last executing test programs: 6.63812948s ago: executing program 2 (id=5317): mlockall$auto(0x7) msync$auto(0x3, 0x6, 0x6) setrlimit$auto(0x9, &(0x7f0000000000)={0x9, 0x8}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r0) clone$auto(0x8ffe, 0xfffffffffffffffa, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000003d00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32, @ANYBLOB="5bf4e8fa4071a7565266d29e71b4f577c7de646c6a56bccf67ce5648551ed1509d0b69aab2fabbe58752208d68405be5788c451b344ba849c70daa36279c5ecb65ed433236fcdaf56ef5"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40043d04, 0x0) mmap$auto(0x10001, 0xfff, 0x8, 0x16, r0, 0x0) 6.049091274s ago: executing program 2 (id=5320): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) madvise$auto(0xccc0, 0xff, 0x4) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), 0xffffffffffffffff) r2 = geteuid() sendmsg$auto_IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001840)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac150000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="04003400d36e6c3476e92cd8ee1c6706d5a6ed6ed630fd14fa678a2ec60a2f1d6df1da3ecb9b9bd18ff51299f1cec8627838dd5018621073eb3fd76f05a47d1dd56066e6824f9ababec398b11bc7d3583dda1830358c54451e2886fd3bf4fbad372e0b156ca6a713263f5ecabdfb8482eee6c6cf091e51197f0eba9835dc0faa1a2c6fc615876b941e51ccb7a3b2d9b9245d6b46165e2d9f7728217cdd90aa4b73561ccf6f9b237bd680dd09fe04d902fdf48b589cb337e6f335659203376f4cd8362d1eba3901672a3eb70aed92fb2b98f55f51b46a1dccaf96cf3b5c8e5bd9390008000500ffff00000800050005000000"], 0x15ac}, 0x1, 0x0, 0x0, 0x1}, 0x4080) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r0], 0x1}, 0x58) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x8000, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ppoll$auto(&(0x7f0000001900)={r5, 0x8001, 0x7da}, 0xfffffe2c, &(0x7f0000001940)={0x4, 0x7ff}, &(0x7f0000001980)={0x6}, 0x8) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x1400, 0x0, 0x40884}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0xa, 0x5, 0x84) sendto$auto(r7, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) close_range$auto(0x2, 0x8, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000019c0), r8) r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_SE_IO(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100027bd70000fdbdf251b00000005000b1919ca77d740cad77f439d"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.963863664s ago: executing program 2 (id=5328): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x400019, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/range\x00', 0x100, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace\x00', 0x80302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r2 = pidfd_open$auto(0x1, 0x0) ioctl$auto_FS_IOC_GETVERSION(r2, 0xff01, &(0x7f0000000080)=0x80) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) mmap$auto(0x1000000, 0x9, 0xff7, 0x8080000008011, r3, 0x80000000) socket(0x22, 0x2, 0x24) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x2404c810) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) 3.467609524s ago: executing program 3 (id=5336): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0x2, 0x1) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r1, 0x10000, 0xffffffffffffffff}, 0x10) bpf$auto(0x4, &(0x7f0000000240)=@bpf_attr_5={@target_fd=r2, 0xffffffffffffffff, 0xc000, 0x9, 0xffffffffffffffff, @relative_fd=r3, 0x40}, 0x5) syncfs$auto(r4) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.233836606s ago: executing program 3 (id=5338): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/stat\x00', 0x103282, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r2, 0x0, 0x1) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x7) read$auto(0x3, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0x2000001000eb1, 0xffffffffffffffff, 0x8000) msgsnd$auto(0x5, 0x0, 0x3, 0x8) mlockall$auto(0x7) madvise$auto(0x0, 0x200007, 0x19) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) sendto$auto(r3, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r5}, 0x36) mmap$auto(0x8000000000000001, 0x6, 0x6, 0x8000000000000011, r3, 0x100) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000100)=""/249, 0xf9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) 3.161017769s ago: executing program 2 (id=5340): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) sendto$auto(r0, &(0x7f0000000040)="b27e411ff529b4d19b6ffb571ccd0543705ccb1efe87050cf2472d3ef7496971e1f6975b1d875e23a4fa358546808861b41afbd7582d3af78df25cf09c9e71ecb27a75208b03f5c928e2c69d9d34ba98b88398c5b80a7ded1b469860ae6038ffe2a72136ade077a101f1461582e4689faf3d858e3a6edd48151e84ccf417a721522e9790ab01b2cf9e870cebc982031aed7f8d52eac7e81f9e4e8b259172bde46e77a9cb8c98a67338dc53f6bdf0ef0b991531fb", 0x2, 0x9, &(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x8) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r1) (async) r2 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000180), 0x20c600, 0x0) (async) fcntl$auto_F_GETLEASE(r1, 0x401, 0x9) (async) r3 = openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim4/ports/3/udp_ports_table0\x00', 0x21000, 0x0) pread64$auto(r3, &(0x7f0000000200)='/sys/kernel/debug/mce/severities-coverage\x00', 0xb9, 0x1) (async, rerun: 32) r4 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x10100, 0x0) (rerun: 32) ioctl$auto_XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f0000000280)={r3, 0x0, 0x8, 0x2, 0x0, 0x3, [0xc000000000000000, 0x2, 0x7ff, 0x4, 0x81, 0x6]}) (async, rerun: 32) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r1) (rerun: 32) sendmsg$auto_NL80211_CMD_STOP_NAN(r5, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)={0x454, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x40d, 0x7f, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_MAC_MASK={0x22, 0xd7, "fcabc3633c365da3b5dcc43f578b633b34eff8cbe1774c68993d57b2bc7a"}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}]}, 0x454}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000) capget$auto(&(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)={0x80000001, 0x7fff, 0x2}) process_vm_readv$auto(r7, &(0x7f00000009c0)={&(0x7f0000000900)="58e06db41206d7b860a8fb7e56f53311779ddbc2bf2411c2e704dbab4ce336f3af83effa491a7f118a67691d35f728376acfb7abe4c30b77b8af852b7e60b2fbeffebbda9e16aaebe1dc05b8499999d95e55c0e9ef97a6b4590117a5ded3b014d966ed56a2e07723936b2f5366619dbd9d6516df0d1e80a8d48c16e49ef50c3274a3e21c9651d4bae16f83ac60", 0x4}, 0xffffffff, &(0x7f0000000a40)={&(0x7f0000000a00)='3 ', 0x5c70}, 0xfffffffffffffff8, 0x7) (async) r8 = open(&(0x7f0000000a80)='./file0\x00', 0x509080, 0x182) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000b00)={'hsr0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r9}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0xd3b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c40}, 0x20000000) (async, rerun: 32) sendmmsg$auto(r0, &(0x7f0000000d80)={{&(0x7f0000000c00)="8326fb1c04947ce49ce728376a8acc8217ca2fea3da55ae8e206f5df05f03585e8f87028d8084efad417d1d4b01641cae2733f046492735fc76e0ddb6d120aac75ba146558c9f47e453685140773e5ecd13e158a94bbb53af1c7d98c4bf3491ec7d522e93bd54b5dae153fd4779f20c66068ff9f3ee64dd9781a", 0x9, &(0x7f0000000cc0)={&(0x7f0000000c80), 0x9b}, 0x6, &(0x7f0000000d00)="827e18153d3c2a90e9a8f674e883d001bb2ba00425d507af424236414dc8099347c15c0f1b8d1a2d6e0c0e19016e96ac91b7b2e2f40ffd2041ff9db877ae163ea0a914ea802365525ff94a67c2ea0c12890930a4aef9e5", 0x6, 0x800}, 0x7}, 0x92, 0x7) (rerun: 32) syslog$auto(0x9, &(0x7f0000000dc0)='\\\x00', 0x469) (async) r10 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MESH(r2, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, r10, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_VERSION={0x6, 0x1, '}]'}, @BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'vlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8008) (async) ioctl$auto_TIOCSETD2(r5, 0x5423, &(0x7f0000000f80)="5215df74f3de97ce04e2a190ca2d1da4155549b811ec157cb48248f05ddce56709f23dcc52ac1b2518412cd0867835f96cf37c385218433bed872164fa28bda82607497a1dbbacf14933323331b4d1a7d518cf98b7555c8b549246046edc37185c4f27fbd119e70902bba088de0d15a67d5c6922339c608bbb1bc54347fc96a87fff986f422a0620c92c00955fe6f61107ad609432404b9c61dcb19f464fe8b27e26a77f2040") readv$auto(r0, &(0x7f0000001140)={&(0x7f0000001040)="52fb349e4e51acf122916d8b6627e7bb50ad715600c54c8e00238ff9cab9249e2a5639877382215a1cd4ffb552d8de17b887d33f13d3c020bb8fbbb1f07a0ef4ff00696f05a1d5970a61a8ad48f57de038c98401d60edb95cb9b78c34673dc3fdcf37ed5b451bb19ab78f96c3ffd94a179f84176c13659d0f6d65ce1f36175bbe567e95750a82ad5c6fb61b8c96eafa7d8563d18439cc9639b3c7585b2ba4e0ad62cd7390c77a13f414bb63f3d81a9874a9a496b8975d446a22754e62e9befd10fbb990a6e541a99d246cfffb38fe57252d84b5a714a33715bbd0513ac6569fd", 0x7ff}, 0x1) (async) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000011c0)={0xf, &(0x7f0000001180)={0x6, 0x0, 0x6, @inferred=r4}}) (async) r12 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000001240), r5) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001280)={'veth1_vlan\x00', 0x0}) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r11, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x28030040}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x94, r12, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r13}, @NCSI_ATTR_PACKAGE_LIST={0x74, 0x2, 0x0, 0x1, [@typed={0x6, 0x120, 0x0, 0x0, @str='#\x00'}, @typed={0x8, 0xdc, 0x0, 0x0, @u32=0x8}, @nested={0x5e, 0xf2, 0x0, 0x1, [@generic="fdedd2653222878e5ed86c67417d2be1b24b9b24a112", @generic="f32fc8378a951338e192ae2d9918652c1bf5df87b9287ffa82e006e63991259f5f4c9a51b06bc954451a259dca60fa7a5c204eac5ffb132515f4ca8a", @typed={0x4, 0x13d}, @typed={0x4, 0xa5}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) r14 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, r14, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040000) (async) epoll_ctl$auto(r8, 0x9, r0, &(0x7f0000001540)={0x6, 0x1000}) 2.573315945s ago: executing program 2 (id=5343): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/thermal/cooling_device0/max_state\x00', 0x500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/hci2/msft_opcode\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0xb, 0x2, 0x4, 0x5, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) getrusage$auto_RUSAGE_BOTH(0xfffffffffffffffe, 0x0) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f00000003c0), 0x1001, 0x0) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, 0x0, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0xff, 0x7000000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) 2.335707667s ago: executing program 0 (id=5345): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x2810003, 0xffb, 0x800000000801e, 0x3, 0xf) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x240200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(0x0, 0x8000, 0x0, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) msgctl$auto_MSG_STAT(0x800, 0xb, &(0x7f0000000180)={{0x7f, 0x0, 0x0, 0xa, 0xe1, 0xfffffff3, 0x1}, &(0x7f0000000280)=0x5, &(0x7f0000000100)=0xf, 0x5, 0x4, 0x9, 0xfc, 0x8000, 0x3, 0x4b6, 0xc, @inferred, @raw=0x8}) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="64f027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x80000000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) r6 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00abc814f6637020e7091235ac07396900651cc79d2193bd3ecf8510f0867f351686253ae7401177501a5d37fcc54d6e28c2e3bc9f223a40c56c0f808704b89b92c9a894c90d837d2880bb50eb03a3ce723ce30315e0b8a5a11283485c75e6f190e97fd61d0aa3f49e9c40dbc293b7df33c4f8a9d4e76f12eb3b12caa424963dbf34f30b72a8ffde87736e0576795cae539ff828ba5de3f3e60c10a950573e518853589eee3063f2a2043ac80ea075263c10b73c1a9168b98fbc3ac5f0a0868bf35babcb98"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r6, &(0x7f0000000000)='-\x00', 0x2fb) ptrace$auto(0x10, r5, 0x4, 0x7ff) ptrace$auto(0x5, r5, 0x47fd, 0xd1) 2.213508985s ago: executing program 3 (id=5346): r0 = socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(r0, &(0x7f0000000040)=@generic={0x25, "835aabaf5dc454e38226799f73aa"}, 0x18) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00', 0x20080, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x11e, 0x4, 0xfffffffffffffffe, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x1b, &(0x7f0000000040)='!\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) inotify_init1$auto(0x3000000000000) (async) inotify_add_watch$auto(0x4, 0x0, 0xe6e) (async) r3 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r3, 0x0, 0x2) (async) inotify_add_watch$auto(r3, 0x0, 0x20000e6e) (async) r4 = epoll_create$auto(0x3c) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) 2.047673581s ago: executing program 3 (id=5347): setsockopt$auto_SO_INCOMING_CPU(0xffffffffffffffff, 0xfffffeff, 0x31, &(0x7f0000000000)='+]+:,:)^]-&(\x1a\x00', 0x3) r0 = fcntl$auto(0xffffffffffffffff, 0x3, 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_DEV_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x6}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @VDPA_ATTR_DEV_QUEUE_INDEX={0x8, 0x11, 0x8}, @VDPA_ATTR_MGMTDEV_BUS_NAME={0x7, 0x1, '[@\x00'}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x55}, @VDPA_ATTR_DEV_NAME={0x14, 0x4, 'veth0\x00'}, @VDPA_ATTR_MGMTDEV_BUS_NAME={0x12, 0x1, '+]+:,:)^]-&(\x1a\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4041}, 0xc814) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000001c0), r0) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x708}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'vcan0\x00'}]}, 0x58}}, 0x40000) r2 = clone$auto(0x3, 0x100000000, &(0x7f0000000300)=0xe72, &(0x7f0000000340)=0x8, 0x3) ptrace$auto_PTRACE_INTERRUPT(0x4207, r2, 0x8, 0x4) pread64$auto(r0, &(0x7f0000000380)='-%&\\-k\x00', 0x4, 0x3ff) lsm_list_modules$auto(&(0x7f00000003c0)=0x5, &(0x7f0000000400)=0x90, 0x9) r3 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000440), 0x42000, 0x0) close_range$auto(r0, r3, 0x87) r4 = ioctl$auto_TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000480)=0x1) r5 = bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f00000004c0)=@link_detach={r4}, 0x5f30) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000580), r4) mmap$auto(0x7ff, 0x101, 0x3ff, 0x18, r5, 0x1fc0000000) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000600), r0) sendmsg$auto_BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r6, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @broadcast}, @BATADV_ATTR_TT_LAST_TTVN={0x5, 0x12, 0xc0}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DAT_CACHE_IP4ADDRESS={0x8, 0x23, @rand_addr=0x64010102}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000780), r0) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x18, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}}, 0x40000) r9 = ioctl$auto_NS_GET_PARENT(r0, 0xb702, 0x0) read$auto(r9, &(0x7f0000000880)='nbd\x00', 0x1) sendfile$auto(r3, r0, &(0x7f00000008c0)=0x6, 0x167) lstat$auto(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x6, 0x3, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x6, 0x1, 0x2, 0x8001, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x5, 0x81, 0x8, 0x8a4}) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f0000000a80)={{0x8, 0xffffffffffffffff, 0xee00, 0xfffffffd, 0x0, 0xf6, 0x8}, &(0x7f0000000a00)=0x5, &(0x7f0000000a40)=0x1a, 0x81, 0x1, 0x4, 0x800, 0xffff, 0x6, 0x0, 0x9, @inferred=r2, @inferred=r2}) shmctl$auto_SHM_STAT(0x2, 0xd, &(0x7f0000000c40)={{0x3, 0xee01, 0xee01, 0x6, 0x7ff, 0x6, 0x5}, 0x5, 0x6, 0x6d3, 0x46e, @inferred=r2, @inferred=r2, 0x0, 0x0, &(0x7f0000000b00)="b2d3f52841f8f2f51eed78fa764a718a8b0b5fd73e4aaf3c1193446b9a180cdb42397b0a8724b1ac3fc66b74ac62ce9b3838f239a1331bb2a8b1c8caa8", &(0x7f0000000b40)="6bd19451e53973c14b08b2d415672b67eca6c21603940fd71263f79905a662c66c50cc90e72028480e4f9ab33bb441373ae0bc078c5e1fd2e6b2527c2d926aaf583a9408e2c1ca334f63daedd6a99bf473d39afa1234fd7d6ef3c33f61b71e4f41aa3a35cd05c0dea025d9fb95f64fb38c8df05b4d28a5cd3eb5c1a27c746183978e45e0740bb031762fbc4ca0fa16446aae93ee410b752559c018223c2c974e522ba8e25193a0d5f128f0f71b11ac0731517b87ab7432d37c97fc7013e624624d9d21f9a4958b23c56a"}) setresuid$auto(r10, r12, r13) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r5, 0xfff, &(0x7f0000000cc0)='!-!:#\x00', &(0x7f0000000d00)="5a88ec57794d8ee8bdca12b77eccec20397aeeb73834b413bb7359032bfaa84491fd60443b6d04981ebeba138ff0db10889f027590b2669590e55ce0868517641e708211de8c2f5e1355bf6907a0a7703a441eb02620abd847c4936f9537713a1a3402ff", 0x2) shmctl$auto(0x0, 0x5, &(0x7f0000001e00)={{0x7, r13, r11, 0x0, 0x5, 0xfffff7ec, 0xaa81}, 0x3, 0xbb4, 0x1c1, 0x3, @inferred=r14, @inferred=r15, 0x7fff, 0x0, &(0x7f0000000d80)="339b562057e507859db0b1ecbebc28a7bbb8ffbc832f1dcd403610e3cb7a3a8f2a594fd31b066e7ff0962b8dc050be7793b88261ac146ef44d6e122ecbc58dff41dece9e6dd3f5533a595a7c9295082c9d1bfb3ae7c7eab1b2a246ab002afd69bbc8bf936ea59534bd1d539ad2c0b78d043fd99aa9dc783963cfd273a3f08b5dda67cbc31f53a8c44b0cd813c8102914a1fe80902811cdb3dc78c9464b0db273e4fe195e0d5853a62071fdfe4f4ea5832e7e219cd2bc1ed51948a62c8004d5f6a720df174cda98d2bf0514afcc17455221572ebe73231f33c21c7e5c0825ea2b0e9b89c3a1a2f1593290a439ac869758bab0a826ecb8934878ad883b6c1fb67fc57089c949dfae0b2841dc3b8dacab76bee22f4462625a2dde5dc9d329eb5476fae761e20e16d0f2be692607fedd2742c17cd4d77f8f3841fb88929ba1a67421c431d97c0541a092b9b89612ad68aa493667f8b9a231fc62e6d03f87521ca3f15ca63143915ed5ca26395f27d9e6be2a8d2a2d191c5bfd0e814c061065e577355af16012149893b06e17e28ee6fcf3b65883ab5dc08098e4314fa4f7d18224b9057c0e092f2b865e66430e592ca8ee38f8fb6338cf8f6a313350cf11540eb7ac23d6ee5be1f06d45f6c420eef013736b2d195af94c4ed99bf8fdb7bdad79cc9d109a7cab7c50ed35056f63e5acb49d9879ddc1c1eeffb413bb7ea43e9cf77b35bd4ff60726f0ea289c2800f9a6b36e9dcad4daa297e84f4f44eb374ae5eb5a300a82431d6618b683e7fb04369f05b845c588bbfe1488a83bbdfc7fb64fa30a4afa8b1a64c5fac9300894793df19cd45565ad06ae7adff4b1b1a8a547a8dfbcdde48c884f9faab69a1397bcfd447ac35ea95b63b473ae2b1600361c2aa11375e984ddfe481f8adaeea5addac660235c0beedd520d27838ce01f8046ae5474fb359526211930b5d3d23d8ccc378dd9aec1d400b7f5d11add3900acef0f842a12a901b78fd2de65c4274e86eaa2d10c9cbcebfc719837592ad014c937c4de7b714dd2f9dc7a4df51224a8d11080cdd78e6d9b902aa5bc4a03caaeceb6aef25e278297933bce1a41a5d584b97df48c417aa9b3deecc8c444c50371435481fd7caa16bda9ec277d2fbb0e55589a03612b3d7b873840b741854c79a065570d5b8a31c7e04e4c5da106e1dbcb61362c3de7fcc4faa3b2071c584241dd91cfe65ca81b99c5ef77508e29ea1df28de332f354567ac013d1eab2f9d795f8dc6be6e899f1be460a3e71ca43a1ea7f263e1b07c856366558b47dd857ccd67737497b6dd545213cc85a584ec7164699b593f416febd329d8de0c44a2d18baa37c141e5330cb0b6805444954a7e4037260d4c8f542559fd42ed1ab2ddc734573559750874842f7ad4c0f8630cb0a98e8f7571ec0d132c9d07e569dfae5d944744dc8e202f29093eaa99a5ad043a86a0ebc28e257e0971f7efacc0b5e8572d82554cad10344ed9e80a13acdb9318abcc79131449570e7d72f18a3387556cbb40b0d16487d2dc84d1604e4bd072eba51e8034b03c1f923aba4a1103a5c561a9d596fa0d323b81cba14f1abd8f70781df69de8a7699cb45e56da0920e39dd792e0829d8c81d4d8460fd03313703697dbf90fd130beba0deb646020953f9737e5ee7ffdd8ebe121251c280bd7a77a188d56af0753a17412baace4276d5374378c7ee3efc3bd3d2dba2bf25dd7f6e01c72b52607a5999178f7566ccb9b7f880bde43a8f8a75dc6b2bd97cd276f03508cb18f24d1bf774e45330d40059360abdab29192ea5ab93bc07c7f0f1978752ceb817d1408455bcb1b46593a29f6b74ae7ca917fdccad0c698a98d70dccaa7022acc15f10f69cdda000d99af23a7227e3029e85ff550fc007bebad10c92f12e887b73851c8de4200b9b63de41aaa0070bf869209eb23d61e97bba3ee0702b7b022b9f57d6632c149d61cf9800ba6f1dbd0af222be6088f243e1038f59c70f3ef4ebce87a32d39f35bc90c993ebb72bd4fe21d24e70a6e951d68bf05935faa59db4e49c01d2b1a75bbd70df47587d9d3b9e365663ad6d1e332daf19a469304fe21606b55d171f08f2a4d9bb690108f794597bf08bd4662f28ad5d580a53d84fa996a3d0b79aa923e32a29132314f4f4802de42503bc989cdb90590f82f59a8fd200345dfac22bba950eea455d0b6e2b46b885b94e65ed78587bc1c6ad8ecf41259b1ef09ebc5c2f062095fc6a8b8fa87e4682016f6607ee51f97ae26aa786b3d327cea96dd1e16e1f2d08f3828a98dd608cdf0c04dfe90d6b19f860d789b7be4b07506254981091ef808f9b50aebceb0eedb50f321a86670023ce271d3ce74a1a779d2845402f6f9d91b111b33923d6609a8f7db9debaa67bba9df107dfbc2a178a0cb206feacb67b8c80c6116cdbb017479a8b860f04fd29275ebff9f4e7ee054994d44f1b06f9c281848912c55cce2775069952e998f3e148b4b9fe8c713f9f60527bc1bc83203d1411cd78af837f878f8513ce90769a451836411efabc6f0d0d74932c576e0caf864d4d26f0491eb76e8f183dce7f68e85f3adca325024e47c97dbbc0e3ff7ef15fd23e8248fe474d03eec7e9461a22d1c3b85313d99ee0252fc5b6e32eed46239506caf7fe08328e95b95183b88b1d2e8bac181d0affc5c8e1f9f3044a3ba428a163229ace41029615a8d04f2f78e73a991e00682b55cf15db03a61eabe860671dcd6d4ab46f557a346ffd2da63c2fdb894ed1dae24c1c6e27c2d1369810cb5021f8720ba1e03ce9ae1c16ad2ad4cb4e27307edd14249be2c13d07f1c8d05ec34610eebba0f6b3ceb47bc0ba579a2b37e2ca7a1593b93c0cd46d80cc2678dea072024895a5b8462dc13290fc6895e4f6c9047af3635521347c1b86f68047d247c5e78d998c97e80d4363d8309975913a5e9fe1a667402b34ce23ec3f5cc7720dc21a93ddac2c96a7b3c9f9802713282c4ea7dc926a98a7dde0d496528279fd5cfad6db7818ce1f0e0954d9737bbbb8e67c9499b0828dea32b2e3b413bf73202c18d0f9237b36467e4eab3858f1c2942ffa7810b15a0f769da506478cab4e7f07c085789bf7c3d40597ec631c168a3a59e2002804d168327d38ddcddf0f045b5ce47cd15c73cfac994d23d7b12f957bd54892c00bc3503b444a1070bebdccc45bddc2912d8a0f338997d07f22783fd082917d2e2ba2eb013b6bdcb100e9b737ccf8f47db3496a19d69c42276f86dcf4994e730a2851dfcfc03a83399f992f1171778f15d7df236c68cef7a1960b7d70f9a675e182717aad319227b2e337934822bed7b2b7032567a03b5776c5c840a8bac27c09205eebbbf6fa2f8ba61347503c4e0c108c25da10275304a336c92ccf05834bf5c62477db2c729c