last executing test programs: 22.415413085s ago: executing program 0 (id=1093): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x804, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/bus/usb/drivers/uss720/unbind\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x60, 0x2, 0x12, 0xfffffffffffffffa, 0x2000000) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000094) prctl$auto(0x1000000003b, 0x90bc, 0x0, 0x5, 0x5) mmap$auto(0x6, 0x0, 0x3, 0x18, 0xfffffffffffffffa, 0x4000000000008002) mmap$auto(0x0, 0x4005, 0x8, 0x7fff, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/18, 0x12) sysfs$auto(0x2, 0x4, 0x0) r1 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, r0, 0xce000004) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, r1) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mountinfo\x00', 0x42201, 0x0) 21.917716813s ago: executing program 0 (id=1095): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/workqueue/scsi_tmf_0/power/autosuspend_delay_ms\x00', 0x8000, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-7', 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = socket(0x10, 0x4, 0xffffffc0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0c, 0x7, 0x9, 0x4, 0x28, 0x7, 0x1, 0x7f, 0x100, 0x19]}, 0x0) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000002c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002bc0)={&(0x7f0000001240)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="9800cd8004007e809000dc8008003c00030000001e000d8096573a9a8c873369b0dc6a6ef8edaa69c328f3ef5f8a9db01a82000014005000fc00000000000000000000000000000150001d80aa9fd3c808a91c36118ab8a53a69355811310b2ea03dde7205fd370fa6eae002165e2ba33cb0d1d9bf637654651c61825e8479f867dd2b9df72aa5e508001400ffffffff04004f8004007b8014008d00fc0000000000000000000000000000011000258004003e8008009500", @ANYRES32=0x0, @ANYBLOB="08000900e80000000500020081000000050007000900000005000600140000000500060001000000"], 0x660}, 0x1, 0x0, 0x0, 0x5}, 0xc000) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x20000000000008b, r4, 0x4, 0x100) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r4, 0x4, 0x8) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r4, 0x2, 0x20a) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r5, 0x0, 0x8, 0xffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x4, 0x0) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x111b42, 0x0) r9 = setfsuid$auto(0x1) msgctl$auto_IPC_RMID(0x3, 0x0, &(0x7f0000000400)={{0x2, r9, 0xee00, 0x3ff, 0x6, 0x10, 0x9}, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x2, 0x9, 0x8001, 0x80000001, 0x8, 0x7, 0x7fff, 0x5, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000001200)={&(0x7f0000000180), 0xc, &(0x7f00000011c0)={&(0x7f0000000340)={0xddc, r7, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1b, 0x1, 0x0, 0x1, [@typed={0x4, 0x9b}, @typed={0x8, 0x141, 0x0, 0x0, @fd=r8}, @nested={0x8, 0xb4, 0x0, 0x1, [@nested={0x4, 0xf4}]}, @generic="cc6fac"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x233, 0x1, 0x0, 0x1, [@typed={0xbe, 0x69, 0x0, 0x0, @binary="1f8baac3bc4c0c415cbd574182efe546563779099a0753372e621a0bb5fc02f556b1f95d27087f65be92412a92db17ca3ee00029bb4d08864af2d69951e19c462d250ef8ab8f31cd78e31f1fab71daab0a8f9fec8b6d694f048225337a8eb54ce7731734484d361af9ed4c5cee2d5076377af2ddf285ef526a2229d6ea249bf2a9b8ffe655cd0df640f11eab06a67d7d93a1be523ab2e02c18a6df6ac43a9d7a57bb0373efc32906fa53315072cde6b58e8af4cd24f531593773"}, @typed={0x8e, 0x113, 0x0, 0x0, @binary="959381d4216945a80ec1e258c78fd77dcfb75ec8709f4fa1f6b78696a9af22b60fe49cdff090611abd8cef321734dc595989b664d21699c4d4be80db4ec2a4ad1e5ef0a623df48f227007c8e37131f6204cce03a5962254452c6c35f892283d4f1d5d1f0519e06f1d01d24f771b9917cf34cd55a91638a33ed8413c7dcf5bded31836fccd36256a8061c"}, @generic="0414638dbcb6303f1338576c450b469d244036a5200778b0a413d5144e40143827be33", @nested={0x40, 0x108, 0x0, 0x1, [@generic="de77011830e818a431ac6ac232cc4d6f24831e162c771a458d3ab963a54395b2d7bba5dfdbbb2cc19c718f4c661600"/60]}, @typed={0x8, 0xf5, 0x0, 0x0, @fd=r3}, @typed={0x9, 0xbd, 0x0, 0x0, @str='*$%.\x00'}, @generic="6b1682179f64860448d412edaa48ae3faaa4746d60a9d93c389b77b9720ecc1c547a0cd25563b99a4aefc79f7c3168c1463b9762efd630599d5e5d0d269cdd3b9b8faaaf6d8ed0f5f9c23607ba3118a823b2aac5bae552495b2cc22f43f5d0d32a7425d434f849ad"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x3d0, 0x1, 0x0, 0x1, [@nested={0x64, 0xe3, 0x0, 0x1, [@typed={0x4d, 0x14c, 0x0, 0x0, @binary="39441845c3434875a477d5902e273e958a7d987e624cbc2e63f04135fa0abb2f594ab1367d22c45c66e7d1a1955cedb9f7d5a0197fd5f359e4f2e10ae77adbe0994c45aab3d1cb77ce"}, @typed={0x8, 0xb1, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x10d, 0x0, 0x0, @ipv4=@multicast1}]}, @generic="f8e4361899cae6430122b864015969af8a5bd35c59406d9a4b70dcd0e41501e9519f7f36e41b6b44c05eabfa5740700c0dc9cd28485e367aca8ed6a268898f33c48d0d0b89c6a238142bae7afa8d0145309e3cf885947245fc2c00b5061343fcb262f5d7cdb481f25db1aff2751af28885ee2ef948eafb1bf86a63a473d457cae4216b885efcf32b6d360e21f12b038c361fc58268913e424f265a4ce715ee90877dcf84b95dc7365cefba62bb32b18ff4d36bd34862393d5e3e07e8f0eb75368f26f1a3cab3caaf642f2661cdf53437b856ec8a2343a8765b18003799536fd74af0c1014cd9690b7595d484fb255785788766fc1d57", @nested={0x256, 0xf9, 0x0, 0x1, [@generic="6365a5f0a68bccc3857a06c2e4ccab8b7967293cee9a302e552de2b5b23904933a6a8b0e831f1dfc7e96a94c69c7bcb869bfa478a38fc99066a8175212d927e97bf699d36037e3fe27db46956f4f5c3400cd7e681663f1dade683425293b0e56e74a5e072f39bf42841feeb672d6ab68c9e40c77323a853b32c49c9dbec9323329629b5af1c4375493e11c1781a1731f5f2e3edec1b68d765cfdae9e2393c4d271b728713ec197dfae84687384f22a2b17277ff1472dbc2f1e25c21ced4a5ab3a77e318e2db483998a00372ce5bb4861044cc6d7c3fd77fe0918a4f01c76078d22829f51647a9ee98f5ae479bf18bada813afb45651f2c", @generic="79fbd1b585adb61cf17ab6", @generic="1c42d9c8046894fbb392bef0a1dc08ee88e1e0ed9486620878335ffedc08190622af11d596bd217f6e1a04d7542ed3eec7f564858ad0d13e17595c9873c1cb977c5a937b62540886750ad8746414ef8212e54273166647406a1967494e5a641493426a8e8fd9c66a2a43a49e75ca852f1e540403b75b274be7ffc927e276fbe4e62c1bdd0ecad6fc0051abfa906c8ec62b364aa5a7b565012d6ab80480f9cab825d6f83c9f68c3620e6a3dbce484bec4e0648a7cb680a58c20eef433733a8b6edf119bdc0f75cf48e1a1c61c8949acedfc2f740b83b0a06acc8daac2caef6aae0d2b0ad0f3a8ad2753a4eb3090a6c9c544db42f9", @typed={0x8, 0x122, 0x0, 0x0, @u32=0xf}, @typed={0x49, 0x129, 0x0, 0x0, @str='/sys/devices/virtual/workqueue/scsi_tmf_0/power/autosuspend_delay_ms\x00'}, @nested={0x4, 0x4a}, @typed={0x4, 0x5c}]}, @generic="406f67dd405fa469c34cf189dc0f4859a514", @typed={0x8, 0x143, 0x0, 0x0, @pid=r4}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@typed={0x14, 0x73, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x8, 0x34, 0x0, 0x1, [@nested={0x4, 0x8f}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x80, 0x1, 0x0, 0x1, [@nested={0x7a, 0xc0, 0x0, 0x1, [@typed={0xc, 0x96, 0x0, 0x0, @u64=0x49a5}, @generic="cfabd2ce6772d4a82159fc2278aebeabad6c716cf5a3c642e3ce1afc5262e86e712d66266df975bd327cae59a541a9f8ab7dfbb7e0c19e40cf1847f6acf7cfff990a6b6c785765c6acbcc92d64b87b1fde7b152af128867849ac4ec6ec927bb75f29f73b86ca", @nested={0x4, 0xf5}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xd4, 0x1, 0x0, 0x1, [@typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@remote}, @nested={0xb2, 0x12b, 0x0, 0x1, [@typed={0x14, 0x24, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0xe6}, @typed={0x8, 0x14e, 0x0, 0x0, @fd}, @generic, @typed={0x16, 0x25, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @nested={0x4, 0xb1}, @generic="d98da65691818ef92a4d2b3e9db22beb6724eb2f824384bc2079", @nested={0x4, 0x51}, @typed={0x49, 0xa0, 0x0, 0x0, @str='/sys/devices/virtual/workqueue/scsi_tmf_0/power/autosuspend_delay_ms\x00'}, @typed={0x8, 0xd, 0x0, 0x0, @uid=r9}]}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x4}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x5bc, 0x1, 0x0, 0x1, [@generic="865e710476a09dfcba864cdaf94fc6be5ed47aa9dc25ef309b425bd323d88530c817d4e452b2fd36833ac134d05c7390a57c364632a750f2d422a2bf91f06f8e93c898bb4bc61c917fd8811027a9b9b4191d3d78a7cfa13a4381bc27b880cff5cdaeef782615bf1607aa97cfde60056f8a32c46f67b1bb4a9d04ba78ccdd8d25bf7c2921796fc6", @typed={0x8, 0x12b, 0x0, 0x0, @pid=r4}, @nested={0x32, 0x11d, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @fd=r2}, @typed={0x13, 0x117, 0x0, 0x0, @str='{^-$-]}+{(\xff,\\.\x00'}, @typed={0x4, 0xd3}, @nested={0x4, 0x10b}, @generic="7a9f437ecd4e67db5e87"]}, @nested={0xd5, 0xdd, 0x0, 0x1, [@generic="90166a0f93ddc1e72bd9afc1e397f62841a92dd1c732722d650b496264ab6aba03813c8df78dc1722a34008468db21aa04c84b9218d6f1f05e58ca470bfc7617a0075107a27fd08116dc1371f5d1802987b6ddcc452ff61e85faebe9c0529831d5867bb2e8704bf3b733e8ad66f9fd518682d14609c29cf7c3a8ac0f89190b550e85f47b78a38ad97c4d363704c347386f7ec80a421d807d8ba531cb7c5644ba504c198b13ca129f4271e583b9ac7a722434d368f9f3caedbaadace0f6a0847bb9de1b85462f0f3a663e4590407df27568"]}, @nested={0x60, 0xa7, 0x0, 0x1, [@nested={0x4, 0x111}, @nested={0x4, 0x4c}, @typed={0x51, 0x3b, 0x0, 0x0, @binary="823e24610269c616577d5a7d587d53f269f9d044efd89a335f970ef725df90f93a25630702246c88847a5aa343d2724d91c382695f116a4d1238ab3eef617f1c093eec301590783c39511a0eca"}]}, @nested={0x2ce, 0x29, 0x0, 0x1, [@nested={0x4, 0xdb}, @nested={0x4, 0x1b}, @generic="da456e", @typed={0x4, 0x39}, @typed={0x4, 0x29}, @generic="06fa91f628e7a5ddca58252a145b8492d0ece1767fc0b4ca465d671759ba3ec311de6cf79b46ae422eb4df01f40cb31aaa1b747fd3c361a2d05cd8d1483ceb94865d0e918723d5ae4d99dcac5c14ef40cdf5c1f1942e4e0e14b5c1188ee7414946249f5f3a907d1efba94f5c62e7651f9a0dcf743e3ea887f7a44f738a60467d5eaca0b59abd9c0020f806d714721d03cb068565779435aac5ba1826079cc8a96f308f18e7117863bfa2698b09909006faa6cbc007fd", @generic="a20592ef349c110f8d9bec62fc597753b9b946ec8dace382ed4fdb412b3dcfc33ca9183d2a1c2ff2c80cfb97a4a8b1b0c44d70a296fb2db43e9f918e35d5e66e548aa0cc431bdc533f56d230e38ecf43ed35fee8a815fc88872319ac05b4eb0dc177aa24004445e5691eb6fdfa729c3b91501e4a4168a4bc0f2ff2796d8cb705cbaca2aaa01b3c33b6708204c83eda455a35551f7e73f058ce967d104f2e17cccd1668528edf6c9712af123daeb961d927540489746bfaf6c196c4940df87711c6970a090fc75cbf1e8889535ac3eeb606dfb6b1cff086fa51210882571435957f872006a68d5a0f1422ceaa", @generic="4523040c0450113dc44a29184c3643a614448c4aa4438f65a2802918424522c07756691cea6c8e1a698de08d555bcd9e672c53eda5839ca309627d4816678e45d2e7a8319cb784bf73c53b598c5a271210c22f9a83db41391c15bebb9acc2205fcffcdc6d91e5d", @generic="8be81c145a85a15d0013e8e8930c23221f2185b5957e67c0f35764ef47a196dc7e86d1b61d767781ffe6950f1a859849d419354705f051473f25767bf7e47b65df0309318b5b8e2d66cbf926347aeaeac4be64b62df870f1f82bc3d620b05878882ed2f17800bf403eaebec7377dd962b8320a4250262bf0c78b17bc2a7277339e5c4cb5fc934b8fd827f39c6377e408e3a82b580562ce712ce434f6e65b4fd105b7fcf9f79a1d073b93f4469a57"]}, @typed={0x66, 0x135, 0x0, 0x0, @binary="297272f46857eacc1964c7c9f37d30eaedc60a437a4af25ced976e04675fc38667a98fc7f5dd4b115300eb0db0ce6561f4f002de226b04bee7b57a4d392b13e13cdfe7d5c6b8f9410ea80291bcfa75306db7429aede5758cae3e5ba4eda094cc16f9"}, @generic="58bb10d83082801f3a69a2d8152b7a67cd3ac5f1a27c903ccec438da624f0a2e7344dce70c6892574a24d23710e69800cf49c32b4e730e22bc010d0370c418a13abae89b1d2b081b0519772e8628458eb4920f5f88f0276cf38c0955319f97f955f2d793712c33f95d28e8b6a2248b9042ee81e5f8a5668dbc457b85f3f85a6fd12fe5d97f"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x77, 0x1, 0x0, 0x1, [@generic="65b65ad0c1710bc40760409019f9283e71a1416505e76eaafef8662248fbfb48c31bd98320447e7ac26eb6e43fe812c6d15f27f16d1e8e0a0ded1d967ccb5d71de63b3", @generic="f71201dfa3", @typed={0x14, 0xa5, 0x0, 0x0, @ipv6=@private2}, @generic="dab9b965111f7b29899099", @typed={0x4, 0x7a}, @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0xddc}, 0x1, 0x0, 0x0, 0x4}, 0x60000044) 19.389773326s ago: executing program 0 (id=1103): socket(0x2, 0x3, 0xa) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd700002dcdf2503000000ffff08000400080014000180100010800c00120008000000e12f3cd8"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x42882, 0x0) ioctl$auto(r2, 0x4b4b, r2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) socket(0x2, 0x1, 0x0) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r4, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01cb37c9f6002bbd7000ffdbdf25110000000800050003000025cb43bc8a869debe04e932e037aa4000800050001040000040003"], 0x28}}, 0x4000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17.339746472s ago: executing program 0 (id=1109): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x804, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/bus/usb/drivers/uss720/unbind\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x60, 0x2, 0x12, 0xfffffffffffffffa, 0x2000000) socketpair$auto(0x1, 0x6, 0x0, 0x0) prctl$auto(0x1000000003b, 0x90bc, 0x0, 0x5, 0x5) mmap$auto(0x6, 0x0, 0x3, 0x18, 0xfffffffffffffffa, 0x4000000000008002) mmap$auto(0x0, 0x4005, 0x8, 0x7fff, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/18, 0x12) sysfs$auto(0x2, 0x4, 0x0) r1 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, r0, 0xce000004) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, r1) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mountinfo\x00', 0x42201, 0x0) 16.836682819s ago: executing program 0 (id=1112): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x40a40, 0x0) (async) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) socket(0x2, 0x801, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/split\x00', 0x0, 0x0) (async) socketpair$auto(0xe0ea, 0x5, 0x4, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) r0 = socket(0x27, 0x4, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)=@isdn={0x22, 0x5d, 0x5, 0x2, 0x1}, 0x55) (async) socket(0x10, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80100, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x82, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) io_setup$auto(0x7ffe, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mlockall$auto(0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 16.427424983s ago: executing program 0 (id=1115): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xc, 0x0, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x8, @old_prog_fd=r1}, 0xa3) kexec_load$auto(0x1000, 0x7, &(0x7f0000000140)={@buf=&(0x7f00000000c0)="0c119278333728d44a5a71c3d7392939521d9120d006e13ec439dce1a0f80606d034e53bfe8272a04fa9c279d40cd4f8c78ea54836f7f115a927e83676cd79fbf7", 0x1952, 0x0, 0x7f}, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) umask$auto(0xa738) bpf$auto(0x2, 0x0, 0x9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/ttynull\x00', 0xffffffffffff8001) 9.670510031s ago: executing program 2 (id=1134): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioperm$auto(0x90d5, 0xc, 0x2) mq_unlink$auto(0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x1, 0x106) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1136daefdad8374b297345969e5c4ccccca7eb6d337a0876c66d1e5008c65b34d116", @ANYRES16=0x0, @ANYBLOB="100026bd7000ffdbdf25590000000400340106001a01ff07000004006c000400b800"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) r2 = epoll_create$auto(0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@token_create, 0x6f6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) capset$auto(0x0, 0x0) epoll_ctl$auto(0x5, 0x3, r3, 0x0) epoll_wait$auto(r2, 0x0, 0xe007, 0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040)="99e7daa24511691d42a9", 0x1000}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) 7.766812468s ago: executing program 3 (id=1136): mmap$auto(0x0, 0x2000c, 0xdf, 0x16, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 7.339600579s ago: executing program 1 (id=1137): socket(0x80000000000000a, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01/path\x00', 0x442800, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) write$auto(0x3, 0x0, 0x5c8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xfc) 6.385651929s ago: executing program 2 (id=1138): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x26, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 6.348895438s ago: executing program 3 (id=1139): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x11, 0x80003, 0x300) sendto$auto(0x3, 0x0, 0x18, 0x7, &(0x7f0000000180)=@hci={0x1f, 0xdd86, 0x7}, 0x22) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/trigger_fs_error\x00', 0xa801, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\b\x86\xc6\xd7L\xc6\xd1\xf4h\xf2\xc4\x9aZ\x14\x83\f\x17\xf6\xb1u!\xbc\xbc8H\x94,3\xba\x8a\'\xef\b\x942W\xb5:\xb4\xe3[\x9d\xc1s\x13\xf9\xd5X\xe0\xfd\x7f\x95\xf8\xc9\x85\xe7\xd9u3\xc3\xcd\x1dJX\xcd\xab\xf5\xdf\xf1\xad\xa4\xf1\x9b\xc4\xf9\xac\xa2\x8f@W\x9d\xf4 \xd3di\x84\xff\xe2`\x9c7\xbc\xe7\xe1\x94\xcb\bt\xa0\x93]\xba\t\x92\xca\x1f\xc3\x00\x00\x00\x00\xf8\xeb\xc65\xd3\xd1\xc5\xbb\x96{\xa3\xe7\\y\xa9Em\xd5\x19\xef\xf8\xac!\xff@K\x1d\xeaE\xce=\x90\xe6O\x82X\xc1\xbfI:5\xac\xb0\x98\xbf\xf1\xba\xa4\x10s\xfb\xc1j;!\xa4+{\xe6\x02\xb8\x88\xea66$!v\xef\xce\x19eM\xae\xe3\xd9jc\x10\xa7\xf1\xce&\xd7\xb6\x06\xf3\xeb\xe8\x87[f\xe7\xdf\x8c\x0f\x80\xed\x04Z!\x89R\x8b-\xbcI\t:\xcf\x9b\xd5a\v\xf0^d$\xb6\x06\xbb\xdf\xa5\x88\x96\xd2V{\xb7n\x1b5N\xb9\xdc\x97\x16\x9e\aag\x1b\xf0K\xebtw\xe3\xf0\x03\xf8\xf2\xe3\xb7\x85\x8c\xe2\xca\xfdB\xa5\x82nlV\xac\xe6bK\xec\xa3.