last executing test programs: 7.466597362s ago: executing program 0 (id=1401): unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x88000, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x2000000003, 0x6, 0x8000000000000001, 0x3, 0x63, 0xd, 0x17, 0x8, 0xfffffffffffffffe]}, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x300, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0) read$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x8000000) 7.207272425s ago: executing program 3 (id=1402): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) write$auto(r1, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) (async) read$auto_check_wx_fops_(0xffffffffffffffff, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 6.226764668s ago: executing program 3 (id=1404): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) pivot_root$auto(&(0x7f0000000080)='+,\x00', &(0x7f00000001c0)='))[\x00') kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) unshare$auto(0x40000080) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1e041, 0x0) ioctl$auto_NVRAM_SETCKS(r3, 0x7041, 0x0) r4 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r0, 0x0, 0x2) readv$auto(r4, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) sendmmsg$auto(r4, &(0x7f0000000340)={{&(0x7f0000000200)="7f5f249b852be542e6a00ce4aea03fcb1f9da613af", 0xffffff81, &(0x7f0000000300)={&(0x7f0000000240)="1466ffa7404174dba04fdba56df154dc082b2f0db78b46af3663dd5375340d99eaad96a1f7541bc86e06fff3261d8cc564ee5894f6f6d88d6a19f4d5416bf620ddd77a551f3963336e8261ceaa762124c0f492daf758ffdabfd94c94d439785a25100c859244fbeabe50e3e0b29b65803b9cab732bc563500efa47a37619fff106c185e1a3847daffcc30aef5868be1a1a07c67f0fa526530608d0701c03a88dacb6c898b464acc1e85f3b468c4a88bfb85603", 0xffffffffffffff7f}, 0x3, &(0x7f0000000ac0)="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", 0x401}, 0xdf4}, 0xfffffffc, 0x9) r5 = socket(0x2, 0x2, 0x1) getsockopt$auto(r5, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x40, 0x20006, 0x4000000000e0, 0x11, r1, 0x9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000006c0)={0xc210700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x33}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000740)=""/248, &(0x7f0000000440)=[r6, 0x0, r6, 0x0, r6, 0xffffffffffffffff], 0x6, {r2}}, 0x58) 5.117527592s ago: executing program 2 (id=1407): unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x408081, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r0, r1, 0x0, 0x800048) close_range$auto(r1, r0, 0x0) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x101) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x40ac02, 0x0) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x4008050) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) getpid() ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x200100, 0x0) 4.42581142s ago: executing program 2 (id=1408): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x5) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex_waitv$auto(&(0x7f0000000300)={0x7f, 0x100000001, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x92, 0x6}, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x101) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca481, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x26, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0xffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x2}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x50bd2d, 0x25dfdbfe, {}, ["", ""]}, 0xffffffffffffff26}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x10, 0x3, 0xc) setsockopt$auto(r1, 0x104000000000010e, 0x1, 0x0, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xffd8) read$auto(r0, 0x0, 0x20) madvise$auto(0x0, 0x5, 0x15) 4.254078804s ago: executing program 0 (id=1409): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) r0 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) close_range$auto(r0, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$auto_KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000140)={0x200, [0x92f, 0x7f, 0x5]}) io_uring_setup$auto(0xa, 0x0) (async) io_uring_register$auto(0x2, 0x2, &(0x7f0000000000), 0xfffffffe) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r3, 0x29, 0x6, 0x0, 0x0) sendmsg$auto_NL80211_CMD_STOP_NAN(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x24044081}, 0x4004800) lsm_list_modules$auto(0x0, 0x0, 0x0) ioctl$auto(r2, 0x3b91, 0x38) 4.006451484s ago: executing program 0 (id=1410): r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, r0, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mlock$auto(0x401, 0x439) sendmmsg$auto(0x3, 0x0, 0x40, 0x100) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r1, r2, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyt5\x00', 0x20102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b", 0x23) setrlimit$auto(0x8, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r7, 0x40043311, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x364f9cefc8a0a83, 0x0) shmctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000380)={{0x81, 0xffffffffffffffff, 0x0, 0x5, 0x6, 0x1, 0x1}, 0xfffffff7, 0x3, 0x3, 0x8, @inferred, @raw=0x7, 0x2, 0x0, &(0x7f0000000280)="aaf09bd80d0000000000", &(0x7f0000001680)="08749ff4df35b75598629815e764e8491468fdee9079bd455261f3c12af31e72dd791e875cd7b47f19b1f97db7ffc84a8b8cfb1a797248310467b7aeb0f74733b23e7571d2878ceecbaaf91127b7dad93fcf0ece1ab11340072b43d017cd7186e2edad8471949f0e47b7b643dbcb9db8a8fde30ae065eb190136a96660eb14e7c34717b80e50f2a82e82c81ed70773c0ca0369a3da197a95c26bd775695b59799231eb84f9279387a7012a8dd7ce9838d92ff0776d2ce8c68c1b6b5836c68da3627d29"}) syz_clone(0x13081000, &(0x7f0000000480)="e156179aa5e36c4e0634e39e136fd01fc8a7691975e5d98e5a6dfd9de04a746f8784a2cb41f87cbc99c214969bd719fdfb8ff7995a9392d7efd0cd6c61ee8b359b216d3c54cf010e28c4ce5b5a2e2ff26b7e87d0c074ee25eb54058206f590692343a305791c44e7853cb3e12054466a28b5b78368d9aaecb9edd8e660e9c48ab4918b3a5594f6c694e524c7f3ee2ffe6b37692cbb3777b5e8ef402fcc83925b16f2fb30fd7e23a3814b6a1851832a41a5461aef267b8f214fc218d62d4cd232bcaa65956e7f58c5701400fb303e7d76", 0xd0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)="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") msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, r8, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYRES8=r4, @ANYRES16=r2, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="bb4a4c8f53d1c96358d82b2cdd5f5da9ffb400030ca6aedbeea3bbb0da7160faaffceca1b9ffffffffffffff7f0000246dfa399b4cdf330b51b8e70fb2d59db11b3023f5097164f2f1cdc4b858a052ddbf6b54be620ac593824a32eca749fb4e9eafecbbde18550c2b589d3622000000000000", @ANYRES32=0x0, @ANYRESHEX=0x0], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) 3.128886746s ago: executing program 3 (id=1411): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x10, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r2 = socket(0x11, 0x80003, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r2, 0x107, 0xd, 0x0, 0x8000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffffff, &(0x7f0000000000)=""/141, 0x8d) io_uring_setup$auto(0x40000002c55, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x800000000ffff, 0xa2, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x560e, r5) mmap$auto(0x6, 0x8f0e, 0xa000000000df, 0x9b72, r3, 0x28000) r6 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r6, &(0x7f0000000240)=""/163, 0xa3) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x0, 0x4}}, 0x0) rt_sigaction$auto(0xe, &(0x7f0000000580)={&(0x7f00000004c0)=0x0, 0x100000001, 0x0, {0x7}}, 0x0, 0x8) mmap$auto(0xfffffffffffffffe, 0x2020009, 0xc2e8, 0xeb1, 0xfffffffffffffffa, 0x8000) 3.012211455s ago: executing program 0 (id=1412): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0x8000, 0x4, 0x30) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="a7665d"], 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmget$auto(0x10001, 0x6a59, 0x39c) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x8, 0x2) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) kexec_load$auto(0x4ed, 0x1, &(0x7f0000000100)={@buf=&(0x7f0000000040)="4a410aac243ae5", 0x3, 0xf38f, 0x2}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) close_range$auto(0x2, 0xa, 0x0) 2.91367584s ago: executing program 2 (id=1413): close_range$auto(0x2, 0x8, 0x0) memfd_secret$auto(0x0) r0 = syz_clone(0xd0244000, &(0x7f00000011c0)="591addc24bd954407677267786a99c425cba1db35f841d45b5d2", 0x1a, &(0x7f0000001200), &(0x7f00000000c0), &(0x7f0000002c40)="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") syz_clone(0x40000, &(0x7f00000014c0)="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", 0x1a4, &(0x7f0000001140), &(0x7f0000001280), &(0x7f0000001680)="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") rt_sigqueueinfo$auto(r0, 0x7, &(0x7f0000000180)={@_si_pad}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0x3ff, &(0x7f0000001440)="3bf0649195440b584764f0134581ec4ed28a1983102eac0c3d31c6b1ed6f1153f7778c154b65edd9bc658af6fd47f3211f9ddcb5e41dccbfefdef026801648f2c8ace8cf5ad62da601bb2239630f11225b2ede1f47caee116e5018f835233f7663088eca1a") r1 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_dma_buf_debug_fops_(r1, &(0x7f00000003c0)=""/100, 0x64) mmap$auto(0x0, 0x400008, 0xdf, 0x10000009b72, 0x2, 0xffffffffffffffff) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r2) socket(0x3, 0x3, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001400)='/dev/sg0\x00', 0x28641, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800008}, 0x1, 0x20000000) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0xb) select$auto(0x4, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0x6, 0x1, 0x7, 0x2, 0x15f4da0a, 0xb4000000, 0x3, 0x62, 0x40008000001f, 0x7, 0x100000006d3e, 0x8, 0x2, 0x20000000003]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) 2.534446637s ago: executing program 1 (id=1414): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) socket(0x1e, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) inotify_init1$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a) (async) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) (async) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0xd, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r5) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x220, r7, 0xbfd2f475bee4eda5, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SAR_SPEC={0x174, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x104, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2c00}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x400}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffa}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x49}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xe}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x47debe8d}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x648c}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x144a}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x57}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x781}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x46d0d183}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xc}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}]}, @NL80211_SAR_ATTR_SPECS={0x64, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7f}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xd9b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x39}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xd}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xddb}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xbf6e}]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0xe86}, @NL80211_ATTR_PMKR0_NAME={0x8e, 