last executing test programs: 8.353233176s ago: executing program 2 (id=1183): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clock_getres$auto(0xa, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mount$auto(0x0, &(0x7f00000002c0)='./cgroup/../file0\x00', &(0x7f0000000440)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0z\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xba\\\xd0x\x841\xe7d\xbfK?m_}\xd3\xf7\xb4U\xbe\x19\xab\x8f%\xe0;\x83\xfe#,\xd7\x8f\xa8\x8dN_\xadfHJ\xdd&\xcf\xc1\xc5\x0eH\x84\xd2\x87*\x84\xc3Ouh\xe9q\xc9\xb2D\xcb\x04\xa4s\x9b\x93\x86\xe4x\xbe\xf3\xc2>\x1c\x19\xc8', 0x4, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) getsockopt$auto(r2, 0x0, 0x8, &(0x7f0000000100)='&!$:\')]\x00', &(0x7f0000000140)=0xffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xd, r4, 0x4, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000005c0)={{@raw=0x1000, 0x3, 0x4, 0x10000, "4458b44b42a5e13a2aa6b4f8c04b019b4e2d33aaf762cd4ac60f6ae5aee5f0d4d83655dfebc6008f5b392926", @inferred=r4}, 0x1, @integer64=@value_ptr=&(0x7f0000000400), "62aee9689e613b4079257546164ea6509e0b48ace9466e437f5ceb7601f79e581a37c05654e63eb3875fa3ab4b6b1c1233813a247dbdfd144c5a3e2cd59e17f5d86124072550734935369300a8c9f8773dc6067f808284c66a9d095d889a5044be10ed5c1ff698848aa4059fa03571ee89dc72c308b96ead4f10848fb6b96e2c"}) madvise$auto(0x0, 0x2003f0, 0x15) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="08000c01", @ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040894) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xcc, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@nested={0x18, 0x52, 0x0, 0x1, [@typed={0xfffffffffffffd21, 0x62, 0x0, 0x0, @ipv6=@loopback}]}]}, @NL80211_ATTR_HE_OBSS_PD={0x98, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x7a, 0x5, "d3d777f9a5109fabf13273ba1d7b4a916e7978e9abe58442f4fa4361ecdbfee56bf048883af9c8fb0ecd70385c449db37a46d43a4e09df97a0245fc6d7953c8a416ce31a96f6ff64780d0affedea5927af24111e7987360ad85129a9a9d7719304feea0b20edc98568c0d9491316d5604b0cacc08687"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x240000c0) 7.530703947s ago: executing program 2 (id=1184): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) r1 = open(&(0x7f0000000340)='./file0\x00', 0xc8403, 0x114) fcntl$auto(r1, 0x40a, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop14/queue/stable_writes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x2400000) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x55) 6.840509874s ago: executing program 2 (id=1187): epoll_create$auto(0x7fff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) 5.514295989s ago: executing program 2 (id=1195): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clock_getres$auto(0xa, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mount$auto(0x0, &(0x7f00000002c0)='./cgroup/../file0\x00', &(0x7f0000000440)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0z\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xba\\\xd0x\x841\xe7d\xbfK?m_}\xd3\xf7\xb4U\xbe\x19\xab\x8f%\xe0;\x83\xfe#,\xd7\x8f\xa8\x8dN_\xadfHJ\xdd&\xcf\xc1\xc5\x0eH\x84\xd2\x87*\x84\xc3Ouh\xe9q\xc9\xb2D\xcb\x04\xa4s\x9b\x93\x86\xe4x\xbe\xf3\xc2>\x1c\x19\xc8', 0x4, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) getsockopt$auto(r2, 0x0, 0x8, &(0x7f0000000100)='&!$:\')]\x00', &(0x7f0000000140)=0xffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xd, r4, 0x4, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000005c0)={{@raw=0x1000, 0x3, 0x4, 0x10000, "4458b44b42a5e13a2aa6b4f8c04b019b4e2d33aaf762cd4ac60f6ae5aee5f0d4d83655dfebc6008f5b392926", @inferred=r4}, 0x1, @integer64=@value_ptr=&(0x7f0000000400), "62aee9689e613b4079257546164ea6509e0b48ace9466e437f5ceb7601f79e581a37c05654e63eb3875fa3ab4b6b1c1233813a247dbdfd144c5a3e2cd59e17f5d86124072550734935369300a8c9f8773dc6067f808284c66a9d095d889a5044be10ed5c1ff698848aa4059fa03571ee89dc72c308b96ead4f10848fb6b96e2c"}) madvise$auto(0x0, 0x2003f0, 0x15) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="08000c01", @ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040894) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xcc, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@nested={0x18, 0x52, 0x0, 0x1, [@typed={0xfffffffffffffd21, 0x62, 0x0, 0x0, @ipv6=@loopback}]}]}, @NL80211_ATTR_HE_OBSS_PD={0x98, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x7a, 0x5, "d3d777f9a5109fabf13273ba1d7b4a916e7978e9abe58442f4fa4361ecdbfee56bf048883af9c8fb0ecd70385c449db37a46d43a4e09df97a0245fc6d7953c8a416ce31a96f6ff64780d0affedea5927af24111e7987360ad85129a9a9d7719304feea0b20edc98568c0d9491316d5604b0cacc08687"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x240000c0) 5.033611313s ago: executing program 1 (id=1196): r0 = socket(0x8, 0x4, 0x6) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f00000000c0)=@l2={0x1f, 0x1a46, @any, 0xc, 0x1}, 0x5) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x28, 0x801, 0x3) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x4, 0x1, 0x948b, 0x3, 0x95f4da31, 0xc, 0x7, 0x62, 0x7, 0x7, 0x400002006d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x2, 0x8, 0x4, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8, 0xfffffffffffffffd]}, 0x0) listen$auto(r2, 0xffffffff) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) mprotect$auto(0x1003, 0x400000, 0x80000001) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snd/pcmC0D0c\x00', 0x8180, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC0\x00', 0x202, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x41, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) fchmodat2$auto(0xffffffffffffff9c, 0x0, 0x9, 0x1000) 4.118409454s ago: executing program 3 (id=1199): socket(0x2, 0x3, 0xa) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000240)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r0, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x4, 0x7, 0x5, 0x80000000}, {0x5000007, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x2000, 0xfffffffa, 0xb1}}) 4.071566054s ago: executing program 1 (id=1200): socketpair$auto(0x902, 0xffff8001, 0x0, &(0x7f00000000c0)=0xc1) socket(0x2, 0x3, 0xa) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd9\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040)="d76441d7dcfdc26a9cc47745ab42bf0f42e62e137aa2dbb97c282393e56b9afddded829aa7d38a5dca9cd109f7"}, 0x4) ioctl$auto(r2, 0x80081280, r2) 3.968419564s ago: executing program 1 (id=1201): r0 = socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000380), 0x68200, 0x0) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000040)={@siginfo_0_0={0x476, 0x5, 0x3b14, @_sigchld={0x0, 0x0, 0x8, 0xd5, 0x1}}}) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf250001000008000b0002007f", @ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x48d1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x800}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xe70}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="7f"], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x5, 0xdc}, 0x7}, 0x3, 0x3) 3.888551205s ago: executing program 0 (id=1202): sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r1 = socketpair$auto(0xe8, 0x1, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x81a4, 0xf) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="040011800800b20010000000040006800400c58000000028040580af00dc80040056004f51569fdf6032876a3785b1794ce570446bbc540979f9b302debc3d2de2c10c694d41eb5fb432e53daad8608cc6b32de50a266e340ea052675aaba2f1aa4fd70e9424813f9a900dd3da41422675d94abd65c57993bdad7647bc0f6652581bb568112a803ddf4899cdff7dce6050fe5949ee5b", @ANYRES32, @ANYBLOB, @ANYRES64=r1, @ANYBLOB="00d400f280cc000e001f75e24af5f8cf0dc6c45b31c1cc0052e6d853f47cfe16f0c0a35256fb3cf1ae2a0c57cdcbf6640ca2de0a68c388d29f5f5a9db39e0104df66fdf1ed2edfdfd1a696651aac00f8df6826bbbf10e992c0ae6321024f699d7d9db1a277ec405c7e8ed8e061e4c7e9ce657d2827f3e5ff98b8f12c94fcfea0025ef80922e107b24b683a1c936123c04fa94baf952aa74ce9871171386a435f8d2fdaa5d91d9ce861cf98c205b58f73d3a896cf8329efc477f532ff75831f9f1d2feaa2b247c9234a3e82fc3ad71bfdaa040082800800380002000000080041800400c28037012880517f86a2385b23ae0213e6f24115c850255fc427b76455f48a7a80986ecc06464a0c1adbf3376f702c55b476921b7e8b8f5c1402ac9ab03d507a8a580fcbbbd75a37c45432882507ff45bb447dcbf3039d3d1e59d1f45a6cad95f47f11000400b3803600b0002f7379732f646576696365732f7669727475616c2f626c6f636b2f6c6f6f70312f696e746567726974792f666f726d61740000000400d1"], 0x2b04}, 0x1, 0x0, 0x0, 0x1051}, 0x44844) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) utimensat$auto(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000001cc0)={0x23, 0x3fffffff}, 0x1000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0xc0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x3000000001a5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 3.773945539s ago: executing program 3 (id=1203): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0x628, 0x0, 0x8, &(0x7f00000001c0)={{0x1, 0xffffffffffff0000}, {0xfe8, 0x2}, 0x2, 0x9, 0xffffffffffff8915, 0xffffffffffffff89, 0x1, 0x1, 0x7fffffffffffffff, 0x9, 0xfffffffffffffffb, 0xa902, 0x3, 0xb73, 0x7, 0x9}) wait4$auto(r0, 0x0, 0x1fe, 0x0) keyctl$auto(0x4, 0xfffffffe, 0x6, 0xffffffffffffffff, 0xe) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd13/queue/scheduler\x00', 0x2c62, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x12, 0x0) madvise$auto(0x700000000000000, 0xffffffffffff0001, 0x15) munmap$auto(0x6, 0x800005fb3) socket$nl_generic(0x10, 0x3, 0x10) 3.596020173s ago: executing program 1 (id=1204): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) r0 = socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceProtocol\x00', 0x12bc00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/203, 0xcb) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100040a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0xa, 0x7, 0x3, 0x9, 0x4, 0x8, 0xffff, 0xfffd, 0x6498, @raw=0x71, @raw=0xa}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1f) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000500), r1) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r6, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20040893) 3.11385595s ago: executing program 1 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r1, 0x70b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0xffa6, 0x4040041}, 0xc840) 2.957106509s ago: executing program 1 (id=1206): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1) ioctl$auto_TIOCMGET2(r0, 0x5415, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffd) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(0x0, 0x63c5, 0x7bf) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7fc) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nf_ft_offload_add/power/runtime_active_time\x00', 0x20042, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) arch_prctl$auto_ARCH_SHSTK_UNLOCK(0x5004, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) 2.907629581s ago: executing program 0 (id=1207): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\x00', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) socket(0x2d, 0x2, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:7/wb_stats\x00', 0x2080, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101802, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x42080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) socket(0x27, 0x3, 0x9) close_range$auto(0x2, r2, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) socket(0xa, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x9, 0x800, 0x200) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="a3ce9e9b5be4f8925fdeeb9bddc2979a014a2b3bef2aff867c0da13ba9afb5324d94d054f676ca34b0885e7c25fe7ca8ddb992f106f8c1167c0cf8b0e9c9ee3b1c15052d4f260cb02733b0f6e99b989effb5d2e6d81b0a3c1481ce3dab3d813a7ebdb19154ba3b1b026538d745522dca383cfa874573b79c01bc0dd397bc691676272b5e127f66ae29dfa3c81309965b4015859750de6a52cbc81de545b8a3e448a968eae5ab914633660e6bf5d75d693470f69f33", @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x8800) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) read$auto(r1, 0x0, 0x20) mmap$auto(0x6, 0x4ce, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x10000006, 0xfc, 0x7fff) 2.727719838s ago: executing program 3 (id=1208): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/metro_usb/unbind\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000003040)='veth1_to_team\x00', 0x9) writev$auto(r1, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, 0x0, 0x44005) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r3) sendmsg$auto_OVS_FLOW_CMD_GET(r3, 0x0, 0x810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0225020000000800030080"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x20040004) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x80000005, &(0x7f0000000180)={0x0, 0xc8}, 0x1, 0x0, 0x5}, 0x3}, 0x40000204, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r5) sendmsg$auto_OVS_VPORT_CMD_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000400), 0x200200, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r7}, @OVS_VPORT_ATTR_PORT_NO={0x8}, @OVS_VPORT_ATTR_NAME={0xb, 0x3, '$.++#@\x00'}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x3}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x7ff}, @OVS_VPORT_ATTR_UPCALL_PID={0x90, 0x5, "c98990ae1295a3caeb1edd613b5f1320cd67686dad4a841fd7d933cd26ae7db09152ce197912a01ba27a259a2d6cb4be45ebb642d927dddcb7022e2749b9607968b9fbd598f3d96e0dcf85c38866cc14ba10815c7cd05c2d4923233860395341c4de6c66d7fe597fb369a74554f265d854068091d504af88f55b935fba1f908bef87dd2048f572b403263bf3"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x404c011}, 0x20008055) 2.357477849s ago: executing program 0 (id=1209): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) madvise$auto(0x4, 0x7, 0x2) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x80000000df, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/ext4/sda1/extent_max_zeroout_kb\x00', 0x4929c1, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00?\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) 2.226369286s ago: executing program 3 (id=1210): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x6, 0xb) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe2180, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) timerfd_create$auto_CLOCK_TAI(0xb, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x0, 0x0) ioctl$auto(r0, 0x8, r2) ioctl$auto_KVM_CREATE_VM(r0, 0xc080aebe, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000003, &(0x7f0000000180)={&(0x7f0000000240)="6151dae4818fc7d7d588451306fcf21bf7a68424cb9690e5d4f6afde6d2d104cb137598a6f165c82c5cefdb1e097caac4b6b0d64fee3baf4a5703ff0faeffe0b9c19e8dafff59264d69fdab614e8d6b12aebf5528e", 0x40000000001243}, 0xa, 0x0) r4 = prctl$auto(0x0, 0xfffffffffffffffd, r3, 0xfffffffffffffffe, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x400040, 0x0) ioctl$auto_SNDCTL_DSP_GETIPTR(r5, 0x800c5011, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0xfffffffc], {0x6, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x800101, 0x85, 0x2, 0x1a7b870c, 0x76c5, 0x8, 0x100000000}}) r6 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r6, &(0x7f0000000d40)=""/16, 0x10) setsockopt$auto(r4, 0x29, 0x40, 0x0, 0x110) 1.75308231s ago: executing program 2 (id=1211): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1) ioctl$auto_TIOCMGET2(r0, 0x5415, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffd) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000280)='X))\x00', 0x63c5, 0x7bf) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x300, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7fc) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nf_ft_offload_add/power/runtime_active_time\x00', 0x20042, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) arch_prctl$auto_ARCH_SHSTK_UNLOCK(0x5004, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) 1.573046879s ago: executing program 0 (id=1212): epoll_create$auto(0x7fff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) read$auto(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) 1.449997777s ago: executing program 0 (id=1213): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x5c72671d) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) msgctl$auto_IPC_INFO(0x40007, 0x3, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/pf_fast\x00', 0x1a3500, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x1000000, 0x24000000}, 0xd0) 1.100859569s ago: executing program 3 (id=1214): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram7/queue/chunk_sectors\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/187, 0xbb) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xfffffffffffffda7, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0xeb57}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0xee}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) read$auto(r1, 0x0, 0x800) pipe$auto(&(0x7f0000000080)=0xe7da) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x34, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x100, 0x0) dup2$auto(0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x202041, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bridge0/locktime\x00', 