8120d1886b4f23c9cb8a09914548b1cb217293185b7f56f5742e25b97e0ffbfa6c2c5870b3e3f2290a59af915c7a7c6cff8d96ce2042b023a9522ad7e8f3cb4ecf91f96cbdcf60acf8261d03e6c8369a61865a2c32e708fc89dc4c39889e93303811ecd3be2d387b2d9e5cc5e640ed1a5f902794f75d69ee2abc7349150e8d4def1b0ad8a6fe4ffec7e28b0855359b690a574d1982b10bcacf5fff55d841a97d88bf70423d1681b07ebc189eb96ddc51206474647d48b1e65c3a0c7b062d95d6f97a665a40b71a85318279353951ad62e20a8d52db2aed38fd46704f323c1dcc13ad3ea6f11abd0b01bed8a5198d299b1bf44bf83e1940b8ff83d1470e8c42e9fb337eab7484fd10e5825e1c852e804acd1a9672b2c9df157022da24c6136c9dfa7e3a05261d89fad3104acc6121c9e58a933f70ad028bdecb64f2477f4d5f12bf7207941b2b299b9bb21039d5f258a4b24b5db2433a640a6d8ab3f746a9bbfaae10f97a484bb7f21ff50282b7c749db8929e480f3a895493c87adc3639b5724a6fadea6acc7e2e27a1280575ebceaf05a05a5453288fe7803994abd859e036938096ba866772ddd17331fabef1565713eb844fc1785b951cc421c43d2f37e5d0fee2138c05b0b4303e6393ff4ae0e050971aa46ecd23448a0d46d7a60a53e6e63dbb1b51fc41f6aec36a09a15de8e352b9a7a33303f9dc733639e98654400633ab5235d69b5a86690deb73dafdd83f48ff6a0efa51b0ade9366fcfb4e2746433df4addea5619181cc735831d5016ae363c2cee2bfe899932b220c06b35b51558badea9fbceb0eac5ae13f027ed242024988aec699ae671f61c039fb66588ed9c593c3c8f166f42f94671bf94ff874ed6d313954f9af412c2045be8092a3c1b5f7d1aaa864f5d19fa2dc290a4de00846b23dc8fee96ceb8c3494fa695b2a0bba9253625304a335f6ae20ad3185bc2874ff82259e8f6f63b7b9637c984a82459d932b8c03195000d6f019080284b00ddded378318963a39360f873f5e3e81ebfd20145a51453cd0fc2b2bdcc2a00c0e38c5b0e544762b9eeecadb8c78dbbf4c16e4abecb749c1f01c834bf2580641a530c7bf29a0a61babf4909d49cd6b45a48d6ee650f1a6bfa03c511cac365cfb8a384dcb577909829a9ec83cc28a7de2cd8e80a279b00d7cf3ab51f3c71593ecf67d59d79628a8fd940e303c284d9ec1bc4d35b834135b86cf5c91cfecbf19e6a35be46c167682d08c64526e9be20cac967f6ba7466f7283aa144c7b021fb25c895c59375247aaf0d49d04952398479cf2c7c8b9c1e41a12f8873e54dec06ba3cecdf5e005a58d78ada3715217e3db41a6d695f90c7dea376183bccbe6246f945ddec777ac8fabbea93d6eadec7b9debe4b4d8bbde2fd0791ca3588fde8e1b297235f2c5599cea33a4e49575e95260b375364221595bbb9408a621da877b9e31307acf3998043d0313bc5e9f9fd54b849ea51ee8f7e9fbb16ebfeac9cd3e6b695aadff193d3dd3daf85110ce870cdb8b59ee040f70774d28ed86c578c6d8590c17f9290ad5a9ef9b44370ee08c3c69945021328d250fde415424dce769d81b22b64c43e6a7d93e566562b39ecb3ad66039d150923abbe8246248e7aa9060e3778ffa422a89f6580c16c5464881c57b03b214fa33c70f22a9ad3f8e33a7a27a999f4c4067706b9281225a5768403528fa7d8461b9a9071c7198320a8d5b57ec502f1417cf4e061d3b5391d96b4c88d8314a55b0622011758d4e4c1987a82a5ba62296e291bac78ccc05514842f929a816d4048955186e30103a530532b77f1e992864c877cfd8cb2f4bb2099e72c1fdd3dec3965b3cb1543dda13d566a2248559528bec92018e1424e76e371a280bb047667ab2596a727aa4c7238ced813718d9c41faee943e692dc17a85241f19297a5130c9505b21f6bdfa7c7830148928e0ed527d05c2ddb2b8a45f4c216a4c51dcfa02522a4d84e88ee82b67f5fc518265098779cb81b444e72b33a85aa250e53b0f6109cbbda87735ba778b91d6e15b271811bec905c600cb6b7dd6ba681467436d6d504848acbf251ddb42a34276a2bcc4661e078302bd798e5fa90967f580482cf8abb5e3ec089c75f900ceb8b0ed5618da38d02a9cb024a2a42e13d2fefc75e6deb40b485d4da854333b6171354dd76e4c9f49f0aa5d6edb3aba52d1682b0c56fce6dd4e5ba003cb2f87dffc2e2664bb2964b42dae87ffd6b48b1b1d240006a0e3b37cab1e20730d84ffe15a83325327d59401be654b61f995c99764fe1fa8e100640f8450f8aab723982e9bd8fd3c82fe2363d09ef128f9bf66712d684172cb3e400c836198c9a3a20be8f55103e687daf4e6fe2ac19813f938", &(0x7f0000001d80)="ca0a3704e9c771d2f586d2bf978a35c828e0a7baa1f1b6265ca12b792a6694559c7ba1292b39911903ab160eb94c4c57eac693a732abbac5db91257b49142e56efdca55ada7042b24185039e1cd95310752cf948d01a5355496cca08c95e88ea10612977677d"}) fchown$auto(0xffffffffffffffff, r13, r16) 2.044206249s ago: executing program 0 (id=5348): r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0xc0000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf0600000000080004800400018088a87f1dbc27b9e6fe2ace3a86496013c382e12aef4212154470c9ae8e215bc1b572300167ee5ff1c82c67523e920b235f536875c600b631c83dcbe7debad08beabac4b901869ad50283186f8618e3af93820c2333fcfef8921eac9473a55ee2b9ffb8b3c3c34f27e2aa62bbdb364e842667397b45120edad0349c2ba73cebb56db2bac7d040f8b185e5ea671086902c68218c139521eb3d8951a09b"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40040050) ioctl$auto_BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000000c0)={0xe77d, 0x9a8, 0x8}) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) setresuid$auto(0x0, 0x7, 0x8080) fanotify_init$auto(0xc00, 0x2000000000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13002cbd70c38a3d5f0e76bda70008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) 1.938534581s ago: executing program 0 (id=5349): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000180)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="17") socket(0x2, 0x4, 0x106) (async) r1 = socket(0x2, 0x4, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x56) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsu\x00', 0x40100, 0x0) preadv$auto(r2, &(0x7f0000000240)={0x0, 0x8000}, 0x2, 0x81, 0x6) (async) preadv$auto(r2, &(0x7f0000000240)={0x0, 0x8000}, 0x2, 0x81, 0x6) unlink$auto(&(0x7f0000000000)='./file0\x00') (async) unlink$auto(&(0x7f0000000000)='./file0\x00') openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x14400, 0x0) (async) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x14400, 0x0) bind$auto(r3, &(0x7f0000000100)=@phonet={0x23, 0xc1, 0x5, 0x7}, 0x4) preadv2$auto(r1, &(0x7f0000001000)={0x0, 0x80000000}, 0x7, 0x9, 0x7, 0x2e) 1.71746822s ago: executing program 1 (id=5350): mmap$auto(0x0, 0x400009, 0xfffffffffffffff7, 0x17, 0xffffffffffffffff, 0x2000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rpc/nfsd\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, r0, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003800)=""/168, 0xa8) mprotect$auto(0x0, 0x8000000000000001, 0x8) rename$auto(&(0x7f0000000280)='&&\x00', &(0x7f00000002c0)='&&\x00') sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) r2 = ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f00000002c0)=0x6) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000300)="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", 0xff0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffee, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4c59}, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) r3 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000002a40)='/sys/kernel/tracing/options/test_nop_refuse\x00', 0x0, 0x0) read$auto_trace_options_fops_trace(r3, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) 1.508232454s ago: executing program 3 (id=5351): mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4042, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_SNDBUFFORCE(0xffffffffffffffff, 0x8, 0x20, &(0x7f0000000080)='&\\}]*[{#\x00', 0x219) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1e00"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x88) setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) r2 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r2, 0x28000) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = epoll_create$auto(0x8800001) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/5u\x00', 0x2080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(r3, 0x1, r0, 0x0) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x100201, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x40, 0x0) read$auto(r5, 0x0, 0x2000e1d) writev$auto(r4, &(0x7f0000000200)={0x0, 0xb}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev3\x00', 0x20081, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) 1.39515043s ago: executing program 0 (id=5352): mmap$auto(0x0, 0x2020005, 0x3, 0xeb2, 0xfffffffffffffffa, 0x101) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0xc) (async) r1 = socket(0x28, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) (async) socket(0xa, 0x2, 0x88) (async) acct$auto(&(0x7f0000000080)='/dev/ptyaf\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) (async) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) (async) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x1a000}}, 0x22) (async) r3 = bpf$auto(0xfffffffc, &(0x7f0000000380)=@raw_tracepoint={0x8, r1, 0x0, 0x2}, 0x6f4) (async) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="94cc4f0e55b845a27c9d5d4b28fe0d059720a479b416aac3cf788d551f681280596e3578e8dfe9ecaab2a8d73abe8aeaa3b918cdb521e9858dccc87ba9a74b1e352cee82b5e72fdee3f0fc46714b26eaf9f9387eab14555b4b5863e3dcd5b61e6ec7f331bb7e7ea09e40fef271fa92ca47f11935751ef44b14005972610b2470c5859076fac2a1bb6d501bee5edc1ad3e5dcd3de406726541efe65cc959c8135ab6371fbe3977205", @ANYRES16=r4, @ANYBLOB="040028bd7000fcdbdf25030000000800090003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000429bd7000fedb03800000000000000b00000000003b00a230ebf6f1fc0caa401be1ce5e4d0a12d3027c7fe0122605d3c9fab92d4e2d6c487c7bee"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_seed\x00', 0x2202, 0x0) (async) mmap$auto(0xb00, 0x8400008, 0x200, 0x9b71, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) semctl$auto(0x7, 0x2, 0x13, 0x1) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x560a, 0x7) 1.372537508s ago: executing program 1 (id=5353): ioctl$auto_TIOCGETD2(0xffffffffffffffff, 0x5424, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x4) open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x138) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r1, @ANYBLOB="0800fb00", @ANYRES32=r2], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)="22ed", 0x2) 1.276940713s ago: executing program 0 (id=5354): r0 = socket(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), r0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2dc, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0xffff}, @THERMAL_GENL_ATTR_TZ_NAME={0x9, 0xa, ')-@%+'}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x5}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0x2ac, 0x14, 0x0, 0x1, [@nested={0xe4, 0x2a, 0x0, 0x1, [@nested={0x4, 0x67}, @generic="3271a5026ca968e6540bd44cd42aa5e38300623cdfdff074c903fe87900b327f7132b1704fae43a4ad7218d0d0b6f59bf62cfd7b3dbb3a1bc47e8b8b11c0e8eb5471ac6daf3d1a87bcd7ae2cd3929b8da38a530366a72ab1dfde0dbc0830d6630c3c60447d0edc9afdbbd41bb226bbd4c64a01380f39dfc77cc716a97b8c983102e9071796bd7f1c4a3e2d3aa45a7cea2c005ee858e3e36caab690af36c50c9336b45223ad64121d9141fa5581a851d0267e79e58005cae02f28d89b516a13930cb300cc1504dad2fc272ed21bce0e9d5b31ccdefe919b7b", @nested={0x4, 0x14c}]}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic, @nested={0x1b9, 0xf7, 0x0, 0x1, [@typed={0x4, 0x145}, @generic="84df6e6a3aeddbf54177f6b94f3214d2d1f8b73153379bcc5cfb7ae20cac26a95749a0200902f29e6a385c203ae38fd89eb10db0269fa2338a4d147d06cbef6eefe5439b4a79aacf8e", @nested={0x4, 0x143}, @generic="8206404666d8979a5099bfdb3d312d4e09c5847773c3cfdc1ba7d45b3e1c77207823b84c575dbd00f4ee7bf84be9a5a976d739124ced0c3daf0ee48357a97eedbd6db2562c0e7c63068584e4b86bcdfe4ddd811c9dec8b702f07745213cf201dceed4a72b6eddc7b1d8a99994f173a58f86ac81e199abcc8874c2ffef7e967dc2ece486703c1e9bad7c1630e18ebeff06f8824a92c57bf7853841bc7cdcdf7e36373905f24436b72f55df6edd42f44d04b05ab178c35844885dd99bffe2c83adec27bee201b09ff4ef676b00e56887b11ba9fdbfd7313d5d5da1bdae986d37bc70b373cf99f1952ca5d7c12adeaea37a718d21ed", @generic="f1db994e29f0564df6a3b97c609d73d1a1f79ad999fd6262a1848d38bfb7998908e9fedc6488b049fe1ebfbb206ea0c04b1ad7e2f020bda80232390ba3a1c9092aaf320802b52398d27c0873c7b5d74010a35639956235b73bf5ed431563686ec0e014621ee2733fe9b0739855e3e7ee"]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x2000c840}, 0x2000004c) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) setregid$auto(0x0, 0x3) (async) r2 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r4, 0x1, 0x4070bd27, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)={0x1c, r8, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) (async) sendmsg$auto_TIPC_NL_MON_SET(r3, &(0x7f0000002d40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002d00)={&(0x7f00000004c0)={0x2820, r8, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x185, 0x5, 0x0, 0x1, [@generic="a3d15912679205fd30", @nested={0x172, 0x63, 0x0, 0x1, [@generic="8ac49137cbe83db422aacb0311d35c6372c7eaeb71e4fddff5953b7f3e07bd4503e61bcd0d92076aead6f2ddc3ff8ae34b134f48f5ac414ad973abf42e37b4e134c5aab8d4d2dd23cbe4655dbe6a968c4bce4bbfe606ef13ade4a5e5febe4f5ae1762e838e9b8fd3eea04af1fe85d5bc6139e9a069c31d112ace82b9d4cc6ea9b301ca5b854f93bc5b4eb271b954ce94a573f971d50df9156e46e44de39d7aed1c0b71064ecb9c5fa4b909585186079b82ebcea94dd457ee9e851d", @generic="3bac20376e58385b004946b185c1602ac7ee02e98fc43d9345c8b483cc5581c8d32312f290bc4d6e9eb0ba865c18f9eb589d3ad43538c8c5c6729e07b4830e9c4cc0f6a403abed8300fb215d86aede480ea855c6e7ad28e2a6b15b1e15d7d65434ba314861a86550ebdb69eff3fa53e6c6fdb8cd8ead635092d33996fdac184c2f8c4cba4df6ac22760080a87e33881ad855ccbc1996b5a603eaec5a8eca7e33715e12532aed482d6319e3a7cdf91301fb9dca"]}, @typed={0x4, 0xc8}]}, @TIPC_NLA_NAME_TABLE={0x94, 0x8, 0x0, 0x1, [@nested={0x8e, 0x10, 0x0, 0x1, [@generic="304a9392a81c2546ea82edce2a1131e0adfb3756bb3533a714819f6570f07fda5e3d78842c0c7dbcf7679c0418b1fb6fe304e26fd5a34973e4e4b4d863363f943ae6e1679fa76120514a10037e7fccd25baa886282c5d79988965a8ee9f76d64bef8a214455f553947afbde85b2785f50f8c57410cab7848cce2124e8c1ff454bbdb45e8971a2001a97c"]}]}, @TIPC_NLA_MEDIA={0x1156, 0x5, 0x0, 0x1, [@nested={0x10ab, 0xaf, 0x0, 0x1, [@generic="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", @nested={0x4, 0x53}, @generic="9ac1b31ba66293b94b5b79c808ae3487ce215077a37cfd86a8b8e42b6f76553669e032cd74dc6a679ca98c8454b06813251075a648f3aafb88e479e56905f08a7a84a3905d5665", @nested={0x4, 0x2b}, @typed={0x53, 0xf7, 0x0, 0x0, @binary="c2e81c4e07a009ad9f8ac526cc2ebce804643fb8251c209288a92e7eb9af9b11cafdb6360c6e03f6d9c6ffeef8c48ef17dc3b414796de8d55896b7c53da85b99cbb3e6f7961fa3f025cb35859dd1ec"}, @typed={0x4, 0xfc}]}, @typed={0x4, 0x37}, @generic="b2a2c8d728d4948fd8c48bf4362ec50cfada80a15769379d541bf359f1a94d241a6d52fd3270780ac7ab3e615a748fdc2de7b5e2822f15fae0d1e2316342c6f4692a8c4aeb26d7d42714903dd53b749ae61fb079b54b8dbbc36d03c0c4f9a4038b84f39e5aad9c36dea7ba969f8b01ef5419114a9e152e04d4b71bffdaa5f1e8801b07778ec9a9f9c751f85fe802", @typed={0x14, 0xfa, 0x0, 0x0, @ipv6=@private1}]}, @TIPC_NLA_NODE={0xbf, 0x6, 0x0, 0x1, [@typed={0x36, 0x4c, 0x0, 0x0, @binary="37eff727b6c06383fc762f399c40d9434f6d6329938ac351b475428bb9abc7c038f1a4ad2406da355c6ba0087532b19b386a"}, @generic="8848d33616a17f76f638d65518ed7eb1be5b0c900cfda9ef011915823d9593f90911a2d1ea083d364dc364c7f8c780c9617ca92dcaa52ebd8e7bacd4b0911c456175a386be11f45d640cd227c715e20dcc91f1fc3201767c20c24afb1e02c04177647ec84233b0", @typed={0x8, 0x93, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@empty}]}, @TIPC_NLA_NAME_TABLE={0x118, 0x8, 0x0, 0x1, [@nested={0x112, 0x60, 0x0, 0x1, [@generic="8a652edcf3f82b6e20ffb6c08ec1974a13d453d20792b1a8fbd8c78138790847179119f97132dec0d6141a4373a96b77617757e13b6bf3573394a6bf1b6b1425e2ea800b30a6cc88ed00a9", @nested={0x4, 0x103}, @typed={0x8, 0xeb, 0x0, 0x0, @binary="46efa731"}, @generic="72411223d13c605f377ecbb9dc5fa7406eef56a82929a575f185f12ab77b68f4687b9303d770eff011d9112f1256ae1d8b10babf61d3ed12010d22919233b05813c9d0bbcbfaf213187ec19ace2b04aa3b3114487bbeaead435c9d2ed148d64c73dfd43ab732b1a13020fdaf84559bf3979acb54c163015369042c1052fcd81d117717a4bd7afcf54880644187e31abcd9b83667757189ec36c7b006712e704c58dbef22d455ca016de85d", @nested={0x4, 0x34}, @nested={0x4, 0x2c}, @nested={0x4, 0x13e}]}]}, @TIPC_NLA_MON={0x253, 0x9, 0x0, 0x1, [@generic="7734f06affd2057e714a9a12c93432c10bc02e362c889639347b84a4ecdb4faf285052a12cb4d75548546935f68cf746084f0fb73035387fbd49a1030eb41c09bdc74c1b97e5656961a7e128ef13b523db60189c9ca84654adb3f1972e04bb6c4726de5219a564d580c6ccf1a945bb817f99c592c02513fdc6ef9f506189fb825603644222e956bc025673d7e152d394bf72f684025c4a1bdf90a4e2dd80dc7e29b84bc7246eb590a88d673ec581a2088b0f26651a61ccaddab479824adb1d45614cf6a8caf9128187e858bd4397c92bc4da7e5b14fddc92143ec062498add669ef51815fc8ceb", @nested={0x165, 0xd9, 0x0, 0x1, [@generic="829ebd6dd50722185e8317480651f39a31f485f6751250b12b6b03116c85aa8d396c437f411b8d5c2c5aa3564a9364097c8e64a29b835bac691146736427f5febc6907f05041fc77c5714e5066a1d129a76b5d7d20b61e5227c5753428c3737920d05cb8da76cfaf2e20370043031ca7d8ec2136a1f141ec438ba4e1dc035fc6f3f1edbd5e71e68982f186c6896dc4d19adcc0189a129174acccbeb6629bc0eda3331ca997e2c737fafcbd64e7e80af386019648840c5d7084b3ef18a95da1369dc8e757abf24e7f4104dc782227733df35fe08a0c8d4b1b96e8", @typed={0x8, 0xea, 0x0, 0x0, @pid=r2}, @generic="87c2b7b12baedbea8b33411ec4949850974935fa3b6f73cf59d515e4e9580ce66026a15cead59a968ae67e39bc1cfe143d4fd258dcb8d7a0b34eca8718a1dd8cfda24c5a94ab9bb3cc99f77d7f00b06e57b77bc2fb6a6761f3ede65333ec3c084ac2e76ea89723cd2a8aefff6d98d17748f6e8", @typed={0x8, 0x79, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x3a}]}]}, @TIPC_NLA_NODE={0x106c, 0x6, 0x0, 0x1, [@generic="a5da8dcc909b6bdcf68308b8371c3c4556f254feddcf8a40967eb9a2fd515726621ca9c6ad7d6a940ad2fa81255704dafdd287f57c5ad65dd6018390504834b588e0b21018ddcbdacd6ac202050b1e8fb34854370a00c19da10be34d863bb94e7fdb6e16469decec", @generic="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"]}]}, 0x2820}, 0x1, 0x0, 0x0, 0x4008090}, 0x800) (async) futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) (async) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000002, 0x0) (async) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) 1.246558448s ago: executing program 2 (id=5355): mmap$auto(0x0, 0x8, 0x200df, 0x9b72, 0x2, 0x108000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/usb-serial/drivers/digi_4/new_id\x00', 0x183841, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x1) socket(0xa, 0x2, 0x0) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r5) sendmsg$auto_L2TP_CMD_SESSION_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x1018}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) write$auto(0x3, 0x0, 0x5c8) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000810) r6 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r6, 0x40087543, 0x0) write$auto(r0, &(0x7f0000000040)='.G+*@sys\x00', 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = pidfd_open$auto(0x1, 0x0) setns(r7, 0x60020000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) 1.233681427s ago: executing program 1 (id=5356): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r1, &(0x7f00000000c0)='.', 0x1) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) mmap$auto(0x0, 0x84020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) close_range$auto(0x2, 0x8, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0xfffffffffffffffd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/conf/batadv_slave_0/keep_addr_on_down\x00', 0xb83a40, 0x0) mmap$auto(0xde8, 0x400404, 0xe3, 0x9b72, 0x2, 0x0) socket(0xa, 0x1, 0x84) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x1, 0x5, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0) 807.798815ms ago: executing program 1 (id=5357): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000600), 0x82, 0x0) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = fspick$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400) read$auto_ima_ascii_measurements_ops_ima_fs(r0, 0x0, 0x0) 450.407054ms ago: executing program 3 (id=5358): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) (async) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x4, 0x7fcc, 0x4000000000df, 0x40eb1, r2, 0x300000000000) (async) mmap$auto(0x4, 0x7fcc, 0x4000000000df, 0x40eb1, r2, 0x300000000000) read$auto(0xffffffffffffffff, 0x0, 0x20) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x6) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/sda/sched/read0_fifo_list\x00', 0x2000, 0x0) (async) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/sda/sched/read0_fifo_list\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000040)=""/163, 0xa3) (async) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000040)=""/163, 0xa3) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bpq2/carrier_down_count\x00', 0x0, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bpq2/carrier_down_count\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="b2", 0x1) (async) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="b2", 0x1) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r1, r6, 0x0, 0x1) (async) sendfile$auto(r1, r6, 0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x48, 0x0, 0x9) socket(0x10, 0x80002, 0x0) bind$auto(r2, &(0x7f0000000140)=@generic={0x2a, "9300000004000000000000000091"}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vgem/driver_override\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="93fb9edb", @ANYRES16=r8, @ANYBLOB="01002cbd7000fcdbdf25040000008c001a80040003007c00048008000180040001000800018004000200200001800400040004000200040002000500080002000000050008000500000028000180080006000100008005000800070000000500080012000000040009000500080009000000180001800400030004000a00050007000300000004000a000800018004000900040003000400030004001000"], 0xa4}, 0x1, 0x0, 0x0, 0x48800}, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) 382.265887ms ago: executing program 1 (id=5359): mmap$auto(0x400000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x10) (async) socket(0x2c, 0x1, 0x106) futex_wake$auto(0x0, 0x200000009, 