0x102, "64dc0f28184898851afc272ee125d4dc8d4968023fe25c478cba1ed7fca101b4b7d295feb3892d80fc0aa6d39298d7a60ffaf708ec6315af864164efce80b39d998db01d62512f3df3bee09b2cdc4d89dac098620b67444d96cf67c1acdff6aec62ebbb83bc31bbe7c743e709b258f44bace79eb3275d73893524808899dd07458713fa4452b337efd56"}]}, 0x220}, 0x1, 0x0, 0x0, 0x2400c075}, 0x8851) ioctl$auto_FITHAW(r0, 0xc0045878, 0x8818) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan0/mcast_solicit\x00', 0x42000, 0x0) r9 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r9, 0xc038563c, r8) (async) ioctl$auto(r9, 0xc038563c, r8) 2.350944594s ago: executing program 1 (id=1415): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) shmctl$auto_SHM_INFO(0x3a7, 0xe, &(0x7f0000000440)={{0x5, 0xee00, 0xee00, 0x3, 0x0, 0x9, 0x3ff}, 0x7, 0x400, 0x7e, 0x8058, @inferred, @raw, 0xd, 0x0, 0x0, &(0x7f00000001c0)="1c28ff11b9ba1d018e"}) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{@raw=0x6, 0x0, 0x8001, 0x2, "da14cf93e7670976d4df4660872c34e34ab92824711bacf3578dcec408cf5180d03a4d126edb3169db6d48ac"}, 0x1, @iec958={"28f6a86309b1e098a7dfa272f95c4c28615313f81f02a4eb", "77a2e9b1b0224a8ef0ac25ff0db0b6ec20c55cccbf4e9b253241777363b62fbe19f64f49f5ed0205399a691cb53e4086d6ec9dcbc5173fee439c2db7f3d5f2d4dd2a267a11e3c0cc771cdddef6bdb02a85cf5ea2ecc26fa3fe291d1e45404619547117c0d45a0de14bc3b9c22d705152efa9d2cfb220c6210dd7606723fb4d6d8ea3e197b19203c65d90e3c761870cbd392bea", 0x0, "e8134be5"}, "a8949c7d9c57acd66da4c5f111166031ad47ebfed172b36a28d7b0204e3a90e9a6c41064df45da18212d9c4e61a29b8146bd0c0284d89751eb5c58cb32c2abf739599063c9a0820f08f1c1b3645f00006dcd033a712822785eeb6a2c41b6d7c00f5e965c1d0000000000000000000000000400"}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000077, 0x400, 0x9}]}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 2.041585549s ago: executing program 1 (id=1416): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x46, 0x2e, 0x1000000000065f, 0x80000000, 0x90, 0x3, 0x20000002, 0x9, 0x1, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x2, 0x80, 0x1, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xc4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/location\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r1) sendmsg$auto_ILA_CMD_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r3 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a) fsconfig$auto_HIDEPID_NO_ACCESS(0xffffffffffffffff, 0x5, 0x0, 0x0, 0x1) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x44eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto(0x3, 0x4020aea5, 0x38) r5 = socket(0x22, 0x2, 0x24) getsockopt$auto(r5, 0x0, 0x20001, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002ac0)='/$\x00', &(0x7f0000002b00), 0x4, 0x0) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) ioctl$auto_EVIOCSMASK(r6, 0x40104593, 0x0) init_module$auto(&(0x7f0000000000), 0xee3, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r5, 0x0, 0x40) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000000c0)="bfa4920daf00542e7deab8e0f29395587f85f8b2d9e44b3f57bc0acdf76dafe5232266eedd8b510a92720923cec06963b02b5eb282f0b00c0e6266dbf4ef9535ccdb136196543680b2b2dbcdac1a4783f158956e57624ecafc1a1b613f14e95ee8dd27a17ec2a69b1a8267fe77f032b34f799e15ebf2d61d8bbdd70348adc169ff1a6833a58fb530c4d4050d2c7ea95af1f1bc3d5057d1d5663742e2ff0f0a75892d820c731d5e29fccfe8328b9471fa097216bfa1e191f5689f8e6ba2e2f8b839deb75227e0b9af") finit_module$auto(r0, 0x0, 0x3) 1.735121095s ago: executing program 1 (id=1417): close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop12\x00', 0x10400, 0x0) ioctl$auto_BLKROSET(r0, 0x125d, 0x0) prctl$auto_SECCOMP_MODE_FILTER(0x3, 0x2, 0x0, 0x9, 0x55f6) (async) getsockopt$auto_SO_RCVPRIORITY(r0, 0x800, 0x52, &(0x7f0000000040)='{\'[-[.#]!/[-+-\\&[+*\x00', &(0x7f0000000080)=0x1) (async) mmap$auto(0x8000000000000005, 0x2691, 0xdf, 0x10, 0x40000000000a5, 0x8000) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x3f1) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio14\x00', 0x20401, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto(0x3, 0x4020565a, 0x38) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) io_uring_setup$auto(0x1, 0x0) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x10000000000002d, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) 1.660698454s ago: executing program 2 (id=1418): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x23, 0x80000, 0x4000b) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8d9a5b4cf165c931477ba53f3a80c522fc11555ea", 0x51) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x12d981, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c09, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x3, 0x6, 0x3, 0x40eb2, r1, 0x308000000000) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x20800, 0x0) ioctl$auto(r4, 0xb21064a7, 0x20000a) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) 1.58456374s ago: executing program 3 (id=1419): socket(0x2, 0x80002, 0x73) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0xa0001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)='T', 0x1) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0) (rerun: 32) sendfile$auto(r1, r1, 0x0, 0x4000000a1f) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x6, 0x1]}, 0x0) 1.2666474s ago: executing program 3 (id=1420): mmap$auto(0xfffffffffffffff7, 0x3, 0x4000000000df, 0x40eb3, 0x401, 0x300000000003) socket(0x15, 0x1, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r0 = inotify_init1$auto(0x3000000000000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x7, 0x8fd6, 0x948b, 0x3, 0x3392, 0x4, 0x3, 0x62, 0x80000001, 0x807, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x6, 0x3a) msgctl$auto_MSG_INFO(0x5, 0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101, 0x0) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x40000a, 0x1000e0, 0x12, r0, 0x2) r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r2, &(0x7f0000001280)=""/4116, 0x1014) ioctl$auto_IMADDTIMER(r2, 0x80044940, 0x0) getpgid$auto(0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0) read$auto(r3, 0x0, 0x4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x523500, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0xa}, 0x3) 1.117996533s ago: executing program 0 (id=1421): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x9, 0x3, 0xfffffffffffffff9, 0xffffffffffffff91, r1, 0x1) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) listen$auto(0x3, 0x81) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/system/cpu/cpu0/uevent\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001100)=""/4094, 0xffe) shutdown$auto(0x200000003, 0x2) setsockopt$auto(r2, 0x6, 0x1, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x9) listen$auto(0x3, 0x81) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x7, 0xffffffffffffffff) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x102, 0xe8, 0x0, 0x6, 0x0}) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) 516.696954ms ago: executing program 2 (id=1422): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x28, 0x805, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bind$auto(r1, &(0x7f0000000100)=@in={0x28, 0x0, @rand_addr=0xffffffff}, 0x68) mmap$auto(0x0, 0x3, 0xdf, 0x11, 0x7, 0x27ff8) r2 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r2, &(0x7f0000000000)="706f3a82d9e5cc7c2ceda8d50bfc94be9fe6c22ffaf8493a38", 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400007, 0x19dc, 0x13, 0x2, 0x7fff) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x141201, 0x0) r4 = ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)=';') mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000d, 0x80010, r4, 0x22) write$auto_snapshot_fops_user(r4, &(0x7f0000001a80)="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", 0x1000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x5, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x1ff, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10001, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) shmget$auto(0x4, 0x8, 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000092) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008015) 379.718989ms ago: executing program 2 (id=1423): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.1/usb2/removable\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r2, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event1\x00', 0x400, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), r4) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x1}}) 348.465371ms ago: executing program 0 (id=1424): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) shmctl$auto_SHM_INFO(0x3a7, 0xe, &(0x7f0000000440)={{0x5, 0xee00, 0xee00, 0x3, 0x0, 0x9, 0x3ff}, 0x7, 0x400, 0x7e, 0x8058, @inferred, @raw, 0xd, 0x0, 0x0, &(0x7f00000001c0)="1c28ff11b9ba1d018e"}) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{@raw=0x6, 0x0, 0x8001, 0x2, "da14cf93e7670976d4df4660872c34e34ab92824711bacf3578dcec408cf5180d03a4d126edb3169db6d48ac"}, 0x1, @iec958={"28f6a86309b1e098a7dfa272f95c4c28615313f81f02a4eb", "77a2e9b1b0224a8ef0ac25ff0db0b6ec20c55cccbf4e9b253241777363b62fbe19f64f49f5ed0205399a691cb53e4086d6ec9dcbc5173fee439c2db7f3d5f2d4dd2a267a11e3c0cc771cdddef6bdb02a85cf5ea2ecc26fa3fe291d1e45404619547117c0d45a0de14bc3b9c22d705152efa9d2cfb220c6210dd7606723fb4d6d8ea3e197b19203c65d90e3c761870cbd392bea", 0x0, "e8134be5"}, "a8949c7d9c57acd66da4c5f111166031ad47ebfed172b36a28d7b0204e3a90e9a6c41064df45da18212d9c4e61a29b8146bd0c0284d89751eb5c58cb32c2abf739599063c9a0820f08f1c1b3645f00006dcd033a712822785eeb6a2c41b6d7c00f5e965c1d0000000000000000000000000400"}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000077, 0x400, 0x9}]}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 193.87026ms ago: executing program 3 (id=1425): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop5\x00', 0x101080, 0x0) ioctl$auto_BLKOPENZONE(r0, 0x40101286, &(0x7f0000000140)={0x8, 0xfffffffffffffffa}) mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffffe, r0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000adc0)={0x38, r2, 0x1b, 0x70bd26, 0x25dfcbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x11}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) ioctl$auto(0x3, 0x541b, 0x38) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r3, 0x4010744d, 0x0) mmap$auto(0xf000, 0x9, 0x7fffffff, 0x29b7e, r3, 0x6) 126.609339ms ago: executing program 1 (id=1426): prctl$auto_PR_PPC_GET_DEXCR(0x48, 0xb, 0xffffffffffffffff, 0xffffffffffffff1c, 0x7) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x10001, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) setsockopt$auto(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x40000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x40201, 0x0) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$auto_nvram_misc_fops_nvram(r3, 0x0, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xb8, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) sendfile$auto(r4, 0xffffffffffffffff, 0x0, 0x1000202) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) write$auto(0xffffffffffffffff, &(0x7f0000000100)='/surit\x8b\xafR\xf2y/integrity?iqa/policy\x00\xa2\xf4\x92_\xe8\xaeD\xca/ \xe5\xed`\xa4\xb5b\xff\x8c\xcf8\x00\xd5s\xb36\"\'\xb0\x84k\x98\xd7\xca\x06O\xd8Y\x15{W\f=XM\xb7\xf4\xca\xdf\x8fe\xe2\x91>`D{\x9e\xfe\x92\x9f|#5P\x8b\xdd\xd2/\b\xb5g\x18\xed\xaa \x9fs\xe0\x04\x84\x04\x02\x89\x84%d\xc1@\x91W\xf8\xf65\xa8\x1d\xde\alUZ\xab\x17\xba\xf8\x02\x12\x94\xdc\xcb\xc3\x06\x82\xc8G4>J\x83\xd3^\x8d', 0x2000000000c5) ioctl$auto(r2, 0x60, 0xffffffffffffffff) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, r5) waitid$auto_P_ALL(0x0, 0x3, 0x0, 0x401, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000a40), r5) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x20, r6, 0x740f16fcea7cbf75, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_MASK={0xc, 0x7, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x32}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000810) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000080), r1) ioctl$auto(r0, 0xffff5772, r1) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000280)="b8e7f168dbab64be200a5b19eea9190000000000000001abdd5e1bd4601f01b8d7e43f4c0dafdfc440861d00000040bccef81fa74d661b694bd95b769856573e4e2e820ff9fdbab44df15487644ffb8cf10705310a49536f31a301567369797c", 0x2, &(0x7f0000000100)={&(0x7f0000000080)="90fab9e3a694ed1c437bc9643af82f00e466d19f013ca15ba188e7cff464b0cfe0392770673902f512233743ee93331ceb087fe2796b7ead9b23d8f7d94010d439d6f0c203661801c52183784878875ba510", 0x3}, 0xffe7, &(0x7f0000000140)="0d89c7429d44b11e8b01491539ec6a7b36425a2204efe56b8df77b56a66f5da5aae6901430eb4419e57eb49bc34385d358d89135a5169cc8880cc53bd6e25f1390e55e9c154a7364572f6b7095b87aa8", 0xc, 0x42}, 0x4}, 0x4, 0x42) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), r1) 0s ago: executing program 1 (id=1427): r0 = socket(0x10, 0x2, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7, 0x9, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r2 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r2, 0x11, 0x68, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(r1, 0x0, 0xffd8) recvmmsg$auto(r1, 0x0, 0x10a, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1a000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400000000000004}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getpid() unshare$auto(0x40000080) init_module$auto(&(0x7f00000002c0)="58c84e09d743745c24bcc3", 0x1, &(0x7f0000000300)='\xe7&]\xf7,^%\x00') setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_UNSPEC={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) kernel console output (not intermixed with test programs): source '' failed with -22 [ 348.725764][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.737099][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.748601][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.758369][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.768293][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.783776][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.800212][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.827324][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.840012][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.851525][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.863416][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.873097][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.907136][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.917293][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.926552][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.936045][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.946900][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.960741][T11204] FAULT_INJECTION: forcing a failure. [ 348.960741][T11204] name failslab, interval 1, probability 0, space 0, times 0 [ 348.987437][T11204] CPU: 1 UID: 0 PID: 11204 Comm: syz.0.911 Tainted: G I syzkaller #0 PREEMPT(full) [ 348.987464][T11204] Tainted: [I]=FIRMWARE_WORKAROUND [ 348.987469][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 348.987479][T11204] Call Trace: [ 348.987484][T11204] [ 348.987489][T11204] dump_stack_lvl+0x16c/0x1f0 [ 348.987512][T11204] should_fail_ex+0x512/0x640 [ 348.987532][T11204] ? fs_reclaim_acquire+0xae/0x150 [ 348.987562][T11204] should_failslab+0xc2/0x120 [ 348.987582][T11204] kmem_cache_alloc_noprof+0x75/0x6e0 [ 348.987598][T11204] ? __pfx_map_id_range_down+0x10/0x10 [ 348.987612][T11204] ? security_inode_alloc+0x3b/0x2b0 [ 348.987636][T11204] ? security_inode_alloc+0x3b/0x2b0 [ 348.987655][T11204] security_inode_alloc+0x3b/0x2b0 [ 348.987676][T11204] inode_init_always_gfp+0xce4/0x1030 [ 348.987694][T11204] ? __pfx_mqueue_fill_super+0x10/0x10 [ 348.987711][T11204] alloc_inode+0x86/0x240 [ 348.987730][T11204] new_inode+0x22/0x1c0 [ 348.987750][T11204] ? __pfx_mqueue_fill_super+0x10/0x10 [ 348.987767][T11204] mqueue_get_inode+0x2e/0xdd0 [ 348.987783][T11204] ? sget_fc+0x808/0xc20 [ 348.987799][T11204] ? __pfx_mqueue_fill_super+0x10/0x10 [ 348.987817][T11204] mqueue_fill_super+0x14d/0x260 [ 348.987834][T11204] get_tree_nodev+0xdd/0x190 [ 348.987852][T11204] mqueue_get_tree+0xf1/0x130 [ 348.987869][T11204] vfs_get_tree+0x8b/0x340 [ 348.987882][T11204] fc_mount_longterm+0x1a/0x270 [ 348.987904][T11204] mq_init_ns+0x426/0x620 [ 348.987926][T11204] copy_ipcs+0x2d6/0x550 [ 348.987947][T11204] create_new_namespaces+0x20a/0xa90 [ 348.987966][T11204] ? security_capable+0x7e/0x260 [ 348.987986][T11204] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 348.988006][T11204] ksys_unshare+0x45b/0xa40 [ 348.988026][T11204] ? __pfx_ksys_unshare+0x10/0x10 [ 348.988047][T11204] ? xfd_validate_state+0x61/0x180 [ 348.988066][T11204] __x64_sys_unshare+0x31/0x40 [ 348.988086][T11204] do_syscall_64+0xcd/0x4b0 [ 348.988104][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.988118][T11204] RIP: 0033:0x7f73d2f8eec9 [ 348.988131][T11204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.988144][T11204] RSP: 002b:00007f73d3d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 348.988158][T11204] RAX: ffffffffffffffda RBX: 00007f73d31e6090 RCX: 00007f73d2f8eec9 [ 348.988167][T11204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 348.988176][T11204] RBP: 00007f73d3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 348.988184][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.988192][T11204] R13: 00007f73d31e6128 R14: 00007f73d31e6090 R15: 00007ffef29c8158 [ 348.988211][T11204] [ 349.266635][T11191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 349.557675][T11211] FAULT_INJECTION: forcing a failure. [ 349.557675][T11211] name failslab, interval 1, probability 0, space 0, times 0 [ 349.575631][T11211] CPU: 1 UID: 0 PID: 11211 Comm: syz.2.912 Tainted: G I syzkaller #0 PREEMPT(full) [ 349.575672][T11211] Tainted: [I]=FIRMWARE_WORKAROUND [ 349.575681][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.575693][T11211] Call Trace: [ 349.575701][T11211] [ 349.575710][T11211] dump_stack_lvl+0x16c/0x1f0 [ 349.575745][T11211] should_fail_ex+0x512/0x640 [ 349.575778][T11211] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 349.575814][T11211] should_failslab+0xc2/0x120 [ 349.575847][T11211] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 349.575879][T11211] ? kasprintf+0xc7/0x100 [ 349.575920][T11211] ? kvasprintf+0xbc/0x160 [ 349.575951][T11211] kvasprintf+0xbc/0x160 [ 349.575985][T11211] ? __pfx_kvasprintf+0x10/0x10 [ 349.576024][T11211] ? __lock_acquire+0xb97/0x1ce0 [ 349.576066][T11211] kasprintf+0xc7/0x100 [ 349.576100][T11211] ? __pfx_kasprintf+0x10/0x10 [ 349.576136][T11211] ? __mutex_trylock_common+0xe9/0x250 [ 349.576167][T11211] ? __pfx___mutex_trylock_common+0x10/0x10 [ 349.576205][T11211] bitmap_print_to_buf+0xa8/0x130 [ 349.576235][T11211] ? __pfx_bitmap_print_to_buf+0x10/0x10 [ 349.576274][T11211] thread_siblings_read+0x145/0x1d0 [ 349.576309][T11211] ? __pfx_thread_siblings_read+0x10/0x10 [ 349.576337][T11211] ? sysfs_file_kobj+0xe4/0x290 [ 349.576365][T11211] ? __pfx_thread_siblings_read+0x10/0x10 [ 349.576393][T11211] sysfs_kf_bin_read+0x153/0x210 [ 349.576420][T11211] kernfs_fop_read_iter+0x328/0x610 [ 349.576451][T11211] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 349.576478][T11211] vfs_read+0x8bf/0xcf0 [ 349.576505][T11211] ? __pfx___mutex_lock+0x10/0x10 [ 349.576529][T11211] ? __pfx_vfs_read+0x10/0x10 [ 349.576573][T11211] ksys_read+0x12a/0x250 [ 349.576594][T11211] ? __pfx_ksys_read+0x10/0x10 [ 349.576626][T11211] do_syscall_64+0xcd/0x4b0 [ 349.576652][T11211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.576673][T11211] RIP: 0033:0x7fd107d8eec9 [ 349.576691][T11211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.576710][T11211] RSP: 002b:00007fd108bb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 349.576729][T11211] RAX: ffffffffffffffda RBX: 00007fd107fe5fa0 RCX: 00007fd107d8eec9 [ 349.576743][T11211] RDX: 000000000000100f RSI: 0000200000002140 RDI: 0000000000000003 [ 349.576755][T11211] RBP: 00007fd108bb3090 R08: 0000000000000000 R09: 0000000000000000 [ 349.576768][T11211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.576780][T11211] R13: 00007fd107fe6038 R14: 00007fd107fe5fa0 R15: 00007ffdd59ab188 [ 349.576810][T11211] [ 350.224139][T11224] netlink: 252 bytes leftover after parsing attributes in process `syz.2.916'. [ 350.238714][T11224] netlink: 252 bytes leftover after parsing attributes in process `syz.2.916'. [ 350.505313][T11229] netlink: zone id is out of range [ 350.552046][T11229] netlink: zone id is out of range [ 350.608146][T11229] netlink: zone id is out of range [ 350.635295][T11229] netlink: zone id is out of range [ 350.641250][T11229] netlink: zone id is out of range [ 350.710654][T11229] netlink: zone id is out of range [ 350.768675][T11218] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 350.777867][T11229] netlink: zone id is out of range [ 350.783475][T11229] netlink: zone id is out of range [ 350.788794][T11229] netlink: zone id is out of range [ 350.794365][T11229] netlink: zone id is out of range [ 350.912930][T11218] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 350.972844][T11218] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 351.032813][T11218] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 351.083563][T11218] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 351.156191][T11218] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 351.166474][T11218] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 351.221963][T11218] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 351.313931][T11218] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 351.349307][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 351.852303][T11251] FAULT_INJECTION: forcing a failure. [ 351.852303][T11251] name failslab, interval 1, probability 0, space 0, times 0 [ 351.931101][T11251] CPU: 0 UID: 0 PID: 11251 Comm: syz.0.920 Tainted: G I syzkaller #0 PREEMPT(full) [ 351.931144][T11251] Tainted: [I]=FIRMWARE_WORKAROUND [ 351.931153][T11251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.931167][T11251] Call Trace: [ 351.931175][T11251] [ 351.931185][T11251] dump_stack_lvl+0x16c/0x1f0 [ 351.931222][T11251] should_fail_ex+0x512/0x640 [ 351.931256][T11251] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 351.931288][T11251] should_failslab+0xc2/0x120 [ 351.931324][T11251] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 351.931356][T11251] ? __d_alloc+0x32/0xae0 [ 