0x101202, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bridge_slave_1/ra_defrtr_metric\x00', 0x101242, 0x0) sendfile$auto(r5, r4, 0x0, 0x48) r6 = seccomp$auto(0x7f, 0x39, &(0x7f0000000080)="0d98fa7eb5d4190c17efc7ccc20a6f683d8972e5fbfb48c6108567c7a1a5ac89532c9fd2bac89da5736d4e97495a56588469b97584c89e4e05fe609c32bce2b9765693e6fecf44a9e4e6f960f4e098ab90be0d34709e843ae246caf25b3d26e79d51bb0709da0d30d7d2e0df7276d4bf627042156825106273d9f80d60d4afe245901773ba8f9adcf8bacb68334cb9a20ed8") ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) fcntl$auto(0x0, 0x407, 0x100000) close_range$auto(r3, r6, 0x800) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r7, 0xc0285629, r7) 289.350453ms ago: executing program 0 (id=1215): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) ioctl$auto_NS_GET_PID_IN_PIDNS(r0, 0x8004b708, &(0x7f00000000c0)=0x33a) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000c00)) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/loop4/size\x00', 0x40000, 0x0) finit_module$auto(r2, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x9, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000d80), r3) sendmsg$auto_CGROUPSTATS_CMD_GET(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}]}, 0x1c}}, 0x20000004) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r5, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) 127.746009ms ago: executing program 3 (id=1216): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty43\x00', 0x101f81, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = waitid$auto_P_ALL(0x0, 0x628, 0x0, 0x8, &(0x7f00000001c0)={{0x1, 0xffffffffffff0000}, {0xfe8, 0x2}, 0x2, 0x9, 0xffffffffffff8915, 0xffffffffffffff89, 0x1, 0x1, 0x7fffffffffffffff, 0x9, 0xfffffffffffffffb, 0xa902, 0x3, 0xb73, 0x7, 0x9}) wait4$auto(r0, 0x0, 0x5fe, 0x0) keyctl$auto(0xfffffffd, 0xfffffffe, 0x6, 0xee00, 0xe) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x10, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) ioctl$auto(r2, 0xc0285629, r2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x60341, 0x0) 0s ago: executing program 2 (id=1217): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd9\x00', 0x0, 0x0) personality$auto(0xb) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r0, 0x80081280, r0) kernel console output (not intermixed with test programs): 4] ? __lock_acquire+0xb8a/0x1c90 [ 343.598410][T10024] do_filp_open+0x20b/0x470 [ 343.598425][T10024] ? __pfx_do_filp_open+0x10/0x10 [ 343.598454][T10024] ? alloc_fd+0x471/0x7d0 [ 343.598473][T10024] do_sys_openat2+0x11b/0x1d0 [ 343.598492][T10024] ? __pfx_do_sys_openat2+0x10/0x10 [ 343.598518][T10024] __x64_sys_openat+0x174/0x210 [ 343.598537][T10024] ? __pfx___x64_sys_openat+0x10/0x10 [ 343.598564][T10024] do_syscall_64+0xcd/0xfa0 [ 343.598581][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.598595][T10024] RIP: 0033:0x7fd18dd8efc9 [ 343.598606][T10024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.598619][T10024] RSP: 002b:00007fd18ebd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 343.598633][T10024] RAX: ffffffffffffffda RBX: 00007fd18dfe5fa0 RCX: 00007fd18dd8efc9 [ 343.598642][T10024] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 343.598651][T10024] RBP: 00007fd18de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 343.598659][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.598666][T10024] R13: 00007fd18dfe6038 R14: 00007fd18dfe5fa0 R15: 00007ffe388fc2a8 [ 343.598685][T10024] [ 343.942858][ T9971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.952496][ T9971] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 343.961808][ T9971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.971382][ T9971] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 343.981248][ T9971] 74771 total pagecache pages [ 343.986317][ T9971] 26 pages in swap cache [ 343.990575][ T9971] Free swap = 124416kB [ 343.995024][ T9971] Total swap = 124996kB [ 343.999197][ T9971] 2097051 pages RAM [ 344.003013][ T9971] 0 pages HighMem/MovableOnly [ 344.007738][ T9971] 428687 pages reserved [ 344.011903][ T9971] 0 pages cma reserved [ 344.130939][T10032] netlink: 186 bytes leftover after parsing attributes in process `syz.3.833'. [ 344.733369][T10045] misc userio: Invalid payload size [ 345.891015][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'. [ 346.026408][T10078] FAULT_INJECTION: forcing a failure. [ 346.026408][T10078] name failslab, interval 1, probability 0, space 0, times 0 [ 346.062927][T10080] FAULT_INJECTION: forcing a failure. [ 346.062927][T10080] name failslab, interval 1, probability 0, space 0, times 0 [ 346.194912][T10080] CPU: 0 UID: 0 PID: 10080 Comm: syz.2.842 Not tainted syzkaller #0 PREEMPT(full) [ 346.194936][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 346.194944][T10080] Call Trace: [ 346.194950][T10080] [ 346.194956][T10080] dump_stack_lvl+0x16c/0x1f0 [ 346.194977][T10080] should_fail_ex+0x512/0x640 [ 346.194999][T10080] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 346.195017][T10080] should_failslab+0xc2/0x120 [ 346.195036][T10080] kmem_cache_alloc_noprof+0x75/0x6e0 [ 346.195049][T10080] ? alloc_empty_file+0x55/0x1e0 [ 346.195073][T10080] ? alloc_empty_file+0x55/0x1e0 [ 346.195090][T10080] alloc_empty_file+0x55/0x1e0 [ 346.195109][T10080] alloc_file_pseudo+0x13a/0x230 [ 346.195128][T10080] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 346.195147][T10080] ? alloc_fd+0x471/0x7d0 [ 346.195163][T10080] sock_alloc_file+0x50/0x210 [ 346.195180][T10080] __sys_socket+0x1c0/0x260 [ 346.195197][T10080] ? __x64_sys_openat+0x174/0x210 [ 346.195216][T10080] ? __pfx___sys_socket+0x10/0x10 [ 346.195234][T10080] ? xfd_validate_state+0x61/0x180 [ 346.195258][T10080] __x64_sys_socket+0x72/0xb0 [ 346.195275][T10080] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.195290][T10080] do_syscall_64+0xcd/0xfa0 [ 346.195307][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.195320][T10080] RIP: 0033:0x7fcba218efc9 [ 346.195332][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.195345][T10080] RSP: 002b:00007fcba3002038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 346.195360][T10080] RAX: ffffffffffffffda RBX: 00007fcba23e6090 RCX: 00007fcba218efc9 [ 346.195369][T10080] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 346.195377][T10080] RBP: 00007fcba2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 346.195385][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.195393][T10080] R13: 00007fcba23e6128 R14: 00007fcba23e6090 R15: 00007ffed9288568 [ 346.195411][T10080] [ 346.403499][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.829492][T10078] CPU: 0 UID: 0 PID: 10078 Comm: syz.3.844 Not tainted syzkaller #0 PREEMPT(full) [ 346.829514][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 346.829526][T10078] Call Trace: [ 346.829531][T10078] [ 346.829537][T10078] dump_stack_lvl+0x16c/0x1f0 [ 346.829558][T10078] should_fail_ex+0x512/0x640 [ 346.829581][T10078] ? __kmalloc_cache_noprof+0x5f/0x780 [ 346.829606][T10078] should_failslab+0xc2/0x120 [ 346.829625][T10078] __kmalloc_cache_noprof+0x72/0x780 [ 346.829648][T10078] ? kernfs_fop_open+0xa3a/0xda0 [ 346.829665][T10078] ? kernfs_fop_open+0xa3a/0xda0 [ 346.829676][T10078] kernfs_fop_open+0xa3a/0xda0 [ 346.829693][T10078] do_dentry_open+0x982/0x1530 [ 346.829710][T10078] ? __pfx_kernfs_fop_open+0x10/0x10 [ 346.829727][T10078] vfs_open+0x82/0x3f0 [ 346.829747][T10078] path_openat+0x1de4/0x2cb0 [ 346.829768][T10078] ? __pfx_path_openat+0x10/0x10 [ 346.829784][T10078] ? __lock_acquire+0xb8a/0x1c90 [ 346.829805][T10078] do_filp_open+0x20b/0x470 [ 346.829820][T10078] ? __pfx_do_filp_open+0x10/0x10 [ 346.829849][T10078] ? alloc_fd+0x471/0x7d0 [ 346.829877][T10078] do_sys_openat2+0x11b/0x1d0 [ 346.829897][T10078] ? __pfx_do_sys_openat2+0x10/0x10 [ 346.829925][T10078] __x64_sys_openat+0x174/0x210 [ 346.829946][T10078] ? __pfx___x64_sys_openat+0x10/0x10 [ 346.829974][T10078] do_syscall_64+0xcd/0xfa0 [ 346.829991][T10078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.830005][T10078] RIP: 0033:0x7fd3f678efc9 [ 346.830017][T10078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.830031][T10078] RSP: 002b:00007fd3f75cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 346.830044][T10078] RAX: ffffffffffffffda RBX: 00007fd3f69e5fa0 RCX: 00007fd3f678efc9 [ 346.830054][T10078] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 346.830063][T10078] RBP: 00007fd3f6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 346.830072][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.830081][T10078] R13: 00007fd3f69e6038 R14: 00007fd3f69e5fa0 R15: 00007ffcab5606f8 [ 346.830101][T10078] [ 347.046748][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.579964][T10113] netlink: set zone limit has 8 unknown bytes [ 349.035045][T10121] FAULT_INJECTION: forcing a failure. [ 349.035045][T10121] name failslab, interval 1, probability 0, space 0, times 0 [ 349.100098][T10121] CPU: 0 UID: 0 PID: 10121 Comm: syz.0.854 Not tainted syzkaller #0 PREEMPT(full) [ 349.100120][T10121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.100129][T10121] Call Trace: [ 349.100134][T10121] [ 349.100140][T10121] dump_stack_lvl+0x16c/0x1f0 [ 349.100161][T10121] should_fail_ex+0x512/0x640 [ 349.100183][T10121] ? __kmalloc_noprof+0xca/0x880 [ 349.100207][T10121] should_failslab+0xc2/0x120 [ 349.100225][T10121] __kmalloc_noprof+0xdd/0x880 [ 349.100246][T10121] ? lsm_blob_alloc+0x68/0x90 [ 349.100267][T10121] ? lsm_blob_alloc+0x68/0x90 [ 349.100281][T10121] lsm_blob_alloc+0x68/0x90 [ 349.100298][T10121] security_prepare_creds+0x30/0x270 [ 349.100315][T10121] prepare_creds+0x56f/0x7d0 [ 349.100337][T10121] copy_creds+0xa7/0xa50 [ 349.100359][T10121] copy_process+0xffc/0x76a0 [ 349.100375][T10121] ? __pfx___futex_wait+0x10/0x10 [ 349.100403][T10121] ? __pfx_copy_process+0x10/0x10 [ 349.100419][T10121] ? futex_private_hash_put+0x176/0x300 [ 349.100438][T10121] ? futex_private_hash_put+0x18a/0x300 [ 349.100458][T10121] kernel_clone+0xfc/0x930 [ 349.100475][T10121] ? __pfx_kernel_clone+0x10/0x10 [ 349.100501][T10121] __do_sys_clone+0xce/0x120 [ 349.100518][T10121] ? __pfx___do_sys_clone+0x10/0x10 [ 349.100542][T10121] ? xfd_validate_state+0x61/0x180 [ 349.100567][T10121] do_syscall_64+0xcd/0xfa0 [ 349.100584][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.100598][T10121] RIP: 0033:0x7fd18dd8efc9 [ 349.100610][T10121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.100622][T10121] RSP: 002b:00007fd18ebd0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 349.100636][T10121] RAX: ffffffffffffffda RBX: 00007fd18dfe5fa0 RCX: 00007fd18dd8efc9 [ 349.100646][T10121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.100654][T10121] RBP: 00007fd18de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 349.100663][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.100672][T10121] R13: 00007fd18dfe6038 R14: 00007fd18dfe5fa0 R15: 00007ffe388fc2a8 [ 349.100693][T10121] [ 349.316576][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.737980][T10129] FAULT_INJECTION: forcing a failure. [ 349.737980][T10129] name failslab, interval 1, probability 0, space 0, times 0 [ 349.786962][T10129] CPU: 0 UID: 0 PID: 10129 Comm: syz.0.855 Not tainted syzkaller #0 PREEMPT(full) [ 349.786985][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.786994][T10129] Call Trace: [ 349.787000][T10129] [ 349.787006][T10129] dump_stack_lvl+0x16c/0x1f0 [ 349.787028][T10129] should_fail_ex+0x512/0x640 [ 349.787049][T10129] ? __kmalloc_noprof+0xca/0x880 [ 349.787074][T10129] should_failslab+0xc2/0x120 [ 349.787093][T10129] __kmalloc_noprof+0xdd/0x880 [ 349.787115][T10129] ? kernfs_fop_write_iter+0x237/0x570 [ 349.787142][T10129] ? kernfs_fop_write_iter+0x237/0x570 [ 349.787163][T10129] kernfs_fop_write_iter+0x237/0x570 [ 349.787187][T10129] vfs_write+0x7d3/0x11d0 [ 349.787203][T10129] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 349.787226][T10129] ? __pfx___mutex_lock+0x10/0x10 [ 349.787244][T10129] ? __pfx_vfs_write+0x10/0x10 [ 349.787271][T10129] ksys_write+0x12a/0x250 [ 349.787286][T10129] ? __pfx_ksys_write+0x10/0x10 [ 349.787307][T10129] do_syscall_64+0xcd/0xfa0 [ 349.787324][T10129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.787339][T10129] RIP: 0033:0x7fd18dd8efc9 [ 349.787352][T10129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.787366][T10129] RSP: 002b:00007fd18ebd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.787380][T10129] RAX: ffffffffffffffda RBX: 00007fd18dfe5fa0 RCX: 00007fd18dd8efc9 [ 349.787390][T10129] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000007 [ 349.787399][T10129] RBP: 00007fd18ebd1090 R08: 0000000000000000 R09: 0000000000000000 [ 349.787407][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.787416][T10129] R13: 00007fd18dfe6038 R14: 00007fd18dfe5fa0 R15: 00007ffe388fc2a8 [ 349.787436][T10129] [ 349.975037][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.855254][T10166] netlink: 186 bytes leftover after parsing attributes in process `syz.2.865'. [ 353.156169][T10164] usb usb36: usbfs: process 10164 (syz.3.866) did not claim interface 0 before use [ 353.867208][T10189] FAULT_INJECTION: forcing a failure. [ 353.867208][T10189] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 353.921745][T10189] CPU: 0 UID: 0 PID: 10189 Comm: syz.0.872 Not tainted syzkaller #0 PREEMPT(full) [ 353.921770][T10189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.921780][T10189] Call Trace: [ 353.921786][T10189] [ 353.921792][T10189] dump_stack_lvl+0x16c/0x1f0 [ 353.921813][T10189] should_fail_ex+0x512/0x640 [ 353.921838][T10189] should_fail_alloc_page+0xe7/0x130 [ 353.921860][T10189] prepare_alloc_pages+0x3c2/0x610 [ 353.921881][T10189] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 353.921902][T10189] ? __lock_acquire+0x622/0x1c90 [ 353.921920][T10189] ? css_rstat_updated+0x1c2/0x510 [ 353.921937][T10189] ? __pfx_css_rstat_updated+0x10/0x10 [ 353.921953][T10189] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 353.921966][T10189] ? sched_clock+0x38/0x60 [ 353.921989][T10189] ? __lock_acquire+0xb8a/0x1c90 [ 353.922011][T10189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.922035][T10189] ? policy_nodemask+0xea/0x4e0 [ 353.922055][T10189] alloc_pages_mpol+0x1fb/0x550 [ 353.922074][T10189] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 353.922098][T10189] alloc_pages_noprof+0x131/0x390 [ 353.922117][T10189] __pmd_alloc+0x3b/0x8b0 [ 353.922137][T10189] __handle_mm_fault+0xada/0x2aa0 [ 353.922159][T10189] ? mt_find+0x3e2/0xa20 [ 353.922177][T10189] ? __pfx___handle_mm_fault+0x10/0x10 [ 353.922196][T10189] ? __pfx_mt_find+0x10/0x10 [ 353.922223][T10189] ? find_vma+0xbf/0x140 [ 353.922238][T10189] ? __pfx_find_vma+0x10/0x10 [ 353.922256][T10189] handle_mm_fault+0x589/0xd10 [ 353.922278][T10189] ? __pkru_allows_pkey+0x11/0xb0 [ 353.922300][T10189] do_user_addr_fault+0x7a6/0x1370 [ 353.922315][T10189] ? rcu_is_watching+0x12/0xc0 [ 353.922332][T10189] exc_page_fault+0x64/0xc0 [ 353.922348][T10189] asm_exc_page_fault+0x26/0x30 [ 353.922361][T10189] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 353.922383][T10189] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 353.922396][T10189] RSP: 0018:ffffc90004ed7cd0 EFLAGS: 00050202 [ 353.922409][T10189] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 353.922419][T10189] RDX: fffff520009dafae RSI: ffffc90004ed7d48 RDI: 0000000000000001 [ 353.922428][T10189] RBP: 0000000000000001 R08: 0000000000000000 R09: fffff520009dafad [ 353.922445][T10189] R10: ffffc90004ed7d6f R11: 0000000000000001 R12: ffffc90004ed7d48 [ 353.922455][T10189] R13: 0000000000000029 R14: 00007ffffffff000 R15: 0000000000000000 [ 353.922474][T10189] _copy_to_user+0xbb/0xd0 [ 353.922499][T10189] semctl_info.constprop.0+0x338/0x450 [ 353.922520][T10189] ? __pfx_semctl_info.constprop.0+0x10/0x10 [ 353.922544][T10189] ? do_futex+0x122/0x350 [ 353.922563][T10189] ? __pfx_do_futex+0x10/0x10 [ 353.922582][T10189] ksys_semctl.constprop.0+0x14a/0x2f0 [ 353.922605][T10189] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 353.922626][T10189] ? __x64_sys_futex+0x1e0/0x4c0 [ 353.922655][T10189] do_syscall_64+0xcd/0xfa0 [ 353.922672][T10189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.922685][T10189] RIP: 0033:0x7fd18dd8efc9 [ 353.922697][T10189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.922710][T10189] RSP: 002b:00007fd18ebd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 353.922724][T10189] RAX: ffffffffffffffda RBX: 00007fd18dfe5fa0 RCX: 00007fd18dd8efc9 [ 353.922733][T10189] RDX: 0000000000000013 RSI: 0000000000000002 RDI: 0000000000000007 [ 353.922742][T10189] RBP: 00007fd18de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 353.922750][T10189] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 353.922759][T10189] R13: 00007fd18dfe6038 R14: 00007fd18dfe5fa0 R15: 00007ffe388fc2a8 [ 353.922779][T10189] [ 354.290963][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.367618][ T5843] block nbd0: Receive control failed (result -107) [ 356.939379][T10224] netlink: set zone limit has 8 unknown bytes [ 357.289983][T10239] FAULT_INJECTION: forcing a failure. [ 357.289983][T10239] name failslab, interval 