\xe7qeOd\x19\xeaX\x94N\x84\xa51\xec7:\xef\xd1\x8f\xd4JP\x81\xc3\xa3/Mz\x91f\xcf\xdaO\xe1l\xcc\x8b\xb0\xe5\xc9n\x95\x9a\xa6\xf3Tk\xdf\xf5m\x7fbC\x8a\x97\xdcM\x06\x8a\xd3g\xe5\'\xf2\x8c\x1a\xd00Z\x06\xf2\xacL\xe0\xab\x1d\x1e\x94?', 0x81) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) r3 = socket(0xa, 0x1, 0x84) socketpair$auto(0x2d, 0x2, 0x8000000000000000, 0x0) r4 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r4, 0x0, 0xe) ioctl$auto(r2, 0x4b3a, 0xffffffffffffffff) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(0xffffffffffffffff, 0xc0844123, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ffde, 0x7, 0x10, 0x9, 0x6, 0x80003, 0x4, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x9, 0x50007, 0x2, 0x80000002a0, 0x0, 0x80000001, 0x1, 0x202, 0x9, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc]}, 0x1fe, 0xd) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1c41, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffffffffffd02, &(0x7f00000001c0)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101002, 0x0) r6 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x4048800}, 0x2004c090) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x8}, 0x7, 0x4008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) 6.084502965s ago: executing program 2 (id=1140): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) ioctl$auto_BLKRRPART(r0, 0x125f, 0xffffffffffff0700) 5.820003059s ago: executing program 3 (id=1141): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r0, @ANYBLOB="010025bd7000fedbdf257e000000000066004e21000000002680000002000400000000006300000000000000010009000000000001000400000000000200070000000000980006000000000014010f000000000007001f5198dea666bad033b7aea5d7529adf1ae5607ef3d022c60a57cd1649952c00000080004dec6ee46088e6"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) 5.567198659s ago: executing program 2 (id=1142): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/lru_gen_full\x00', 0x40041, 0x0) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/192, 0xc0) (async) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) (async) r4 = socketpair$auto(0x3, 0x5, 0x7, 0x0) (async) write$auto(0xca, 0x0, 0x2d9) mmap$auto(0x400000000002, 0x1000000000020009, 0xdf, 0x11, 0xffffffffffffffff, 0x8000) (async) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x5400, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/ptp/ptp0/clock_name\x00', 0x800, 0x0) read$auto(r6, 0x0, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000002c0), r4) sendmsg$auto_SMC_NETLINK_ADD_UEID(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xd4, r7, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@SMC_NLA_EID_TABLE_ENTRY={0x1e, 0x1, '/sys/kernel/debug/lru_gen\x00'}, @SMC_NLA_EID_TABLE_UNSPEC={0x7f, 0x0, "fd24ad1ffe4480e762a9ca24df804921268fcda2a150f2638b7c78e8a10cf78f21d06b7e22b4253fcdc04660317b4533f5ecce2919c10f972c415d2e79f9142728efdb26d5c1e35ed8ed9e34c8057ada5e170fe612bddb28aff63c0130150a26afc73a8615cdf95c76f651a4a2bfeddccc1ef9771134d325131aa8"}, @SMC_NLA_EID_TABLE_ENTRY={0x9, 0x1, '%(@-\b'}, @SMC_NLA_EID_TABLE_ENTRY={0x11, 0x1, '/dev/video15\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, &(0x7f0000000340)=""/200, 0xc8) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r0, 0x891e, 0x24) 5.448931469s ago: executing program 3 (id=1143): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4") r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = mq_open$auto(&(0x7f0000000200)='\\\x00\xa9A\x00', 0x83, 0x7, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x380000}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000100)={{0x171a4c29, 0x0, 0xee01, 0x401, 0x9, 0xb, 0x2}, 0x8, 0x100, 0x1a56, 0x1, @inferred, @raw=0x8000, 0xe7d, 0x0, &(0x7f0000000000), &(0x7f0000000040)="1783a8"}) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={0x54, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [@nested={0x8, 0x7e, 0x0, 0x1, [@typed={0x4, 0xbd, 0x0, 0x0, @binary}]}, @nested={0x20, 0x3b, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@loopback={0xfffff000}}, @typed={0x8, 0xf4, 0x0, 0x0, @str='+&+\x00'}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_SNDRV_PCM_IOCTL_STATUS642(r1, 0x80984120, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, 0x0, 0x121641, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000280)="5fff575a2747b07cd670b8e58610c96d64ba76b6a60cc9bb1796ae711afdd441fab265037d00077ea24bbfc6e776cca12c7aa02bb1ff33618736aa4b3bb525987d076bbb472da95efc") mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0xb5, 0x10, 0x4, 0x53000000, r1, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x9, 0x2, 0x4f4, 0x5}, 0x12) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) pipe$auto(&(0x7f0000000480)=r6) ioctl$auto_USBDEVFS_SUBMITURB32(r6, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000005"]) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) lsm_set_self_attr$auto(0x988, 0x0, 0xe7eb, 0x0) unshare$auto(0x40000080) 5.404577923s ago: executing program 1 (id=1144): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) socket(0x2, 0x80805, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0xab2c}, 0x3) r4 = socket(0x1e, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}, 0xffffffff}}, 0x66) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x2, "fb2704573a53cf995e9bd50d9a038ae9ba8b6bb523af71be779551bea8bb46e0", @inferred=r0}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x18, 0x101000000000000, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="48fca9fce87c944c01b8294348d59fc327dd2324b3227bb0f3ab8cfc9f1a2af72398441d049fa2239e00db60e040770ddc585cf93134ee5ffd950b25b6d6313d0df88c656a49c19a4ccf7cfe7734be012fb567ec156663bfc910854064afb220850b0c319971b90d70332350730381dd5aeb760a16", 0x75) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 3.043431484s ago: executing program 3 (id=1145): mmap$auto(0x0, 0x2000c, 0xdf, 0x16, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r6, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 2.832275935s ago: executing program 2 (id=1146): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/194, 0xc2) write$auto(0xffffffffffffffff, 0x0, 0x0) socket(0x18, 0x5, 0xda20) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0x10000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) listen$auto(0x3, 0x81) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dA\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee,\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\xa8\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7l\xa6.\xe8^\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\xaf\xe7\x95$\x82\\u=\x80[W1\x10\xdb\xb6W\x9esS~\x99M.\xef\xd7Vk', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x4, 0x2020009, 0x3, 0xf8, r1, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(r2, 0x0, 0x10001) unshare$auto(0x40000080) lseek$auto(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 2.793653507s ago: executing program 1 (id=1147): r0 = socket(0xa, 0x1, 0x84) setsockopt$auto(r0, 0x0, 0x2, 0x0, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x22202, 0x0) write$auto_tty_fops_tty_io(r2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) sendfile$auto(r1, 0xffffffffffffffff, 0x0, 0x32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) pread64$auto(r3, 0x0, 0x100000009, 0xa4000000000002) madvise$auto(0x0, 0x20499d, 0x9) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44b, 0x7, 0x5, 0x1003181, 0xd1, 0x7, 0x7, 0x7ff, 0x9, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x860, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}, 0xa, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) pkey_free$auto(0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msgctl$auto(0x0, 0x3, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xbb3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1adcc3, 0x102) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) 1.627389807s ago: executing program 2 (id=1148): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0x2, 0x4) (async) lseek$auto(0x3, 0x2, 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x4) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000380)="f92eb1658ff10f5d0e8198632bf640e8abfce10d2324f8d3b8cf8695fc3576d2e8c656b2b8d1dbb8eef8b3cb0903b4e72f875187aa6ed0977d51791d1eaac208991f5a27ee282fee8ff9df48c332f5bed57261408653456cc8b5e98019b1dfd7f449196c7224ea677bcb796f8c13f188deafacba3b980398c5d81ef33d3986d4cfc0de7ca38eb49b36f4c83d2ae5908bbb884ee917ec199bcdce29d612e349e096a171e6bf809fd841", 0x8}, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) prctl$auto(0x409, 0xff0000000000000, 0x0, 0x7, 0xffffffffffffffff) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) (async) sendfile$auto(r4, r3, 0x0, 0x48) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) (async) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) ioctl$auto_FS_IOC_ADD_ENCRYPTION_KEY2(0xffffffffffffffff, 0xc0506617, &(0x7f0000000240)={{0x6, 0x0, @descriptor="4162321b541a99f9"}, 0x40, 0x3, '\x00', "e2f7e40b7cce3e65d1db4db51b80cf38922a872425af5bf165b0239ccb25816fc69d199e87a289ed19eb4f7ef27299173036d9aa83b6a2b553d850823e304ad0c7e178b6a35c64a146e217fa11076f4d90d848b2a255f1e9c1ccc47659a82fddd4625b241d40f6746a0e915d47a8809c826e427c348ce0f954421ad80b7f7d62e7074930fb9b2ad0df39da91be4fe1d4d60996a993585aa794162339e39d1382df42ce1cb3c8d0c6d057ac5bea2e1df924ff61f143f22a1e52c49668b162568ed0a319be36fd461ec98b1771754eb030fe955f9a3ed944b2022d7aec2425dd56bd54fd9ef9f639f5bce8e833ea"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) r5 = socket(0x2, 0x2, 0x1) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c8d4}, 0x4040040) (async) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c8d4}, 0x4040040) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1.14057037s ago: executing program 32 (id=1115): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xc, 0x0, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x8, @old_prog_fd=r1}, 0xa3) kexec_load$auto(0x1000, 0x7, &(0x7f0000000140)={@buf=&(0x7f00000000c0)="0c119278333728d44a5a71c3d7392939521d9120d006e13ec439dce1a0f80606d034e53bfe8272a04fa9c279d40cd4f8c78ea54836f7f115a927e83676cd79fbf7", 0x1952, 0x0, 0x7f}, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) umask$auto(0xa738) bpf$auto(0x2, 0x0, 0x9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/ttynull\x00', 0xffffffffffff8001) 1.112304104s ago: executing program 1 (id=1150): r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4008854}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x16, &(0x7f0000000400)={@siginfo_0_0={0xfffeffff, 0x0, 0x2, @_sigpoll={0x8}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="f51b26bd7000fedbdf2517"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1428, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@MACSEC_ATTR_OFFLOAD={0x3c, 0x9, 0x0, 0x1, [@generic="772e4cf7bfbb06d82629f5720b94cd15fb06d325fc1704ffd1aa1c7792fbc7d2b3216428547f0a96f508d13b", @typed={0xc, 0x4c, 0x0, 0x0, @u64=0x1}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}, @MACSEC_ATTR_RXSC_CONFIG={0x64, 0x2, 0x0, 0x1, [@typed={0x4, 0x3d}, @generic="0fc2c4384c0890cb527b358ec4240aa0f6f6800492c2e46bffde2052486ae2421a6d55ca23327bbb713d190d22154bce513589c57879949ce71489297cfae6b95f52986d2f8eae65991f", @generic="54183572bd3992591526fcdf502ca854ee1f"]}, @MACSEC_ATTR_OFFLOAD={0xc8, 0x9, 0x0, 0x1, [@typed={0xa4, 0x62, 0x0, 0x0, @binary="cd9b8f3cb07c88034e8a7d29475960255ab9ac24012292a8dcf95018128f2288b04411e76ee99278abb2d00d83edd5e4c5615b8e64672832c720353d7f40ba1058da2f4c0cd33f00b48474afcc62fd0dcea45768e6fc79ca850a73bcaf17274a34bd28b65d7b651824dbf913f8c49a27b025fb75b6f267876444f43215da84b90e7e4484766869db85bc1326f4a278554f30fc3e9640fb0ac732c47e8d4e2114"}, @typed={0x14, 0xcc, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0xc, 0xbb, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @pid=r3}]}]}, @MACSEC_ATTR_OFFLOAD={0x129a, 0x9, 0x0, 0x1, [@nested={0x90, 0x25, 0x0, 0x1, [@generic="61e737df13dda358e45c52b1e457b4bda0394b41ba7043d82a9c99ce693dd81535d63108b49a336168a6a031a5c8e194d510d5494395c913fc351b3e6a9920a3e8f166f0a406c19b8b92a6c36a62e2dda5652a1aa987098448b2635468c6104396fe71652c953a623cd3cb98858929d011092dff2470a872", @typed={0x7, 0x87, 0x0, 0x0, @str=')*\x00'}, @nested={0x4, 0x81}, @typed={0x8, 0xea, 0x0, 0x0, @u32=0x3}]}, @typed={0x8, 0x111, 0x0, 0x0, @ipv4=@empty}, @generic="7560412835e7640e0bbf", @nested={0x11f3, 0xf6, 0x0, 0x1, [@nested={0x4, 0x48}, @generic="27db34fcc596878957096a2f2b07f50efbdbd196f56339e3760dd3dc688fe918dc2d7abcd5ee44b14d1a223639b01e55b562f1fb769465e736f58a23486510327a317e3362df8389968989b08bbf35f11a6423b63f69bbc2c0cf92c4b102c869b4f61ce9ab99d6b38a2721c19b4b72e30323902a63c596ff6bf3354d571fd4a3eea2afa85a93e2776add3de56b935b719c44a6a8b82c5e3d425cd51eb4f841ef6e424a2ab9e10a55e0b9354cb2aa01140fd79cea76d42d6b8965af7bc7b5e9b32a2fafba8cf1b0fb355f4f82cec995d662c5683c4f4d6534299c1218f376ab52847e1d", @generic="a8421e00d50e62b8f083de8afa5a39c5baad234d96d7d0672d5f7315b1846bf179c477d3cacec1eb41377aa11f0e3cfe6b8544af349a8c864dc59cb3857070154cfbf12386871ecf4de87a4e992f09d1f35ce1322d897b826cfcbc7ab5ee7c76ffb4dbde1aeec7b1cd314f0ed426d2", @generic="001104089ce20700bea008b07ab88915c9e50cca59e46bb5761c37efe48acb1b0105f5f641c64949f5", @generic="fcdb277d374a0612f1b00330f59f87065d17331cc2ab98ad2844bef80b6baee480cd62356e4b1170521661e88f9fe8130b4db71a2b2afdca15c6a6362f4e42360b19bc1fd27a09b53d62407b59ed", @nested={0x4, 0xb4}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0xffff}, @generic="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", @generic="54b209243d6be9d90187dc1575f7669ae8fc"]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}]}, 0x1428}, 0x1, 0x0, 0x0, 0x8020}, 0x200000c5) 595.245366ms ago: executing program 1 (id=1151): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) uname$auto(0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x4, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x9, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0x200d) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xc000000, 0x9}, 0x7}, 0x3, 0x0) 443.58652ms ago: executing program 3 (id=1152): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/ip_vs\x00', 0x20000, 0x0) pread64$auto(r0, 0x0, 0xe, 0x100000000007) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), r1) sendmsg$auto_GTP_CMD_ECHOREQ(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffef3, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40048}, 0x24048044) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x0, 0x3f146614094390c7, 0xfffffc00) socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x4079, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r4, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x20) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000001fc0)="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") openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xf, 0x14, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xff, 0x7ffffffb, 0x9, 0xffbfffff7ffffffc, 0x9, 0x7, 0x200000100103}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f00000000c0)={'wg0\x00'}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 0s ago: executing program 1 (id=1153): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x26, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) kernel console output (not intermixed with test programs): 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.986466][ T8409] RSP: 002b:00007f36d848f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.986497][ T8409] RAX: ffffffffffffffda RBX: 00007f36d77d5fa0 RCX: 00007f36d758eba9 [ 274.986519][ T8409] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 274.986540][ T8409] RBP: 00007f36d7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 274.986559][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.986578][ T8409] R13: 00007f36d77d6038 R14: 00007f36d77d5fa0 R15: 00007ffe7bc7cff8 [ 274.986622][ T8409] [ 275.660112][ T8409] nbd: failed to add new device [ 275.671538][ T8412] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 276.229930][ T8421] FAULT_INJECTION: forcing a failure. [ 276.229930][ T8421] name failslab, interval 1, probability 0, space 0, times 0 [ 276.289683][ T8421] CPU: 0 UID: 0 PID: 8421 Comm: syz.3.427 Not tainted syzkaller #0 PREEMPT(full) [ 276.289723][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.289741][ T8421] Call Trace: [ 276.289751][ T8421] [ 276.289762][ T8421] dump_stack_lvl+0x16c/0x1f0 [ 276.289815][ T8421] should_fail_ex+0x512/0x640 [ 276.289863][ T8421] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 276.289900][ T8421] should_failslab+0xc2/0x120 [ 276.289940][ T8421] __kmalloc_cache_noprof+0x6a/0x3e0 [ 276.289971][ T8421] ? find_held_lock+0x2b/0x80 [ 276.290000][ T8421] ? alloc_fdtable+0xbd/0x2d0 [ 276.290036][ T8421] alloc_fdtable+0xbd/0x2d0 [ 276.290076][ T8421] dup_fd+0x83b/0xb90 [ 276.290117][ T8421] ? apparmor_task_alloc+0x2c2/0x3b0 [ 276.290154][ T8421] copy_process+0x230c/0x7690 [ 276.290194][ T8421] ? __pfx___futex_wait+0x10/0x10 [ 276.290254][ T8421] ? __pfx_copy_process+0x10/0x10 [ 276.290293][ T8421] ? futex_private_hash_put+0x176/0x300 [ 276.290335][ T8421] ? futex_private_hash_put+0x18a/0x300 [ 276.290378][ T8421] kernel_clone+0xfc/0x930 [ 276.290424][ T8421] ? __pfx_kernel_clone+0x10/0x10 [ 276.290485][ T8421] __do_sys_clone+0xce/0x120 [ 276.290526][ T8421] ? __pfx___do_sys_clone+0x10/0x10 [ 276.290583][ T8421] ? xfd_validate_state+0x61/0x180 [ 276.290640][ T8421] do_syscall_64+0xcd/0x4c0 [ 276.290691][ T8421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.290721][ T8421] RIP: 0033:0x7efcff38eba9 [ 276.290745][ T8421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.290775][ T8421] RSP: 002b:00007efd001db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 276.290799][ T8421] RAX: ffffffffffffffda RBX: 00007efcff5d5fa0 RCX: 00007efcff38eba9 [ 276.290816][ T8421] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001 [ 276.290833][ T8421] RBP: 00007efcff411e19 R08: 0000000000000000 R09: 0000000000000000 [ 276.290850][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.290868][ T8421] R13: 00007efcff5d6038 R14: 00007efcff5d5fa0 R15: 00007ffe259e8668 [ 276.290906][ T8421] [ 276.599080][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.428'. [ 281.650820][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 282.978536][ T8502] bridge0: port 3(syz_tun) entered blocking state [ 283.013498][ T8502] bridge0: port 3(syz_tun) entered disabled state [ 283.053490][ T8502] syz_tun: entered allmulticast mode [ 283.077698][ T8502] syz_tun: entered promiscuous mode [ 283.085067][ T8502] bridge0: port 3(syz_tun) entered blocking state [ 283.091691][ T8502] bridge0: port 3(syz_tun) entered forwarding state [ 284.866046][ T8529] queue_state_write: operation too long [ 284.877127][ T8529] queue_state_write: use 'run', 'start' or 'kick' [ 284.933787][ T8529] process 'syz.3.451' launched '/dev/fd/3' with NULL argv: empty string added [ 285.282420][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 285.450455][ T8542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.452'. [ 285.655266][ T8530] zswap: compressor not available [ 286.228654][ T30] audit: type=1800 audit(4294967332.630:11): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.455" name="members" dev="configfs" ino=21314 res=0 errno=0 [ 288.400155][ T30] audit: type=1804 audit(4294967334.820:12): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.463" name="/newroot/sys/kernel/tracing/current_tracer" dev="tracefs" ino=31 res=1 errno=0 [ 290.043892][ T30] audit: type=1804 audit(4294967336.420:13): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.469" name="/newroot/96/file0" dev="tmpfs" ino=526 res=1 errno=0 [ 290.232069][ T30] audit: type=1804 audit(4294967336.590:14): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.469" name="/newroot/96/file0" dev="tmpfs" ino=526 res=1 errno=0 [ 292.966106][ T8665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.478'. [ 293.149790][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.480'. [ 293.799032][ T8673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.481'. [ 295.258785][ T8673] kexec: Could not allocate control_code_buffer [ 295.336867][ T8673] Process accounting paused [ 295.570747][ T8709] FAULT_INJECTION: forcing a failure. [ 295.570747][ T8709] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.618972][ T8709] CPU: 0 UID: 0 PID: 8709 Comm: syz.1.486 Not tainted syzkaller #0 PREEMPT(full) [ 295.619011][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 295.619030][ T8709] Call Trace: [ 295.619040][ T8709] [ 295.619051][ T8709] dump_stack_lvl+0x16c/0x1f0 [ 295.619104][ T8709] should_fail_ex+0x512/0x640 [ 295.619159][ T8709] should_fail_alloc_page+0xe7/0x130 [ 295.619203][ T8709] prepare_alloc_pages+0x3c2/0x610 [ 295.619257][ T8709] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 295.619298][ T8709] ? __lock_acquire+0x62e/0x1ce0 [ 295.619348][ T8709] ? __lock_acquire+0x62e/0x1ce0 [ 295.619390][ T8709] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 295.619442][ T8709] ? find_held_lock+0x2b/0x80 [ 295.619468][ T8709] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.619511][ T8709] ? policy_nodemask+0xea/0x4e0 [ 295.619549][ T8709] alloc_pages_mpol+0x1fb/0x550 [ 295.619595][ T8709] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 295.619646][ T8709] folio_alloc_mpol_noprof+0x36/0x2f0 [ 295.619694][ T8709] shmem_alloc_folio+0x135/0x160 [ 295.619724][ T8709] shmem_alloc_and_add_folio+0x499/0xc20 [ 295.619767][ T8709] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 295.619806][ T8709] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 295.619849][ T8709] shmem_get_folio_gfp+0x67f/0x1600 [ 295.619892][ T8709] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 295.619932][ T8709] ? filemap_map_pages+0xf58/0x1670 [ 295.619972][ T8709] shmem_fault+0x1fe/0xa30 [ 295.620009][ T8709] ? __pfx_shmem_fault+0x10/0x10 [ 295.620046][ T8709] ? rcu_is_watching+0x12/0xc0 [ 295.620077][ T8709] ? __pfx_filemap_map_pages+0x10/0x10 [ 295.620127][ T8709] ? __pfx_filemap_map_pages+0x10/0x10 [ 295.620164][ T8709] __do_fault+0x10a/0x490 [ 295.620206][ T8709] ? __pfx_filemap_map_pages+0x10/0x10 [ 295.620242][ T8709] do_pte_missing+0xf50/0x3ba0 [ 295.620276][ T8709] ? do_raw_spin_unlock+0x172/0x230 [ 295.620334][ T8709] ? __pmd_alloc+0x3fb/0x930 [ 295.620379][ T8709] __handle_mm_fault+0x152a/0x2a50 [ 295.620417][ T8709] ? mt_find+0x3ef/0xa30 [ 295.620449][ T8709] ? __pfx___handle_mm_fault+0x10/0x10 [ 295.620479][ T8709] ? __pfx_mt_find+0x10/0x10 [ 295.620533][ T8709] ? find_vma+0xbf/0x140 [ 295.620574][ T8709] ? __pfx_find_vma+0x10/0x10 [ 295.620621][ T8709] handle_mm_fault+0x589/0xd10 [ 295.620657][ T8709] ? trace_raw_output_exceptions+0x131/0x150 [ 295.620709][ T8709] do_user_addr_fault+0x7a6/0x1370 [ 295.620764][ T8709] ? rcu_is_watching+0x12/0xc0 [ 295.620801][ T8709] exc_page_fault+0x5c/0xb0 [ 295.620848][ T8709] asm_exc_page_fault+0x26/0x30 [ 295.620878][ T8709] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 295.620915][ T8709] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 295.620946][ T8709] RSP: 0018:ffffc90003927ba8 EFLAGS: 00050206 [ 295.620971][ T8709] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 295.620990][ T8709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807ab20000 [ 295.621008][ T8709] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100f5641ff [ 295.621025][ T8709] R10: ffff88807ab20fff R11: 0000000000000000 R12: ffffc90003927da0 [ 295.621043][ T8709] R13: 0000000000001000 R14: ffff88807ab20000 R15: 00007ffffffff000 [ 295.621083][ T8709] _copy_from_iter+0x383/0x1720 [ 295.621129][ T8709] ? __pfx__copy_from_iter+0x10/0x10 [ 295.621164][ T8709] ? rcu_is_watching+0x12/0xc0 [ 295.621196][ T8709] ? trace_kmalloc+0x2b/0xd0 [ 295.621240][ T8709] ? __kmalloc_noprof+0x242/0x510 [ 295.621288][ T8709] kernfs_fop_write_iter+0x19a/0x570 [ 295.621366][ T8709] vfs_write+0x7d0/0x11d0 [ 295.621399][ T8709] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 295.621445][ T8709] ? __pfx___mutex_lock+0x10/0x10 [ 295.621487][ T8709] ? __pfx_vfs_write+0x10/0x10 [ 295.621542][ T8709] ksys_write+0x12a/0x250 [ 295.621574][ T8709] ? __pfx_ksys_write+0x10/0x10 [ 295.621616][ T8709] do_syscall_64+0xcd/0x4c0 [ 295.621661][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.621687][ T8709] RIP: 0033:0x7f36d758eba9 [ 295.621708][ T8709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.621734][ T8709] RSP: 002b:00007f36d848f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.621758][ T8709] RAX: ffffffffffffffda RBX: 00007f36d77d5fa0 RCX: 00007f36d758eba9 [ 295.621776][ T8709] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 295.621791][ T8709] RBP: 00007f36d848f090 R08: 0000000000000000 R09: 0000000000000000 [ 295.621808][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.621823][ T8709] R13: 00007f36d77d6038 R14: 00007f36d77d5fa0 R15: 00007ffe7bc7cff8 [ 295.621858][ T8709] [ 296.254069][ T30] audit: type=1806 audit(4294967342.530:15): xattr="." res=0 [ 296.603430][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.490'. [ 296.732662][ T8714] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 296.830663][ T8714] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 297.039097][ T8714] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 297.046753][ T8714] page_type: f5(slab) [ 297.083070][ T8714] raw: 00fff00000000040 ffff88801b842140 ffffea00009fe800 dead000000000002 [ 297.125270][ T8714] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 297.143409][ T8714] head: 00fff00000000040 ffff88801b842140 ffffea00009fe800 dead000000000002 [ 297.175845][ T8714] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 297.238972][ T8714] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 297.247740][ T8714] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 297.299142][ T8714] page dumped because: unmovable page [ 297.323305][ T8714] page_owner tracks the page as allocated [ 297.359166][ T8714] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5876, tgid 5876 (udevd), ts 276856329512, free_ts 276761469862 [ 297.370704][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 297.418939][ T8714] post_alloc_hook+0x1c0/0x230 [ 297.422864][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 297.423806][ T8714] get_page_from_freelist+0x132b/0x38e0 [ 297.466063][ T8714] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 297.472689][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 297.486091][ T8714] alloc_pages_mpol+0x1fb/0x550 [ 297.501287][ T8714] new_slab+0x247/0x330 [ 297.528736][ T8714] ___slab_alloc+0xcf2/0x1750 [ 297.536534][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 297.547943][ T8714] __slab_alloc.constprop.0+0x56/0xb0 [ 297.567642][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 297.571514][ T8714] __kmalloc_noprof+0x2f2/0x510 [ 297.599338][ T8714] tomoyo_realpath_from_path+0xc2/0x6e0 [ 297.603578][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 297.609016][ T8714] tomoyo_check_open_permission+0x2ab/0x3c0 [ 297.630211][ T8714] tomoyo_file_open+0x6b/0x90 [ 297.634972][ T8714] security_file_open+0x84/0x1e0 [ 297.658982][ T8714] do_dentry_open+0x596/0x1530 [ 297.663900][ T8714] vfs_open+0x82/0x3f0 [ 297.668043][ T8714] path_openat+0x1de4/0x2cb0 [ 297.683628][ T8714] do_filp_open+0x20b/0x470 [ 297.708890][ T8714] page last free pid 5876 tgid 5876 stack trace: [ 297.715293][ T8714] __free_frozen_pages+0x7d5/0x10f0 [ 297.734850][ T8714] __put_partials+0x165/0x1c0 [ 297.754919][ T8714] qlist_free_all+0x4d/0x120 [ 297.760067][ T8714] kasan_quarantine_reduce+0x195/0x1e0 [ 297.765592][ T8714] __kasan_slab_alloc+0x69/0x90 [ 297.779000][ T8714] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 297.794838][ T8714] flock_lock_inode+0xbe5/0x1030 [ 297.808915][ T8714] locks_lock_inode_wait+0x1da/0x490 [ 297.828929][ T8714] __do_sys_flock+0x446/0x520 [ 297.833694][ T8714] do_syscall_64+0xcd/0x4c0 [ 297.858782][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.131712][ T8732] FAULT_INJECTION: forcing a failure. [ 298.131712][ T8732] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.145122][ T8732] CPU: 0 UID: 0 PID: 8732 Comm: syz.1.493 Not tainted syzkaller #0 PREEMPT(full) [ 298.145166][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.145187][ T8732] Call Trace: [ 298.145199][ T8732] [ 298.145212][ T8732] dump_stack_lvl+0x16c/0x1f0 [ 298.145272][ T8732] should_fail_ex+0x512/0x640 [ 298.145333][ T8732] should_fail_alloc_page+0xe7/0x130 [ 298.145384][ T8732] prepare_alloc_pages+0x3c2/0x610 [ 298.145436][ T8732] ? rcu_is_watching+0x12/0xc0 [ 298.145476][ T8732] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 298.145527][ T8732] ? rcu_is_watching+0x12/0xc0 [ 298.145561][ T8732] ? trace_mm_page_alloc+0x11f/0x1a0 [ 298.145616][ T8732] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 298.145657][ T8732] ? rcu_is_watching+0x12/0xc0 [ 298.145692][ T8732] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 298.145739][ T8732] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.145789][ T8732] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.145832][ T8732] ? stack_depot_save_flags+0x3de/0x9c0 [ 298.145908][ T8732] ? __kasan_slab_alloc+0x89/0x90 [ 298.145951][ T8732] ? alloc_vmap_area+0xdcf/0x29c0 [ 298.145999][ T8732] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 298.146032][ T8732] ? __kvmalloc_node_noprof+0x30a/0x620 [ 298.146078][ T8732] ? __do_sys_listmount+0x1c2/0xf80 [ 298.146108][ T8732] ? do_syscall_64+0xcd/0x4c0 [ 298.146153][ T8732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.146200][ T8732] alloc_pages_bulk_noprof+0x71c/0x1410 [ 298.146238][ T8732] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.146288][ T8732] ? policy_nodemask+0xea/0x4e0 [ 298.146333][ T8732] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 298.146373][ T8732] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 298.146432][ T8732] kasan_populate_vmalloc+0x112/0x2d0 [ 298.146467][ T8732] ? alloc_vmap_area+0x8b5/0x29c0 [ 298.146519][ T8732] alloc_vmap_area+0x960/0x29c0 [ 298.146580][ T8732] ? __pfx_alloc_vmap_area+0x10/0x10 [ 298.146636][ T8732] __get_vm_area_node+0x1ca/0x330 [ 298.146692][ T8732] __vmalloc_node_range_noprof+0x271/0x14b0 [ 298.146724][ T8732] ? __do_sys_listmount+0x1c2/0xf80 [ 298.146753][ T8732] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.146803][ T8732] ? policy_nodemask+0xea/0x4e0 [ 298.146851][ T8732] ? __do_sys_listmount+0x1c2/0xf80 [ 298.146893][ T8732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.146935][ T8732] ? ___kmalloc_large_node+0xed/0x160 [ 298.147009][ T8732] __kvmalloc_node_noprof+0x30a/0x620 [ 298.147048][ T8732] ? __do_sys_listmount+0x1c2/0xf80 [ 298.147084][ T8732] ? __do_sys_listmount+0x1c2/0xf80 [ 298.147127][ T8732] ? __do_sys_listmount+0x1c2/0xf80 [ 298.147158][ T8732] __do_sys_listmount+0x1c2/0xf80 [ 298.147201][ T8732] ? __x64_sys_futex+0x1e0/0x4c0 [ 298.147243][ T8732] ? __x64_sys_futex+0x1e9/0x4c0 [ 298.147288][ T8732] ? __pfx___do_sys_listmount+0x10/0x10 [ 298.147343][ T8732] do_syscall_64+0xcd/0x4c0 [ 298.147399][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.147433][ T8732] RIP: 0033:0x7f36d758eba9 [ 298.147459][ T8732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.147494][ T8732] RSP: 002b:00007f36d848f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 298.147525][ T8732] RAX: ffffffffffffffda RBX: 00007f36d77d5fa0 RCX: 00007f36d758eba9 [ 298.147548][ T8732] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 298.147568][ T8732] RBP: 00007f36d7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 298.147588][ T8732] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 298.147607][ T8732] R13: 00007f36d77d6038 R14: 00007f36d77d5fa0 R15: 00007ffe7bc7cff8 [ 298.147650][ T8732] [ 298.583758][ T8745] FAULT_INJECTION: forcing a failure. [ 298.583758][ T8745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.597012][ T8745] CPU: 0 UID: 0 PID: 8745 Comm: syz.0.497 Not tainted syzkaller #0 PREEMPT(full) [ 298.597051][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.597070][ T8745] Call Trace: [ 298.597080][ T8745] [ 298.597092][ T8745] dump_stack_lvl+0x16c/0x1f0 [ 298.597145][ T8745] should_fail_ex+0x512/0x640 [ 298.597199][ T8745] _copy_from_iter+0x29f/0x1720 [ 298.597243][ T8745] ? __pfx__copy_from_iter+0x10/0x10 [ 298.597277][ T8745] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 298.597336][ T8745] copy_page_from_iter+0xde/0x180 [ 298.597377][ T8745] tun_build_skb.constprop.0+0x2e8/0x1500 [ 298.597429][ T8745] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 298.597467][ T8745] ? unwind_get_return_address+0x59/0xa0 [ 298.597501][ T8745] ? arch_stack_walk+0xa6/0x100 [ 298.597540][ T8745] ? __lock_acquire+0x62e/0x1ce0 [ 298.597610][ T8745] tun_get_user+0x14ae/0x3ce0 [ 298.597665][ T8745] ? __pfx_tun_get_user+0x10/0x10 [ 298.597706][ T8745] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 298.597750][ T8745] ? find_held_lock+0x2b/0x80 [ 298.597783][ T8745] ? tun_get+0x191/0x370 [ 298.597834][ T8745] tun_chr_write_iter+0xdc/0x210 [ 298.597872][ T8745] vfs_write+0x7d0/0x11d0 [ 298.597912][ T8745] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 298.597955][ T8745] ? __pfx_vfs_write+0x10/0x10 [ 298.597989][ T8745] ? find_held_lock+0x2b/0x80 [ 298.598048][ T8745] __x64_sys_pwrite64+0x1eb/0x250 [ 298.598091][ T8745] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 298.598145][ T8745] do_syscall_64+0xcd/0x4c0 [ 298.598200][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.598233][ T8745] RIP: 0033:0x7f81a178eba9 [ 298.598258][ T8745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.598289][ T8745] RSP: 002b:00007f81a26d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 298.598318][ T8745] RAX: ffffffffffffffda RBX: 00007f81a19d5fa0 RCX: 00007f81a178eba9 [ 298.598338][ T8745] RDX: 000000000000004c RSI: 0000200000000000 RDI: 00000000000000c8 [ 298.598357][ T8745] RBP: 00007f81a26d1090 R08: 0000000000000000 R09: 0000000000000000 [ 298.598375][ T8745] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 298.598391][ T8745] R13: 00007f81a19d6038 R14: 00007f81a19d5fa0 R15: 00007ffdd316d1a8 [ 298.598431][ T8745] [ 298.941032][ T8732] syz.1.493: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 298.959438][ T8732] CPU: 1 UID: 0 PID: 8732 Comm: syz.1.493 Not tainted syzkaller #0 PREEMPT(full) [ 298.959480][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.959498][ T8732] Call Trace: [ 298.959508][ T8732] [ 298.959518][ T8732] dump_stack_lvl+0x16c/0x1f0 [ 298.959568][ T8732] warn_alloc+0x248/0x3a0 [ 298.959605][ T8732] ? __pfx_warn_alloc+0x10/0x10 [ 298.959640][ T8732] ? kfree+0x2b4/0x4d0 [ 298.959676][ T8732] ? __get_vm_area_node+0x208/0x330 [ 298.959728][ T8732] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 298.959756][ T8732] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.959801][ T8732] ? policy_nodemask+0xea/0x4e0 [ 298.959840][ T8732] ? __do_sys_listmount+0x1c2/0xf80 [ 298.959876][ T8732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.959910][ T8732] ? ___kmalloc_large_node+0xed/0x160 [ 298.959960][ T8732] __kvmalloc_node_noprof+0x30a/0x620 [ 298.959992][ T8732] ? __do_sys_listmount+0x1c2/0xf80 [ 298.960030][ T8732] ? __do_sys_listmount+0x1c2/0xf80 [ 298.960064][ T8732] ? __do_sys_listmount+0x1c2/0xf80 [ 298.960090][ T8732] __do_sys_listmount+0x1c2/0xf80 [ 298.960125][ T8732] ? __x64_sys_futex+0x1e0/0x4c0 [ 298.960160][ T8732] ? __x64_sys_futex+0x1e9/0x4c0 [ 298.960209][ T8732] ? __pfx___do_sys_listmount+0x10/0x10 [ 298.960252][ T8732] do_syscall_64+0xcd/0x4c0 [ 298.960296][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.960324][ T8732] RIP: 0033:0x7f36d758eba9 [ 298.960345][ T8732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.960372][ T8732] RSP: 002b:00007f36d848f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 298.960398][ T8732] RAX: ffffffffffffffda RBX: 00007f36d77d5fa0 RCX: 00007f36d758eba9 [ 298.960417][ T8732] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 298.960435][ T8732] RBP: 00007f36d7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 298.960451][ T8732] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 298.960468][ T8732] R13: 00007f36d77d6038 R14: 00007f36d77d5fa0 R15: 00007ffe7bc7cff8 [ 298.960502][ T8732] [ 298.960512][ T8732] Mem-Info: [ 299.203062][ T8732] active_anon:19006 inactive_anon:7 isolated_anon:0 [ 299.203062][ T8732] active_file:7321 inactive_file:50305 isolated_file:0 [ 299.203062][ T8732] unevictable:768 dirty:388 writeback:0 [ 299.203062][ T8732] slab_reclaimable:11222 slab_unreclaimable:94309 [ 299.203062][ T8732] mapped:26406 shmem:11506 pagetables:1144 [ 299.203062][ T8732] sec_pagetables:0 bounce:0 [ 299.203062][ T8732] kernel_misc_reclaimable:0 [ 299.203062][ T8732] free:1317307 free_pcp:8978 free_cma:0 [ 299.340239][ T8747] __nla_validate_parse: 43 callbacks suppressed [ 299.340295][ T8747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.495'. [ 299.366866][ T8732] Node 0 active_anon:73124kB inactive_anon:28kB active_file:29284kB inactive_file:201088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105624kB dirty:1752kB writeback:0kB shmem:41388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11676kB pagetables:4324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 299.470122][ T8732] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 299.502130][ T8732] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.559519][ T8732] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 299.642381][ T8732] Node 0 DMA32 free:1352128kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:75380kB inactive_anon:28kB active_file:29284kB inactive_file:199776kB unevictable:1536kB writepending:1952kB present:3129332kB managed:2539536kB mlocked:0kB bounce:0kB free_pcp:24504kB local_pcp:3960kB free_cma:0kB [ 299.919049][ T8732] lowmem_reserve[]: 0 0 1 1 1 [ 299.958374][ T8754] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 299.967183][ T8732] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 300.032592][ T8732] lowmem_reserve[]: 0 0 0 0 0 [ 300.162461][ T8732] Node 1 Normal free:3897988kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14424kB local_pcp:6176kB free_cma:0kB [ 300.267476][ T8732] lowmem_reserve[]: 0 0 0 0 0 [ 300.277581][ T8732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 300.306228][ T8732] Node 0 DMA32: 2012*4kB (UME) 1284*8kB (UME) 384*16kB (UME) 469*32kB (UME) 94*64kB (UME) 328*128kB (UME) 155*256kB (UM) 49*512kB (UME) 36*1024kB (UME) 7*2048kB (M) 283*4096kB (UM) = 1362608kB [ 300.326163][ T8732] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 300.338729][ T8732] Node 1 Normal: 185*4kB (UM) 66*8kB (UME) 45*16kB (UME) 152*32kB (UME) 43*64kB (UME) 8*128kB (UME) 3*256kB (M) 1*512kB (M) 5*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3897988kB [ 300.357535][ T8732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.367191][ T8732] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=3 hugepages_size=2048kB [ 300.377165][ T8732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.386830][ T8732] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 300.408932][ T8732] 66579 total pagecache pages [ 300.413742][ T8732] 6 pages in swap cache [ 300.426150][ T8732] Free swap = 124952kB [ 300.430415][ T8732] Total swap = 124996kB [ 300.434750][ T8732] 2097051 pages RAM [ 300.438574][ T8732] 0 pages HighMem/MovableOnly [ 300.479358][ T8732] 430205 pages reserved [ 300.522165][ T8732] 0 pages cma reserved [ 300.822109][ T8764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.500'. [ 303.619814][ T8803] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 303.933445][ T8810] capability: warning: `syz.3.509' uses 32-bit capabilities (legacy support in use) [ 304.575445][ T8817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.511'. [ 305.915001][ T7896] bridge0: port 3(syz_tun) entered disabled state [ 306.048676][ T7896] syz_tun (unregistering): left allmulticast mode [ 306.067268][ T7896] syz_tun (unregistering): left promiscuous mode [ 306.086052][ T7896] bridge0: port 3(syz_tun) entered disabled state [ 306.264786][ T8835] ptrace attach of "./syz-executor exec"[8836] was attempted by "./syz-executor exec"[8835] [ 306.483086][ T8845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.518'. [ 306.784309][ T1096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.072855][ T1096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.296926][ T1096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.675701][ T1096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.499490][ T1096] bridge_slave_1: left allmulticast mode [ 308.505236][ T1096] bridge_slave_1: left promiscuous mode [ 308.519419][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.528392][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.537534][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.547651][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.598642][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.630061][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.724046][ T1096] bridge_slave_0: left allmulticast mode [ 308.733166][ T1096] bridge_slave_0: left promiscuous mode [ 308.740018][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.941008][ T8871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.523'. [ 310.021917][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.060102][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.092538][ T1096] bond0 (unregistering): Released all slaves [ 310.124505][ T8888] ptrace attach of "./syz-executor