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000440)="9b58b4fccbcd80000010") read$auto(r2, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) r7 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x200, 0x0) read$auto_nst_seq_fops_netdebug(r7, &(0x7f0000001680)=""/222, 0xde) r8 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r8, 0x4c80, 0xfffffffffffffffd) 514.351221ms ago: executing program 0 (id=963): unshare$auto(0x40000080) get_mempolicy$auto(0x0, 0x0, 0x2, 0x400000000000085, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x6dc401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x886) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) bpf$auto(0x5, 0x0, 0xc) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = socket(0x10, 0x2, 0x8) recvfrom$auto(r4, 0x0, 0x0, 0x40, 0x0, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x6, 0x3, 0x2000000eb1, 0xfffffffffffffffa, 0xc000) mmap$auto(0xfffffffffffffffe, 0x2, 0x100000002, 0xde, 0xffffffffffffffff, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_conntrack_log_invalid\x00', 0x101202, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sysfs$auto(0x2, 0x0, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) ioctl$auto(r5, 0x64c4, 0xffffffffffffffff) 513.847721ms ago: executing program 3 (id=964): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 0s ago: executing program 3 (id=965): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r3, &(0x7f0000000000)="0a23b9", 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) madvise$auto(0x7, 0x2, 0x15) close_range$auto(r0, 0x8, 0x0) shmctl$auto_SHM_STAT(0x30, 0xd, &(0x7f00000004c0)={{0x1, 0x0, 0xee01, 0xfffffffb, 0x101, 0x5, 0xf}, 0x8001, 0x3f9, 0x8000000000000001, 0xd, @raw, @raw=0x6, 0x465, 0x0, &(0x7f0000000380)="ea9395268b1aaca59c5b2d90dc3acdcfb1aaae0788efd1dad2895bfd24a0ed5bc1cbbcea3ff4111978eaab2b5adbc258f57231bbf586cd1933893f58fcf384a9b549ca1993a3bdd9e7", &(0x7f0000000400)="66f41f23289ed7f5679db8e3c1b9a03c1288884d7e01e5619bdda393e7d8e7f9a67e61176ebfd4670afc34b0ad87379b59213c28bb5243bdfef02d68208de8256526b22b785945e666532c11e9c461b0857b798af43ed2779372f8236644b5966073aee9558928b8906a8547532c712b9ba545703e3ec6f7ebbc8d4fd83f463b985b8db8351de4e10b692ee7ce9376a2414cdf2f2797d4b5"}) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0xfff, 0xc8, 0x5, 0x8, 0xee00, 0xee00, 0x0, 0xbede, 0xfffffffffffffeff, 0x1, 0x1, 0x5, 0x9, 0x8000000000000001, 0x6, 0x1, 0xc6}, 0x396bc18e) shmctl$auto_IPC_SET(0x49ea, 0x1, &(0x7f0000000700)={{0x81, 0xee00, 0x0, 0xfffffffb, 0x2, 0x7, 0x101}, 0xb9, 0x9, 0x3, 0x101, @raw=0x40, @inferred=0xffffffffffffffff, 0xf, 0x0, &(0x7f0000001440)="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", &(0x7f0000000800)="c797890fe238ff344a9f7448bb473c6d8694eba318ece04d1ce66bc3b286b6114e6da33c14211e4bc7fd1c746e017bb1d5caa7caa9c5249551f3ec301588fab71a4d277dc95a134becdc6c2b56ade9c68013caa96ef8a3e2fce9e8fc6447b1a79f0aa0faff6fe5783e045feddf226007a92cbfc428db139ba4a0b574c78efb5b16d3b3ce86"}) keyctl$auto(0x4, r4, r5, r7, 0x9) open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) r8 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) statx$auto(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x5, 0x9, &(0x7f0000000a00)={0x14000000, 0x5, 0x3, 0x8, r6, 0x0, 0x81, 0x2, 0xfffffffffffff001, 0x800, 0x80000001, 0x3, {0x4, 0x77b3}, {0x200, 0x6}, {0x2, 0x9}, {0xfff, 0x421e}, 0x7, 0x2, 0x774d, 0xe, 0x7, 0x9fb, 0x10, 0x1, 0x2, 0x4, 0xe, 0x80, [0x8, 0x2, 0x3, 0x8000000000000, 0xeb, 0x7, 0x5d, 0xfffffffffffffff8, 0x3]}) pread64$auto(r8, 0x0, 0x800003, 0x270) mlockall$auto(0x7) mprotect$auto(0x110c230000, 0xa588, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fb0\x00', 0x20280, 0x0) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r9, 0x402, 0x0) r10 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r10, 0x0, 0x40002) getdents64$auto(r10, 0x0, 0x400) ioctl$auto_SNDCTL_SEQ_SYNC(r10, 0x5101, &(0x7f0000000280)="e3c09915fb638e44f895a56c54c025f356a72a23c421cf754d1b49809d08fa701ce07e7f9538dc1d8b9f901421eac2952450836205ef0684e8a00c30d79ad972383e05a248f2416fa60d9afa691cdb7ff267cf56504b59606347425adef7816095440489a7e95cc844c033e045bd606157977ac7aaf8bddf4068292582c8e8355cd6e8663fc89dc6f28531dd64180a3db5590a410f65cb301906afd4ff23aec7864f39b6326c9c4677c8dec57efc9f69c0fdcde16e07598c7f44c95049a165a8c195e9f454ebcadedee73af389") kernel console output (not intermixed with test programs): 858][ T6945] ? __pfx_vfs_write+0x10/0x10 [ 170.506892][ T6945] ? find_held_lock+0x2b/0x80 [ 170.506948][ T6945] ksys_write+0x12a/0x250 [ 170.506982][ T6945] ? __pfx_ksys_write+0x10/0x10 [ 170.507026][ T6945] do_syscall_64+0x106/0xf80 [ 170.507052][ T6945] ? clear_bhb_loop+0x40/0x90 [ 170.507081][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.507105][ T6945] RIP: 0033:0x7f4f5d39c629 [ 170.507124][ T6945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.507147][ T6945] RSP: 002b:00007f4f5e194028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.507169][ T6945] RAX: ffffffffffffffda RBX: 00007f4f5d616090 RCX: 00007f4f5d39c629 [ 170.507185][ T6945] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 170.507199][ T6945] RBP: 00007f4f5d432b39 R08: 0000000000000000 R09: 0000000000000000 [ 170.507213][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.507227][ T6945] R13: 00007f4f5d616128 R14: 00007f4f5d616090 R15: 00007ffcc85dc508 [ 170.507257][ T6945] [ 171.331262][ T6957] netlink: 186 bytes leftover after parsing attributes in process `syz.0.177'. [ 173.034599][ T6973] netlink: NAT attribute has 1 unknown bytes [ 173.815870][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805adfb400: rx timeout, send abort [ 173.824584][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805adfb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.423377][ T6989] vhci_hcd vhci_hcd.0: invalid port number 16 [ 175.132340][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c4c6c00: rx timeout, send abort [ 175.140832][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c4c6c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 175.891736][ T7013] netlink: 'syz.0.189': attribute type 64 has an invalid length. [ 175.955076][ T7013] netlink: 74 bytes leftover after parsing attributes in process `syz.0.189'. [ 177.478820][ T7023] netlink: 'syz.0.199': attribute type 64 has an invalid length. [ 177.522267][ T7023] netlink: 74 bytes leftover after parsing attributes in process `syz.0.199'. [ 177.678328][ T7032] sg_write: data in/out 220/90 bytes for SCSI command 0x0-- guessing data in; [ 177.678328][ T7032] program syz.1.192 not setting count and/or reply_len properly [ 177.882283][ T7038] netlink: NAT attribute has 1 unknown bytes [ 178.047728][ T7042] netlink: 186 bytes leftover after parsing attributes in process `syz.0.193'. [ 178.623987][ T7051] vhci_hcd vhci_hcd.0: invalid port number 16 [ 178.774353][ T7054] netlink: 186 bytes leftover after parsing attributes in process `syz.3.197'. [ 180.017834][ T7073] netlink: 'syz.2.203': attribute type 64 has an invalid length. [ 180.075571][ T7073] netlink: 74 bytes leftover after parsing attributes in process `syz.2.203'. [ 180.188383][ T7077] netlink: 186 bytes leftover after parsing attributes in process `syz.1.204'. [ 180.552672][ T7084] netlink: 186 bytes leftover after parsing attributes in process `syz.0.205'. [ 181.045063][ T7090] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 181.160940][ T7095] netlink: 186 bytes leftover after parsing attributes in process `syz.1.208'. [ 182.201333][ T7099] FAULT_INJECTION: forcing a failure. [ 182.201333][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 182.286884][ T7099] CPU: 0 UID: 0 PID: 7099 Comm: syz.3.209 Not tainted syzkaller #0 PREEMPT(full) [ 182.286916][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.286930][ T7099] Call Trace: [ 182.286938][ T7099] [ 182.286946][ T7099] dump_stack_lvl+0x100/0x190 [ 182.286986][ T7099] should_fail_ex.cold+0x5/0xa [ 182.287013][ T7099] should_failslab+0xc2/0x120 [ 182.287052][ T7099] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 182.287096][ T7099] ? acpi_ut_create_generic_state+0x61/0xc0 [ 182.287134][ T7099] acpi_ut_create_generic_state+0x61/0xc0 [ 182.287167][ T7099] acpi_ds_result_push+0x2a4/0x600 [ 182.287199][ T7099] ? acpi_ds_obj_stack_pop+0x105/0x270 [ 182.287235][ T7099] acpi_ds_evaluate_name_path+0x225/0x4a0 [ 182.287268][ T7099] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 182.287302][ T7099] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 182.287334][ T7099] ? acpi_ut_trace_ptr+0x151/0x2a0 [ 182.287372][ T7099] acpi_ds_exec_end_op+0xb78/0x1e60 [ 182.287406][ T7099] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 182.287438][ T7099] acpi_ps_parse_loop+0x5dd/0x24a0 [ 182.287477][ T7099] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 182.287510][ T7099] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 182.287540][ T7099] ? acpi_ut_create_thread_state+0x6d/0x170 [ 182.287588][ T7099] acpi_ps_parse_aml+0x81e/0x1120 [ 182.287627][ T7099] acpi_ps_execute_method+0x5c4/0xe90 [ 182.287671][ T7099] acpi_ns_evaluate+0x640/0x1670 [ 182.287699][ T7099] acpi_evaluate_object+0x420/0xe00 [ 182.287729][ T7099] ? kasan_save_stack+0x30/0x50 [ 182.287760][ T7099] ? kasan_save_track+0x14/0x30 [ 182.287796][ T7099] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 182.287834][ T7099] acpi_evaluate_integer+0xdf/0x220 [ 182.287860][ T7099] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 182.287897][ T7099] ? __pfx_status_show+0x10/0x10 [ 182.287929][ T7099] status_show+0xa0/0x120 [ 182.287958][ T7099] ? __pfx_status_show+0x10/0x10 [ 182.287994][ T7099] dev_attr_show+0x52/0xa0 [ 182.288029][ T7099] ? __pfx_dev_attr_show+0x10/0x10 [ 182.288062][ T7099] sysfs_kf_seq_show+0x217/0x3a0 [ 182.288092][ T7099] seq_read_iter+0x32f/0x1270 [ 182.288136][ T7099] kernfs_fop_read_iter+0x46c/0x610 [ 182.288158][ T7099] ? rw_verify_area+0xce/0x6d0 [ 182.288187][ T7099] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 182.288210][ T7099] vfs_read+0x825/0xb30 [ 182.288246][ T7099] ? __pfx_vfs_read+0x10/0x10 [ 182.288295][ T7099] ksys_read+0x12a/0x250 [ 182.288327][ T7099] ? __pfx_ksys_read+0x10/0x10 [ 182.288367][ T7099] do_syscall_64+0x106/0xf80 [ 182.288392][ T7099] ? clear_bhb_loop+0x40/0x90 [ 182.288419][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.288442][ T7099] RIP: 0033:0x7f4f5d39c629 [ 182.288460][ T7099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.288501][ T7099] RSP: 002b:00007f4f5e1b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.288523][ T7099] RAX: ffffffffffffffda RBX: 00007f4f5d615fa0 RCX: 00007f4f5d39c629 [ 182.288538][ T7099] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000009 [ 182.288553][ T7099] RBP: 00007f4f5d432b39 R08: 0000000000000000 R09: 0000000000000000 [ 182.288567][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.288596][ T7099] R13: 00007f4f5d616038 R14: 00007f4f5d615fa0 R15: 00007ffcc85dc508 [ 182.288627][ T7099] [ 182.974472][ T7099] ACPI Error: Failed to extend the result stack (20251212/dswstate-130) [ 183.015104][ T7099] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 184.378675][ T7131] netlink: 'syz.2.215': attribute type 64 has an invalid length. [ 184.490721][ T7131] netlink: 74 bytes leftover after parsing attributes in process `syz.2.215'. [ 185.024699][ T30] audit: type=1400 audit(1771476663.869:14): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=7143 comm="syz.2.218" [ 185.713148][ T7151] netlink: 186 bytes leftover after parsing attributes in process `syz.1.220'. [ 186.822833][ T7172] netlink: 186 bytes leftover after parsing attributes in process `syz.2.230'. [ 188.301486][ T7184] NFSD: Failed to start, no listeners configured. [ 190.945398][ T7221] netlink: 186 bytes leftover after parsing attributes in process `syz.0.228'. [ 193.355873][ T7252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.236'. [ 193.407949][ T7252] bridge_slave_1: left allmulticast mode [ 193.430516][ T7252] bridge_slave_1: left promiscuous mode [ 193.477854][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.598060][ T7252] bridge_slave_0: left allmulticast mode [ 193.603763][ T7252] bridge_slave_0: left promiscuous mode [ 193.693771][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.352706][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.359155][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.607035][ T7266] netlink: 186 bytes leftover after parsing attributes in process `syz.1.238'. [ 196.141408][ T7284] netlink: 186 bytes leftover after parsing attributes in process `syz.1.241'. [ 197.275612][ T7299] netlink: 186 bytes leftover after parsing attributes in process `syz.1.244'. [ 198.423220][ T7304] netlink: 330 bytes leftover after parsing attributes in process `syz.3.246'. [ 198.539554][ T7304] : renamed from ip6tnl0 (while UP) [ 198.739390][ T7320] QAT: Device 0 not found [ 198.834966][ T7322] netlink: 'syz.1.249': attribute type 64 has an invalid length. [ 198.870177][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 198.892864][ T7322] netlink: 74 bytes leftover after parsing attributes in process `syz.1.249'. [ 198.902993][ T7316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.907608][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.149204][ T7356] NFSD: Failed to start, no listeners configured. [ 202.404133][ T7390] netlink: 186 bytes leftover after parsing attributes in process `syz.0.258'. [ 204.302221][ T7416] device-mapper: ioctl: Unable to rename non-existent device,  to [ 204.729553][ T7422] netlink: 'syz.3.262': attribute type 64 has an invalid length. [ 204.767217][ T7422] netlink: 74 bytes leftover after parsing attributes in process `syz.3.262'. [ 205.089109][ T7429] process 'syz.2.263' launched './file0' with NULL argv: empty string added [ 206.762243][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880340ff800: rx timeout, send abort [ 206.770845][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880340ff800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 206.892814][ T7450] netlink: 186 bytes leftover after parsing attributes in process `syz.0.267'. [ 208.057467][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880340ffc00: rx timeout, send abort [ 208.065847][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880340ffc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.529211][ T5832] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 210.471632][ T7504] netlink: 186 bytes leftover after parsing attributes in process `syz.3.275'. [ 210.910284][ T5890] Process accounting resumed [ 212.771618][ T7541] netlink: 'syz.3.280': attribute type 64 has an invalid length. [ 212.842549][ T7541] netlink: 74 bytes leftover after parsing attributes in process `syz.3.280'. [ 214.975603][ T7586] netlink: 186 bytes leftover after parsing attributes in process `syz.3.287'. [ 215.831401][ T7596] netlink: 186 bytes leftover after parsing attributes in process `syz.3.289'. [ 219.518635][ T7640] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 219.664469][ T7647] netlink: 'syz.1.299': attribute type 64 has an invalid length. [ 219.714386][ T7647] netlink: 74 bytes leftover after parsing attributes in process `syz.1.299'. [ 219.790197][ T7651] netlink: 186 bytes leftover after parsing attributes in process `syz.2.297'. [ 220.492835][ T7656] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 220.548874][ T7656] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 220.612020][ T7656] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 220.645988][ T7656] page_type: f5(slab) [ 220.667944][ T7656] raw: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 220.747292][ T7656] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 220.827255][ T7656] head: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 220.909183][ T7656] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 220.978732][ T7656] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 