1, probability 0, space 0, times 0 [ 357.340074][T10239] CPU: 0 UID: 0 PID: 10239 Comm: syz.3.883 Not tainted syzkaller #0 PREEMPT(full) [ 357.340095][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.340108][T10239] Call Trace: [ 357.340113][T10239] [ 357.340119][T10239] dump_stack_lvl+0x16c/0x1f0 [ 357.340141][T10239] should_fail_ex+0x512/0x640 [ 357.340162][T10239] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 357.340180][T10239] should_failslab+0xc2/0x120 [ 357.340200][T10239] kmem_cache_alloc_noprof+0x75/0x6e0 [ 357.340214][T10239] ? __pmd_alloc+0xbf/0x8b0 [ 357.340238][T10239] ? __pmd_alloc+0xbf/0x8b0 [ 357.340261][T10239] __pmd_alloc+0xbf/0x8b0 [ 357.340281][T10239] __handle_mm_fault+0xada/0x2aa0 [ 357.340305][T10239] ? mt_find+0x3e2/0xa20 [ 357.340324][T10239] ? __pfx___handle_mm_fault+0x10/0x10 [ 357.340344][T10239] ? __pfx_mt_find+0x10/0x10 [ 357.340371][T10239] ? find_vma+0xbf/0x140 [ 357.340386][T10239] ? __pfx_find_vma+0x10/0x10 [ 357.340404][T10239] handle_mm_fault+0x589/0xd10 [ 357.340425][T10239] ? __pkru_allows_pkey+0x11/0xb0 [ 357.340449][T10239] do_user_addr_fault+0x7a6/0x1370 [ 357.340464][T10239] ? rcu_is_watching+0x12/0xc0 [ 357.340481][T10239] exc_page_fault+0x64/0xc0 [ 357.340497][T10239] asm_exc_page_fault+0x26/0x30 [ 357.340510][T10239] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 357.340530][T10239] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 357.340544][T10239] RSP: 0018:ffffc90003ebfcd0 EFLAGS: 00050202 [ 357.340556][T10239] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 357.340566][T10239] RDX: fffff520007d7fae RSI: ffffc90003ebfd48 RDI: 0000000000000001 [ 357.340575][T10239] RBP: 0000000000000001 R08: 0000000000000000 R09: fffff520007d7fad [ 357.340583][T10239] R10: ffffc90003ebfd6f R11: 0000000000000001 R12: ffffc90003ebfd48 [ 357.340592][T10239] R13: 0000000000000029 R14: 00007ffffffff000 R15: 0000000000000000 [ 357.340610][T10239] _copy_to_user+0xbb/0xd0 [ 357.340633][T10239] semctl_info.constprop.0+0x338/0x450 [ 357.340654][T10239] ? __pfx_semctl_info.constprop.0+0x10/0x10 [ 357.340678][T10239] ? do_futex+0x122/0x350 [ 357.340697][T10239] ? __pfx_do_futex+0x10/0x10 [ 357.340716][T10239] ksys_semctl.constprop.0+0x14a/0x2f0 [ 357.340738][T10239] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 357.340759][T10239] ? __x64_sys_futex+0x1e0/0x4c0 [ 357.340789][T10239] do_syscall_64+0xcd/0xfa0 [ 357.340805][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.340819][T10239] RIP: 0033:0x7fd3f678efc9 [ 357.340830][T10239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.340843][T10239] RSP: 002b:00007fd3f75cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 357.340856][T10239] RAX: ffffffffffffffda RBX: 00007fd3f69e5fa0 RCX: 00007fd3f678efc9 [ 357.340865][T10239] RDX: 0000000000000013 RSI: 0000000000000002 RDI: 0000000000000007 [ 357.340874][T10239] RBP: 00007fd3f6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 357.340882][T10239] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 357.340891][T10239] R13: 00007fd3f69e6038 R14: 00007fd3f69e5fa0 R15: 00007ffcab5606f8 [ 357.340911][T10239] [ 357.662492][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.698325][T10262] FAULT_INJECTION: forcing a failure. [ 358.698325][T10262] name failslab, interval 1, probability 0, space 0, times 0 [ 358.766547][T10262] CPU: 0 UID: 0 PID: 10262 Comm: syz.0.892 Not tainted syzkaller #0 PREEMPT(full) [ 358.766568][T10262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.766577][T10262] Call Trace: [ 358.766583][T10262] [ 358.766589][T10262] dump_stack_lvl+0x16c/0x1f0 [ 358.766610][T10262] should_fail_ex+0x512/0x640 [ 358.766631][T10262] ? fs_reclaim_acquire+0xae/0x150 [ 358.766652][T10262] should_failslab+0xc2/0x120 [ 358.766671][T10262] __kmalloc_noprof+0xdd/0x880 [ 358.766693][T10262] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.766714][T10262] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.766729][T10262] tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.766746][T10262] ? tomoyo_profile+0x47/0x60 [ 358.766766][T10262] tomoyo_path_number_perm+0x245/0x580 [ 358.766788][T10262] ? tomoyo_path_number_perm+0x237/0x580 [ 358.766811][T10262] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 358.766834][T10262] ? find_held_lock+0x2b/0x80 [ 358.766866][T10262] ? find_held_lock+0x2b/0x80 [ 358.766879][T10262] ? hook_file_ioctl_common+0x145/0x410 [ 358.766898][T10262] ? __fget_files+0x20e/0x3c0 [ 358.766916][T10262] security_file_ioctl+0x9b/0x240 [ 358.766930][T10262] __x64_sys_ioctl+0xb7/0x210 [ 358.766952][T10262] do_syscall_64+0xcd/0xfa0 [ 358.766970][T10262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.766985][T10262] RIP: 0033:0x7fd18dd8efc9 [ 358.766997][T10262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.767010][T10262] RSP: 002b:00007fd18ebd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.767026][T10262] RAX: ffffffffffffffda RBX: 00007fd18dfe5fa0 RCX: 00007fd18dd8efc9 [ 358.767035][T10262] RDX: 0000000000000007 RSI: 000000000000560a RDI: 0000000000000003 [ 358.767044][T10262] RBP: 00007fd18ebd1090 R08: 0000000000000000 R09: 0000000000000000 [ 358.767053][T10262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.767061][T10262] R13: 00007fd18dfe6038 R14: 00007fd18dfe5fa0 R15: 00007ffe388fc2a8 [ 358.767084][T10262] [ 358.767104][T10262] ERROR: Out of memory at tomoyo_realpath_from_path. [ 359.033374][T10265] snd_aloop snd_aloop.0: control 7:265:7:ª¸è:2 is already present [ 360.245054][T10275] usb usb36: usbfs: process 10275 (syz.0.895) did not claim interface 0 before use [ 360.634683][T10300] misc userio: Invalid payload size [ 361.076573][T10302] size and base must be multiples of 4 kiB [ 361.113931][T10311] FAULT_INJECTION: forcing a failure. [ 361.113931][T10311] name failslab, interval 1, probability 0, space 0, times 0 [ 361.170613][T10302] CPU: 0 UID: 0 PID: 10302 Comm: syz.3.900 Not tainted syzkaller #0 PREEMPT(full) [ 361.170636][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.170646][T10302] Call Trace: [ 361.170651][T10302] [ 361.170658][T10302] dump_stack_lvl+0x16c/0x1f0 [ 361.170679][T10302] mtrr_del+0xd1/0x110 [ 361.170700][T10302] mtrr_ioctl+0x922/0xcf0 [ 361.170721][T10302] ? __pfx_mtrr_ioctl+0x10/0x10 [ 361.170744][T10302] ? find_held_lock+0x2b/0x80 [ 361.170765][T10302] ? __fget_files+0x20e/0x3c0 [ 361.170780][T10302] ? __pfx_mtrr_ioctl+0x10/0x10 [ 361.170798][T10302] proc_reg_unlocked_ioctl+0x229/0x320 [ 361.170817][T10302] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 361.170838][T10302] __x64_sys_ioctl+0x18e/0x210 [ 361.170859][T10302] do_syscall_64+0xcd/0xfa0 [ 361.170876][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.170891][T10302] RIP: 0033:0x7fd3f678efc9 [ 361.170903][T10302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.170917][T10302] RSP: 002b:00007fd3f75ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.170931][T10302] RAX: ffffffffffffffda RBX: 00007fd3f69e6090 RCX: 00007fd3f678efc9 [ 361.170941][T10302] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 361.170949][T10302] RBP: 00007fd3f6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 361.170958][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.170967][T10302] R13: 00007fd3f69e6128 R14: 00007fd3f69e6090 R15: 00007ffcab5606f8 [ 361.170985][T10302] [ 361.335205][T10311] CPU: 0 UID: 0 PID: 10311 Comm: syz.2.906 Not tainted syzkaller #0 PREEMPT(full) [ 361.335229][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.335238][T10311] Call Trace: [ 361.335245][T10311] [ 361.335251][T10311] dump_stack_lvl+0x16c/0x1f0 [ 361.335271][T10311] should_fail_ex+0x512/0x640 [ 361.335302][T10311] ? __kmalloc_cache_noprof+0x5f/0x780 [ 361.335328][T10311] should_failslab+0xc2/0x120 [ 361.335347][T10311] __kmalloc_cache_noprof+0x72/0x780 [ 361.335370][T10311] ? cgroup_file_open+0x93/0x330 [ 361.335387][T10311] ? cgroup_file_open+0x93/0x330 [ 361.335400][T10311] cgroup_file_open+0x93/0x330 [ 361.335412][T10311] ? __pfx_cgroup_file_open+0x10/0x10 [ 361.335427][T10311] kernfs_fop_open+0x8c9/0xda0 [ 361.335446][T10311] do_dentry_open+0x982/0x1530 [ 361.335463][T10311] ? __pfx_kernfs_fop_open+0x10/0x10 [ 361.335480][T10311] vfs_open+0x82/0x3f0 [ 361.335502][T10311] path_openat+0x1de4/0x2cb0 [ 361.335523][T10311] ? __pfx_path_openat+0x10/0x10 [ 361.335539][T10311] ? __lock_acquire+0xb8a/0x1c90 [ 361.335561][T10311] do_filp_open+0x20b/0x470 [ 361.335576][T10311] ? __pfx_do_filp_open+0x10/0x10 [ 361.335605][T10311] ? alloc_fd+0x471/0x7d0 [ 361.335624][T10311] do_sys_openat2+0x11b/0x1d0 [ 361.335643][T10311] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.335670][T10311] __x64_sys_openat+0x174/0x210 [ 361.335690][T10311] ? __pfx___x64_sys_openat+0x10/0x10 [ 361.335718][T10311] do_syscall_64+0xcd/0xfa0 [ 361.335735][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.335750][T10311] RIP: 0033:0x7fcba218efc9 [ 361.335762][T10311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.335775][T10311] RSP: 002b:00007fcba3023038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 361.335789][T10311] RAX: ffffffffffffffda RBX: 00007fcba23e5fa0 RCX: 00007fcba218efc9 [ 361.335799][T10311] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 361.335808][T10311] RBP: 00007fcba2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 361.335816][T10311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.335825][T10311] R13: 00007fcba23e6038 R14: 00007fcba23e5fa0 R15: 00007ffed9288568 [ 361.335845][T10311] [ 362.685147][T10328] netlink: 'syz.2.911': attribute type 2 has an invalid length. [ 362.739761][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 363.431122][T10347] usbip-vudc usbip-vudc.0: gadget not bound [ 366.103362][T10391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.925'. [ 366.260282][T10395] misc userio: Invalid payload size [ 366.612698][T10391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.628712][T10391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.660000][T10391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.672086][T10391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.697811][T10417] nvme_fabrics: missing parameter 'transport=%s' [ 367.751077][T10417] nvme_fabrics: missing parameter 'nqn=%s' [ 368.513701][T10432] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 368.712305][T10434] Invalid ELF header magic: != ELF [ 369.190914][T10441] FAULT_INJECTION: forcing a failure. [ 369.190914][T10441] name failslab, interval 1, probability 0, space 0, times 0 [ 369.417561][T10441] CPU: 0 UID: 0 PID: 10441 Comm: syz.3.939 Not tainted syzkaller #0 PREEMPT(full) [ 369.417584][T10441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.417594][T10441] Call Trace: [ 369.417599][T10441] [ 369.417611][T10441] dump_stack_lvl+0x16c/0x1f0 [ 369.417633][T10441] should_fail_ex+0x512/0x640 [ 369.417655][T10441] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 369.417673][T10441] should_failslab+0xc2/0x120 [ 369.417692][T10441] kmem_cache_alloc_noprof+0x75/0x6e0 [ 369.417706][T10441] ? __kernfs_new_node+0xd2/0x8e0 [ 369.417727][T10441] ? __kernfs_new_node+0xd2/0x8e0 [ 369.417748][T10441] __kernfs_new_node+0xd2/0x8e0 [ 369.417769][T10441] ? __pfx___kernfs_new_node+0x10/0x10 [ 369.417792][T10441] ? find_held_lock+0x2b/0x80 [ 369.417807][T10441] ? kernfs_root+0xee/0x2a0 [ 369.417828][T10441] kernfs_new_node+0x13c/0x1e0 [ 369.417851][T10441] kernfs_create_link+0xcc/0x240 [ 369.417868][T10441] sysfs_do_create_link_sd+0x90/0x140 [ 369.417886][T10441] sysfs_create_link+0x61/0xc0 [ 369.417903][T10441] device_add+0x591/0x1aa0 [ 369.417928][T10441] ? __pfx_device_add+0x10/0x10 [ 369.417947][T10441] ? lockdep_init_map_type+0x5c/0x280 [ 369.417967][T10441] ? __init_waitqueue_head+0xca/0x150 [ 369.417993][T10441] rfkill_register+0x1ad/0xb40 [ 369.418018][T10441] nfc_register_device+0x11f/0x3c0 [ 369.418037][T10441] nci_register_device+0x7f1/0xb80 [ 369.418059][T10441] ? __pfx_nci_register_device+0x10/0x10 [ 369.418083][T10441] ? lockdep_init_map_type+0x5c/0x280 [ 369.418106][T10441] virtual_ncidev_open+0x141/0x220 [ 369.418123][T10441] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 369.418137][T10441] misc_open+0x26d/0x450 [ 369.418158][T10441] ? __pfx_misc_open+0x10/0x10 [ 369.418178][T10441] chrdev_open+0x234/0x6a0 [ 369.418194][T10441] ? __pfx_apparmor_file_open+0x10/0x10 [ 369.418215][T10441] ? __pfx_chrdev_open+0x10/0x10 [ 369.418232][T10441] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 369.418251][T10441] do_dentry_open+0x982/0x1530 [ 369.418268][T10441] ? __pfx_chrdev_open+0x10/0x10 [ 369.418288][T10441] vfs_open+0x82/0x3f0 [ 369.418310][T10441] path_openat+0x1de4/0x2cb0 [ 369.418332][T10441] ? __pfx_path_openat+0x10/0x10 [ 369.418349][T10441] ? __lock_acquire+0xb8a/0x1c90 [ 369.418369][T10441] do_filp_open+0x20b/0x470 [ 369.418385][T10441] ? __pfx_do_filp_open+0x10/0x10 [ 369.418414][T10441] ? alloc_fd+0x471/0x7d0 [ 369.418434][T10441] do_sys_openat2+0x11b/0x1d0 [ 369.418453][T10441] ? __pfx_do_sys_openat2+0x10/0x10 [ 369.418481][T10441] __x64_sys_openat+0x174/0x210 [ 369.418501][T10441] ? __pfx___x64_sys_openat+0x10/0x10 [ 369.418529][T10441] do_syscall_64+0xcd/0xfa0 [ 369.418546][T10441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.418561][T10441] RIP: 0033:0x7fd3f678efc9 [ 369.418574][T10441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.418588][T10441] RSP: 002b:00007fd3f75cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 369.418609][T10441] RAX: ffffffffffffffda RBX: 00007fd3f69e5fa0 RCX: 00007fd3f678efc9 [ 369.418619][T10441] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 369.418629][T10441] RBP: 00007fd3f6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 369.418638][T10441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.418648][T10441] R13: 00007fd3f69e6038 R14: 00007fd3f69e5fa0 R15: 00007ffcab5606f8 [ 369.418668][T10441] [ 372.288560][T10480] Invalid ELF header magic: != ELF [ 372.429595][T10480] Invalid ELF header magic: != ELF [ 372.685430][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.951'. [ 372.739754][T10480] Invalid ELF header magic: != ELF [ 373.600150][T10503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.667028][T10503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.716908][T10503] bond0 (unregistering): Released all slaves [ 374.212255][ T5843] block nbd1: Receive control failed (result -107) [ 374.609773][T10531] FAULT_INJECTION: forcing a failure. [ 374.609773][T10531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.737840][T10531] CPU: 0 UID: 0 PID: 10531 Comm: syz.0.955 Not tainted syzkaller #0 PREEMPT(full) [ 374.737861][T10531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.737869][T10531] Call Trace: [ 374.737875][T10531] [ 374.737880][T10531] dump_stack_lvl+0x16c/0x1f0 [ 374.737901][T10531] should_fail_ex+0x512/0x640 [ 374.737925][T10531] _copy_from_user+0x2e/0xd0 [ 374.737948][T10531] copy_msghdr_from_user+0x98/0x160 [ 374.737963][T10531] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 374.737980][T10531] ? __pfx__kstrtoull+0x10/0x10 [ 374.738000][T10531] ___sys_sendmsg+0xfe/0x1d0 [ 374.738014][T10531] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.738036][T10531] ? find_held_lock+0x2b/0x80 [ 374.738062][T10531] __sys_sendmmsg+0x200/0x420 [ 374.738078][T10531] ? __pfx___sys_sendmmsg+0x10/0x10 [ 374.738097][T10531] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 374.738122][T10531] ? fput+0x9b/0xd0 [ 374.738141][T10531] ? ksys_write+0x1ac/0x250 [ 374.738155][T10531] ? __pfx_ksys_write+0x10/0x10 [ 374.738173][T10531] __x64_sys_sendmmsg+0x9c/0x100 [ 374.738193][T10531] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.738209][T10531] do_syscall_64+0xcd/0xfa0 [ 374.738226][T10531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.738241][T10531] RIP: 0033:0x7fd18dd8efc9 [ 374.738253][T10531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.738267][T10531] RSP: 002b:00007fd18eb8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 374.738282][T10531] RAX: ffffffffffffffda RBX: 00007fd18dfe6180 RCX: 00007fd18dd8efc9 [ 374.738291][T10531] RDX: 0000000040000204 RSI: 0000200000000080 RDI: 0000000000000005 [ 374.738300][T10531] RBP: 00007fd18eb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 374.738309][T10531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.738318][T10531] R13: 00007fd18dfe6218 R14: 00007fd18dfe6180 R15: 00007ffe388fc2a8 [ 374.738337][T10531] [ 374.954665][T10533] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 375.634451][T10550] netlink: 'syz.3.959': attribute type 7 has an invalid length. [ 375.670826][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 377.098209][T10587] ubi0: attaching mtd0 [ 377.165393][T10587] ubi0: scanning is finished [ 377.217370][T10587] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 377.288570][T10575] netlink: set zone limit has 8 unknown bytes [ 377.466417][T10587] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 377.913063][T10605] syz.1.974 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 378.559525][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.570290][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.179287][T10623] netlink: 