exec"[8891] was attempted by "./syz-executor exec"[8888] [ 310.719005][ T5869] Bluetooth: hci0: command tx timeout [ 311.326960][ T1096] hsr_slave_0: left promiscuous mode [ 311.362726][ T1096] hsr_slave_1: left promiscuous mode [ 311.439120][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.459084][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.526055][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.534464][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.602094][ T1096] veth1_macvtap: left promiscuous mode [ 311.633122][ T1096] veth0_macvtap: left promiscuous mode [ 311.658563][ T1096] veth1_vlan: left promiscuous mode [ 311.681024][ T1096] veth0_vlan: left promiscuous mode [ 312.711892][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 312.768435][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 312.801535][ T5869] Bluetooth: hci0: command tx timeout [ 313.976948][ T8863] chnl_net:caif_netlink_parms(): no params data found [ 314.347576][ T8940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.531'. [ 314.879317][ T5869] Bluetooth: hci0: command tx timeout [ 315.310991][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.329056][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.399161][ T8863] bridge_slave_0: entered allmulticast mode [ 315.433970][ T8863] bridge_slave_0: entered promiscuous mode [ 315.456252][ T8863] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.520946][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.528294][ T8863] bridge_slave_1: entered allmulticast mode [ 315.569053][ T8863] bridge_slave_1: entered promiscuous mode [ 315.579256][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.535'. [ 315.844126][ T8863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.856195][ T8863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.330067][ T8863] team0: Port device team_slave_0 added [ 316.354323][ T8863] team0: Port device team_slave_1 added [ 316.650745][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.657717][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.730872][ T8863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.783490][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.818934][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.969003][ T5869] Bluetooth: hci0: command tx timeout [ 317.001670][ T8863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.677972][ T8863] hsr_slave_0: entered promiscuous mode [ 317.686837][ T8863] hsr_slave_1: entered promiscuous mode [ 317.719807][ T8863] debugfs: 'hsr0' already exists in 'hsr' [ 317.725598][ T8863] Cannot create hsr debugfs directory [ 319.897361][ T8863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 320.032877][ T8863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 320.126262][ T8863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 320.176741][ T8863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 320.238970][ T5869] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 320.322212][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.543'. [ 320.897423][ T8863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.335714][ T8863] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.395082][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.402440][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.621714][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.628971][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.247196][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.253667][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.823413][ T8863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.095252][ T8863] veth0_vlan: entered promiscuous mode [ 323.164336][ T8863] veth1_vlan: entered promiscuous mode [ 323.306915][ T8863] veth0_macvtap: entered promiscuous mode [ 323.431153][ T8863] veth1_macvtap: entered promiscuous mode [ 323.543831][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.595914][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.817308][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.912083][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.977167][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.997629][ T9098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 324.186840][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.758202][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.807029][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.258995][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.304987][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.367656][ T9097] Process accounting resumed [ 327.813919][ T9161] FAULT_INJECTION: forcing a failure. [ 327.813919][ T9161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.851474][ T9161] CPU: 0 UID: 0 PID: 9161 Comm: syz.1.560 Not tainted syzkaller #0 PREEMPT(full) [ 327.851510][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 327.851527][ T9161] Call Trace: [ 327.851538][ T9161] [ 327.851550][ T9161] dump_stack_lvl+0x16c/0x1f0 [ 327.851604][ T9161] should_fail_ex+0x512/0x640 [ 327.851668][ T9161] should_fail_alloc_page+0xe7/0x130 [ 327.851709][ T9161] prepare_alloc_pages+0x3c2/0x610 [ 327.851750][ T9161] ? unwind_get_return_address+0x59/0xa0 [ 327.851785][ T9161] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 327.851823][ T9161] ? look_up_lock_class+0x59/0x150 [ 327.851885][ T9161] ? register_lock_class+0x41/0x4c0 [ 327.851929][ T9161] ? stack_trace_save+0x8e/0xc0 [ 327.851969][ T9161] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 327.852021][ T9161] ? __mutex_trylock_common+0xe9/0x250 [ 327.852064][ T9161] ? __pfx___mutex_trylock_common+0x10/0x10 [ 327.852109][ T9161] ? __pfx___might_resched+0x10/0x10 [ 327.852145][ T9161] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 327.852194][ T9161] ? policy_nodemask+0xea/0x4e0 [ 327.852237][ T9161] alloc_pages_mpol+0x1fb/0x550 [ 327.852278][ T9161] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 327.852317][ T9161] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 327.852372][ T9161] ? ops_init+0x77/0x5f0 [ 327.852397][ T9161] ___kmalloc_large_node+0xed/0x160 [ 327.852448][ T9161] ? ops_init+0x77/0x5f0 [ 327.852471][ T9161] __kmalloc_large_node_noprof+0x1c/0x70 [ 327.852522][ T9161] __kmalloc_noprof.cold+0xc/0x61 [ 327.852565][ T9161] ? __pfx_nfs4blocklayout_net_init+0x10/0x10 [ 327.852602][ T9161] ? rpc_get_sb_net+0x9c/0xc0 [ 327.852639][ T9161] ops_init+0x77/0x5f0 [ 327.852669][ T9161] setup_net+0x10f/0x380 [ 327.852693][ T9161] ? lockdep_init_map_type+0x5c/0x280 [ 327.852737][ T9161] ? __pfx_setup_net+0x10/0x10 [ 327.852765][ T9161] ? debug_mutex_init+0x37/0x70 [ 327.852800][ T9161] copy_net_ns+0x2a6/0x5f0 [ 327.852836][ T9161] create_new_namespaces+0x3ea/0xa90 [ 327.852897][ T9161] copy_namespaces+0x468/0x560 [ 327.852937][ T9161] copy_process+0x2822/0x7690 [ 327.852998][ T9161] ? __pfx_copy_process+0x10/0x10 [ 327.853039][ T9161] ? futex_private_hash_put+0x176/0x300 [ 327.853085][ T9161] ? futex_private_hash_put+0x18a/0x300 [ 327.853137][ T9161] kernel_clone+0xfc/0x930 [ 327.853179][ T9161] ? __pfx_futex_wake+0x10/0x10 [ 327.853225][ T9161] ? __pfx_kernel_clone+0x10/0x10 [ 327.853291][ T9161] __do_sys_clone+0xce/0x120 [ 327.853333][ T9161] ? __pfx___do_sys_clone+0x10/0x10 [ 327.853413][ T9161] ? xfd_validate_state+0x61/0x180 [ 327.853478][ T9161] do_syscall_64+0xcd/0x4c0 [ 327.853533][ T9161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.853579][ T9161] RIP: 0033:0x7f36d758eba9 [ 327.853605][ T9161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.853638][ T9161] RSP: 002b:00007f36d848efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 327.853667][ T9161] RAX: ffffffffffffffda RBX: 00007f36d77d5fa0 RCX: 00007f36d758eba9 [ 327.853687][ T9161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060820000 [ 327.853729][ T9161] RBP: 00007f36d7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 327.853749][ T9161] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 327.853769][ T9161] R13: 00007f36d77d6038 R14: 00007f36d77d5fa0 R15: 00007ffe7bc7cff8 [ 327.853813][ T9161] [ 328.246190][ T9177] FAULT_INJECTION: forcing a failure. [ 328.246190][ T9177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.261929][ T9177] CPU: 0 UID: 0 PID: 9177 Comm: syz.3.565 Not tainted syzkaller #0 PREEMPT(full) [ 328.261966][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 328.261985][ T9177] Call Trace: [ 328.261995][ T9177] [ 328.262006][ T9177] dump_stack_lvl+0x16c/0x1f0 [ 328.262059][ T9177] should_fail_ex+0x512/0x640 [ 328.262161][ T9177] _copy_to_user+0x32/0xd0 [ 328.262199][ T9177] simple_read_from_buffer+0xcb/0x170 [ 328.262236][ T9177] proc_fail_nth_read+0x197/0x240 [ 328.262273][ T9177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.262311][ T9177] ? rw_verify_area+0xcf/0x6c0 [ 328.262344][ T9177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.262379][ T9177] vfs_read+0x1e4/0xcf0 [ 328.262422][ T9177] ? __pfx___mutex_lock+0x10/0x10 [ 328.262473][ T9177] ? __pfx_vfs_read+0x10/0x10 [ 328.262521][ T9177] ? __fget_files+0x20e/0x3c0 [ 328.262569][ T9177] ksys_read+0x12a/0x250 [ 328.262605][ T9177] ? __pfx_ksys_read+0x10/0x10 [ 328.262655][ T9177] do_syscall_64+0xcd/0x4c0 [ 328.262707][ T9177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.262740][ T9177] RIP: 0033:0x7efcff38d5bc [ 328.262766][ T9177] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 328.262797][ T9177] RSP: 002b:00007efd001db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.262826][ T9177] RAX: ffffffffffffffda RBX: 00007efcff5d5fa0 RCX: 00007efcff38d5bc [ 328.262847][ T9177] RDX: 000000000000000f RSI: 00007efd001db0a0 RDI: 0000000000000003 [ 328.262865][ T9177] RBP: 00007efd001db090 R08: 0000000000000000 R09: 0000000000000000 [ 328.262883][ T9177] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 328.262901][ T9177] R13: 00007efcff5d6038 R14: 00007efcff5d5fa0 R15: 00007ffe259e8668 [ 328.262943][ T9177] [ 328.505512][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.563'. [ 328.765185][ T9184] netlink: 86 bytes leftover after parsing attributes in process `syz.1.567'. [ 330.023299][ T9205] bridge0: port 3(syz_tun) entered blocking state [ 330.030123][ T9205] bridge0: port 3(syz_tun) entered disabled state [ 330.036787][ T9205] syz_tun: entered allmulticast mode [ 330.099865][ T9205] syz_tun: entered promiscuous mode [ 330.130615][ T9205] bridge0: port 3(syz_tun) entered blocking state [ 330.137179][ T9205] bridge0: port 3(syz_tun) entered forwarding state [ 331.189260][ T9222] CIFS: VFS: Invalid SecurityFlags: [ 332.467137][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.579'. [ 332.636779][ T9243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.578'. [ 336.722683][ T9305] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 337.746727][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.595'. [ 338.894843][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.598'. [ 338.914350][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.598'. [ 341.296737][ T9367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'. [ 342.800409][ T9384] sp0: Synchronizing with TNC [ 343.826907][ T9400] FAULT_INJECTION: forcing a failure. [ 343.826907][ T9400] name failslab, interval 1, probability 0, space 0, times 0 [ 343.917905][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.3.614 Not tainted syzkaller #0 PREEMPT(full) [ 343.917937][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.917958][ T9400] Call Trace: [ 343.917965][ T9400] [ 343.917974][ T9400] dump_stack_lvl+0x16c/0x1f0 [ 343.918015][ T9400] should_fail_ex+0x512/0x640 [ 343.918053][ T9400] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 343.918085][ T9400] should_failslab+0xc2/0x120 [ 343.918117][ T9400] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 343.918159][ T9400] ? alloc_vfsmnt+0x23/0x6b0 [ 343.918196][ T9400] alloc_vfsmnt+0x23/0x6b0 [ 343.918229][ T9400] clone_mnt+0x6d/0xbf0 [ 343.918247][ T9400] ? copy_mnt_ns+0x1a9/0xac0 [ 343.918280][ T9400] copy_tree+0x31d/0xbd0 [ 343.918314][ T9400] copy_mnt_ns+0x1a9/0xac0 [ 343.918341][ T9400] ? trace_kmem_cache_alloc+0x28/0xc0 [ 343.918378][ T9400] ? create_new_namespaces+0x30/0xa90 [ 343.918410][ T9400] create_new_namespaces+0xd3/0xa90 [ 343.918435][ T9400] ? bpf_lsm_capable+0x9/0x10 [ 343.918456][ T9400] ? security_capable+0x7e/0x260 [ 343.918483][ T9400] copy_namespaces+0x468/0x560 [ 343.918511][ T9400] copy_process+0x2822/0x7690 [ 343.918554][ T9400] ? __pfx_copy_process+0x10/0x10 [ 343.918583][ T9400] ? futex_private_hash_put+0x176/0x300 [ 343.918615][ T9400] ? futex_private_hash_put+0x18a/0x300 [ 343.918648][ T9400] kernel_clone+0xfc/0x930 [ 343.918677][ T9400] ? __pfx_futex_wake+0x10/0x10 [ 343.918712][ T9400] ? __pfx_kernel_clone+0x10/0x10 [ 343.918758][ T9400] __do_sys_clone+0xce/0x120 [ 343.918788][ T9400] ? __pfx___do_sys_clone+0x10/0x10 [ 343.918851][ T9400] ? xfd_validate_state+0x61/0x180 [ 343.918902][ T9400] do_syscall_64+0xcd/0x4c0 [ 343.918945][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.918968][ T9400] RIP: 0033:0x7efcff38eba9 [ 343.918985][ T9400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.919006][ T9400] RSP: 002b:00007efd001dafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 343.919026][ T9400] RAX: ffffffffffffffda RBX: 00007efcff5d5fa0 RCX: 00007efcff38eba9 [ 343.919041][ T9400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060820000 [ 343.919053][ T9400] RBP: 00007efcff411e19 R08: 0000000000000000 R09: 0000000000000000 [ 343.919066][ T9400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 343.919079][ T9400] R13: 00007efcff5d6038 R14: 00007efcff5d5fa0 R15: 00007ffe259e8668 [ 343.919107][ T9400] [ 344.867439][ T9418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.617'. [ 346.147755][ T9428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.621'. [ 346.196320][ T9428] team0: entered promiscuous mode [ 346.235112][ T9428] team_slave_0: entered promiscuous mode [ 346.241436][ T9428] team_slave_1: entered promiscuous mode [ 346.271446][ T9428] team0: entered allmulticast mode [ 346.287969][ T9428] team_slave_0: entered allmulticast mode [ 346.316566][ T9428] team_slave_1: entered allmulticast mode [ 347.733902][ T9456] FAULT_INJECTION: forcing a failure. [ 347.733902][ T9456] name failslab, interval 1, probability 0, space 0, times 0 [ 347.775633][ T9456] CPU: 1 UID: 0 PID: 9456 Comm: syz.2.630 Not tainted syzkaller #0 PREEMPT(full) [ 347.775680][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.775701][ T9456] Call Trace: [ 347.775712][ T9456] [ 347.775725][ T9456] dump_stack_lvl+0x16c/0x1f0 [ 347.775783][ T9456] should_fail_ex+0x512/0x640 [ 347.775836][ T9456] ? fs_reclaim_acquire+0xae/0x150 [ 347.775891][ T9456] should_failslab+0xc2/0x120 [ 347.775937][ T9456] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 347.775981][ T9456] ? __kernfs_new_node+0xd2/0x8e0 [ 347.776030][ T9456] __kernfs_new_node+0xd2/0x8e0 [ 347.776079][ T9456] ? __pfx___kernfs_new_node+0x10/0x10 [ 347.776134][ T9456] ? find_held_lock+0x2b/0x80 [ 347.776170][ T9456] ? kernfs_root+0xee/0x2a0 [ 347.776222][ T9456] kernfs_new_node+0x13c/0x1e0 [ 347.776279][ T9456] kernfs_create_dir_ns+0x4c/0x1a0 [ 347.776347][ T9456] internal_create_group+0x34d/0xf30 [ 347.776408][ T9456] ? __pfx_internal_create_group+0x10/0x10 [ 347.776462][ T9456] ? kernfs_create_link+0x1bd/0x240 [ 347.776504][ T9456] internal_create_groups+0x9d/0x150 [ 347.776553][ T9456] device_add+0x731/0x1aa0 [ 347.776601][ T9456] ? __pfx_device_add+0x10/0x10 [ 347.776636][ T9456] ? __pfx___might_resched+0x10/0x10 [ 347.776670][ T9456] ? is_dynamic_key+0xb4/0x160 [ 347.776730][ T9456] __add_disk+0x457/0xf00 [ 347.776790][ T9456] add_disk_fwnode+0x13f/0x5d0 [ 347.776848][ T9456] nbd_dev_add+0x783/0xbb0 [ 347.776904][ T9456] ? __pfx_nbd_dev_add+0x10/0x10 [ 347.776982][ T9456] ? bpf_lsm_capable+0x9/0x10 [ 347.777014][ T9456] ? __radix_tree_lookup+0x21f/0x2c0 [ 347.777070][ T9456] nbd_genl_connect+0x8b0/0x1c60 [ 347.777114][ T9456] ? __pfx_nbd_genl_connect+0x10/0x10 [ 347.777148][ T9456] ? __nla_parse+0x40/0x60 [ 347.777193][ T9456] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 347.777233][ T9456] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 347.777283][ T9456] genl_family_rcv_msg_doit+0x206/0x2f0 [ 347.777322][ T9456] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 347.777361][ T9456] ? genl_get_cmd+0x194/0x580 [ 347.777408][ T9456] ? __radix_tree_lookup+0x21f/0x2c0 [ 347.777463][ T9456] genl_rcv_msg+0x55c/0x800 [ 347.777505][ T9456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.777549][ T9456] ? __pfx_nbd_genl_connect+0x10/0x10 [ 347.777603][ T9456] netlink_rcv_skb+0x155/0x420 [ 347.777656][ T9456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.777693][ T9456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.777765][ T9456] ? netlink_deliver_tap+0x1ae/0xd30 [ 347.777824][ T9456] genl_rcv+0x28/0x40 [ 347.777853][ T9456] netlink_unicast+0x5aa/0x870 [ 347.777913][ T9456] ? __pfx_netlink_unicast+0x10/0x10 [ 347.777967][ T9456] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 347.778016][ T9456] ? __lock_acquire+0xb97/0x1ce0 [ 347.778073][ T9456] netlink_sendmsg+0x8d1/0xdd0 [ 347.778130][ T9456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.778189][ T9456] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 347.778232][ T9456] ____sys_sendmsg+0xa95/0xc70 [ 347.778273][ T9456] ? copy_msghdr_from_user+0x10a/0x160 [ 347.778325][ T9456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.778375][ T9456] ? __pfx_futex_wake_mark+0x10/0x10 [ 347.778433][ T9456] ___sys_sendmsg+0x134/0x1d0 [ 347.778487][ T9456] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.778605][ T9456] __sys_sendmsg+0x16d/0x220 [ 347.778660][ T9456] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.778712][ T9456] ? __x64_sys_futex+0x1e0/0x4c0 [ 347.778784][ T9456] do_syscall_64+0xcd/0x4c0 [ 347.778844][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.778876][ T9456] RIP: 0033:0x7f1ed0f8eba9 [ 347.778902][ T9456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.778936][ T9456] RSP: 002b:00007f1ed1eec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.778969][ T9456] RAX: ffffffffffffffda RBX: 00007f1ed11d5fa0 RCX: 00007f1ed0f8eba9 [ 347.778990][ T9456] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 347.779010][ T9456] RBP: 00007f1ed1011e19 R08: 0000000000000000 R09: 0000000000000000 [ 347.779029][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.779048][ T9456] R13: 00007f1ed11d6038 R14: 00007f1ed11d5fa0 R15: 00007ffecaeae708 [ 347.779092][ T9456] [ 348.412160][ T9456] nbd: failed to add new device [ 348.701834][ T9456] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 348.772081][ T9467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.629'. [ 350.246915][ T9489] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 352.273436][ T9520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.645'. [ 353.126357][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.649'. [ 354.001365][ T9537] FAULT_INJECTION: forcing a failure. [ 354.001365][ T9537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.062391][ T9537] CPU: 1 UID: 0 PID: 9537 Comm: syz.3.651 Not tainted syzkaller #0 PREEMPT(full) [ 354.062434][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.062452][ T9537] Call Trace: [ 354.062462][ T9537] [ 354.062474][ T9537] dump_stack_lvl+0x16c/0x1f0 [ 354.062528][ T9537] should_fail_ex+0x512/0x640 [ 354.062584][ T9537] should_fail_alloc_page+0xe7/0x130 [ 354.062632][ T9537] prepare_alloc_pages+0x3c2/0x610 [ 354.062679][ T9537] ? unwind_get_return_address+0x59/0xa0 [ 354.062718][ T9537] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 354.062771][ T9537] ? look_up_lock_class+0x59/0x150 [ 354.062824][ T9537] ? register_lock_class+0x41/0x4c0 [ 354.062869][ T9537] ? stack_trace_save+0x8e/0xc0 [ 354.062911][ T9537] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 354.062951][ T9537] ? __mutex_trylock_common+0xe9/0x250 [ 354.062984][ T9537] ? __pfx___mutex_trylock_common+0x10/0x10 [ 354.063017][ T9537] ? __pfx___might_resched+0x10/0x10 [ 354.063041][ T9537] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 354.063078][ T9537] ? policy_nodemask+0xea/0x4e0 [ 354.063111][ T9537] alloc_pages_mpol+0x1fb/0x550 [ 354.063143][ T9537] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 354.063173][ T9537] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 354.063215][ T9537] ? ops_init+0x77/0x5f0 [ 354.063233][ T9537] ___kmalloc_large_node+0xed/0x160 [ 354.063271][ T9537] ? ops_init+0x77/0x5f0 [ 354.063287][ T9537] __kmalloc_large_node_noprof+0x1c/0x70 [ 354.063324][ T9537] __kmalloc_noprof.cold+0xc/0x61 [ 354.063356][ T9537] ? __pfx_nfs4blocklayout_net_init+0x10/0x10 [ 354.063383][ T9537] ? rpc_get_sb_net+0x9c/0xc0 [ 354.063411][ T9537] ops_init+0x77/0x5f0 [ 354.063432][ T9537] setup_net+0x10f/0x380 [ 354.063450][ T9537] ? lockdep_init_map_type+0x5c/0x280 [ 354.063481][ T9537] ? __pfx_setup_net+0x10/0x10 [ 354.063501][ T9537] ? debug_mutex_init+0x37/0x70 [ 354.063526][ T9537] copy_net_ns+0x2a6/0x5f0 [ 354.063552][ T9537] create_new_namespaces+0x3ea/0xa90 [ 354.063601][ T9537] copy_namespaces+0x468/0x560 [ 354.063630][ T9537] copy_process+0x2822/0x7690 [ 354.063674][ T9537] ? __pfx_copy_process+0x10/0x10 [ 354.063703][ T9537] ? futex_private_hash_put+0x176/0x300 [ 354.063741][ T9537] ? futex_private_hash_put+0x18a/0x300 [ 354.063775][ T9537] kernel_clone+0xfc/0x930 [ 354.063807][ T9537] ? __pfx_futex_wake+0x10/0x10 [ 354.063841][ T9537] ? __pfx_kernel_clone+0x10/0x10 [ 354.063889][ T9537] __do_sys_clone+0xce/0x120 [ 354.063920][ T9537] ? __pfx___do_sys_clone+0x10/0x10 [ 354.063965][ T9537] ? xfd_validate_state+0x61/0x180 [ 354.064011][ T9537] do_syscall_64+0xcd/0x4c0 [ 354.064050][ T9537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.064073][ T9537] RIP: 0033:0x7efcff38eba9 [ 354.064090][ T9537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.064125][ T9537] RSP: 002b:00007efd001dafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 354.064147][ T9537] RAX: ffffffffffffffda RBX: 00007efcff5d5fa0 RCX: 00007efcff38eba9 [ 354.064163][ T9537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060820000 [ 354.064176][ T9537] RBP: 00007efcff411e19 R08: 0000000000000000 R09: 0000000000000000 [ 354.064190][ T9537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 354.064203][ T9537] R13: 00007efcff5d6038 R14: 00007efcff5d5fa0 R15: 00007ffe259e8668 [ 354.064231][ T9537] [ 354.604043][ T9549] program syz.0.655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.376422][ T9557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.656'. [ 355.554392][ T9564] net_ratelimit: 19 callbacks suppressed [ 355.554427][ T9564] netlink: zone id is out of range [ 355.609881][ T9564] netlink: zone id is out of range [ 355.615060][ T9564] netlink: zone id is out of range [ 355.711305][ T9564] netlink: zone id is out of range [ 355.770841][ T9564] netlink: zone id is out of range [ 355.776024][ T9564] netlink: zone id is out of range [ 355.846412][ T9564] netlink: zone id is out of range [ 355.871644][ T9564] netlink: zone id is out of range [ 355.887066][ T9564] netlink: zone id is out of range [ 355.895027][ T9564] netlink: zone id is out of range [ 356.842266][ T9567] Process accounting paused [ 357.575105][ T9594] FAULT_INJECTION: forcing a failure. [ 357.575105][ T9594] name failslab, interval 1, probability 0, space 0, times 0 [ 357.666956][ T9594] CPU: 1 UID: 0 PID: 9594 Comm: syz.1.665 Not tainted syzkaller #0 PREEMPT(full) [ 357.667005][ T9594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.667020][ T9594] Call Trace: [ 357.667046][ T9594] [ 357.667055][ T9594] dump_stack_lvl+0x16c/0x1f0 [ 357.667097][ T9594] should_fail_ex+0x512/0x640 [ 357.667135][ T9594] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 357.667168][ T9594] should_failslab+0xc2/0x120 [ 357.667201][ T9594] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 357.667230][ T9594] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 357.667266][ T9594] ? __d_alloc+0x32/0xae0 [ 357.667301][ T9594] __d_alloc+0x32/0xae0 [ 357.667334][ T9594] d_alloc_pseudo+0x1c/0xc0 [ 357.667372][ T9594] alloc_file_pseudo+0xcf/0x230 [ 357.667411][ T9594] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 357.667463][ T9594] ioctx_alloc+0x5ab/0x2120 [ 357.667502][ T9594] ? find_held_lock+0x2b/0x80 [ 357.667527][ T9594] ? __pfx_ioctx_alloc+0x10/0x10 [ 357.667552][ T9594] ? __might_fault+0x13b/0x190 [ 357.667588][ T9594] __x64_sys_io_setup+0xc9/0x210 [ 357.667618][ T9594] do_syscall_64+0xcd/0x4c0 [ 357.667657][ T9594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.667682][ T9594] RIP: 0033:0x7f36d758eba9 [ 357.667701][ T9594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.667733][ T9594] RSP: 002b:00007f36d848f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 357.667755][ T9594] RAX: ffffffffffffffda RBX: 00007f36d77d5fa0 RCX: 00007f36d758eba9 [ 357.667771][ T9594] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 357.667785][ T9594] RBP: 00007f36d7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 357.667799][ T9594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.667813][ T9594] R13: 00007f36d77d6038 R14: 00007f36d77d5fa0 R15: 00007ffe7bc7cff8 [ 357.667843][ T9594] [ 360.492258][ T9626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.670'. [ 362.109334][ T9652] FAULT_INJECTION: forcing a failure. [ 362.109334][ T9652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.153367][ T9652] CPU: 1 UID: 0 PID: 9652 Comm: syz.1.677 Not tainted syzkaller #0 PREEMPT(full) [ 362.153398][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 362.153411][ T9652] Call Trace: [ 362.153419][ T9652] [ 362.153427][ T9652] dump_stack_lvl+0x16c/0x1f0 [ 362.153485][ T9652] should_fail_ex+0x512/0x640 [ 362.153525][ T9652] _copy_from_user+0x2e/0xd0 [ 362.153551][ T9652] copy_msghdr_from_user+0x98/0x160 [ 362.153588][ T9652] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 362.153636][ T9652] ___sys_sendmsg+0xfe/0x1d0 [ 362.153672][ T9652] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.153742][ T9652] __sys_sendmsg+0x16d/0x220 [ 362.153777][ T9652] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.153842][ T9652] do_syscall_64+0xcd/0x4c0 [ 362.153896][ T9652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.153928][ T9652] RIP: 0033:0x7f36d758eba9 [ 362.153951][ T9652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.153983][ T9652] RSP: 002b:00007f36d848f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.154018][ T9652] RAX: ffffffffffffffda RBX: 00007f36d77d5fa0 RCX: 00007f36d758eba9 [ 362.154039][ T9652] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 362.154057][ T9652] RBP: 00007f36d848f090 R08: 0000000000000000 R09: 0000000000000000 [ 362.154075][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.154092][ T9652] R13: 00007f36d77d6038 R14: 00007f36d77d5fa0 R15: 00007ffe7bc7cff8 [ 362.154131][ T9652] [ 363.262149][ T9671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.681'. [ 364.843087][ T9687] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 365.364031][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 365.580863][ T9691] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 366.631993][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 366.660767][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 368.810646][ T9741] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.7.3162), cmd(2) [ 369.174964][ T9756] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2]. [ 369.293630][ T9754] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1919116591.1718907001), cmd(16) [ 370.389198][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.707'. [ 372.235023][ T9397] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 373.378298][ T9801] ptrace attach of "./syz-executor exec"[9805] was attempted by "./syz-executor exec"[9801] [ 373.527784][ T9806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.714'. [ 377.562780][ T9855] delete_channel: no stack [ 379.738690][ T9895] ptrace attach of ""[9900] was attempted by "./syz-executor exec"[9895] [ 383.175742][ T9952] FAULT_INJECTION: forcing a failure. [ 383.175742][ T9952] name failslab, interval 1, probability 0, space 0, times 0 [ 383.224500][ T9952] CPU: 0 UID: 0 PID: 9952 Comm: syz.2.742 Not tainted syzkaller #0 PREEMPT(full) [ 383.224532][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.224546][ T9952] Call Trace: [ 383.224553][ T9952] [ 383.224562][ T9952] dump_stack_lvl+0x16c/0x1f0 [ 383.224602][ T9952] should_fail_ex+0x512/0x640 [ 383.224638][ T9952] ? fs_reclaim_acquire+0xae/0x150 [ 383.224676][ T9952] should_failslab+0xc2/0x120 [ 383.224707][ T9952] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 383.224736][ T9952] ? __kernfs_new_node+0xd2/0x8e0 [ 383.224769][ T9952] __kernfs_new_node+0xd2/0x8e0 [ 383.224802][ T9952] ? __pfx___kernfs_new_node+0x10/0x10 [ 383.224840][ T9952] ? find_held_lock+0x2b/0x80 [ 383.224864][ T9952] ? kernfs_root+0xee/0x2a0 [ 383.224898][ T9952] kernfs_new_node+0x13c/0x1e0 [ 383.224937][ T9952] __kernfs_create_file+0x53/0x350 [ 383.224972][ T9952] sysfs_add_file_mode_ns+0x207/0x3c0 [ 383.225011][ T9952] internal_create_group+0x578/0xf30 [ 383.225050][ T9952] ? __pfx_internal_create_group+0x10/0x10 [ 383.225086][ T9952] ? kernfs_create_link+0x1bd/0x240 [ 383.225121][ T9952] internal_create_groups+0x9d/0x150 [ 383.225155][ T9952] device_add+0x731/0x1aa0 [ 383.225183][ T9952] ? __pfx_device_add+0x10/0x10 [ 383.225206][ T9952] ? __pfx___might_resched+0x10/0x10 [ 383.225230][ T9952] ? is_dynamic_key+0xb4/0x160 [ 383.225270][ T9952] __add_disk+0x457/0xf00 [ 383.225311][ T9952] add_disk_fwnode+0x13f/0x5d0 [ 383.225349][ T9952] nbd_dev_add+0x783/0xbb0 [ 383.225387][ T9952] ? __pfx_nbd_dev_add+0x10/0x10 [ 383.225441][ T9952] ? bpf_lsm_capable+0x9/0x10 [ 383.225464][ T9952] ? __radix_tree_lookup+0x21f/0x2c0 [ 383.225502][ T9952] nbd_genl_connect+0x8b0/0x1c60 [ 383.225530][ T9952] ? __pfx_nbd_genl_connect+0x10/0x10 [ 383.225553][ T9952] ? __nla_parse+0x40/0x60 [ 383.225582][ T9952] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 383.225610][ T9952] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 383.225643][ T9952] genl_family_rcv_msg_doit+0x206/0x2f0 [ 383.225670][ T9952] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 383.225695][ T9952] ? genl_get_cmd+0x194/0x580 [ 383.225726][ T9952] ? __radix_tree_lookup+0x21f/0x2c0 [ 383.225768][ T9952] genl_rcv_msg+0x55c/0x800 [ 383.225796][ T9952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.225821][ T9952] ? __pfx_nbd_genl_connect+0x10/0x10 [ 383.225855][ T9952] netlink_rcv_skb+0x155/0x420 [ 383.225910][ T9952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.225937][ T9952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.225989][ T9952] ? netlink_deliver_tap+0x1ae/0xd30 [ 383.226030][ T9952] genl_rcv+0x28/0x40 [ 383.226052][ T9952] netlink_unicast+0x5aa/0x870 [ 383.226094][ T9952] ? __pfx_netlink_unicast+0x10/0x10 [ 383.226142][ T9952] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 383.226178][ T9952] ? __lock_acquire+0xb97/0x1ce0 [ 383.226218][ T9952] netlink_sendmsg+0x8d1/0xdd0 [ 383.226262][ T9952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.226309][ T9952] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 383.226341][ T9952] ____sys_sendmsg+0xa95/0xc70 [ 383.226370][ T9952] ? copy_msghdr_from_user+0x10a/0x160 [ 383.226406][ T9952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.226441][ T9952] ? __pfx_futex_wake_mark+0x10/0x10 [ 383.226482][ T9952] ___sys_sendmsg+0x134/0x1d0 [ 383.226520][ T9952] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.226607][ T9952] __sys_sendmsg+0x16d/0x220 [ 383.226645][ T9952] ? __pfx___sys_sendmsg+0x10/0x10 [ 383.226681][ T9952] ? __x64_sys_futex+0x1e0/0x4c0 [ 383.226731][ T9952] do_syscall_64+0xcd/0x4c0 [ 383.226770][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.226798][ T9952] RIP: 0033:0x7f1ed0f8eba9 [ 383.226817][ T9952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.226841][ T9952] RSP: 002b:00007f1ed1eec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.226867][ T9952] RAX: ffffffffffffffda RBX: 00007f1ed11d5fa0 RCX: 00007f1ed0f8eba9 [ 383.226882][ T9952] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 383.226897][ T9952] RBP: 00007f1ed1011e19 R08: 0000000000000000 R09: 0000000000000000 [ 383.226911][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.226925][ T9952] R13: 00007f1ed11d6038 R14: 00007f1ed11d5fa0 R15: 00007ffecaeae708 [ 383.226956][ T9952] [ 383.686864][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.693364][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.699316][ T9952] nbd: failed to add new device [ 383.821086][ T9952] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 384.916854][ T9985] netlink: 330 bytes leftover after parsing attributes in process `syz.2.755'. [ 385.165531][ T9985] veth1_macvtap: left promiscuous mode [ 385.208998][ T9985] macsec0: entered promiscuous mode [ 385.349292][ T9985] macsec0: entered allmulticast mode [ 388.271904][ T9984] Process accounting resumed [ 391.196036][T10048] zswap: compressor not available [ 391.645504][T10061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 391.655291][T10061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.700291][T10061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.773987][T10061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.833261][T10061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 392.003013][T10068] FAULT_INJECTION: forcing a failure. [ 392.003013][T10068] name failslab, interval 1, probability 0, space 0, times 0 [ 392.027608][T10068] CPU: 0 UID: 0 PID: 10068 Comm: syz.3.763 Not tainted syzkaller #0 PREEMPT(full) [ 392.027641][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.027655][T10068] Call Trace: [ 392.027662][T10068] [ 392.027671][T10068] dump_stack_lvl+0x16c/0x1f0 [ 392.027712][T10068] should_fail_ex+0x512/0x640 [ 392.027748][T10068] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 392.027783][T10068] should_failslab+0xc2/0x120 [ 392.027813][T10068] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 392.027844][T10068] ? kstrdup_const+0x63/0x80 [ 392.027877][T10068] kstrdup+0x53/0x100 [ 392.027905][T10068] kstrdup_const+0x63/0x80 [ 392.027932][T10068] alloc_vfsmnt+0xea/0x6b0 [ 392.027965][T10068] clone_mnt+0x6d/0xbf0 [ 392.027986][T10068] ? is_subdir+0x1a8/0x3e0 [ 392.028019][T10068] copy_tree+0x31d/0xbd0 [ 392.028053][T10068] copy_mnt_ns+0x1a9/0xac0 [ 392.028080][T10068] ? trace_kmem_cache_alloc+0x28/0xc0 [ 392.028117][T10068] ? create_new_namespaces+0x30/0xa90 [ 392.028148][T10068] create_new_namespaces+0xd3/0xa90 [ 392.028173][T10068] ? bpf_lsm_capable+0x9/0x10 [ 392.028194][T10068] ? security_capable+0x7e/0x260 [ 392.028234][T10068] copy_namespaces+0x468/0x560 [ 392.028262][T10068] copy_process+0x2822/0x7690 [ 392.028316][T10068] ? __pfx_copy_process+0x10/0x10 [ 392.028343][T10068] ? futex_private_hash_put+0x176/0x300 [ 392.028373][T10068] ? futex_private_hash_put+0x18a/0x300 [ 392.028403][T10068] kernel_clone+0xfc/0x930 [ 392.028432][T10068] ? __pfx_kernel_clone+0x10/0x10 [ 392.028476][T10068] __do_sys_clone+0xce/0x120 [ 392.028503][T10068] ? __pfx___do_sys_clone+0x10/0x10 [ 392.028551][T10068] ? xfd_validate_state+0x61/0x180 [ 392.028593][T10068] do_syscall_64+0xcd/0x4c0 [ 392.028628][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.028649][T10068] RIP: 0033:0x7efcff38eba9 [ 392.028665][T10068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.028684][T10068] RSP: 002b:00007efd001dafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 392.028714][T10068] RAX: ffffffffffffffda RBX: 00007efcff5d5fa0 RCX: 00007efcff38eba9 [ 392.028727][T10068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060820000 [ 392.028739][T10068] RBP: 00007efcff411e19 R08: 0000000000000000 R09: 0000000000000000 [ 392.028752][T10068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 392.028763][T10068] R13: 00007efcff5d6038 R14: 00007efcff5d5fa0 R15: 00007ffe259e8668 [ 392.028798][T10068] [ 392.606522][T10061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 393.688601][ T9397] Bluetooth: hci1: command 0x0c1a tx timeout [ 393.694777][ T9397] Bluetooth: hci2: command 0x0c1a tx timeout [ 393.758923][T10097] Bluetooth: hci3: command 0x0c1a tx timeout [ 393.765771][T10090] ptrace attach of "./syz-executor exec"[10093] was attempted by "./syz-executor exec"[10090] [ 393.839050][T10097] Bluetooth: hci0: command 0x0c1a tx timeout [ 395.919055][T10097] Bluetooth: hci0: command 0x0c1a tx timeout [ 396.529114][T10134] Ignoring unsupported numa_zonelist_order value: [ 396.529114][T10134] [ 396.561399][T10134] net_ratelimit: 522 callbacks suppressed [ 396.561416][T10134] netlink: zone id is out of range [ 396.625507][T10134] netlink: zone id is out of range [ 396.631587][T10134] netlink: zone id is out of range [ 396.636830][T10134] netlink: zone id is out of range [ 396.644223][T10134] netlink: zone id is out of range [ 396.649693][T10134] netlink: zone id is out of range [ 396.649720][T10134] netlink: zone id is out of range [ 396.649731][T10134] netlink: zone id is out of range [ 396.649740][T10134] netlink: zone id is out of range [ 396.679050][T10134] netlink: zone id is out of range [ 397.999115][T10097] Bluetooth: hci0: command 0x0c1a tx timeout [ 404.326165][T10236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'. [ 404.564323][T10236] team_slave_1 (unregistering): left promiscuous mode [ 404.581562][T10236] team_slave_1 (unregistering): left allmulticast mode [ 404.622288][T10236] team0: Port device team_slave_1 removed [ 405.975486][T10260] net_ratelimit: 8 callbacks suppressed [ 405.975505][T10260] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 406.006864][T10262] QAT: Device 7 not found [ 414.705842][T10401] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.162585][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 415.724030][T10413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.836'. [ 418.409662][T10440] netlink: 268 bytes leftover after parsing attributes in process `syz.1.842'. [ 418.735400][T10432] Process accounting paused [ 419.184595][T10451] ptrace attach of "./syz-executor exec"[10452] was attempted by "./syz-executor exec"[10451] [ 421.010334][T10480] QAT: Device 7 not found [ 422.013576][T10488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.854'. [ 422.120692][T10488] team_slave_1 (unregistering): left promiscuous mode [ 422.158959][T10488] team_slave_1 (unregistering): left allmulticast mode [ 422.201709][T10488] team0: Port device team_slave_1 removed [ 424.409682][T10521] ptrace attach of "./syz-executor exec"[10522] was attempted by "./syz-executor exec"[10521] [ 425.346879][T10536] netlink: 306 bytes leftover after parsing attributes in process `syz.1.863'. [ 428.920339][T10585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.872'. [ 429.996072][T10581] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 430.380354][T10596] warn_alloc: 1 callbacks suppressed [ 430.380375][T10596] syz.0.876: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 