221.034448][ T7656] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 221.091731][ T7656] page dumped because: unmovable page [ 221.121905][ T7652] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 221.136330][ T7656] page_owner tracks the page as allocated [ 221.157370][ T7656] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (udevd), ts 45080488333, free_ts 45063741894 [ 221.264660][ T7656] post_alloc_hook+0x153/0x170 [ 221.310850][ T7656] get_page_from_freelist+0x111d/0x3140 [ 221.376142][ T7656] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 221.437952][ T7656] new_slab+0xa6/0x6d0 [ 221.442088][ T7656] refill_objects+0x26b/0x400 [ 221.489627][ T7656] __pcs_replace_empty_main+0x19f/0x600 [ 221.527847][ T7656] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 221.533758][ T7656] shmem_alloc_inode+0x25/0x50 [ 221.544520][ T7674] HfR: entered promiscuous mode [ 221.561155][ T7656] alloc_inode+0x68/0x250 [ 221.571563][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 221.588263][ T7656] new_inode+0x22/0x1c0 [ 221.604946][ T7656] shmem_get_inode+0x197/0xf30 [ 221.614790][ T7676] HfR: left promiscuous mode [ 221.625211][ T7656] shmem_mknod+0x1a2/0x3b0 [ 221.634760][ T7680] netlink: 'syz.3.305': attribute type 64 has an invalid length. [ 221.663733][ T7656] lookup_open.isra.0+0xc47/0x11b0 [ 221.673278][ T7680] netlink: 74 bytes leftover after parsing attributes in process `syz.3.305'. [ 221.686292][ T7656] path_openat+0x2291/0x31a0 [ 221.691029][ T7656] do_file_open+0x20e/0x430 [ 221.737798][ T7656] do_sys_openat2+0x10d/0x1e0 [ 221.742630][ T7656] page last free pid 5195 tgid 5195 stack trace: [ 221.790997][ T7656] __free_frozen_pages+0x7ca/0x10a0 [ 221.817920][ T7656] qlist_free_all+0x47/0xe0 [ 221.836231][ T7656] kasan_quarantine_reduce+0x1a0/0x1f0 [ 221.863101][ T7656] __kasan_slab_alloc+0x69/0x90 [ 221.890568][ T7656] __kvmalloc_node_noprof+0x316/0xa00 [ 221.905346][ T7656] seq_read_iter+0x819/0x1270 [ 221.916615][ T7656] kernfs_fop_read_iter+0x46c/0x610 [ 221.931035][ T7656] vfs_read+0x825/0xb30 [ 221.943029][ T7656] ksys_read+0x12a/0x250 [ 221.954353][ T7656] do_syscall_64+0x106/0xf80 [ 221.964910][ T7656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.018058][ T7663] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 222.035713][ T7663] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 222.058880][ T7663] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 222.079968][ T7663] page_type: f5(slab) [ 222.090865][ T7663] raw: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 222.110531][ T7663] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 222.133700][ T7663] head: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 222.173476][ T7663] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 222.219597][ T7663] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 222.238011][ T7663] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 222.267386][ T7663] page dumped because: unmovable page [ 222.272810][ T7663] page_owner tracks the page as allocated [ 222.301914][ T7663] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (udevd), ts 45080488333, free_ts 45063741894 [ 222.422572][ T7663] post_alloc_hook+0x153/0x170 [ 222.460496][ T7663] get_page_from_freelist+0x111d/0x3140 [ 222.510619][ T7663] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 222.550542][ T7663] new_slab+0xa6/0x6d0 [ 222.570360][ T7663] refill_objects+0x26b/0x400 [ 222.575098][ T7663] __pcs_replace_empty_main+0x19f/0x600 [ 222.618173][ T7663] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 222.646688][ T7663] shmem_alloc_inode+0x25/0x50 [ 222.675872][ T7663] alloc_inode+0x68/0x250 [ 222.692639][ T7663] new_inode+0x22/0x1c0 [ 222.718611][ T7663] shmem_get_inode+0x197/0xf30 [ 222.723544][ T7663] shmem_mknod+0x1a2/0x3b0 [ 222.769670][ T7663] lookup_open.isra.0+0xc47/0x11b0 [ 222.790123][ T7663] path_openat+0x2291/0x31a0 [ 222.810376][ T7663] do_file_open+0x20e/0x430 [ 222.815006][ T7663] do_sys_openat2+0x10d/0x1e0 [ 222.877856][ T7663] page last free pid 5195 tgid 5195 stack trace: [ 222.916187][ T7663] __free_frozen_pages+0x7ca/0x10a0 [ 222.934337][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 222.956239][ T7663] qlist_free_all+0x47/0xe0 [ 222.976184][ T7663] kasan_quarantine_reduce+0x1a0/0x1f0 [ 222.992703][ T7663] __kasan_slab_alloc+0x69/0x90 [ 223.017843][ T7663] __kvmalloc_node_noprof+0x316/0xa00 [ 223.053728][ T7663] seq_read_iter+0x819/0x1270 [ 223.078422][ T7663] kernfs_fop_read_iter+0x46c/0x610 [ 223.110549][ T7663] vfs_read+0x825/0xb30 [ 223.137812][ T7663] ksys_read+0x12a/0x250 [ 223.146643][ T7663] do_syscall_64+0x106/0xf80 [ 223.184220][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.632759][ T7657] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 224.510279][ T7709] netlink: 'syz.2.309': attribute type 64 has an invalid length. [ 224.538427][ T30] audit: type=1800 audit(1771476703.379:15): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.308" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 224.576966][ T7709] netlink: 74 bytes leftover after parsing attributes in process `syz.2.309'. [ 224.921514][ T7717] FAULT_INJECTION: forcing a failure. [ 224.921514][ T7717] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 224.992855][ T7717] CPU: 0 UID: 0 PID: 7717 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(full) [ 224.992888][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.992903][ T7717] Call Trace: [ 224.992911][ T7717] [ 224.992920][ T7717] dump_stack_lvl+0x100/0x190 [ 224.992961][ T7717] should_fail_ex.cold+0x5/0xa [ 224.992988][ T7717] _copy_from_user+0x2e/0xd0 [ 224.993027][ T7717] memdup_user+0x6b/0xe0 [ 224.993065][ T7717] msr_io+0xea/0x480 [ 224.993087][ T7717] ? __pfx_do_get_feature_msr+0x10/0x10 [ 224.993128][ T7717] ? __pfx_msr_io+0x10/0x10 [ 224.993160][ T7717] kvm_arch_dev_ioctl+0x487/0x770 [ 224.993186][ T7717] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 224.993231][ T7717] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.993285][ T7717] ? do_vfs_ioctl+0x226/0x13e0 [ 224.993318][ T7717] kvm_dev_ioctl+0x73a/0x1a80 [ 224.993347][ T7717] ? find_held_lock+0x2b/0x80 [ 224.993382][ T7717] ? __fget_files+0x215/0x3d0 [ 224.993414][ T7717] ? hook_file_ioctl_common+0x146/0x410 [ 224.993448][ T7717] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 224.993474][ T7717] ? __fget_files+0x21f/0x3d0 [ 224.993511][ T7717] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 224.993537][ T7717] __x64_sys_ioctl+0x18e/0x210 [ 224.993568][ T7717] do_syscall_64+0x106/0xf80 [ 224.993592][ T7717] ? clear_bhb_loop+0x40/0x90 [ 224.993619][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.993642][ T7717] RIP: 0033:0x7fa92c39c629 [ 224.993660][ T7717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.993681][ T7717] RSP: 002b:00007fa92d2df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.993702][ T7717] RAX: ffffffffffffffda RBX: 00007fa92c615fa0 RCX: 00007fa92c39c629 [ 224.993717][ T7717] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000009 [ 224.993730][ T7717] RBP: 00007fa92c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 224.993743][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.993756][ T7717] R13: 00007fa92c616038 R14: 00007fa92c615fa0 R15: 00007ffc26d186b8 [ 224.993784][ T7717] [ 225.555269][ T7718] nvme_fabrics: missing parameter 'transport=%s' [ 225.596689][ T7718] nvme_fabrics: missing parameter 'nqn=%s' [ 225.747793][ T7714] nvme_fabrics: missing parameter 'transport=%s' [ 225.754641][ T7714] nvme_fabrics: missing parameter 'nqn=%s' [ 227.093354][ T7748] netlink: 'syz.1.317': attribute type 64 has an invalid length. [ 227.167859][ T7748] netlink: 74 bytes leftover after parsing attributes in process `syz.1.317'. [ 229.285316][ T7787] Invalid ELF header magic: != ELF [ 230.390895][ T7800] netlink: 186 bytes leftover after parsing attributes in process `syz.1.324'. [ 230.985030][ T7815] netlink: 186 bytes leftover after parsing attributes in process `syz.3.326'. [ 233.094441][ T7847] netlink: 186 bytes leftover after parsing attributes in process `syz.1.332'. [ 234.299178][ T7857] Invalid ELF header magic: != ELF [ 237.601077][ T7912] netlink: 186 bytes leftover after parsing attributes in process `syz.2.343'. [ 238.146200][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 238.987900][ T7926] netlink: 186 bytes leftover after parsing attributes in process `syz.1.345'. [ 239.701315][ T7942] random: crng reseeded on system resumption [ 239.748132][ T7944] netlink: zone id is out of range [ 240.342693][ T7949] FAULT_INJECTION: forcing a failure. [ 240.342693][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 240.408173][ T7949] CPU: 0 UID: 0 PID: 7949 Comm: syz.1.350 Not tainted syzkaller #0 PREEMPT(full) [ 240.408203][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.408215][ T7949] Call Trace: [ 240.408222][ T7949] [ 240.408229][ T7949] dump_stack_lvl+0x100/0x190 [ 240.408263][ T7949] should_fail_ex.cold+0x5/0xa [ 240.408286][ T7949] should_failslab+0xc2/0x120 [ 240.408320][ T7949] __kmalloc_cache_noprof+0x7a/0x6f0 [ 240.408345][ T7949] ? snd_seq_port_connect+0x61/0x560 [ 240.408372][ T7949] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 240.408397][ T7949] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 240.408445][ T7949] snd_seq_port_connect+0x61/0x560 [ 240.408473][ T7949] ? _raw_read_unlock+0x28/0x50 [ 240.408495][ T7949] ? check_subscription_permission.isra.0+0x146/0x240 [ 240.408528][ T7949] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 240.408564][ T7949] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 240.408613][ T7949] call_seq_client_ctl+0xa3/0x130 [ 240.408642][ T7949] snd_seq_kernel_client_ctl+0x77/0xd0 [ 240.408672][ T7949] snd_seq_oss_midi_open+0x5ad/0x6b0 [ 240.408725][ T7949] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 240.408799][ T7949] snd_seq_oss_synth_setup_midi+0x131/0x590 [ 240.408848][ T7949] snd_seq_oss_open+0x82e/0xa10 [ 240.408888][ T7949] odev_open+0x79/0xc0 [ 240.408922][ T7949] ? __pfx_odev_open+0x10/0x10 [ 240.408953][ T7949] soundcore_open+0x2e3/0x5a0 [ 240.408989][ T7949] ? __pfx_soundcore_open+0x10/0x10 [ 240.409021][ T7949] chrdev_open+0x234/0x6a0 [ 240.409059][ T7949] ? __pfx_apparmor_file_open+0x10/0x10 [ 240.409092][ T7949] ? __pfx_chrdev_open+0x10/0x10 [ 240.409134][ T7949] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 240.409180][ T7949] do_dentry_open+0x6d8/0x1660 [ 240.409219][ T7949] ? __pfx_chrdev_open+0x10/0x10 [ 240.409265][ T7949] vfs_open+0x82/0x3f0 [ 240.409296][ T7949] path_openat+0x208c/0x31a0 [ 240.409346][ T7949] ? __pfx_path_openat+0x10/0x10 [ 240.409396][ T7949] do_file_open+0x20e/0x430 [ 240.409438][ T7949] ? __pfx_do_file_open+0x10/0x10 [ 240.409499][ T7949] ? alloc_fd+0x476/0x790 [ 240.409539][ T7949] ? do_getname+0x191/0x390 [ 240.409569][ T7949] do_sys_openat2+0x10d/0x1e0 [ 240.409598][ T7949] ? __pfx_do_sys_openat2+0x10/0x10 [ 240.409629][ T7949] ? __x64_sys_close_range+0x2d9/0x5d0 [ 240.409677][ T7949] __x64_sys_openat+0x12d/0x210 [ 240.409707][ T7949] ? __pfx___x64_sys_openat+0x10/0x10 [ 240.409748][ T7949] do_syscall_64+0x106/0xf80 [ 240.409775][ T7949] ? clear_bhb_loop+0x40/0x90 [ 240.409805][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.409830][ T7949] RIP: 0033:0x7f78c9b9c629 [ 240.409850][ T7949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.409873][ T7949] RSP: 002b:00007f78caa70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.409896][ T7949] RAX: ffffffffffffffda RBX: 00007f78c9e16090 RCX: 00007f78c9b9c629 [ 240.409912][ T7949] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 240.409933][ T7949] RBP: 00007f78c9c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 240.409948][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.409962][ T7949] R13: 00007f78c9e16128 R14: 00007f78c9e16090 R15: 00007ffc2fc20528 [ 240.409993][ T7949] [ 240.745321][ T7942] netlink: 342 bytes leftover after parsing attributes in process `syz.2.346'. [ 242.304477][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b4c7800: rx timeout, send abort [ 242.313834][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b4c7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 243.641178][ T7969] netlink: 186 bytes leftover after parsing attributes in process `syz.2.355'. [ 243.652606][ T7968] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 243.692641][ T7968] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 243.796933][ T7968] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 243.804528][ T7968] page_type: f5(slab) [ 243.902002][ T7968] raw: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 244.061674][ T7968] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 244.167720][ T7968] head: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 244.248578][ T7979] netlink: 186 bytes leftover after parsing attributes in process `syz.0.356'. [ 244.279103][ T7968] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 244.333679][ T7968] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 244.415682][ T7968] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 244.496672][ T7968] page dumped because: unmovable page [ 244.502118][ T7968] page_owner tracks the page as allocated [ 244.564165][ T7968] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (udevd), ts 45080488333, free_ts 45063741894 [ 244.699312][ T7968] post_alloc_hook+0x153/0x170 [ 244.730927][ T7968] get_page_from_freelist+0x111d/0x3140 [ 244.771185][ T7968] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 244.808501][ T7968] new_slab+0xa6/0x6d0 [ 244.839296][ T7968] refill_objects+0x26b/0x400 [ 244.844034][ T7968] __pcs_replace_empty_main+0x19f/0x600 [ 244.905856][ T7968] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 244.951544][ T7968] shmem_alloc_inode+0x25/0x50 [ 244.982121][ T7968] alloc_inode+0x68/0x250 [ 245.025735][ T7968] new_inode+0x22/0x1c0 [ 245.056143][ T7968] shmem_get_inode+0x197/0xf30 [ 245.061085][ T7968] shmem_mknod+0x1a2/0x3b0 [ 245.077370][ T7989] netlink: 186 bytes leftover after parsing attributes in process `syz.2.357'. [ 245.115746][ T7968] lookup_open.isra.0+0xc47/0x11b0 [ 245.137525][ T7968] path_openat+0x2291/0x31a0 [ 245.142335][ T7968] do_file_open+0x20e/0x430 [ 245.171830][ T7968] do_sys_openat2+0x10d/0x1e0 [ 245.193231][ T7968] page last free pid 5195 tgid 5195 stack trace: [ 245.218005][ T7968] __free_frozen_pages+0x7ca/0x10a0 [ 245.243406][ T7968] qlist_free_all+0x47/0xe0 [ 245.253680][ T7968] kasan_quarantine_reduce+0x1a0/0x1f0 [ 245.269461][ T7968] __kasan_slab_alloc+0x69/0x90 [ 245.283387][ T7994] netlink: 186 bytes leftover after parsing attributes in process `syz.0.358'. [ 245.298374][ T7968] __kvmalloc_node_noprof+0x316/0xa00 [ 245.313908][ T7968] seq_read_iter+0x819/0x1270 [ 245.331550][ T7968] kernfs_fop_read_iter+0x46c/0x610 [ 245.347835][ T7968] vfs_read+0x825/0xb30 [ 245.363431][ T7968] ksys_read+0x12a/0x250 [ 245.383141][ T7968] do_syscall_64+0x106/0xf80 [ 245.400012][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.242416][ T8003] FAULT_INJECTION: forcing a failure. [ 246.242416][ T8003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 246.317292][ T8003] CPU: 0 UID: 0 PID: 8003 Comm: syz.1.360 Not tainted syzkaller #0 PREEMPT(full) [ 246.317322][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.317341][ T8003] Call Trace: [ 246.317348][ T8003] [ 246.317359][ T8003] dump_stack_lvl+0x100/0x190 [ 246.317402][ T8003] should_fail_ex.cold+0x5/0xa [ 246.317423][ T8003] ? prepare_alloc_pages+0x16d/0x5f0 [ 246.317448][ T8003] should_fail_alloc_page+0xeb/0x140 [ 246.317486][ T8003] prepare_alloc_pages+0x1f0/0x5f0 [ 246.317513][ T8003] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 246.317548][ T8003] ? rcu_is_watching+0x12/0xc0 [ 246.317592][ T8003] ? trace_mm_page_alloc+0x17a/0x1d0 [ 246.317628][ T8003] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 246.317657][ T8003] ? kernel_text_address+0x41/0x100 [ 246.317686][ T8003] ? unwind_get_return_address+0x59/0xa0 [ 246.317711][ T8003] ? arch_stack_walk+0xa6/0xf0 [ 246.317731][ T8003] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 246.317772][ T8003] ? stack_depot_save_flags+0x27/0x9d0 [ 246.317806][ T8003] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 246.317835][ T8003] ? pcpu_get_vm_areas+0x517/0x53e0 [ 246.317867][ T8003] ? pcpu_create_chunk+0x254/0x730 [ 246.317900][ T8003] ? pcpu_create_chunk+0x254/0x730 [ 246.317926][ T8003] ? pcpu_alloc_noprof+0x18c4/0x1c50 [ 246.317958][ T8003] alloc_pages_bulk_noprof+0x782/0x1490 [ 246.317997][ T8003] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 246.318036][ T8003] ? alloc_pages_noprof+0x233/0x390 [ 246.318092][ T8003] __kasan_populate_vmalloc+0xf0/0x210 [ 246.318128][ T8003] pcpu_get_vm_areas+0x2cc3/0x53e0 [ 246.318182][ T8003] ? __pfx_pcpu_get_vm_areas+0x10/0x10 [ 246.318226][ T8003] pcpu_create_chunk+0x254/0x730 [ 246.318268][ T8003] pcpu_alloc_noprof+0x18c4/0x1c50 [ 246.318308][ T8003] bpf_map_alloc_percpu+0x9a/0xf0 [ 246.318342][ T8003] ? __pfx_bpf_map_alloc_percpu+0x10/0x10 [ 246.318383][ T8003] ? __pfx___might_resched+0x10/0x10 [ 246.318414][ T8003] ? __bpf_map_area_alloc+0x13a/0x200 [ 246.318441][ T8003] htab_map_alloc+0x1054/0x14e0 [ 246.318479][ T8003] ? ns_capable+0xd2/0xf0 [ 246.318514][ T8003] ? __pfx_htab_map_mem_usage+0x10/0x10 [ 246.318545][ T8003] map_create+0x84e/0x2ba0 [ 246.318577][ T8003] ? futex_unqueue+0x13d/0x2c0 [ 246.318602][ T8003] ? __futex_wait+0x256/0x300 [ 246.318638][ T8003] ? __pfx_map_create+0x10/0x10 [ 246.318670][ T8003] ? __might_fault+0xc5/0x140 [ 246.318697][ T8003] ? __might_fault+0xc5/0x140 [ 246.318733][ T8003] __sys_bpf+0x2091/0x4b90 [ 246.318758][ T8003] ? __pfx___sys_bpf+0x10/0x10 [ 246.318780][ T8003] ? __pfx_futex_wait+0x10/0x10 [ 246.318816][ T8003] ? do_writev+0x214/0x340 [ 246.318851][ T8003] ? do_futex+0x192/0x350 [ 246.318890][ T8003] ? xfd_validate_state+0x129/0x190 [ 246.318926][ T8003] __x64_sys_bpf+0x7b/0xc0 [ 246.318948][ T8003] ? lockdep_hardirqs_on+0x78/0x100 [ 246.318971][ T8003] do_syscall_64+0x106/0xf80 [ 246.318993][ T8003] ? clear_bhb_loop+0x40/0x90 [ 246.319019][ T8003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.319040][ T8003] RIP: 0033:0x7f78c9b9c629 [ 246.319058][ T8003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.319077][ T8003] RSP: 002b:00007f78caa91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.319101][ T8003] RAX: ffffffffffffffda RBX: 00007f78c9e15fa0 RCX: 00007f78c9b9c629 [ 246.319133][ T8003] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 246.319146][ T8003] RBP: 00007f78c9c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 246.319160][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.319173][ T8003] R13: 00007f78c9e16038 R14: 00007f78c9e15fa0 R15: 00007ffc2fc20528 [ 246.319201][ T8003] [ 248.102425][ T8024] FAULT_INJECTION: forcing a failure. [ 248.102425][ T8024] name failslab, interval 1, probability 0, space 0, times 0 [ 248.156843][ T8024] CPU: 0 UID: 0 PID: 8024 Comm: syz.3.365 Not tainted syzkaller #0 PREEMPT(full) [ 248.156882][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.156897][ T8024] Call Trace: [ 248.156905][ T8024] [ 248.156914][ T8024] dump_stack_lvl+0x100/0x190 [ 248.156958][ T8024] should_fail_ex.cold+0x5/0xa [ 248.157002][ T8024] should_failslab+0xc2/0x120 [ 248.157044][ T8024] __kmalloc_cache_noprof+0x7a/0x6f0 [ 248.157079][ T8024] ? single_open+0x4d/0x1d0 [ 248.157113][ T8024] ? __pfx_snd_info_seq_show+0x10/0x10 [ 248.157150][ T8024] single_open+0x4d/0x1d0 [ 248.157181][ T8024] snd_info_text_entry_open+0x284/0x2f0 [ 248.157218][ T8024] ? trace_kmem_cache_alloc+0xf3/0x120 [ 248.157258][ T8024] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 248.157302][ T8024] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 248.157335][ T8024] ? proc_reg_open+0x23f/0x5f0 [ 248.157371][ T8024] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 248.157410][ T8024] proc_reg_open+0x2ab/0x5f0 [ 248.157446][ T8024] do_dentry_open+0x6d8/0x1660 [ 248.157484][ T8024] ? __pfx_proc_reg_open+0x10/0x10 [ 248.157525][ T8024] vfs_open+0x82/0x3f0 [ 248.157555][ T8024] path_openat+0x208c/0x31a0 [ 248.157605][ T8024] ? __pfx_path_openat+0x10/0x10 [ 248.157655][ T8024] do_file_open+0x20e/0x430 [ 248.157696][ T8024] ? __pfx_do_file_open+0x10/0x10 [ 248.157756][ T8024] ? alloc_fd+0x476/0x790 [ 248.157797][ T8024] ? do_getname+0x191/0x390 [ 248.157826][ T8024] do_sys_openat2+0x10d/0x1e0 [ 248.157855][ T8024] ? __pfx_do_sys_openat2+0x10/0x10 [ 248.157886][ T8024] ? __sys_sendmsg+0x18f/0x220 [ 248.157918][ T8024] __x64_sys_openat+0x12d/0x210 [ 248.157948][ T8024] ? __pfx___x64_sys_openat+0x10/0x10 [ 248.157989][ T8024] do_syscall_64+0x106/0xf80 [ 248.158016][ T8024] ? clear_bhb_loop+0x40/0x90 [ 248.158046][ T8024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.158071][ T8024] RIP: 0033:0x7f4f5d39c629 [ 248.158091][ T8024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.158114][ T8024] RSP: 002b:00007f4f5e1b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 248.158137][ T8024] RAX: ffffffffffffffda RBX: 00007f4f5d615fa0 RCX: 00007f4f5d39c629 [ 248.158153][ T8024] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 248.158169][ T8024] RBP: 00007f4f5d432b39 R08: 0000000000000000 R09: 0000000000000000 [ 248.158184][ T8024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.158198][ T8024] R13: 00007f4f5d616038 R14: 00007f4f5d615fa0 R15: 00007ffcc85dc508 [ 248.158229][ T8024] [ 248.414384][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807eedc400: rx timeout, send abort [ 248.423817][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807eedc400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 249.228308][ T8027] NFSD: Failed to start, no listeners configured. [ 249.451773][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 249.543268][ T8039] [U] [ 249.546317][ T8039] [U] [ 249.549028][ T8039] [U] [ 249.551734][ T8039] [U] [ 249.587224][ T8039] [U] [ 249.589968][ T8039] [U] [ 249.592675][ T8039] [U] [ 249.595393][ T8039] [U] [ 249.642035][ T8039] [U] [ 249.644800][ T8039] [U] [ 249.647511][ T8039] [U] [ 249.650231][ T8039] [U] [ 249.715341][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f5ee000: rx timeout, send abort [ 249.723950][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f5ee000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 249.790194][ T8039] [U] [ 249.893508][ T8039] nfs: Unknown parameter 'nl802154' [ 250.019870][ T8046] blktrace: Concurrent blktraces are not allowed on loop2 [ 251.715781][ T8063] netlink: 186 bytes leftover after parsing attributes in process `syz.3.371'. [ 251.912509][ T8066] netlink: 186 bytes leftover after parsing attributes in process `syz.1.372'. [ 253.192786][ T30] audit: type=1800 audit(1771480824.024:16): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=21297 res=0 errno=0 [ 253.538189][ T8080] could not allocate digest TFM handle [ 254.412191][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 254.488372][ T8112] netlink: 54041 bytes leftover after parsing attributes in process `syz.0.380'. [ 255.816665][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.823128][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.317776][ T8150] netlink: 186 bytes leftover after parsing attributes in process `syz.2.388'. [ 257.675337][ T8137] [U] ^\ [ 259.008666][ T8174] netlink: 186 bytes leftover after parsing attributes in process `syz.0.392'. [ 259.383995][ T8158] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 259.686956][ T8179] Invalid ELF header magic: != ELF [ 260.470919][ T8159] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 262.089543][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a0c7000: rx timeout, send abort [ 262.098034][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a0c7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 265.003992][ T8241] NFSD: Failed to start, no listeners configured. [ 265.510528][ T8250] zero sized request [ 266.557654][ T30] audit: type=1800 audit(1771480837.388:17): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.409" name="dbroot" dev="configfs" ino=22141 res=0 errno=0 [ 267.066906][ T8270] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 267.116400][ T8270] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 267.185443][ T8270] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 267.266125][ T8270] page_type: f5(slab) [ 267.356871][ T8270] raw: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 267.422506][ T8270] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 267.540668][ T8270] head: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 267.589110][ T8270] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 267.655722][ T8270] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 267.758498][ T8270] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 267.805950][ T8270] page dumped because: unmovable page [ 267.853555][ T8270] page_owner tracks the page as allocated [ 267.886025][ T8270] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (udevd), ts 45080488333, free_ts 45063741894 [ 268.010026][ T8270] post_alloc_hook+0x153/0x170 [ 268.014867][ T8270] get_page_from_freelist+0x111d/0x3140 [ 268.071364][ T8270] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 268.111776][ T8270] new_slab+0xa6/0x6d0 [ 268.115915][ T8270] refill_objects+0x26b/0x400 [ 268.162466][ T8270] __pcs_replace_empty_main+0x19f/0x600 [ 268.183402][ T8270] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 268.207396][ T8270] shmem_alloc_inode+0x25/0x50 [ 268.237506][ T8270] alloc_inode+0x68/0x250 [ 268.241906][ T8270] new_inode+0x22/0x1c0 [ 268.273047][ T8270] shmem_get_inode+0x197/0xf30 [ 268.299033][ T8270] shmem_mknod+0x1a2/0x3b0 [ 268.319500][ T8270] lookup_open.isra.0+0xc47/0x11b0 [ 268.348464][ T8270] path_openat+0x2291/0x31a0 [ 268.368729][ T8270] do_file_open+0x20e/0x430 [ 268.406726][ T8270] do_sys_openat2+0x10d/0x1e0 [ 268.425385][ T8270] page last free pid 5195 tgid 5195 stack trace: [ 268.457108][ T8270] __free_frozen_pages+0x7ca/0x10a0 [ 268.489307][ T8270] qlist_free_all+0x47/0xe0 [ 268.510267][ T8270] kasan_quarantine_reduce+0x1a0/0x1f0 [ 268.515796][ T8270] __kasan_slab_alloc+0x69/0x90 [ 268.565808][ T8270] __kvmalloc_node_noprof+0x316/0xa00 [ 268.586274][ T8270] seq_read_iter+0x819/0x1270 [ 268.606493][ T8270] kernfs_fop_read_iter+0x46c/0x610 [ 268.631978][ T8270] vfs_read+0x825/0xb30 [ 268.650558][ T8270] ksys_read+0x12a/0x250 [ 268.654937][ T8270] do_syscall_64+0x106/0xf80 [ 268.679752][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.517652][ T8290] [U] ^\ [ 270.673922][ T30] audit: type=1800 audit(1771480841.496:18): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=22415 res=0 errno=0 [ 271.083668][ T8312] could not allocate digest TFM handle [ 271.569946][ T8322] overlayfs: missing 'lowerdir' [ 271.739436][ T8322] FAULT_INJECTION: forcing a failure. [ 271.739436][ T8322] name failslab, interval 1, probability 0, space 0, times 0 [ 271.872610][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.1.419 Not tainted syzkaller #0 PREEMPT(full) [ 271.872644][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.872658][ T8322] Call Trace: [ 271.872666][ T8322] [ 271.872675][ T8322] dump_stack_lvl+0x100/0x190 [ 271.872716][ T8322] should_fail_ex.cold+0x5/0xa [ 271.872743][ T8322] should_failslab+0xc2/0x120 [ 271.872784][ T8322] __kmalloc_cache_noprof+0x7a/0x6f0 [ 271.872813][ T8322] ? snd_timer_instance_new+0x47/0x2e0 [ 271.872855][ T8322] snd_timer_instance_new+0x47/0x2e0 [ 271.872892][ T8322] snd_seq_timer_open+0x1d4/0x600 [ 271.872921][ T8322] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 271.872957][ T8322] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 271.872983][ T8322] ? lockdep_hardirqs_on+0x78/0x100 [ 271.873010][ T8322] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 271.873038][ T8322] queue_use+0xdc/0x1f0 [ 271.873076][ T8322] snd_seq_queue_alloc+0x2e5/0x590 [ 271.873121][ T8322] snd_seq_ioctl_create_queue+0xa9/0x370 [ 271.873152][ T8322] call_seq_client_ctl+0xa3/0x130 [ 271.873185][ T8322] snd_seq_kernel_client_ctl+0x77/0xd0 [ 271.873218][ T8322] alloc_seq_queue+0xdb/0x180 [ 271.873250][ T8322] ? __pfx_alloc_seq_queue+0x10/0x10 [ 271.873307][ T8322] ? mark_held_locks+0x40/0x70 [ 271.873337][ T8322] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.873361][ T8322] ? lockdep_hardirqs_on+0x78/0x100 [ 271.873391][ T8322] snd_seq_oss_open+0x2b2/0xa10 [ 271.873430][ T8322] odev_open+0x79/0xc0 [ 271.873458][ T8322] ? __pfx_odev_open+0x10/0x10 [ 271.873488][ T8322] soundcore_open+0x2e3/0x5a0 [ 271.873523][ T8322] ? __pfx_soundcore_open+0x10/0x10 [ 271.873558][ T8322] chrdev_open+0x234/0x6a0 [ 271.873597][ T8322] ? __pfx_apparmor_file_open+0x10/0x10 [ 271.873630][ T8322] ? __pfx_chrdev_open+0x10/0x10 [ 271.873671][ T8322] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 271.873718][ T8322] do_dentry_open+0x6d8/0x1660 [ 271.873756][ T8322] ? __pfx_chrdev_open+0x10/0x10 [ 271.873815][ T8322] vfs_open+0x82/0x3f0 [ 271.873845][ T8322] path_openat+0x208c/0x31a0 [ 271.873892][ T8322] ? __pfx_path_openat+0x10/0x10 [ 271.873940][ T8322] do_file_open+0x20e/0x430 [ 271.873980][ T8322] ? __pfx_do_file_open+0x10/0x10 [ 271.874038][ T8322] ? alloc_fd+0x476/0x790 [ 271.874077][ T8322] ? do_getname+0x191/0x390 [ 271.874106][ T8322] do_sys_openat2+0x10d/0x1e0 [ 271.874134][ T8322] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.874163][ T8322] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 271.874198][ T8322] __x64_sys_openat+0x12d/0x210 [ 271.874227][ T8322] ? __pfx___x64_sys_openat+0x10/0x10 [ 271.874266][ T8322] do_syscall_64+0x106/0xf80 [ 271.874297][ T8322] ? clear_bhb_loop+0x40/0x90 [ 271.874327][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.874351][ T8322] RIP: 0033:0x7f78c9b9c629 [ 271.874371][ T8322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.874394][ T8322] RSP: 002b:00007f78caa70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.874417][ T8322] RAX: ffffffffffffffda RBX: 00007f78c9e16090 RCX: 00007f78c9b9c629 [ 271.874432][ T8322] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 271.874447][ T8322] RBP: 00007f78c9c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 271.874461][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.874475][ T8322] R13: 00007f78c9e16128 R14: 00007f78c9e16090 R15: 00007ffc2fc20528 [ 271.874505][ T8322] [ 273.390850][ T8339] netlink: 186 bytes leftover after parsing attributes in process `syz.1.422'. [ 275.122027][ T8363] NFSD: Failed to start, no listeners configured. [ 275.883713][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079cef800: rx timeout, send abort [ 275.892270][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079cef800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 276.805359][ T30] audit: type=1800 audit(1771480847.613:19): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=22842 res=0 errno=0 [ 277.179024][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807abe8800: rx timeout, send abort [ 277.187461][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807abe8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 277.338118][ T8382] could not allocate digest TFM handle [ 277.783205][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 277.835066][ T8392] netlink: 354 bytes leftover after parsing attributes in process `syz.1.433'. [ 278.310401][ T8405] netlink: 186 bytes leftover after parsing attributes in process `syz.1.437'. [ 278.557207][ T8396] [U] ^\ [ 279.141051][ T8415] netlink: 186 bytes leftover after parsing attributes in process `syz.3.439'. [ 279.870834][ T8425] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 281.227555][ T8435] FAULT_INJECTION: forcing a failure. [ 281.227555][ T8435] name failslab, interval 1, probability 0, space 0, times 0 [ 281.306619][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.2.443 