'syz.0.978': attribute type 1 has an invalid length. [ 379.942425][T10643] netlink: 334 bytes leftover after parsing attributes in process `syz.1.984'. [ 379.983548][T10651] netlink: 'syz.3.985': attribute type 2 has an invalid length. [ 380.016250][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 380.729226][T10659] zswap: compressor not available [ 382.028622][T10686] FAULT_INJECTION: forcing a failure. [ 382.028622][T10686] name failslab, interval 1, probability 0, space 0, times 0 [ 382.124198][T10686] CPU: 0 UID: 0 PID: 10686 Comm: syz.2.994 Not tainted syzkaller #0 PREEMPT(full) [ 382.124221][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 382.124231][T10686] Call Trace: [ 382.124236][T10686] [ 382.124242][T10686] dump_stack_lvl+0x16c/0x1f0 [ 382.124263][T10686] should_fail_ex+0x512/0x640 [ 382.124285][T10686] ? fs_reclaim_acquire+0xae/0x150 [ 382.124307][T10686] should_failslab+0xc2/0x120 [ 382.124326][T10686] __kmalloc_noprof+0xdd/0x880 [ 382.124348][T10686] ? ima_alloc_init_template+0x19d/0x720 [ 382.124374][T10686] ? ima_alloc_init_template+0x19d/0x720 [ 382.124394][T10686] ima_alloc_init_template+0x19d/0x720 [ 382.124417][T10686] ? take_dentry_name_snapshot+0x319/0x7d0 [ 382.124438][T10686] ima_store_measurement+0x1eb/0x5c0 [ 382.124461][T10686] ? __pfx_ima_store_measurement+0x10/0x10 [ 382.124484][T10686] ? vfs_getxattr_alloc+0xec/0x350 [ 382.124503][T10686] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 382.124525][T10686] process_measurement+0x1ddb/0x23e0 [ 382.124550][T10686] ? __lock_acquire+0x622/0x1c90 [ 382.124579][T10686] ? __pfx_process_measurement+0x10/0x10 [ 382.124600][T10686] ? __kasan_slab_alloc+0x89/0x90 [ 382.124617][T10686] ? security_file_alloc+0x34/0x2b0 [ 382.124632][T10686] ? alloc_empty_file+0x73/0x1e0 [ 382.124651][T10686] ? alloc_file_pseudo+0x13a/0x230 [ 382.124674][T10686] ? find_held_lock+0x2b/0x80 [ 382.124714][T10686] ima_file_mmap+0x1b1/0x1d0 [ 382.124734][T10686] ? __pfx_ima_file_mmap+0x10/0x10 [ 382.124765][T10686] security_mmap_file+0x88c/0x990 [ 382.124781][T10686] vm_mmap_pgoff+0xec/0x470 [ 382.124802][T10686] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 382.124819][T10686] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 382.124840][T10686] ? hugetlbfs_get_inode+0x31f/0x730 [ 382.124862][T10686] ksys_mmap_pgoff+0x1c8/0x5c0 [ 382.124883][T10686] __x64_sys_mmap+0x125/0x190 [ 382.124906][T10686] do_syscall_64+0xcd/0xfa0 [ 382.124924][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.124938][T10686] RIP: 0033:0x7fcba218efc9 [ 382.124951][T10686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.124965][T10686] RSP: 002b:00007fcba3023038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 382.124980][T10686] RAX: ffffffffffffffda RBX: 00007fcba23e5fa0 RCX: 00007fcba218efc9 [ 382.124991][T10686] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 382.125000][T10686] RBP: 00007fcba2211f91 R08: ffffffffffffffff R09: 0000300000000000 [ 382.125010][T10686] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 382.125019][T10686] R13: 00007fcba23e6038 R14: 00007fcba23e5fa0 R15: 00007ffed9288568 [ 382.125039][T10686] [ 382.388244][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.288861][ T30] audit: type=1804 audit(6057017730.946:12): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.994" name="anon_hugepage" dev="hugetlbfs" ino=35258 res=0 errno=0 [ 383.749022][T10704] netlink: 'syz.2.998': attribute type 1 has an invalid length. [ 384.593629][T10720] netlink: set zone limit has 8 unknown bytes [ 384.933345][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 385.312408][T10738] FAULT_INJECTION: forcing a failure. [ 385.312408][T10738] name failslab, interval 1, probability 0, space 0, times 0 [ 385.415432][T10738] CPU: 0 UID: 0 PID: 10738 Comm: syz.2.1007 Not tainted syzkaller #0 PREEMPT(full) [ 385.415455][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.415464][T10738] Call Trace: [ 385.415470][T10738] [ 385.415477][T10738] dump_stack_lvl+0x16c/0x1f0 [ 385.415498][T10738] should_fail_ex+0x512/0x640 [ 385.415520][T10738] ? __kmalloc_cache_noprof+0x5f/0x780 [ 385.415545][T10738] should_failslab+0xc2/0x120 [ 385.415564][T10738] __kmalloc_cache_noprof+0x72/0x780 [ 385.415593][T10738] ? kernfs_fop_open+0xa3a/0xda0 [ 385.415610][T10738] ? kernfs_fop_open+0xa3a/0xda0 [ 385.415623][T10738] kernfs_fop_open+0xa3a/0xda0 [ 385.415642][T10738] do_dentry_open+0x982/0x1530 [ 385.415659][T10738] ? __pfx_kernfs_fop_open+0x10/0x10 [ 385.415677][T10738] vfs_open+0x82/0x3f0 [ 385.415699][T10738] path_openat+0x1de4/0x2cb0 [ 385.415721][T10738] ? __pfx_path_openat+0x10/0x10 [ 385.415737][T10738] ? __lock_acquire+0xb8a/0x1c90 [ 385.415759][T10738] do_filp_open+0x20b/0x470 [ 385.415774][T10738] ? __pfx_do_filp_open+0x10/0x10 [ 385.415803][T10738] ? alloc_fd+0x471/0x7d0 [ 385.415823][T10738] do_sys_openat2+0x11b/0x1d0 [ 385.415842][T10738] ? __pfx_do_sys_openat2+0x10/0x10 [ 385.415870][T10738] __x64_sys_openat+0x174/0x210 [ 385.415890][T10738] ? __pfx___x64_sys_openat+0x10/0x10 [ 385.415917][T10738] do_syscall_64+0xcd/0xfa0 [ 385.415935][T10738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.415950][T10738] RIP: 0033:0x7fcba218efc9 [ 385.415962][T10738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.415976][T10738] RSP: 002b:00007fcba3002038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 385.415991][T10738] RAX: ffffffffffffffda RBX: 00007fcba23e6090 RCX: 00007fcba218efc9 [ 385.416000][T10738] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 385.416009][T10738] RBP: 00007fcba2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 385.416018][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.416026][T10738] R13: 00007fcba23e6128 R14: 00007fcba23e6090 R15: 00007ffed9288568 [ 385.416046][T10738] [ 388.000733][T10766] FAULT_INJECTION: forcing a failure. [ 388.000733][T10766] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.076075][T10766] CPU: 0 UID: 0 PID: 10766 Comm: syz.3.1012 Not tainted syzkaller #0 PREEMPT(full) [ 388.076098][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 388.076107][T10766] Call Trace: [ 388.076113][T10766] [ 388.076120][T10766] dump_stack_lvl+0x16c/0x1f0 [ 388.076141][T10766] should_fail_ex+0x512/0x640 [ 388.076167][T10766] should_fail_alloc_page+0xe7/0x130 [ 388.076188][T10766] prepare_alloc_pages+0x3c2/0x610 [ 388.076210][T10766] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 388.076230][T10766] ? __lock_acquire+0x622/0x1c90 [ 388.076250][T10766] ? css_rstat_updated+0x1c2/0x510 [ 388.076268][T10766] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 388.076282][T10766] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 388.076297][T10766] ? __resched_curr+0x316/0x3b0 [ 388.076313][T10766] ? __lock_acquire+0xb8a/0x1c90 [ 388.076335][T10766] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 388.076358][T10766] ? policy_nodemask+0xea/0x4e0 [ 388.076378][T10766] alloc_pages_mpol+0x1fb/0x550 [ 388.076397][T10766] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 388.076420][T10766] alloc_pages_noprof+0x131/0x390 [ 388.076439][T10766] __pmd_alloc+0x3b/0x8b0 [ 388.076460][T10766] __handle_mm_fault+0xada/0x2aa0 [ 388.076490][T10766] ? mt_find+0x3e2/0xa20 [ 388.076508][T10766] ? __pfx___handle_mm_fault+0x10/0x10 [ 388.076529][T10766] ? __pfx_mt_find+0x10/0x10 [ 388.076557][T10766] ? find_vma+0xbf/0x140 [ 388.076574][T10766] ? __pfx_find_vma+0x10/0x10 [ 388.076594][T10766] handle_mm_fault+0x589/0xd10 [ 388.076616][T10766] ? __pkru_allows_pkey+0x11/0xb0 [ 388.076639][T10766] do_user_addr_fault+0x7a6/0x1370 [ 388.076654][T10766] ? rcu_is_watching+0x12/0xc0 [ 388.076671][T10766] exc_page_fault+0x64/0xc0 [ 388.076687][T10766] asm_exc_page_fault+0x26/0x30 [ 388.076701][T10766] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 388.076722][T10766] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 388.076735][T10766] RSP: 0018:ffffc9000bcd7cd0 EFLAGS: 00050202 [ 388.076748][T10766] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 388.076757][T10766] RDX: fffff5200179afae RSI: ffffc9000bcd7d48 RDI: 0000000000000001 [ 388.076767][T10766] RBP: 0000000000000001 R08: 0000000000000000 R09: fffff5200179afad [ 388.076775][T10766] R10: ffffc9000bcd7d6f R11: 0000000000000001 R12: ffffc9000bcd7d48 [ 388.076784][T10766] R13: 0000000000000029 R14: 00007ffffffff000 R15: 0000000000000000 [ 388.076803][T10766] _copy_to_user+0xbb/0xd0 [ 388.076827][T10766] semctl_info.constprop.0+0x338/0x450 [ 388.076848][T10766] ? __pfx_semctl_info.constprop.0+0x10/0x10 [ 388.076872][T10766] ? do_futex+0x122/0x350 [ 388.076891][T10766] ? __pfx_do_futex+0x10/0x10 [ 388.076911][T10766] ksys_semctl.constprop.0+0x14a/0x2f0 [ 388.076932][T10766] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 388.076953][T10766] ? __x64_sys_futex+0x1e0/0x4c0 [ 388.076982][T10766] do_syscall_64+0xcd/0xfa0 [ 388.076999][T10766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.077016][T10766] RIP: 0033:0x7fd3f678efc9 [ 388.077028][T10766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.077041][T10766] RSP: 002b:00007fd3f75cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 388.077054][T10766] RAX: ffffffffffffffda RBX: 00007fd3f69e5fa0 RCX: 00007fd3f678efc9 [ 388.077064][T10766] RDX: 0000000000000013 RSI: 0000000000000002 RDI: 0000000000000007 [ 388.077073][T10766] RBP: 00007fd3f6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.077082][T10766] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 388.077091][T10766] R13: 00007fd3f69e6038 R14: 00007fd3f69e5fa0 R15: 00007ffcab5606f8 [ 388.077111][T10766] [ 388.452311][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.081407][T10787] usbip-vudc usbip-vudc.0: gadget not bound [ 389.775006][T10798] FAULT_INJECTION: forcing a failure. [ 389.775006][T10798] name failslab, interval 1, probability 0, space 0, times 0 [ 389.822548][T10796] netlink: set zone limit has 8 unknown bytes [ 389.934300][T10798] CPU: 0 UID: 0 PID: 10798 Comm: syz.0.1020 Not tainted syzkaller #0 PREEMPT(full) [ 389.934324][T10798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 389.934333][T10798] Call Trace: [ 389.934338][T10798] [ 389.934344][T10798] dump_stack_lvl+0x16c/0x1f0 [ 389.934365][T10798] should_fail_ex+0x512/0x640 [ 389.934389][T10798] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 389.934406][T10798] should_failslab+0xc2/0x120 [ 389.934425][T10798] kmem_cache_alloc_noprof+0x75/0x6e0 [ 389.934439][T10798] ? __x64_sys_futex+0x1e0/0x4c0 [ 389.934457][T10798] ? getname_flags.part.0+0x4c/0x550 [ 389.934480][T10798] ? getname_flags.part.0+0x4c/0x550 [ 389.934498][T10798] getname_flags.part.0+0x4c/0x550 [ 389.934519][T10798] getname_flags+0x93/0xf0 [ 389.934534][T10798] __x64_sys_mknod+0x74/0xb0 [ 389.934549][T10798] do_syscall_64+0xcd/0xfa0 [ 389.934566][T10798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.934581][T10798] RIP: 0033:0x7fd18dd8efc9 [ 389.934592][T10798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.934605][T10798] RSP: 002b:00007fd18ebb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 389.934619][T10798] RAX: ffffffffffffffda RBX: 00007fd18dfe6090 RCX: 00007fd18dd8efc9 [ 389.934629][T10798] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 389.934638][T10798] RBP: 00007fd18de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 389.934646][T10798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.934654][T10798] R13: 00007fd18dfe6128 R14: 00007fd18dfe6090 R15: 00007ffe388fc2a8 [ 389.934676][T10798] [ 390.099813][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.628781][T10813] kexec: Could not allocate control_code_buffer [ 392.043459][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1030'. [ 392.512564][T10840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.545017][T10840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.575991][T10840] bond0 (unregistering): Released all slaves [ 393.095134][T10871] FAULT_INJECTION: forcing a failure. [ 393.095134][T10871] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.168806][T10871] CPU: 0 UID: 0 PID: 10871 Comm: syz.2.1035 Not tainted syzkaller #0 PREEMPT(full) [ 393.168830][T10871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 393.168839][T10871] Call Trace: [ 393.168845][T10871] [ 393.168851][T10871] dump_stack_lvl+0x16c/0x1f0 [ 393.168872][T10871] should_fail_ex+0x512/0x640 [ 393.168897][T10871] should_fail_alloc_page+0xe7/0x130 [ 393.168918][T10871] prepare_alloc_pages+0x3c2/0x610 [ 393.168940][T10871] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 393.168958][T10871] ? rcu_is_watching+0x12/0xc0 [ 393.168973][T10871] ? trace_mm_page_alloc+0x11f/0x1a0 [ 393.168992][T10871] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 393.169008][T10871] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 393.169025][T10871] ? is_bpf_text_address+0x8a/0x1a0 [ 393.169044][T10871] ? bpf_ksym_find+0x124/0x1c0 [ 393.169061][T10871] ? is_bpf_text_address+0x94/0x1a0 [ 393.169079][T10871] ? kernel_text_address+0x8d/0x100 [ 393.169101][T10871] ? __kernel_text_address+0xd/0x40 [ 393.169113][T10871] ? unwind_get_return_address+0x59/0xa0 [ 393.169134][T10871] alloc_pages_bulk_noprof+0x71c/0x1410 [ 393.169148][T10871] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.169172][T10871] ? policy_nodemask+0xea/0x4e0 [ 393.169192][T10871] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 393.169207][T10871] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 393.169233][T10871] kasan_populate_vmalloc+0x112/0x2d0 [ 393.169248][T10871] ? alloc_vmap_area+0x8b5/0x29e0 [ 393.169269][T10871] alloc_vmap_area+0x960/0x29e0 [ 393.169294][T10871] ? __pfx_alloc_vmap_area+0x10/0x10 [ 393.169316][T10871] __get_vm_area_node+0x1ca/0x330 [ 393.169346][T10871] __vmalloc_node_range_noprof+0x271/0x1480 [ 393.169367][T10871] ? kernel_clone+0xfc/0x930 [ 393.169392][T10871] ? kernel_clone+0xfc/0x930 [ 393.169413][T10871] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 393.169438][T10871] ? rcu_is_watching+0x12/0xc0 [ 393.169454][T10871] ? kernel_clone+0xfc/0x930 [ 393.169470][T10871] __vmalloc_node_noprof+0xad/0xf0 [ 393.169489][T10871] ? kernel_clone+0xfc/0x930 [ 393.169507][T10871] copy_process+0x2c77/0x76a0 [ 393.169526][T10871] ? __pfx___futex_wait+0x10/0x10 [ 393.169546][T10871] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 393.169561][T10871] ? lockdep_hardirqs_on+0x7c/0x110 [ 393.169582][T10871] ? __pfx_copy_process+0x10/0x10 [ 393.169598][T10871] ? futex_private_hash_put+0x176/0x300 [ 393.169618][T10871] ? futex_private_hash_put+0x18a/0x300 [ 393.169638][T10871] kernel_clone+0xfc/0x930 [ 393.169656][T10871] ? __pfx_kernel_clone+0x10/0x10 [ 393.169683][T10871] __do_sys_clone+0xce/0x120 [ 393.169699][T10871] ? __pfx___do_sys_clone+0x10/0x10 [ 393.169724][T10871] ? xfd_validate_state+0x61/0x180 [ 393.169749][T10871] do_syscall_64+0xcd/0xfa0 [ 393.169766][T10871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.169780][T10871] RIP: 0033:0x7fcba218efc9 [ 393.169793][T10871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.169806][T10871] RSP: 002b:00007fcba3001fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 393.169821][T10871] RAX: ffffffffffffffda RBX: 00007fcba23e6090 RCX: 00007fcba218efc9 [ 393.169831][T10871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.169840][T10871] RBP: 00007fcba2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 393.169850][T10871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.169859][T10871] R13: 00007fcba23e6128 R14: 00007fcba23e6090 R15: 00007ffed9288568 [ 393.169879][T10871] [ 393.169922][T10871] syz.2.1035: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 394.658979][T10871] CPU: 0 UID: 0 PID: 10871 Comm: syz.2.1035 Not tainted syzkaller #0 PREEMPT(full) [ 394.659008][T10871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 394.659017][T10871] Call Trace: [ 394.659023][T10871] [ 394.659029][T10871] dump_stack_lvl+0x16c/0x1f0 [ 394.659051][T10871] warn_alloc+0x248/0x3a0 [ 394.659068][T10871] ? __pfx_warn_alloc+0x10/0x10 [ 394.659083][T10871] ? kfree+0x2b8/0x6d0 [ 394.659094][T10871] ? __get_vm_area_node+0x2cd/0x330 [ 394.659117][T10871] ? __get_vm_area_node+0x2cd/0x330 [ 394.659135][T10871] ? __get_vm_area_node+0x208/0x330 [ 394.659159][T10871] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 394.659186][T10871] ? kernel_clone+0xfc/0x930 [ 394.659208][T10871] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 394.659233][T10871] ? rcu_is_watching+0x12/0xc0 [ 394.659250][T10871] ? kernel_clone+0xfc/0x930 [ 394.659267][T10871] __vmalloc_node_noprof+0xad/0xf0 [ 394.659287][T10871] ? kernel_clone+0xfc/0x930 [ 394.659306][T10871] copy_process+0x2c77/0x76a0 [ 394.659324][T10871] ? __pfx___futex_wait+0x10/0x10 [ 394.659346][T10871] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 394.659361][T10871] ? lockdep_hardirqs_on+0x7c/0x110 [ 394.659383][T10871] ? __pfx_copy_process+0x10/0x10 [ 394.659401][T10871] ? futex_private_hash_put+0x176/0x300 [ 394.659421][T10871] ? futex_private_hash_put+0x18a/0x300 [ 394.659443][T10871] kernel_clone+0xfc/0x930 [ 394.659462][T10871] ? __pfx_kernel_clone+0x10/0x10 [ 394.659490][T10871] __do_sys_clone+0xce/0x120 [ 394.659507][T10871] ? __pfx___do_sys_clone+0x10/0x10 [ 394.659536][T10871] ? xfd_validate_state+0x61/0x180 [ 394.659563][T10871] do_syscall_64+0xcd/0xfa0 [ 394.659581][T10871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.659596][T10871] RIP: 0033:0x7fcba218efc9 [ 394.659608][T10871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.659622][T10871] RSP: 002b:00007fcba3001fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 394.659637][T10871] RAX: ffffffffffffffda RBX: 00007fcba23e6090 RCX: 00007fcba218efc9 [ 394.659647][T10871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 394.659656][T10871] RBP: 00007fcba2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 394.659665][T10871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.659674][T10871] R13: 00007fcba23e6128 R14: 00007fcba23e6090 R15: 00007ffed9288568 [ 394.659692][T10871] [ 394.659698][T10871] Mem-Info: [ 395.505669][T10871] active_anon:6375 inactive_anon:33424 isolated_anon:0 [ 395.505669][T10871] active_file:18118 inactive_file:40347 isolated_file:0 [ 395.505669][T10871] unevictable:768 dirty:937 writeback:0 [ 395.505669][T10871] slab_reclaimable:12481 slab_unreclaimable:99412 [ 395.505669][T10871] mapped:31236 shmem:26154 pagetables:1334 [ 395.505669][T10871] sec_pagetables:0 bounce:0 [ 395.505669][T10871] kernel_misc_reclaimable:0 [ 395.505669][T10871] free:1261521 free_pcp:21698 free_cma:0 [ 395.551401][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.814555][T10871] Node 0 active_anon:25500kB inactive_anon:133748kB active_file:72464kB inactive_file:161196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124944kB dirty:3436kB writeback:0kB shmem:103080kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12048kB pagetables:5084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 395.847298][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.974833][T10871] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 396.004664][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.088887][T10856] kexec: Could not allocate control_code_buffer [ 396.124591][T10871] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.154461][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.294880][T10871] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 396.300674][T10871] Node 0 DMA32 free:1163764kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25496kB inactive_anon:130476kB active_file:72536kB inactive_file:161132kB unevictable:1536kB writepending:3496kB zspages:20kB present:3129332kB managed:2545096kB mlocked:0kB bounce:0kB free_pcp:100440kB local_pcp:100440kB free_cma:0kB [ 396.334776][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.497926][T10906] FAULT_INJECTION: forcing a failure. [ 396.497926][T10906] name failslab, interval 1, probability 0, space 0, times 0 [ 396.514927][T10871] lowmem_reserve[]: 0 0 1 1 1 [ 396.548017][T10871] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.671288][T10906] CPU: 0 UID: 0 PID: 10906 Comm: syz.3.1040 Not tainted syzkaller #0 PREEMPT(full) [ 396.671312][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.671322][T10906] Call Trace: [ 396.671328][T10906] [ 396.671334][T10906] dump_stack_lvl+0x16c/0x1f0 [ 396.671360][T10906] should_fail_ex+0x512/0x640 [ 396.671382][T10906] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 396.671400][T10906] should_failslab+0xc2/0x120 [ 396.671419][T10906] kmem_cache_alloc_noprof+0x75/0x6e0 [ 396.671433][T10906] ? __x64_sys_futex+0x1e0/0x4c0 [ 396.671452][T10906] ? getname_flags.part.0+0x4c/0x550 [ 396.671475][T10906] ? getname_flags.part.0+0x4c/0x550 [ 396.671494][T10906] getname_flags.part.0+0x4c/0x550 [ 396.671515][T10906] getname_flags+0x93/0xf0 [ 396.671529][T10906] __x64_sys_mknod+0x74/0xb0 [ 396.671545][T10906] do_syscall_64+0xcd/0xfa0 [ 396.671561][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.671575][T10906] RIP: 0033:0x7fd3f678efc9 [ 396.671588][T10906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.671602][T10906] RSP: 002b:00007fd3f75ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 396.671616][T10906] RAX: ffffffffffffffda RBX: 00007fd3f69e6090 RCX: 00007fd3f678efc9 [ 396.671626][T10906] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 396.671634][T10906] RBP: 00007fd3f6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.671642][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.671651][T10906] R13: 00007fd3f69e6128 R14: 00007fd3f69e6090 R15: 00007ffcab5606f8 [ 396.671669][T10906] [ 396.839789][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.908734][T10871] lowmem_reserve[]: 0 0 0 0 0 [ 396.913524][T10871] Node 1 Normal free:3905844kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10900kB local_pcp:10900kB free_cma:0kB [ 396.945791][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.952444][T10871] lowmem_reserve[]: 0 0 0 0 0 [ 396.957542][T10871] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 396.970213][T10871] Node 0 DMA32: 11560*4kB (UM) 4616*8kB (UM) 1677*16kB (UM) 1070*32kB (UM) 592*64kB (UME) 336*128kB (UM) 97*256kB (UM) 38*512kB (UME) 20*1024kB (UM) 4*2048kB (UE) 211*4096kB (M) = 1162352kB [ 396.989028][T10871] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 397.000802][T10871] Node 1 Normal: 221*4kB (UME) 10*8kB (UME) 13*16kB (UME) 211*32kB (UME) 89*64kB (UME) 22*128kB (UME) 5*256kB (UM) 4*512kB (UME) 1*1024kB (U) 3*2048kB (UE) 947*4096kB (M) = 3905844kB [ 397.019026][T10871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.037049][T10871] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 397.046444][T10871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.056037][T10871] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.084238][T10871] 84625 total pagecache pages [ 397.100839][T10871] 0 pages in swap cache [ 397.105087][T10871] Free swap = 124992kB [ 397.115293][T10871] Total swap = 124996kB [ 397.124906][T10871] 2097051 pages RAM [ 397.129161][T10871] 0 pages HighMem/MovableOnly [ 397.154501][T10871] 428687 pages reserved [ 397.159525][T10871] 0 pages cma reserved [ 397.318465][T10921] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 397.327116][T10917] usbip-vudc usbip-vudc.0: gadget not bound [ 398.012710][T10922] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.898491][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1057'. [ 401.198014][T10989] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 401.503475][T10993] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input69 [ 402.042874][T11013] netlink: 46 bytes leftover after parsing attributes in process `syz.1.1063'. [ 402.191162][T11015] zswap: compressor not available [ 402.585559][T11021] FAULT_INJECTION: forcing a failure. [ 402.585559][T11021] name failslab, interval 1, probability 0, space 0, times 0 [ 402.644828][T11021] CPU: 0 UID: 0 PID: 11021 Comm: syz.0.1064 Not tainted syzkaller #0 PREEMPT(full) [ 402.644851][T11021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 402.644860][T11021] Call Trace: [ 402.644866][T11021] [ 402.644872][T11021] dump_stack_lvl+0x16c/0x1f0 [ 402.644894][T11021] should_fail_ex+0x512/0x640 [ 402.644916][T11021] ? __kmalloc_cache_noprof+0x5f/0x780 [ 402.644942][T11021] should_failslab+0xc2/0x120 [ 402.644961][T11021] __kmalloc_cache_noprof+0x72/0x780 [ 402.644983][T11021] ? rcu_is_watching+0x12/0xc0 [ 402.644998][T11021] ? call_usermodehelper_setup+0xaf/0x360 [ 402.645013][T11021] ? __pfx_free_modprobe_argv+0x10/0x10 [ 402.645035][T11021] ? call_usermodehelper_setup+0xaf/0x360 [ 402.645049][T11021] call_usermodehelper_setup+0xaf/0x360 [ 402.645076][T11021] __request_module+0x3bd/0x690 [ 402.645104][T11021] ? __pfx___request_module+0x10/0x10 [ 402.645134][T11021] ? crypto_alg_lookup+0x113/0x1e0 [ 402.645157][T11021] crypto_alg_mod_lookup+0x367/0x520 [ 402.645179][T11021] crypto_has_alg+0x22/0x80 [ 402.645194][T11021] zswap_compressor_param_set+0x10c/0xa60 [ 402.645220][T11021] param_attr_store+0x199/0x300 [ 402.645238][T11021] ? __pfx_param_attr_store+0x10/0x10 [ 402.645253][T11021] module_attr_store+0x58/0x80 [ 402.645265][T11021] ? __pfx_module_attr_store+0x10/0x10 [ 402.645279][T11021] sysfs_kf_write+0xf2/0x150 [ 402.645297][T11021] kernfs_fop_write_iter+0x3af/0x570 [ 402.645318][T11021] ? __pfx_sysfs_kf_write+0x10/0x10 [ 402.645335][T11021] vfs_write+0x7d3/0x11d0 [ 402.645351][T11021] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 402.645373][T11021] ? __pfx___mutex_lock+0x10/0x10 [ 402.645390][T11021] ? __pfx_vfs_write+0x10/0x10 [ 402.645418][T11021] ksys_write+0x12a/0x250 [ 402.645433][T11021] ? __pfx_ksys_write+0x10/0x10 [ 402.645455][T11021] do_syscall_64+0xcd/0xfa0 [ 402.645472][T11021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.645486][T11021] RIP: 0033:0x7fd18dd8efc9 [ 402.645498][T11021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.645512][T11021] RSP: 002b:00007fd18eb8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.645548][T11021] RAX: ffffffffffffffda RBX: 00007fd18dfe6180 RCX: 00007fd18dd8efc9 [ 402.645558][T11021] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 402.645568][T11021] RBP: 00007fd18de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 402.645577][T11021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.645585][T11021] R13: 00007fd18dfe6218 R14: 00007fd18dfe6180 R15: 00007ffe388fc2a8 [ 402.645606][T11021] [ 402.912126][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.062877][T11021] zswap: compressor  not available [ 404.603434][T11060] usbip-vudc usbip-vudc.0: gadget not bound [ 405.286568][T11070] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 406.886533][T11109] program syz.0.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.943544][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1085'. [ 407.520647][T11111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.581172][T11111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.620403][T11111] bond0 (unregistering): Released all slaves [ 407.752080][T11121] FAULT_INJECTION: forcing a failure. [ 407.752080][T11121] name fail_futex, interval 1, probability 0, space 0, times 0 [ 407.897597][T11121] CPU: 0 UID: 0 PID: 11121 Comm: syz.3.1086 Not tainted syzkaller #0 PREEMPT(full) [ 407.897621][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 407.897630][T11121] Call Trace: [ 407.897637][T11121] [ 407.897643][T11121] dump_stack_lvl+0x16c/0x1f0 [ 407.897665][T11121] should_fail_ex+0x512/0x640 [ 407.897689][T11121] get_futex_key+0x1d0/0x1560 [ 407.897711][T11121] ? __pfx_get_futex_key+0x10/0x10 [ 407.897731][T11121] ? __pick_eevdf+0x30a/0x670 [ 407.897750][T11121] futex_wait_setup+0x9d/0x550 [ 407.897777][T11121] __futex_wait+0x193/0x2f0 [ 407.897799][T11121] ? __pfx___futex_wait+0x10/0x10 [ 407.897819][T11121] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 407.897833][T11121] ? lockdep_hardirqs_on+0x7c/0x110 [ 407.897851][T11121] ? __pfx_futex_wake_mark+0x10/0x10 [ 407.897875][T11121] ? futex_private_hash_put+0x176/0x300 [ 407.897894][T11121] ? futex_private_hash_put+0x18a/0x300 [ 407.897913][T11121] futex_wait+0xe8/0x380 [ 407.897925][T11121] ? __pfx_futex_wait+0x10/0x10 [ 407.897950][T11121] ? kmem_cache_free+0x2d4/0x6c0 [ 407.897964][T11121] ? putname+0x154/0x1a0 [ 407.897985][T11121] do_futex+0x229/0x350 [ 407.898004][T11121] ? __pfx_do_futex+0x10/0x10 [ 407.898027][T11121] __x64_sys_futex+0x1e0/0x4c0 [ 407.898047][T11121] ? __x64_sys_openat+0x174/0x210 [ 407.898067][T11121] ? __pfx___x64_sys_futex+0x10/0x10 [ 407.898092][T11121] do_syscall_64+0xcd/0xfa0 [ 407.898109][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.898123][T11121] RIP: 0033:0x7fd3f678efc9 [ 407.898136][T11121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.898149][T11121] RSP: 002b:00007fd3f75ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 407.898163][T11121] RAX: ffffffffffffffda RBX: 00007fd3f69e6098 RCX: 00007fd3f678efc9 [ 407.898173][T11121] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd3f69e6098 [ 407.898181][T11121] RBP: 00007fd3f69e6090 R08: 0000000000000000 R09: 0000000000000000 [ 407.898190][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.898199][T11121] R13: 00007fd3f69e6128 R14: 00007ffcab560610 R15: 00007ffcab5606f8 [ 407.898218][T11121] [ 408.370883][T11124] FAULT_INJECTION: forcing a failure. [ 408.370883][T11124] name failslab, interval 1, probability 0, space 0, times 0 [ 408.384373][T11124] CPU: 0 UID: 0 PID: 11124 Comm: syz.2.1087 Not tainted syzkaller #0 PREEMPT(full) [ 408.384394][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 408.384404][T11124] Call Trace: [ 408.384409][T11124] [ 408.384415][T11124] dump_stack_lvl+0x16c/0x1f0 [ 408.384437][T11124] should_fail_ex+0x512/0x640 [ 408.384461][T11124] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 408.384480][T11124] should_failslab+0xc2/0x120 [ 408.384499][T11124] __kmalloc_node_noprof+0xe0/0x8a0 [ 408.384516][T11124] ? alloc_slab_obj_exts+0x43/0xf0 [ 408.384540][T11124] ? alloc_slab_obj_exts+0x43/0xf0 [ 408.384559][T11124] alloc_slab_obj_exts+0x43/0xf0 [ 408.384580][T11124] __memcg_slab_post_alloc_hook+0x251/0x940 [ 408.384602][T11124] ? kasan_save_track+0x14/0x30 [ 408.384620][T11124] kmem_cache_alloc_noprof+0x550/0x6e0 [ 408.384634][T11124] ? prepare_creds+0x2c/0x7d0 [ 408.384658][T11124] ? prepare_creds+0x2c/0x7d0 [ 408.384679][T11124] prepare_creds+0x2c/0x7d0 [ 408.384700][T11124] copy_creds+0xa7/0xa50 [ 408.384722][T11124] copy_process+0xffc/0x76a0 [ 408.384739][T11124] ? __pfx___futex_wait+0x10/0x10 [ 408.384770][T11124] ? __pfx_copy_process+0x10/0x10 [ 408.384786][T11124] ? futex_private_hash_put+0x176/0x300 [ 408.384806][T11124] ? futex_private_hash_put+0x18a/0x300 [ 408.384826][T11124] kernel_clone+0xfc/0x930 [ 408.384844][T11124] ? __pfx_kernel_clone+0x10/0x10 [ 408.384870][T11124] __do_sys_clone+0xce/0x120 [ 408.384887][T11124] ? __pfx___do_sys_clone+0x10/0x10 [ 408.384912][T11124] ? xfd_validate_state+0x61/0x180 [ 408.384937][T11124] do_syscall_64+0xcd/0xfa0 [ 408.384955][T11124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.384969][T11124] RIP: 0033:0x7fcba218efc9 [ 408.384982][T11124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.384996][T11124] RSP: 002b:00007fcba3022fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 408.385010][T11124] RAX: ffffffffffffffda RBX: 00007fcba23e5fa0 RCX: 00007fcba218efc9 [ 408.385020][T11124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.385029][T11124] RBP: 00007fcba2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.385037][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.385045][T11124] R13: 00007fcba23e6038 R14: 00007fcba23e5fa0 R15: 00007ffed9288568 [ 408.385065][T11124] [ 408.619459][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.276308][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 411.179395][T11163] tipc: Started in network mode [ 411.213952][T11163] tipc: Node identity ee00, cluster identity 4711 [ 411.234217][T11163] tipc: Node number set to 60928 [ 411.425613][T11180] netlink: 'syz.0.1097': attribute type 1 has an invalid length. [ 412.933913][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1104'. [ 413.295936][T11210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.308787][T11210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.319574][T11210] bond0 (unregistering): Released all slaves [ 414.023855][T11234] netlink: 'syz.2.1111': attribute type 2 has an invalid length. [ 414.080331][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 414.382909][T11241] netlink: set zone limit has 8 unknown bytes [ 415.333865][T11257] netlink: set zone limit has 8 unknown bytes [ 416.267693][T11287] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 416.516402][T11289] netlink: 'syz.0.1123': attribute type 1 has an invalid length. [ 416.716952][T11279] kexec: Could not allocate control_code_buffer [ 416.759345][T11292] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70 [ 416.906767][T11295] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 417.635050][T11308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1128'. [ 418.077618][ T5843] block nbd2: Receive control failed (result -107) [ 418.491192][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1132'. [ 418.510104][T11330] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1133'. [ 418.550374][T11332] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1132'. [ 418.667934][T11331] kfence: disabled [ 419.797757][T11356] FAULT_INJECTION: forcing a failure. [ 419.797757][T11356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 419.864880][T11356] CPU: 0 UID: 0 PID: 11356 Comm: syz.3.1138 Not tainted syzkaller #0 PREEMPT(full) [ 419.864903][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.864912][T11356] Call Trace: [ 419.864918][T11356] [ 419.864925][T11356] dump_stack_lvl+0x16c/0x1f0 [ 419.864946][T11356] should_fail_ex+0x512/0x640 [ 419.864971][T11356] should_fail_alloc_page+0xe7/0x130 [ 419.864992][T11356] prepare_alloc_pages+0x3c2/0x610 [ 419.865011][T11356] ? arch_stack_walk+0xa6/0x100 [ 419.865027][T11356] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 419.865046][T11356] ? stack_trace_save+0x8e/0xc0 [ 419.865062][T11356] ? __pfx_stack_trace_save+0x10/0x10 [ 419.865079][T11356] ? stack_depot_save_flags+0x29/0x9c0 [ 419.865098][T11356] ? trace_mm_page_alloc+0x11f/0x1a0 [ 419.865116][T11356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 419.865132][T11356] ? kasan_save_stack+0x42/0x60 [ 419.865146][T11356] ? kasan_save_stack+0x33/0x60 [ 419.865161][T11356] ? kasan_save_track+0x14/0x30 [ 419.865175][T11356] ? __kasan_slab_alloc+0x89/0x90 [ 419.865191][T11356] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 419.865204][T11356] ? __pmd_alloc+0xbf/0x8b0 [ 419.865221][T11356] ? __handle_mm_fault+0xada/0x2aa0 [ 419.865242][T11356] ? _copy_to_user+0xbb/0xd0 [ 419.865262][T11356] ? semctl_info.constprop.0+0x338/0x450 [ 419.865281][T11356] ? ksys_semctl.constprop.0+0x14a/0x2f0 [ 419.865300][T11356] ? do_syscall_64+0xcd/0xfa0 [ 419.865314][T11356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.865332][T11356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.865356][T11356] ? policy_nodemask+0xea/0x4e0 [ 419.865376][T11356] alloc_pages_mpol+0x1fb/0x550 [ 419.865395][T11356] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 419.865413][T11356] ? __lock_acquire+0xb8a/0x1c90 [ 419.865435][T11356] ? __pfx_filemap_map_pages+0x10/0x10 [ 419.865448][T11356] alloc_pages_noprof+0x131/0x390 [ 419.865467][T11356] pte_alloc_one+0x1e/0x350 [ 419.865483][T11356] __do_fault+0x320/0x490 [ 419.865496][T11356] ? do_raw_spin_lock+0x12c/0x2b0 [ 419.865518][T11356] ? __pfx_filemap_map_pages+0x10/0x10 [ 419.865531][T11356] do_pte_missing+0x1a6/0x3ba0 [ 419.865551][T11356] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 419.865581][T11356] ? __pmd_alloc+0x64f/0x8b0 [ 419.865601][T11356] __handle_mm_fault+0x1556/0x2aa0 [ 419.865625][T11356] ? mt_find+0x3e2/0xa20 [ 419.865644][T11356] ? __pfx___handle_mm_fault+0x10/0x10 [ 419.865664][T11356] ? __pfx_mt_find+0x10/0x10 [ 419.865691][T11356] ? find_vma+0xbf/0x140 [ 419.865707][T11356] ? __pfx_find_vma+0x10/0x10 [ 419.865725][T11356] handle_mm_fault+0x589/0xd10 [ 419.865746][T11356] ? __pkru_allows_pkey+0x11/0xb0 [ 419.865768][T11356] do_user_addr_fault+0x7a6/0x1370 [ 419.865783][T11356] ? rcu_is_watching+0x12/0xc0 [ 419.865800][T11356] exc_page_fault+0x64/0xc0 [ 419.865816][T11356] asm_exc_page_fault+0x26/0x30 [ 419.865829][T11356] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 419.865850][T11356] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 419.865864][T11356] RSP: 0018:ffffc90004acfcd0 EFLAGS: 00050202 [ 419.865877][T11356] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 419.865886][T11356] RDX: fffff52000959fae RSI: ffffc90004acfd48 RDI: 0000000000000001 [ 419.865895][T11356] RBP: 0000000000000001 R08: 0000000000000000 R09: fffff52000959fad [ 419.865904][T11356] R10: ffffc90004acfd6f R11: 0000000000000001 R12: ffffc90004acfd48 [ 419.865916][T11356] R13: 0000000000000029 R14: 00007ffffffff000 R15: 0000000000000000 [ 419.865935][T11356] _copy_to_user+0xbb/0xd0 [ 419.865959][T11356] semctl_info.constprop.0+0x338/0x450 [ 419.865979][T11356] ? __pfx_semctl_info.constprop.0+0x10/0x10 [ 419.866004][T11356] ? do_futex+0x122/0x350 [ 419.866024][T11356] ? __pfx_do_futex+0x10/0x10 [ 419.866044][T11356] ksys_semctl.constprop.0+0x14a/0x2f0 [ 419.866066][T11356] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 419.866087][T11356] ? __x64_sys_futex+0x1e0/0x4c0 [ 419.866116][T11356] do_syscall_64+0xcd/0xfa0 [ 419.866133][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.866146][T11356] RIP: 0033:0x7fd3f678efc9 [ 419.866158][T11356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.866171][T11356] RSP: 002b:00007fd3f75cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 419.866184][T11356] RAX: ffffffffffffffda RBX: 00007fd3f69e5fa0 RCX: 00007fd3f678efc9 [ 419.866193][T11356] RDX: 0000000000000013 RSI: 0000000000000002 RDI: 0000000000000007 [ 419.866201][T11356] RBP: 00007fd3f6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 419.866210][T11356] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 419.866218][T11356] R13: 00007fd3f69e6038 R14: 00007fd3f69e5fa0 R15: 00007ffcab5606f8 [ 419.866237][T11356] [ 421.560781][T11360] usb usb36: usbfs: process 11360 (syz.2.1139) did not claim interface 0 before use [ 421.751495][T11302] kexec: Could not allocate control_code_buffer [ 422.497695][T11376] zswap: compressor not available [ 422.523011][T11391] netlink: 'syz.0.1144': attribute type 1 has an invalid length. [ 422.551289][T11390] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1145'. [ 422.908453][T11394] zswap: compressor 000 not available [ 423.124237][T11403] FAULT_INJECTION: forcing a failure. [ 423.124237][T11403] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.176101][T11403] CPU: 0 UID: 0 PID: 11403 Comm: syz.3.1147 Not tainted syzkaller #0 PREEMPT(full) [ 423.176124][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.176133][T11403] Call Trace: [ 423.176139][T11403] [ 423.176145][T11403] dump_stack_lvl+0x16c/0x1f0 [ 423.176165][T11403] should_fail_ex+0x512/0x640 [ 423.176190][T11403] should_fail_alloc_page+0xe7/0x130 [ 423.176212][T11403] prepare_alloc_pages+0x3c2/0x610 [ 423.176233][T11403] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 423.176254][T11403] ? find_held_lock+0x2b/0x80 [ 423.176269][T11403] ? is_bpf_text_address+0x8a/0x1a0 [ 423.176298][T11403] ? bpf_ksym_find+0x124/0x1c0 [ 423.176314][T11403] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 423.176330][T11403] ? is_bpf_text_address+0x94/0x1a0 [ 423.176350][T11403] ? kernel_text_address+0x8d/0x100 [ 423.176371][T11403] ? __kernel_text_address+0xd/0x40 [ 423.176383][T11403] ? unwind_get_return_address+0x59/0xa0 [ 423.176405][T11403] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 423.176429][T11403] ? policy_nodemask+0xea/0x4e0 [ 423.176449][T11403] alloc_pages_mpol+0x1fb/0x550 [ 423.176467][T11403] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 423.176485][T11403] ? kasan_save_stack+0x33/0x60 [ 423.176500][T11403] ? kasan_save_track+0x14/0x30 [ 423.176514][T11403] ? __kasan_kmalloc+0xaa/0xb0 [ 423.176528][T11403] ? __get_vm_area_node+0x101/0x330 [ 423.176550][T11403] alloc_pages_noprof+0x131/0x390 [ 423.176568][T11403] get_free_pages_noprof+0x10/0xb0 [ 423.176584][T11403] kasan_populate_vmalloc+0x9f/0x2d0 [ 423.176599][T11403] ? alloc_vmap_area+0x8b5/0x29e0 [ 423.176620][T11403] alloc_vmap_area+0x960/0x29e0 [ 423.176644][T11403] ? __pfx_alloc_vmap_area+0x10/0x10 [ 423.176666][T11403] __get_vm_area_node+0x1ca/0x330 [ 423.176688][T11403] __vmalloc_node_range_noprof+0x271/0x1480 [ 423.176711][T11403] ? kernel_clone+0xfc/0x930 [ 423.176733][T11403] ? kernel_clone+0xfc/0x930 [ 423.176753][T11403] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 423.176777][T11403] ? rcu_is_watching+0x12/0xc0 [ 423.176795][T11403] ? kernel_clone+0xfc/0x930 [ 423.176811][T11403] __vmalloc_node_noprof+0xad/0xf0 [ 423.176830][T11403] ? kernel_clone+0xfc/0x930 [ 423.176848][T11403] copy_process+0x2c77/0x76a0 [ 423.176864][T11403] ? __pfx___futex_wait+0x10/0x10 [ 423.176893][T11403] ? __pfx_copy_process+0x10/0x10 [ 423.176909][T11403] ? futex_private_hash_put+0x176/0x300 [ 423.176929][T11403] ? futex_private_hash_put+0x18a/0x300 [ 423.176949][T11403] kernel_clone+0xfc/0x930 [ 423.176967][T11403] ? __pfx_kernel_clone+0x10/0x10 [ 423.176994][T11403] __do_sys_clone+0xce/0x120 [ 423.177011][T11403] ? __pfx___do_sys_clone+0x10/0x10 [ 423.177036][T11403] ? xfd_validate_state+0x61/0x180 [ 423.177061][T11403] do_syscall_64+0xcd/0xfa0 [ 423.177079][T11403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.177093][T11403] RIP: 0033:0x7fd3f678efc9 [ 423.177106][T11403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.177121][T11403] RSP: 002b:00007fd3f75adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 423.177135][T11403] RAX: ffffffffffffffda RBX: 00007fd3f69e6090 RCX: 00007fd3f678efc9 [ 423.177145][T11403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.177154][T11403] RBP: 00007fd3f6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 423.177163][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.177172][T11403] R13: 00007fd3f69e6128 R14: 00007fd3f69e6090 R15: 00007ffcab5606f8 [ 423.177191][T11403] [ 423.179432][T11403] syz.3.1147: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 423.670931][T11408] FAULT_INJECTION: forcing a failure. [ 423.670931][T11408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.727794][T11408] CPU: 0 UID: 0 PID: 11408 Comm: syz.2.1150 Not tainted syzkaller #0 PREEMPT(full) [ 423.727819][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.727828][T11408] Call Trace: [ 423.727834][T11408] [ 423.727841][T11408] dump_stack_lvl+0x16c/0x1f0 [ 423.727863][T11408] should_fail_ex+0x512/0x640 [ 423.727888][T11408] should_fail_alloc_page+0xe7/0x130 [ 423.727909][T11408] prepare_alloc_pages+0x3c2/0x610 [ 423.727927][T11408] ? arch_stack_walk+0xa6/0x100 [ 423.727944][T11408] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 423.727963][T11408] ? stack_trace_save+0x8e/0xc0 [ 423.727979][T11408] ? __pfx_stack_trace_save+0x10/0x10 [ 423.727996][T11408] ? stack_depot_save_flags+0x29/0x9c0 [ 423.728016][T11408] ? trace_mm_page_alloc+0x11f/0x1a0 [ 423.728035][T11408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 423.728050][T11408] ? kasan_save_stack+0x42/0x60 [ 423.728065][T11408] ? kasan_save_stack+0x33/0x60 [ 423.728080][T11408] ? kasan_save_track+0x14/0x30 [ 423.728095][T11408] ? __kasan_slab_alloc+0x89/0x90 [ 423.728111][T11408] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 423.728124][T11408] ? __pmd_alloc+0xbf/0x8b0 [ 423.728141][T11408] ? __handle_mm_fault+0xada/0x2aa0 [ 423.728162][T11408] ? _copy_to_user+0xbb/0xd0 [ 423.728182][T11408] ? semctl_info.constprop.0+0x338/0x450 [ 423.728201][T11408] ? ksys_semctl.constprop.0+0x14a/0x2f0 [ 423.728220][T11408] ? do_syscall_64+0xcd/0xfa0 [ 423.728235][T11408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.728265][T11408] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 423.728289][T11408] ? policy_nodemask+0xea/0x4e0 [ 423.728311][T11408] alloc_pages_mpol+0x1fb/0x550 [ 423.728331][T11408] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 423.728349][T11408] ? __lock_acquire+0xb8a/0x1c90 [ 423.728371][T11408] ? __pfx_filemap_map_pages+0x10/0x10 [ 423.728384][T11408] alloc_pages_noprof+0x131/0x390 [ 423.728403][T11408] pte_alloc_one+0x1e/0x350 [ 423.728419][T11408] __do_fault+0x320/0x490 [ 423.728433][T11408] ? do_raw_spin_lock+0x12c/0x2b0 [ 423.728455][T11408] ? __pfx_filemap_map_pages+0x10/0x10 [ 423.728467][T11408] do_pte_missing+0x1a6/0x3ba0 [ 423.728488][T11408] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 423.728509][T11408] ? __pmd_alloc+0x64f/0x8b0 [ 423.728528][T11408] __handle_mm_fault+0x1556/0x2aa0 [ 423.728551][T11408] ? mt_find+0x3e2/0xa20 [ 423.728569][T11408] ? __pfx___handle_mm_fault+0x10/0x10 [ 423.728588][T11408] ? __pfx_mt_find+0x10/0x10 [ 423.728615][T11408] ? find_vma+0xbf/0x140 [ 423.728630][T11408] ? __pfx_find_vma+0x10/0x10 [ 423.728648][T11408] handle_mm_fault+0x589/0xd10 [ 423.728669][T11408] ? __pkru_allows_pkey+0x11/0xb0 [ 423.728691][T11408] do_user_addr_fault+0x7a6/0x1370 [ 423.728706][T11408] ? rcu_is_watching+0x12/0xc0 [ 423.728723][T11408] exc_page_fault+0x64/0xc0 [ 423.728739][T11408] asm_exc_page_fault+0x26/0x30 [ 423.728753][T11408] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 423.728773][T11408] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 423.728787][T11408] RSP: 0018:ffffc90004bf7cd0 EFLAGS: 00050202 [ 423.728799][T11408] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 423.728808][T11408] RDX: fffff5200097efae RSI: ffffc90004bf7d48 RDI: 0000000000000001 [ 423.728817][T11408] RBP: 0000000000000001 R08: 0000000000000000 R09: fffff5200097efad [ 423.728826][T11408] R10: ffffc90004bf7d6f R11: 0000000000000001 R12: ffffc90004bf7d48 [ 423.728835][T11408] R13: 0000000000000029 R14: 00007ffffffff000 R15: 0000000000000000 [ 423.728853][T11408] _copy_to_user+0xbb/0xd0 [ 423.728876][T11408] semctl_info.constprop.0+0x338/0x450 [ 423.728897][T11408] ? __pfx_semctl_info.constprop.0+0x10/0x10 [ 423.728921][T11408] ? do_futex+0x122/0x350 [ 423.728940][T11408] ? __pfx_do_futex+0x10/0x10 [ 423.728959][T11408] ksys_semctl.constprop.0+0x14a/0x2f0 [ 423.728982][T11408] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 423.729002][T11408] ? __x64_sys_futex+0x1e0/0x4c0 [ 423.729032][T11408] do_syscall_64+0xcd/0xfa0 [ 423.729048][T11408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.729062][T11408] RIP: 0033:0x7fcba218efc9 [ 423.729073][T11408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.729087][T11408] RSP: 002b:00007fcba3023038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 423.729100][T11408] RAX: ffffffffffffffda RBX: 00007fcba23e5fa0 RCX: 00007fcba218efc9 [ 423.729109][T11408] RDX: 0000000000000013 RSI: 0000000000000002 RDI: 0000000000000007 [ 423.729118][T11408] RBP: 00007fcba2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 423.729126][T11408] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 423.729134][T11408] R13: 00007fcba23e6038 R14: 00007fcba23e5fa0 R15: 00007ffed9288568 [ 423.729154][T11408] [ 424.428571][T11403] ,cpuset=/,mems_allowed=0-1 [ 424.433235][T11403] CPU: 0 UID: 0 PID: 11403 Comm: syz.3.1147 Not tainted syzkaller #0 PREEMPT(full) [ 424.433254][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 424.433263][T11403] Call Trace: [ 424.433269][T11403] [ 424.433275][T11403] dump_stack_lvl+0x16c/0x1f0 [ 424.433300][T11403] warn_alloc+0x248/0x3a0 [ 424.433318][T11403] ? __pfx_warn_alloc+0x10/0x10 [ 424.433333][T11403] ? kfree+0x2b8/0x6d0 [ 424.433344][T11403] ? __get_vm_area_node+0x2cd/0x330 [ 424.433367][T11403] ? __get_vm_area_node+0x2cd/0x330 [ 424.433386][T11403] ? __get_vm_area_node+0x208/0x330 [ 424.433409][T11403] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 424.433436][T11403] ? kernel_clone+0xfc/0x930 [ 424.433459][T11403] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 424.433484][T11403] ? rcu_is_watching+0x12/0xc0 [ 424.433501][T11403] ? kernel_clone+0xfc/0x930 [ 424.433518][T11403] __vmalloc_node_noprof+0xad/0xf0 [ 424.433537][T11403] ? kernel_clone+0xfc/0x930 [ 424.433556][T11403] copy_process+0x2c77/0x76a0 [ 424.433574][T11403] ? __pfx___futex_wait+0x10/0x10 [ 424.433604][T11403] ? __pfx_copy_process+0x10/0x10 [ 424.433620][T11403] ? futex_private_hash_put+0x176/0x300 [ 424.433641][T11403] ? futex_private_hash_put+0x18a/0x300 [ 424.433663][T11403] kernel_clone+0xfc/0x930 [ 424.433681][T11403] ? __pfx_kernel_clone+0x10/0x10 [ 424.433709][T11403] __do_sys_clone+0xce/0x120 [ 424.433726][T11403] ? __pfx___do_sys_clone+0x10/0x10 [ 424.433752][T11403] ? xfd_validate_state+0x61/0x180 [ 424.433779][T11403] do_syscall_64+0xcd/0xfa0 [ 424.433798][T11403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.433813][T11403] RIP: 0033:0x7fd3f678efc9 [ 424.433825][T11403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.433839][T11403] RSP: 002b:00007fd3f75adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 424.433853][T11403] RAX: ffffffffffffffda RBX: 00007fd3f69e6090 RCX: 00007fd3f678efc9 [ 424.433862][T11403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 424.433871][T11403] RBP: 00007fd3f6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 424.433880][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.433889][T11403] R13: 00007fd3f69e6128 R14: 00007fd3f69e6090 R15: 00007ffcab5606f8 [ 424.433908][T11403] [ 424.433914][T11403] Mem-Info: [ 424.675774][T11403] active_anon:6365 inactive_anon:32736 isolated_anon:0 [ 424.675774][T11403] active_file:14102 inactive_file:41157 isolated_file:0 [ 424.675774][T11403] unevictable:768 dirty:864 writeback:0 [ 424.675774][T11403] slab_reclaimable:12425 slab_unreclaimable:100981 [ 424.675774][T11403] mapped:27567 shmem:26156 pagetables:1370 [ 424.675774][T11403] sec_pagetables:0 bounce:0 [ 424.675774][T11403] kernel_misc_reclaimable:0 [ 424.675774][T11403] free:1250258 free_pcp:48906 free_cma:0 [ 424.773369][T11403] Node 0 active_anon:25460kB inactive_anon:133100kB active_file:56400kB inactive_file:164436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110268kB dirty:3456kB writeback:0kB shmem:105064kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12016kB pagetables:5384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 424.844468][T11403] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 424.932161][T11403] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.012193][T11403] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 425.034871][T11403] Node 0 DMA32 free:1079328kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25460kB inactive_anon:133004kB active_file:56400kB inactive_file:164436kB unevictable:1536kB writepending:3456kB zspages:792kB present:3129332kB managed:2545096kB mlocked:0kB bounce:0kB free_pcp:182980kB local_pcp:182980kB free_cma:0kB [ 425.150914][T11403] lowmem_reserve[]: 0 0 1 1 1 [ 425.161121][T11403] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.203914][T11423] netlink: 'syz.0.1154': attribute type 2 has an invalid length. [ 425.223814][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 425.257411][T11403] lowmem_reserve[]: 0 0 0 0 0 [ 425.262139][T11403] Node 1 Normal free:3906344kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10392kB local_pcp:10392kB