0xfffffffb, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf60ed459400140008000c000380fbff01002cef7ea9ff62cacfae38db5be0bc791e651f6cad7c5dc7bc4250f753854db6cc6d1bc04ee3dde3aff8c2a91e64d9ccc48305db5a9493b741fc5a1630ae35f2e6faffe145500b6c103f1e15cfd27876a9d3641db40620f7dacb922e95199a487dd9567b6ff2cd095043570797dbbbbaa4ac2c25584325a7296904f4fcd8944a00dc162583", @ANYRES32=r1, @ANYBLOB="12000100898771f1c19f1779008d90828847000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x401c800) (async) futex_wake$auto(&(0x7f0000000280)="4dd134b3ea3c0c56358b8c0a3be58d8155ee0b299cf31081deb86e9031ead1cbc25a3f7eef1e74e45bb47efd849dc84e5d9f242bae02b2d46da7d519f4f2239e10f935aff99ff432d9034ad90ae971cf323d29c47aa03dfe3cb5340b544ea6587b0410864d51793329e0723171952a12bf107aee2515c360e6544e36dd4d96c3b3637f7bde38789482dd39b73e276b5cf391c1e2e54e9a23be1007a9d27380b380217703c7d6b79b9e8ca9c5751ad5e712", 0xfffffffffffffff9, 0xfffffffe, 0xfffffff8) r3 = timerfd_create$auto(0x8, 0x800) read$auto_ppp_device_fops_ppp_generic(r3, &(0x7f00000000c0)=""/94, 0x5e) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) (async) listen$auto(0x3, 0x81) (async) accept$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) io_uring_setup$auto(0xc, 0x0) (async) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x83c1, 0x4400) (async) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) (async) creat$auto(&(0x7f0000000000)='X))\x00', 0x401) (async) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(0x0, 0x80) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) socket(0x2, 0x80000, 0x100) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4) socket(0x2, 0x1, 0x0) 279.203784ms ago: executing program 0 (id=5360): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x1000005, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) madvise$auto(0x16, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20008440}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x204}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF2_AGE={0x8, 0x4, 0x9}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x973}]}, 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) 0s ago: executing program 1 (id=5361): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/suspend_stats/fail\x00', 0x0, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@query={@target_fd, 0x4e, 0x5, 0x20f, 0xe, @count=0x87fe, 0x0, 0x4, 0x49, 0x2, 0x1330}, 0x6e3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(r3, 0x5, 0xc8, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)=0x543) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) (async, rerun: 32) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/213, 0xd5) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi19\x00', 0x8654092f478cae21, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0xa00004, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 64) socket(0x6, 0x4, 0x106) (rerun: 64) connect$auto(0x3, 0x0, 0x54) ioprio_set$auto(0x4, 0x0, 0x7ff) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0xfffffffffffffffd, 0xf3, 0x1000e0, 0x9b72, 0x2, 0xd4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) (async, rerun: 64) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4084) (async, rerun: 64) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async, rerun: 64) madvise$auto(0x1000000, 0xffffffffffff0006, 0x17) (rerun: 64) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) kernel console output (not intermixed with test programs): ack_lvl+0x16c/0x1f0 [ 503.820320][T17040] should_fail_ex+0x512/0x640 [ 503.820364][T17040] should_failslab+0xc2/0x120 [ 503.820396][T17040] kmem_cache_alloc_node_noprof+0x78/0x770 [ 503.820427][T17040] ? zswap_store+0x850/0x2830 [ 503.820458][T17040] ? zswap_store+0x850/0x2830 [ 503.820479][T17040] zswap_store+0x850/0x2830 [ 503.820515][T17040] ? __pfx_zswap_store+0x10/0x10 [ 503.820539][T17040] ? folio_free_swap+0x141/0x4b0 [ 503.820577][T17040] ? do_raw_spin_unlock+0x172/0x230 [ 503.820604][T17040] ? _raw_spin_unlock+0x28/0x50 [ 503.820630][T17040] ? folio_free_swap+0x19d/0x4b0 [ 503.820662][T17040] ? __pfx_try_to_unmap+0x10/0x10 [ 503.820692][T17040] swap_writeout+0x3f4/0x1090 [ 503.820737][T17040] shrink_folio_list+0x3e50/0x4800 [ 503.820787][T17040] ? __pfx_shrink_folio_list+0x10/0x10 [ 503.820823][T17040] ? arch_stack_walk+0xa6/0x100 [ 503.820857][T17040] ? __lock_acquire+0x622/0x1c90 [ 503.820933][T17040] ? mark_held_locks+0x49/0x80 [ 503.820968][T17040] ? finish_task_switch.isra.0+0x221/0xc10 [ 503.820999][T17040] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.821031][T17040] ? finish_task_switch.isra.0+0x221/0xc10 [ 503.821064][T17040] reclaim_folio_list+0xda/0x5d0 [ 503.821116][T17040] ? __pfx_css_rstat_updated+0x10/0x10 [ 503.821157][T17040] ? __pfx_reclaim_folio_list+0x10/0x10 [ 503.821212][T17040] ? lru_gen_update_size+0x543/0xe10 [ 503.821260][T17040] ? lru_gen_del_folio+0x32b/0x540 [ 503.821301][T17040] reclaim_pages+0x3ec/0x570 [ 503.821330][T17040] ? __pfx_reclaim_pages+0x10/0x10 [ 503.821353][T17040] ? find_held_lock+0x2b/0x80 [ 503.821380][T17040] ? madvise_cold_or_pageout_pte_range+0x73e/0x20d0 [ 503.821426][T17040] madvise_cold_or_pageout_pte_range+0x14e5/0x20d0 [ 503.821479][T17040] ? __print_lock_name+0xb0/0xe0 [ 503.821506][T17040] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 503.821547][T17040] ? bpf_ksym_find+0x124/0x1c0 [ 503.821577][T17040] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 503.821610][T17040] ? is_bpf_text_address+0x94/0x1a0 [ 503.821645][T17040] ? css_rstat_updated+0x1c2/0x510 [ 503.821677][T17040] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 503.821718][T17040] walk_pgd_range+0xc05/0x1f50 [ 503.821772][T17040] ? __pfx_walk_pgd_range+0x10/0x10 [ 503.821811][T17040] __walk_page_range+0x163/0x820 [ 503.821846][T17040] ? __lock_acquire+0xb8a/0x1c90 [ 503.821888][T17040] walk_page_range_vma+0x2c7/0xa20 [ 503.821931][T17040] ? __pfx_walk_page_range_vma+0x10/0x10 [ 503.821963][T17040] ? find_held_lock+0x2b/0x80 [ 503.822006][T17040] madvise_pageout+0x257/0x540 [ 503.822063][T17040] ? __pfx_madvise_pageout+0x10/0x10 [ 503.822124][T17040] ? mas_next_slot+0x12d3/0x1cb0 [ 503.822166][T17040] madvise_vma_behavior+0xb14/0x2d50 [ 503.822212][T17040] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 503.822253][T17040] ? __pfx_mt_find+0x10/0x10 [ 503.822295][T17040] ? find_vma_prev+0xd3/0x150 [ 503.822337][T17040] ? find_vma+0xbf/0x140 [ 503.822367][T17040] ? __pfx_find_vma+0x10/0x10 [ 503.822407][T17040] ? __futex_wait+0x24b/0x2f0 [ 503.822434][T17040] madvise_walk_vmas+0x31f/0x9c0 [ 503.822485][T17040] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 503.822542][T17040] madvise_do_behavior+0x1e2/0x530 [ 503.822578][T17040] ? futex_private_hash_put+0xd5/0x190 [ 503.822614][T17040] ? __pfx_madvise_do_behavior+0x10/0x10 [ 503.822653][T17040] ? down_read+0x13d/0x480 [ 503.822705][T17040] do_madvise+0x176/0x240 [ 503.822738][T17040] ? __pfx_do_madvise+0x10/0x10 [ 503.822768][T17040] ? do_futex+0x122/0x350 [ 503.822809][T17040] ? __sys_sendmsg+0x18c/0x220 [ 503.822848][T17040] ? xfd_validate_state+0x61/0x180 [ 503.822892][T17040] __x64_sys_madvise+0xa9/0x110 [ 503.822927][T17040] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.822958][T17040] do_syscall_64+0xcd/0xfa0 [ 503.822992][T17040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.823019][T17040] RIP: 0033:0x7fc35878f7c9 [ 503.823041][T17040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.823083][T17040] RSP: 002b:00007fc35956e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 503.823115][T17040] RAX: ffffffffffffffda RBX: 00007fc3589e5fa0 RCX: 00007fc35878f7c9 [ 503.823146][T17040] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 503.823163][T17040] RBP: 00007fc358813f91 R08: 0000000000000000 R09: 0000000000000000 [ 503.823180][T17040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.823194][T17040] R13: 00007fc3589e6038 R14: 00007fc3589e5fa0 R15: 00007ffe77fc6148 [ 503.823232][T17040] [ 505.347178][T17068] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4471'. [ 505.364715][T17068] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4471'. [ 505.687764][T17077] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 506.390851][T17086] FAULT_INJECTION: forcing a failure. [ 506.390851][T17086] name failslab, interval 1, probability 0, space 0, times 0 [ 506.415675][T17086] CPU: 0 UID: 0 PID: 17086 Comm: syz.3.4476 Not tainted syzkaller #0 PREEMPT(full) [ 506.415713][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 506.415730][T17086] Call Trace: [ 506.415739][T17086] [ 506.415749][T17086] dump_stack_lvl+0x16c/0x1f0 [ 506.415787][T17086] should_fail_ex+0x512/0x640 [ 506.415825][T17086] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 506.415855][T17086] should_failslab+0xc2/0x120 [ 506.415890][T17086] kmem_cache_alloc_noprof+0x75/0x6e0 [ 506.415916][T17086] ? alloc_empty_file+0x55/0x1e0 [ 506.415958][T17086] ? alloc_empty_file+0x55/0x1e0 [ 506.415991][T17086] alloc_empty_file+0x55/0x1e0 [ 506.416023][T17086] path_openat+0xda/0x2cb0 [ 506.416060][T17086] ? __pfx_path_openat+0x10/0x10 [ 506.416090][T17086] ? __lock_acquire+0xb8a/0x1c90 [ 506.416130][T17086] do_filp_open+0x20b/0x470 [ 506.416158][T17086] ? __pfx_do_filp_open+0x10/0x10 [ 506.416213][T17086] ? alloc_fd+0x471/0x7d0 [ 506.416249][T17086] do_sys_openat2+0x11b/0x1d0 [ 506.416284][T17086] ? __pfx_do_sys_openat2+0x10/0x10 [ 506.416332][T17086] __x64_sys_openat+0x174/0x210 [ 506.416368][T17086] ? __pfx___x64_sys_openat+0x10/0x10 [ 506.416418][T17086] do_syscall_64+0xcd/0xfa0 [ 506.416451][T17086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.416476][T17086] RIP: 0033:0x7fd6fb58f7c9 [ 506.416498][T17086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.416522][T17086] RSP: 002b:00007fd6fc386038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.416546][T17086] RAX: ffffffffffffffda RBX: 00007fd6fb7e5fa0 RCX: 00007fd6fb58f7c9 [ 506.416563][T17086] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 506.416579][T17086] RBP: 00007fd6fb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 506.416595][T17086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.416610][T17086] R13: 00007fd6fb7e6038 R14: 00007fd6fb7e5fa0 R15: 00007fffcac67b68 [ 506.416656][T17086] [ 506.624823][T17090] random: crng reseeded on system resumption [ 506.658417][T17090] Restarting kernel threads ... [ 506.685420][T17090] Done restarting kernel threads. [ 507.983524][T17118] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4484'. [ 508.010645][T17116] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4484'. [ 509.680051][T17153] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4495'. [ 509.691130][T17153] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4495'. [ 510.886095][T17167] program syz.3.4498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.206633][T17177] binder: 17174:17177 ioctl c018620c 0 returned -1 [ 511.267558][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4501'. [ 512.481543][T17195] input: f¬ as /devices/virtual/input/input18 [ 512.829219][T17205] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4506'. [ 512.843863][T17205] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4506'. [ 513.653665][T17213] batman_adv: Routing algorithm '7' is not supported [ 514.487589][T17227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4512'. [ 514.502639][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4512'. [ 514.570855][T17228] QAT: Device 250 not found [ 514.924111][T17236] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 516.076630][T17261] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4517'. [ 516.160523][T17258] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4517'. [ 516.559585][T17271] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4520'. [ 517.059069][T17275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4521'. [ 518.702623][T17299] zswap: compressor not available [ 519.457988][T17313] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4530'. [ 519.468655][T17313] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4530'. [ 520.302111][ T30] audit: type=1326 audit(32875.239:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.4534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc35878f7c9 code=0x0 [ 521.059406][T15340] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 522.280808][T17367] futex_wake_op: syz.3.4542 tries to shift op by -2048; fix this program [ 522.393926][T17367] futex_wake_op: syz.3.4542 tries to shift op by -2048; fix this program [ 522.645575][T17374] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4543'. [ 522.720631][T17375] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4543'. [ 523.081418][T17377] binder: 17376:17377 ioctl c018620c 0 returned -1 [ 523.107906][T17377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4544'. [ 523.573065][T17383] FAULT_INJECTION: forcing a failure. [ 523.573065][T17383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 523.619968][T17383] CPU: 1 UID: 0 PID: 17383 Comm: syz.0.4545 Not tainted syzkaller #0 PREEMPT(full) [ 523.620003][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.620020][T17383] Call Trace: [ 523.620029][T17383] [ 523.620038][T17383] dump_stack_lvl+0x16c/0x1f0 [ 523.620076][T17383] should_fail_ex+0x512/0x640 [ 523.620118][T17383] should_fail_alloc_page+0xe7/0x130 [ 523.620154][T17383] prepare_alloc_pages+0x3c2/0x610 [ 523.620191][T17383] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 523.620220][T17383] ? stack_trace_save+0x8e/0xc0 [ 523.620249][T17383] ? __pfx_stack_trace_save+0x10/0x10 [ 523.620280][T17383] ? stack_depot_save_flags+0x29/0x9c0 [ 523.620314][T17383] ? trace_mm_page_alloc+0x11f/0x1a0 [ 523.620352][T17383] ? kasan_save_stack+0x42/0x60 [ 523.620381][T17383] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 523.620405][T17383] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 523.620431][T17383] ? __handle_mm_fault+0xada/0x2aa0 [ 523.620466][T17383] ? do_user_addr_fault+0x7a6/0x1370 [ 523.620487][T17383] ? exc_page_fault+0x64/0xc0 [ 523.620514][T17383] ? asm_exc_page_fault+0x26/0x30 [ 523.620538][T17383] ? check_zeroed_user+0x90/0x1c0 [ 523.620573][T17383] ? bpf_check_uarg_tail_zero+0x16e/0x1b0 [ 523.620609][T17383] ? __sys_bpf+0x15f/0x4980 [ 523.620631][T17383] ? __x64_sys_bpf+0x78/0xc0 [ 523.620671][T17383] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 523.620714][T17383] ? policy_nodemask+0xea/0x4e0 [ 523.620750][T17383] alloc_pages_mpol+0x1fb/0x550 [ 523.620786][T17383] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 523.620831][T17383] alloc_pages_noprof+0x131/0x390 [ 523.620882][T17383] pte_alloc_one+0x1e/0x350 [ 523.620914][T17383] do_pte_missing+0x1acf/0x3ba0 [ 523.620955][T17383] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 523.620997][T17383] ? __pmd_alloc+0x64f/0x8b0 [ 523.621034][T17383] __handle_mm_fault+0x1556/0x2aa0 [ 523.621079][T17383] ? mt_find+0x3e2/0xa20 [ 523.621113][T17383] ? __pfx___handle_mm_fault+0x10/0x10 [ 523.621150][T17383] ? __pfx_mt_find+0x10/0x10 [ 523.621204][T17383] ? find_vma+0xbf/0x140 [ 523.621233][T17383] ? __pfx_find_vma+0x10/0x10 [ 523.621267][T17383] handle_mm_fault+0x589/0xd10 [ 523.621309][T17383] ? __pkru_allows_pkey+0x21/0xb0 [ 523.621350][T17383] do_user_addr_fault+0x7a6/0x1370 [ 523.621380][T17383] ? rcu_is_watching+0x12/0xc0 [ 523.621412][T17383] exc_page_fault+0x64/0xc0 [ 523.621445][T17383] asm_exc_page_fault+0x26/0x30 [ 523.621470][T17383] RIP: 0010:check_zeroed_user+0x90/0x1c0 [ 523.621512][T17383] Code: 00 00 00 e8 82 5d 1a fd 48 89 de 4c 89 ef e8 27 58 1a fd 4d 85 ff 0f 85 a5 00 00 00 e8 69 5d 1a fd 0f 01 cb 0f ae e8 45 31 e4 <49> 8b 45 00 31 ff 44 89 e6 48 89 c3 e8 8f 58 1a fd 45 85 e4 75 79 [ 523.621538][T17383] RSP: 0018:ffffc900046afb60 EFLAGS: 00050246 [ 523.621561][T17383] RAX: 000000000000000a RBX: 00000000000006f4 RCX: ffffc90018292000 [ 523.621578][T17383] RDX: 0000000000080000 RSI: ffffffff84a1fa27 RDI: 0000000000000006 [ 523.621595][T17383] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000000000a8 [ 523.621611][T17383] R10: 00000000000006f4 R11: 0000000000000000 R12: 0000000000000000 [ 523.621627][T17383] R13: 00000000000000a8 R14: 000000000000064c R15: 0000000000000000 [ 523.621655][T17383] ? check_zeroed_user+0x87/0x1c0 [ 523.621704][T17383] bpf_check_uarg_tail_zero+0x16e/0x1b0 [ 523.621743][T17383] ? __pfx_bpf_check_uarg_tail_zero+0x10/0x10 [ 523.621792][T17383] __sys_bpf+0x15f/0x4980 [ 523.621818][T17383] ? futex_private_hash_put+0xd5/0x190 [ 523.621855][T17383] ? __pfx___sys_bpf+0x10/0x10 [ 523.621889][T17383] ? __pfx_futex_wait+0x10/0x10 [ 523.621935][T17383] ? do_futex+0x122/0x350 [ 523.621995][T17383] ? xfd_validate_state+0x61/0x180 [ 523.622040][T17383] __x64_sys_bpf+0x78/0xc0 [ 523.622067][T17383] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.622097][T17383] do_syscall_64+0xcd/0xfa0 [ 523.622132][T17383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.622158][T17383] RIP: 0033:0x7fc35878f7c9 [ 523.622180][T17383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.622205][T17383] RSP: 002b:00007fc35956e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.622228][T17383] RAX: ffffffffffffffda RBX: 00007fc3589e5fa0 RCX: 00007fc35878f7c9 [ 523.622247][T17383] RDX: 00000000000006f4 RSI: 0000000000000000 RDI: 0000000000000000 [ 523.622264][T17383] RBP: 00007fc358813f91 R08: 0000000000000000 R09: 0000000000000000 [ 523.622281][T17383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.622297][T17383] R13: 00007fc3589e6038 R14: 00007fc3589e5fa0 R15: 00007ffe77fc6148 [ 523.622334][T17383] [ 524.080716][T17386] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 526.159544][T17424] random: crng reseeded on system resumption [ 526.191040][T17424] Restarting kernel threads ... [ 526.220229][T17424] Done restarting kernel threads. [ 528.063053][T17445] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4563'. [ 528.106586][T17445] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4563'. [ 528.750405][T17464] random: crng reseeded on system resumption [ 529.190829][T17472] GUP no longer grows the stack in syz.3.4570 (17472): 14000-18000 (4000) [ 529.200720][T17472] CPU: 1 UID: 0 PID: 17472 Comm: syz.3.4570 Not tainted syzkaller #0 PREEMPT(full) [ 529.200754][T17472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.200770][T17472] Call Trace: [ 529.200777][T17472] [ 529.200786][T17472] dump_stack_lvl+0x16c/0x1f0 [ 529.200825][T17472] gup_vma_lookup+0x1d2/0x220 [ 529.200851][T17472] __get_user_pages+0x241/0x3530 [ 529.200876][T17472] ? find_held_lock+0x2b/0x80 [ 529.200893][T17472] ? __pfx___get_user_pages+0x10/0x10 [ 529.200917][T17472] get_user_pages_remote+0x243/0xab0 [ 529.200940][T17472] ? __pfx_get_user_pages_remote+0x10/0x10 [ 529.200959][T17472] ? __pfx___might_resched+0x10/0x10 [ 529.200974][T17472] ? noop_dirty_folio+0x5e/0xb0 [ 529.200993][T17472] __access_remote_vm+0x250/0xaa0 [ 529.201015][T17472] ? __pfx___access_remote_vm+0x10/0x10 [ 529.201036][T17472] mem_rw+0x20e/0x640 [ 529.201051][T17472] ? __pfx_mem_write+0x10/0x10 [ 529.201063][T17472] vfs_write+0x2a0/0x11d0 [ 529.201086][T17472] ? __pfx___mutex_lock+0x10/0x10 [ 529.201103][T17472] ? __pfx_vfs_write+0x10/0x10 [ 529.201123][T17472] ? __fget_files+0x20e/0x3c0 [ 529.201142][T17472] ksys_write+0x12a/0x250 [ 529.201156][T17472] ? __pfx_ksys_write+0x10/0x10 [ 529.201177][T17472] do_syscall_64+0xcd/0xfa0 [ 529.201194][T17472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.201208][T17472] RIP: 0033:0x7fd6fb58f7c9 [ 529.201220][T17472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.201232][T17472] RSP: 002b:00007fd6fc344038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 529.201246][T17472] RAX: ffffffffffffffda RBX: 00007fd6fb7e6180 RCX: 00007fd6fb58f7c9 [ 529.201255][T17472] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 529.201263][T17472] RBP: 00007fd6fb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.201271][T17472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.201279][T17472] R13: 00007fd6fb7e6218 R14: 00007fd6fb7e6180 R15: 00007fffcac67b68 [ 529.201307][T17472] [ 529.945965][T17481] openvswitch: netlink: Unknown nsh attribute 0 [ 530.449417][T17502] random: crng reseeded on system resumption [ 530.563624][T17505] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4579'. [ 530.574997][T15340] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 531.384987][T17517] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 532.077778][T17519] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 533.424831][T17551] zswap: compressor not available [ 534.080761][T17576] random: crng reseeded on system resumption [ 534.173903][T15340] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 535.152451][T17582] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 536.384981][T17612] zswap: compressor not available [ 537.074536][T17637] netlink: 'syz.2.4607': attribute type 11 has an invalid length. [ 537.085086][T17637] netlink: 'syz.2.4607': attribute type 11 has an invalid length. [ 537.095485][T17637] netlink: 'syz.2.4607': attribute type 11 has an invalid length. [ 537.109224][T17637] netlink: 'syz.2.4607': attribute type 11 has an invalid length. [ 537.124964][T17637] netlink: 'syz.2.4607': attribute type 11 has an invalid length. [ 537.389142][T17640] vhci_hcd: invalid port number 21 [ 537.476190][T17641] vhci_hcd: invalid port number 21 [ 538.455598][T17666] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4613'. [ 538.482232][T17666] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4613'. [ 538.764195][T17670] zswap: compressor not available [ 538.867601][T15340] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 538.922262][T17680] netlink: zone id is out of range [ 538.941159][T17680] netlink: zone id is out of range [ 538.946393][T17680] netlink: zone id is out of range [ 538.954523][T17680] netlink: zone id is out of range [ 538.959830][T17680] netlink: zone id is out of range [ 538.965210][T17680] netlink: zone id is out of range [ 538.970539][T17680] netlink: zone id is out of range [ 538.976918][T17680] netlink: zone id is out of range [ 538.983948][T17684] netlink: zone id is out of range [ 538.989387][T17680] netlink: zone id is out of range [ 539.190391][T17687] bridge0: port 4(hsr0) entered blocking state [ 539.196980][T17687] bridge0: port 4(hsr0) entered disabled state [ 539.208009][T17687] hsr0: entered allmulticast mode [ 539.213187][T17687] hsr_slave_0: entered allmulticast mode [ 539.220251][T17687] hsr_slave_1: entered allmulticast mode [ 539.228129][T17687] hsr0: entered promiscuous mode [ 539.234257][T17687] bridge0: port 4(hsr0) entered blocking state [ 539.240624][T17687] bridge0: port 4(hsr0) entered forwarding state [ 539.377650][T17693] random: crng reseeded on system resumption [ 539.413162][T17693] Restarting kernel threads ... [ 539.419284][T17693] Done restarting kernel threads. [ 540.384132][T17724] FAULT_INJECTION: forcing a failure. [ 540.384132][T17724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.398435][T17724] CPU: 1 UID: 0 PID: 17724 Comm: syz.0.4627 Not tainted syzkaller #0 PREEMPT(full) [ 540.398470][T17724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 540.398483][T17724] Call Trace: [ 540.398491][T17724] [ 540.398500][T17724] dump_stack_lvl+0x16c/0x1f0 [ 540.398533][T17724] should_fail_ex+0x512/0x640 [ 540.398568][T17724] _copy_to_user+0x32/0xd0 [ 540.398589][T17724] simple_read_from_buffer+0xcb/0x170 [ 540.398623][T17724] proc_fail_nth_read+0x197/0x240 [ 540.398647][T17724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.398672][T17724] ? rw_verify_area+0xcf/0x6c0 [ 540.398691][T17724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.398714][T17724] vfs_read+0x1e4/0xcf0 [ 540.398740][T17724] ? __pfx___mutex_lock+0x10/0x10 [ 540.398765][T17724] ? __pfx_vfs_read+0x10/0x10 [ 540.398794][T17724] ? __fget_files+0x20e/0x3c0 [ 540.398819][T17724] ? static_key_count+0x20/0x70 [ 540.398853][T17724] ksys_read+0x12a/0x250 [ 540.398874][T17724] ? __pfx_ksys_read+0x10/0x10 [ 540.398897][T17724] ? __secure_computing+0x1f5/0x320 [ 540.398928][T17724] do_syscall_64+0xcd/0xfa0 [ 540.398955][T17724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.398976][T17724] RIP: 0033:0x7fc35878e1dc [ 540.398993][T17724] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 540.399013][T17724] RSP: 002b:00007fc35956e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.399034][T17724] RAX: ffffffffffffffda RBX: 00007fc3589e5fa0 RCX: 00007fc35878e1dc [ 540.399048][T17724] RDX: 000000000000000f RSI: 00007fc35956e0a0 RDI: 0000000000000003 [ 540.399061][T17724] RBP: 00007fc35956e090 R08: 0000000000000000 R09: 0000000000000000 [ 540.399074][T17724] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 540.399086][T17724] R13: 00007fc3589e6038 R14: 00007fc3589e5fa0 R15: 00007ffe77fc6148 [ 540.399115][T17724] [ 540.399613][ T30] audit: type=1326 audit(22933.762:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17723 comm="syz.0.4627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc35878f7c9 code=0x0 [ 540.807629][T17730] random: crng reseeded on system resumption [ 540.854797][T17681] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 540.946896][T17681] Bluetooth: hci4: command 0x0c1a tx timeout [ 541.275242][T17747] random: crng reseeded on system resumption [ 541.294013][T17747] Restarting kernel threads ... [ 541.300041][T17747] Done restarting kernel threads. [ 542.005218][T17763] FAULT_INJECTION: forcing a failure. [ 542.005218][T17763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.026659][T17763] CPU: 0 UID: 0 PID: 17763 Comm: syz.0.4638 Not tainted syzkaller #0 PREEMPT(full) [ 542.026694][T17763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.026708][T17763] Call Trace: [ 542.026715][T17763] [ 542.026724][T17763] dump_stack_lvl+0x16c/0x1f0 [ 542.026759][T17763] should_fail_ex+0x512/0x640 [ 542.026798][T17763] _copy_to_user+0x32/0xd0 [ 542.026851][T17763] simple_read_from_buffer+0xcb/0x170 [ 542.026892][T17763] proc_fail_nth_read+0x197/0x240 [ 542.026923][T17763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.026954][T17763] ? rw_verify_area+0xcf/0x6c0 [ 542.026976][T17763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.027004][T17763] vfs_read+0x1e4/0xcf0 [ 542.027036][T17763] ? __pfx___mutex_lock+0x10/0x10 [ 542.027069][T17763] ? __pfx_vfs_read+0x10/0x10 [ 542.027104][T17763] ? __fget_files+0x20e/0x3c0 [ 542.027139][T17763] ksys_read+0x12a/0x250 [ 542.027166][T17763] ? __pfx_ksys_read+0x10/0x10 [ 542.027204][T17763] do_syscall_64+0xcd/0xfa0 [ 542.027237][T17763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.027270][T17763] RIP: 0033:0x7fc35878e1dc [ 542.027289][T17763] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 542.027312][T17763] RSP: 002b:00007fc35954d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 542.027335][T17763] RAX: ffffffffffffffda RBX: 00007fc3589e6090 RCX: 00007fc35878e1dc [ 542.027352][T17763] RDX: 000000000000000f RSI: 00007fc35954d0a0 RDI: 0000000000000003 [ 542.027366][T17763] RBP: 00007fc35954d090 R08: 0000000000000000 R09: 0000000000000000 [ 542.027380][T17763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.027395][T17763] R13: 00007fc3589e6128 R14: 00007fc3589e6090 R15: 00007ffe77fc6148 [ 542.027427][T17763] [ 542.164663][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.428158][T17793] random: crng reseeded on system resumption [ 543.442725][T17793] Restarting kernel threads ... [ 543.448772][T17793] Done restarting kernel threads. [ 543.612894][T17800] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4649'. [ 544.431585][T17839] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4660'. [ 544.544746][T17839] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4660'. [ 544.561315][T17839] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4660'. [ 544.577080][T17839] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4660'. [ 544.603520][T17839] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4660'. [ 544.623499][T17839] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4660'. [ 544.663336][ T30] audit: type=1326 audit(22938.053:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17846 comm="syz.1.4662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b0bd8f7c9 code=0x0 [ 544.684606][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.728756][T17839] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4660'. [ 544.746745][T17839] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4660'. [ 544.765908][T17839] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4660'. [ 545.011621][T17844] can: request_module (can-proto-4) failed. [ 545.516071][T17868] random: crng reseeded on system resumption [ 545.533028][T17868] Restarting kernel threads ... [ 545.540171][T17868] Done restarting kernel threads. [ 546.533752][ T30] audit: type=1326 audit(22930.145:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17907 comm="syz.1.4679" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b0bd8f7c9 code=0x0 [ 547.039422][T17918] zswap: compressor not available [ 547.238104][T17932] dyndbg: expected <4096 bytes into control [ 547.249365][T17932] dyndbg: bad flag-op €, at start of € [ 547.258282][T17932] dyndbg: flags parse failed [ 547.266946][T17932] random: crng reseeded on system resumption [ 547.292395][T17932] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 547.309467][T17932] dyndbg: flags parse failed [ 547.328268][T17932] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 547.338322][T17932] dyndbg: flags parse failed [ 547.349817][T17932] dyndbg: bad flag-op , at start of with arguments:\n [ 547.354150][T17937] Restarting kernel threads ... [ 547.388494][T17938] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 547.404732][T17932] dyndbg: flags parse failed [ 547.414640][T17932] dyndbg: bad flag-op , at start of %s\n [ 547.429081][T17937] Done restarting kernel threads. [ 547.435335][T17932] dyndbg: flags parse failed [ 547.442366][T17934] zswap: compressor not available [ 547.445457][T17932] dyndbg: bad flag-op , at start of with environment:\n [ 547.489846][T17932] dyndbg: flags parse failed [ 547.495689][T17932] dyndbg: bad flag-op , at start of %s\n [ 547.512451][T17932] dyndbg: flags parse failed [ 547.517212][T17932] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 547.525378][T17932] dyndbg: flags parse failed [ 547.530588][T17932] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 547.540699][T17932] dyndbg: flags parse failed [ 547.545441][T17932] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 547.555577][T17932] dyndbg: flags parse failed [ 547.576474][T17932] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 547.585887][T17932] dyndbg: flags parse failed [ 547.594033][T17932] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 547.605435][T17932] dyndbg: flags parse failed [ 547.612306][T17932] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 547.623147][T17932] dyndbg: flags parse failed [ 547.627885][T17932] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 547.670817][T17932] dyndbg: flags parse failed [ 547.680814][T17932] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 547.702578][T17932] dyndbg: flags parse failed [ 547.721837][T17932] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 547.786559][T17932] dyndbg: flags parse failed [ 547.791201][T17932] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 547.804443][T17932] dyndbg: flags parse failed [ 547.809189][T17932] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 547.817398][T17932] dyndbg: tokenize failed [ 548.495311][T17957] zswap: compressor not available [ 549.341108][T17983] __nla_validate_parse: 27 callbacks suppressed [ 549.341132][T17983] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4695'. [ 549.488266][ T30] audit: type=1326 audit(22933.099:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.0.4696" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc35878f7c9 code=0x0 [ 549.507942][T17988] random: crng reseeded on system resumption [ 549.571048][T17988] Restarting kernel threads ... [ 549.605538][T17988] Done restarting kernel threads. [ 550.131039][T18005] zswap: compressor not available [ 551.266371][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4708'. [ 551.404755][T18039] ovs_ÿþ: entered promiscuous mode [ 551.529961][T18056] ovs_: entered promiscuous mode [ 551.578239][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4708'. [ 551.610569][T18058] netlink: 93 bytes leftover after parsing attributes in process `syz.1.4711'. [ 551.679339][T18039] openvswitch: ovs_ÿþ: Dropping previously announced user features [ 552.166782][ T30] audit: type=1326 audit(22935.802:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.0.4713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc35878f7c9 code=0x0 [ 552.224043][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4708'. [ 552.277972][T18039] openvswitch: ovs_ÿþ: Dropping previously announced user features [ 553.470465][T18065] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(384.8192.60), cmd(5) [ 553.492985][ T30] audit: type=1326 audit(22937.128:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18066 comm="syz.2.4715" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc31fb8f7c9 code=0x0 [ 553.964449][T18074] netlink: 'syz.3.4717': attribute type 2 has an invalid length. [ 555.395304][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4723'. [ 555.877635][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4724'. [ 555.953801][ T30] audit: type=1326 audit(22939.600:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18113 comm="syz.1.4728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b0bd8f7c9 code=0x0 [ 556.541989][T18107] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 556.548909][T18107] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 556.555494][T18107] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 556.561823][T18107] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 556.576811][T18107] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 556.826303][T18126] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4730'. [ 556.912702][ T30] audit: type=1800 audit(22940.555:33): pid=18120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4729" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 557.660620][T18117] kexec: Could not allocate control_code_buffer [ 558.085674][T18156] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4738'. [ 558.140091][T17681] Bluetooth: hci2: command 0x0c1a tx timeout [ 558.223101][T18160] kernel read not supported for file /dynamic_events (pid: 18160 comm: syz.2.4739) [ 558.243908][ T30] audit: type=1800 audit(22941.901:34): pid=18160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4739" name="dynamic_events" dev="tracefs" ino=26 res=0 errno=0 [ 558.614967][T17681] Bluetooth: hci4: command 0x0c1a tx timeout [ 558.621042][T17681] Bluetooth: hci3: command 0x0c1a tx timeout [ 558.627141][T15333] Bluetooth: hci1: command 0x0c1a tx timeout [ 558.896953][T18182] random: crng reseeded on system resumption [ 558.906365][T18182] FAULT_INJECTION: forcing a failure. [ 558.906365][T18182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.925448][T18182] CPU: 1 UID: 0 PID: 18182 Comm: syz.0.4752 Not tainted syzkaller #0 PREEMPT(full) [ 558.925486][T18182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.925502][T18182] Call Trace: [ 558.925511][T18182] [ 558.925520][T18182] dump_stack_lvl+0x16c/0x1f0 [ 558.925559][T18182] should_fail_ex+0x512/0x640 [ 558.925602][T18182] should_fail_alloc_page+0xe7/0x130 [ 558.925634][T18182] prepare_alloc_pages+0x3c2/0x610 [ 558.925663][T18182] ? rcu_is_watching+0x12/0xc0 [ 558.925689][T18182] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 558.925722][T18182] ? stack_trace_save+0x8e/0xc0 [ 558.925745][T18182] ? __pfx_stack_trace_save+0x10/0x10 [ 558.925772][T18182] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 558.925799][T18182] ? kasan_save_stack+0x42/0x60 [ 558.925824][T18182] ? kasan_save_stack+0x33/0x60 [ 558.925853][T18182] ? do_dentry_open+0x982/0x1530 [ 558.925876][T18182] ? vfs_open+0x82/0x3f0 [ 558.925901][T18182] ? path_openat+0x1de4/0x2cb0 [ 558.925922][T18182] ? do_filp_open+0x20b/0x470 [ 558.925942][T18182] ? do_sys_openat2+0x11b/0x1d0 [ 558.925970][T18182] ? __x64_sys_openat+0x174/0x210 [ 558.925998][T18182] ? do_syscall_64+0xcd/0xfa0 [ 558.926022][T18182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.926045][T18182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.926077][T18182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.926111][T18182] ? policy_nodemask+0xea/0x4e0 [ 558.926140][T18182] alloc_pages_mpol+0x1fb/0x550 [ 558.926169][T18182] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 558.926205][T18182] alloc_pages_noprof+0x131/0x390 [ 558.926233][T18182] get_zeroed_page_noprof+0x18/0xb0 [ 558.926259][T18182] get_image_page+0x18/0x190 [ 558.926288][T18182] alloc_rtree_node+0x3c/0xb0 [ 558.926314][T18182] memory_bm_create+0x519/0x810 [ 558.926349][T18182] create_basic_memory_bitmaps+0xbd/0x320 [ 558.926380][T18182] snapshot_open+0x235/0x2b0 [ 558.926407][T18182] ? __pfx_snapshot_open+0x10/0x10 [ 558.926434][T18182] misc_open+0x26d/0x450 [ 558.926468][T18182] ? __pfx_misc_open+0x10/0x10 [ 558.926498][T18182] chrdev_open+0x234/0x6a0 [ 558.926523][T18182] ? __pfx_apparmor_file_open+0x10/0x10 [ 558.926555][T18182] ? __pfx_chrdev_open+0x10/0x10 [ 558.926581][T18182] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 558.926611][T18182] do_dentry_open+0x982/0x1530 [ 558.926636][T18182] ? __pfx_chrdev_open+0x10/0x10 [ 558.926666][T18182] vfs_open+0x82/0x3f0 [ 558.926698][T18182] path_openat+0x1de4/0x2cb0 [ 558.926731][T18182] ? __pfx_path_openat+0x10/0x10 [ 558.926756][T18182] ? __lock_acquire+0xb8a/0x1c90 [ 558.926786][T18182] do_filp_open+0x20b/0x470 [ 558.926810][T18182] ? __pfx_do_filp_open+0x10/0x10 [ 558.926854][T18182] ? alloc_fd+0x471/0x7d0 [ 558.926884][T18182] do_sys_openat2+0x11b/0x1d0 [ 558.926913][T18182] ? __pfx_do_sys_openat2+0x10/0x10 [ 558.926943][T18182] ? __pfx___might_resched+0x10/0x10 [ 558.926973][T18182] __x64_sys_openat+0x174/0x210 [ 558.927003][T18182] ? __pfx___x64_sys_openat+0x10/0x10 [ 558.927045][T18182] do_syscall_64+0xcd/0xfa0 [ 558.927073][T18182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.927094][T18182] RIP: 0033:0x7fc35878f7c9 [ 558.927112][T18182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.927133][T18182] RSP: 002b:00007fc35956e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 558.927154][T18182] RAX: ffffffffffffffda RBX: 00007fc3589e5fa0 RCX: 00007fc35878f7c9 [ 558.927169][T18182] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 558.927183][T18182] RBP: 00007fc358813f91 R08: 0000000000000000 R09: 0000000000000000 [ 558.927197][T18182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.927211][T18182] R13: 00007fc3589e6038 R14: 00007fc3589e5fa0 R15: 00007ffe77fc6148 [ 558.927241][T18182] [ 559.475824][T18186] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4744'. [ 559.514021][T18190] Invalid ELF header magic: != ELF [ 560.393902][T18211] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4751'. [ 560.490081][T18215] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4753'. [ 560.696412][T17681] Bluetooth: hci4: command 0x0c1a tx timeout [ 561.763509][T18277] vivid-003: ================= START STATUS ================= [ 561.786036][T18277] vivid-003: Radio HW Seek Mode: Bounded [ 561.805104][T18277] vivid-003: Radio Programmable HW Seek: false [ 561.811563][T18279] can: request_module (can-proto-4) failed. [ 561.822137][T18277] vivid-003: RDS Rx I/O Mode: Block I/O [ 561.832325][T18277] vivid-003: Generate RBDS Instead of RDS: false [ 561.839611][T18277] vivid-003: RDS Reception: true [ 561.868738][T18277] vivid-003: RDS Program Type: 0 inactive [ 561.898574][T18277] vivid-003: RDS PS Name: inactive [ 561.903855][T18277] vivid-003: RDS Radio Text: inactive [ 561.952016][T18277] vivid-003: RDS Traffic Announcement: false inactive [ 562.007790][T18277] vivid-003: RDS Traffic Program: false inactive [ 562.031182][T18277] vivid-003: RDS Music: false inactive [ 562.058325][T18277] vivid-003: ================== END STATUS ================== [ 562.147454][ T30] audit: type=1326 audit(22945.820:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18294 comm="syz.0.4766" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc35878f7c9 code=0x0 [ 562.311520][T18302] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4767'. [ 563.001457][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.010253][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.531711][T18316] snd_virmidi snd_virmidi.0: control 61678:131081:3:yª:1 is already present [ 563.864967][T18330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4773'. [ 563.894760][T18330] hsr_slave_0: left promiscuous mode [ 563.905932][T18330] hsr_slave_1: left promiscuous mode [ 563.918826][T18330] bridge0: port 4(hsr0) entered disabled state [ 563.995080][T18330] hsr0 (unregistering): left allmulticast mode [ 564.019571][T18330] hsr0 (unregistering): left promiscuous mode [ 564.056400][T18330] bridge0: port 4(hsr0) entered disabled state [ 566.204916][T18364] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4780'. [ 566.245502][T18364] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4780'. [ 566.853314][T18384] zswap: compressor not available [ 567.901706][T18400] workqueue: Failed to create a rescuer kthread for wq "nfc13_nci_tx_wq": -EINTR [ 568.739781][T18475] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4795'. [ 568.791439][T18475] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4795'. [ 569.739785][T18484] zswap: compressor not available [ 570.996247][T18515] dyndbg: expected <4096 bytes into control [ 571.009092][T18515] random: crng reseeded on system resumption [ 571.057465][T18515] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 571.065255][T18515] dyndbg: flags parse failed [ 571.069982][T18515] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 571.078228][T18515] dyndbg: flags parse failed [ 571.082861][T18515] dyndbg: bad flag-op , at start of with arguments:\n [ 571.095504][T18515] dyndbg: flags parse failed [ 571.100214][T18515] dyndbg: bad flag-op , at start of %s\n [ 571.106867][T18515] dyndbg: flags parse failed [ 571.112687][T18515] dyndbg: bad flag-op , at start of with environment:\n [ 571.121938][T18516] Restarting kernel threads ... [ 571.127949][T18515] dyndbg: flags parse failed [ 571.133766][T18516] Done restarting kernel threads. [ 571.141562][T18515] dyndbg: bad flag-op , at start of %s\n [ 571.158058][T18515] dyndbg: flags parse failed [ 571.162827][T18515] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 571.176435][T18515] dyndbg: flags parse failed [ 571.181170][T18515] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 571.193239][T18515] dyndbg: flags parse failed [ 571.209399][T18515] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 571.225931][T18515] dyndbg: flags parse failed [ 571.231623][T18515] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 571.242340][T18515] dyndbg: flags parse failed [ 571.247784][T18515] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 571.258445][T18515] dyndbg: flags parse failed [ 