Not tainted syzkaller #0 PREEMPT(full) [ 281.306653][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.306668][ T8435] Call Trace: [ 281.306676][ T8435] [ 281.306685][ T8435] dump_stack_lvl+0x100/0x190 [ 281.306726][ T8435] should_fail_ex.cold+0x5/0xa [ 281.306753][ T8435] should_failslab+0xc2/0x120 [ 281.306793][ T8435] __kmalloc_cache_noprof+0x7a/0x6f0 [ 281.306822][ T8435] ? snd_seq_fifo_new+0x42/0x270 [ 281.306845][ T8435] ? _raw_spin_unlock_irq+0x2e/0x50 [ 281.306872][ T8435] ? __pfx_snd_seq_open+0x10/0x10 [ 281.306902][ T8435] snd_seq_fifo_new+0x42/0x270 [ 281.306925][ T8435] snd_seq_open+0x3fe/0x590 [ 281.306955][ T8435] ? __pfx_snd_seq_open+0x10/0x10 [ 281.306983][ T8435] snd_open+0x22d/0x4c0 [ 281.307017][ T8435] ? __pfx_snd_open+0x10/0x10 [ 281.307050][ T8435] chrdev_open+0x234/0x6a0 [ 281.307089][ T8435] ? __pfx_apparmor_file_open+0x10/0x10 [ 281.307121][ T8435] ? __pfx_chrdev_open+0x10/0x10 [ 281.307162][ T8435] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 281.307209][ T8435] do_dentry_open+0x6d8/0x1660 [ 281.307247][ T8435] ? __pfx_chrdev_open+0x10/0x10 [ 281.307294][ T8435] vfs_open+0x82/0x3f0 [ 281.307324][ T8435] path_openat+0x208c/0x31a0 [ 281.307373][ T8435] ? __pfx_path_openat+0x10/0x10 [ 281.307436][ T8435] do_file_open+0x20e/0x430 [ 281.307477][ T8435] ? __pfx_do_file_open+0x10/0x10 [ 281.307542][ T8435] ? alloc_fd+0x476/0x790 [ 281.307582][ T8435] ? do_getname+0x191/0x390 [ 281.307611][ T8435] do_sys_openat2+0x10d/0x1e0 [ 281.307638][ T8435] ? __pfx_do_sys_openat2+0x10/0x10 [ 281.307677][ T8435] __x64_sys_openat+0x12d/0x210 [ 281.307706][ T8435] ? __pfx___x64_sys_openat+0x10/0x10 [ 281.307749][ T8435] do_syscall_64+0x106/0xf80 [ 281.307775][ T8435] ? clear_bhb_loop+0x40/0x90 [ 281.307804][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.307828][ T8435] RIP: 0033:0x7fa92c39c629 [ 281.307847][ T8435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.307870][ T8435] RSP: 002b:00007fa92d2df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 281.307893][ T8435] RAX: ffffffffffffffda RBX: 00007fa92c615fa0 RCX: 00007fa92c39c629 [ 281.307908][ T8435] RDX: 00000000001e3800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 281.307923][ T8435] RBP: 00007fa92c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 281.307937][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.307951][ T8435] R13: 00007fa92c616038 R14: 00007fa92c615fa0 R15: 00007ffc26d186b8 [ 281.307981][ T8435] [ 281.913959][ T8450] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 282.289384][ T8456] netlink: 186 bytes leftover after parsing attributes in process `syz.1.448'. [ 282.811422][ T8462] random: crng reseeded on system resumption [ 283.940777][ T8478] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 284.162093][ T8481] netlink: 186 bytes leftover after parsing attributes in process `syz.0.453'. [ 284.864348][ T8475] bond0: invalid ARP target specified [ 285.014638][ T8488] ubi0: attaching mtd1 [ 285.040160][ T8488] ubi0 error: ubi_attach_mtd_dev: bad VID header (16777279) or data offsets (16777343) [ 285.801855][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 285.934482][ T30] audit: type=1804 audit(1771480856.748:20): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.457" name="/newroot/117/file0" dev="tmpfs" ino=643 res=1 errno=0 [ 286.067850][ T30] audit: type=1804 audit(1771480856.858:21): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.457" name="/newroot/117/file0" dev="tmpfs" ino=643 res=1 errno=0 [ 286.991593][ T8526] netlink: 186 bytes leftover after parsing attributes in process `syz.0.463'. [ 288.134396][ T8543] NFSD: Failed to start, no listeners configured. [ 288.925409][ T8555] random: crng reseeded on system resumption [ 291.474281][ T30] audit: type=1326 audit(1771480862.285:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.476" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa92c39c629 code=0x0 [ 291.526148][ T8587] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 291.526148][ T8587] The task syz.2.476 (8587) triggered the difference, watch for misbehavior. [ 292.611524][ T8603] netlink: 354 bytes leftover after parsing attributes in process `syz.1.487'. [ 293.160620][ T8616] netlink: 186 bytes leftover after parsing attributes in process `syz.3.480'. [ 293.649459][ T8609] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 293.828481][ T8620] zswap: compressor not available [ 294.332619][ T8614] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 297.705723][ T8667] syz.0.490 uses obsolete (PF_INET,SOCK_PACKET) [ 298.701202][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 301.219257][ T8705] netlink: 186 bytes leftover after parsing attributes in process `syz.1.496'. [ 301.689035][ T8710] vhci_hcd vhci_hcd.1: invalid port number 37 [ 301.697462][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b362c00: rx timeout, send abort [ 301.706013][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b362c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 301.794884][ T8710] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i0025 l1 [ 303.507848][ T8726] overlayfs: missing 'lowerdir' [ 303.626631][ T8726] FAULT_INJECTION: forcing a failure. [ 303.626631][ T8726] name failslab, interval 1, probability 0, space 0, times 0 [ 303.806178][ T8726] CPU: 0 UID: 0 PID: 8726 Comm: syz.2.500 Not tainted syzkaller #0 PREEMPT(full) [ 303.806213][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.806228][ T8726] Call Trace: [ 303.806235][ T8726] [ 303.806245][ T8726] dump_stack_lvl+0x100/0x190 [ 303.806285][ T8726] should_fail_ex.cold+0x5/0xa [ 303.806313][ T8726] should_failslab+0xc2/0x120 [ 303.806353][ T8726] __kmalloc_cache_noprof+0x7a/0x6f0 [ 303.806382][ T8726] ? snd_seq_prioq_new+0x3f/0x110 [ 303.806414][ T8726] snd_seq_prioq_new+0x3f/0x110 [ 303.806438][ T8726] snd_seq_queue_alloc+0x12b/0x590 [ 303.806482][ T8726] snd_seq_ioctl_create_queue+0xa9/0x370 [ 303.806514][ T8726] call_seq_client_ctl+0xa3/0x130 [ 303.806547][ T8726] snd_seq_kernel_client_ctl+0x77/0xd0 [ 303.806580][ T8726] alloc_seq_queue+0xdb/0x180 [ 303.806613][ T8726] ? __pfx_alloc_seq_queue+0x10/0x10 [ 303.806661][ T8726] ? mark_held_locks+0x40/0x70 [ 303.806691][ T8726] ? _raw_spin_unlock_irq+0x23/0x50 [ 303.806715][ T8726] ? lockdep_hardirqs_on+0x78/0x100 [ 303.806745][ T8726] snd_seq_oss_open+0x2b2/0xa10 [ 303.806784][ T8726] odev_open+0x79/0xc0 [ 303.806813][ T8726] ? __pfx_odev_open+0x10/0x10 [ 303.806843][ T8726] soundcore_open+0x2e3/0x5a0 [ 303.806878][ T8726] ? __pfx_soundcore_open+0x10/0x10 [ 303.806909][ T8726] chrdev_open+0x234/0x6a0 [ 303.806948][ T8726] ? __pfx_apparmor_file_open+0x10/0x10 [ 303.806988][ T8726] ? __pfx_chrdev_open+0x10/0x10 [ 303.807030][ T8726] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 303.807080][ T8726] do_dentry_open+0x6d8/0x1660 [ 303.807118][ T8726] ? __pfx_chrdev_open+0x10/0x10 [ 303.807164][ T8726] vfs_open+0x82/0x3f0 [ 303.807195][ T8726] path_openat+0x208c/0x31a0 [ 303.807244][ T8726] ? __pfx_path_openat+0x10/0x10 [ 303.807294][ T8726] do_file_open+0x20e/0x430 [ 303.807335][ T8726] ? __pfx_do_file_open+0x10/0x10 [ 303.807396][ T8726] ? alloc_fd+0x476/0x790 [ 303.807437][ T8726] ? do_getname+0x191/0x390 [ 303.807467][ T8726] do_sys_openat2+0x10d/0x1e0 [ 303.807495][ T8726] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.807526][ T8726] ? find_held_lock+0x2b/0x80 [ 303.807572][ T8726] __x64_sys_openat+0x12d/0x210 [ 303.807602][ T8726] ? __pfx___x64_sys_openat+0x10/0x10 [ 303.807643][ T8726] do_syscall_64+0x106/0xf80 [ 303.807669][ T8726] ? clear_bhb_loop+0x40/0x90 [ 303.807699][ T8726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.807724][ T8726] RIP: 0033:0x7fa92c39c629 [ 303.807744][ T8726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.807768][ T8726] RSP: 002b:00007fa92d2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.807791][ T8726] RAX: ffffffffffffffda RBX: 00007fa92c616090 RCX: 00007fa92c39c629 [ 303.807807][ T8726] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 303.807822][ T8726] RBP: 00007fa92c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 303.807837][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.807851][ T8726] R13: 00007fa92c616128 R14: 00007fa92c616090 R15: 00007ffc26d186b8 [ 303.807883][ T8726] [ 305.010395][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880233ffc00: rx timeout, send abort [ 305.018878][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880233ffc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 306.161705][ T8732] ubi0: attaching mtd0 [ 306.249999][ T8732] ubi0: scanning is finished [ 306.296458][ T8732] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 306.578768][ T8732] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 306.671627][ T8745] block nbd2: not configured, cannot reconfigure [ 307.906394][ T8761] netlink: 186 bytes leftover after parsing attributes in process `syz.0.515'. [ 308.665042][ T8765] NFSD: Failed to start, no listeners configured. [ 309.399500][ T8773] usb usb24: usbfs: process 8773 (syz.3.509) did not claim interface 0 before use [ 310.756632][ T8793] mkiss: ax0: crc mode is auto. [ 311.604816][ T8801] overlayfs: missing 'lowerdir' [ 311.613968][ T8802] netlink: 186 bytes leftover after parsing attributes in process `syz.1.516'. [ 313.112298][ T8808] block nbd2: not configured, cannot reconfigure [ 313.273467][ T8815] netlink: 186 bytes leftover after parsing attributes in process `syz.0.526'. [ 313.283784][ T8816] netlink: 186 bytes leftover after parsing attributes in process `syz.2.518'. [ 314.621147][ T8834] netlink: 186 bytes leftover after parsing attributes in process `syz.0.521'. [ 314.858600][ T8821] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 315.647048][ T8822] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 317.276499][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.282921][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.083195][ T8872] bridge_slave_1: left allmulticast mode [ 318.176746][ T8872] bridge_slave_1: left promiscuous mode [ 318.255888][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.231352][ T8889] netlink: 186 bytes leftover after parsing attributes in process `syz.1.531'. [ 319.599808][ T8894] netlink: 186 bytes leftover after parsing attributes in process `syz.3.530'. [ 320.447876][ T8907] netlink: 186 bytes leftover after parsing attributes in process `syz.1.535'. [ 322.583600][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 322.660974][ T8929] netlink: 54041 bytes leftover after parsing attributes in process `syz.3.538'. [ 324.712794][ T8946] netlink: 186 bytes leftover after parsing attributes in process `syz.2.543'. [ 325.032460][ T8951] FAULT_INJECTION: forcing a failure. [ 325.032460][ T8951] name failslab, interval 1, probability 0, space 0, times 0 [ 325.084179][ T8934] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 325.110355][ T8951] CPU: 0 UID: 0 PID: 8951 Comm: syz.1.544 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.110393][ T8951] Tainted: [L]=SOFTLOCKUP [ 325.110402][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.110416][ T8951] Call Trace: [ 325.110424][ T8951] [ 325.110433][ T8951] dump_stack_lvl+0x100/0x190 [ 325.110474][ T8951] should_fail_ex.cold+0x5/0xa [ 325.110501][ T8951] should_failslab+0xc2/0x120 [ 325.110541][ T8951] __kmalloc_cache_noprof+0x7a/0x6f0 [ 325.110570][ T8951] ? init_srcu_struct_fields+0x9a2/0xe30 [ 325.110601][ T8951] ? read_tsc+0x9/0x20 [ 325.110626][ T8951] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 325.110659][ T8951] init_srcu_struct_fields+0x9a2/0xe30 [ 325.110694][ T8951] kvm_dev_ioctl+0x7b6/0x1a80 [ 325.110726][ T8951] ? find_held_lock+0x2b/0x80 [ 325.110765][ T8951] ? __fget_files+0x215/0x3d0 [ 325.110800][ T8951] ? hook_file_ioctl_common+0x146/0x410 [ 325.110839][ T8951] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 325.110869][ T8951] ? __fget_files+0x21f/0x3d0 [ 325.110909][ T8951] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 325.110944][ T8951] __x64_sys_ioctl+0x18e/0x210 [ 325.110980][ T8951] do_syscall_64+0x106/0xf80 [ 325.111007][ T8951] ? clear_bhb_loop+0x40/0x90 [ 325.111037][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.111062][ T8951] RIP: 0033:0x7f78c9b9c629 [ 325.111081][ T8951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.111105][ T8951] RSP: 002b:00007f78caa91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.111128][ T8951] RAX: ffffffffffffffda RBX: 00007f78c9e15fa0 RCX: 00007f78c9b9c629 [ 325.111144][ T8951] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 325.111158][ T8951] RBP: 00007f78c9c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 325.111173][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.111199][ T8951] R13: 00007f78c9e16038 R14: 00007f78c9e15fa0 R15: 00007ffc2fc20528 [ 325.111228][ T8951] [ 326.571161][ T8951] FAULT_INJECTION: forcing a failure. [ 326.571161][ T8951] name fail_futex, interval 1, probability 0, space 0, times 1 [ 326.630204][ T8951] CPU: 0 UID: 0 PID: 8951 Comm: syz.1.544 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.630240][ T8951] Tainted: [L]=SOFTLOCKUP [ 326.630247][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.630260][ T8951] Call Trace: [ 326.630268][ T8951] [ 326.630276][ T8951] dump_stack_lvl+0x100/0x190 [ 326.630313][ T8951] should_fail_ex.cold+0x5/0xa [ 326.630338][ T8951] get_futex_key+0x1d2/0x1620 [ 326.630368][ T8951] ? __pfx_get_futex_key+0x10/0x10 [ 326.630392][ T8951] ? lock_acquire+0x1cf/0x380 [ 326.630428][ T8951] futex_wake+0xea/0x530 [ 326.630464][ T8951] ? __pfx_futex_wake+0x10/0x10 [ 326.630497][ T8951] ? exit_mm_release+0x19/0x30 [ 326.630530][ T8951] do_futex+0x32b/0x350 [ 326.630559][ T8951] ? __pfx_do_futex+0x10/0x10 [ 326.630585][ T8951] ? __might_fault+0xc5/0x140 [ 326.630622][ T8951] mm_release+0x24a/0x2f0 [ 326.630648][ T8951] do_exit+0x675/0x2aa0 [ 326.630680][ T8951] ? __pfx_do_exit+0x10/0x10 [ 326.630708][ T8951] ? do_raw_spin_lock+0x128/0x260 [ 326.630739][ T8951] ? find_held_lock+0x2b/0x80 [ 326.630773][ T8951] ? get_signal+0x7e0/0x21e0 [ 326.630831][ T8951] do_group_exit+0xd5/0x2a0 [ 326.630862][ T8951] get_signal+0x1ec7/0x21e0 [ 326.630913][ T8951] ? __pfx_get_signal+0x10/0x10 [ 326.630937][ T8951] ? do_futex+0x192/0x350 [ 326.630968][ T8951] arch_do_signal_or_restart+0x91/0x770 [ 326.630997][ T8951] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 326.631033][ T8951] ? __pfx___x64_sys_futex+0x10/0x10 [ 326.631069][ T8951] exit_to_user_mode_loop+0x86/0x4a0 [ 326.631101][ T8951] do_syscall_64+0x668/0xf80 [ 326.631127][ T8951] ? clear_bhb_loop+0x40/0x90 [ 326.631155][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.631179][ T8951] RIP: 0033:0x7f78c9b9c629 [ 326.631198][ T8951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.631220][ T8951] RSP: 002b:00007f78caa910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 326.631241][ T8951] RAX: fffffffffffffe00 RBX: 00007f78c9e15fa8 RCX: 00007f78c9b9c629 [ 326.631256][ T8951] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f78c9e15fa8 [ 326.631270][ T8951] RBP: 00007f78c9e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 326.631295][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.631308][ T8951] R13: 00007f78c9e16038 R14: 00007ffc2fc20440 R15: 00007ffc2fc20528 [ 326.631336][ T8951] [ 327.660875][ T8960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 327.727439][ T8961] futex_wake_op: syz.3.545 tries to shift op by -2048; fix this program [ 327.790266][ T8961] futex_wake_op: syz.3.545 tries to shift op by -2048; fix this program [ 327.843886][ T8960] 0x000000000001-0x000000020000 : "" [ 327.860474][ T8939] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 327.941014][ T8960] ftl_cs: FTL header corrupt! [ 328.763225][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 329.634478][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 329.750778][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.878163][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 331.005898][ T30] audit: type=1804 audit(1771480901.803:23): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.550" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=28 res=1 errno=0 [ 334.883990][ T9028] netlink: 186 bytes leftover after parsing attributes in process `syz.2.559'. [ 335.335231][ T9034] capability: warning: `syz.3.561' uses 32-bit capabilities (legacy support in use) [ 335.705323][ T9034] ptp ptp0: new virtual clock ptp1 [ 335.797974][ T9034] ptp ptp0: new virtual clock ptp2 [ 335.922139][ T9034] ptp ptp0: new virtual clock ptp3 [ 335.927302][ T9034] ptp ptp0: guarantee physical clock free running [ 335.945869][ T9042] input: f as /devices/virtual/input/input19 [ 336.143311][ T9045] zram: Removed device: zram0 [ 336.228921][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 336.312324][ T9049] netlink: 54041 bytes leftover after parsing attributes in process `syz.1.563'. [ 337.279234][ T9060] netlink: 186 bytes leftover after parsing attributes in process `syz.0.565'. [ 340.839113][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 340.978827][ T9089] netlink: 54041 bytes leftover after parsing attributes in process `syz.3.569'. [ 341.741662][ T9097] netlink: 186 bytes leftover after parsing attributes in process `syz.1.571'. [ 342.089534][ T30] audit: type=1800 audit(1771480912.883:24): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.573" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 346.116160][ T9147] sd 0:0:1:0: PR command failed: 1026 [ 346.199109][ T9147] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 346.321026][ T9147] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 348.739279][ T9162] FAULT_INJECTION: forcing a failure. [ 348.739279][ T9162] name failslab, interval 1, probability 0, space 0, times 0 [ 348.799935][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.2.