free_cma:0kB [ 425.388162][T11403] lowmem_reserve[]: 0 0 0 0 0 [ 425.398426][T11403] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 425.442174][T11403] Node 0 DMA32: 6894*4kB (UM) 5076*8kB (UME) 1855*16kB (UME) 1284*32kB (UME) 709*64kB (UME) 379*128kB (UM) 102*256kB (UME) 33*512kB (UME) 17*1024kB (UME) 6*2048kB (UM) 188*4096kB (UM) = 1075592kB [ 425.574269][T11403] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 425.626318][T11425] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 425.641649][T11403] Node 1 Normal: 228*4kB (UME) 45*8kB (UME) 15*16kB (UME) 212*32kB (UME) 89*64kB (UME) 21*128kB (UME) 4*256kB (UM) 3*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 947*4096kB (M) = 3906344kB [ 425.685187][T11425] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 425.712875][T11425] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 425.745123][T11403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 425.760243][T11425] page_type: f5(slab) [ 425.778375][T11425] raw: 00fff00000000040 ffff8881404098c0 dead000000000122 0000000000000000 [ 425.789071][T11403] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 425.814953][T11425] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 425.830527][T11403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 425.845926][T11428] netlink: set zone limit has 8 unknown bytes [ 425.879589][T11425] head: 00fff00000000040 ffff8881404098c0 dead000000000122 0000000000000000 [ 425.889413][T11403] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 425.924779][T11425] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 425.937502][T11403] 81413 total pagecache pages [ 425.942184][T11403] 7 pages in swap cache [ 425.950180][T11430] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1157'. [ 425.959372][T11425] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 425.976113][T11403] Free swap = 122108kB [ 425.980368][T11403] Total swap = 124996kB [ 425.984501][T11403] 2097051 pages RAM [ 425.994884][T11425] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 426.015996][T11403] 0 pages HighMem/MovableOnly [ 426.020793][T11425] page dumped because: unmovable page [ 426.034866][T11403] 428687 pages reserved [ 426.039143][T11425] page_owner tracks the page as allocated [ 426.049217][T11403] 0 pages cma reserved [ 426.056045][T11425] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 33298697311, free_ts 27781681137 [ 426.160242][T11425] post_alloc_hook+0x1c0/0x230 [ 426.175318][T11425] get_page_from_freelist+0x10a3/0x3a30 [ 426.192624][T11425] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 426.221015][T11425] alloc_pages_mpol+0x1fb/0x550 [ 426.253907][T11425] new_slab+0x24a/0x360 [ 426.279092][T11425] ___slab_alloc+0xdae/0x1a60 [ 426.304158][T11425] __slab_alloc.constprop.0+0x63/0x110 [ 426.324586][T11425] kmem_cache_alloc_lru_noprof+0x443/0x6e0 [ 426.344883][T11425] alloc_inode+0xc3/0x240 [ 426.360187][T11425] iget_locked+0x2fa/0x860 [ 426.373326][T11425] kernfs_get_inode+0x48/0x460 [ 426.389198][T11425] kernfs_iop_lookup+0x1a7/0x2d0 [ 426.410579][T11425] __lookup_slow+0x251/0x460 [ 426.427500][T11425] walk_component+0x353/0x5b0 [ 426.452512][T11425] path_lookupat+0x142/0x6d0 [ 426.472697][T11425] filename_lookup+0x224/0x5f0 [ 426.494783][T11425] page last free pid 1 tgid 1 stack trace: [ 426.514612][T11425] __free_frozen_pages+0x7df/0x1160 [ 426.530806][T11441] FAULT_INJECTION: forcing a failure. [ 426.530806][T11441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 426.544226][T11425] free_contig_range+0x183/0x4b0 [ 426.573313][T11425] destroy_args+0xb69/0x12e0 [ 426.578178][T11425] debug_vm_pgtable+0x1a32/0x3640 [ 426.587807][T11433] netlink: set zone limit has 8 unknown bytes [ 426.594006][T11441] CPU: 0 UID: 0 PID: 11441 Comm: syz.3.1160 Not tainted syzkaller #0 PREEMPT(full) [ 426.594026][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.594035][T11441] Call Trace: [ 426.594041][T11441] [ 426.594047][T11441] dump_stack_lvl+0x16c/0x1f0 [ 426.594070][T11441] should_fail_ex+0x512/0x640 [ 426.594096][T11441] should_fail_alloc_page+0xe7/0x130 [ 426.594118][T11441] prepare_alloc_pages+0x3c2/0x610 [ 426.594137][T11441] ? arch_stack_walk+0xa6/0x100 [ 426.594153][T11441] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 426.594172][T11441] ? stack_trace_save+0x8e/0xc0 [ 426.594189][T11441] ? __pfx_stack_trace_save+0x10/0x10 [ 426.594205][T11441] ? stack_depot_save_flags+0x29/0x9c0 [ 426.594225][T11441] ? trace_mm_page_alloc+0x11f/0x1a0 [ 426.594243][T11441] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 426.594259][T11441] ? kasan_save_stack+0x42/0x60 [ 426.594273][T11441] ? kasan_save_stack+0x33/0x60 [ 426.594288][T11441] ? kasan_save_track+0x14/0x30 [ 426.594303][T11441] ? __kasan_slab_alloc+0x89/0x90 [ 426.594318][T11441] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 426.594332][T11441] ? __pmd_alloc+0xbf/0x8b0 [ 426.594349][T11441] ? __handle_mm_fault+0xada/0x2aa0 [ 426.594370][T11441] ? _copy_to_user+0xbb/0xd0 [ 426.594390][T11441] ? semctl_info.constprop.0+0x338/0x450 [ 426.594409][T11441] ? ksys_semctl.constprop.0+0x14a/0x2f0 [ 426.594437][T11441] ? do_syscall_64+0xcd/0xfa0 [ 426.594452][T11441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.594471][T11441] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 426.594495][T11441] ? policy_nodemask+0xea/0x4e0 [ 426.594516][T11441] alloc_pages_mpol+0x1fb/0x550 [ 426.594536][T11441] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 426.594554][T11441] ? __lock_acquire+0xb8a/0x1c90 [ 426.594577][T11441] ? __pfx_filemap_map_pages+0x10/0x10 [ 426.594590][T11441] alloc_pages_noprof+0x131/0x390 [ 426.594609][T11441] pte_alloc_one+0x1e/0x350 [ 426.594625][T11441] __do_fault+0x320/0x490 [ 426.594639][T11441] ? do_raw_spin_lock+0x12c/0x2b0 [ 426.594664][T11441] ? __pfx_filemap_map_pages+0x10/0x10 [ 426.594676][T11441] do_pte_missing+0x1a6/0x3ba0 [ 426.594697][T11441] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 426.594718][T11441] ? __pmd_alloc+0x64f/0x8b0 [ 426.594738][T11441] __handle_mm_fault+0x1556/0x2aa0 [ 426.594761][T11441] ? mt_find+0x3e2/0xa20 [ 426.594779][T11441] ? __pfx___handle_mm_fault+0x10/0x10 [ 426.594798][T11441] ? __pfx_mt_find+0x10/0x10 [ 426.594825][T11441] ? find_vma+0xbf/0x140 [ 426.594840][T11441] ? __pfx_find_vma+0x10/0x10 [ 426.594858][T11441] handle_mm_fault+0x589/0xd10 [ 426.594879][T11441] ? __pkru_allows_pkey+0x11/0xb0 [ 426.594902][T11441] do_user_addr_fault+0x7a6/0x1370 [ 426.594917][T11441] ? rcu_is_watching+0x12/0xc0 [ 426.594934][T11441] exc_page_fault+0x64/0xc0 [ 426.594951][T11441] asm_exc_page_fault+0x26/0x30 [ 426.594964][T11441] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 426.594985][T11441] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 426.594998][T11441] RSP: 0018:ffffc90003527cd0 EFLAGS: 00050202 [ 426.595010][T11441] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 426.595019][T11441] RDX: fffff520006a4fae RSI: ffffc90003527d48 RDI: 0000000000000001 [ 426.595028][T11441] RBP: 0000000000000001 R08: 0000000000000000 R09: fffff520006a4fad [ 426.595037][T11441] R10: ffffc90003527d6f R11: 0000000000000001 R12: ffffc90003527d48 [ 426.595046][T11441] R13: 0000000000000029 R14: 00007ffffffff000 R15: 0000000000000000 [ 426.595064][T11441] _copy_to_user+0xbb/0xd0 [ 426.595087][T11441] semctl_info.constprop.0+0x338/0x450 [ 426.595108][T11441] ? __pfx_semctl_info.constprop.0+0x10/0x10 [ 426.595131][T11441] ? do_futex+0x122/0x350 [ 426.595150][T11441] ? __pfx_do_futex+0x10/0x10 [ 426.595170][T11441] ksys_semctl.constprop.0+0x14a/0x2f0 [ 426.595192][T11441] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 426.595213][T11441] ? __x64_sys_futex+0x1e0/0x4c0 [ 426.595242][T11441] do_syscall_64+0xcd/0xfa0 [ 426.595259][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.595272][T11441] RIP: 0033:0x7fd3f678efc9 [ 426.595284][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.595297][T11441] RSP: 002b:00007fd3f75cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 426.595310][T11441] RAX: ffffffffffffffda RBX: 00007fd3f69e5fa0 RCX: 00007fd3f678efc9 [ 426.595319][T11441] RDX: 0000000000000013 RSI: 0000000000000002 RDI: 0000000000000007 [ 426.595328][T11441] RBP: 00007fd3f6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 426.595336][T11441] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 426.595345][T11441] R13: 00007fd3f69e6038 R14: 00007fd3f69e5fa0 R15: 00007ffcab5606f8 [ 426.595364][T11441] [ 427.065379][T11425] do_one_initcall+0x123/0x6e0 [ 427.070151][T11425] kernel_init_freeable+0x5c8/0x920 [ 427.076340][T11425] kernel_init+0x1c/0x2b0 [ 427.080681][T11425] ret_from_fork+0x675/0x7d0 [ 427.085353][T11425] ret_from_fork_asm+0x1a/0x30 [ 427.187548][T11443] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 428.984966][T11480] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72 [ 429.206822][T11483] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input73 [ 429.562443][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1171'. [ 429.934411][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 430.203070][T11511] netlink: set zone limit has 8 unknown bytes [ 430.433344][T11519] FAULT_INJECTION: forcing a failure. [ 430.433344][T11519] name failslab, interval 1, probability 0, space 0, times 0 [ 430.509020][T11519] CPU: 0 UID: 0 PID: 11519 Comm: syz.0.1180 Not tainted syzkaller #0 PREEMPT(full) [ 430.509041][T11519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 430.509051][T11519] Call Trace: [ 430.509057][T11519] [ 430.509063][T11519] dump_stack_lvl+0x16c/0x1f0 [ 430.509084][T11519] should_fail_ex+0x512/0x640 [ 430.509106][T11519] ? fs_reclaim_acquire+0xae/0x150 [ 430.509127][T11519] should_failslab+0xc2/0x120 [ 430.509146][T11519] kmem_cache_alloc_noprof+0x75/0x6e0 [ 430.509161][T11519] ? __pfx_map_id_range_down+0x10/0x10 [ 430.509182][T11519] ? security_inode_alloc+0x3b/0x2b0 [ 430.509208][T11519] ? security_inode_alloc+0x3b/0x2b0 [ 430.509228][T11519] security_inode_alloc+0x3b/0x2b0 [ 430.509249][T11519] inode_init_always_gfp+0xce4/0x1030 [ 430.509266][T11519] alloc_inode+0x86/0x240 [ 430.509284][T11519] sock_alloc+0x40/0x280 [ 430.509301][T11519] __sock_create+0xc1/0x8d0 [ 430.509321][T11519] __sys_socket+0x14d/0x260 [ 430.509339][T11519] ? __pfx___sys_socket+0x10/0x10 [ 430.509357][T11519] ? xfd_validate_state+0x61/0x180 [ 430.509376][T11519] ? __pfx_do_writev+0x10/0x10 [ 430.509393][T11519] __x64_sys_socket+0x72/0xb0 [ 430.509410][T11519] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.509426][T11519] do_syscall_64+0xcd/0xfa0 [ 430.509442][T11519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.509457][T11519] RIP: 0033:0x7fd18dd8efc9 [ 430.509469][T11519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.509483][T11519] RSP: 002b:00007fd18ebd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 430.509497][T11519] RAX: ffffffffffffffda RBX: 00007fd18dfe5fa0 RCX: 00007fd18dd8efc9 [ 430.509507][T11519] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 080000000000000a [ 430.509515][T11519] RBP: 00007fd18de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 430.509528][T11519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.509536][T11519] R13: 00007fd18dfe6038 R14: 00007fd18dfe5fa0 R15: 00007ffe388fc2a8 [ 430.509555][T11519] [ 430.509593][T11519] socket: no more sockets [ 431.404379][T11536] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input74 [ 431.582020][T11544] FAULT_INJECTION: forcing a failure. [ 431.582020][T11544] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.606639][T11539] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75 [ 431.725590][T11544] CPU: 0 UID: 0 PID: 11544 Comm: syz.2.1183 Not tainted syzkaller #0 PREEMPT(full) [ 431.725613][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.725622][T11544] Call Trace: [ 431.725628][T11544] [ 431.725634][T11544] dump_stack_lvl+0x16c/0x1f0 [ 431.725656][T11544] should_fail_ex+0x512/0x640 [ 431.725681][T11544] should_fail_alloc_page+0xe7/0x130 [ 431.725702][T11544] prepare_alloc_pages+0x3c2/0x610 [ 431.725724][T11544] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 431.725741][T11544] ? __pfx_stack_trace_save+0x10/0x10 [ 431.725766][T11544] ? stack_depot_save_flags+0x29/0x9c0 [ 431.725788][T11544] ? find_held_lock+0x2b/0x80 [ 431.725805][T11544] ? kasan_save_stack+0x42/0x60 [ 431.725821][T11544] ? kasan_save_stack+0x33/0x60 [ 431.725837][T11544] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 431.725850][T11544] ? alloc_vmap_area+0xdcf/0x29e0 [ 431.725866][T11544] ? __vmalloc_node_range_noprof+0x271/0x1480 [ 431.725886][T11544] ? copy_process+0x2c77/0x76a0 [ 431.725901][T11544] ? kernel_clone+0xfc/0x930 [ 431.725916][T11544] ? __do_sys_clone+0xce/0x120 [ 431.725931][T11544] ? do_syscall_64+0xcd/0xfa0 [ 431.725945][T11544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.725968][T11544] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 431.725991][T11544] ? policy_nodemask+0xea/0x4e0 [ 431.726011][T11544] alloc_pages_mpol+0x1fb/0x550 [ 431.726029][T11544] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 431.726052][T11544] alloc_pages_noprof+0x131/0x390 [ 431.726070][T11544] get_free_pages_noprof+0x10/0xb0 [ 431.726086][T11544] kasan_populate_vmalloc+0x9f/0x2d0 [ 431.726101][T11544] ? alloc_vmap_area+0x8b5/0x29e0 [ 431.726121][T11544] alloc_vmap_area+0x960/0x29e0 [ 431.726146][T11544] ? __pfx_alloc_vmap_area+0x10/0x10 [ 431.726168][T11544] __get_vm_area_node+0x1ca/0x330 [ 431.726189][T11544] __vmalloc_node_range_noprof+0x271/0x1480 [ 431.726209][T11544] ? kernel_clone+0xfc/0x930 [ 431.726231][T11544] ? kernel_clone+0xfc/0x930 [ 431.726251][T11544] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 431.726274][T11544] ? rcu_is_watching+0x12/0xc0 [ 431.726290][T11544] ? kernel_clone+0xfc/0x930 [ 431.726306][T11544] __vmalloc_node_noprof+0xad/0xf0 [ 431.726325][T11544] ? kernel_clone+0xfc/0x930 [ 431.726342][T11544] copy_process+0x2c77/0x76a0 [ 431.726367][T11544] ? __pfx_copy_process+0x10/0x10 [ 431.726383][T11544] ? futex_private_hash_put+0x176/0x300 [ 431.726403][T11544] ? futex_private_hash_put+0x18a/0x300 [ 431.726423][T11544] kernel_clone+0xfc/0x930 [ 431.726439][T11544] ? __pfx_futex_wake+0x10/0x10 [ 431.726459][T11544] ? __pfx_kernel_clone+0x10/0x10 [ 431.726486][T11544] __do_sys_clone+0xce/0x120 [ 431.726502][T11544] ? __pfx___do_sys_clone+0x10/0x10 [ 431.726527][T11544] ? xfd_validate_state+0x61/0x180 [ 431.726553][T11544] do_syscall_64+0xcd/0xfa0 [ 431.726570][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.726584][T11544] RIP: 0033:0x7fcba218efc9 [ 431.726596][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.726609][T11544] RSP: 002b:00007fcba2fe0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 431.726625][T11544] RAX: ffffffffffffffda RBX: 00007fcba23e6180 RCX: 00007fcba218efc9 [ 431.726635][T11544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.726643][T11544] RBP: 00007fcba2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.726652][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.726661][T11544] R13: 00007fcba23e6218 R14: 00007fcba23e6180 R15: 00007ffed9288568 [ 431.726681][T11544] [ 432.522894][T11551] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 432.560698][T11551] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 432.623429][T11551] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 432.655654][T11551] page_type: f5(slab) [ 432.676356][T11551] raw: 00fff00000000040 ffff8881404098c0 dead000000000122 0000000000000000 [ 432.718271][T11551] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 432.761062][T11551] head: 00fff00000000040 ffff8881404098c0 dead000000000122 0000000000000000 [ 432.790778][T11551] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 432.828526][T11551] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 432.882395][T11551] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 432.920425][T11551] page dumped because: unmovable page [ 432.938926][T11551] page_owner tracks the page as allocated [ 432.958013][T11551] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 33298697311, free_ts 27781681137 [ 432.993169][T11564] FAULT_INJECTION: forcing a failure. [ 432.993169][T11564] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 433.020464][T11564] CPU: 0 UID: 0 PID: 11564 Comm: syz.2.1187 Not tainted syzkaller #0 PREEMPT(full) [ 433.020487][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.020496][T11564] Call Trace: [ 433.020503][T11564] [ 433.020509][T11564] dump_stack_lvl+0x16c/0x1f0 [ 433.020531][T11564] should_fail_ex+0x512/0x640 [ 433.020556][T11564] should_fail_alloc_page+0xe7/0x130 [ 433.020578][T11564] prepare_alloc_pages+0x3c2/0x610 [ 433.020600][T11564] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 433.020620][T11564] ? __lock_acquire+0x622/0x1c90 [ 433.020639][T11564] ? css_rstat_updated+0x1c2/0x510 [ 433.020656][T11564] ? __pfx_css_rstat_updated+0x10/0x10 [ 433.020672][T11564] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 433.020687][T11564] ? rcu_is_watching+0x12/0xc0 [ 433.020706][T11564] ? __lock_acquire+0xb8a/0x1c90 [ 433.020729][T11564] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.020752][T11564] ? policy_nodemask+0xea/0x4e0 [ 433.020771][T11564] alloc_pages_mpol+0x1fb/0x550 [ 433.020800][T11564] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 433.020825][T11564] alloc_pages_noprof+0x131/0x390 [ 433.020845][T11564] __pmd_alloc+0x3b/0x8b0 [ 433.020867][T11564] __handle_mm_fault+0xada/0x2aa0 [ 433.020891][T11564] ? mt_find+0x3e2/0xa20 [ 433.020909][T11564] ? __pfx___handle_mm_fault+0x10/0x10 [ 433.020929][T11564] ? __pfx_mt_find+0x10/0x10 [ 433.020955][T11564] ? find_vma+0xbf/0x140 [ 433.020970][T11564] ? __pfx_find_vma+0x10/0x10 [ 433.020988][T11564] handle_mm_fault+0x589/0xd10 [ 433.021010][T11564] ? __pkru_allows_pkey+0x11/0xb0 [ 433.021033][T11564] do_user_addr_fault+0x7a6/0x1370 [ 433.021048][T11564] ? rcu_is_watching+0x12/0xc0 [ 433.021064][T11564] exc_page_fault+0x64/0xc0 [ 433.021080][T11564] asm_exc_page_fault+0x26/0x30 [ 433.021094][T11564] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 433.021115][T11564] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 433.021128][T11564] RSP: 0018:ffffc9000b587cd0 EFLAGS: 00050202 [ 433.021140][T11564] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 433.021149][T11564] RDX: fffff520016b0fae RSI: ffffc9000b587d48 RDI: 0000000000000001 [ 433.021158][T11564] RBP: 0000000000000001 R08: 0000000000000000 R09: fffff520016b0fad [ 433.021167][T11564] R10: ffffc9000b587d6f R11: 0000000000000001 R12: ffffc9000b587d48 [ 433.021176][T11564] R13: 0000000000000029 R14: 00007ffffffff000 R15: 0000000000000000 [ 433.021194][T11564] _copy_to_user+0xbb/0xd0 [ 433.021218][T11564] semctl_info.constprop.0+0x338/0x450 [ 433.021239][T11564] ? __pfx_semctl_info.constprop.0+0x10/0x10 [ 433.021264][T11564] ? do_futex+0x122/0x350 [ 433.021283][T11564] ? __pfx_do_futex+0x10/0x10 [ 433.021302][T11564] ksys_semctl.constprop.0+0x14a/0x2f0 [ 433.021325][T11564] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 433.021346][T11564] ? __x64_sys_futex+0x1e0/0x4c0 [ 433.021375][T11564] do_syscall_64+0xcd/0xfa0 [ 433.021392][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.021406][T11564] RIP: 0033:0x7fcba218efc9 [ 433.021418][T11564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.021431][T11564] RSP: 002b:00007fcba3023038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 433.021447][T11564] RAX: ffffffffffffffda RBX: 00007fcba23e5fa0 RCX: 00007fcba218efc9 [ 433.021458][T11564] RDX: 0000000000000013 RSI: 0000000000000002 RDI: 0000000000000007 [ 433.021466][T11564] RBP: 00007fcba2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 433.021475][T11564] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 433.021483][T11564] R13: 00007fcba23e6038 R14: 00007fcba23e5fa0 R15: 00007ffed9288568 [ 433.021503][T11564] [ 433.489052][T11551] post_alloc_hook+0x1c0/0x230 [ 433.493913][T11551] get_page_from_freelist+0x10a3/0x3a30 [ 433.499508][T11551] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 433.505476][T11551] alloc_pages_mpol+0x1fb/0x550 [ 433.510323][T11551] new_slab+0x24a/0x360 [ 433.514464][T11551] ___slab_alloc+0xdae/0x1a60 [ 433.519390][T11551] __slab_alloc.constprop.0+0x63/0x110 [ 433.524878][T11551] kmem_cache_alloc_lru_noprof+0x443/0x6e0 [ 433.531013][T11551] alloc_inode+0xc3/0x240 [ 433.535379][T11551] iget_locked+0x2fa/0x860 [ 433.540026][T11551] kernfs_get_inode+0x48/0x460 [ 433.544861][T11551] kernfs_iop_lookup+0x1a7/0x2d0 [ 433.549791][T11551] __lookup_slow+0x251/0x460 [ 433.554369][T11551] walk_component+0x353/0x5b0 [ 433.559098][T11551] path_lookupat+0x142/0x6d0 [ 433.563672][T11551] filename_lookup+0x224/0x5f0 [ 433.568453][T11551] page last free pid 1 tgid 1 stack trace: [ 433.574287][T11551] __free_frozen_pages+0x7df/0x1160 [ 433.580476][T11551] free_contig_range+0x183/0x4b0 [ 433.585498][T11551] destroy_args+0xb69/0x12e0 [ 433.590077][T11551] debug_vm_pgtable+0x1a32/0x3640 [ 433.595138][T11551] do_one_initcall+0x123/0x6e0 [ 433.599927][T11551] kernel_init_freeable+0x5c8/0x920 [ 433.605161][T11551] kernel_init+0x1c/0x2b0 [ 433.609479][T11551] ret_from_fork+0x675/0x7d0 [ 433.614107][T11551] ret_from_fork_asm+0x1a/0x30 [ 433.689907][T11568] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1189'. [ 434.303789][T11586] FAULT_INJECTION: forcing a failure. [ 434.303789][T11586] name failslab, interval 1, probability 0, space 0, times 0 [ 434.320388][T11586] CPU: 0 UID: 0 PID: 11586 Comm: syz.2.1195 Not tainted syzkaller #0 PREEMPT(full) [ 434.320410][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.320419][T11586] Call Trace: [ 434.320425][T11586] [ 434.320431][T11586] dump_stack_lvl+0x16c/0x1f0 [ 434.320452][T11586] should_fail_ex+0x512/0x640 [ 434.320474][T11586] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 434.320492][T11586] should_failslab+0xc2/0x120 [ 434.320510][T11586] kmem_cache_alloc_node_noprof+0x78/0x770 [ 434.320524][T11586] ? alloc_vmap_area+0x648/0x29e0 [ 434.320545][T11586] ? alloc_vmap_area+0x648/0x29e0 [ 434.320561][T11586] alloc_vmap_area+0x648/0x29e0 [ 434.320586][T11586] ? __pfx_alloc_vmap_area+0x10/0x10 [ 434.320616][T11586] __get_vm_area_node+0x1ca/0x330 [ 434.320639][T11586] __vmalloc_node_range_noprof+0x271/0x1480 [ 434.320660][T11586] ? kernel_clone+0xfc/0x930 [ 434.320684][T11586] ? kernel_clone+0xfc/0x930 [ 434.320704][T11586] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 434.320728][T11586] ? rcu_is_watching+0x12/0xc0 [ 434.320744][T11586] ? kernel_clone+0xfc/0x930 [ 434.320759][T11586] __vmalloc_node_noprof+0xad/0xf0 [ 434.320778][T11586] ? kernel_clone+0xfc/0x930 [ 434.320796][T11586] copy_process+0x2c77/0x76a0 [ 434.320812][T11586] ? __pfx___futex_wait+0x10/0x10 [ 434.320841][T11586] ? __pfx_copy_process+0x10/0x10 [ 434.320857][T11586] ? futex_private_hash_put+0x176/0x300 [ 434.320876][T11586] ? futex_private_hash_put+0x18a/0x300 [ 434.320897][T11586] kernel_clone+0xfc/0x930 [ 434.320915][T11586] ? __pfx_kernel_clone+0x10/0x10 [ 434.320941][T11586] __do_sys_clone+0xce/0x120 [ 434.320958][T11586] ? __pfx___do_sys_clone+0x10/0x10 [ 434.320983][T11586] ? xfd_validate_state+0x61/0x180 [ 434.321009][T11586] do_syscall_64+0xcd/0xfa0 [ 434.321026][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.321041][T11586] RIP: 0033:0x7fcba218efc9 [ 434.321053][T11586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.321067][T11586] RSP: 002b:00007fcba3022fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 434.321081][T11586] RAX: ffffffffffffffda RBX: 00007fcba23e5fa0 RCX: 00007fcba218efc9 [ 434.321091][T11586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.321101][T11586] RBP: 00007fcba2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.321110][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.321118][T11586] R13: 00007fcba23e6038 R14: 00007fcba23e5fa0 R15: 00007ffed9288568 [ 434.321137][T11586] [ 434.321156][T11586] warn_alloc: 1 callbacks suppressed [ 434.321164][T11586] syz.2.1195: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 435.153890][T11593] netlink: set zone limit has 8 unknown bytes [ 435.191193][T11586] ,cpuset=/,mems_allowed=0-1 [ 435.201642][T11586] CPU: 0 UID: 0 PID: 11586 Comm: syz.2.1195 Not tainted syzkaller #0 PREEMPT(full) [ 435.201664][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.201673][T11586] Call Trace: [ 435.201678][T11586] [ 435.201685][T11586] dump_stack_lvl+0x16c/0x1f0 [ 435.201706][T11586] warn_alloc+0x248/0x3a0 [ 435.201722][T11586] ? __pfx_warn_alloc+0x10/0x10 [ 435.201738][T11586] ? kfree+0x2b8/0x6d0 [ 435.201749][T11586] ? __get_vm_area_node+0x2cd/0x330 [ 435.201772][T11586] ? __get_vm_area_node+0x2cd/0x330 [ 435.201790][T11586] ? __get_vm_area_node+0x208/0x330 [ 435.201813][T11586] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 435.201839][T11586] ? kernel_clone+0xfc/0x930 [ 435.201862][T11586] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 435.201887][T11586] ? rcu_is_watching+0x12/0xc0 [ 435.201905][T11586] ? kernel_clone+0xfc/0x930 [ 435.201921][T11586] __vmalloc_node_noprof+0xad/0xf0 [ 435.201942][T11586] ? kernel_clone+0xfc/0x930 [ 435.201961][T11586] copy_process+0x2c77/0x76a0 [ 435.201978][T11586] ? __pfx___futex_wait+0x10/0x10 [ 435.202009][T11586] ? __pfx_copy_process+0x10/0x10 [ 435.202026][T11586] ? futex_private_hash_put+0x176/0x300 [ 435.202047][T11586] ? futex_private_hash_put+0x18a/0x300 [ 435.202068][T11586] kernel_clone+0xfc/0x930 [ 435.202087][T11586] ? __pfx_kernel_clone+0x10/0x10 [ 435.202115][T11586] __do_sys_clone+0xce/0x120 [ 435.202133][T11586] ? __pfx___do_sys_clone+0x10/0x10 [ 435.202159][T11586] ? xfd_validate_state+0x61/0x180 [ 435.202188][T11586] do_syscall_64+0xcd/0xfa0 [ 435.202207][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.202222][T11586] RIP: 0033:0x7fcba218efc9 [ 435.202234][T11586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.202249][T11586] RSP: 002b:00007fcba3022fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 435.202263][T11586] RAX: ffffffffffffffda RBX: 00007fcba23e5fa0 RCX: 00007fcba218efc9 [ 435.202273][T11586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.202282][T11586] RBP: 00007fcba2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.202291][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.202300][T11586] R13: 00007fcba23e6038 R14: 00007fcba23e5fa0 R15: 00007ffed9288568 [ 435.202319][T11586] [ 435.202325][T11586] Mem-Info: [ 436.014220][T11586] active_anon:6366 inactive_anon:32985 isolated_anon:0 [ 436.014220][T11586] active_file:14135 inactive_file:41118 isolated_file:0 [ 436.014220][T11586] unevictable:768 dirty:986 writeback:0 [ 436.014220][T11586] slab_reclaimable:12383 slab_unreclaimable:100899 [ 436.014220][T11586] mapped:27602 shmem:26151 pagetables:1333 [ 436.014220][T11586] sec_pagetables:0 bounce:0 [ 436.014220][T11586] kernel_misc_reclaimable:0 [ 436.014220][T11586] free:1288999 free_pcp:11043 free_cma:0 [ 436.205111][T11586] Node 0 active_anon:25464kB inactive_anon:132876kB active_file:56584kB inactive_file:164228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110408kB dirty:3944kB writeback:0kB shmem:103068kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12080kB pagetables:5340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 436.329089][T11586] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 436.424729][T11586] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.519595][T11586] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 436.537626][T11586] Node 0 DMA32 free:1233516kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25464kB inactive_anon:135944kB active_file:56688kB inactive_file:164124kB unevictable:1536kB writepending:3944kB zspages:792kB present:3129332kB managed:2545096kB mlocked:0kB bounce:0kB free_pcp:30848kB local_pcp:30848kB free_cma:0kB [ 436.653195][T11586] lowmem_reserve[]: 0 0 1 1 1 [ 436.667998][T11586] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.837252][T11586] lowmem_reserve[]: 0 0 0 0 0 [ 436.841985][T11586] Node 1 Normal free:3907120kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9616kB local_pcp:9616kB free_cma:0kB [ 437.032234][T11586] lowmem_reserve[]: 0 0 0 0 0 [ 437.054075][T11635] ima: policy update failed [ 437.076702][T11586] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 437.114837][ T30] audit: type=1802 audit(4294967344.649:13): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1207" res=0 errno=0 [ 437.152157][T11586] Node 0 DMA32: 5749*4kB (UME) 6012*8kB (UME) 2582*16kB (UME) 1940*32kB (UME) 990*64kB (UME) 453*128kB (UME) 159*256kB (UME) 58*512kB (UM) 34*1024kB (UM) 12*2048kB (UE) 197*4096kB (UM) = 1232532kB [ 437.221571][ T30] audit: type=1806 audit(4294967344.719:14): xattr="" res=-22 [ 437.233627][T11632] zswap: compressor not available [ 437.291613][T11586] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 437.371670][T11586] Node 1 Normal: 228*4kB (UME) 56*8kB (UME) 42*16kB (UME) 210*32kB (UME) 88*64kB (UME) 22*128kB (UME) 5*256kB (UM) 3*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 947*4096kB (M) = 3907120kB [ 437.535657][T11586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.576220][T11586] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 437.612099][T11586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.653518][T11586] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.708568][T11586] 82034 total pagecache pages [ 437.734109][T11586] 16 pages in swap cache [ 437.767037][T11586] Free swap = 120288kB [ 437.787998][T11586] Total swap = 124996kB [ 437.806634][T11586] 2097051 pages RAM [ 437.824748][T11586] 0 pages HighMem/MovableOnly [ 437.849857][T11586] 428687 pages reserved [ 437.877901][T11586] 0 pages cma reserved [ 438.000990][T11644] netlink: set zone limit has 8 unknown bytes [ 438.749178][T11666] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1214'. [ 439.848364][ T10] ================================================================== [ 439.848377][ T10] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 439.848399][ T10] Write of size 8 at addr ffffc900039c90c0 by task kworker/0:1/10 [ 439.848412][ T10] [ 439.848419][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 439.848436][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.848446][ T10] Workqueue: events_power_efficient fb_flashcursor [ 439.848466][ T10] Call Trace: [ 439.848472][ T10] [ 439.848477][ T10] dump_stack_lvl+0x116/0x1f0 [ 439.848496][ T10] print_report+0xcd/0x630 [ 439.848514][ T10] ? __virt_addr_valid+0x81/0x610 [ 439.848533][ T10] ? sys_imageblit+0x1a6f/0x1e60 [ 439.848548][ T10] kasan_report+0xe0/0x110 [ 439.848566][ T10] ? sys_imageblit+0x1a6f/0x1e60 [ 439.848582][ T10] sys_imageblit+0x1a6f/0x1e60 [ 439.848600][ T10] ? __pfx_sys_imageblit+0x10/0x10 [ 439.848622][ T10] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 439.848639][ T10] soft_cursor+0x524/0xa10 [ 439.848662][ T10] bit_cursor+0xe8c/0x17e0 [ 439.848685][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 439.848707][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 439.848731][ T10] ? get_color+0x1da/0x450 [ 439.848748][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 439.848768][ T10] fb_flashcursor+0x310/0x400 [ 439.848786][ T10] process_one_work+0x9cf/0x1b70 [ 439.848811][ T10] ? __pfx_process_one_work+0x10/0x10 [ 439.848835][ T10] ? assign_work+0x1a0/0x250 [ 439.848854][ T10] worker_thread+0x6c8/0xf10 [ 439.848878][ T10] ? __pfx_worker_thread+0x10/0x10 [ 439.848899][ T10] kthread+0x3c5/0x780 [ 439.848919][ T10] ? __pfx_kthread+0x10/0x10 [ 439.848938][ T10] ? rcu_is_watching+0x12/0xc0 [ 439.848954][ T10] ? __pfx_kthread+0x10/0x10 [ 439.848973][ T10] ret_from_fork+0x675/0x7d0 [ 439.848993][ T10] ? __pfx_kthread+0x10/0x10 [ 439.849012][ T10] ret_from_fork_asm+0x1a/0x30 [ 439.849035][ T10] [ 439.849040][ T10] [ 439.849044][ T10] The buggy address belongs to a vmalloc virtual mapping [ 439.849056][ T10] Memory state around the buggy address: [ 439.849064][ T10] ffffc900039c8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 439.849074][ T10] ffffc900039c9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 439.849084][ T10] >ffffc900039c9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 439.849091][ T10] ^ [ 439.849099][ T10] ffffc900039c9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 439.849108][ T10] ffffc900039c9180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 439.849116][ T10] ================================================================== [ 439.849124][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 439.849132][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 439.849148][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.849157][ T10] Workqueue: events_power_efficient fb_flashcursor [ 439.849175][ T10] Call Trace: [ 439.849180][ T10] [ 439.849185][ T10] dump_stack_lvl+0x3d/0x1f0 [ 439.849200][ T10] vpanic+0x640/0x6f0 [ 439.849220][ T10] panic+0xca/0xd0 [ 439.849238][ T10] ? __pfx_panic+0x10/0x10 [ 439.849266][ T10] ? check_panic_on_warn+0x1f/0xb0 [ 439.849287][ T10] check_panic_on_warn+0xab/0xb0 [ 439.849307][ T10] end_report+0x107/0x170 [ 439.849324][ T10] kasan_report+0xee/0x110 [ 439.849342][ T10] ? sys_imageblit+0x1a6f/0x1e60 [ 439.849360][ T10] sys_imageblit+0x1a6f/0x1e60 [ 439.849377][ T10] ? __pfx_sys_imageblit+0x10/0x10 [ 439.849400][ T10] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 439.849416][ T10] soft_cursor+0x524/0xa10 [ 439.849439][ T10] bit_cursor+0xe8c/0x17e0 [ 439.849461][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 439.849485][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 439.849507][ T10] ? get_color+0x1da/0x450 [ 439.849527][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 439.849547][ T10] fb_flashcursor+0x310/0x400 [ 439.849566][ T10] process_one_work+0x9cf/0x1b70 [ 439.849590][ T10] ? __pfx_process_one_work+0x10/0x10 [ 439.849614][ T10] ? assign_work+0x1a0/0x250 [ 439.849634][ T10] worker_thread+0x6c8/0xf10 [ 439.849658][ T10] ? __pfx_worker_thread+0x10/0x10 [ 439.849679][ T10] kthread+0x3c5/0x780 [ 439.849698][ T10] ? __pfx_kthread+0x10/0x10 [ 439.849718][ T10] ? rcu_is_watching+0x12/0xc0 [ 439.849733][ T10] ? __pfx_kthread+0x10/0x10 [ 439.849752][ T10] ret_from_fork+0x675/0x7d0 [ 439.849771][ T10] ? __pfx_kthread+0x10/0x10 [ 439.849791][ T10] ret_from_fork_asm+0x1a/0x30 [ 439.849814][ T10] [ 439.849873][ T10] Kernel Offset: disabled