571.263163][T18515] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 571.276973][T18515] dyndbg: flags parse failed [ 571.281680][T18515] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 571.293258][T18515] dyndbg: flags parse failed [ 571.298007][T18515] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 571.308537][T18515] dyndbg: flags parse failed [ 571.316169][T18515] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 571.337063][T18515] dyndbg: flags parse failed [ 571.353105][T18515] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 571.373068][T18515] dyndbg: flags parse failed [ 571.377712][T18515] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 571.429612][T18515] dyndbg: tokenize failed [ 571.884232][T18531] random: crng reseeded on system resumption [ 571.959485][T18534] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4807'. [ 572.010693][T18534] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4807'. [ 572.155899][ T30] audit: type=1326 audit(22955.878:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18540 comm="syz.1.4809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b0bd8f7c9 code=0x0 [ 572.459950][T18543] zswap: compressor not available [ 572.762766][T18555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4813'. [ 573.562903][T18582] Unable to find swap-space signature [ 573.764786][T18585] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 573.854780][T18585] kernel read not supported for file /dynamic_events (pid: 18585 comm: syz.2.4821) [ 573.919377][ T30] audit: type=1800 audit(22957.647:37): pid=18585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4821" name="dynamic_events" dev="tracefs" ino=26 res=0 errno=0 [ 574.628308][ T30] audit: type=1326 audit(22958.370:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18601 comm="syz.1.4828" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b0bd8f7c9 code=0x0 [ 574.668926][T18604] i2c i2c-0: delete_device: Can't parse I2C address [ 575.065657][T18581] kexec: Could not allocate control_code_buffer [ 575.154284][T18617] dyndbg: expected <4096 bytes into control [ 575.175071][T18617] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 575.188519][T18617] dyndbg: flags parse failed [ 575.198112][T18617] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 575.210487][T18617] dyndbg: flags parse failed [ 575.221958][T18617] dyndbg: bad flag-op , at start of with arguments:\n [ 575.233741][T18617] dyndbg: flags parse failed [ 575.243324][T18617] dyndbg: bad flag-op , at start of %s\n [ 575.258795][T18617] dyndbg: flags parse failed [ 575.268049][T18617] dyndbg: bad flag-op , at start of with environment:\n [ 575.283334][T18617] dyndbg: flags parse failed [ 575.299431][T18617] dyndbg: bad flag-op , at start of %s\n [ 575.312876][T18617] dyndbg: flags parse failed [ 575.326674][T18617] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 575.355468][T18617] dyndbg: flags parse failed [ 575.369385][T18617] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 575.390572][T18617] dyndbg: flags parse failed [ 575.399638][T18617] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 575.418704][T18617] dyndbg: flags parse failed [ 575.429908][T18617] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 575.444530][T18617] dyndbg: flags parse failed [ 575.476634][T18617] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 575.511145][T18617] dyndbg: flags parse failed [ 575.533919][T18617] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 575.559315][T18617] dyndbg: flags parse failed [ 575.564900][T18617] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 575.576577][T18617] dyndbg: flags parse failed [ 575.581299][T18617] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 575.591051][T18617] dyndbg: flags parse failed [ 575.596236][T18617] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 575.605718][T18617] dyndbg: flags parse failed [ 575.610403][T18617] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 575.619627][T18617] dyndbg: flags parse failed [ 575.625834][T18617] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 575.636715][T18617] dyndbg: tokenize failed [ 575.782664][T18627] hub 1-0:1.0: USB hub found [ 575.812714][T18627] hub 1-0:1.0: 1 port detected [ 575.998183][T18632] hub 1-0:1.0: USB hub found [ 576.053368][T18632] hub 1-0:1.0: 1 port detected [ 576.800981][T18656] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 577.554438][ T30] audit: type=1326 audit(22961.314:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18679 comm="syz.3.4844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6fb58f7c9 code=0x0 [ 578.102591][T18687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 578.110830][T18687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 578.121768][T18687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 578.129139][T18687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 580.131496][T15340] Bluetooth: hci2: command 0x0c1a tx timeout [ 580.152663][T17681] Bluetooth: hci1: command 0x0c1a tx timeout [ 580.193052][T15340] Bluetooth: hci3: command 0x0c1a tx timeout [ 580.200678][T17681] Bluetooth: hci4: command 0x0c1a tx timeout [ 580.260510][T18715] zswap: compressor not available [ 580.897799][T18728] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 581.292070][T18737] kernel read not supported for file /dynamic_events (pid: 18737 comm: syz.3.4856) [ 581.371536][ T30] audit: type=1800 audit(22965.143:40): pid=18737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4856" name="dynamic_events" dev="tracefs" ino=26 res=0 errno=0 [ 581.867781][T18742] dyndbg: expected <4096 bytes into control [ 581.874388][T18742] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 581.882023][T18742] dyndbg: flags parse failed [ 581.892872][T18742] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 581.952233][T18742] dyndbg: flags parse failed [ 581.993031][T18742] dyndbg: bad flag-op , at start of with arguments:\n [ 582.031834][T18742] dyndbg: flags parse failed [ 582.051607][T18742] dyndbg: bad flag-op , at start of %s\n [ 582.098400][T18742] dyndbg: flags parse failed [ 582.121694][T18742] dyndbg: bad flag-op , at start of with environment:\n [ 582.156581][T18742] dyndbg: flags parse failed [ 582.171065][T18742] dyndbg: bad flag-op , at start of %s\n [ 582.210930][T18742] dyndbg: flags parse failed [ 582.228577][T18742] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 582.263207][T18742] dyndbg: flags parse failed [ 582.330926][T18747] ERROR: Out of memory at tomoyo_memory_ok. [ 582.566086][T18742] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 582.718718][T18742] dyndbg: flags parse failed [ 582.728427][T18742] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 582.736654][T18742] dyndbg: flags parse failed [ 582.847830][T18742] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 582.927423][T18742] dyndbg: flags parse failed [ 582.932064][T18742] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 583.075153][T18742] dyndbg: flags parse failed [ 583.106847][T18742] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 583.168691][T18742] dyndbg: flags parse failed [ 583.236214][T18742] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 583.332081][T18742] dyndbg: flags parse failed [ 583.391095][T18742] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 583.488513][T18742] dyndbg: flags parse failed [ 583.663910][T18742] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 583.733926][T18742] dyndbg: flags parse failed [ 583.738571][T18742] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 583.892904][T18742] dyndbg: flags parse failed [ 583.950119][T18742] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 583.978648][T18742] dyndbg: tokenize failed [ 584.347625][T18769] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4865'. [ 584.389485][T18769] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4865'. [ 585.652693][ T30] audit: type=1326 audit(22969.443:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.3.4866" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6fb58f7c9 code=0x0 [ 586.312198][T18719] Bluetooth: hci3: Malformed LE Event: 0x1d [ 586.748927][ T30] audit: type=1326 audit(22970.538:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.3.4870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6fb58f7c9 code=0x0 [ 589.371243][ T30] audit: type=1326 audit(22973.181:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.3.4878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6fb58f7c9 code=0x0 [ 590.265420][T18826] zswap: compressor not available [ 591.642307][T18855] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4883'. [ 591.655931][T18855] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4883'. [ 591.900847][T18859] dyndbg: expected <4096 bytes into control [ 591.907403][T18859] random: crng reseeded on system resumption [ 591.960170][T18860] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 592.012717][T18859] Restarting kernel threads ... [ 592.020952][T18860] dyndbg: flags parse failed [ 592.034030][T18859] Done restarting kernel threads. [ 592.051255][T18860] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 592.122413][T18863] FAULT_INJECTION: forcing a failure. [ 592.122413][T18863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.292416][T18863] CPU: 1 UID: 0 PID: 18863 Comm: syz.0.4884 Not tainted syzkaller #0 PREEMPT(full) [ 592.292452][T18863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.292467][T18863] Call Trace: [ 592.292475][T18863] [ 592.292485][T18863] dump_stack_lvl+0x16c/0x1f0 [ 592.292518][T18863] should_fail_ex+0x512/0x640 [ 592.292556][T18863] _copy_to_user+0x32/0xd0 [ 592.292583][T18863] simple_read_from_buffer+0xcb/0x170 [ 592.292625][T18863] proc_fail_nth_read+0x197/0x240 [ 592.292654][T18863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.292686][T18863] ? rw_verify_area+0xcf/0x6c0 [ 592.292710][T18863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.292738][T18863] vfs_read+0x1e4/0xcf0 [ 592.292769][T18863] ? __pfx___mutex_lock+0x10/0x10 [ 592.292800][T18863] ? __pfx_vfs_read+0x10/0x10 [ 592.292833][T18863] ? __fget_files+0x20e/0x3c0 [ 592.292863][T18863] ksys_read+0x12a/0x250 [ 592.292894][T18863] ? __pfx_ksys_read+0x10/0x10 [ 592.292928][T18863] do_syscall_64+0xcd/0xfa0 [ 592.292956][T18863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.292980][T18863] RIP: 0033:0x7fc35878e1dc [ 592.293000][T18863] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 592.293024][T18863] RSP: 002b:00007fc3569f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 592.293048][T18863] RAX: ffffffffffffffda RBX: 00007fc3589e6180 RCX: 00007fc35878e1dc [ 592.293066][T18863] RDX: 000000000000000f RSI: 00007fc3569f60a0 RDI: 0000000000000006 [ 592.293081][T18863] RBP: 00007fc3569f6090 R08: 0000000000000000 R09: 0000000000000000 [ 592.293100][T18863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.293115][T18863] R13: 00007fc3589e6218 R14: 00007fc3589e6180 R15: 00007ffe77fc6148 [ 592.293151][T18863] [ 592.306126][T18860] dyndbg: flags parse failed [ 592.505498][T18860] dyndbg: bad flag-op , at start of with arguments:\n [ 592.514946][T18860] dyndbg: flags parse failed [ 592.529603][T18860] dyndbg: bad flag-op , at start of %s\n [ 592.583404][T18860] dyndbg: flags parse failed [ 592.607349][T18860] dyndbg: bad flag-op , at start of with environment:\n [ 592.658623][T18860] dyndbg: flags parse failed [ 592.713184][T18860] dyndbg: bad flag-op , at start of %s\n [ 592.738627][T18860] dyndbg: flags parse failed [ 592.760059][T18860] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 592.790172][T18860] dyndbg: flags parse failed [ 592.794997][T18860] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 592.845437][T18860] dyndbg: flags parse failed [ 592.859948][T18860] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 592.878400][T18860] dyndbg: flags parse failed [ 592.888490][T18860] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 592.905112][T18860] dyndbg: flags parse failed [ 592.920306][T18860] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 592.942942][T18860] dyndbg: flags parse failed [ 592.953025][T18860] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 592.969253][T18860] dyndbg: flags parse failed [ 592.994383][T18860] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 593.009641][T18879] netlink: 'syz.2.4889': attribute type 1 has an invalid length. [ 593.031719][T18860] dyndbg: flags parse failed [ 593.058896][T18860] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 593.088329][T18860] dyndbg: flags parse failed [ 593.094180][T18860] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 593.123531][T18860] dyndbg: flags parse failed [ 593.128166][T18860] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 593.157352][T18860] dyndbg: flags parse failed [ 593.167444][T18860] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 593.187639][T18860] dyndbg: tokenize failed [ 594.106744][T18905] FAULT_INJECTION: forcing a failure. [ 594.106744][T18905] name failslab, interval 1, probability 0, space 0, times 0 [ 594.120109][T18905] CPU: 1 UID: 0 PID: 18905 Comm: syz.0.4896 Not tainted syzkaller #0 PREEMPT(full) [ 594.120146][T18905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.120163][T18905] Call Trace: [ 594.120172][T18905] [ 594.120183][T18905] dump_stack_lvl+0x16c/0x1f0 [ 594.120222][T18905] should_fail_ex+0x512/0x640 [ 594.120262][T18905] ? __kmalloc_cache_noprof+0x5f/0x780 [ 594.120290][T18905] should_failslab+0xc2/0x120 [ 594.120325][T18905] __kmalloc_cache_noprof+0x72/0x780 [ 594.120350][T18905] ? lockdep_hardirqs_on+0x7c/0x110 [ 594.120380][T18905] ? sctp_endpoint_new+0xfc/0xb20 [ 594.120419][T18905] ? sctp_endpoint_new+0xfc/0xb20 [ 594.120451][T18905] sctp_endpoint_new+0xfc/0xb20 [ 594.120487][T18905] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 594.120522][T18905] ? lockdep_init_map_type+0x5c/0x280 [ 594.120559][T18905] ? lockdep_init_map_type+0x5c/0x280 [ 594.120601][T18905] sctp_init_sock+0xe2b/0x12f0 [ 594.120630][T18905] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 594.120663][T18905] sctp_v6_init_sock+0x16/0x70 [ 594.120692][T18905] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 594.120721][T18905] inet6_create+0xb30/0x12b0 [ 594.120764][T18905] ? inet6_create+0x7f/0x12b0 [ 594.120801][T18905] __sock_create+0x338/0x8d0 [ 594.120841][T18905] __sys_socket+0x14d/0x260 [ 594.120876][T18905] ? __pfx___sys_socket+0x10/0x10 [ 594.120910][T18905] ? xfd_validate_state+0x61/0x180 [ 594.120944][T18905] ? __pfx_ksys_write+0x10/0x10 [ 594.120981][T18905] __x64_sys_socket+0x72/0xb0 [ 594.121012][T18905] ? lockdep_hardirqs_on+0x7c/0x110 [ 594.121044][T18905] do_syscall_64+0xcd/0xfa0 [ 594.121078][T18905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.121104][T18905] RIP: 0033:0x7fc35878f7c9 [ 594.121125][T18905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.121149][T18905] RSP: 002b:00007fc35956e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 594.121174][T18905] RAX: ffffffffffffffda RBX: 00007fc3589e5fa0 RCX: 00007fc35878f7c9 [ 594.121193][T18905] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 594.121210][T18905] RBP: 00007fc358813f91 R08: 0000000000000000 R09: 0000000000000000 [ 594.121227][T18905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.121243][T18905] R13: 00007fc3589e6038 R14: 00007fc3589e5fa0 R15: 00007ffe77fc6148 [ 594.121279][T18905] [ 594.851350][T18901] zswap: compressor not available [ 595.073737][T18913] dyndbg: expected <4096 bytes into control [ 595.080791][T18913] random: crng reseeded on system resumption [ 595.138759][T18913] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 595.183855][T18913] dyndbg: flags parse failed [ 595.231651][T18915] Restarting kernel threads ... [ 595.248687][T18913] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 595.268886][T18915] Done restarting kernel threads. [ 595.276883][T18913] dyndbg: flags parse failed [ 595.304332][T18913] dyndbg: bad flag-op , at start of with arguments:\n [ 595.317812][T18913] dyndbg: flags parse failed [ 595.334681][T18913] dyndbg: bad flag-op , at start of %s\n [ 595.397709][T18913] dyndbg: flags parse failed [ 595.402731][T18913] dyndbg: bad flag-op , at start of with environment:\n [ 595.465359][T18913] dyndbg: flags parse failed [ 595.515679][T18913] dyndbg: bad flag-op , at start of %s\n [ 595.576595][T18913] dyndbg: flags parse failed [ 595.616337][T18913] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 595.624464][T18913] dyndbg: flags parse failed [ 595.656348][T18913] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 595.674619][T18913] dyndbg: flags parse failed [ 595.685151][T18913] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 595.710342][T18913] dyndbg: flags parse failed [ 595.716752][T18913] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 595.724918][T18913] dyndbg: flags parse failed [ 595.730384][T18913] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 595.738873][T18913] dyndbg: flags parse failed [ 595.743653][T18913] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 595.752952][T18913] dyndbg: flags parse failed [ 595.761868][T18913] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 595.774145][T18913] dyndbg: flags parse failed [ 595.779297][T18913] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 595.818618][T18913] dyndbg: flags parse failed [ 595.826233][T18913] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 595.854099][T18913] dyndbg: flags parse failed [ 595.873487][T18913] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 595.927697][T18913] dyndbg: flags parse failed [ 595.961606][T18913] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 595.980409][T18913] dyndbg: tokenize failed [ 596.499204][T18938] random: crng reseeded on system resumption [ 596.538762][T18938] Restarting kernel threads ... [ 596.545065][T18938] Done restarting kernel threads. [ 596.932450][T18955] netlink: 'syz.0.4909': attribute type 2 has an invalid length. [ 598.250133][T18975] zswap: compressor not available [ 598.367079][T18990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4915'. [ 598.382808][T18991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4915'. [ 600.780084][T19015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4924'. [ 601.052798][T19019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4923'. [ 601.836050][T19044] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4929'. [ 601.922062][T19044] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4929'. [ 602.885157][T19052] zswap: compressor not available [ 606.390987][T19112] dyndbg: expected <4096 bytes into control [ 606.399287][T19112] random: crng reseeded on system resumption [ 606.420185][T19112] Restarting kernel threads ... [ 606.426076][T19112] Done restarting kernel threads. [ 607.205044][T19119] random: crng reseeded on system resumption [ 607.334698][T19119] Restarting kernel threads ... [ 607.352275][T19119] Done restarting kernel threads. [ 607.698497][T19124] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4949'. [ 607.719421][T19124] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4949'. [ 608.144617][T19130] zswap: compressor not available [ 608.166930][T19146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4954'. [ 608.316905][T19146] raw_sendmsg: syz.1.4954 forgot to set AF_INET. Fix it! [ 608.358387][ T30] audit: type=1800 audit(22992.262:44): pid=19150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4955" name="dbroot" dev="configfs" ino=81615 res=0 errno=0 [ 608.515144][T19157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4955'. [ 608.878636][T19154] FAULT_INJECTION: forcing a failure. [ 608.878636][T19154] name failslab, interval 1, probability 0, space 0, times 0 [ 608.942259][T19154] CPU: 1 UID: 0 PID: 19154 Comm: syz.0.4956 Not tainted syzkaller #0 PREEMPT(full) [ 608.942295][T19154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 608.942309][T19154] Call Trace: [ 608.942317][T19154] [ 608.942327][T19154] dump_stack_lvl+0x16c/0x1f0 [ 608.942367][T19154] should_fail_ex+0x512/0x640 [ 608.942406][T19154] ? __kmalloc_noprof+0xca/0x880 [ 608.942432][T19154] should_failslab+0xc2/0x120 [ 608.942469][T19154] __kmalloc_noprof+0xdd/0x880 [ 608.942492][T19154] ? fib_rules_register+0x403/0x500 [ 608.942518][T19154] ? fib_default_rule_add+0x4f/0x420 [ 608.942551][T19154] ? fib_default_rule_add+0x4f/0x420 [ 608.942574][T19154] fib_default_rule_add+0x4f/0x420 [ 608.942603][T19154] fib4_rules_init+0x52/0x1c0 [ 608.942639][T19154] fib_net_init+0x1dc/0x3f0 [ 608.942666][T19154] ? __pfx___register_sysctl_table+0x10/0x10 [ 608.942704][T19154] ? __pfx_fib_net_init+0x10/0x10 [ 608.942732][T19154] ? lockdep_init_map_type+0x5c/0x280 [ 608.942766][T19154] ? do_init_timer+0xc9/0x110 [ 608.942797][T19154] ? devinet_init_net+0x5c2/0x910 [ 608.942832][T19154] ? __pfx_fib_net_init+0x10/0x10 [ 608.942858][T19154] ops_init+0x1e2/0x5f0 [ 608.942890][T19154] setup_net+0x100/0x390 [ 608.942914][T19154] ? __pfx_setup_net+0x10/0x10 [ 608.942951][T19154] ? debug_mutex_init+0x37/0x70 [ 608.942981][T19154] copy_net_ns+0x2f8/0x690 [ 608.943012][T19154] create_new_namespaces+0x3ea/0xa90 [ 608.943046][T19154] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 608.943074][T19154] ksys_unshare+0x45b/0xa40 [ 608.943094][T19154] ? __pfx_ksys_unshare+0x10/0x10 [ 608.943111][T19154] ? xfd_validate_state+0x61/0x180 [ 608.943136][T19154] __x64_sys_unshare+0x31/0x40 [ 608.943152][T19154] do_syscall_64+0xcd/0xfa0 [ 608.943170][T19154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.943185][T19154] RIP: 0033:0x7fc35878f7c9 [ 608.943197][T19154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.943215][T19154] RSP: 002b:00007fc35956e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 608.943229][T19154] RAX: ffffffffffffffda RBX: 00007fc3589e5fa0 RCX: 00007fc35878f7c9 [ 608.943239][T19154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 608.943247][T19154] RBP: 00007fc358813f91 R08: 0000000000000000 R09: 0000000000000000 [ 608.943255][T19154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.943263][T19154] R13: 00007fc3589e6038 R14: 00007fc3589e5fa0 R15: 00007ffe77fc6148 [ 608.943282][T19154] [ 610.092686][T19170] dyndbg: expected <4096 bytes into control [ 610.099526][T19170] random: crng reseeded on system resumption [ 610.122693][T19170] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 610.146557][T19170] dyndbg: flags parse failed [ 610.151240][T19170] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 610.173382][T19172] Restarting kernel threads ... [ 610.193240][T19170] dyndbg: flags parse failed [ 610.199252][T19172] Done restarting kernel threads. [ 610.210678][T19170] dyndbg: bad flag-op , at start of with arguments:\n [ 610.236153][T19170] dyndbg: flags parse failed [ 610.249938][T19170] dyndbg: bad flag-op , at start of %s\n [ 610.266033][T19170] dyndbg: flags parse failed [ 610.283764][T19170] dyndbg: bad flag-op , at start of with environment:\n [ 610.340903][T19170] dyndbg: flags parse failed [ 610.355523][T19170] dyndbg: bad flag-op , at start of %s\n [ 610.373887][T19170] dyndbg: flags parse failed [ 610.405031][T19170] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 610.482329][T19170] dyndbg: flags parse failed [ 610.514710][T19170] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 610.527990][T19170] dyndbg: flags parse failed [ 610.537411][T19170] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 610.564566][T19170] dyndbg: flags parse failed [ 610.570096][T19170] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 610.620272][T19170] dyndbg: flags parse failed [ 610.634181][T19170] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 610.655477][T19170] dyndbg: flags parse failed [ 610.671248][T19170] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 610.701323][T19170] dyndbg: flags parse failed [ 610.718356][T19170] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 610.795265][T19170] dyndbg: flags parse failed [ 610.801121][T19170] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 610.823628][T19170] dyndbg: flags parse failed [ 610.828390][T19170] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 610.837515][T19170] dyndbg: flags parse failed [ 610.842232][T19170] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 610.850934][T19170] dyndbg: flags parse failed [ 610.855735][T19170] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 610.863969][T19170] dyndbg: tokenize failed [ 611.862003][T19190] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4966'. [ 611.915763][T19190] : renamed from bridge_slave_1 (while UP) [ 611.961380][T19190] bridge0: port 2() entered disabled state [ 612.001254][T19193] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4962'. [ 612.057570][T19193] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4962'. [ 612.235485][ T30] audit: type=1800 audit(22996.141:45): pid=19197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4967" name="dbroot" dev="configfs" ino=82732 res=0 errno=0 [ 612.349745][T19199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4967'. [ 613.033495][ T30] audit: type=1326 audit(22996.965:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.3.4970" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6fb58f7c9 code=0x0 [ 613.766093][T19218] zswap: compressor not available [ 614.410918][T19237] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4976'. [ 614.444559][T19237] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4976'. [ 616.282459][T19239] kexec: Could not allocate control_code_buffer [ 616.677412][T19282] dyndbg: expected <4096 bytes into control [ 616.679716][T19282] net_ratelimit: 11 callbacks suppressed [ 616.679733][T19282] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 616.680380][T19282] random: crng reseeded on system resumption [ 616.690761][T19282] synth uevent: /devices/virtual/net/nr1: unknown uevent action string [ 616.690835][T19282] net nr1: uevent: failed to send synthetic uevent: -22 [ 616.694058][T19282] Restarting kernel threads ... [ 616.694521][T19282] Done restarting kernel threads. [ 616.715822][ T30] audit: type=1804 audit(23000.632:47): pid=19282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4987" name="/newroot/sys/kernel/tracing/options/blk_classic" dev="tracefs" ino=1124 res=1 errno=0 [ 618.810246][T19314] zswap: compressor not available [ 618.835297][T19324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4995'. [ 619.179479][ T30] audit: type=1326 audit(23003.134:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.1.4996" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b0bd8f7c9 code=0x0 [ 619.284303][T19334] random: crng reseeded on system resumption [ 619.295876][T19334] Restarting kernel threads ... [ 619.301034][T19334] Done restarting kernel threads. [ 621.002214][T19365] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5006'. [ 621.056283][T19367] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5006'. [ 621.470702][ T30] audit: type=1326 audit(23005.425:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.3.5011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6fb58f7c9 code=0x0 [ 621.525613][T19382] __vm_enough_memory: pid: 19382, comm: syz.1.5012, bytes: 4398046511104 not enough memory for the allocation [ 621.537738][T19379] random: crng reseeded on system resumption [ 621.562154][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject' [ 621.602452][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.649954][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.666334][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.677501][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.745966][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.765407][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.789526][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.805518][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.816628][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.827745][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.839009][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.874707][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.895857][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.907168][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.923816][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.937036][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 621.951043][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.012937][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.028512][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.046869][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.057937][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.069002][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.080549][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.119302][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.139298][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.157838][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.181774][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.218895][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.229926][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.241102][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.259327][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.288702][T19383] nfsd: Unknown parameter '/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/in' [ 622.529001][T19403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5018'. [ 622.748682][T17001] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.760932][T17001] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.777958][T17001] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.803606][T17001] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.480703][T19423] dyndbg: expected <4096 bytes into control [ 623.489688][T19423] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 623.498923][T19423] random: crng reseeded on system resumption [ 623.513858][T19423] synth uevent: /devices/virtual/net/nr1: unknown uevent action string [ 623.553941][T19423] net nr1: uevent: failed to send synthetic uevent: -22 [ 623.612655][T19423] Restarting kernel threads ... [ 623.618433][T19423] Done restarting kernel threads. [ 623.676661][T19427] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5022'. [ 623.689866][T19427] : renamed from bridge_slave_1 (while UP) [ 623.753124][T19427] bridge0: port 2() entered disabled state [ 624.143581][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.150017][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.321324][T19441] random: crng reseeded on system resumption [ 624.616355][T19444] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(258.0.52), cmd(3) [ 625.899236][T19467] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5031'. [ 625.997137][T19473] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5032'. [ 626.061247][T19473] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5032'. [ 626.810487][T19492] svc: failed to register nfsdv3 RPC service (errno 111). [ 626.825695][T19492] svc: failed to register nfsaclv3 RPC service (errno 111). [ 627.451843][T18719] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 627.505491][T18719] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 627.515161][T18719] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 627.517125][T19515] can: request_module (can-proto-5) failed. [ 627.524660][T18719] CPU: 0 UID: 0 PID: 18719 Comm: kworker/u12:3 Not tainted syzkaller #0 PREEMPT(full) [ 627.524697][T18719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.524714][T18719] Workqueue: hci4 hci_rx_work [ 627.524746][T18719] Call Trace: [ 627.524756][T18719] [ 627.524767][T18719] dump_stack_lvl+0x16c/0x1f0 [ 627.524803][T18719] sysfs_warn_dup+0x7f/0xa0 [ 627.524837][T18719] sysfs_create_dir_ns+0x24b/0x2b0 [ 627.524868][T18719] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 627.524899][T18719] ? find_held_lock+0x2b/0x80 [ 627.524933][T18719] ? do_raw_spin_unlock+0x172/0x230 [ 627.524960][T18719] kobject_add_internal+0x2c4/0x9b0 [ 627.525001][T18719] kobject_add+0x16e/0x240 [ 627.525034][T18719] ? __pfx_kobject_add+0x10/0x10 [ 627.525071][T18719] ? do_raw_spin_unlock+0x172/0x230 [ 627.525096][T18719] ? kobject_put+0xab/0x5a0 [ 627.525139][T18719] device_add+0x288/0x1aa0 [ 627.525179][T18719] ? __pfx_dev_set_name+0x10/0x10 [ 627.525204][T18719] ? __pfx_device_add+0x10/0x10 [ 627.525244][T18719] ? mgmt_send_event_skb+0x2fb/0x460 [ 627.525289][T18719] hci_conn_add_sysfs+0x17e/0x230 [ 627.525325][T18719] le_conn_complete_evt+0x1260/0x2150 [ 627.525364][T18719] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 627.525392][T18719] ? bt_warn+0xe4/0x120 [ 627.525416][T18719] ? __pfx_bt_warn+0x10/0x10 [ 627.525450][T18719] hci_le_conn_complete_evt+0x23c/0x370 [ 627.525487][T18719] hci_le_meta_evt+0x357/0x5e0 [ 627.525517][T18719] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 627.525550][T18719] hci_event_packet+0x685/0x11c0 [ 627.525578][T18719] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 627.525610][T18719] ? __pfx_hci_event_packet+0x10/0x10 [ 627.525642][T18719] ? kcov_remote_start+0x3c9/0x6d0 [ 627.525667][T18719] ? lockdep_hardirqs_on+0x7c/0x110 [ 627.525707][T18719] hci_rx_work+0x2c9/0xeb0 [ 627.525741][T18719] process_one_work+0x9cf/0x1b70 [ 627.525794][T18719] ? __pfx_process_one_work+0x10/0x10 [ 627.525842][T18719] ? assign_work+0x1a0/0x250 [ 627.525881][T18719] worker_thread+0x6c8/0xf10 [ 627.525916][T18719] ? __kthread_parkme+0x19e/0x250 [ 627.525950][T18719] ? __pfx_worker_thread+0x10/0x10 [ 627.525972][T18719] kthread+0x3c5/0x780 [ 627.526009][T18719] ? __pfx_kthread+0x10/0x10 [ 627.526048][T18719] ? rcu_is_watching+0x12/0xc0 [ 627.526086][T18719] ? __pfx_kthread+0x10/0x10 [ 627.526127][T18719] ret_from_fork+0x675/0x7d0 [ 627.526164][T18719] ? __pfx_kthread+0x10/0x10 [ 627.526201][T18719] ret_from_fork_asm+0x1a/0x30 [ 627.526255][T18719] [ 627.526298][T18719] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 627.792101][T18719] Bluetooth: hci4: failed to register connection device [ 629.474178][T18719] Bluetooth: hci4: command 0x0c1a tx timeout [ 629.492849][T19569] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 630.591109][T19611] __vm_enough_memory: pid: 19611, comm: syz.0.5064, bytes: 4398046511104 not enough memory for the allocation [ 630.643471][T19610] netlink: 338 bytes leftover after parsing attributes in process `syz.1.5063'. [ 631.057422][T19613] zswap: compressor not available [ 631.543776][T15333] Bluetooth: hci4: command 0x0c1a tx timeout [ 631.726792][T19640] FAULT_INJECTION: forcing a failure. [ 631.726792][T19640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.796527][T19640] CPU: 1 UID: 0 PID: 19640 Comm: syz.3.5073 Not tainted syzkaller #0 PREEMPT(full) [ 631.796568][T19640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 631.796586][T19640] Call Trace: [ 631.796595][T19640] [ 631.796602][T19640] dump_stack_lvl+0x16c/0x1f0 [ 631.796625][T19640] should_fail_ex+0x512/0x640 [ 631.796653][T19640] _copy_from_user+0x2e/0xd0 [ 631.796677][T19640] memdup_user+0x6b/0xe0 [ 631.796693][T19640] strndup_user+0x78/0xe0 [ 631.796708][T19640] __x64_sys_fsopen+0x9c/0x240 [ 631.796729][T19640] do_syscall_64+0xcd/0xfa0 [ 631.796747][T19640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.796762][T19640] RIP: 0033:0x7fd6fb58f7c9 [ 631.796774][T19640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.796788][T19640] RSP: 002b:00007fd6fc386038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 631.796802][T19640] RAX: ffffffffffffffda RBX: 00007fd6fb7e5fa0 RCX: 00007fd6fb58f7c9 [ 631.796812][T19640] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 631.796820][T19640] RBP: 00007fd6fb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 631.796828][T19640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.796840][T19640] R13: 00007fd6fb7e6038 R14: 00007fd6fb7e5fa0 R15: 00007fffcac67b68 [ 631.796859][T19640] [ 632.425273][T19652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5076'. [ 632.522014][T17000] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.532395][T17000] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.555619][T17000] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.389527][T19685] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5084'. [ 633.401489][T19685] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5084'. [ 633.994533][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5091'. [ 634.002809][T19702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5089'. [ 634.056126][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5091'. [ 635.058760][T19724] random: crng reseeded on system resumption [ 635.091089][T19724] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 635.107198][T19724] dyndbg: flags parse failed [ 635.111836][T19724] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 635.166158][T19724] dyndbg: flags parse failed [ 635.172335][T19729] Restarting kernel threads ... [ 635.177394][T19724] dyndbg: bad flag-op , at start of with arguments:\n [ 635.201330][T19729] Done restarting kernel threads. [ 635.216055][T19724] dyndbg: flags parse failed [ 635.220690][T19724] dyndbg: bad flag-op , at start of %s\n [ 635.237824][T19724] dyndbg: flags parse failed [ 635.303183][T19724] dyndbg: bad flag-op , at start of with environment:\n [ 635.365425][T19724] dyndbg: flags parse failed [ 635.374314][T19724] dyndbg: bad flag-op , at start of %s\n [ 635.400585][T19724] dyndbg: flags parse failed [ 635.428360][T19724] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 635.455526][T19724] dyndbg: flags parse failed [ 635.470682][T19724] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 635.514779][T19724] dyndbg: flags parse failed [ 635.522224][T19724] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 635.683671][T19724] dyndbg: flags parse failed [ 635.707435][T19724] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 635.754844][T19724] dyndbg: flags parse failed [ 635.776854][T19724] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 635.813025][T19724] dyndbg: flags parse failed [ 635.817909][T19724] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 635.848228][T19724] dyndbg: flags parse failed [ 635.878433][T19724] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 635.913012][T19724] dyndbg: flags parse failed [ 635.917654][T19724] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 635.982252][T19724] dyndbg: flags parse failed [ 636.022653][T19724] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 636.037187][T19724] dyndbg: flags parse failed [ 636.052837][T19724] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 636.070433][T19724] dyndbg: flags parse failed [ 636.080640][T19724] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 636.091554][T19724] dyndbg: tokenize failed [ 636.100770][T19737] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5100'. [ 636.136184][T19737] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5100'. [ 636.260284][T19747] netlink: 'syz.3.5103': attribute type 2 has an invalid length. [ 636.825598][T19777] sp0: Synchronizing with TNC [ 636.843305][T19783] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5113'. [ 636.861116][T19783] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5113'. [ 639.041072][T19853] FAULT_INJECTION: forcing a failure. [ 639.041072][T19853] name failslab, interval 1, probability 0, space 0, times 0 [ 639.136352][T19853] CPU: 1 UID: 0 PID: 19853 Comm: syz.0.5126 Not tainted syzkaller #0 PREEMPT(full) [ 639.136376][T19853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 639.136392][T19853] Call Trace: [ 639.136398][T19853] [ 639.136440][T19853] dump_stack_lvl+0x16c/0x1f0 [ 639.136463][T19853] should_fail_ex+0x512/0x640 [ 639.136485][T19853] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 639.136503][T19853] should_failslab+0xc2/0x120 [ 639.136527][T19853] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 639.136547][T19853] ? __d_alloc+0x32/0xae0 [ 639.136567][T19853] ? __d_alloc+0x32/0xae0 [ 639.136582][T19853] __d_alloc+0x32/0xae0 [ 639.136599][T19853] d_alloc_parallel+0x111/0x1510 [ 639.136621][T19853] ? __lock_acquire+0xb8a/0x1c90 [ 639.136644][T19853] ? __pfx_d_alloc_parallel+0x10/0x10 [ 639.136663][T19853] ? __lock_acquire+0xb8a/0x1c90 [ 639.136682][T19853] ? lockdep_init_map_type+0x5c/0x280 [ 639.136701][T19853] ? lockdep_init_map_type+0x5c/0x280 [ 639.136723][T19853] __lookup_slow+0x193/0x460 [ 639.136744][T19853] ? __pfx___lookup_slow+0x10/0x10 [ 639.136775][T19853] ? lookup_fast+0x156/0x610 [ 639.136786][T19853] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 639.136807][T19853] walk_component+0x353/0x5b0 [ 639.136822][T19853] link_path_walk+0x627/0xe20 [ 639.136842][T19853] path_openat+0x1b0/0x2cb0 [ 639.136863][T19853] ? __pfx_path_openat+0x10/0x10 [ 639.136879][T19853] ? __lock_acquire+0xb8a/0x1c90 [ 639.136899][T19853] do_filp_open+0x20b/0x470 [ 639.136915][T19853] ? __pfx_do_filp_open+0x10/0x10 [ 639.136978][T19853] ? alloc_fd+0x471/0x7d0 [ 639.137015][T19853] do_sys_openat2+0x11b/0x1d0 [ 639.137044][T19853] ? __pfx_do_sys_openat2+0x10/0x10 [ 639.137071][T19853] __x64_sys_openat+0x174/0x210 [ 639.137091][T19853] ? __pfx___x64_sys_openat+0x10/0x10 [ 639.137112][T19853] ? syscall_user_dispatch+0x78/0x140 [ 639.137131][T19853] do_syscall_64+0xcd/0xfa0 [ 639.137149][T19853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.137167][T19853] RIP: 0033:0x7fc35878f7c9 [ 639.137179][T19853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.137206][T19853] RSP: 002b:00007fc35954d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 639.137222][T19853] RAX: ffffffffffffffda RBX: 00007fc3589e6090 RCX: 00007fc35878f7c9 [ 639.137244][T19853] RDX: 0000000000101102 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 639.137254][T19853] RBP: 00007fc358813f91 R08: 0000000000000000 R09: 0000000000000000 [ 639.137263][T19853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.137272][T19853] R13: 00007fc3589e6128 R14: 00007fc3589e6090 R15: 00007ffe77fc6148 [ 639.137295][T19853] [ 639.804067][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5132'. [ 640.193122][T19885] FAULT_INJECTION: forcing a failure. [ 640.193122][T19885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.206476][T19885] CPU: 1 UID: 0 PID: 19885 Comm: syz.3.5134 Not tainted syzkaller #0 PREEMPT(full) [ 640.206514][T19885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 640.206531][T19885] Call Trace: [ 640.206541][T19885] [ 640.206552][T19885] dump_stack_lvl+0x16c/0x1f0 [ 640.206590][T19885] should_fail_ex+0x512/0x640 [ 640.206635][T19885] _copy_to_user+0x32/0xd0 [ 640.206664][T19885] copy_to_sockptr_offset.constprop.0+0x12f/0x150 [ 640.206708][T19885] ? __pfx_copy_to_sockptr_offset.constprop.0+0x10/0x10 [ 640.206758][T19885] ? bpf_vlog_finalize+0x1ba/0x360 [ 640.206794][T19885] bpf_check+0x24c0/0xbdd0 [ 