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.799975][ T9162] Tainted: [L]=SOFTLOCKUP [ 348.799984][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.800005][ T9162] Call Trace: [ 348.800013][ T9162] [ 348.800022][ T9162] dump_stack_lvl+0x100/0x190 [ 348.800064][ T9162] should_fail_ex.cold+0x5/0xa [ 348.800092][ T9162] should_failslab+0xc2/0x120 [ 348.800133][ T9162] __kmalloc_cache_noprof+0x7a/0x6f0 [ 348.800163][ T9162] ? percpu_ref_init+0xec/0x3f0 [ 348.800197][ T9162] ? __pfx_blkg_release+0x10/0x10 [ 348.800234][ T9162] percpu_ref_init+0xec/0x3f0 [ 348.800262][ T9162] ? kasan_save_track+0x14/0x30 [ 348.800300][ T9162] blkg_alloc+0xf0/0xae0 [ 348.800347][ T9162] blkcg_init_disk+0x51/0x580 [ 348.800374][ T9162] __alloc_disk_node+0x2f6/0x6b0 [ 348.800413][ T9162] __blk_mq_alloc_disk+0x89/0x120 [ 348.800445][ T9162] loop_add+0x498/0xb60 [ 348.800487][ T9162] ? __pfx_loop_add+0x10/0x10 [ 348.800552][ T9162] loop_control_ioctl+0xae/0x620 [ 348.800579][ T9162] ? __pfx_loop_control_ioctl+0x10/0x10 [ 348.800604][ T9162] ? xfd_validate_state+0x129/0x190 [ 348.800646][ T9162] ? __pfx_loop_control_ioctl+0x10/0x10 [ 348.800673][ T9162] __x64_sys_ioctl+0x18e/0x210 [ 348.800709][ T9162] do_syscall_64+0x106/0xf80 [ 348.800736][ T9162] ? clear_bhb_loop+0x40/0x90 [ 348.800766][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.800792][ T9162] RIP: 0033:0x7fa92c39c629 [ 348.800812][ T9162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.800837][ T9162] RSP: 002b:00007fa92d2df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.800861][ T9162] RAX: ffffffffffffffda RBX: 00007fa92c615fa0 RCX: 00007fa92c39c629 [ 348.800877][ T9162] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 348.800893][ T9162] RBP: 00007fa92c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 348.800908][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.800923][ T9162] R13: 00007fa92c616038 R14: 00007fa92c615fa0 R15: 00007ffc26d186b8 [ 348.800954][ T9162] [ 349.610764][ T9167] FAULT_INJECTION: forcing a failure. [ 349.610764][ T9167] name failslab, interval 1, probability 0, space 0, times 0 [ 349.731158][ T9167] CPU: 0 UID: 0 PID: 9167 Comm: syz.1.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.731196][ T9167] Tainted: [L]=SOFTLOCKUP [ 349.731205][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.731219][ T9167] Call Trace: [ 349.731226][ T9167] [ 349.731235][ T9167] dump_stack_lvl+0x100/0x190 [ 349.731275][ T9167] should_fail_ex.cold+0x5/0xa [ 349.731300][ T9167] ? sk_prot_alloc+0x10b/0x2a0 [ 349.731338][ T9167] should_failslab+0xc2/0x120 [ 349.731377][ T9167] __kmalloc_noprof+0xe0/0x850 [ 349.731416][ T9167] sk_prot_alloc+0x10b/0x2a0 [ 349.731449][ T9167] sk_alloc+0x36/0xe80 [ 349.731472][ T9167] __netlink_create+0x5e/0x2c0 [ 349.731509][ T9167] ? __wake_up+0x3f/0x60 [ 349.731535][ T9167] netlink_create+0x293/0x610 [ 349.731559][ T9167] ? __pfx_genl_bind+0x10/0x10 [ 349.731588][ T9167] ? __pfx_genl_unbind+0x10/0x10 [ 349.731616][ T9167] ? __pfx_genl_release+0x10/0x10 [ 349.731649][ T9167] __sock_create+0x339/0x860 [ 349.731688][ T9167] __sys_socket+0x14d/0x260 [ 349.731723][ T9167] ? __pfx___sys_socket+0x10/0x10 [ 349.731766][ T9167] __x64_sys_socket+0x72/0xb0 [ 349.731800][ T9167] ? lockdep_hardirqs_on+0x78/0x100 [ 349.731827][ T9167] do_syscall_64+0x106/0xf80 [ 349.731871][ T9167] ? clear_bhb_loop+0x40/0x90 [ 349.731902][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.731935][ T9167] RIP: 0033:0x7f78c9b9c629 [ 349.731955][ T9167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.731981][ T9167] RSP: 002b:00007f78caa91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 349.732004][ T9167] RAX: ffffffffffffffda RBX: 00007f78c9e15fa0 RCX: 00007f78c9b9c629 [ 349.732020][ T9167] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 349.732035][ T9167] RBP: 00007f78c9c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 349.732051][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.732069][ T9167] R13: 00007f78c9e16038 R14: 00007f78c9e15fa0 R15: 00007ffc2fc20528 [ 349.732100][ T9167] [ 354.437820][ T9205] FAULT_INJECTION: forcing a failure. [ 354.437820][ T9205] name failslab, interval 1, probability 0, space 0, times 0 [ 354.543038][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.2.593 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.543079][ T9205] Tainted: [L]=SOFTLOCKUP [ 354.543087][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 354.543103][ T9205] Call Trace: [ 354.543111][ T9205] [ 354.543120][ T9205] dump_stack_lvl+0x100/0x190 [ 354.543163][ T9205] should_fail_ex.cold+0x5/0xa [ 354.543191][ T9205] should_failslab+0xc2/0x120 [ 354.543231][ T9205] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 354.543265][ T9205] ? do_epoll_ctl+0x2434/0x36a0 [ 354.543311][ T9205] do_epoll_ctl+0x2434/0x36a0 [ 354.543363][ T9205] ? __pfx_do_epoll_ctl+0x10/0x10 [ 354.543402][ T9205] ? find_held_lock+0x2b/0x80 [ 354.543441][ T9205] ? __might_fault+0xc5/0x140 [ 354.543483][ T9205] ? __might_fault+0xc5/0x140 [ 354.543524][ T9205] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 354.543562][ T9205] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 354.543602][ T9205] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 354.543657][ T9205] do_syscall_64+0x106/0xf80 [ 354.543684][ T9205] ? clear_bhb_loop+0x40/0x90 [ 354.543713][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.543738][ T9205] RIP: 0033:0x7fa92c39c629 [ 354.543758][ T9205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.543782][ T9205] RSP: 002b:00007fa92d2be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 354.543806][ T9205] RAX: ffffffffffffffda RBX: 00007fa92c616090 RCX: 00007fa92c39c629 [ 354.543822][ T9205] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000012 [ 354.543836][ T9205] RBP: 00007fa92c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 354.543850][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.543864][ T9205] R13: 00007fa92c616128 R14: 00007fa92c616090 R15: 00007ffc26d186b8 [ 354.543894][ T9205] [ 356.747975][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 356.795989][ T9218] ptp ptp0: guarantee physical clock free running [ 358.930266][ T9231] input: f as /devices/virtual/input/input20 [ 359.832612][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 360.785420][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cc84800: rx timeout, send abort [ 360.794185][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cc84800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 362.094308][ T9250] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 362.118684][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059f51400: rx timeout, send abort [ 362.127324][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059f51400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 362.845643][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 362.901020][ T9273] netlink: 54041 bytes leftover after parsing attributes in process `syz.1.605'. [ 363.347522][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.607'. [ 363.426343][ T9280] ipvlan0: entered promiscuous mode [ 363.455698][ T9280] ipvlan0: entered allmulticast mode [ 363.509190][ T9280] veth0_vlan: entered allmulticast mode [ 364.786205][ T9293] netlink: 186 bytes leftover after parsing attributes in process `syz.1.610'. [ 364.931504][ T9298] netlink: 186 bytes leftover after parsing attributes in process `syz.2.611'. [ 365.511018][ T9304] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 366.467130][ T9316] zswap: compressor not available [ 366.810905][ T9320] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 367.174887][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d46400: rx timeout, send abort [ 367.183484][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058d46400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 368.481441][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020ebc000: rx timeout, send abort [ 368.489877][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020ebc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 369.946137][ T9356] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 371.854714][ T9392] netlink: 186 bytes leftover after parsing attributes in process `syz.1.627'. [ 374.031099][ T9408] FAULT_INJECTION: forcing a failure. [ 374.031099][ T9408] name failslab, interval 1, probability 0, space 0, times 0 [ 374.170314][ T9408] CPU: 0 UID: 0 PID: 9408 Comm: syz.3.630 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.170354][ T9408] Tainted: [L]=SOFTLOCKUP [ 374.170362][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.170377][ T9408] Call Trace: [ 374.170384][ T9408] [ 374.170393][ T9408] dump_stack_lvl+0x100/0x190 [ 374.170433][ T9408] should_fail_ex.cold+0x5/0xa [ 374.170460][ T9408] should_failslab+0xc2/0x120 [ 374.170500][ T9408] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 374.170533][ T9408] ? mempool_init_node+0x2f7/0x6e0 [ 374.170558][ T9408] ? __pfx_lockdep_init_map_type+0x1/0x10 [ 374.170591][ T9408] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 374.170632][ T9408] mempool_init_node+0x2f7/0x6e0 [ 374.170660][ T9408] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 374.170698][ T9408] ? __pfx_mempool_free_slab+0x10/0x10 [ 374.170747][ T9408] mempool_init_noprof+0x3a/0x50 [ 374.170771][ T9408] bioset_init+0x37e/0x8a0 [ 374.170804][ T9408] ? __pfx_bioset_init+0x10/0x10 [ 374.170846][ T9408] __alloc_disk_node+0x83/0x6b0 [ 374.170880][ T9408] __blk_mq_alloc_disk+0x89/0x120 [ 374.170909][ T9408] loop_add+0x498/0xb60 [ 374.170946][ T9408] ? __pfx_loop_add+0x10/0x10 [ 374.171000][ T9408] ? find_held_lock+0x2b/0x80 [ 374.171034][ T9408] ? __fget_files+0x215/0x3d0 [ 374.171070][ T9408] loop_control_ioctl+0xae/0x620 [ 374.171094][ T9408] ? __pfx_loop_control_ioctl+0x10/0x10 [ 374.171121][ T9408] ? __pfx_loop_control_ioctl+0x10/0x10 [ 374.171146][ T9408] __x64_sys_ioctl+0x18e/0x210 [ 374.171182][ T9408] do_syscall_64+0x106/0xf80 [ 374.171207][ T9408] ? clear_bhb_loop+0x40/0x90 [ 374.171235][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.171258][ T9408] RIP: 0033:0x7f4f5d39c629 [ 374.171276][ T9408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.171299][ T9408] RSP: 002b:00007f4f5e1b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.171320][ T9408] RAX: ffffffffffffffda RBX: 00007f4f5d615fa0 RCX: 00007f4f5d39c629 [ 374.171335][ T9408] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000004 [ 374.171349][ T9408] RBP: 00007f4f5d432b39 R08: 0000000000000000 R09: 0000000000000000 [ 374.171363][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.171376][ T9408] R13: 00007f4f5d616038 R14: 00007f4f5d615fa0 R15: 00007ffcc85dc508 [ 374.171404][ T9408] [ 376.957963][ T9434] Invalid ELF header magic: != ELF [ 378.716885][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.725459][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.764258][ T9460] netlink: 186 bytes leftover after parsing attributes in process `syz.1.640'. [ 382.807877][ T9494] netlink: 186 bytes leftover after parsing attributes in process `syz.2.647'. [ 383.053776][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.648'. [ 383.152931][ T9502] netlink: 54041 bytes leftover after parsing attributes in process `syz.3.648'. [ 388.221528][ T9533] netlink: 186 bytes leftover after parsing attributes in process `syz.0.654'. [ 389.079259][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 389.165033][ T9541] netlink: 54041 bytes leftover after parsing attributes in process `syz.1.655'. [ 390.475461][ T9545] ptrace attach of "./syz-executor exec"[5824] was attempted by ""[9545] [ 390.883046][ T9543] hub 1-0:1.0: USB hub found [ 390.971553][ T9543] hub 1-0:1.0: 1 port detected [ 391.117934][ T9570] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 391.609409][ T9579] FAULT_INJECTION: forcing a failure. [ 391.609409][ T9579] name failslab, interval 1, probability 0, space 0, times 0 [ 391.826948][ T9579] CPU: 0 UID: 0 PID: 9579 Comm: syz.0.667 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.826992][ T9579] Tainted: [L]=SOFTLOCKUP [ 391.827001][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.827016][ T9579] Call Trace: [ 391.827023][ T9579] [ 391.827032][ T9579] dump_stack_lvl+0x100/0x190 [ 391.827073][ T9579] should_fail_ex.cold+0x5/0xa [ 391.827101][ T9579] should_failslab+0xc2/0x120 [ 391.827140][ T9579] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 391.827174][ T9579] ? alloc_inode+0x183/0x250 [ 391.827202][ T9579] ? find_inode_fast+0x1fa/0x910 [ 391.827234][ T9579] alloc_inode+0x183/0x250 [ 391.827263][ T9579] iget_locked+0x1d9/0x6d0 [ 391.827292][ T9579] ? __pfx_iget_locked+0x10/0x10 [ 391.827320][ T9579] ? kernfs_root+0xee/0x2a0 [ 391.827349][ T9579] ? kernfs_root+0xee/0x2a0 [ 391.827385][ T9579] kernfs_get_inode+0x46/0x470 [ 391.827416][ T9579] kernfs_iop_lookup+0x1a7/0x2d0 [ 391.827451][ T9579] __lookup_slow+0x251/0x460 [ 391.827480][ T9579] ? __pfx___lookup_slow+0x10/0x10 [ 391.827522][ T9579] ? __d_lookup+0x266/0x4a0 [ 391.827558][ T9579] lookup_slow+0x50/0x70 [ 391.827586][ T9579] link_path_walk+0x1377/0x1cc0 [ 391.827629][ T9579] path_openat+0x1be/0x31a0 [ 391.827665][ T9579] ? kasan_save_stack+0x3f/0x50 [ 391.827718][ T9579] ? kasan_save_stack+0x30/0x50 [ 391.827751][ T9579] ? kasan_save_track+0x14/0x30 [ 391.827786][ T9579] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 391.827828][ T9579] ? __pfx_path_openat+0x10/0x10 [ 391.827885][ T9579] do_file_open+0x20e/0x430 [ 391.827927][ T9579] ? __pfx_do_file_open+0x10/0x10 [ 391.827988][ T9579] ? alloc_fd+0x476/0x790 [ 391.828029][ T9579] ? do_getname+0x191/0x390 [ 391.828059][ T9579] do_sys_openat2+0x10d/0x1e0 [ 391.828089][ T9579] ? __pfx_do_sys_openat2+0x10/0x10 [ 391.828129][ T9579] __x64_sys_openat+0x12d/0x210 [ 391.828159][ T9579] ? __pfx___x64_sys_openat+0x10/0x10 [ 391.828201][ T9579] do_syscall_64+0x106/0xf80 [ 391.828228][ T9579] ? clear_bhb_loop+0x40/0x90 [ 391.828258][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.828295][ T9579] RIP: 0033:0x7f304c19c629 [ 391.828314][ T9579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.828338][ T9579] RSP: 002b:00007f304cf93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 391.828361][ T9579] RAX: ffffffffffffffda RBX: 00007f304c416180 RCX: 00007f304c19c629 [ 391.828377][ T9579] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 391.828392][ T9579] RBP: 00007f304c232b39 R08: 0000000000000000 R09: 0000000000000000 [ 391.828407][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.828421][ T9579] R13: 00007f304c416218 R14: 00007f304c416180 R15: 00007ffece246208 [ 391.828452][ T9579] [ 393.588710][ T9602] netlink: 186 bytes leftover after parsing attributes in process `syz.0.662'. [ 397.933701][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 398.407143][ T9629] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 405.959579][ T9720] mkiss: ax0: crc mode is auto. [ 407.657033][ T9731] hub 1-0:1.0: USB hub found [ 407.757578][ T9731] hub 1-0:1.0: 1 port detected [ 407.854710][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 407.930998][ T9742] netlink: 54041 bytes leftover after parsing attributes in process `syz.3.683'. [ 411.391538][ T9782] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 411.739617][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035ab5800: rx timeout, send abort [ 411.748129][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035ab5800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 412.504965][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 413.020769][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 413.074731][ T9801] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.694'. [ 413.590089][ T9805] netlink: 186 bytes leftover after parsing attributes in process `syz.0.697'. [ 413.898027][ T9814] netlink: 186 bytes leftover after parsing attributes in process `syz.1.699'. [ 415.209498][ T9813] hub 1-0:1.0: USB hub found [ 415.320059][ T9813] hub 1-0:1.0: 1 port detected [ 415.389928][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880332b0c00: rx timeout, send abort [ 415.398512][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880332b0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 416.984725][ T9833] Invalid ELF header magic: != ELF [ 417.890291][ T9844] FAULT_INJECTION: forcing a failure. [ 417.890291][ T9844] name failslab, interval 1, probability 0, space 0, times 0 [ 418.103950][ T9844] CPU: 0 UID: 0 PID: 9844 Comm: syz.2.704 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.103990][ T9844] Tainted: [L]=SOFTLOCKUP [ 418.103998][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.104013][ T9844] Call Trace: [ 418.104020][ T9844] [ 418.104029][ T9844] dump_stack_lvl+0x100/0x190 [ 418.104069][ T9844] should_fail_ex.cold+0x5/0xa [ 418.104096][ T9844] ? tomoyo_realpath_from_path+0xb6/0x690 [ 418.104121][ T9844] should_failslab+0xc2/0x120 [ 418.104160][ T9844] __kmalloc_noprof+0xe0/0x850 [ 418.104199][ T9844] tomoyo_realpath_from_path+0xb6/0x690 [ 418.104231][ T9844] tomoyo_path_number_perm+0x23c/0x580 [ 418.104266][ T9844] ? tomoyo_path_number_perm+0x22e/0x580 [ 418.104304][ T9844] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 418.104373][ T9844] ? find_held_lock+0x2b/0x80 [ 418.104411][ T9844] ? current_check_access_path+0x281/0x460 [ 418.104453][ T9844] ? __pfx_current_check_access_path+0x10/0x10 [ 418.104495][ T9844] ? d_alloc_parallel+0x864/0x14e0 [ 418.104532][ T9844] tomoyo_path_mknod+0x164/0x190 [ 418.104560][ T9844] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 418.104588][ T9844] ? find_held_lock+0x2b/0x80 [ 418.104626][ T9844] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 418.104670][ T9844] security_path_mknod+0x161/0x300 [ 418.104697][ T9844] may_o_create+0x30/0x3a0 [ 418.104729][ T9844] lookup_open.isra.0+0xa0d/0x11b0 [ 418.104768][ T9844] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 418.104806][ T9844] ? __pfx___might_resched+0x10/0x10 [ 418.104839][ T9844] ? mnt_get_write_access+0x52/0x2f0 [ 418.104873][ T9844] ? __pfx_down_write+0x10/0x10 [ 418.104903][ T9844] ? mnt_get_write_access+0x1e9/0x2f0 [ 418.104936][ T9844] path_openat+0x2291/0x31a0 [ 418.104989][ T9844] ? __pfx_path_openat+0x10/0x10 [ 418.105037][ T9844] do_file_open+0x20e/0x430 [ 418.105078][ T9844] ? __pfx_do_file_open+0x10/0x10 [ 418.105136][ T9844] ? alloc_fd+0x476/0x790 [ 418.105176][ T9844] ? do_getname+0x191/0x390 [ 418.105205][ T9844] do_sys_openat2+0x10d/0x1e0 [ 418.105234][ T9844] ? __pfx_do_sys_openat2+0x10/0x10 [ 418.105272][ T9844] __x64_sys_openat+0x12d/0x210 [ 418.105302][ T9844] ? __pfx___x64_sys_openat+0x10/0x10 [ 418.105406][ T9844] do_syscall_64+0x106/0xf80 [ 418.105432][ T9844] ? clear_bhb_loop+0x40/0x90 [ 418.105463][ T9844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.105488][ T9844] RIP: 0033:0x7fa92c39c629 [ 418.105509][ T9844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.105533][ T9844] RSP: 002b:00007fa92d29d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.105557][ T9844] RAX: ffffffffffffffda RBX: 00007fa92c616180 RCX: 00007fa92c39c629 [ 418.105573][ T9844] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 418.105589][ T9844] RBP: 00007fa92c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 418.105604][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.105619][ T9844] R13: 00007fa92c616218 R14: 00007fa92c616180 R15: 00007ffc26d186b8 [ 418.105651][ T9844] [ 418.486038][ T9844] ERROR: Out of memory at tomoyo_realpath_from_path. [ 419.533337][ T9856] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 420.231300][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 420.283117][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 420.498418][ T9865] netlink: 54041 bytes leftover after parsing attributes in process `syz.0.711'. [ 420.591618][ T9874] netlink: 54041 bytes leftover after parsing attributes in process `syz.3.710'. [ 420.676943][ T9870] netlink: 186 bytes leftover after parsing attributes in process `syz.2.712'. [ 420.692951][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 420.772408][ T9879] netlink: 54041 bytes leftover after parsing attributes in process `syz.1.713'. [ 421.817152][ T9891] vhci_hcd: not connected 4 [ 422.142613][ T9890] netlink: 186 bytes leftover after parsing attributes in process `syz.3.715'. [ 423.810462][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 423.941703][ T9912] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.719'. [ 424.798255][ T9916] syz.2.720 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 425.274742][ T9918] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 426.200832][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 426.307254][ T9937] netlink: 54041 bytes leftover after parsing attributes in process `syz.0.723'. [ 429.361111][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 429.602377][ T9959] netlink: 54041 bytes leftover after parsing attributes in process `syz.0.729'. [ 432.503697][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 432.580950][ T9989] netlink: 54041 bytes leftover after parsing attributes in process `syz.1.734'. [ 432.892814][ T9994] netlink: 186 bytes leftover after parsing attributes in process `syz.2.736'. [ 433.002542][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 433.097549][ T9996] netlink: 54041 bytes leftover after parsing attributes in process `syz.0.735'. [ 434.592599][T10009] netlink: 186 bytes leftover after parsing attributes in process `syz.0.738'. [ 435.104022][T10020] can: request_module (can-proto-4) failed. [ 440.155701][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.162134][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.182530][T10036] FAULT_INJECTION: forcing a failure. [ 441.182530][T10036] name failslab, interval 1, probability 0, space 0, times 0 [ 441.400663][T10036] CPU: 0 UID: 0 PID: 10036 Comm: syz.3.746 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.400704][T10036] Tainted: [L]=SOFTLOCKUP [ 441.400713][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.400729][T10036] Call Trace: [ 441.400737][T10036] [ 441.400746][T10036] dump_stack_lvl+0x100/0x190 [ 441.400787][T10036] should_fail_ex.cold+0x5/0xa [ 441.400815][T10036] should_failslab+0xc2/0x120 [ 441.400855][T10036] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 441.400892][T10036] ? __d_alloc+0x34/0xa80 [ 441.400915][T10036] ? lockdep_init_map_type+0x5c/0x250 [ 441.400952][T10036] __d_alloc+0x34/0xa80 [ 441.400978][T10036] d_alloc_pseudo+0x1c/0xc0 [ 441.401010][T10036] alloc_file_pseudo+0xcf/0x230 [ 441.401039][T10036] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 441.401068][T10036] ? alloc_fd+0x476/0x790 [ 441.401111][T10036] sock_alloc_file+0x50/0x210 [ 441.401141][T10036] __sys_socket+0x1c0/0x260 [ 441.401178][T10036] ? __pfx___sys_socket+0x10/0x10 [ 441.401223][T10036] __x64_sys_socket+0x72/0xb0 [ 441.401258][T10036] ? lockdep_hardirqs_on+0x78/0x100 [ 441.401286][T10036] do_syscall_64+0x106/0xf80 [ 441.401312][T10036] ? clear_bhb_loop+0x40/0x90 [ 441.401342][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.401367][T10036] RIP: 0033:0x7f4f5d39c629 [ 441.401387][T10036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.401412][T10036] RSP: 002b:00007f4f5e1b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 441.401435][T10036] RAX: ffffffffffffffda RBX: 00007f4f5d615fa0 RCX: 00007f4f5d39c629 [ 441.401452][T10036] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 441.401467][T10036] RBP: 00007f4f5d432b39 R08: 0000000000000000 R09: 0000000000000000 [ 441.401489][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.401504][T10036] R13: 00007f4f5d616038 R14: 00007f4f5d615fa0 R15: 00007ffcc85dc508 [ 441.401535][T10036] [ 443.070972][T10050] netlink: 186 bytes leftover after parsing attributes in process `syz.0.748'. [ 445.898193][T10073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 445.971918][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.013383][T10073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.139162][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.190688][T10073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.271195][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 447.421844][T10095] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.756'. [ 452.775018][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 452.886352][T10132] netlink: 54041 bytes leftover after parsing attributes in process `syz.3.762'. [ 453.523422][T10134] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input24 [ 454.338021][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 454.415381][T10141] netlink: 54041 bytes leftover after parsing attributes in process `syz.1.764'. [ 456.666274][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 456.798118][T10163] netlink: 54041 bytes leftover after parsing attributes in process `syz.0.765'. [ 457.144799][T10166] netlink: 186 bytes leftover after parsing attributes in process `syz.2.768'. [ 457.753072][ T30] audit: type=1800 audit(1771481028.543:25): pid=10169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.770" name="dbroot" dev="configfs" ino=33839 res=0 errno=0 [ 457.827161][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.770'. [ 458.479114][T10169] team0: Port device team_slave_1 removed [ 463.948632][T10204] vivid-004: ================= START STATUS ================= [ 464.073447][T10204] vivid-004: FM Deviation: 75000 [ 464.078731][T10204] vivid-004: ================== END STATUS ================== [ 464.298052][T10204] Console: switching to colour frame buffer device 128x48 [ 469.923783][T10242] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input25 [ 471.502416][T10259] netlink: 186 bytes leftover after parsing attributes in process `syz.3.784'. [ 475.634425][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'. [ 475.699213][T10300] hsr_slave_0: left promiscuous mode [ 475.728192][T10300] hsr_slave_1: left promiscuous mode [ 475.851357][T10301] NFSD: Failed to start, no listeners configured. [ 477.850438][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 477.893630][ T30] audit: type=1800 audit(1771482071.683:26): pid=10318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.796" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 478.003894][T10327] netlink: 54041 bytes leftover after parsing attributes in process `syz.0.792'. [ 478.851167][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 478.909102][T10339] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.807'. [ 479.469586][T10341] vivid-004: ================= START STATUS ================= [ 479.745653][T10345] Invalid ELF header magic: != ELF [ 479.766051][T10341] vivid-004: FM Deviation: 75000 [ 479.901497][T10341] vivid-004: ================== END STATUS ================== [ 480.136049][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 480.374836][T10361] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.801'. [ 483.347394][T10382] netlink: 186 bytes leftover after parsing attributes in process `syz.1.805'. [ 485.736165][T10393] netlink: 186 bytes leftover after parsing attributes in process `syz.2.809'. [ 487.850710][T10408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.813'. [ 488.322678][T10418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.814'. [ 488.559454][T10416] zswap: compressor not available [ 488.862029][T10418] bond0: (slave bond_slave_1): Releasing backup interface [ 489.636298][ T30] audit: type=1800 audit(1771482083.417:27): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.815" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 491.118655][T10436] netlink: 330 bytes leftover after parsing attributes in process `syz.1.818'. [ 491.352678][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 492.256871][ T5832] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 492.379411][T10447] FAULT_INJECTION: forcing a failure. [ 492.379411][T10447] name failslab, interval 1, probability 0, space 0, times 0 [ 492.751137][T10447] CPU: 0 UID: 0 PID: 10447 Comm: syz.2.820 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.751177][T10447] Tainted: [L]=SOFTLOCKUP [ 492.751186][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.751201][T10447] Call Trace: [ 492.751208][T10447] [ 492.751218][T10447] dump_stack_lvl+0x100/0x190 [ 492.751258][T10447] should_fail_ex.cold+0x5/0xa [ 492.751293][T10447] should_failslab+0xc2/0x120 [ 492.751333][T10447] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 492.751367][T10447] ? alloc_empty_file+0x55/0x1c0 [ 492.751399][T10447] alloc_empty_file+0x55/0x1c0 [ 492.751426][T10447] alloc_file_pseudo+0x13a/0x230 [ 492.751455][T10447] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 492.751490][T10447] ioctx_alloc+0x5d9/0x21e0 [ 492.751522][T10447] ? find_held_lock+0x2b/0x80 [ 492.751562][T10447] ? __pfx_ioctx_alloc+0x10/0x10 [ 492.751592][T10447] __x64_sys_io_setup+0xc9/0x220 [ 492.751618][T10447] do_syscall_64+0x106/0xf80 [ 492.751644][T10447] ? clear_bhb_loop+0x40/0x90 [ 492.751673][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.751697][T10447] RIP: 0033:0x7fa92c39c629 [ 492.751717][T10447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.751741][T10447] RSP: 002b:00007fa92d2df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 492.751764][T10447] RAX: ffffffffffffffda RBX: 00007fa92c615fa0 RCX: 00007fa92c39c629 [ 492.751780][T10447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ffff [ 492.751794][T10447] RBP: 00007fa92c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 492.751809][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.751823][T10447] R13: 00007fa92c616038 R14: 00007fa92c615fa0 R15: 00007ffc26d186b8 [ 492.751853][T10447] [ 493.979355][T10463] netlink: zone id is out of range [ 494.029347][T10463] netlink: zone id is out of range [ 494.034518][T10463] netlink: zone id is out of range [ 494.076544][T10459] netlink: zone id is out of range [ 494.181302][T10459] netlink: zone id is out of