351.931389][T11251] ? __pfx_mqueue_fill_super+0x10/0x10 [ 351.931422][T11251] ? __d_alloc+0x32/0xae0 [ 351.931448][T11251] __d_alloc+0x32/0xae0 [ 351.931476][T11251] ? mqueue_get_inode+0x285/0xdd0 [ 351.931509][T11251] ? __pfx_mqueue_fill_super+0x10/0x10 [ 351.931550][T11251] d_make_root+0x3e/0x90 [ 351.931582][T11251] mqueue_fill_super+0x175/0x260 [ 351.931630][T11251] get_tree_nodev+0xdd/0x190 [ 351.931662][T11251] mqueue_get_tree+0xf1/0x130 [ 351.931696][T11251] vfs_get_tree+0x8b/0x340 [ 351.931719][T11251] fc_mount_longterm+0x1a/0x270 [ 351.931765][T11251] mq_init_ns+0x426/0x620 [ 351.931805][T11251] copy_ipcs+0x2d6/0x550 [ 351.931840][T11251] create_new_namespaces+0x20a/0xa90 [ 351.931870][T11251] ? security_capable+0x7e/0x260 [ 351.931906][T11251] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 351.931942][T11251] ksys_unshare+0x45b/0xa40 [ 351.931972][T11251] ? __pfx_ksys_unshare+0x10/0x10 [ 351.932005][T11251] ? xfd_validate_state+0x61/0x180 [ 351.932035][T11251] __x64_sys_unshare+0x31/0x40 [ 351.932067][T11251] do_syscall_64+0xcd/0x4b0 [ 351.932096][T11251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.932118][T11251] RIP: 0033:0x7f73d2f8eec9 [ 351.932138][T11251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.932163][T11251] RSP: 002b:00007f73d3d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 351.932186][T11251] RAX: ffffffffffffffda RBX: 00007f73d31e6090 RCX: 00007f73d2f8eec9 [ 351.932203][T11251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 351.932216][T11251] RBP: 00007f73d3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 351.932231][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.932245][T11251] R13: 00007f73d31e6128 R14: 00007f73d31e6090 R15: 00007ffef29c8158 [ 351.932279][T11251] [ 352.236816][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 352.462458][T11263] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 353.442849][T11277] FAULT_INJECTION: forcing a failure. [ 353.442849][T11277] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 353.516618][T11277] CPU: 1 UID: 0 PID: 11277 Comm: syz.0.928 Tainted: G I syzkaller #0 PREEMPT(full) [ 353.516657][T11277] Tainted: [I]=FIRMWARE_WORKAROUND [ 353.516666][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.516681][T11277] Call Trace: [ 353.516689][T11277] [ 353.516699][T11277] dump_stack_lvl+0x16c/0x1f0 [ 353.516734][T11277] should_fail_ex+0x512/0x640 [ 353.516773][T11277] should_fail_alloc_page+0xe7/0x130 [ 353.516808][T11277] prepare_alloc_pages+0x3c2/0x610 [ 353.516847][T11277] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 353.516880][T11277] ? __lock_acquire+0x62e/0x1ce0 [ 353.516928][T11277] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 353.516960][T11277] ? find_held_lock+0x2b/0x80 [ 353.516994][T11277] ? __lock_acquire+0x62e/0x1ce0 [ 353.517035][T11277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.517065][T11277] ? policy_nodemask+0xea/0x4e0 [ 353.517101][T11277] alloc_pages_mpol+0x1fb/0x550 [ 353.517135][T11277] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 353.517172][T11277] ? __lock_acquire+0x62e/0x1ce0 [ 353.517221][T11277] folio_alloc_mpol_noprof+0x36/0x2f0 [ 353.517260][T11277] vma_alloc_folio_noprof+0xed/0x1e0 [ 353.517297][T11277] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 353.517349][T11277] do_pte_missing+0x2202/0x3ba0 [ 353.517379][T11277] ? find_held_lock+0x2b/0x80 [ 353.517417][T11277] __handle_mm_fault+0x1556/0x2aa0 [ 353.517450][T11277] ? mt_find+0x3e2/0xa20 [ 353.517483][T11277] ? __pfx___handle_mm_fault+0x10/0x10 [ 353.517504][T11277] ? __pfx_mt_find+0x10/0x10 [ 353.517556][T11277] ? find_vma+0xbf/0x140 [ 353.517584][T11277] ? __pfx_find_vma+0x10/0x10 [ 353.517618][T11277] handle_mm_fault+0x589/0xd10 [ 353.517643][T11277] ? trace_raw_output_exceptions+0x141/0x150 [ 353.517673][T11277] do_user_addr_fault+0x7a6/0x1370 [ 353.517704][T11277] ? rcu_is_watching+0x12/0xc0 [ 353.517739][T11277] exc_page_fault+0x5c/0xb0 [ 353.517766][T11277] asm_exc_page_fault+0x26/0x30 [ 353.517789][T11277] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 353.517825][T11277] Code: e9 04 24 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 23 04 00 66 66 2e 0f [ 353.517848][T11277] RSP: 0018:ffffc9001a33fb98 EFLAGS: 00050202 [ 353.517868][T11277] RAX: 0000000000000033 RBX: 0000000000000002 RCX: 0000000000000002 [ 353.517882][T11277] RDX: ffffed1005337801 RSI: ffff8880299bc000 RDI: 0000200000002140 [ 353.517898][T11277] RBP: 0000200000002140 R08: 0000000000000000 R09: ffffed1005337800 [ 353.517914][T11277] R10: ffff8880299bc001 R11: 0000000000000000 R12: ffffc9001a33fda0 [ 353.517930][T11277] R13: 0000200000002142 R14: ffff8880299bc000 R15: 00007ffffffff000 [ 353.517967][T11277] _copy_to_iter+0x383/0x1710 [ 353.518004][T11277] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 353.518033][T11277] ? thread_siblings_read+0x145/0x1d0 [ 353.518070][T11277] ? __pfx__copy_to_iter+0x10/0x10 [ 353.518106][T11277] ? find_held_lock+0x2b/0x80 [ 353.518141][T11277] kernfs_fop_read_iter+0x3a6/0x610 [ 353.518162][T11277] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 353.518193][T11277] vfs_read+0x8bf/0xcf0 [ 353.518226][T11277] ? __pfx___mutex_lock+0x10/0x10 [ 353.518254][T11277] ? __pfx_vfs_read+0x10/0x10 [ 353.518307][T11277] ksys_read+0x12a/0x250 [ 353.518333][T11277] ? __pfx_ksys_read+0x10/0x10 [ 353.518381][T11277] do_syscall_64+0xcd/0x4b0 [ 353.518414][T11277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.518438][T11277] RIP: 0033:0x7f73d2f8eec9 [ 353.518456][T11277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.518479][T11277] RSP: 002b:00007f73d3d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 353.518500][T11277] RAX: ffffffffffffffda RBX: 00007f73d31e5fa0 RCX: 00007f73d2f8eec9 [ 353.518516][T11277] RDX: 000000000000100f RSI: 0000200000002140 RDI: 0000000000000003 [ 353.518531][T11277] RBP: 00007f73d3d61090 R08: 0000000000000000 R09: 0000000000000000 [ 353.518546][T11277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.518560][T11277] R13: 00007f73d31e6038 R14: 00007f73d31e5fa0 R15: 00007ffef29c8158 [ 353.518596][T11277] [ 353.926988][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.078911][T11255] random: crng reseeded on system resumption [ 354.545458][T11293] FAULT_INJECTION: forcing a failure. [ 354.545458][T11293] name failslab, interval 1, probability 0, space 0, times 0 [ 354.599342][T11293] CPU: 0 UID: 0 PID: 11293 Comm: syz.0.932 Tainted: G I syzkaller #0 PREEMPT(full) [ 354.599386][T11293] Tainted: [I]=FIRMWARE_WORKAROUND [ 354.599396][T11293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.599411][T11293] Call Trace: [ 354.599420][T11293] [ 354.599431][T11293] dump_stack_lvl+0x16c/0x1f0 [ 354.599468][T11293] should_fail_ex+0x512/0x640 [ 354.599503][T11293] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 354.599537][T11293] should_failslab+0xc2/0x120 [ 354.599573][T11293] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 354.599604][T11293] ? __d_alloc+0x32/0xae0 [ 354.599640][T11293] ? __pfx_mqueue_fill_super+0x10/0x10 [ 354.599673][T11293] ? __d_alloc+0x32/0xae0 [ 354.599700][T11293] __d_alloc+0x32/0xae0 [ 354.599728][T11293] ? mqueue_get_inode+0x285/0xdd0 [ 354.599760][T11293] ? __pfx_mqueue_fill_super+0x10/0x10 [ 354.599792][T11293] d_make_root+0x3e/0x90 [ 354.599823][T11293] mqueue_fill_super+0x175/0x260 [ 354.599856][T11293] get_tree_nodev+0xdd/0x190 [ 354.599887][T11293] mqueue_get_tree+0xf1/0x130 [ 354.599919][T11293] vfs_get_tree+0x8b/0x340 [ 354.599943][T11293] fc_mount_longterm+0x1a/0x270 [ 354.599984][T11293] mq_init_ns+0x426/0x620 [ 354.600025][T11293] copy_ipcs+0x2d6/0x550 [ 354.600064][T11293] create_new_namespaces+0x20a/0xa90 [ 354.600097][T11293] ? security_capable+0x7e/0x260 [ 354.600136][T11293] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 354.600182][T11293] ksys_unshare+0x45b/0xa40 [ 354.600222][T11293] ? __pfx_ksys_unshare+0x10/0x10 [ 354.600262][T11293] ? xfd_validate_state+0x61/0x180 [ 354.600297][T11293] __x64_sys_unshare+0x31/0x40 [ 354.600334][T11293] do_syscall_64+0xcd/0x4b0 [ 354.600367][T11293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.600394][T11293] RIP: 0033:0x7f73d2f8eec9 [ 354.600414][T11293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.600439][T11293] RSP: 002b:00007f73d3d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 354.600464][T11293] RAX: ffffffffffffffda RBX: 00007f73d31e6090 RCX: 00007f73d2f8eec9 [ 354.600482][T11293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 354.600498][T11293] RBP: 00007f73d3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 354.600513][T11293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.600529][T11293] R13: 00007f73d31e6128 R14: 00007f73d31e6090 R15: 00007ffef29c8158 [ 354.600566][T11293] [ 354.928127][T11303] FAULT_INJECTION: forcing a failure. [ 354.928127][T11303] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.941437][T11303] CPU: 0 UID: 0 PID: 11303 Comm: syz.3.934 Tainted: G I syzkaller #0 PREEMPT(full) [ 354.941479][T11303] Tainted: [I]=FIRMWARE_WORKAROUND [ 354.941490][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.941506][T11303] Call Trace: [ 354.941516][T11303] [ 354.941526][T11303] dump_stack_lvl+0x16c/0x1f0 [ 354.941564][T11303] should_fail_ex+0x512/0x640 [ 354.941605][T11303] should_fail_alloc_page+0xe7/0x130 [ 354.941644][T11303] prepare_alloc_pages+0x3c2/0x610 [ 354.941680][T11303] ? rcu_is_watching+0x12/0xc0 [ 354.941715][T11303] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 354.941750][T11303] ? rcu_is_watching+0x12/0xc0 [ 354.941780][T11303] ? trace_mm_page_alloc+0x11f/0x1a0 [ 354.941817][T11303] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 354.941848][T11303] ? __pfx_stack_trace_save+0x10/0x10 [ 354.941882][T11303] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 354.941917][T11303] ? stack_depot_save_flags+0x29/0x9c0 [ 354.941962][T11303] ? alloc_vmap_area+0xdcf/0x29e0 [ 354.941994][T11303] ? __vmalloc_node_range_noprof+0x271/0x1480 [ 354.942031][T11303] ? __do_sys_listmount+0x280/0xeb0 [ 354.942052][T11303] ? do_syscall_64+0xcd/0x4b0 [ 354.942080][T11303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.942122][T11303] alloc_pages_bulk_noprof+0x71c/0x1410 [ 354.942148][T11303] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 354.942178][T11303] ? policy_nodemask+0xea/0x4e0 [ 354.942217][T11303] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 354.942247][T11303] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 354.942298][T11303] kasan_populate_vmalloc+0x112/0x2d0 [ 354.942327][T11303] ? alloc_vmap_area+0x8b5/0x29e0 [ 354.942368][T11303] alloc_vmap_area+0x960/0x29e0 [ 354.942414][T11303] ? __pfx_alloc_vmap_area+0x10/0x10 [ 354.942457][T11303] __get_vm_area_node+0x1ca/0x330 [ 354.942500][T11303] __vmalloc_node_range_noprof+0x271/0x1480 [ 354.942538][T11303] ? __do_sys_listmount+0x280/0xeb0 [ 354.942561][T11303] ? lockdep_hardirqs_on+0x7c/0x110 [ 354.942588][T11303] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 354.942616][T11303] ? policy_nodemask+0xea/0x4e0 [ 354.942653][T11303] ? __do_sys_listmount+0x280/0xeb0 [ 354.942686][T11303] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 354.942729][T11303] ? ___kmalloc_large_node+0xed/0x160 [ 354.942772][T11303] __kvmalloc_node_noprof+0x431/0x9c0 [ 354.942804][T11303] ? __do_sys_listmount+0x280/0xeb0 [ 354.942830][T11303] ? __do_sys_listmount+0x280/0xeb0 [ 354.942854][T11303] ? _copy_from_user+0x59/0xd0 [ 354.942902][T11303] ? __do_sys_listmount+0x280/0xeb0 [ 354.942927][T11303] __do_sys_listmount+0x280/0xeb0 [ 354.942963][T11303] ? __pfx___do_sys_listmount+0x10/0x10 [ 354.943013][T11303] do_syscall_64+0xcd/0x4b0 [ 354.943046][T11303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.943072][T11303] RIP: 0033:0x7fcc2e98eec9 [ 354.943093][T11303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.943118][T11303] RSP: 002b:00007fcc2f86b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 354.943143][T11303] RAX: ffffffffffffffda RBX: 00007fcc2ebe6090 RCX: 00007fcc2e98eec9 [ 354.943161][T11303] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 354.943176][T11303] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 354.943192][T11303] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 354.943207][T11303] R13: 00007fcc2ebe6128 R14: 00007fcc2ebe6090 R15: 00007ffe67f7d7f8 [ 354.943234][T11303] [ 355.322038][T11308] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 355.361119][T11303] syz.3.934: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 355.376572][T11303] CPU: 1 UID: 0 PID: 11303 Comm: syz.3.934 Tainted: G I syzkaller #0 PREEMPT(full) [ 355.376612][T11303] Tainted: [I]=FIRMWARE_WORKAROUND [ 355.376621][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 355.376634][T11303] Call Trace: [ 355.376643][T11303] [ 355.376652][T11303] dump_stack_lvl+0x16c/0x1f0 [ 355.376687][T11303] warn_alloc+0x248/0x3a0 [ 355.376716][T11303] ? __pfx_warn_alloc+0x10/0x10 [ 355.376744][T11303] ? kfree+0x2b8/0x6d0 [ 355.376764][T11303] ? __get_vm_area_node+0x2cd/0x330 [ 355.376803][T11303] ? __get_vm_area_node+0x2cd/0x330 [ 355.376831][T11303] ? __get_vm_area_node+0x208/0x330 [ 355.376867][T11303] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 355.376906][T11303] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.376932][T11303] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.376959][T11303] ? policy_nodemask+0xea/0x4e0 [ 355.376993][T11303] ? __do_sys_listmount+0x280/0xeb0 [ 355.377023][T11303] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.377059][T11303] ? ___kmalloc_large_node+0xed/0x160 [ 355.377096][T11303] __kvmalloc_node_noprof+0x431/0x9c0 [ 355.377127][T11303] ? __do_sys_listmount+0x280/0xeb0 [ 355.377152][T11303] ? __do_sys_listmount+0x280/0xeb0 [ 355.377174][T11303] ? _copy_from_user+0x59/0xd0 [ 355.377213][T11303] ? __do_sys_listmount+0x280/0xeb0 [ 355.377235][T11303] __do_sys_listmount+0x280/0xeb0 [ 355.377267][T11303] ? __pfx___do_sys_listmount+0x10/0x10 [ 355.377315][T11303] do_syscall_64+0xcd/0x4b0 [ 355.377347][T11303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.377372][T11303] RIP: 0033:0x7fcc2e98eec9 [ 355.377392][T11303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.377415][T11303] RSP: 002b:00007fcc2f86b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 355.377439][T11303] RAX: ffffffffffffffda RBX: 00007fcc2ebe6090 RCX: 00007fcc2e98eec9 [ 355.377456][T11303] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 355.377471][T11303] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 355.377486][T11303] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 355.377500][T11303] R13: 00007fcc2ebe6128 R14: 00007fcc2ebe6090 R15: 00007ffe67f7d7f8 [ 355.377534][T11303] [ 355.377554][T11303] Mem-Info: [ 355.554073][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.645972][T11303] active_anon:8957 inactive_anon:14 isolated_anon:0 [ 355.645972][T11303] active_file:9434 inactive_file:49056 isolated_file:0 [ 355.645972][T11303] unevictable:893 dirty:67 writeback:0 [ 355.645972][T11303] slab_reclaimable:12058 slab_unreclaimable:100571 [ 355.645972][T11303] mapped:25769 shmem:2000 pagetables:1209 [ 355.645972][T11303] sec_pagetables:0 bounce:0 [ 355.645972][T11303] kernel_misc_reclaimable:0 [ 355.645972][T11303] free:1310034 free_pcp:15018 free_cma:0 [ 355.699412][T11303] Node 0 active_anon:35828kB inactive_anon:56kB active_file:37736kB inactive_file:196088kB unevictable:2036kB isolated(anon):0kB isolated(file):0kB mapped:107076kB dirty:268kB writeback:0kB shmem:6464kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:11972kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.733184][T11303] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.764753][T11303] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.764835][T11303] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 355.764881][T11303] Node 0 DMA32 free:1323852kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35828kB inactive_anon:56kB active_file:37736kB inactive_file:196088kB unevictable:2036kB writepending:368kB zspages:464kB present:3129332kB managed:2547976kB mlocked:500kB bounce:0kB free_pcp:48500kB local_pcp:23692kB free_cma:0kB [ 355.764957][T11303] lowmem_reserve[]: 0 0 0 0 0 [ 355.765004][T11303] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.765072][T11303] lowmem_reserve[]: 0 0 0 [ 355.794865][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.913505][T11303] 0 0 [ 355.931491][T11303] Node 1 Normal free:3901180kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11584kB local_pcp:6688kB free_cma:0kB [ 356.005909][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.014297][T11303] lowmem_reserve[]: 0 0 0 0 0 [ 356.114182][T11303] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 356.163189][T11303] Node 0 DMA32: 2845*4kB (UME) 2125*8kB (UME) 1193*16kB (UME) 1170*32kB (UME) 709*64kB (UME) 207*128kB (UME) 136*256kB (UME) 107*512kB (UME) 52*1024kB (UME) 4*2048kB (UM) 248*4096kB (UM) = 1323628kB [ 356.196303][T11303] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 356.208251][T11303] Node 1 Normal: 167*4kB (UM) 64*8kB (UME) 46*16kB (UME) 176*32kB (UME) 66*64kB (UME) 12*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3901180kB [ 356.232983][T11303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.247277][T11303] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=4 hugepages_size=2048kB [ 356.257018][T11303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.278962][T11303] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.288474][T11303] 60527 total pagecache pages [ 356.293178][T11303] 41 pages in swap cache [ 356.311531][T11303] Free swap = 124628kB [ 356.329343][T11303] Total swap = 124996kB [ 356.348170][T11303] 2097051 pages RAM [ 356.352183][T11303] 0 pages HighMem/MovableOnly [ 356.357352][T11303] 428415 pages reserved [ 356.361605][T11303] 0 pages cma reserved [ 356.617527][T11325] FAULT_INJECTION: forcing a failure. [ 356.617527][T11325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.632120][T11325] CPU: 0 UID: 0 PID: 11325 Comm: syz.3.939 Tainted: G I syzkaller #0 PREEMPT(full) [ 356.632146][T11325] Tainted: [I]=FIRMWARE_WORKAROUND [ 356.632154][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 356.632167][T11325] Call Trace: [ 356.632175][T11325] [ 356.632184][T11325] dump_stack_lvl+0x16c/0x1f0 [ 356.632216][T11325] should_fail_ex+0x512/0x640 [ 356.632251][T11325] _copy_to_user+0x32/0xd0 [ 356.632273][T11325] simple_read_from_buffer+0xcb/0x170 [ 356.632297][T11325] proc_fail_nth_read+0x197/0x240 [ 356.632314][T11325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.632330][T11325] ? rw_verify_area+0xcf/0x6c0 [ 356.632344][T11325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.632360][T11325] vfs_read+0x1e1/0xcf0 [ 356.632377][T11325] ? __pfx___mutex_lock+0x10/0x10 [ 356.632395][T11325] ? __pfx_vfs_read+0x10/0x10 [ 356.632415][T11325] ? __fget_files+0x20e/0x3c0 [ 356.632435][T11325] ksys_read+0x12a/0x250 [ 356.632450][T11325] ? __pfx_ksys_read+0x10/0x10 [ 356.632471][T11325] do_syscall_64+0xcd/0x4b0 [ 356.632489][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.632504][T11325] RIP: 0033:0x7fcc2e98d8dc [ 356.632516][T11325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 356.632529][T11325] RSP: 002b:00007fcc2f88c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.632542][T11325] RAX: ffffffffffffffda RBX: 00007fcc2ebe5fa0 RCX: 00007fcc2e98d8dc [ 356.632551][T11325] RDX: 000000000000000f RSI: 00007fcc2f88c0a0 RDI: 0000000000000004 [ 356.632560][T11325] RBP: 00007fcc2f88c090 R08: 0000000000000000 R09: 0000000000000000 [ 356.632568][T11325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.632576][T11325] R13: 00007fcc2ebe6038 R14: 00007fcc2ebe5fa0 R15: 00007ffe67f7d7f8 [ 356.632594][T11325] [ 357.387455][T11345] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 357.587270][T11351] Invalid ELF header magic: != ELF [ 358.262488][T11363] FAULT_INJECTION: forcing a failure. [ 358.262488][T11363] name failslab, interval 1, probability 0, space 0, times 0 [ 358.339536][T11363] CPU: 0 UID: 0 PID: 11363 Comm: syz.3.947 Tainted: G I syzkaller #0 PREEMPT(full) [ 358.339582][T11363] Tainted: [I]=FIRMWARE_WORKAROUND [ 358.339597][T11363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.339615][T11363] Call Trace: [ 358.339623][T11363] [ 358.339633][T11363] dump_stack_lvl+0x16c/0x1f0 [ 358.339672][T11363] should_fail_ex+0x512/0x640 [ 358.339707][T11363] ? fs_reclaim_acquire+0xae/0x150 [ 358.339745][T11363] should_failslab+0xc2/0x120 [ 358.339780][T11363] kmem_cache_alloc_noprof+0x75/0x6e0 [ 358.339808][T11363] ? __pfx_map_id_range_down+0x10/0x10 [ 358.339832][T11363] ? security_inode_alloc+0x3b/0x2b0 [ 358.339874][T11363] ? security_inode_alloc+0x3b/0x2b0 [ 358.339907][T11363] security_inode_alloc+0x3b/0x2b0 [ 358.339942][T11363] inode_init_always_gfp+0xce4/0x1030 [ 358.339975][T11363] ? __pfx_mqueue_fill_super+0x10/0x10 [ 358.340004][T11363] alloc_inode+0x86/0x240 [ 358.340037][T11363] new_inode+0x22/0x1c0 [ 358.340072][T11363] ? __pfx_mqueue_fill_super+0x10/0x10 [ 358.340101][T11363] mqueue_get_inode+0x2e/0xdd0 [ 358.340128][T11363] ? sget_fc+0x808/0xc20 [ 358.340157][T11363] ? __pfx_mqueue_fill_super+0x10/0x10 [ 358.340187][T11363] mqueue_fill_super+0x14d/0x260 [ 358.340219][T11363] get_tree_nodev+0xdd/0x190 [ 358.340248][T11363] mqueue_get_tree+0xf1/0x130 [ 358.340282][T11363] vfs_get_tree+0x8b/0x340 [ 358.340307][T11363] fc_mount_longterm+0x1a/0x270 [ 358.340348][T11363] mq_init_ns+0x426/0x620 [ 358.340389][T11363] copy_ipcs+0x2d6/0x550 [ 358.340429][T11363] create_new_namespaces+0x20a/0xa90 [ 358.340462][T11363] ? security_capable+0x7e/0x260 [ 358.340500][T11363] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 358.340541][T11363] ksys_unshare+0x45b/0xa40 [ 358.340582][T11363] ? __pfx_ksys_unshare+0x10/0x10 [ 358.340629][T11363] ? xfd_validate_state+0x61/0x180 [ 358.340666][T11363] __x64_sys_unshare+0x31/0x40 [ 358.340701][T11363] do_syscall_64+0xcd/0x4b0 [ 358.340736][T11363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.340761][T11363] RIP: 0033:0x7fcc2e98eec9 [ 358.340783][T11363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.340809][T11363] RSP: 002b:00007fcc2f86b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 358.340834][T11363] RAX: ffffffffffffffda RBX: 00007fcc2ebe6090 RCX: 00007fcc2e98eec9 [ 358.340851][T11363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 358.340866][T11363] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 358.340882][T11363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.340897][T11363] R13: 00007fcc2ebe6128 R14: 00007fcc2ebe6090 R15: 00007ffe67f7d7f8 [ 358.340934][T11363] [ 359.127879][T11353] net_ratelimit: 85 callbacks suppressed [ 359.127902][T11353] netlink: zone id is