640.206831][T19885] ? find_held_lock+0x2b/0x80 [ 640.206863][T19885] ? __up_read+0x1f8/0x750 [ 640.206912][T19885] ? __lock_acquire+0xb8a/0x1c90 [ 640.206951][T19885] ? __pfx_bpf_check+0x10/0x10 [ 640.207003][T19885] ? find_held_lock+0x2b/0x80 [ 640.207034][T19885] ? rcu_is_watching+0x12/0xc0 [ 640.207061][T19885] ? ktime_get_with_offset+0x26e/0x3b0 [ 640.207094][T19885] ? __asan_memset+0x23/0x50 [ 640.207119][T19885] ? lsm_blob_alloc+0x2b/0x90 [ 640.207152][T19885] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 640.207190][T19885] bpf_prog_load+0x112e/0x2850 [ 640.207223][T19885] ? __pfx_bpf_prog_load+0x10/0x10 [ 640.207248][T19885] ? __lock_acquire+0xb8a/0x1c90 [ 640.207314][T19885] ? bpf_lsm_bpf+0x9/0x10 [ 640.207350][T19885] __sys_bpf+0x3e72/0x4980 [ 640.207376][T19885] ? futex_private_hash_put+0xd5/0x190 [ 640.207414][T19885] ? __pfx___sys_bpf+0x10/0x10 [ 640.207442][T19885] ? __pfx_futex_wait+0x10/0x10 [ 640.207486][T19885] ? do_futex+0x122/0x350 [ 640.207539][T19885] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 640.207574][T19885] ? xfd_validate_state+0x61/0x180 [ 640.207619][T19885] __x64_sys_bpf+0x78/0xc0 [ 640.207647][T19885] ? lockdep_hardirqs_on+0x7c/0x110 [ 640.207679][T19885] do_syscall_64+0xcd/0xfa0 [ 640.207713][T19885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.207741][T19885] RIP: 0033:0x7fd6fb58f7c9 [ 640.207764][T19885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.207790][T19885] RSP: 002b:00007fd6fc365038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 640.207816][T19885] RAX: ffffffffffffffda RBX: 00007fd6fb7e6090 RCX: 00007fd6fb58f7c9 [ 640.207835][T19885] RDX: 0000000000000101 RSI: 0000200000000100 RDI: 0000000000000005 [ 640.207853][T19885] RBP: 00007fd6fb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 640.207869][T19885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.207886][T19885] R13: 00007fd6fb7e6128 R14: 00007fd6fb7e6090 R15: 00007fffcac67b68 [ 640.207923][T19885] [ 641.072156][T19905] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5137'. [ 641.094346][T19905] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5137'. [ 642.973134][T19951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 643.077175][T19960] vhci_hcd: invalid port number 252 [ 643.095385][T19960] vhci_hcd: default hub control req: 040f v0772 i00fc l2 [ 644.330275][T19996] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5158'. [ 644.351769][T19996] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5158'. [ 644.447631][T20001] dyndbg: expected <4096 bytes into control [ 644.468012][T20001] random: crng reseeded on system resumption [ 644.493547][T20003] netlink: 25 bytes leftover after parsing attributes in process `syz.2.5160'. [ 644.505807][T20001] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 644.508923][T20003] program syz.2.5160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.514836][T20001] dyndbg: flags parse failed [ 644.533799][T20001] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 644.559138][T20001] dyndbg: flags parse failed [ 644.575894][T20001] dyndbg: bad flag-op , at start of with arguments:\n [ 644.651064][T20001] dyndbg: flags parse failed [ 644.656273][T20001] dyndbg: bad flag-op , at start of %s\n [ 644.662943][T20001] dyndbg: flags parse failed [ 644.667704][T20001] dyndbg: bad flag-op , at start of with environment:\n [ 644.675827][T20001] dyndbg: flags parse failed [ 644.680836][T20001] dyndbg: bad flag-op , at start of %s\n [ 644.687057][T20001] dyndbg: flags parse failed [ 644.694771][T20001] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 644.703338][T20001] dyndbg: flags parse failed [ 644.708079][T20001] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 644.719434][T20001] dyndbg: flags parse failed [ 644.724119][T20001] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 644.732795][T20001] dyndbg: flags parse failed [ 644.737473][T20001] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 644.746080][T20001] dyndbg: flags parse failed [ 644.751076][T20001] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 644.767993][T20001] dyndbg: flags parse failed [ 644.818711][T20001] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 644.844685][T20001] dyndbg: flags parse failed [ 644.859558][T20001] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 644.888370][T20001] dyndbg: flags parse failed [ 644.893012][T20001] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 644.938092][T20001] dyndbg: flags parse failed [ 644.952081][T20001] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 644.974665][T20001] dyndbg: flags parse failed [ 644.988991][T20001] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 645.052395][T20001] dyndbg: flags parse failed [ 645.070031][T20001] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 645.087453][T20001] dyndbg: tokenize failed [ 646.134788][T16141] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.153883][T20045] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 647.097801][T20088] block nbd14: the capability attribute has been deprecated. [ 647.108616][T20087] random: crng reseeded on system resumption [ 647.612845][T20102] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 648.554619][T20116] dyndbg: expected <4096 bytes into control [ 648.571390][T20116] random: crng reseeded on system resumption [ 648.608477][T20116] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 648.637328][T20116] dyndbg: flags parse failed [ 648.662349][T20124] Restarting kernel threads ... [ 648.678879][T20116] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 648.703365][T20124] Done restarting kernel threads. [ 648.710009][T20116] dyndbg: flags parse failed [ 648.714832][T20116] dyndbg: bad flag-op , at start of with arguments:\n [ 648.764306][T20116] dyndbg: flags parse failed [ 648.780364][T20116] dyndbg: bad flag-op , at start of %s\n [ 648.812774][T20116] dyndbg: flags parse failed [ 648.817451][T20116] dyndbg: bad flag-op , at start of with environment:\n [ 648.879748][T20116] dyndbg: flags parse failed [ 648.884417][T20116] dyndbg: bad flag-op , at start of %s\n [ 648.891042][T20116] dyndbg: flags parse failed [ 648.896903][T20116] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 648.914969][T20133] FAULT_INJECTION: forcing a failure. [ 648.914969][T20133] name failslab, interval 1, probability 0, space 0, times 0 [ 648.930362][T20133] CPU: 1 UID: 0 PID: 20133 Comm: syz.0.5194 Not tainted syzkaller #0 PREEMPT(full) [ 648.930398][T20133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.930414][T20133] Call Trace: [ 648.930432][T20133] [ 648.930442][T20133] dump_stack_lvl+0x16c/0x1f0 [ 648.930479][T20133] should_fail_ex+0x512/0x640 [ 648.930515][T20133] ? fs_reclaim_acquire+0xae/0x150 [ 648.930552][T20133] should_failslab+0xc2/0x120 [ 648.930587][T20133] __kmalloc_noprof+0xdd/0x880 [ 648.930612][T20133] ? usb_alloc_urb+0x66/0xa0 [ 648.930651][T20133] ? usb_alloc_urb+0x66/0xa0 [ 648.930680][T20133] usb_alloc_urb+0x66/0xa0 [ 648.930710][T20133] usb_control_msg+0x1d3/0x4a0 [ 648.930744][T20133] ? __pfx_usb_control_msg+0x10/0x10 [ 648.930790][T20133] hub_ext_port_status+0x14e/0x670 [ 648.930837][T20133] hub_activate+0x6e5/0x1d60 [ 648.930884][T20133] ? __pfx_hub_activate+0x10/0x10 [ 648.930916][T20133] ? find_held_lock+0x2b/0x80 [ 648.930946][T20133] ? do_proc_control+0x3a0/0x10a0 [ 648.930990][T20133] hub_resume+0xa8/0x3f0 [ 648.931025][T20133] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 648.931060][T20133] ? __pfx_hub_resume+0x10/0x10 [ 648.931096][T20133] ? __pfx_hcd_bus_resume+0x10/0x10 [ 648.931135][T20133] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 648.931170][T20133] usb_resume_both+0x237/0x960 [ 648.931201][T20133] ? __pfx_usb_resume_both+0x10/0x10 [ 648.931231][T20133] ? __pfx_usb_runtime_resume+0x10/0x10 [ 648.931266][T20133] ? __pfx_usb_runtime_resume+0x10/0x10 [ 648.931302][T20133] __rpm_callback+0xc8/0x610 [ 648.931340][T20133] ? __pfx_usb_runtime_resume+0x10/0x10 [ 648.931371][T20133] rpm_callback+0x1b7/0x200 [ 648.931402][T20133] ? __pfx_usb_runtime_resume+0x10/0x10 [ 648.931440][T20133] rpm_resume+0xd16/0x1320 [ 648.931482][T20133] ? __pfx_rpm_resume+0x10/0x10 [ 648.931514][T20133] ? do_raw_spin_lock+0x12c/0x2b0 [ 648.931553][T20133] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 648.931604][T20133] __pm_runtime_resume+0xb6/0x170 [ 648.931642][T20133] usb_autoresume_device+0x23/0xe0 [ 648.931675][T20133] usbdev_open+0x228/0x8b0 [ 648.931707][T20133] ? kobject_get_unless_zero+0x156/0x1e0 [ 648.931741][T20133] ? __pfx_usbdev_open+0x10/0x10 [ 648.931773][T20133] ? chrdev_open+0x10b/0x6a0 [ 648.931809][T20133] ? __pfx_usbdev_open+0x10/0x10 [ 648.931840][T20133] chrdev_open+0x234/0x6a0 [ 648.931870][T20133] ? __pfx_apparmor_file_open+0x10/0x10 [ 648.931908][T20133] ? __pfx_chrdev_open+0x10/0x10 [ 648.931941][T20133] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 648.931979][T20133] do_dentry_open+0x982/0x1530 [ 648.932011][T20133] ? __pfx_chrdev_open+0x10/0x10 [ 648.932049][T20133] vfs_open+0x82/0x3f0 [ 648.932090][T20133] path_openat+0x1de4/0x2cb0 [ 648.932132][T20133] ? __pfx_path_openat+0x10/0x10 [ 648.932164][T20133] ? __lock_acquire+0xb8a/0x1c90 [ 648.932201][T20133] do_filp_open+0x20b/0x470 [ 648.932231][T20133] ? __pfx_do_filp_open+0x10/0x10 [ 648.932286][T20133] ? alloc_fd+0x471/0x7d0 [ 648.932323][T20133] do_sys_openat2+0x11b/0x1d0 [ 648.932359][T20133] ? __pfx_do_sys_openat2+0x10/0x10 [ 648.932410][T20133] __x64_sys_openat+0x174/0x210 [ 648.932452][T20133] ? __pfx___x64_sys_openat+0x10/0x10 [ 648.932504][T20133] do_syscall_64+0xcd/0xfa0 [ 648.932536][T20133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.932563][T20133] RIP: 0033:0x7fc35878f7c9 [ 648.932585][T20133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.932609][T20133] RSP: 002b:00007fc35956e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 648.932634][T20133] RAX: ffffffffffffffda RBX: 00007fc3589e5fa0 RCX: 00007fc35878f7c9 [ 648.932652][T20133] RDX: 0000000000040a02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 648.932669][T20133] RBP: 00007fc358813f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.932686][T20133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.932702][T20133] R13: 00007fc3589e6038 R14: 00007fc3589e5fa0 R15: 00007ffe77fc6148 [ 648.932741][T20133] [ 648.933301][T20116] dyndbg: flags parse failed [ 648.933362][T20133] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 648.950267][T20116] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 649.061169][T20145] FAULT_INJECTION: forcing a failure. [ 649.061169][T20145] name failslab, interval 1, probability 0, space 0, times 0 [ 649.126712][T20116] dyndbg: flags parse failed [ 649.136204][T20145] CPU: 1 UID: 0 PID: 20145 Comm: syz.0.5197 Not tainted syzkaller #0 PREEMPT(full) [ 649.136239][T20145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.136254][T20145] Call Trace: [ 649.136263][T20145] [ 649.136274][T20145] dump_stack_lvl+0x16c/0x1f0 [ 649.136310][T20145] should_fail_ex+0x512/0x640 [ 649.136346][T20145] ? fs_reclaim_acquire+0xae/0x150 [ 649.136382][T20145] should_failslab+0xc2/0x120 [ 649.136423][T20145] __kmalloc_noprof+0xdd/0x880 [ 649.136448][T20145] ? tomoyo_encode2+0x100/0x3e0 [ 649.136482][T20145] ? tomoyo_encode2+0x100/0x3e0 [ 649.136508][T20145] tomoyo_encode2+0x100/0x3e0 [ 649.136541][T20145] tomoyo_encode+0x29/0x50 [ 649.136568][T20145] tomoyo_realpath_from_path+0x18f/0x6e0 [ 649.136607][T20145] tomoyo_path_number_perm+0x245/0x580 [ 649.136645][T20145] ? tomoyo_path_number_perm+0x237/0x580 [ 649.136686][T20145] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 649.136760][T20145] ? find_held_lock+0x2b/0x80 [ 649.136786][T20145] ? hook_file_ioctl_common+0x145/0x410 [ 649.136820][T20145] ? __fget_files+0x20e/0x3c0 [ 649.136853][T20145] security_file_ioctl+0x9b/0x240 [ 649.136880][T20145] __x64_sys_ioctl+0xb7/0x210 [ 649.136918][T20145] do_syscall_64+0xcd/0xfa0 [ 649.136951][T20145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.136978][T20145] RIP: 0033:0x7fc35878f7c9 [ 649.136999][T20145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.137022][T20145] RSP: 002b:00007fc35954d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.137047][T20145] RAX: ffffffffffffffda RBX: 00007fc3589e6090 RCX: 00007fc35878f7c9 [ 649.137065][T20145] RDX: 0000000000000000 RSI: 00000000c0401273 RDI: 000000000000000b [ 649.137080][T20145] RBP: 00007fc358813f91 R08: 0000000000000000 R09: 0000000000000000 [ 649.137096][T20145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.137111][T20145] R13: 00007fc3589e6128 R14: 00007fc3589e6090 R15: 00007ffe77fc6148 [ 649.137146][T20145] [ 649.137171][T20145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 649.295777][T20116] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 649.417463][T20116] dyndbg: flags parse failed [ 649.599646][T20116] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 649.608401][T20116] dyndbg: flags parse failed [ 649.613577][T20116] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 649.654612][T20116] dyndbg: flags parse failed [ 649.659345][T20116] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 649.668719][T20116] dyndbg: flags parse failed [ 649.677777][T20116] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 649.699007][T20116] dyndbg: flags parse failed [ 649.738859][T20116] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 649.796780][T20116] dyndbg: flags parse failed [ 649.836801][T20116] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 649.906721][T20116] dyndbg: flags parse failed [ 649.945231][T20116] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 649.954755][T20116] dyndbg: flags parse failed [ 649.959941][T20116] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 649.968915][T20116] dyndbg: tokenize failed [ 649.995673][T20160] vhci_hcd: invalid port number 252 [ 650.002560][T20160] vhci_hcd: default hub control req: 040f v0772 i00fc l2 [ 650.782482][T20195] netlink: 'syz.0.5210': attribute type 15 has an invalid length. [ 650.792850][T20195] netlink: 186 bytes leftover after parsing attributes in process `syz.0.5210'. [ 650.964870][T20200] dyndbg: expected <4096 bytes into control [ 650.972610][T20200] random: crng reseeded on system resumption [ 650.989528][T20200] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 651.032951][T20200] dyndbg: flags parse failed [ 651.046209][T20200] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 651.146685][T20204] Restarting kernel threads ... [ 651.151785][T20200] dyndbg: flags parse failed [ 651.164829][T20204] Done restarting kernel threads. [ 651.179362][T20200] dyndbg: bad flag-op , at start of with arguments:\n [ 651.197284][T20200] dyndbg: flags parse failed [ 651.208558][T20200] dyndbg: bad flag-op , at start of %s\n [ 651.224573][T20200] dyndbg: flags parse failed [ 651.236448][T20200] dyndbg: bad flag-op , at start of with environment:\n [ 651.255234][T20200] dyndbg: flags parse failed [ 651.262861][T20200] dyndbg: bad flag-op , at start of %s\n [ 651.281476][T20200] dyndbg: flags parse failed [ 651.292747][T20200] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 651.311335][T20200] dyndbg: flags parse failed [ 651.321399][T20200] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 651.340133][T20200] dyndbg: flags parse failed [ 651.356039][T20200] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 651.379955][T20200] dyndbg: flags parse failed [ 651.401626][T20200] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 651.425247][T20200] dyndbg: flags parse failed [ 651.431875][T20200] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 651.472471][T20200] dyndbg: flags parse failed [ 651.505593][T20200] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 651.544386][T20200] dyndbg: flags parse failed [ 651.569610][T20200] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 651.591104][T20200] dyndbg: flags parse failed [ 651.602362][T20200] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 651.612504][T20200] dyndbg: flags parse failed [ 651.617563][T20200] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 651.652544][T20200] dyndbg: flags parse failed [ 651.657343][T20200] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 651.667794][T20200] dyndbg: flags parse failed [ 651.674328][T20200] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 651.682308][T20200] dyndbg: tokenize failed [ 651.879633][T20226] FAULT_INJECTION: forcing a failure. [ 651.879633][T20226] name failslab, interval 1, probability 0, space 0, times 0 [ 651.900931][T20226] CPU: 1 UID: 0 PID: 20226 Comm: syz.0.5219 Not tainted syzkaller #0 PREEMPT(full) [ 651.900967][T20226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.900983][T20226] Call Trace: [ 651.900993][T20226] [ 651.901003][T20226] dump_stack_lvl+0x16c/0x1f0 [ 651.901039][T20226] should_fail_ex+0x512/0x640 [ 651.901076][T20226] ? __kmalloc_noprof+0xca/0x880 [ 651.901104][T20226] should_failslab+0xc2/0x120 [ 651.901137][T20226] __kmalloc_noprof+0xdd/0x880 [ 651.901162][T20226] ? __vb2_queue_alloc+0x23e/0x1280 [ 651.901204][T20226] ? __vb2_queue_alloc+0x23e/0x1280 [ 651.901237][T20226] __vb2_queue_alloc+0x23e/0x1280 [ 651.901275][T20226] ? trace_kmalloc+0x2b/0xd0 [ 651.901308][T20226] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 651.901355][T20226] vb2_core_reqbufs+0xa90/0xfe0 [ 651.901396][T20226] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 651.901450][T20226] __vb2_init_fileio+0x3f1/0x1100 [ 651.901496][T20226] vb2_core_poll+0x486/0x700 [ 651.901534][T20226] vb2_poll+0x4b/0xe0 [ 651.901568][T20226] vb2_fop_poll+0x10f/0x2c0 [ 651.901606][T20226] ? __pfx_vb2_fop_poll+0x10/0x10 [ 651.901640][T20226] v4l2_poll+0x163/0x320 [ 651.901669][T20226] ? __pfx_v4l2_poll+0x10/0x10 [ 651.901696][T20226] do_select+0xd3d/0x17e0 [ 651.901751][T20226] ? __pfx_do_select+0x10/0x10 [ 651.901774][T20226] ? finish_task_switch.isra.0+0x21c/0xc10 [ 651.901807][T20226] ? __pfx_pollwake+0x10/0x10 [ 651.901889][T20226] ? find_held_lock+0x2b/0x80 [ 651.901913][T20226] ? __might_fault+0xe3/0x190 [ 651.901937][T20226] ? __might_fault+0xe3/0x190 [ 651.901960][T20226] ? __might_fault+0x13b/0x190 [ 651.901999][T20226] ? core_sys_select+0x453/0xc20 [ 651.902022][T20226] core_sys_select+0x453/0xc20 [ 651.902056][T20226] ? __pfx_core_sys_select+0x10/0x10 [ 651.902090][T20226] ? futex_wait+0x120/0x380 [ 651.902143][T20226] ? __pfx_do_futex+0x10/0x10 [ 651.902186][T20226] kern_select+0x15d/0x1e0 [ 651.902212][T20226] ? __pfx_kern_select+0x10/0x10 [ 651.902242][T20226] ? xfd_validate_state+0x61/0x180 [ 651.902277][T20226] ? __pfx_ksys_write+0x10/0x10 [ 651.902311][T20226] __x64_sys_select+0xbd/0x160 [ 651.902335][T20226] ? do_syscall_64+0x91/0xfa0 [ 651.902365][T20226] ? lockdep_hardirqs_on+0x7c/0x110 [ 651.902395][T20226] do_syscall_64+0xcd/0xfa0 [ 651.902429][T20226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.902455][T20226] RIP: 0033:0x7fc35878f7c9 [ 651.902476][T20226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.902501][T20226] RSP: 002b:00007fc35954d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 651.902525][T20226] RAX: ffffffffffffffda RBX: 00007fc3589e6090 RCX: 00007fc35878f7c9 [ 651.902543][T20226] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 651.902559][T20226] RBP: 00007fc358813f91 R08: 0000000000000000 R09: 0000000000000000 [ 651.902575][T20226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.902590][T20226] R13: 00007fc3589e6128 R14: 00007fc3589e6090 R15: 00007ffe77fc6148 [ 651.902627][T20226] [ 652.665722][T20235] FAULT_INJECTION: forcing a failure. [ 652.665722][T20235] name failslab, interval 1, probability 0, space 0, times 0 [ 652.737269][T20235] CPU: 1 UID: 0 PID: 20235 Comm: syz.0.5222 Not tainted syzkaller #0 PREEMPT(full) [ 652.737307][T20235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 652.737325][T20235] Call Trace: [ 652.737334][T20235] [ 652.737346][T20235] dump_stack_lvl+0x16c/0x1f0 [ 652.737385][T20235] should_fail_ex+0x512/0x640 [ 652.737430][T20235] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 652.737464][T20235] should_failslab+0xc2/0x120 [ 652.737502][T20235] kmem_cache_alloc_noprof+0x75/0x6e0 [ 652.737531][T20235] ? alloc_empty_file+0x55/0x1e0 [ 652.737578][T20235] ? alloc_empty_file+0x55/0x1e0 [ 652.737613][T20235] ? _raw_spin_unlock+0x28/0x50 [ 652.737643][T20235] alloc_empty_file+0x55/0x1e0 [ 652.737679][T20235] alloc_file_pseudo+0x13a/0x230 [ 652.737720][T20235] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 652.737766][T20235] __shmem_file_setup+0x1a3/0x330 [ 652.737811][T20235] shmem_zero_setup+0x93/0x1a0 [ 652.737843][T20235] __mmap_region+0x2076/0x27a0 [ 652.737877][T20235] ? __pfx___mmap_region+0x10/0x10 [ 652.737904][T20235] ? finish_task_switch.isra.0+0x21c/0xc10 [ 652.737938][T20235] ? rcu_is_watching+0x12/0xc0 [ 652.737968][T20235] ? finish_task_switch.isra.0+0x221/0xc10 [ 652.738006][T20235] ? lockdep_hardirqs_on+0x7c/0x110 [ 652.738041][T20235] ? finish_task_switch.isra.0+0x221/0xc10 [ 652.738101][T20235] ? __pfx___schedule+0x10/0x10 [ 652.738183][T20235] ? trace_cap_capable+0x18d/0x200 [ 652.738235][T20235] mmap_region+0x1ab/0x3f0 [ 652.738263][T20235] ? __get_unmapped_area+0x267/0x440 [ 652.738306][T20235] do_mmap+0xa3e/0x1210 [ 652.738349][T20235] ? __pfx_do_mmap+0x10/0x10 [ 652.738386][T20235] ? __pfx_down_write_killable+0x10/0x10 [ 652.738422][T20235] ? kmem_cache_free+0x2d4/0x6c0 [ 652.738455][T20235] vm_mmap_pgoff+0x29e/0x470 [ 652.738496][T20235] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 