430.415702][T10596] CPU: 1 UID: 0 PID: 10596 Comm: syz.0.876 Not tainted syzkaller #0 PREEMPT(full) [ 430.415746][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.415766][T10596] Call Trace: [ 430.415777][T10596] [ 430.415789][T10596] dump_stack_lvl+0x16c/0x1f0 [ 430.415848][T10596] warn_alloc+0x248/0x3a0 [ 430.415892][T10596] ? __pfx_warn_alloc+0x10/0x10 [ 430.415959][T10596] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 430.415994][T10596] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 430.416031][T10596] ? __pfx___might_resched+0x10/0x10 [ 430.416079][T10596] ? rcu_is_watching+0x12/0xc0 [ 430.416126][T10596] ? trace_contention_end+0xdd/0x130 [ 430.416173][T10596] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 430.416206][T10596] ? tomoyo_path_number_perm+0x295/0x580 [ 430.416254][T10596] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 430.416284][T10596] ? __pfx___mutex_lock+0x10/0x10 [ 430.416338][T10596] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 430.416387][T10596] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 430.416416][T10596] __vmalloc_node_noprof+0xad/0xf0 [ 430.416447][T10596] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 430.416484][T10596] dvb_dvr_do_ioctl+0x15d/0x290 [ 430.416524][T10596] dvb_usercopy+0x167/0x340 [ 430.416552][T10596] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 430.416588][T10596] ? __pfx_dvb_usercopy+0x10/0x10 [ 430.416635][T10596] ? __fget_files+0x20e/0x3c0 [ 430.416679][T10596] dvb_dvr_ioctl+0x29/0x40 [ 430.416708][T10596] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 430.416740][T10596] __x64_sys_ioctl+0x18e/0x210 [ 430.416795][T10596] do_syscall_64+0xcd/0x4c0 [ 430.416850][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.416883][T10596] RIP: 0033:0x7f6e9358eba9 [ 430.416909][T10596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.416941][T10596] RSP: 002b:00007f6e94435038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.416971][T10596] RAX: ffffffffffffffda RBX: 00007f6e937d5fa0 RCX: 00007f6e9358eba9 [ 430.416992][T10596] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 430.417011][T10596] RBP: 00007f6e93611e19 R08: 0000000000000000 R09: 0000000000000000 [ 430.417029][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.417073][T10596] R13: 00007f6e937d6038 R14: 00007f6e937d5fa0 R15: 00007ffeaef6dcd8 [ 430.417117][T10596] [ 430.417128][T10596] Mem-Info: [ 430.724556][T10599] vivid-003: ================= START STATUS ================= [ 430.738974][T10596] active_anon:7837 inactive_anon:10 isolated_anon:0 [ 430.738974][T10596] active_file:10128 inactive_file:48515 isolated_file:0 [ 430.738974][T10596] unevictable:768 dirty:112 writeback:8 [ 430.738974][T10596] slab_reclaimable:11373 slab_unreclaimable:93842 [ 430.738974][T10596] mapped:26268 shmem:1362 pagetables:1104 [ 430.738974][T10596] sec_pagetables:0 bounce:0 [ 430.738974][T10596] kernel_misc_reclaimable:0 [ 430.738974][T10596] free:1316384 free_pcp:14920 free_cma:0 [ 430.769270][T10599] vivid-003: Radio HW Seek Mode: [ 430.784622][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.794612][T10596] Node 0 active_anon:31348kB inactive_anon:40kB active_file:40512kB inactive_file:193928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105072kB dirty:448kB writeback:32kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11124kB pagetables:4264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 430.827782][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.851362][T10596] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 430.886653][T10599] Bounded [ 430.890676][T10599] vivid-003: Radio Programmable HW Seek: false [ 430.899452][T10596] Node 0 [ 430.901379][T10599] vivid-003: RDS Rx I/O Mode: [ 430.901398][T10596] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 430.938346][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.947982][T10599] Block I/O [ 430.963141][T10599] vivid-003: Generate RBDS Instead of RDS: false [ 430.965573][T10596] lowmem_reserve[]: [ 430.971962][T10599] [ 430.973688][T10596] 0 2480 2481 2481 2481 [ 430.986293][T10599] vivid-003: RDS Reception: [ 430.986352][T10596] Node 0 [ 430.992073][T10599] true [ 430.992278][T10596] DMA32 free:1358792kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31496kB inactive_anon:40kB active_file:40512kB inactive_file:192512kB unevictable:1536kB writepending:476kB present:3129332kB managed:2539536kB mlocked:0kB bounce:0kB free_pcp:40072kB local_pcp:17944kB free_cma:0kB [ 430.999372][T10599] [ 431.029484][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.035792][T10596] lowmem_reserve[]: 0 0 1 1 1 [ 431.044580][T10599] vivid-003: RDS Program Type: 0 [ 431.045891][T10596] Node 0 [ 431.084660][T10599] inactive [ 431.093594][T10599] vivid-003: RDS PS Name: inactive [ 431.108952][T10596] Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 431.152155][T10599] [ 431.154598][T10599] vivid-003: RDS Radio Text: inactive [ 431.166698][T10599] vivid-003: RDS Traffic Announcement: false inactive [ 431.176864][T10599] vivid-003: RDS Traffic Program: false inactive [ 431.199098][T10596] lowmem_reserve[]: 0 0 0 0 0 [ 431.202886][T10599] vivid-003: RDS Music: false inactive [ 431.210384][T10599] vivid-003: ================== END STATUS ================== [ 431.237890][T10596] Node 1 Normal free:3895624kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16788kB local_pcp:4288kB free_cma:0kB [ 431.273341][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.328029][T10596] lowmem_reserve[]: 0 0 0 0 0 [ 431.415781][T10596] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 431.416512][T10611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.880'. [ 431.416590][T10596] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 431.507333][T10596] Node 0 DMA32: 1426*4kB (UME) 1252*8kB (UME) 577*16kB (UME) 659*32kB (UME) 496*64kB (UME) 309*128kB (UME) 182*256kB (UME) 76*512kB (UM) 46*1024kB (UME) 6*2048kB (UME) 269*4096kB (UM) = 1364056kB [ 431.532479][T10596] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 431.591527][T10596] Node 1 Normal: 188*4kB (UM) 65*8kB (UME) 45*16kB (UME) 230*32kB (UME) 81*64kB (UME) 15*128kB (UME) 3*256kB (M) 3*512kB (M) 4*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3895624kB [ 431.830976][T10596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.841128][T10596] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=3 hugepages_size=2048kB [ 431.850629][T10596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.138892][T10596] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 432.194345][T10614] netlink: zone id is out of range [ 432.205429][T10614] netlink: zone id is out of range [ 432.219046][T10614] netlink: zone id is out of range [ 432.230704][T10614] netlink: zone id is out of range [ 432.236771][T10596] 58971 total pagecache pages [ 432.249185][T10614] netlink: zone id is out of range [ 432.255525][T10614] netlink: zone id is out of range [ 432.262100][T10614] netlink: zone id is out of range [ 432.268642][T10614] netlink: zone id is out of range [ 432.274277][T10614] netlink: zone id is out of range [ 432.286025][T10596] 19 pages in swap cache [ 432.299095][T10596] Free swap = 124920kB [ 432.342829][T10596] Total swap = 124996kB [ 432.383554][T10596] 2097051 pages RAM [ 432.387403][T10596] 0 pages HighMem/MovableOnly [ 432.392215][T10596] 430205 pages reserved [ 432.396571][T10596] 0 pages cma reserved [ 434.996293][T10645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.886'. [ 437.846491][T10684] QAT: Device 7 not found [ 439.102640][T10699] zero sized request [ 440.839704][T10727] netlink: 268 bytes leftover after parsing attributes in process `syz.1.906'. [ 441.355549][T10722] ICMPv6: process `syz.0.904' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 443.910518][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.919'. [ 445.124617][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.131077][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.949713][T10807] ptrace attach of "./syz-executor exec"[10811] was attempted by "./syz-executor exec"[10807] [ 448.183712][T10854] QAT: Device 7 not found [ 448.613831][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.939'. [ 449.295640][T10847] Process accounting resumed [ 451.205574][T10897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.949'. [ 451.299554][T10899] QAT: Device 7 not found [ 451.309897][T10900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 452.661064][T10916] QAT: Device 7 not found [ 452.977341][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.955'. [ 453.007298][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.955'. [ 455.088377][T10964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.963'. [ 456.637539][T10986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.967'. [ 457.733541][T11003] QAT: Device 7 not found [ 457.830859][T11005] QAT: Device 7 not found [ 459.224941][T11031] ptrace attach of "./syz-executor exec"[11032] was attempted by "./syz-executor exec"[11031] [ 459.429738][T11042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.979'. [ 462.019817][T11073] FAULT_INJECTION: forcing a failure. [ 462.019817][T11073] name failslab, interval 1, probability 0, space 0, times 0 [ 462.072375][T11073] CPU: 1 UID: 0 PID: 11073 Comm: syz.3.986 Not tainted syzkaller #0 PREEMPT(full) [ 462.072406][T11073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.072420][T11073] Call Trace: [ 462.072427][T11073] [ 462.072435][T11073] dump_stack_lvl+0x16c/0x1f0 [ 462.072475][T11073] should_fail_ex+0x512/0x640 [ 462.072510][T11073] ? fs_reclaim_acquire+0xae/0x150 [ 462.072546][T11073] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 462.072580][T11073] should_failslab+0xc2/0x120 [ 462.072610][T11073] __kmalloc_noprof+0xd2/0x510 [ 462.072643][T11073] tomoyo_realpath_from_path+0xc2/0x6e0 [ 462.072679][T11073] ? tomoyo_profile+0x47/0x60 [ 462.072702][T11073] tomoyo_path_number_perm+0x245/0x580 [ 462.072729][T11073] ? tomoyo_path_number_perm+0x237/0x580 [ 462.072759][T11073] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 462.072789][T11073] ? find_held_lock+0x2b/0x80 [ 462.072837][T11073] ? find_held_lock+0x2b/0x80 [ 462.072857][T11073] ? hook_file_ioctl_common+0x145/0x410 [ 462.072894][T11073] ? __fget_files+0x20e/0x3c0 [ 462.072924][T11073] security_file_ioctl+0x9b/0x240 [ 462.072962][T11073] __x64_sys_ioctl+0xb7/0x210 [ 462.073000][T11073] do_syscall_64+0xcd/0x4c0 [ 462.073038][T11073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.073060][T11073] RIP: 0033:0x7efcff38eba9 [ 462.073076][T11073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.073103][T11073] RSP: 002b:00007efd001db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.073124][T11073] RAX: ffffffffffffffda RBX: 00007efcff5d5fa0 RCX: 00007efcff38eba9 [ 462.073139][T11073] RDX: 00002000000001c0 RSI: fffffffffffffd02 RDI: 0000000000000003 [ 462.073152][T11073] RBP: 00007efd001db090 R08: 0000000000000000 R09: 0000000000000000 [ 462.073166][T11073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.073179][T11073] R13: 00007efcff5d6038 R14: 00007efcff5d5fa0 R15: 00007ffe259e8668 [ 462.073207][T11073] [ 462.073560][T11073] ERROR: Out of memory at tomoyo_realpath_from_path. [ 462.696862][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.989'. [ 463.314162][T11089] netlink: 268 bytes leftover after parsing attributes in process `syz.1.991'. [ 463.812563][T11102] FAULT_INJECTION: forcing a failure. [ 463.812563][T11102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.919496][T11102] CPU: 0 UID: 0 PID: 11102 Comm: syz.1.994 Not tainted syzkaller #0 PREEMPT(full) [ 463.919533][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 463.919550][T11102] Call Trace: [ 463.919559][T11102] [ 463.919570][T11102] dump_stack_lvl+0x16c/0x1f0 [ 463.919620][T11102] should_fail_ex+0x512/0x640 [ 463.919673][T11102] _copy_to_user+0x32/0xd0 [ 463.919707][T11102] cec_ioctl+0xdf4/0x2970 [ 463.919757][T11102] ? __pfx_cec_ioctl+0x10/0x10 [ 463.919811][T11102] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 463.919851][T11102] ? find_held_lock+0x2b/0x80 [ 463.919889][T11102] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 463.919936][T11102] ? do_vfs_ioctl+0x128/0x14f0 [ 463.919993][T11102] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 463.920047][T11102] ? find_held_lock+0x2b/0x80 [ 463.920076][T11102] ? hook_file_ioctl_common+0x145/0x410 [ 463.920130][T11102] ? __pfx_cec_ioctl+0x10/0x10 [ 463.920172][T11102] __x64_sys_ioctl+0x18e/0x210 [ 463.920218][T11102] do_syscall_64+0xcd/0x4c0 [ 463.920264][T11102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.920292][T11102] RIP: 0033:0x7f36d758eba9 [ 463.920313][T11102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.920340][T11102] RSP: 002b:00007f36d848f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.920365][T11102] RAX: ffffffffffffffda RBX: 00007f36d77d5fa0 RCX: 00007f36d758eba9 [ 463.920382][T11102] RDX: 00002000000003c0 RSI: 00000000805c6103 RDI: 0000000000000003 [ 463.920397][T11102] RBP: 00007f36d848f090 R08: 0000000000000000 R09: 0000000000000000 [ 463.920412][T11102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.920427][T11102] R13: 00007f36d77d6038 R14: 00007f36d77d5fa0 R15: 00007ffe7bc7cff8 [ 463.920461][T11102] [ 464.755599][T11117] QAT: Device 7 not found [ 464.883089][T11120] QAT: Device 7 not found [ 465.358998][T10097] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 465.595053][T11129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1001'. [ 466.048704][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1003'. [ 466.319630][T11135] team_slave_1 (unregistering): left promiscuous mode [ 466.326484][T11135] team_slave_1 (unregistering): left allmulticast mode [ 466.340085][T11135] team0: Port device team_slave_1 removed [ 466.623829][T11144] QAT: Device 7 not found [ 467.048245][T11152] FAULT_INJECTION: forcing a failure. [ 467.048245][T11152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.079764][T11152] CPU: 0 UID: 0 PID: 11152 Comm: syz.3.1006 Not tainted syzkaller #0 PREEMPT(full) [ 467.079793][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 467.079806][T11152] Call Trace: [ 467.079812][T11152] [ 467.079820][T11152] dump_stack_lvl+0x16c/0x1f0 [ 467.079857][T11152] should_fail_ex+0x512/0x640 [ 467.079895][T11152] _copy_from_user+0x2e/0xd0 [ 467.079919][T11152] __snd_timer_user_ioctl.isra.0+0xa15/0x2520 [ 467.079950][T11152] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 467.079978][T11152] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 467.080011][T11152] ? __mutex_lock+0x1c5/0x1060 [ 467.080053][T11152] ? snd_timer_user_ioctl+0x4a/0xd0 [ 467.080082][T11152] ? __pfx___mutex_lock+0x10/0x10 [ 467.080132][T11152] ? find_held_lock+0x2b/0x80 [ 467.080167][T11152] snd_timer_user_ioctl+0x76/0xd0 [ 467.080191][T11152] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 467.080218][T11152] __x64_sys_ioctl+0x18e/0x210 [ 467.080255][T11152] do_syscall_64+0xcd/0x4c0 [ 467.080289][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.080310][T11152] RIP: 0033:0x7efcff38eba9 [ 467.080326][T11152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.080345][T11152] RSP: 002b:00007efd001ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.080365][T11152] RAX: ffffffffffffffda RBX: 00007efcff5d6090 RCX: 00007efcff38eba9 [ 467.080378][T11152] RDX: 0000200000000000 RSI: 00000000c0145401 RDI: 0000000000000003 [ 467.080390][T11152] RBP: 00007efd001ba090 R08: 0000000000000000 R09: 0000000000000000 [ 467.080402][T11152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.080414][T11152] R13: 00007efcff5d6128 R14: 00007efcff5d6090 R15: 00007ffe259e8668 [ 467.080440][T11152] [ 469.168270][T11184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1013'. [ 471.759429][T10097] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 472.468358][T11233] QAT: Device 7 not found [ 474.344866][T11261] ima: policy update failed [ 474.350124][ T30] audit: type=1802 audit(4294967363.190:16): pid=11261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1032" res=0 errno=0 [ 474.375722][T11261] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1032'. [ 476.999159][T11295] FAULT_INJECTION: forcing a failure. [ 476.999159][T11295] name failslab, interval 1, probability 0, space 0, times 0 [ 477.018399][T11295] CPU: 0 UID: 0 PID: 11295 Comm: syz.0.1041 Not tainted syzkaller #0 PREEMPT(full) [ 477.018446][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.018468][T11295] Call Trace: [ 477.018479][T11295] [ 477.018492][T11295] dump_stack_lvl+0x16c/0x1f0 [ 477.018550][T11295] should_fail_ex+0x512/0x640 [ 477.018612][T11295] ? fs_reclaim_acquire+0xae/0x150 [ 477.018668][T11295] should_failslab+0xc2/0x120 [ 477.018714][T11295] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 477.018761][T11295] ? __kernfs_new_node+0xd2/0x8e0 [ 477.018810][T11295] __kernfs_new_node+0xd2/0x8e0 [ 477.018856][T11295] ? __pfx___kernfs_new_node+0x10/0x10 [ 477.018911][T11295] ? find_held_lock+0x2b/0x80 [ 477.018945][T11295] ? kernfs_root+0xee/0x2a0 [ 477.018994][T11295] kernfs_new_node+0x13c/0x1e0 [ 477.019050][T11295] __kernfs_create_file+0x53/0x350 [ 477.019099][T11295] sysfs_add_file_mode_ns+0x207/0x3c0 [ 477.019153][T11295] internal_create_group+0x578/0xf30 [ 477.019209][T11295] ? __pfx_internal_create_group+0x10/0x10 [ 477.019263][T11295] ? kernfs_create_link+0x1bd/0x240 [ 477.019306][T11295] internal_create_groups+0x9d/0x150 [ 477.019357][T11295] device_add+0x731/0x1aa0 [ 477.019398][T11295] ? __pfx_device_add+0x10/0x10 [ 477.019430][T11295] ? __pfx___might_resched+0x10/0x10 [ 477.019466][T11295] ? is_dynamic_key+0xb4/0x160 [ 477.019525][T11295] __add_disk+0x457/0xf00 [ 477.019586][T11295] add_disk_fwnode+0x13f/0x5d0 [ 477.019689][T11295] nbd_dev_add+0x783/0xbb0 [ 477.019744][T11295] ? __pfx_nbd_dev_add+0x10/0x10 [ 477.019821][T11295] ? bpf_lsm_capable+0x9/0x10 [ 477.019852][T11295] ? __radix_tree_lookup+0x21f/0x2c0 [ 477.019906][T11295] nbd_genl_connect+0x8b0/0x1c60 [ 477.019947][T11295] ? __pfx_nbd_genl_connect+0x10/0x10 [ 477.019980][T11295] ? __nla_parse+0x40/0x60 [ 477.020024][T11295] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 477.020063][T11295] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 477.020112][T11295] genl_family_rcv_msg_doit+0x206/0x2f0 [ 477.020151][T11295] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 477.020188][T11295] ? genl_get_cmd+0x194/0x580 [ 477.020235][T11295] ? __radix_tree_lookup+0x21f/0x2c0 [ 477.020286][T11295] genl_rcv_msg+0x55c/0x800 [ 477.020327][T11295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.020364][T11295] ? __pfx_nbd_genl_connect+0x10/0x10 [ 477.020412][T11295] netlink_rcv_skb+0x155/0x420 [ 477.020464][T11295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.020502][T11295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.020573][T11295] ? netlink_deliver_tap+0x1ae/0xd30 [ 477.020635][T11295] genl_rcv+0x28/0x40 [ 477.020665][T11295] netlink_unicast+0x5aa/0x870 [ 477.020724][T11295] ? __pfx_netlink_unicast+0x10/0x10 [ 477.020776][T11295] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 477.020825][T11295] ? __lock_acquire+0xb97/0x1ce0 [ 477.020881][T11295] netlink_sendmsg+0x8d1/0xdd0 [ 477.020940][T11295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.020997][T11295] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 477.021042][T11295] ____sys_sendmsg+0xa95/0xc70 [ 477.021081][T11295] ? copy_msghdr_from_user+0x10a/0x160 [ 477.021131][T11295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.021180][T11295] ? __pfx_futex_wake_mark+0x10/0x10 [ 477.021237][T11295] ___sys_sendmsg+0x134/0x1d0 [ 477.021290][T11295] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.021395][T11295] __sys_sendmsg+0x16d/0x220 [ 477.021447][T11295] ? __pfx___sys_sendmsg+0x10/0x10 [ 477.021496][T11295] ? __x64_sys_futex+0x1e0/0x4c0 [ 477.021566][T11295] do_syscall_64+0xcd/0x4c0 [ 477.021628][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.021661][T11295] RIP: 0033:0x7f6e9358eba9 [ 477.021687][T11295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.021720][T11295] RSP: 002b:00007f6e94435038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.021751][T11295] RAX: ffffffffffffffda RBX: 00007f6e937d5fa0 RCX: 00007f6e9358eba9 [ 477.021772][T11295] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 477.021791][T11295] RBP: 00007f6e93611e19 R08: 0000000000000000 R09: 0000000000000000 [ 477.021810][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.021828][T11295] R13: 00007f6e937d6038 R14: 00007f6e937d5fa0 R15: 00007ffeaef6dcd8 [ 477.021870][T11295] [ 477.439465][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.538927][T11302] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 477.551046][T11295] nbd: failed to add new device [ 479.556514][T11337] Process accounting paused [ 479.653763][T11335] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 479.730588][T11335] netlink: 302 bytes leftover after parsing attributes in process `syz.2.1047'. [ 480.616860][T11350] kvm: kvm [11349]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000077) [ 480.997211][ T30] audit: type=1800 audit(4294967369.830:17): pid=11353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1052" name="dbroot" dev="configfs" ino=36434 res=0 errno=0 [ 481.228215][T11362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1053'. [ 481.260947][T11352] db_root: cannot open: â [ 481.597299][T11367] ptrace attach of "./syz-executor exec"[11369] was attempted by "./syz-executor exec"[11367] [ 481.920338][T11365] FAULT_INJECTION: forcing a failure. [ 481.920338][T11365] name failslab, interval 1, probability 0, space 0, times 0 [ 481.971108][T11365] CPU: 1 UID: 0 PID: 11365 Comm: syz.3.1055 Not tainted syzkaller #0 PREEMPT(full) [ 481.971163][T11365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 481.971184][T11365] Call Trace: [ 481.971195][T11365] [ 481.971208][T11365] dump_stack_lvl+0x16c/0x1f0 [ 481.971264][T11365] should_fail_ex+0x512/0x640 [ 481.971315][T11365] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 481.971354][T11365] should_failslab+0xc2/0x120 [ 481.971398][T11365] __kmalloc_cache_noprof+0x6a/0x3e0 [ 481.971433][T11365] ? refill_pi_state_cache+0x89/0x250 [ 481.971486][T11365] refill_pi_state_cache+0x89/0x250 [ 481.971540][T11365] futex_lock_pi+0x175/0x7c0 [ 481.971591][T11365] ? futex_unqueue+0x13d/0x2c0 [ 481.971630][T11365] ? __pfx_futex_lock_pi+0x10/0x10 [ 481.971676][T11365] ? __futex_wait+0x24c/0x2f0 [ 481.971756][T11365] ? futex_private_hash_put+0x18a/0x300 [ 481.971802][T11365] ? __pfx_futex_wake_mark+0x10/0x10 [ 481.971862][T11365] ? __pfx_child_wait_callback+0x10/0x10 [ 481.971920][T11365] do_futex+0x11a/0x350 [ 481.971962][T11365] ? __pfx_do_futex+0x10/0x10 [ 481.972005][T11365] ? __pfx___do_sys_wait4+0x10/0x10 [ 481.972054][T11365] ? __might_fault+0xe3/0x190 [ 481.972090][T11365] ? __might_fault+0x13b/0x190 [ 481.972132][T11365] __x64_sys_futex+0x1e0/0x4c0 [ 481.972185][T11365] ? __pfx___x64_sys_futex+0x10/0x10 [ 481.972230][T11365] ? syscall_user_dispatch+0x78/0x140 [ 481.972295][T11365] do_syscall_64+0xcd/0x4c0 [ 481.972349][T11365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.972383][T11365] RIP: 0033:0x7efcff38eba9 [ 481.972410][T11365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.972443][T11365] RSP: 002b:00007efd001ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 481.972475][T11365] RAX: ffffffffffffffda RBX: 00007efcff5d6090 RCX: 00007efcff38eba9 [ 481.972496][T11365] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 481.972514][T11365] RBP: 00007efcff411e19 R08: 0000000000000000 R09: 000000008000fff2 [ 481.972534][T11365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.972553][T11365] R13: 00007efcff5d6128 R14: 00007efcff5d6090 R15: 00007ffe259e8668 [ 481.972593][T11365] [ 483.139408][T11383] random: crng reseeded on system resumption [ 485.308053][T11429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1067'. [ 489.228130][T11481] FAULT_INJECTION: forcing a failure. [ 489.228130][T11481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.241830][T11481] CPU: 0 UID: 0 PID: 11481 Comm: syz.0.1079 Not tainted syzkaller #0 PREEMPT(full) [ 489.241867][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.241885][T11481] Call Trace: [ 489.241895][T11481] [ 489.241906][T11481] dump_stack_lvl+0x16c/0x1f0 [ 489.241971][T11481] should_fail_ex+0x512/0x640 [ 489.242043][T11481] strncpy_from_user+0x3b/0x2e0 [ 489.242102][T11481] getname_flags.part.0+0x8f/0x550 [ 489.242157][T11481] getname_flags+0x93/0xf0 [ 489.242192][T11481] do_sys_openat2+0xb8/0x1d0 [ 489.242242][T11481] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.242296][T11481] ? __fget_files+0x20e/0x3c0 [ 489.242337][T11481] __x64_sys_openat+0x174/0x210 [ 489.242365][T11481] ? __pfx___x64_sys_openat+0x10/0x10 [ 489.242392][T11481] ? ksys_write+0x1ac/0x250 [ 489.242444][T11481] do_syscall_64+0xcd/0x4c0 [ 489.242497][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.242529][T11481] RIP: 0033:0x7f6e9358eba9 [ 489.242554][T11481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.242584][T11481] RSP: 002b:00007f6e94414038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 489.242612][T11481] RAX: ffffffffffffffda RBX: 00007f6e937d6090 RCX: 00007f6e9358eba9 [ 489.242631][T11481] RDX: 0000000000100242 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 489.242649][T11481] RBP: 00007f6e94414090 R08: 0000000000000000 R09: 0000000000000000 [ 489.242666][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.242683][T11481] R13: 00007f6e937d6128 R14: 00007f6e937d6090 R15: 00007ffeaef6dcd8 [ 489.242741][T11481] [ 489.413285][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.639919][T11502] FAULT_INJECTION: forcing a failure. [ 490.639919][T11502] name failslab, interval 1, probability 0, space 0, times 0 [ 490.653452][T11502] CPU: 1 UID: 0 PID: 11502 Comm: syz.2.1084 Not tainted syzkaller #0 PREEMPT(full) [ 490.653482][T11502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 490.653497][T11502] Call Trace: [ 490.653504][T11502] [ 490.653524][T11502] dump_stack_lvl+0x16c/0x1f0 [ 490.653562][T11502] should_fail_ex+0x512/0x640 [ 490.653607][T11502] should_failslab+0xc2/0x120 [ 490.653636][T11502] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 490.653663][T11502] ? stack_depot_save_flags+0x29/0x9c0 [ 490.653696][T11502] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 490.653730][T11502] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 490.653763][T11502] idr_get_free+0x528/0xa30 [ 490.653803][T11502] idr_alloc_u32+0x190/0x2f0 [ 490.653835][T11502] ? __pfx_idr_alloc_u32+0x10/0x10 [ 490.653875][T11502] idr_alloc+0xc0/0x130 [ 490.653903][T11502] ? __pfx_idr_alloc+0x10/0x10 [ 490.653931][T11502] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 490.653973][T11502] tipc_conn_alloc+0x337/0x590 [ 490.654001][T11502] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 490.654032][T11502] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 490.654064][T11502] ? net_generic+0xea/0x2a0 [ 490.654097][T11502] tipc_group_create+0x4ab/0x660 [ 490.654131][T11502] tipc_setsockopt+0x7f0/0xdb0 [ 490.654153][T11502] ? __pfx_tipc_setsockopt+0x10/0x10 [ 490.654185][T11502] ? __pfx_tipc_setsockopt+0x10/0x10 [ 490.654225][T11502] do_sock_setsockopt+0xf3/0x1d0 [ 490.654253][T11502] __sys_setsockopt+0x120/0x1a0 [ 490.654292][T11502] __x64_sys_setsockopt+0xbd/0x160 [ 490.654324][T11502] ? do_syscall_64+0x91/0x4c0 [ 490.654359][T11502] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.654393][T11502] do_syscall_64+0xcd/0x4c0 [ 490.654430][T11502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.654454][T11502] RIP: 0033:0x7f1ed0f8eba9 [ 490.654472][T11502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.654496][T11502] RSP: 002b:00007f1ed1eec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 490.654517][T11502] RAX: ffffffffffffffda RBX: 00007f1ed11d5fa0 RCX: 00007f1ed0f8eba9 [ 490.654533][T11502] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 490.654546][T11502] RBP: 00007f1ed1011e19 R08: 0000000000000014 R09: 0000000000000000 [ 490.654560][T11502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.654573][T11502] R13: 00007f1ed11d6038 R14: 00007f1ed11d5fa0 R15: 00007ffecaeae708 [ 490.654610][T11502] [ 493.771792][T10097] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 495.724682][T11576] FAULT_INJECTION: forcing a failure. [ 495.724682][T11576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.781999][T11576] CPU: 1 UID: 0 PID: 11576 Comm: syz.1.1100 Not tainted syzkaller #0 PREEMPT(full) [ 495.782042][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 495.782061][T11576] Call Trace: [ 495.782071][T11576] [ 495.782084][T11576] dump_stack_lvl+0x16c/0x1f0 [ 495.782138][T11576] should_fail_ex+0x512/0x640 [ 495.782194][T11576] _copy_from_user+0x2e/0xd0 [ 495.782230][T11576] ctl_ioctl+0xeb/0xd60 [ 495.782267][T11576] ? __pfx_ctl_ioctl+0x10/0x10 [ 495.782342][T11576] ? __fget_files+0x20e/0x3c0 [ 495.782385][T11576] dm_ctl_ioctl+0x22/0x30 [ 495.782415][T11576] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 495.782447][T11576] __x64_sys_ioctl+0x18e/0x210 [ 495.782501][T11576] do_syscall_64+0xcd/0x4c0 [ 495.782554][T11576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.782586][T11576] RIP: 0033:0x7f36d758eba9 [ 495.782610][T11576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.782642][T11576] RSP: 002b:00007f36d848f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.782670][T11576] RAX: ffffffffffffffda RBX: 00007f36d77d5fa0 RCX: 00007f36d758eba9 [ 495.782690][T11576] RDX: 00002000000001c0 RSI: fffffffffffffd02 RDI: 0000000000000003 [ 495.782710][T11576] RBP: 00007f36d848f090 R08: 0000000000000000 R09: 0000000000000000 [ 495.782727][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.782745][T11576] R13: 00007f36d77d6038 R14: 00007f36d77d5fa0 R15: 00007ffe7bc7cff8 [ 495.782785][T11576] [ 496.157658][T11571] net_ratelimit: 20 callbacks suppressed [ 496.157681][T11571] sctp: failed to load transform for md5: -2 [ 496.533561][T11585] FAULT_INJECTION: forcing a failure. [ 496.533561][T11585] name failslab, interval 1, probability 0, space 0, times 0 [ 496.629948][T11585] CPU: 1 UID: 0 PID: 11585 Comm: syz.3.1102 Not tainted syzkaller #0 PREEMPT(full) [ 496.629988][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.630006][T11585] Call Trace: [ 496.630016][T11585] [ 496.630028][T11585] dump_stack_lvl+0x16c/0x1f0 [ 496.630081][T11585] should_fail_ex+0x512/0x640 [ 496.630127][T11585] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 496.630174][T11585] should_failslab+0xc2/0x120 [ 496.630218][T11585] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 496.630262][T11585] ? ethnl_default_set_doit+0x2bb/0x9d0 [ 496.630315][T11585] kmemdup_noprof+0x29/0x60 [ 496.630357][T11585] ethnl_default_set_doit+0x2bb/0x9d0 [ 496.630413][T11585] genl_family_rcv_msg_doit+0x206/0x2f0 [ 496.630451][T11585] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 496.630500][T11585] ? bpf_lsm_capable+0x9/0x10 [ 496.630529][T11585] ? security_capable+0x7e/0x260 [ 496.630563][T11585] ? ns_capable+0xd7/0x110 [ 496.630602][T11585] genl_rcv_msg+0x55c/0x800 [ 496.630641][T11585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.630676][T11585] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 496.630740][T11585] netlink_rcv_skb+0x155/0x420 [ 496.630798][T11585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.630836][T11585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.630918][T11585] ? netlink_deliver_tap+0x1ae/0xd30 [ 496.630978][T11585] genl_rcv+0x28/0x40 [ 496.631006][T11585] netlink_unicast+0x5aa/0x870 [ 496.631064][T11585] ? __pfx_netlink_unicast+0x10/0x10 [ 496.631116][T11585] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 496.631165][T11585] ? __lock_acquire+0xb97/0x1ce0 [ 496.631219][T11585] netlink_sendmsg+0x8d1/0xdd0 [ 496.631277][T11585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.631334][T11585] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 496.631375][T11585] ____sys_sendmsg+0xa95/0xc70 [ 496.631414][T11585] ? copy_msghdr_from_user+0x10a/0x160 [ 496.631462][T11585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.631521][T11585] ___sys_sendmsg+0x134/0x1d0 [ 496.631573][T11585] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.631677][T11585] __sys_sendmsg+0x16d/0x220 [ 496.631729][T11585] ? __pfx___sys_sendmsg+0x10/0x10 [ 496.631816][T11585] do_syscall_64+0xcd/0x4c0 [ 496.631870][T11585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.631901][T11585] RIP: 0033:0x7efcff38eba9 [ 496.631926][T11585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.631958][T11585] RSP: 002b:00007efd001db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.631988][T11585] RAX: ffffffffffffffda RBX: 00007efcff5d5fa0 RCX: 00007efcff38eba9 [ 496.632007][T11585] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 496.632025][T11585] RBP: 00007efd001db090 R08: 0000000000000000 R09: 0000000000000000 [ 496.632043][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.632060][T11585] R13: 00007efcff5d6038 R14: 00007efcff5d5fa0 R15: 00007ffe259e8668 [ 496.632102][T11585] [ 499.048501][T11629] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1111'. [ 499.447375][T11641] futex_wake_op: syz.2.1114 tries to shift op by -2048; fix this program [ 499.488068][T11641] futex_wake_op: syz.2.1114 tries to shift op by -2048; fix this program [ 501.528241][T11667] FAULT_INJECTION: forcing a failure. [ 501.528241][T11667] name failslab, interval 1, probability 0, space 0, times 0 [ 501.559047][T11667] CPU: 0 UID: 0 PID: 11667 Comm: syz.3.1121 Not tainted syzkaller #0 PREEMPT(full) [ 501.559079][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.559093][T11667] Call Trace: [ 501.559101][T11667] [ 501.559109][T11667] dump_stack_lvl+0x16c/0x1f0 [ 501.559150][T11667] should_fail_ex+0x512/0x640 [ 501.559188][T11667] ? fs_reclaim_acquire+0xae/0x150 [ 501.559228][T11667] should_failslab+0xc2/0x120 [ 501.559261][T11667] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 501.559291][T11667] ? __kernfs_new_node+0xd2/0x8e0 [ 501.559327][T11667] __kernfs_new_node+0xd2/0x8e0 [ 501.559362][T11667] ? __pfx___kernfs_new_node+0x10/0x10 [ 501.559401][T11667] ? find_held_lock+0x2b/0x80 [ 501.559426][T11667] ? kernfs_root+0xee/0x2a0 [ 501.559464][T11667] kernfs_new_node+0x13c/0x1e0 [ 501.559505][T11667] __kernfs_create_file+0x53/0x350 [ 501.559533][T11667] sysfs_add_file_mode_ns+0x207/0x3c0 [ 501.559569][T11667] internal_create_group+0x578/0xf30 [ 501.559618][T11667] ? __pfx_internal_create_group+0x10/0x10 [ 501.559657][T11667] ? kernfs_create_link+0x1bd/0x240 [ 501.559686][T11667] internal_create_groups+0x9d/0x150 [ 501.559721][T11667] device_add+0x731/0x1aa0 [ 501.559750][T11667] ? __pfx_device_add+0x10/0x10 [ 501.559773][T11667] ? __pfx___might_resched+0x10/0x10 [ 501.559797][T11667] ? is_dynamic_key+0xb4/0x160 [ 501.559838][T11667] __add_disk+0x457/0xf00 [ 501.559881][T11667] add_disk_fwnode+0x13f/0x5d0 [ 501.559921][T11667] nbd_dev_add+0x783/0xbb0 [ 501.559959][T11667] ? __pfx_nbd_dev_add+0x10/0x10 [ 501.560015][T11667] ? bpf_lsm_capable+0x9/0x10 [ 501.560038][T11667] ? __radix_tree_lookup+0x21f/0x2c0 [ 501.560077][T11667] nbd_genl_connect+0x8b0/0x1c60 [ 501.560106][T11667] ? __pfx_nbd_genl_connect+0x10/0x10 [ 501.560131][T11667] ? __nla_parse+0x40/0x60 [ 501.560161][T11667] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 501.560190][T11667] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 501.560224][T11667] genl_family_rcv_msg_doit+0x206/0x2f0 [ 501.560252][T11667] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 501.560278][T11667] ? genl_get_cmd+0x194/0x580 [ 501.560310][T11667] ? __radix_tree_lookup+0x21f/0x2c0 [ 501.560348][T11667] genl_rcv_msg+0x55c/0x800 [ 501.560377][T11667] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.560403][T11667] ? __pfx_nbd_genl_connect+0x10/0x10 [ 501.560438][T11667] netlink_rcv_skb+0x155/0x420 [ 501.560476][T11667] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.560515][T11667] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.560591][T11667] ? netlink_deliver_tap+0x1ae/0xd30 [ 501.560653][T11667] genl_rcv+0x28/0x40 [ 501.560673][T11667] netlink_unicast+0x5aa/0x870 [ 501.560714][T11667] ? __pfx_netlink_unicast+0x10/0x10 [ 501.560751][T11667] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 501.560786][T11667] ? __lock_acquire+0xb97/0x1ce0 [ 501.560824][T11667] netlink_sendmsg+0x8d1/0xdd0 [ 501.560865][T11667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.560906][T11667] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 501.560936][T11667] ____sys_sendmsg+0xa95/0xc70 [ 501.560963][T11667] ? copy_msghdr_from_user+0x10a/0x160 [ 501.560998][T11667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.561031][T11667] ? __pfx_futex_wake_mark+0x10/0x10 [ 501.561070][T11667] ___sys_sendmsg+0x134/0x1d0 [ 501.561107][T11667] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.561179][T11667] __sys_sendmsg+0x16d/0x220 [ 501.561215][T11667] ? __pfx___sys_sendmsg+0x10/0x10 [ 501.561250][T11667] ? __x64_sys_futex+0x1e0/0x4c0 [ 501.561306][T11667] do_syscall_64+0xcd/0x4c0 [ 501.561362][T11667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.561389][T11667] RIP: 0033:0x7efcff38eba9 [ 501.561407][T11667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.561430][T11667] RSP: 002b:00007efd001db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.561451][T11667] RAX: ffffffffffffffda RBX: 00007efcff5d5fa0 RCX: 00007efcff38eba9 [ 501.561466][T11667] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 501.561480][T11667] RBP: 00007efcff411e19 R08: 0000000000000000 R09: 0000000000000000 [ 501.561512][T11667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.561526][T11667] R13: 00007efcff5d6038 R14: 00007efcff5d5fa0 R15: 00007ffe259e8668 [ 501.561557][T11667] [ 501.580096][T11667] nbd: failed to add new device [ 501.711471][T11667] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 502.806894][T11661] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1120'. [ 503.358169][T11680] FAULT_INJECTION: forcing a failure. [ 503.358169][T11680] name failslab, interval 1, probability 0, space 0, times 0 [ 503.388857][T11680] CPU: 1 UID: 0 PID: 11680 Comm: syz.1.1123 Not tainted syzkaller #0 PREEMPT(full) [ 503.388900][T11680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.388919][T11680] Call Trace: [ 503.388929][T11680] [ 503.388942][T11680] dump_stack_lvl+0x16c/0x1f0 [ 503.388996][T11680] should_fail_ex+0x512/0x640 [ 503.389043][T11680] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 503.389086][T11680] should_failslab+0xc2/0x120 [ 503.389129][T11680] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 503.389170][T11680] ? alloc_empty_file+0x55/0x1e0 [ 503.389232][T11680] alloc_empty_file+0x55/0x1e0 [ 503.389284][T11680] path_openat+0xda/0x2cb0 [ 503.389320][T11680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.389367][T11680] ? __pfx_path_openat+0x10/0x10 [ 503.389417][T11680] do_filp_open+0x20b/0x470 [ 503.389455][T11680] ? __pfx_do_filp_open+0x10/0x10 [ 503.389524][T11680] ? alloc_fd+0x471/0x7d0 [ 503.389567][T11680] do_sys_openat2+0x11b/0x1d0 [ 503.389617][T11680] ? __pfx_do_sys_openat2+0x10/0x10 [ 503.389670][T11680] ? __pfx___might_resched+0x10/0x10 [ 503.389713][T11680] __x64_sys_openat+0x174/0x210 [ 503.389742][T11680] ? __pfx___x64_sys_openat+0x10/0x10 [ 503.389787][T11680] do_syscall_64+0xcd/0x4c0 [ 503.389839][T11680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.389869][T11680] RIP: 0033:0x7f36d758eba9 [ 503.389894][T11680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.389925][T11680] RSP: 002b:00007f36d848f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 503.389954][T11680] RAX: ffffffffffffffda RBX: 00007f36d77d5fa0 RCX: 00007f36d758eba9 [ 503.389975][T11680] RDX: 0000000000008282 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 503.389995][T11680] RBP: 00007f36d7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 503.390013][T11680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.390031][T11680] R13: 00007f36d77d6038 R14: 00007f36d77d5fa0 R15: 00007ffe7bc7cff8 [ 503.390070][T11680] [ 504.002956][T11690] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 504.295414][T11697] FAULT_INJECTION: forcing a failure. [ 504.295414][T11697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.339360][T11697] CPU: 1 UID: 0 PID: 11697 Comm: syz.3.1125 Not tainted syzkaller #0 PREEMPT(full) [ 504.339400][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.339418][T11697] Call Trace: [ 504.339428][T11697] [ 504.339438][T11697] dump_stack_lvl+0x16c/0x1f0 [ 504.339488][T11697] should_fail_ex+0x512/0x640 [ 504.339542][T11697] _copy_from_iter+0x29f/0x1720 [ 504.339590][T11697] ? __alloc_skb+0x200/0x380 [ 504.339632][T11697] ? __pfx__copy_from_iter+0x10/0x10 [ 504.339666][T11697] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 504.339730][T11697] ? __lock_acquire+0xb97/0x1ce0 [ 504.339782][T11697] netlink_sendmsg+0x829/0xdd0 [ 504.339836][T11697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.339888][T11697] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 504.339929][T11697] ____sys_sendmsg+0xa95/0xc70 [ 504.339965][T11697] ? copy_msghdr_from_user+0x10a/0x160 [ 504.340014][T11697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.340069][T11697] ___sys_sendmsg+0x134/0x1d0 [ 504.340119][T11697] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.340235][T11697] __sys_sendmsg+0x16d/0x220 [ 504.340278][T11697] ? __pfx___sys_sendmsg+0x10/0x10 [ 504.340346][T11697] do_syscall_64+0xcd/0x4c0 [ 504.340394][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.340423][T11697] RIP: 0033:0x7efcff38eba9 [ 504.340445][T11697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.340473][T11697] RSP: 002b:00007efd001db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.340499][T11697] RAX: ffffffffffffffda RBX: 00007efcff5d5fa0 RCX: 00007efcff38eba9 [ 504.340517][T11697] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 504.340532][T11697] RBP: 00007efd001db090 R08: 0000000000000000 R09: 0000000000000000 [ 504.340548][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.340564][T11697] R13: 00007efcff5d6038 R14: 00007efcff5d5fa0 R15: 00007ffe259e8668 [ 504.340600][T11697] [ 505.018587][T11711] FAULT_INJECTION: forcing a failure. [ 505.018587][T11711] name failslab, interval 1, probability 0, space 0, times 0 [ 505.043611][T11711] CPU: 1 UID: 0 PID: 11711 Comm: syz.3.1128 Not tainted syzkaller #0 PREEMPT(full) [ 505.043646][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.043662][T11711] Call Trace: [ 505.043671][T11711] [ 505.043682][T11711] dump_stack_lvl+0x16c/0x1f0 [ 505.043732][T11711] should_fail_ex+0x512/0x640 [ 505.043778][T11711] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 505.043816][T11711] should_failslab+0xc2/0x120 [ 505.043845][T11711] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 505.043870][T11711] ? alloc_empty_file+0x55/0x1e0 [ 505.043905][T11711] alloc_empty_file+0x55/0x1e0 [ 505.043947][T11711] path_openat+0xda/0x2cb0 [ 505.043969][T11711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.043997][T11711] ? __pfx_path_openat+0x10/0x10 [ 505.044026][T11711] do_filp_open+0x20b/0x470 [ 505.044059][T11711] ? __pfx_do_filp_open+0x10/0x10 [ 505.044100][T11711] ? alloc_fd+0x471/0x7d0 [ 505.044127][T11711] do_sys_openat2+0x11b/0x1d0 [ 505.044158][T11711] ? __pfx_do_sys_openat2+0x10/0x10 [ 505.044191][T11711] ? __fget_files+0x20e/0x3c0 [ 505.044216][T11711] __x64_sys_openat+0x174/0x210 [ 505.044234][T11711] ? __pfx___x64_sys_openat+0x10/0x10 [ 505.044261][T11711] do_syscall_64+0xcd/0x4c0 [ 505.044295][T11711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.044314][T11711] RIP: 0033:0x7efcff38eba9 [ 505.044329][T11711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.044348][T11711] RSP: 002b:00007efd001ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 505.044366][T11711] RAX: ffffffffffffffda RBX: 00007efcff5d6090 RCX: 00007efcff38eba9 [ 505.044379][T11711] RDX: 0000000000100242 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 505.044392][T11711] RBP: 00007efd001ba090 R08: 0000000000000000 R09: 0000000000000000 [ 505.044403][T11711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.044415][T11711] R13: 00007efcff5d6128 R14: 00007efcff5d6090 R15: 00007ffe259e8668 [ 505.044439][T11711] [ 505.885002][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 506.127310][T11732] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 506.566671][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.578309][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.710018][T11782] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.3.1139: 7 [ 509.949008][T11788] Process accounting resumed [ 510.049595][T11772] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1137'. [ 510.137620][T11792] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1141'. [ 510.633396][T11803] FAULT_INJECTION: forcing a failure. [ 510.633396][T11803] name failslab, interval 1, probability 0, space 0, times 0 [ 510.657478][T11803] CPU: 1 UID: 0 PID: 11803 Comm: syz.3.1143 Not tainted syzkaller #0 PREEMPT(full) [ 510.657525][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 510.657546][T11803] Call Trace: [ 510.657557][T11803] [ 510.657570][T11803] dump_stack_lvl+0x16c/0x1f0 [ 510.657628][T11803] should_fail_ex+0x512/0x640 [ 510.657682][T11803] ? fs_reclaim_acquire+0xae/0x150 [ 510.657738][T11803] should_failslab+0xc2/0x120 [ 510.657783][T11803] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 510.657836][T11803] ? __kernfs_new_node+0xd2/0x8e0 [ 510.657886][T11803] __kernfs_new_node+0xd2/0x8e0 [ 510.657937][T11803] ? __pfx___kernfs_new_node+0x10/0x10 [ 510.657992][T11803] ? find_held_lock+0x2b/0x80 [ 510.658029][T11803] ? kernfs_root+0xee/0x2a0 [ 510.658081][T11803] kernfs_new_node+0x13c/0x1e0 [ 510.658139][T11803] kernfs_create_dir_ns+0x4c/0x1a0 [ 510.658196][T11803] internal_create_group+0x34d/0xf30 [ 510.658255][T11803] ? __pfx_internal_create_group+0x10/0x10 [ 510.658320][T11803] ? kernfs_create_link+0x1bd/0x240 [ 510.658361][T11803] internal_create_groups+0x9d/0x150 [ 510.658410][T11803] device_add+0x731/0x1aa0 [ 510.658450][T11803] ? __pfx_device_add+0x10/0x10 [ 510.658481][T11803] ? __pfx___might_resched+0x10/0x10 [ 510.658531][T11803] __add_disk+0x457/0xf00 [ 510.658590][T11803] add_disk_fwnode+0x13f/0x5d0 [ 510.658643][T11803] nbd_dev_add+0x783/0xbb0 [ 510.658697][T11803] ? __pfx_nbd_dev_add+0x10/0x10 [ 510.658776][T11803] ? bpf_lsm_capable+0x9/0x10 [ 510.658818][T11803] ? __radix_tree_lookup+0x21f/0x2c0 [ 510.658873][T11803] nbd_genl_connect+0x8b0/0x1c60 [ 510.658913][T11803] ? __pfx_nbd_genl_connect+0x10/0x10 [ 510.658946][T11803] ? __nla_parse+0x40/0x60 [ 510.658990][T11803] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 510.659028][T11803] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 510.659076][T11803] genl_family_rcv_msg_doit+0x206/0x2f0 [ 510.659115][T11803] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 510.659150][T11803] ? genl_get_cmd+0x194/0x580 [ 510.659194][T11803] ? __radix_tree_lookup+0x21f/0x2c0 [ 510.659244][T11803] genl_rcv_msg+0x55c/0x800 [ 510.659285][T11803] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.659321][T11803] ? __pfx_nbd_genl_connect+0x10/0x10 [ 510.659370][T11803] netlink_rcv_skb+0x155/0x420 [ 510.659440][T11803] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.659492][T11803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.659563][T11803] ? netlink_deliver_tap+0x1ae/0xd30 [ 510.659619][T11803] genl_rcv+0x28/0x40 [ 510.659648][T11803] netlink_unicast+0x5aa/0x870 [ 510.659726][T11803] ? __pfx_netlink_unicast+0x10/0x10 [ 510.659781][T11803] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 510.659840][T11803] ? __lock_acquire+0xb97/0x1ce0 [ 510.659898][T11803] netlink_sendmsg+0x8d1/0xdd0 [ 510.659960][T11803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.660021][T11803] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 510.660066][T11803] ____sys_sendmsg+0xa95/0xc70 [ 510.660107][T11803] ? copy_msghdr_from_user+0x10a/0x160 [ 510.660159][T11803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.660209][T11803] ? __pfx_futex_wake_mark+0x10/0x10 [ 510.660268][T11803] ___sys_sendmsg+0x134/0x1d0 [ 510.660321][T11803] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.660431][T11803] __sys_sendmsg+0x16d/0x220 [ 510.660483][T11803] ? __pfx___sys_sendmsg+0x10/0x10 [ 510.660535][T11803] ? __x64_sys_futex+0x1e0/0x4c0 [ 510.660607][T11803] do_syscall_64+0xcd/0x4c0 [ 510.660665][T11803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.660699][T11803] RIP: 0033:0x7efcff38eba9 [ 510.660725][T11803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.660759][T11803] RSP: 002b:00007efd001db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.660797][T11803] RAX: ffffffffffffffda RBX: 00007efcff5d5fa0 RCX: 00007efcff38eba9 [ 510.660819][T11803] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 510.660840][T11803] RBP: 00007efcff411e19 R08: 0000000000000000 R09: 0000000000000000 [ 510.660860][T11803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.660879][T11803] R13: 00007efcff5d6038 R14: 00007efcff5d5fa0 R15: 00007ffe259e8668 [ 510.660923][T11803] [ 511.100012][T11811] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 511.202165][T11803] nbd: failed to add new device [ 512.312279][T10097] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 514.404918][T11869] Console: switching to colour VGA+ 80x25 [ 515.742822][ T8863] ------------[ cut here ]------------ [ 515.748356][ T8863] ODEBUG: free active (active state 0) object: ffff888055bbd360 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 515.853127][ T8863] WARNING: CPU: 1 PID: 8863 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 515.862768][ T8863] Modules linked in: [ 515.866712][ T8863] CPU: 1 UID: 0 PID: 8863 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 515.876398][ T8863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 515.886557][ T8863] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 515.892456][ T8863] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 47 16 8c 4c 89 e6 48 c7 c7 e0 3b 16 8c e8 cf 9a 91 fc 90 <0f> 0b 90 90 58 83 05 a6 74 c3 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 515.912774][ T8863] RSP: 0018:ffffc9000216f758 EFLAGS: 00010282 [ 515.919243][ T8863] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a02f8 [ 515.927554][ T8863] RDX: ffff88802b349e00 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 515.937353][ T8863] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 515.945983][ T8863] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c164280 [ 515.954749][ T8863] R13: ffffffff8bafee80 R14: ffffffff8a9b5d10 R15: ffffc9000216f858 [ 515.963152][ T8863] FS: 0000000000000000(0000) GS:ffff8881247ba000(0000) knlGS:0000000000000000 [ 515.972395][ T8863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.979097][ T8863] CR2: 00007f36d83056c0 CR3: 0000000024fb4000 CR4: 00000000003526f0 [ 515.987119][ T8863] Call Trace: [ 515.990502][ T8863] [ 515.993476][ T8863] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 515.999074][ T8863] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 516.005421][ T8863] debug_check_no_obj_freed+0x4b7/0x600 [ 516.011969][ T8863] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 516.018104][ T8863] ? rcu_is_watching+0x12/0xc0 [ 516.023007][ T8863] ? kmem_cache_free+0x2d1/0x4d0 [ 516.028268][ T8863] kfree+0x28f/0x4d0 [ 516.032494][ T8863] ? hci_release_dev+0x4ef/0x610 [ 516.037491][ T8863] hci_release_dev+0x4ef/0x610 [ 516.042376][ T8863] ? __pfx_hci_release_dev+0x10/0x10 [ 516.047708][ T8863] ? rcu_is_watching+0x12/0xc0 [ 516.052590][ T8863] ? kfree+0x24f/0x4d0 [ 516.056701][ T8863] bt_host_release+0x6a/0xb0 [ 516.061376][ T8863] ? __pfx_bt_host_release+0x10/0x10 [ 516.066710][ T8863] device_release+0xa4/0x240 [ 516.071386][ T8863] kobject_put+0x1e7/0x5a0 [ 516.075948][ T8863] put_device+0x1f/0x30 [ 516.080370][ T8863] vhci_release+0x185/0x230 [ 516.084924][ T8863] ? __pfx_vhci_release+0x10/0x10 [ 516.090042][ T8863] __fput+0x402/0xb70 [ 516.094080][ T8863] task_work_run+0x14d/0x240 [ 516.098703][ T8863] ? __pfx_task_work_run+0x10/0x10 [ 516.103936][ T8863] ? do_raw_spin_unlock+0x172/0x230 [ 516.109684][ T8863] do_exit+0x86f/0x2bf0 [ 516.113906][ T8863] ? find_held_lock+0x2b/0x80 [ 516.118664][ T8863] ? __pfx_do_exit+0x10/0x10 [ 516.123731][ T8863] ? do_raw_spin_lock+0x12c/0x2b0 [ 516.129095][ T8863] ? find_held_lock+0x2b/0x80 [ 516.133823][ T8863] do_group_exit+0xd3/0x2a0 [ 516.138390][ T8863] get_signal+0x2673/0x26d0 [ 516.143235][ T8863] ? __pfx_get_signal+0x10/0x10 [ 516.148160][ T8863] ? __do_sys_wait4+0xd1/0x170 [ 516.153027][ T8863] arch_do_signal_or_restart+0x8f/0x790 [ 516.158622][ T8863] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 516.164897][ T8863] ? __pfx_fput_close_sync+0x10/0x10 [ 516.170277][ T8863] ? dnotify_flush+0xa9/0x4c0 [ 516.175014][ T8863] exit_to_user_mode_loop+0x84/0x110 [ 516.180442][ T8863] do_syscall_64+0x41c/0x4c0 [ 516.185114][ T8863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.191088][ T8863] RIP: 0033:0x7f6e93584e17 [ 516.195530][ T8863] Code: Unable to access opcode bytes at 0x7f6e93584ded. [ 516.202615][ T8863] RSP: 002b:00007ffeaef6e030 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 516.211546][ T8863] RAX: fffffffffffffe00 RBX: 0000000000000226 RCX: 00007f6e93584e17 [ 516.220026][ T8863] RDX: 0000000040000000 RSI: 00007ffeaef6e09c RDI: 00000000ffffffff [ 516.228042][ T8863] RBP: 00007ffeaef6e09c R08: 0000000000000000 R09: 0000000000000000 [ 516.236381][ T8863] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000087 [ 516.244737][ T8863] R13: 0000555556aa7590 R14: 000000000007a2df R15: 00007ffeaef6e0f0 [ 516.252838][ T8863] [ 516.255894][ T8863] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 516.263298][ T8863] CPU: 1 UID: 0 PID: 8863 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 516.272803][ T8863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.282889][ T8863] Call Trace: [ 516.286228][ T8863] [ 516.289209][ T8863] dump_stack_lvl+0x3d/0x1f0 [ 516.293858][ T8863] vpanic+0x6e8/0x7a0 [ 516.297886][ T8863] ? __pfx_vpanic+0x10/0x10 [ 516.302542][ T8863] ? debug_print_object+0x1a2/0x2b0 [ 516.307790][ T8863] panic+0xca/0xd0 [ 516.311563][ T8863] ? __pfx_panic+0x10/0x10 [ 516.316031][ T8863] ? check_panic_on_warn+0x1f/0xb0 [ 516.321216][ T8863] check_panic_on_warn+0xab/0xb0 [ 516.326210][ T8863] __warn+0xf6/0x3c0 [ 516.330190][ T8863] ? debug_print_object+0x1a2/0x2b0 [ 516.335438][ T8863] report_bug+0x3c3/0x580 [ 516.339816][ T8863] ? debug_print_object+0x1a2/0x2b0 [ 516.345079][ T8863] handle_bug+0x184/0x210 [ 516.349462][ T8863] exc_invalid_op+0x17/0x50 [ 516.354006][ T8863] asm_exc_invalid_op+0x1a/0x20 [ 516.358906][ T8863] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 516.364752][ T8863] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 47 16 8c 4c 89 e6 48 c7 c7 e0 3b 16 8c e8 cf 9a 91 fc 90 <0f> 0b 90 90 58 83 05 a6 74 c3 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 516.384400][ T8863] RSP: 0018:ffffc9000216f758 EFLAGS: 00010282 [ 516.390513][ T8863] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a02f8 [ 516.398528][ T8863] RDX: ffff88802b349e00 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 516.406549][ T8863] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 516.414567][ T8863] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c164280 [ 516.422556][ T8863] R13: ffffffff8bafee80 R14: ffffffff8a9b5d10 R15: ffffc9000216f858 [ 516.430577][ T8863] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 516.436064][ T8863] ? __warn_printk+0x198/0x350 [ 516.440871][ T8863] ? __warn_printk+0x1a5/0x350 [ 516.445670][ T8863] ? debug_print_object+0x1a1/0x2b0 [ 516.450892][ T8863] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 516.456366][ T8863] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 516.462213][ T8863] debug_check_no_obj_freed+0x4b7/0x600 [ 516.467798][ T8863] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 516.473898][ T8863] ? rcu_is_watching+0x12/0xc0 [ 516.478716][ T8863] ? kmem_cache_free+0x2d1/0x4d0 [ 516.483689][ T8863] kfree+0x28f/0x4d0 [ 516.487606][ T8863] ? hci_release_dev+0x4ef/0x610 [ 516.492573][ T8863] hci_release_dev+0x4ef/0x610 [ 516.497442][ T8863] ? __pfx_hci_release_dev+0x10/0x10 [ 516.502754][ T8863] ? rcu_is_watching+0x12/0xc0 [ 516.507574][ T8863] ? kfree+0x24f/0x4d0 [ 516.511661][ T8863] bt_host_release+0x6a/0xb0 [ 516.516277][ T8863] ? __pfx_bt_host_release+0x10/0x10 [ 516.521591][ T8863] device_release+0xa4/0x240 [ 516.526204][ T8863] kobject_put+0x1e7/0x5a0 [ 516.530642][ T8863] put_device+0x1f/0x30 [ 516.534813][ T8863] vhci_release+0x185/0x230 [ 516.539337][ T8863] ? __pfx_vhci_release+0x10/0x10 [ 516.544380][ T8863] __fput+0x402/0xb70 [ 516.548397][ T8863] task_work_run+0x14d/0x240 [ 516.553005][ T8863] ? __pfx_task_work_run+0x10/0x10 [ 516.558172][ T8863] ? do_raw_spin_unlock+0x172/0x230 [ 516.563424][ T8863] do_exit+0x86f/0x2bf0 [ 516.567611][ T8863] ? find_held_lock+0x2b/0x80 [ 516.572308][ T8863] ? __pfx_do_exit+0x10/0x10 [ 516.576923][ T8863] ? do_raw_spin_lock+0x12c/0x2b0 [ 516.582002][ T8863] ? find_held_lock+0x2b/0x80 [ 516.586705][ T8863] do_group_exit+0xd3/0x2a0 [ 516.591249][ T8863] get_signal+0x2673/0x26d0 [ 516.595787][ T8863] ? __pfx_get_signal+0x10/0x10 [ 516.600660][ T8863] ? __do_sys_wait4+0xd1/0x170 [ 516.605469][ T8863] arch_do_signal_or_restart+0x8f/0x790 [ 516.611045][ T8863] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 516.617243][ T8863] ? __pfx_fput_close_sync+0x10/0x10 [ 516.622565][ T8863] ? dnotify_flush+0xa9/0x4c0 [ 516.627286][ T8863] exit_to_user_mode_loop+0x84/0x110 [ 516.632606][ T8863] do_syscall_64+0x41c/0x4c0 [ 516.637242][ T8863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.643156][ T8863] RIP: 0033:0x7f6e93584e17 [ 516.647588][ T8863] Code: Unable to access opcode bytes at 0x7f6e93584ded. [ 516.654614][ T8863] RSP: 002b:00007ffeaef6e030 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 516.663043][ T8863] RAX: fffffffffffffe00 RBX: 0000000000000226 RCX: 00007f6e93584e17 [ 516.671029][ T8863] RDX: 0000000040000000 RSI: 00007ffeaef6e09c RDI: 00000000ffffffff [ 516.679015][ T8863] RBP: 00007ffeaef6e09c R08: 0000000000000000 R09: 0000000000000000 [ 516.686993][ T8863] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000087 [ 516.694974][ T8863] R13: 0000555556aa7590 R14: 000000000007a2df R15: 00007ffeaef6e0f0 [ 516.702979][ T8863] [ 516.706379][ T8863] Kernel Offset: disabled [ 516.710713][ T8863] Rebooting in 86400 seconds..