range [ 494.371630][T10459] netlink: zone id is out of range [ 494.376774][T10459] netlink: zone id is out of range [ 494.438489][T10463] netlink: zone id is out of range [ 494.626112][T10463] netlink: zone id is out of range [ 494.732264][T10459] netlink: zone id is out of range [ 497.754115][T10483] netlink: 186 bytes leftover after parsing attributes in process `syz.0.826'. [ 498.334295][T10489] netlink: 186 bytes leftover after parsing attributes in process `syz.1.827'. [ 500.148113][T10506] Invalid ELF header magic: != ELF [ 500.166346][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 500.281668][T10507] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.830'. [ 501.616154][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.624700][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.325960][T10548] netlink: 186 bytes leftover after parsing attributes in process `syz.0.839'. [ 504.550561][T10555] netlink: 186 bytes leftover after parsing attributes in process `syz.3.841'. [ 506.128514][T10568] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 507.265889][T10577] bridge0: port 2(team0) entered blocking state [ 507.357076][T10577] bridge0: port 2(team0) entered disabled state [ 507.400833][T10577] team0: entered allmulticast mode [ 507.555813][T10577] team_slave_0: entered allmulticast mode [ 507.668560][T10577] team_slave_1: entered allmulticast mode [ 507.765560][T10577] team0: entered promiscuous mode [ 507.843793][T10577] team_slave_0: entered promiscuous mode [ 507.910636][T10577] team_slave_1: entered promiscuous mode [ 508.029642][T10577] bridge0: port 2(team0) entered blocking state [ 508.036114][T10577] bridge0: port 2(team0) entered forwarding state [ 510.444581][T10620] netlink: 186 bytes leftover after parsing attributes in process `syz.1.855'. [ 510.464549][T10609] FAULT_INJECTION: forcing a failure. [ 510.464549][T10609] name failslab, interval 1, probability 0, space 0, times 0 [ 510.571648][T10609] CPU: 0 UID: 0 PID: 10609 Comm: syz.3.852 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.571684][T10609] Tainted: [L]=SOFTLOCKUP [ 510.571693][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.571707][T10609] Call Trace: [ 510.571714][T10609] [ 510.571722][T10609] dump_stack_lvl+0x100/0x190 [ 510.571759][T10609] should_fail_ex.cold+0x5/0xa [ 510.571789][T10609] should_failslab+0xc2/0x120 [ 510.571828][T10609] __kmalloc_cache_noprof+0x7a/0x6f0 [ 510.571855][T10609] ? mqueue_init_fs_context+0x4b/0x690 [ 510.571890][T10609] mqueue_init_fs_context+0x4b/0x690 [ 510.571922][T10609] alloc_fs_context+0x60c/0xf40 [ 510.571950][T10609] mq_init_ns+0x16e/0x820 [ 510.571982][T10609] copy_ipcs+0x3dd/0x7e0 [ 510.572014][T10609] create_new_namespaces+0x20a/0xac0 [ 510.572037][T10609] ? security_capable+0x80/0x260 [ 510.572068][T10609] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 510.572093][T10609] ksys_unshare+0x455/0xab0 [ 510.572122][T10609] ? __pfx_ksys_unshare+0x10/0x10 [ 510.572163][T10609] __x64_sys_unshare+0x31/0x40 [ 510.572209][T10609] do_syscall_64+0x106/0xf80 [ 510.572237][T10609] ? clear_bhb_loop+0x40/0x90 [ 510.572267][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.572292][T10609] RIP: 0033:0x7f4f5d39c629 [ 510.572311][T10609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.572336][T10609] RSP: 002b:00007f4f5e1b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 510.572359][T10609] RAX: ffffffffffffffda RBX: 00007f4f5d615fa0 RCX: 00007f4f5d39c629 [ 510.572376][T10609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 510.572390][T10609] RBP: 00007f4f5d432b39 R08: 0000000000000000 R09: 0000000000000000 [ 510.572406][T10609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.572421][T10609] R13: 00007f4f5d616038 R14: 00007f4f5d615fa0 R15: 00007ffcc85dc508 [ 510.572451][T10609] [ 511.157071][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.854'. [ 512.792106][ T30] audit: type=1800 audit(1771482106.565:28): pid=10661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.860" name="trace_pipe" dev="tracefs" ino=3003 res=0 errno=0 [ 515.749813][T10687] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 515.885419][T10687] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 516.081317][T10687] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 516.204797][T10687] page_type: f5(slab) [ 516.299481][T10687] raw: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 516.470680][T10687] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 516.623080][T10687] head: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 516.689618][T10687] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 516.925502][T10687] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 517.101787][T10687] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 517.292265][T10687] page dumped because: unmovable page [ 517.297705][T10687] page_owner tracks the page as allocated [ 517.366083][T10695] netlink: 186 bytes leftover after parsing attributes in process `syz.1.865'. [ 517.626943][T10687] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (udevd), ts 45080488333, free_ts 45063741894 [ 518.202617][T10687] post_alloc_hook+0x153/0x170 [ 518.207485][T10687] get_page_from_freelist+0x111d/0x3140 [ 518.370368][T10687] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 518.443662][T10687] new_slab+0xa6/0x6d0 [ 518.478224][T10687] refill_objects+0x26b/0x400 [ 518.533814][T10687] __pcs_replace_empty_main+0x19f/0x600 [ 518.611859][T10687] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 518.691724][T10687] shmem_alloc_inode+0x25/0x50 [ 518.741981][T10687] alloc_inode+0x68/0x250 [ 518.817957][T10687] new_inode+0x22/0x1c0 [ 518.870641][T10687] shmem_get_inode+0x197/0xf30 [ 519.010383][T10687] shmem_mknod+0x1a2/0x3b0 [ 519.020477][T10687] lookup_open.isra.0+0xc47/0x11b0 [ 519.087146][T10687] path_openat+0x2291/0x31a0 [ 519.127587][T10687] do_file_open+0x20e/0x430 [ 519.209196][T10687] do_sys_openat2+0x10d/0x1e0 [ 519.259864][T10687] page last free pid 5195 tgid 5195 stack trace: [ 519.268670][T10687] __free_frozen_pages+0x7ca/0x10a0 [ 519.344932][T10687] qlist_free_all+0x47/0xe0 [ 519.349518][T10687] kasan_quarantine_reduce+0x1a0/0x1f0 [ 519.436198][T10687] __kasan_slab_alloc+0x69/0x90 [ 519.476850][T10687] __kvmalloc_node_noprof+0x316/0xa00 [ 519.537575][T10687] seq_read_iter+0x819/0x1270 [ 519.573717][T10687] kernfs_fop_read_iter+0x46c/0x610 [ 519.650066][T10687] vfs_read+0x825/0xb30 [ 519.657873][T10687] ksys_read+0x12a/0x250 [ 519.711094][T10687] do_syscall_64+0x106/0xf80 [ 519.736083][T10687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.976696][T10689] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 520.103055][T10689] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 520.252760][T10689] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 520.260388][T10689] page_type: f5(slab) [ 520.264669][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 520.365804][T10704] netlink: 54041 bytes leftover after parsing attributes in process `syz.1.866'. [ 520.389268][T10689] raw: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 520.496155][T10689] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 520.620579][T10689] head: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 520.744090][T10689] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 520.871859][T10689] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 520.880618][T10689] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 521.078528][T10689] page dumped because: unmovable page [ 521.136277][T10689] page_owner tracks the page as allocated [ 521.247861][T10689] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (udevd), ts 45080488333, free_ts 45063741894 [ 521.472581][T10689] post_alloc_hook+0x153/0x170 [ 521.600012][T10689] get_page_from_freelist+0x111d/0x3140 [ 521.641648][T10689] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 521.711388][T10689] new_slab+0xa6/0x6d0 [ 521.759271][T10689] refill_objects+0x26b/0x400 [ 521.814305][T10689] __pcs_replace_empty_main+0x19f/0x600 [ 521.879155][T10689] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 521.915483][T10689] shmem_alloc_inode+0x25/0x50 [ 521.956368][T10689] alloc_inode+0x68/0x250 [ 521.981936][T10689] new_inode+0x22/0x1c0 [ 522.010007][T10689] shmem_get_inode+0x197/0xf30 [ 522.042617][T10689] shmem_mknod+0x1a2/0x3b0 [ 522.070049][T10689] lookup_open.isra.0+0xc47/0x11b0 [ 522.108672][T10689] path_openat+0x2291/0x31a0 [ 522.140868][T10689] do_file_open+0x20e/0x430 [ 522.185144][T10689] do_sys_openat2+0x10d/0x1e0 [ 522.220367][T10689] page last free pid 5195 tgid 5195 stack trace: [ 522.250795][T10689] __free_frozen_pages+0x7ca/0x10a0 [ 522.300205][T10689] qlist_free_all+0x47/0xe0 [ 522.332387][T10689] kasan_quarantine_reduce+0x1a0/0x1f0 [ 522.370015][T10689] __kasan_slab_alloc+0x69/0x90 [ 522.392364][T10689] __kvmalloc_node_noprof+0x316/0xa00 [ 522.397799][T10689] seq_read_iter+0x819/0x1270 [ 522.455450][T10689] kernfs_fop_read_iter+0x46c/0x610 [ 522.495915][T10689] vfs_read+0x825/0xb30 [ 522.500142][T10689] ksys_read+0x12a/0x250 [ 522.562579][T10689] do_syscall_64+0x106/0xf80 [ 522.567227][T10689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.859096][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a049400: rx timeout, send abort [ 522.867754][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a049400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 524.181626][T10732] netlink: 186 bytes leftover after parsing attributes in process `syz.0.873'. [ 525.881886][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 526.154583][T10760] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.875'. [ 526.565397][T10755] bridge0: port 3(team0) entered blocking state [ 526.659495][T10755] bridge0: port 3(team0) entered disabled state [ 526.871463][T10755] team0: entered allmulticast mode [ 526.965376][T10755] team_slave_0: entered allmulticast mode [ 527.050932][T10755] team_slave_1: entered allmulticast mode [ 527.216667][T10755] team0: entered promiscuous mode [ 527.221735][T10755] team_slave_0: entered promiscuous mode [ 527.370058][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 527.455108][T10755] team_slave_1: entered promiscuous mode [ 527.572382][T10755] bridge0: port 3(team0) entered blocking state [ 527.578820][T10755] bridge0: port 3(team0) entered forwarding state [ 529.062154][T10805] netlink: 186 bytes leftover after parsing attributes in process `syz.2.880'. [ 529.668880][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 529.709071][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 529.768013][T10814] FAULT_INJECTION: forcing a failure. [ 529.768013][T10814] name failslab, interval 1, probability 0, space 0, times 0 [ 529.814681][T10814] CPU: 0 UID: 0 PID: 10814 Comm: syz.3.882 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.814718][T10814] Tainted: [L]=SOFTLOCKUP [ 529.814726][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.814739][T10814] Call Trace: [ 529.814747][T10814] [ 529.814755][T10814] dump_stack_lvl+0x100/0x190 [ 529.814793][T10814] should_fail_ex.cold+0x5/0xa [ 529.814818][T10814] should_failslab+0xc2/0x120 [ 529.814855][T10814] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 529.814886][T10814] ? __kernfs_new_node+0xd2/0x960 [ 529.814920][T10814] __kernfs_new_node+0xd2/0x960 [ 529.814952][T10814] ? __pfx___kernfs_new_node+0x10/0x10 [ 529.815009][T10814] ? find_held_lock+0x2b/0x80 [ 529.815046][T10814] ? kernfs_root+0xee/0x2a0 [ 529.815075][T10814] ? kernfs_root+0xee/0x2a0 [ 529.815111][T10814] kernfs_new_node+0x11b/0x1a0 [ 529.815151][T10814] __kernfs_create_file+0x53/0x350 [ 529.815178][T10814] sysfs_add_file_mode_ns+0x207/0x3c0 [ 529.815214][T10814] internal_create_group+0x593/0xf40 [ 529.815259][T10814] ? __pfx_internal_create_group+0x10/0x10 [ 529.815297][T10814] ? kernfs_create_link+0x1bd/0x240 [ 529.815325][T10814] internal_create_groups+0x9d/0x150 [ 529.815360][T10814] device_add+0x77a/0x1950 [ 529.815399][T10814] ? __pfx_device_add+0x10/0x10 [ 529.815433][T10814] ? __pfx___might_resched+0x10/0x10 [ 529.815467][T10814] ? lockdep_hardirqs_on+0x78/0x100 [ 529.815504][T10814] __add_disk+0x518/0xe40 [ 529.815540][T10814] add_disk_fwnode+0x118/0x5c0 [ 529.815575][T10814] loop_add+0x90b/0xb60 [ 529.815616][T10814] ? __pfx_loop_add+0x10/0x10 [ 529.815674][T10814] ? find_held_lock+0x2b/0x80 [ 529.815711][T10814] ? __fget_files+0x215/0x3d0 [ 529.815750][T10814] loop_control_ioctl+0xae/0x620 [ 529.815776][T10814] ? __pfx_loop_control_ioctl+0x10/0x10 [ 529.815805][T10814] ? __pfx_loop_control_ioctl+0x10/0x10 [ 529.815831][T10814] __x64_sys_ioctl+0x18e/0x210 [ 529.815865][T10814] do_syscall_64+0x106/0xf80 [ 529.815891][T10814] ? clear_bhb_loop+0x40/0x90 [ 529.815920][T10814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.815945][T10814] RIP: 0033:0x7f4f5d39c629 [ 529.815964][T10814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.815988][T10814] RSP: 002b:00007f4f5e1b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.816011][T10814] RAX: ffffffffffffffda RBX: 00007f4f5d615fa0 RCX: 00007f4f5d39c629 [ 529.816027][T10814] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000009 [ 529.816042][T10814] RBP: 00007f4f5d432b39 R08: 0000000000000000 R09: 0000000000000000 [ 529.816056][T10814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.816071][T10814] R13: 00007f4f5d616038 R14: 00007f4f5d615fa0 R15: 00007ffcc85dc508 [ 529.816101][T10814] [ 530.091641][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033ff8c00: rx timeout, send abort [ 530.106319][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033ff8c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 531.528041][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 531.538018][T10830] random: crng reseeded on system resumption [ 531.639349][T10831] netlink: 54041 bytes leftover after parsing attributes in process `syz.3.884'. [ 534.199324][T10850] netlink: 186 bytes leftover after parsing attributes in process `syz.1.889'. [ 535.721099][T10855] netlink: 186 bytes leftover after parsing attributes in process `syz.3.890'. [ 535.844089][T10857] block nbd2: not configured, cannot reconfigure [ 538.364009][T10875] netlink: 186 bytes leftover after parsing attributes in process `syz.0.897'. [ 538.486187][T10878] netlink: 186 bytes leftover after parsing attributes in process `syz.2.895'. [ 538.698946][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 538.861532][T10888] netlink: 54041 bytes leftover after parsing attributes in process `syz.1.896'. [ 540.355854][T10895] Console: switching to colour VGA+ 80x25 [ 540.411257][T10893] zswap: compressor not available [ 541.728553][T10918] netlink: 186 bytes leftover after parsing attributes in process `syz.2.906'. [ 543.560957][T10933] netlink: 980 bytes leftover after parsing attributes in process `syz.3.908'. [ 544.654785][T10943] netlink: 186 bytes leftover after parsing attributes in process `syz.1.909'. [ 549.206426][T10983] FAULT_INJECTION: forcing a failure. [ 549.206426][T10983] name failslab, interval 1, probability 0, space 0, times 0 [ 549.257701][T10983] CPU: 0 UID: 0 PID: 10983 Comm: syz.0.