652.738539][T20235] ? __x64_sys_futex+0x1e0/0x4c0 [ 652.738577][T20235] ? __x64_sys_futex+0x1e9/0x4c0 [ 652.738617][T20235] ksys_mmap_pgoff+0x7d/0x5c0 [ 652.738648][T20235] ? xfd_validate_state+0x61/0x180 [ 652.738692][T20235] __x64_sys_mmap+0x125/0x190 [ 652.738740][T20235] do_syscall_64+0xcd/0xfa0 [ 652.738778][T20235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.738806][T20235] RIP: 0033:0x7fc35878f7c9 [ 652.738830][T20235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.738859][T20235] RSP: 002b:00007fc35956e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 652.738885][T20235] RAX: ffffffffffffffda RBX: 00007fc3589e5fa0 RCX: 00007fc35878f7c9 [ 652.738905][T20235] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 652.738922][T20235] RBP: 00007fc358813f91 R08: fffffffffffffffa R09: 0000000000008000 [ 652.738941][T20235] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 652.738957][T20235] R13: 00007fc3589e6038 R14: 00007fc3589e5fa0 R15: 00007ffe77fc6148 [ 652.739003][T20235] [ 653.672364][T20232] delete_channel: no stack [ 653.701056][T20249] random: crng reseeded on system resumption [ 653.972048][T20258] dyndbg: expected <4096 bytes into control [ 653.989722][T20258] random: crng reseeded on system resumption [ 654.022726][T20258] dyndbg: bad flag-op b, at start of blacklisting initcall %s\n [ 654.038305][T20258] dyndbg: flags parse failed [ 654.044283][T20258] dyndbg: bad flag-op i, at start of initcall %s blacklisted\n [ 654.054158][T20258] dyndbg: flags parse failed [ 654.058886][T20258] dyndbg: bad flag-op , at start of with arguments:\n [ 654.066106][T20258] dyndbg: flags parse failed [ 654.070895][T20258] dyndbg: bad flag-op , at start of %s\n [ 654.077259][T20258] dyndbg: flags parse failed [ 654.082511][T20263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5230'. [ 654.090203][T20258] dyndbg: bad flag-op , at start of with environment:\n [ 654.098974][T20258] dyndbg: flags parse failed [ 654.110047][T20258] dyndbg: bad flag-op , at start of %s\n [ 654.117973][T20258] dyndbg: flags parse failed [ 654.123673][T20258] dyndbg: bad flag-op D, at start of Detected %s compressed data\n [ 654.144913][T20258] dyndbg: flags parse failed [ 654.158983][T20258] dyndbg: bad flag-op F, at start of Failed to setup IBS LVT offset, IBSCTL = 0x%08x\n [ 654.191375][T20258] dyndbg: flags parse failed [ 654.196014][T20258] dyndbg: bad flag-op N, at start of No CPU node configured for IBS\n [ 654.212854][T20270] Restarting kernel threads ... [ 654.238319][T20270] Done restarting kernel threads. [ 654.246703][T20258] dyndbg: flags parse failed [ 654.251706][T20258] dyndbg: bad flag-op N, at start of No EILVT entry available\n [ 654.260531][T20258] dyndbg: flags parse failed [ 654.265215][T20258] dyndbg: bad flag-op #, at start of # table @%p, off %llx size %zx\n [ 654.277080][T20258] dyndbg: flags parse failed [ 654.311187][T20258] dyndbg: bad flag-op #, at start of # entry @%p (%lx sz %u %c%c%c) raw=%16llx\n [ 654.332653][T20258] dyndbg: flags parse failed [ 654.343283][T20258] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hv crash (0x%llx 0x%llx 0x%llx 0x%llx 0x%llx)\n [ 654.391851][T20258] dyndbg: flags parse failed [ 654.398073][T20258] dyndbg: bad flag-op k, at start of kvm [%i]: vcpu%i hyper-v reset requested\n [ 654.448044][T20258] dyndbg: flags parse failed [ 654.458650][T20258] dyndbg: bad flag-op c, at start of create pit timer, interval is %llu nsec\n [ 654.506148][T20258] dyndbg: flags parse failed [ 654.524247][T20258] dyndbg: bad flag-op l, at start of load_count val is %u, channel is %d\n [ 654.559741][T20258] dyndbg: flags parse failed [ 654.575837][T20258] dyndbg: unclosed quote: write addr is 0x%x, len is %d, val is 0 [ 654.657642][T20258] dyndbg: tokenize failed [ 654.962552][T20283] zswap: compressor not available [ 655.283968][T20302] binder: 20297:20302 ioctl c018620c 0 returned -22 [ 655.606310][T20308] FAULT_INJECTION: forcing a failure. [ 655.606310][T20308] name failslab, interval 1, probability 0, space 0, times 0 [ 655.667801][T20308] CPU: 1 UID: 0 PID: 20308 Comm: syz.3.5240 Not tainted syzkaller #0 PREEMPT(full) [ 655.667842][T20308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.667860][T20308] Call Trace: [ 655.667870][T20308] [ 655.667882][T20308] dump_stack_lvl+0x16c/0x1f0 [ 655.667922][T20308] should_fail_ex+0x512/0x640 [ 655.667964][T20308] ? __kmalloc_cache_noprof+0x5f/0x780 [ 655.667996][T20308] should_failslab+0xc2/0x120 [ 655.668029][T20308] __kmalloc_cache_noprof+0x72/0x780 [ 655.668055][T20308] ? kernfs_fop_open+0xa3a/0xda0 [ 655.668088][T20308] ? kernfs_fop_open+0xa3a/0xda0 [ 655.668115][T20308] kernfs_fop_open+0xa3a/0xda0 [ 655.668151][T20308] do_dentry_open+0x982/0x1530 [ 655.668181][T20308] ? __pfx_kernfs_fop_open+0x10/0x10 [ 655.668211][T20308] vfs_open+0x82/0x3f0 [ 655.668245][T20308] path_openat+0x1de4/0x2cb0 [ 655.668281][T20308] ? __pfx_path_openat+0x10/0x10 [ 655.668313][T20308] ? __lock_acquire+0xb8a/0x1c90 [ 655.668351][T20308] do_filp_open+0x20b/0x470 [ 655.668379][T20308] ? __pfx_do_filp_open+0x10/0x10 [ 655.668432][T20308] ? alloc_fd+0x471/0x7d0 [ 655.668470][T20308] do_sys_openat2+0x11b/0x1d0 [ 655.668518][T20308] ? __pfx_do_sys_openat2+0x10/0x10 [ 655.668559][T20308] ? __pfx___might_resched+0x10/0x10 [ 655.668597][T20308] __x64_sys_openat+0x174/0x210 [ 655.668637][T20308] ? __pfx___x64_sys_openat+0x10/0x10 [ 655.668689][T20308] do_syscall_64+0xcd/0xfa0 [ 655.668723][T20308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.668749][T20308] RIP: 0033:0x7fd6fb58f7c9 [ 655.668770][T20308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.668792][T20308] RSP: 002b:00007fd6fc386038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 655.668816][T20308] RAX: ffffffffffffffda RBX: 00007fd6fb7e5fa0 RCX: 00007fd6fb58f7c9 [ 655.668833][T20308] RDX: 0000000000080000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 655.668850][T20308] RBP: 00007fd6fb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 655.668864][T20308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.668879][T20308] R13: 00007fd6fb7e6038 R14: 00007fd6fb7e5fa0 R15: 00007fffcac67b68 [ 655.668913][T20308] [ 656.187154][T20320] kexec: Could not allocate control_code_buffer [ 656.662816][T20341] random: crng reseeded on system resumption [ 658.218235][T20381] random: crng reseeded on system resumption [ 658.926057][T20411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5267'. [ 660.381479][T20457] netlink: 62 bytes leftover after parsing attributes in process `syz.3.5278'. [ 661.347601][T20440] kexec: Could not allocate control_code_buffer [ 661.957650][T20493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5285'. [ 665.918585][T20595] netlink: 158 bytes leftover after parsing attributes in process `syz.2.5308'. [ 665.972972][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5308'. [ 666.321929][T20605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5310'. [ 667.944363][T20629] tipc: Started in network mode [ 667.959449][T20629] tipc: Node identity ffffffff, cluster identity 4711 [ 667.998347][T20629] tipc: Node number set to 4294967295 [ 668.498186][T20642] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5321'. [ 668.551364][T20642] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5321'. [ 670.654784][T20703] netlink: 326 bytes leftover after parsing attributes in process `syz.0.5332'. [ 670.723096][T20703] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.889263][T20683] delete_channel: no stack [ 671.080912][T20718] Invalid ELF header len 5 [ 671.094985][T20718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5335'. [ 671.269677][T20718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.277565][T20718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.099984][T20748] kernel read not supported for file /dynamic_events (pid: 20748 comm: syz.0.5345) [ 672.127173][ T30] audit: type=1800 audit(4294967310.856:50): pid=20748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5345" name="dynamic_events" dev="tracefs" ino=26 res=0 errno=0 [ 673.063754][T20785] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5353'. [ 673.074390][T20785] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5353'. [ 673.210687][T20793] FAULT_INJECTION: forcing a failure. [ 673.210687][T20793] name failslab, interval 1, probability 0, space 0, times 0 [ 673.223851][T20793] CPU: 1 UID: 0 PID: 20793 Comm: syz.3.5351 Not tainted syzkaller #0 PREEMPT(full) [ 673.223889][T20793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.223916][T20793] Call Trace: [ 673.223926][T20793] [ 673.223938][T20793] dump_stack_lvl+0x16c/0x1f0 [ 673.223978][T20793] should_fail_ex+0x512/0x640 [ 673.224016][T20793] ? __kmalloc_cache_noprof+0x5f/0x780 [ 673.224047][T20793] should_failslab+0xc2/0x120 [ 673.224084][T20793] __kmalloc_cache_noprof+0x72/0x780 [ 673.224112][T20793] ? __v4l2_subdev_state_alloc+0x53/0x400 [ 673.224161][T20793] ? __v4l2_subdev_state_alloc+0x53/0x400 [ 673.224203][T20793] __v4l2_subdev_state_alloc+0x53/0x400 [ 673.224251][T20793] subdev_open+0xa6/0x540 [ 673.224278][T20793] v4l2_open+0x1d2/0x5e0 [ 673.224308][T20793] ? __pfx_v4l2_open+0x10/0x10 [ 673.224338][T20793] chrdev_open+0x234/0x6a0 [ 673.224370][T20793] ? __pfx_apparmor_file_open+0x10/0x10 [ 673.224409][T20793] ? __pfx_chrdev_open+0x10/0x10 [ 673.224444][T20793] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 673.224481][T20793] do_dentry_open+0x982/0x1530 [ 673.224513][T20793] ? __pfx_chrdev_open+0x10/0x10 [ 673.224553][T20793] vfs_open+0x82/0x3f0 [ 673.224594][T20793] path_openat+0x1de4/0x2cb0 [ 673.224637][T20793] ? __pfx_path_openat+0x10/0x10 [ 673.224668][T20793] ? __lock_acquire+0xb8a/0x1c90 [ 673.224707][T20793] do_filp_open+0x20b/0x470 [ 673.224738][T20793] ? __pfx_do_filp_open+0x10/0x10 [ 673.224792][T20793] ? alloc_fd+0x471/0x7d0 [ 673.224830][T20793] do_sys_openat2+0x11b/0x1d0 [ 673.224867][T20793] ? __pfx_do_sys_openat2+0x10/0x10 [ 673.224926][T20793] __x64_sys_openat+0x174/0x210 [ 673.224966][T20793] ? __pfx___x64_sys_openat+0x10/0x10 [ 673.225020][T20793] do_syscall_64+0xcd/0xfa0 [ 673.225055][T20793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.225084][T20793] RIP: 0033:0x7fd6fb58f7c9 [ 673.225107][T20793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.225134][T20793] RSP: 002b:00007fd6fc365038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 673.225161][T20793] RAX: ffffffffffffffda RBX: 00007fd6fb7e6090 RCX: 00007fd6fb58f7c9 [ 673.225179][T20793] RDX: 0000000000020081 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 673.225197][T20793] RBP: 00007fd6fb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 673.225214][T20793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.225231][T20793] R13: 00007fd6fb7e6128 R14: 00007fd6fb7e6090 R15: 00007fffcac67b68 [ 673.225268][T20793] [ 674.438914][T20820] ================================================================== [ 674.438934][T20820] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 674.438978][T20820] Read of size 8 at addr ffff8880313470fa by task syz.3.5358/20820 [ 674.439001][T20820] [ 674.439013][T20820] CPU: 0 UID: 0 PID: 20820 Comm: syz.3.5358 Not tainted syzkaller #0 PREEMPT(full) [ 674.439044][T20820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 674.439061][T20820] Call Trace: [ 674.439070][T20820] [ 674.439080][T20820] dump_stack_lvl+0x116/0x1f0 [ 674.439113][T20820] print_report+0xcd/0x630 [ 674.439145][T20820] ? __virt_addr_valid+0x81/0x610 [ 674.439177][T20820] ? __phys_addr+0xe8/0x180 [ 674.439210][T20820] ? fbcon_prepare_logo+0xa03/0xc70 [ 674.439244][T20820] kasan_report+0xe0/0x110 [ 674.439277][T20820] ? fbcon_prepare_logo+0xa03/0xc70 [ 674.439317][T20820] kasan_check_range+0x100/0x1b0 [ 674.439353][T20820] __asan_memcpy+0x23/0x60 [ 674.439380][T20820] fbcon_prepare_logo+0xa03/0xc70 [ 674.439421][T20820] fbcon_init+0xd77/0x1900 [ 674.439459][T20820] visual_init+0x320/0x620 [ 674.439496][T20820] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 674.439529][T20820] store_bind+0x61d/0x760 [ 674.439561][T20820] ? sysfs_file_kobj+0xe4/0x290 [ 674.439589][T20820] ? __pfx_store_bind+0x10/0x10 [ 674.439613][T20820] dev_attr_store+0x58/0x80 [ 674.439648][T20820] ? __pfx_dev_attr_store+0x10/0x10 [ 674.439683][T20820] sysfs_kf_write+0xf2/0x150 [ 674.439712][T20820] kernfs_fop_write_iter+0x3af/0x570 [ 674.439736][T20820] ? __pfx_sysfs_kf_write+0x10/0x10 [ 674.439765][T20820] iter_file_splice_write+0xa24/0x12e0 [ 674.439802][T20820] ? __pfx_iter_file_splice_write+0x10/0x10 [ 674.439833][T20820] ? __pfx_copy_splice_read+0x10/0x10 [ 674.439867][T20820] ? __pfx_iter_file_splice_write+0x10/0x10 [ 674.439896][T20820] direct_splice_actor+0x192/0x6c0 [ 674.439924][T20820] splice_direct_to_actor+0x345/0xa30 [ 674.439952][T20820] ? __pfx_direct_splice_actor+0x10/0x10 [ 674.439981][T20820] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 674.440012][T20820] do_splice_direct+0x174/0x240 [ 674.440038][T20820] ? __pfx_do_splice_direct+0x10/0x10 [ 674.440064][T20820] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 674.440106][T20820] ? rw_verify_area+0xcf/0x6c0 [ 674.440133][T20820] do_sendfile+0xb06/0xe50 [ 674.440161][T20820] ? __pfx_do_sendfile+0x10/0x10 [ 674.440190][T20820] ? __x64_sys_futex+0x1e0/0x4c0 [ 674.440223][T20820] ? __x64_sys_futex+0x1e9/0x4c0 [ 674.440257][T20820] __x64_sys_sendfile64+0x1d8/0x220 [ 674.440290][T20820] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 674.440328][T20820] do_syscall_64+0xcd/0xfa0 [ 674.440360][T20820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.440387][T20820] RIP: 0033:0x7fd6fb58f7c9 [ 674.440407][T20820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.440432][T20820] RSP: 002b:00007fd6fc344038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 674.440458][T20820] RAX: ffffffffffffffda RBX: 00007fd6fb7e6180 RCX: 00007fd6fb58f7c9 [ 674.440476][T20820] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000004 [ 674.440491][T20820] RBP: 00007fd6fb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 674.440508][T20820] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 674.440525][T20820] R13: 00007fd6fb7e6218 R14: 00007fd6fb7e6180 R15: 00007fffcac67b68 [ 674.440557][T20820] [ 674.440566][T20820] [ 674.440572][T20820] Allocated by task 20207: [ 674.440585][T20820] kasan_save_stack+0x33/0x60 [ 674.440612][T20820] kasan_save_track+0x14/0x30 [ 674.440639][T20820] __kasan_kmalloc+0xaa/0xb0 [ 674.440665][T20820] __kmalloc_noprof+0x32f/0x880 [ 674.440687][T20820] ops_init+0x77/0x5f0 [ 674.440710][T20820] setup_net+0x100/0x390 [ 674.440733][T20820] copy_net_ns+0x2f8/0x690 [ 674.440759][T20820] create_new_namespaces+0x3ea/0xa90 [ 674.440786][T20820] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 674.440812][T20820] ksys_unshare+0x45b/0xa40 [ 674.440843][T20820] __x64_sys_unshare+0x31/0x40 [ 674.440873][T20820] do_syscall_64+0xcd/0xfa0 [ 674.440899][T20820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.440923][T20820] [ 674.440930][T20820] Freed by task 16153: [ 674.440941][T20820] kasan_save_stack+0x33/0x60 [ 674.440968][T20820] kasan_save_track+0x14/0x30 [ 674.440995][T20820] __kasan_save_free_info+0x3b/0x60 [ 674.441017][T20820] __kasan_slab_free+0x5f/0x80 [ 674.441046][T20820] kfree+0x2b8/0x6d0 [ 674.441065][T20820] ops_undo_list+0x487/0xab0 [ 674.441088][T20820] cleanup_net+0x41b/0x8b0 [ 674.441113][T20820] process_one_work+0x9cf/0x1b70 [ 674.441149][T20820] worker_thread+0x6c8/0xf10 [ 674.441169][T20820] kthread+0x3c5/0x780 [ 674.441199][T20820] ret_from_fork+0x675/0x7d0 [ 674.441233][T20820] ret_from_fork_asm+0x1a/0x30 [ 674.441266][T20820] [ 674.441272][T20820] The buggy address belongs to the object at ffff888031347080 [ 674.441272][T20820] which belongs to the cache kmalloc-64 of size 64 [ 674.441293][T20820] The buggy address is located 58 bytes to the right of [ 674.441293][T20820] allocated 64-byte region [ffff888031347080, ffff8880313470c0) [ 674.441321][T20820] [ 674.441327][T20820] The buggy address belongs to the physical page: [ 674.441344][T20820] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31347 [ 674.441366][T20820] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 674.441387][T20820] page_type: f5(slab) [ 674.441410][T20820] raw: 00fff00000000000 ffff88813ffa68c0 0000000000000000 dead000000000001 [ 674.441434][T20820] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 674.441449][T20820] page dumped because: kasan: bad access detected [ 674.441466][T20820] page_owner tracks the page as allocated [ 674.441475][T20820] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 50, tgid 50 (kworker/u8:3), ts 25210412027, free_ts 0 [ 674.441518][T20820] post_alloc_hook+0x1af/0x220 [ 674.441559][T20820] get_page_from_freelist+0x10a3/0x3a30 [ 674.441583][T20820] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 674.441608][T20820] alloc_pages_mpol+0x1fb/0x550 [ 674.441637][T20820] new_slab+0x24a/0x360 [ 674.441670][T20820] ___slab_alloc+0xd79/0x1a50 [ 674.441704][T20820] __slab_alloc.constprop.0+0x63/0x110 [ 674.441740][T20820] __kmalloc_noprof+0x501/0x880 [ 674.441761][T20820] lsm_blob_alloc+0x68/0x90 [ 674.441789][T20820] security_task_alloc+0x2d/0x260 [ 674.441816][T20820] copy_process+0x220b/0x76a0 [ 674.441843][T20820] kernel_clone+0xfc/0x930 [ 674.441870][T20820] user_mode_thread+0xc8/0x110 [ 674.441897][T20820] call_usermodehelper_exec_work+0xcb/0x170 [ 674.441923][T20820] process_one_work+0x9cf/0x1b70 [ 674.441957][T20820] worker_thread+0x6c8/0xf10 [ 674.441977][T20820] page_owner free stack trace missing [ 674.441986][T20820] [ 674.441992][T20820] Memory state around the buggy address: [ 674.442006][T20820] ffff888031346f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.442025][T20820] ffff888031347000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 674.442044][T20820] >ffff888031347080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 674.442059][T20820] ^ [ 674.442074][T20820] ffff888031347100: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 674.442093][T20820] ffff888031347180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 674.442108][T20820] ================================================================== [ 674.442124][T20820] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 674.442140][T20820] CPU: 0 UID: 0 PID: 20820 Comm: syz.3.5358 Not tainted syzkaller #0 PREEMPT(full) [ 674.442171][T20820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 674.442188][T20820] Call Trace: [ 674.442197][T20820] [ 674.442207][T20820] dump_stack_lvl+0x3d/0x1f0 [ 674.442238][T20820] vpanic+0x640/0x6f0 [ 674.442273][T20820] panic+0xca/0xd0 [ 674.442306][T20820] ? __pfx_panic+0x10/0x10 [ 674.442345][T20820] ? check_panic_on_warn+0x1f/0xb0 [ 674.442383][T20820] check_panic_on_warn+0xab/0xb0 [ 674.442419][T20820] end_report+0x107/0x170 [ 674.442451][T20820] kasan_report+0xee/0x110 [ 674.442484][T20820] ? fbcon_prepare_logo+0xa03/0xc70 [ 674.442523][T20820] kasan_check_range+0x100/0x1b0 [ 674.442566][T20820] __asan_memcpy+0x23/0x60 [ 674.442593][T20820] fbcon_prepare_logo+0xa03/0xc70 [ 674.442635][T20820] fbcon_init+0xd77/0x1900 [ 674.442673][T20820] visual_init+0x320/0x620 [ 674.442710][T20820] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 674.442741][T20820] store_bind+0x61d/0x760 [ 674.442768][T20820] ? sysfs_file_kobj+0xe4/0x290 [ 674.442796][T20820] ? __pfx_store_bind+0x10/0x10 [ 674.442821][T20820] dev_attr_store+0x58/0x80 [ 674.442855][T20820] ? __pfx_dev_attr_store+0x10/0x10 [ 674.442888][T20820] sysfs_kf_write+0xf2/0x150 [ 674.442913][T20820] kernfs_fop_write_iter+0x3af/0x570 [ 674.442938][T20820] ? __pfx_sysfs_kf_write+0x10/0x10 [ 674.442967][T20820] iter_file_splice_write+0xa24/0x12e0 [ 674.443004][T20820] ? __pfx_iter_file_splice_write+0x10/0x10 [ 674.443035][T20820] ? __pfx_copy_splice_read+0x10/0x10 [ 674.443070][T20820] ? __pfx_iter_file_splice_write+0x10/0x10 [ 674.443100][T20820] direct_splice_actor+0x192/0x6c0 [ 674.443128][T20820] splice_direct_to_actor+0x345/0xa30 [ 674.443155][T20820] ? __pfx_direct_splice_actor+0x10/0x10 [ 674.443185][T20820] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 674.443217][T20820] do_splice_direct+0x174/0x240 [ 674.443243][T20820] ? __pfx_do_splice_direct+0x10/0x10 [ 674.443270][T20820] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 674.443311][T20820] ? rw_verify_area+0xcf/0x6c0 [ 674.443338][T20820] do_sendfile+0xb06/0xe50 [ 674.443366][T20820] ? __pfx_do_sendfile+0x10/0x10 [ 674.443395][T20820] ? __x64_sys_futex+0x1e0/0x4c0 [ 674.443427][T20820] ? __x64_sys_futex+0x1e9/0x4c0 [ 674.443462][T20820] __x64_sys_sendfile64+0x1d8/0x220 [ 674.443494][T20820] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 674.443533][T20820] do_syscall_64+0xcd/0xfa0 [ 674.443570][T20820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.443596][T20820] RIP: 0033:0x7fd6fb58f7c9 [ 674.443615][T20820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.443639][T20820] RSP: 002b:00007fd6fc344038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 674.443664][T20820] RAX: ffffffffffffffda RBX: 00007fd6fb7e6180 RCX: 00007fd6fb58f7c9 [ 674.443682][T20820] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000004 [ 674.443698][T20820] RBP: 00007fd6fb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 674.443715][T20820] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 674.443731][T20820] R13: 00007fd6fb7e6218 R14: 00007fd6fb7e6180 R15: 00007fffcac67b68 [ 674.443758][T20820] [ 674.444111][T20820] Kernel Offset: disabled