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.257736][T10983] Tainted: [L]=SOFTLOCKUP [ 549.257743][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.257757][T10983] Call Trace: [ 549.257763][T10983] [ 549.257771][T10983] dump_stack_lvl+0x100/0x190 [ 549.257806][T10983] should_fail_ex.cold+0x5/0xa [ 549.257831][T10983] should_failslab+0xc2/0x120 [ 549.257865][T10983] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 549.257895][T10983] ? __anon_vma_prepare+0x344/0x5e0 [ 549.257926][T10983] __anon_vma_prepare+0x344/0x5e0 [ 549.257955][T10983] __vmf_anon_prepare+0x11f/0x250 [ 549.257978][T10983] do_huge_pmd_anonymous_page+0x15c/0x1a60 [ 549.258007][T10983] ? __pfx_pgd_none+0x10/0x10 [ 549.258038][T10983] __handle_mm_fault+0x1e9e/0x2b60 [ 549.258068][T10983] ? mt_find+0x45e/0x8e0 [ 549.258095][T10983] ? __pfx___handle_mm_fault+0x10/0x10 [ 549.258119][T10983] ? __pfx_mt_find+0x10/0x10 [ 549.258164][T10983] handle_mm_fault+0x36d/0xa20 [ 549.258195][T10983] __get_user_pages+0xf9c/0x34d0 [ 549.258225][T10983] ? __pfx___get_user_pages+0x10/0x10 [ 549.258253][T10983] populate_vma_page_range+0x267/0x3f0 [ 549.258278][T10983] ? __pfx_populate_vma_page_range+0x10/0x10 [ 549.258300][T10983] ? __pfx_find_vma_intersection+0x10/0x10 [ 549.258336][T10983] ? do_mmap+0x93f/0x12f0 [ 549.258358][T10983] __mm_populate+0x107/0x3a0 [ 549.258381][T10983] ? __pfx___mm_populate+0x10/0x10 [ 549.258405][T10983] ? up_write+0x290/0x4f0 [ 549.258437][T10983] vm_mmap_pgoff+0x37f/0x470 [ 549.258460][T10983] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 549.258487][T10983] ? __x64_sys_futex+0x34f/0x4d0 [ 549.258513][T10983] ? __x64_sys_futex+0x358/0x4d0 [ 549.258542][T10983] ksys_mmap_pgoff+0x7d/0x5b0 [ 549.258581][T10983] __x64_sys_mmap+0x125/0x190 [ 549.258615][T10983] do_syscall_64+0x106/0xf80 [ 549.258637][T10983] ? clear_bhb_loop+0x40/0x90 [ 549.258662][T10983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.258692][T10983] RIP: 0033:0x7f304c19c629 [ 549.258709][T10983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.258731][T10983] RSP: 002b:00007f304cfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 549.258751][T10983] RAX: ffffffffffffffda RBX: 00007f304c415fa0 RCX: 00007f304c19c629 [ 549.258766][T10983] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 549.258779][T10983] RBP: 00007f304c232b39 R08: 0000000000000002 R09: 0000000000008000 [ 549.258792][T10983] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 549.258805][T10983] R13: 00007f304c416038 R14: 00007f304c415fa0 R15: 00007ffece246208 [ 549.258833][T10983] [ 550.517843][T10990] netlink: 186 bytes leftover after parsing attributes in process `syz.0.919'. [ 556.220144][T11034] netlink: 186 bytes leftover after parsing attributes in process `syz.0.927'. [ 556.372149][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'. [ 556.653923][T11044] netlink: 54041 bytes leftover after parsing attributes in process `syz.1.926'. [ 556.870747][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 557.342253][T11053] netlink: 354 bytes leftover after parsing attributes in process `syz.0.930'. [ 557.774732][T11059] netlink: 186 bytes leftover after parsing attributes in process `syz.1.929'. [ 558.272678][T11066] ptp ptp0: delete virtual clock ptp3 [ 558.338864][T11066] ptp ptp0: delete virtual clock ptp2 [ 558.443133][T11066] ptp ptp0: guarantee physical clock free running [ 558.491354][T11068] ptp ptp0: delete virtual clock ptp1 [ 558.589825][T11068] ptp ptp0: only physical clock in use now [ 562.558607][T11093] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 563.090927][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.937'. [ 563.102402][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.108921][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.321229][T11098] veth1_macvtap: left promiscuous mode [ 563.435395][T11105] netlink: 186 bytes leftover after parsing attributes in process `syz.1.938'. [ 564.659842][T11123] netlink: 354 bytes leftover after parsing attributes in process `syz.2.941'. [ 565.808416][T11136] FAULT_INJECTION: forcing a failure. [ 565.808416][T11136] name fail_futex, interval 1, probability 0, space 0, times 0 [ 565.895056][T11142] netlink: 354 bytes leftover after parsing attributes in process `syz.0.945'. [ 565.959206][T11136] CPU: 0 UID: 0 PID: 11136 Comm: syz.3.943 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.959243][T11136] Tainted: [L]=SOFTLOCKUP [ 565.959251][T11136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.959273][T11136] Call Trace: [ 565.959280][T11136] [ 565.959288][T11136] dump_stack_lvl+0x100/0x190 [ 565.959327][T11136] should_fail_ex.cold+0x5/0xa [ 565.959352][T11136] get_futex_key+0x1d2/0x1620 [ 565.959381][T11136] ? __pfx_get_futex_key+0x10/0x10 [ 565.959416][T11136] futex_wake+0xea/0x530 [ 565.959446][T11136] ? kernfs_get_tree+0x251/0xbb0 [ 565.959473][T11136] ? find_held_lock+0x2b/0x80 [ 565.959509][T11136] ? __pfx_futex_wake+0x10/0x10 [ 565.959539][T11136] ? __do_sys_fsconfig+0x564/0xcb0 [ 565.959570][T11136] ? __mutex_unlock_slowpath+0x15c/0x790 [ 565.959598][T11136] ? find_held_lock+0x2b/0x80 [ 565.959637][T11136] do_futex+0x32b/0x350 [ 565.959664][T11136] ? __pfx_do_futex+0x10/0x10 [ 565.959691][T11136] ? kfree+0x2ec/0x6b0 [ 565.959722][T11136] __x64_sys_futex+0x34f/0x4d0 [ 565.959752][T11136] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 565.959779][T11136] ? __pfx___x64_sys_futex+0x10/0x10 [ 565.959818][T11136] do_syscall_64+0x106/0xf80 [ 565.959842][T11136] ? clear_bhb_loop+0x40/0x90 [ 565.959869][T11136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.959892][T11136] RIP: 0033:0x7f4f5d39c629 [ 565.959910][T11136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.959932][T11136] RSP: 002b:00007f4f5e1940e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 565.959953][T11136] RAX: ffffffffffffffda RBX: 00007f4f5d616098 RCX: 00007f4f5d39c629 [ 565.959968][T11136] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4f5d61609c [ 565.959982][T11136] RBP: 00007f4f5d616090 R08: 0000000000000000 R09: 0000000000000000 [ 565.959996][T11136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.960009][T11136] R13: 00007f4f5d616128 R14: 00007ffcc85dc420 R15: 00007ffcc85dc508 [ 565.960037][T11136] [ 567.595008][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 570.457711][T11169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.952'. [ 570.831440][T11191] Lens A: ================= START STATUS ================= [ 570.936963][T11169] ipvlan1: entered promiscuous mode [ 571.046926][T11169] ipvlan1: entered allmulticast mode [ 571.052348][T11169] veth0_vlan: entered allmulticast mode [ 571.067006][T11191] Lens A: Focus, Absolute: 0 [ 571.071896][T11191] Lens A: ================== END STATUS ================== [ 572.309921][ T30] audit: type=1800 audit(1771482166.056:29): pid=11206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.957" name="dbroot" dev="configfs" ino=39745 res=0 errno=0 [ 572.342993][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.957'. [ 572.608107][T11206] team_slave_1 (unregistering): left promiscuous mode [ 572.690959][T11206] team_slave_1 (unregistering): left allmulticast mode [ 572.872430][T11206] team0: Port device team_slave_1 removed [ 573.671245][T11227] netlink: 186 bytes leftover after parsing attributes in process `syz.3.958'. [ 574.189007][T11232] netlink: 186 bytes leftover after parsing attributes in process `syz.0.959'. [ 578.238441][T11284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.961'. [ 578.492403][T11280] blk-mq: reduced tag depth (128 -> 64) [ 578.502035][T11282] FAULT_INJECTION: forcing a failure. [ 578.502035][T11282] name failslab, interval 1, probability 0, space 0, times 0 [ 578.640750][T11282] CPU: 0 UID: 0 PID: 11282 Comm: syz.0.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.640789][T11282] Tainted: [L]=SOFTLOCKUP [ 578.640798][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.640812][T11282] Call Trace: [ 578.640820][T11282] [ 578.640829][T11282] dump_stack_lvl+0x100/0x190 [ 578.640869][T11282] should_fail_ex.cold+0x5/0xa [ 578.640895][T11282] ? memcg_list_lru_alloc+0x4ec/0x740 [ 578.640928][T11282] should_failslab+0xc2/0x120 [ 578.640968][T11282] __kmalloc_noprof+0xe0/0x850 [ 578.641001][T11282] ? vfs_cmd_create+0xd7/0x2a0 [ 578.641032][T11282] memcg_list_lru_alloc+0x4ec/0x740 [ 578.641073][T11282] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 578.641121][T11282] ? rcu_read_unlock+0x17/0x60 [ 578.641171][T11282] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 578.641208][T11282] __memcg_slab_post_alloc_hook+0x12f/0x9a0 [ 578.641254][T11282] ? kasan_save_track+0x14/0x30 [ 578.641294][T11282] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 578.641329][T11282] ? alloc_inode+0x183/0x250 [ 578.641366][T11282] alloc_inode+0x183/0x250 [ 578.641396][T11282] iget_locked+0x1d9/0x6d0 [ 578.641426][T11282] ? __pfx_iget_locked+0x10/0x10 [ 578.641454][T11282] ? down_read+0x13b/0x460 [ 578.641487][T11282] ? __pfx_down_read+0x10/0x10 [ 578.641524][T11282] kernfs_get_inode+0x46/0x470 [ 578.641557][T11282] kernfs_get_tree+0x63e/0xbb0 [ 578.641590][T11282] ? __pfx_kernfs_get_tree+0x10/0x10 [ 578.641619][T11282] ? apparmor_capable+0x1d7/0x4e0 [ 578.641658][T11282] sysfs_get_tree+0x41/0x140 [ 578.641690][T11282] vfs_get_tree+0x92/0x320 [ 578.641725][T11282] vfs_cmd_create+0xd7/0x2a0 [ 578.641754][T11282] __do_sys_fsconfig+0x55a/0xcb0 [ 578.641786][T11282] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 578.641829][T11282] do_syscall_64+0x106/0xf80 [ 578.641856][T11282] ? clear_bhb_loop+0x40/0x90 [ 578.641886][T11282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.641911][T11282] RIP: 0033:0x7f304c19c629 [ 578.641932][T11282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.641956][T11282] RSP: 002b:00007f304cfb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 578.641979][T11282] RAX: ffffffffffffffda RBX: 00007f304c416090 RCX: 00007f304c19c629 [ 578.641996][T11282] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000000a [ 578.642010][T11282] RBP: 00007f304c232b39 R08: 0000000000000000 R09: 0000000000000000 [ 578.642026][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.642040][T11282] R13: 00007f304c416128 R14: 00007f304c416090 R15: 00007ffece246208 [ 578.642072][T11282] [ 580.163678][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 580.209377][T11280] ------------[ cut here ]------------ [ 580.215230][T11280] !rwb [ 580.215252][T11280] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x164/0x1c0, CPU#0: syz.1.962/11280 [ 580.229149][T11280] Modules linked in: [ 580.234157][T11280] CPU: 0 UID: 0 PID: 11280 Comm: syz.1.962 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.245462][T11280] Tainted: [L]=SOFTLOCKUP [ 580.249809][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.259951][T11280] RIP: 0010:wbt_init_enable_default+0x164/0x1c0 [ 580.266366][T11280] Code: 0b 23 fd 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc 4c 89 f7 e8 1e 65 8e fd eb 83 4c 89 f7 e8 14 65 8e fd eb d0 e8 dd 0a 23 fd 90 <0f> 0b 90 e9 e9 fe ff ff e8 cf 0a 23 fd 90 0f 0b 90 48 b8 00 00 00 [ 580.286765][T11280] RSP: 0018:ffffc9000522fb50 EFLAGS: 00010283 [ 580.293059][T11280] RAX: 0000000000012e54 RBX: ffff888026ca2000 RCX: ffffc9000e999000 [ 580.301156][T11280] RDX: 0000000000080000 RSI: ffffffff84e4ef03 RDI: ffffffff8c1aeb20 [ 580.309213][T11280] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 580.317402][T11280] R10: 0000000000000001 R11: ffffffff81000130 R12: ffff888027b9df50 [ 580.326307][T11280] R13: ffff8880319c002c R14: ffff888026ca2390 R15: ffff888027b9df60 [ 580.335036][T11280] FS: 00007f78caa916c0(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 580.344126][T11280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.350716][T11280] CR2: 00007f4614f2a286 CR3: 0000000052d16000 CR4: 00000000003526f0 [ 580.358745][T11280] Call Trace: [ 580.362107][T11280] [ 580.365048][T11280] blk_register_queue+0x42c/0x590 [ 580.370136][T11280] __add_disk+0x73f/0xe40 [ 580.374632][T11280] add_disk_fwnode+0x118/0x5c0 [ 580.379425][T11280] loop_add+0x90b/0xb60 [ 580.383690][T11280] ? __pfx_loop_add+0x10/0x10 [ 580.388442][T11280] loop_control_ioctl+0xae/0x620 [ 580.393449][T11280] ? __pfx_loop_control_ioctl+0x10/0x10 [ 580.399047][T11280] ? xfd_validate_state+0x129/0x190 [ 580.404332][T11280] ? __pfx_loop_control_ioctl+0x10/0x10 [ 580.409891][T11280] __x64_sys_ioctl+0x18e/0x210 [ 580.414728][T11280] do_syscall_64+0x106/0xf80 [ 580.419349][T11280] ? clear_bhb_loop+0x40/0x90 [ 580.424945][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.430859][T11280] RIP: 0033:0x7f78c9b9c629 [ 580.435934][T11280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.455713][T11280] RSP: 002b:00007f78caa91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.464188][T11280] RAX: ffffffffffffffda RBX: 00007f78c9e15fa0 RCX: 00007f78c9b9c629 [ 580.472212][T11280] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000003 [ 580.480192][T11280] RBP: 00007f78c9c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 580.488242][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.496271][T11280] R13: 00007f78c9e16038 R14: 00007f78c9e15fa0 R15: 00007ffc2fc20528 [ 580.504301][T11280] [ 580.507337][T11280] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 580.514625][T11280] CPU: 0 UID: 0 PID: 11280 Comm: syz.1.962 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.525484][T11280] Tainted: [L]=SOFTLOCKUP [ 580.529806][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.539869][T11280] Call Trace: [ 580.543151][T11280] [ 580.546088][T11280] dump_stack_lvl+0x100/0x190 [ 580.550803][T11280] vpanic+0x552/0x970 [ 580.554800][T11280] ? __pfx_vpanic+0x10/0x10 [ 580.559325][T11280] panic+0xd1/0xe0 [ 580.563057][T11280] ? __pfx_panic+0x10/0x10 [ 580.567502][T11280] check_panic_on_warn.cold+0x19/0x34 [ 580.572886][T11280] ? wbt_init_enable_default+0x164/0x1c0 [ 580.578544][T11280] __warn.cold+0x191/0x348 [ 580.583061][T11280] __report_bug+0x296/0x3d0 [ 580.587580][T11280] ? wbt_init_enable_default+0x164/0x1c0 [ 580.593241][T11280] ? __pfx___report_bug+0x10/0x10 [ 580.598290][T11280] ? wbt_init_enable_default+0x164/0x1c0 [ 580.603948][T11280] report_bug+0xb2/0x220 [ 580.608206][T11280] ? wbt_init_enable_default+0x164/0x1c0 [ 580.613874][T11280] handle_bug+0x166/0x2a0 [ 580.618237][T11280] exc_invalid_op+0x17/0x50 [ 580.622768][T11280] asm_exc_invalid_op+0x1a/0x20 [ 580.627660][T11280] RIP: 0010:wbt_init_enable_default+0x164/0x1c0 [ 580.633948][T11280] Code: 0b 23 fd 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc 4c 89 f7 e8 1e 65 8e fd eb 83 4c 89 f7 e8 14 65 8e fd eb d0 e8 dd 0a 23 fd 90 <0f> 0b 90 e9 e9 fe ff ff e8 cf 0a 23 fd 90 0f 0b 90 48 b8 00 00 00 [ 580.653576][T11280] RSP: 0018:ffffc9000522fb50 EFLAGS: 00010283 [ 580.659740][T11280] RAX: 0000000000012e54 RBX: ffff888026ca2000 RCX: ffffc9000e999000 [ 580.667716][T11280] RDX: 0000000000080000 RSI: ffffffff84e4ef03 RDI: ffffffff8c1aeb20 [ 580.675706][T11280] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 580.683711][T11280] R10: 0000000000000001 R11: ffffffff81000130 R12: ffff888027b9df50 [ 580.691711][T11280] R13: ffff8880319c002c R14: ffff888026ca2390 R15: ffff888027b9df60 [ 580.699722][T11280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.705828][T11280] ? wbt_init_enable_default+0x163/0x1c0 [ 580.711498][T11280] blk_register_queue+0x42c/0x590 [ 580.716636][T11280] __add_disk+0x73f/0xe40 [ 580.720989][T11280] add_disk_fwnode+0x118/0x5c0 [ 580.725776][T11280] loop_add+0x90b/0xb60 [ 580.729957][T11280] ? __pfx_loop_add+0x10/0x10 [ 580.734679][T11280] loop_control_ioctl+0xae/0x620 [ 580.739647][T11280] ? __pfx_loop_control_ioctl+0x10/0x10 [ 580.745206][T11280] ? xfd_validate_state+0x129/0x190 [ 580.750432][T11280] ? __pfx_loop_control_ioctl+0x10/0x10 [ 580.756006][T11280] __x64_sys_ioctl+0x18e/0x210 [ 580.760807][T11280] do_syscall_64+0x106/0xf80 [ 580.765412][T11280] ? clear_bhb_loop+0x40/0x90 [ 580.770117][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.776035][T11280] RIP: 0033:0x7f78c9b9c629 [ 580.780461][T11280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.800080][T11280] RSP: 002b:00007f78caa91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.808520][T11280] RAX: ffffffffffffffda RBX: 00007f78c9e15fa0 RCX: 00007f78c9b9c629 [ 580.816502][T11280] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000003 [ 580.824476][T11280] RBP: 00007f78c9c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 580.832450][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.840424][T11280] R13: 00007f78c9e16038 R14: 00007f78c9e15fa0 R15: 00007ffc2fc20528 [ 580.848430][T11280] [ 580.851521][T11280] Kernel Offset: disabled [ 580.855853][T11280] Rebooting in 86400 seconds..