out of range [ 359.194109][T11353] netlink: zone id is out of range [ 359.637352][T11406] bond0: invalid ARP target specified [ 360.553794][T11430] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 360.680108][T11433] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 360.718695][T11429] netlink: 268 bytes leftover after parsing attributes in process `syz.0.958'. [ 360.788800][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 361.315344][T11425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.738728][T11443] futex_wake_op: syz.3.961 tries to shift op by -2048; fix this program [ 361.777471][T11443] futex_wake_op: syz.3.961 tries to shift op by -2048; fix this program [ 363.548315][T11497] could not allocate digest TFM handle [ 363.593259][T11491] kexec: Could not allocate control_code_buffer [ 363.849334][T11512] Invalid ELF header magic: != ELF [ 363.919381][T11517] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 364.924530][T11532] FAULT_INJECTION: forcing a failure. [ 364.924530][T11532] name failslab, interval 1, probability 0, space 0, times 0 [ 365.024114][T11532] CPU: 0 UID: 0 PID: 11532 Comm: syz.1.979 Tainted: G I syzkaller #0 PREEMPT(full) [ 365.024157][T11532] Tainted: [I]=FIRMWARE_WORKAROUND [ 365.024167][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 365.024182][T11532] Call Trace: [ 365.024191][T11532] [ 365.024201][T11532] dump_stack_lvl+0x16c/0x1f0 [ 365.024246][T11532] should_fail_ex+0x512/0x640 [ 365.024281][T11532] ? fs_reclaim_acquire+0xae/0x150 [ 365.024320][T11532] should_failslab+0xc2/0x120 [ 365.024355][T11532] kmem_cache_alloc_noprof+0x75/0x6e0 [ 365.024382][T11532] ? __pfx_map_id_range_down+0x10/0x10 [ 365.024408][T11532] ? security_inode_alloc+0x3b/0x2b0 [ 365.024448][T11532] ? security_inode_alloc+0x3b/0x2b0 [ 365.024476][T11532] security_inode_alloc+0x3b/0x2b0 [ 365.024512][T11532] inode_init_always_gfp+0xce4/0x1030 [ 365.024545][T11532] ? __pfx_mqueue_fill_super+0x10/0x10 [ 365.024577][T11532] alloc_inode+0x86/0x240 [ 365.024614][T11532] new_inode+0x22/0x1c0 [ 365.024651][T11532] ? __pfx_mqueue_fill_super+0x10/0x10 [ 365.024682][T11532] mqueue_get_inode+0x2e/0xdd0 [ 365.024715][T11532] ? sget_fc+0x808/0xc20 [ 365.024745][T11532] ? __pfx_mqueue_fill_super+0x10/0x10 [ 365.024777][T11532] mqueue_fill_super+0x14d/0x260 [ 365.024810][T11532] get_tree_nodev+0xdd/0x190 [ 365.024841][T11532] mqueue_get_tree+0xf1/0x130 [ 365.024873][T11532] vfs_get_tree+0x8b/0x340 [ 365.024896][T11532] fc_mount_longterm+0x1a/0x270 [ 365.024936][T11532] mq_init_ns+0x426/0x620 [ 365.024973][T11532] copy_ipcs+0x2d6/0x550 [ 365.025013][T11532] create_new_namespaces+0x20a/0xa90 [ 365.025046][T11532] ? security_capable+0x7e/0x260 [ 365.025080][T11532] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 365.025114][T11532] ksys_unshare+0x45b/0xa40 [ 365.025152][T11532] ? __pfx_ksys_unshare+0x10/0x10 [ 365.025187][T11532] ? xfd_validate_state+0x61/0x180 [ 365.025227][T11532] __x64_sys_unshare+0x31/0x40 [ 365.025261][T11532] do_syscall_64+0xcd/0x4b0 [ 365.025291][T11532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.025316][T11532] RIP: 0033:0x7fa2f118eec9 [ 365.025336][T11532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.025359][T11532] RSP: 002b:00007fa2f1f74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 365.025382][T11532] RAX: ffffffffffffffda RBX: 00007fa2f13e6090 RCX: 00007fa2f118eec9 [ 365.025398][T11532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 365.025413][T11532] RBP: 00007fa2f1211f91 R08: 0000000000000000 R09: 0000000000000000 [ 365.025428][T11532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.025442][T11532] R13: 00007fa2f13e6128 R14: 00007fa2f13e6090 R15: 00007fff2349dd58 [ 365.025476][T11532] [ 365.249940][T11525] kexec: Could not allocate control_code_buffer [ 365.255545][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.310453][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.316431][ C0] hrtimer: interrupt took 287390024 ns [ 365.374126][T11544] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 365.413098][T11544] CIFS mount error: No usable UNC path provided in device string! [ 365.413098][T11544] [ 365.423144][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.432024][T11544] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 365.637552][T11555] openvswitch: HfR: Dropping previously announced user features [ 365.682554][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 365.692514][T11555] HfR: left promiscuous mode [ 365.751003][T11561] ICMPv6: process `syz.1.986' is using deprecated sysctl (syscall) net.ipv6.neigh.vlan0.retrans_time - use net.ipv6.neigh.vlan0.retrans_time_ms instead [ 366.407045][T11578] ptrace attach of "./syz-executor exec"[5841] was attempted by ""[11578] [ 366.768939][T11586] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 366.950060][T11586] kvm: kvm [11584]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000077) [ 367.111649][T11588] FAULT_INJECTION: forcing a failure. [ 367.111649][T11588] name failslab, interval 1, probability 0, space 0, times 0 [ 367.150187][T11588] CPU: 1 UID: 0 PID: 11588 Comm: syz.3.992 Tainted: G I syzkaller #0 PREEMPT(full) [ 367.150231][T11588] Tainted: [I]=FIRMWARE_WORKAROUND [ 367.150241][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.150256][T11588] Call Trace: [ 367.150265][T11588] [ 367.150275][T11588] dump_stack_lvl+0x16c/0x1f0 [ 367.150312][T11588] should_fail_ex+0x512/0x640 [ 367.150348][T11588] ? __kmalloc_cache_noprof+0x5f/0x780 [ 367.150378][T11588] should_failslab+0xc2/0x120 [ 367.150415][T11588] __kmalloc_cache_noprof+0x72/0x780 [ 367.150443][T11588] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 367.150483][T11588] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 367.150517][T11588] kvm_uevent_notify_change.part.0+0x93/0x450 [ 367.150552][T11588] ? __pfx_kvm_vm_release+0x10/0x10 [ 367.150579][T11588] kvm_put_kvm+0xe3/0xb00 [ 367.150606][T11588] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.150635][T11588] ? _raw_spin_unlock_irq+0x2e/0x50 [ 367.150663][T11588] ? __pfx_kvm_vm_release+0x10/0x10 [ 367.150688][T11588] kvm_vm_release+0x3c/0x50 [ 367.150714][T11588] __fput+0x402/0xb70 [ 367.150756][T11588] task_work_run+0x14d/0x240 [ 367.150782][T11588] ? __pfx_task_work_run+0x10/0x10 [ 367.150810][T11588] ? __pfx___do_sys_close_range+0x10/0x10 [ 367.150850][T11588] exit_to_user_mode_loop+0xec/0x130 [ 367.150877][T11588] do_syscall_64+0x419/0x4b0 [ 367.150906][T11588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.150933][T11588] RIP: 0033:0x7fcc2e98eec9 [ 367.150955][T11588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.150977][T11588] RSP: 002b:00007fcc2f86b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 367.151000][T11588] RAX: 0000000000000000 RBX: 00007fcc2ebe6090 RCX: 00007fcc2e98eec9 [ 367.151015][T11588] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 367.151039][T11588] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 367.151066][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.151082][T11588] R13: 00007fcc2ebe6128 R14: 00007fcc2ebe6090 R15: 00007ffe67f7d7f8 [ 367.151113][T11588] [ 367.633555][T11598] netlink: 252 bytes leftover after parsing attributes in process `syz.1.994'. [ 367.651770][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 367.692287][T11598] netlink: 252 bytes leftover after parsing attributes in process `syz.1.994'. [ 368.111913][T11606] FAULT_INJECTION: forcing a failure. [ 368.111913][T11606] name failslab, interval 1, probability 0, space 0, times 0 [ 368.136985][T11595] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 368.229638][T11606] CPU: 0 UID: 0 PID: 11606 Comm: syz.3.996 Tainted: G I syzkaller #0 PREEMPT(full) [ 368.229683][T11606] Tainted: [I]=FIRMWARE_WORKAROUND [ 368.229694][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 368.229710][T11606] Call Trace: [ 368.229719][T11606] [ 368.229730][T11606] dump_stack_lvl+0x16c/0x1f0 [ 368.229776][T11606] should_fail_ex+0x512/0x640 [ 368.229812][T11606] ? fs_reclaim_acquire+0xae/0x150 [ 368.229859][T11606] should_failslab+0xc2/0x120 [ 368.229896][T11606] kmem_cache_alloc_noprof+0x75/0x6e0 [ 368.229925][T11606] ? __pfx_map_id_range_down+0x10/0x10 [ 368.229950][T11606] ? security_inode_alloc+0x3b/0x2b0 [ 368.229995][T11606] ? security_inode_alloc+0x3b/0x2b0 [ 368.230030][T11606] security_inode_alloc+0x3b/0x2b0 [ 368.230069][T11606] inode_init_always_gfp+0xce4/0x1030 [ 368.230103][T11606] ? __pfx_mqueue_fill_super+0x10/0x10 [ 368.230134][T11606] alloc_inode+0x86/0x240 [ 368.230169][T11606] new_inode+0x22/0x1c0 [ 368.230205][T11606] ? __pfx_mqueue_fill_super+0x10/0x10 [ 368.230236][T11606] mqueue_get_inode+0x2e/0xdd0 [ 368.230267][T11606] ? sget_fc+0x808/0xc20 [ 368.230296][T11606] ? __pfx_mqueue_fill_super+0x10/0x10 [ 368.230327][T11606] mqueue_fill_super+0x14d/0x260 [ 368.230360][T11606] get_tree_nodev+0xdd/0x190 [ 368.230390][T11606] mqueue_get_tree+0xf1/0x130 [ 368.230422][T11606] vfs_get_tree+0x8b/0x340 [ 368.230446][T11606] fc_mount_longterm+0x1a/0x270 [ 368.230486][T11606] mq_init_ns+0x426/0x620 [ 368.230525][T11606] copy_ipcs+0x2d6/0x550 [ 368.230561][T11606] create_new_namespaces+0x20a/0xa90 [ 368.230590][T11606] ? security_capable+0x7e/0x260 [ 368.230626][T11606] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 368.230662][T11606] ksys_unshare+0x45b/0xa40 [ 368.230697][T11606] ? __pfx_ksys_unshare+0x10/0x10 [ 368.230734][T11606] ? xfd_validate_state+0x61/0x180 [ 368.230767][T11606] __x64_sys_unshare+0x31/0x40 [ 368.230802][T11606] do_syscall_64+0xcd/0x4b0 [ 368.230843][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.230871][T11606] RIP: 0033:0x7fcc2e98eec9 [ 368.230892][T11606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.230916][T11606] RSP: 002b:00007fcc2f86b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 368.230939][T11606] RAX: ffffffffffffffda RBX: 00007fcc2ebe6090 RCX: 00007fcc2e98eec9 [ 368.230957][T11606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 368.230973][T11606] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 368.230988][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.231004][T11606] R13: 00007fcc2ebe6128 R14: 00007fcc2ebe6090 R15: 00007ffe67f7d7f8 [ 368.231040][T11606] [ 368.500432][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.542162][T11595] netlink: 342 bytes leftover after parsing attributes in process `syz.2.995'. [ 368.800598][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 368.870757][T11612] netlink: 13 bytes leftover after parsing attributes in process `syz.0.997'. [ 369.259504][T11629] overlayfs: missing 'lowerdir' [ 369.821258][ T1140] Trying to write to read-only block-device sda1 [ 369.880484][ T1140] Trying to write to read-only block-device sda [ 370.765677][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 370.795146][T11645] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 370.807535][T11645] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 370.826717][T11645] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.878189][T11645] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 370.962437][T11645] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.976214][T11645] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 371.017294][T11645] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.099053][T11645] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 371.188249][ T30] audit: type=1804 audit(4294967300.678:3): pid=11679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1008" name="/newroot/255/file0" dev="tmpfs" ino=1341 res=1 errno=0 [ 371.412916][T11684] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 371.585090][T11668] kexec: Could not allocate control_code_buffer [ 372.154751][T11704] vivid-003: ================= START STATUS ================= [ 372.154960][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 372.164396][T11704] vivid-003: Radio HW Seek Mode: Bounded [ 372.193685][T11704] vivid-003: Radio Programmable HW Seek: false [ 372.200874][T11704] vivid-003: RDS Rx I/O Mode: Block I/O [ 372.208360][T11704] vivid-003: Generate RBDS Instead of RDS: false [ 372.214997][T11704] vivid-003: RDS Reception: true [ 372.220154][T11704] vivid-003: RDS Program Type: 0 inactive [ 372.226424][T11704] vivid-003: RDS PS Name: inactive [ 372.231810][T11704] vivid-003: RDS Radio Text: inactive [ 372.241965][T11704] vivid-003: RDS Traffic Announcement: false inactive [ 372.250560][T11704] vivid-003: RDS Traffic Program: false inactive [ 372.260673][T11704] vivid-003: RDS Music: false inactive [ 372.267318][T11704] vivid-003: ================== END STATUS ================== [ 372.825280][T11735] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 372.876105][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 372.899321][T11735] kvm: kvm [11734]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000077) [ 372.975574][T11736] FAULT_INJECTION: forcing a failure. [ 372.975574][T11736] name failslab, interval 1, probability 0, space 0, times 0 [ 372.988504][T11736] CPU: 1 UID: 0 PID: 11736 Comm: syz.0.1022 Tainted: G I syzkaller #0 PREEMPT(full) [ 372.988546][T11736] Tainted: [I]=FIRMWARE_WORKAROUND [ 372.988557][T11736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.988573][T11736] Call Trace: [ 372.988582][T11736] [ 372.988593][T11736] dump_stack_lvl+0x16c/0x1f0 [ 372.988629][T11736] should_fail_ex+0x512/0x640 [ 372.988665][T11736] ? __kmalloc_cache_noprof+0x5f/0x780 [ 372.988697][T11736] should_failslab+0xc2/0x120 [ 372.988734][T11736] __kmalloc_cache_noprof+0x72/0x780 [ 372.988762][T11736] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 372.988802][T11736] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 372.988837][T11736] kvm_uevent_notify_change.part.0+0x93/0x450 [ 372.988873][T11736] ? __pfx_kvm_vm_release+0x10/0x10 [ 372.988899][T11736] kvm_put_kvm+0xe3/0xb00 [ 372.988927][T11736] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.988957][T11736] ? _raw_spin_unlock_irq+0x2e/0x50 [ 372.988988][T11736] ? __pfx_kvm_vm_release+0x10/0x10 [ 372.989015][T11736] kvm_vm_release+0x3c/0x50 [ 372.989042][T11736] __fput+0x402/0xb70 [ 372.989098][T11736] task_work_run+0x14d/0x240 [ 372.989130][T11736] ? __pfx_task_work_run+0x10/0x10 [ 372.989159][T11736] ? __pfx___do_sys_close_range+0x10/0x10 [ 372.989199][T11736] exit_to_user_mode_loop+0xec/0x130 [ 372.989226][T11736] do_syscall_64+0x419/0x4b0 [ 372.989260][T11736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.989287][T11736] RIP: 0033:0x7f73d2f8eec9 [ 372.989310][T11736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.989334][T11736] RSP: 002b:00007f73d3d40038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 372.989359][T11736] RAX: 0000000000000000 RBX: 00007f73d31e6090 RCX: 00007f73d2f8eec9 [ 372.989376][T11736] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 372.989393][T11736] RBP: 00007f73d3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.989409][T11736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.989425][T11736] R13: 00007f73d31e6128 R14: 00007f73d31e6090 R15: 00007ffef29c8158 [ 372.989461][T11736] [ 373.323462][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 373.327980][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 374.226713][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 374.235726][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 374.750119][T11740] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1023'. [ 374.954325][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 375.080651][T11766] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.087282][T11766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.093672][T11766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.106083][T11766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.285605][T11803] netlink: 35120 bytes leftover after parsing attributes in process `syz.3.1034'. [ 376.403258][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 376.515861][T11815] ptrace attach of "./syz-executor exec"[5842] was attempted by ""[11815] [ 376.846427][ T53] block nbd0: Receive control failed (result -107) [ 377.115255][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 377.115453][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 377.121406][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.271654][T11825] bridge0: port 3(gretap0) entered blocking state [ 377.293735][T11825] bridge0: port 3(gretap0) entered disabled state [ 377.355598][T11825] gretap0: entered allmulticast mode [ 377.364317][T11825] gretap0: entered promiscuous mode [ 377.417693][T11825] bridge0: port 3(gretap0) entered blocking state [ 377.424843][T11825] bridge0: port 3(gretap0) entered forwarding state [ 377.468869][T11826] vhci_hcd: invalid port number 21 [ 377.826914][ T53] block nbd8: Receive control failed (result -107) [ 378.392212][T11851] FAULT_INJECTION: forcing a failure. [ 378.392212][T11851] name failslab, interval 1, probability 0, space 0, times 0 [ 378.426043][T11851] CPU: 1 UID: 0 PID: 11851 Comm: syz.3.1043 Tainted: G I syzkaller #0 PREEMPT(full) [ 378.426087][T11851] Tainted: [I]=FIRMWARE_WORKAROUND [ 378.426098][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 378.426113][T11851] Call Trace: [ 378.426121][T11851] [ 378.426131][T11851] dump_stack_lvl+0x16c/0x1f0 [ 378.426168][T11851] should_fail_ex+0x512/0x640 [ 378.426204][T11851] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 378.426236][T11851] should_failslab+0xc2/0x120 [ 378.426270][T11851] kmem_cache_alloc_noprof+0x75/0x6e0 [ 378.426299][T11851] ? dup_fd+0x4e/0xb90 [ 378.426331][T11851] ? dup_fd+0x4e/0xb90 [ 378.426356][T11851] dup_fd+0x4e/0xb90 [ 378.426396][T11851] ksys_unshare+0x831/0xa40 [ 378.426433][T11851] ? __pfx_ksys_unshare+0x10/0x10 [ 378.426470][T11851] ? xfd_validate_state+0x61/0x180 [ 378.426502][T11851] __x64_sys_unshare+0x31/0x40 [ 378.426542][T11851] do_syscall_64+0xcd/0x4b0 [ 378.426573][T11851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.426599][T11851] RIP: 0033:0x7fcc2e98eec9 [ 378.426627][T11851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.426653][T11851] RSP: 002b:00007fcc2f88c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 378.426678][T11851] RAX: ffffffffffffffda RBX: 00007fcc2ebe5fa0 RCX: 00007fcc2e98eec9 [ 378.426696][T11851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 378.426712][T11851] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 378.426728][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.426743][T11851] R13: 00007fcc2ebe6038 R14: 00007fcc2ebe5fa0 R15: 00007ffe67f7d7f8 [ 378.426778][T11851] [ 378.799108][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.799206][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.079575][T11871] FAULT_INJECTION: forcing a failure. [ 379.079575][T11871] name failslab, interval 1, probability 0, space 0, times 0 [ 379.112535][T11863] serio: Serial port pty6 [ 379.168557][T11871] CPU: 0 UID: 0 PID: 11871 Comm: syz.3.1047 Tainted: G I syzkaller #0 PREEMPT(full) [ 379.168601][T11871] Tainted: [I]=FIRMWARE_WORKAROUND [ 379.168612][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.168627][T11871] Call Trace: [ 379.168636][T11871] [ 379.168646][T11871] dump_stack_lvl+0x16c/0x1f0 [ 379.168685][T11871] should_fail_ex+0x512/0x640 [ 379.168720][T11871] ? fs_reclaim_acquire+0xae/0x150 [ 379.168759][T11871] should_failslab+0xc2/0x120 [ 379.168802][T11871] kmem_cache_alloc_noprof+0x75/0x6e0 [ 379.168830][T11871] ? __pfx_map_id_range_down+0x10/0x10 [ 379.168857][T11871] ? security_inode_alloc+0x3b/0x2b0 [ 379.168899][T11871] ? security_inode_alloc+0x3b/0x2b0 [ 379.168934][T11871] security_inode_alloc+0x3b/0x2b0 [ 379.168971][T11871] inode_init_always_gfp+0xce4/0x1030 [ 379.169004][T11871] ? __pfx_mqueue_fill_super+0x10/0x10 [ 379.169037][T11871] alloc_inode+0x86/0x240 [ 379.169072][T11871] new_inode+0x22/0x1c0 [ 379.169108][T11871] ? __pfx_mqueue_fill_super+0x10/0x10 [ 379.169139][T11871] mqueue_get_inode+0x2e/0xdd0 [ 379.169169][T11871] ? sget_fc+0x808/0xc20 [ 379.169199][T11871] ? __pfx_mqueue_fill_super+0x10/0x10 [ 379.169229][T11871] mqueue_fill_super+0x14d/0x260 [ 379.169263][T11871] get_tree_nodev+0xdd/0x190 [ 379.169294][T11871] mqueue_get_tree+0xf1/0x130 [ 379.169326][T11871] vfs_get_tree+0x8b/0x340 [ 379.169350][T11871] fc_mount_longterm+0x1a/0x270 [ 379.169391][T11871] mq_init_ns+0x426/0x620 [ 379.169430][T11871] copy_ipcs+0x2d6/0x550 [ 379.169470][T11871] create_new_namespaces+0x20a/0xa90 [ 379.169503][T11871] ? security_capable+0x7e/0x260 [ 379.169540][T11871] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 379.169577][T11871] ksys_unshare+0x45b/0xa40 [ 379.169611][T11871] ? __pfx_ksys_unshare+0x10/0x10 [ 379.169643][T11871] ? xfd_validate_state+0x61/0x180 [ 379.169678][T11871] __x64_sys_unshare+0x31/0x40 [ 379.169711][T11871] do_syscall_64+0xcd/0x4b0 [ 379.169742][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.169764][T11871] RIP: 0033:0x7fcc2e98eec9 [ 379.169781][T11871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.169810][T11871] RSP: 002b:00007fcc2f86b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 379.169833][T11871] RAX: ffffffffffffffda RBX: 00007fcc2ebe6090 RCX: 00007fcc2e98eec9 [ 379.169848][T11871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 379.169862][T11871] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 379.169876][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.169889][T11871] R13: 00007fcc2ebe6128 R14: 00007fcc2ebe6090 R15: 00007ffe67f7d7f8 [ 379.169921][T11871] [ 379.232227][T11877] bcache: register_bcache() error : failed to open device [ 379.487963][T11877] random: crng reseeded on system resumption [ 379.662117][T11860] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1045'. [ 380.223441][T11892] can: request_module (can-proto-3) failed. [ 380.279723][T11902] FAULT_INJECTION: forcing a failure. [ 380.279723][T11902] name failslab, interval 1, probability 0, space 0, times 0 [ 380.295354][T11902] CPU: 1 UID: 0 PID: 11902 Comm: syz.0.1054 Tainted: G I syzkaller #0 PREEMPT(full) [ 380.295397][T11902] Tainted: [I]=FIRMWARE_WORKAROUND [ 380.295408][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.295420][T11902] Call Trace: [ 380.295429][T11902] [ 380.295438][T11902] dump_stack_lvl+0x16c/0x1f0 [ 380.295476][T11902] should_fail_ex+0x512/0x640 [ 380.295510][T11902] ? fs_reclaim_acquire+0xae/0x150 [ 380.295545][T11902] should_failslab+0xc2/0x120 [ 380.295579][T11902] kmem_cache_alloc_noprof+0x75/0x6e0 [ 380.295604][T11902] ? __pfx_map_id_range_down+0x10/0x10 [ 380.295627][T11902] ? security_inode_alloc+0x3b/0x2b0 [ 380.295673][T11902] ? security_inode_alloc+0x3b/0x2b0 [ 380.295705][T11902] security_inode_alloc+0x3b/0x2b0 [ 380.295737][T11902] inode_init_always_gfp+0xce4/0x1030 [ 380.295766][T11902] ? __pfx_mqueue_fill_super+0x10/0x10 [ 380.295794][T11902] alloc_inode+0x86/0x240 [ 380.295822][T11902] new_inode+0x22/0x1c0 [ 380.295853][T11902] ? __pfx_mqueue_fill_super+0x10/0x10 [ 380.295882][T11902] mqueue_get_inode+0x2e/0xdd0 [ 380.295910][T11902] ? sget_fc+0x808/0xc20 [ 380.295940][T11902] ? __pfx_mqueue_fill_super+0x10/0x10 [ 380.295970][T11902] mqueue_fill_super+0x14d/0x260 [ 380.296001][T11902] get_tree_nodev+0xdd/0x190 [ 380.296028][T11902] mqueue_get_tree+0xf1/0x130 [ 380.296058][T11902] vfs_get_tree+0x8b/0x340 [ 380.296081][T11902] fc_mount_longterm+0x1a/0x270 [ 380.296120][T11902] mq_init_ns+0x426/0x620 [ 380.296158][T11902] copy_ipcs+0x2d6/0x550 [ 380.296196][T11902] create_new_namespaces+0x20a/0xa90 [ 380.296228][T11902] ? security_capable+0x7e/0x260 [ 380.296265][T11902] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 380.296303][T11902] ksys_unshare+0x45b/0xa40 [ 380.296340][T11902] ? __pfx_ksys_unshare+0x10/0x10 [ 380.296378][T11902] ? xfd_validate_state+0x61/0x180 [ 380.296412][T11902] __x64_sys_unshare+0x31/0x40 [ 380.296447][T11902] do_syscall_64+0xcd/0x4b0 [ 380.296480][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.296502][T11902] RIP: 0033:0x7f73d2f8eec9 [ 380.296528][T11902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.296549][T11902] RSP: 002b:00007f73d3d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 380.296573][T11902] RAX: ffffffffffffffda RBX: 00007f73d31e6090 RCX: 00007f73d2f8eec9 [ 380.296590][T11902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 380.296605][T11902] RBP: 00007f73d3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 380.296619][T11902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.296633][T11902] R13: 00007f73d31e6128 R14: 00007f73d31e6090 R15: 00007ffef29c8158 [ 380.296675][T11902] [ 380.586547][T11890] FAULT_INJECTION: forcing a failure. [ 380.586547][T11890] name fail_futex, interval 1, probability 0, space 0, times 0 [ 380.599683][T11890] CPU: 1 UID: 0 PID: 11890 Comm: syz.2.1051 Tainted: G I syzkaller #0 PREEMPT(full) [ 380.599715][T11890] Tainted: [I]=FIRMWARE_WORKAROUND [ 380.599720][T11890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.599728][T11890] Call Trace: [ 380.599734][T11890] [ 380.599739][T11890] dump_stack_lvl+0x16c/0x1f0 [ 380.599762][T11890] should_fail_ex+0x512/0x640 [ 380.599784][T11890] get_futex_key+0x293/0x1560 [ 380.599807][T11890] ? __pfx_get_futex_key+0x10/0x10 [ 380.599831][T11890] ? __mutex_trylock_common+0xe9/0x250 [ 380.599874][T11890] futex_wake+0xea/0x530 [ 380.599897][T11890] ? __pfx_futex_wake+0x10/0x10 [ 380.599929][T11890] do_futex+0x1e3/0x350 [ 380.599960][T11890] ? __pfx_do_futex+0x10/0x10 [ 380.599985][T11890] ? __might_fault+0xe3/0x190 [ 380.600018][T11890] mm_release+0x24e/0x300 [ 380.600046][T11890] do_exit+0x68e/0x2bf0 [ 380.600071][T11890] ? __pfx_do_exit+0x10/0x10 [ 380.600091][T11890] ? do_raw_spin_lock+0x12c/0x2b0 [ 380.600115][T11890] ? find_held_lock+0x2b/0x80 [ 380.600148][T11890] do_group_exit+0xd3/0x2a0 [ 380.600173][T11890] get_signal+0x2671/0x26d0 [ 380.600218][T11890] ? __pfx_get_signal+0x10/0x10 [ 380.600248][T11890] ? do_futex+0x122/0x350 [ 380.600281][T11890] ? __pfx_do_futex+0x10/0x10 [ 380.600318][T11890] arch_do_signal_or_restart+0x8f/0x790 [ 380.600353][T11890] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 380.600394][T11890] ? xfd_validate_state+0x61/0x180 [ 380.600415][T11890] ? __pfx_ksys_write+0x10/0x10 [ 380.600449][T11890] exit_to_user_mode_loop+0x85/0x130 [ 380.600475][T11890] do_syscall_64+0x419/0x4b0 [ 380.600507][T11890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.600531][T11890] RIP: 0033:0x7fd107d8eec9 [ 380.600550][T11890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.600572][T11890] RSP: 002b:00007fd108bb30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 380.600595][T11890] RAX: fffffffffffffe00 RBX: 00007fd107fe5fa8 RCX: 00007fd107d8eec9 [ 380.600611][T11890] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd107fe5fa8 [ 380.600626][T11890] RBP: 00007fd107fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 380.600647][T11890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.600661][T11890] R13: 00007fd107fe6038 R14: 00007ffdd59ab0a0 R15: 00007ffdd59ab188 [ 380.600694][T11890] [ 381.936534][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 383.202647][T11938] kexec: Could not allocate control_code_buffer [ 383.690800][T11956] ALSA: mixer_oss: invalid OSS volume '' [ 384.110211][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 384.189933][T11982] IPVS: length: 7562853 != 24 [ 384.391551][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1077'. [ 384.459241][T11991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.497808][T11991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.521113][T11991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.536577][T11991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.996034][ T53] block nbd11: Receive control failed (result -107) [ 385.122799][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 386.072685][T12004] kexec: Could not allocate control_code_buffer [ 386.438444][T12029] random: crng reseeded on system resumption [ 387.097612][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 388.074693][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 388.589004][T12075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1092'. [ 388.699763][ T53] block nbd12: Receive control failed (result -107) [ 389.022227][T12083] FAULT_INJECTION: forcing a failure. [ 389.022227][T12083] name failslab, interval 1, probability 0, space 0, times 0 [ 389.105167][T12083] CPU: 0 UID: 0 PID: 12083 Comm: syz.3.1094 Tainted: G I syzkaller #0 PREEMPT(full) [ 389.105194][T12083] Tainted: [I]=FIRMWARE_WORKAROUND [ 389.105200][T12083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 389.105208][T12083] Call Trace: [ 389.105214][T12083] [ 389.105220][T12083] dump_stack_lvl+0x16c/0x1f0 [ 389.105243][T12083] should_fail_ex+0x512/0x640 [ 389.105263][T12083] ? fs_reclaim_acquire+0xae/0x150 [ 389.105286][T12083] should_failslab+0xc2/0x120 [ 389.105305][T12083] kmem_cache_alloc_noprof+0x75/0x6e0 [ 389.105321][T12083] ? __pfx_map_id_range_down+0x10/0x10 [ 389.105336][T12083] ? security_inode_alloc+0x3b/0x2b0 [ 389.105359][T12083] ? security_inode_alloc+0x3b/0x2b0 [ 389.105378][T12083] security_inode_alloc+0x3b/0x2b0 [ 389.105398][T12083] inode_init_always_gfp+0xce4/0x1030 [ 389.105416][T12083] ? __pfx_mqueue_fill_super+0x10/0x10 [ 389.105434][T12083] alloc_inode+0x86/0x240 [ 389.105453][T12083] new_inode+0x22/0x1c0 [ 389.105473][T12083] ? __pfx_mqueue_fill_super+0x10/0x10 [ 389.105490][T12083] mqueue_get_inode+0x2e/0xdd0 [ 389.105516][T12083] ? sget_fc+0x808/0xc20 [ 389.105545][T12083] ? __pfx_mqueue_fill_super+0x10/0x10 [ 389.105574][T12083] mqueue_fill_super+0x14d/0x260 [ 389.105604][T12083] get_tree_nodev+0xdd/0x190 [ 389.105630][T12083] mqueue_get_tree+0xf1/0x130 [ 389.105648][T12083] vfs_get_tree+0x8b/0x340 [ 389.105661][T12083] fc_mount_longterm+0x1a/0x270 [ 389.105683][T12083] mq_init_ns+0x426/0x620 [ 389.105705][T12083] copy_ipcs+0x2d6/0x550 [ 389.105727][T12083] create_new_namespaces+0x20a/0xa90 [ 389.105745][T12083] ? security_capable+0x7e/0x260 [ 389.105766][T12083] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 389.105793][T12083] ksys_unshare+0x45b/0xa40 [ 389.105816][T12083] ? __pfx_ksys_unshare+0x10/0x10 [ 389.105837][T12083] ? xfd_validate_state+0x61/0x180 [ 389.105857][T12083] __x64_sys_unshare+0x31/0x40 [ 389.105876][T12083] do_syscall_64+0xcd/0x4b0 [ 389.105895][T12083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.105909][T12083] RIP: 0033:0x7fcc2e98eec9 [ 389.105921][T12083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.105935][T12083] RSP: 002b:00007fcc2f86b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 389.105948][T12083] RAX: ffffffffffffffda RBX: 00007fcc2ebe6090 RCX: 00007fcc2e98eec9 [ 389.105958][T12083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 389.105966][T12083] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 389.105975][T12083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.105983][T12083] R13: 00007fcc2ebe6128 R14: 00007fcc2ebe6090 R15: 00007ffe67f7d7f8 [ 389.106002][T12083] [ 389.410690][T12073] kexec: Could not allocate control_code_buffer [ 389.653810][T12088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1095'. [ 389.696469][T12088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.712974][T12088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.722085][T12088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.733850][T12088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.134375][ T53] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 391.880801][T12150] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 391.917528][T12152] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1110'. [ 391.992041][T12154] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 392.084148][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 393.203566][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 393.248826][T12157] random: crng reseeded on system resumption [ 393.538150][T12196] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1121'. [ 393.561332][T12196] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1121'. [ 394.061765][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1124'. [ 395.144297][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 395.279953][T12209] kexec: Could not allocate control_code_buffer [ 396.127307][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 396.929472][T12266] ptp ptp0: delete virtual clock ptp3 [ 397.097640][T12266] ptp ptp0: delete virtual clock ptp2 [ 397.241531][T12266] ptp ptp0: delete virtual clock ptp1 [ 397.412574][T12266] ptp ptp0: only physical clock in use now [ 398.156088][T12295] can: request_module (can-proto-3) failed. [ 399.514854][T12347] Console: switching to colour VGA+ 80x25 [ 400.522727][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1146'. [ 400.706115][T12362] vhci_hcd: vhci_device speed not set [ 400.778569][T12364] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 401.221258][T12378] FAULT_INJECTION: forcing a failure. [ 401.221258][T12378] name failslab, interval 1, probability 0, space 0, times 0 [ 401.261164][T12378] CPU: 0 UID: 0 PID: 12378 Comm: syz.2.1151 Tainted: G I syzkaller #0 PREEMPT(full) [ 401.261205][T12378] Tainted: [I]=FIRMWARE_WORKAROUND [ 401.261214][T12378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.261228][T12378] Call Trace: [ 401.261236][T12378] [ 401.261245][T12378] dump_stack_lvl+0x16c/0x1f0 [ 401.261291][T12378] should_fail_ex+0x512/0x640 [ 401.261326][T12378] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 401.261357][T12378] should_failslab+0xc2/0x120 [ 401.261394][T12378] kmem_cache_alloc_noprof+0x75/0x6e0 [ 401.261418][T12378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 401.261443][T12378] ? mas_preallocate+0xe6a/0x11f0 [ 401.261481][T12378] ? mas_preallocate+0xe6a/0x11f0 [ 401.261511][T12378] mas_preallocate+0xe6a/0x11f0 [ 401.261539][T12378] ? __pfx_mas_preallocate+0x10/0x10 [ 401.261564][T12378] ? __pfx_mt_find+0x10/0x10 [ 401.261584][T12378] vma_link+0x12e/0x6a0 [ 401.261601][T12378] ? __pfx_vma_link+0x10/0x10 [ 401.261626][T12378] insert_vm_struct+0xf4/0x2d0 [ 401.261644][T12378] create_init_stack_vma+0x2da/0x700 [ 401.261662][T12378] alloc_bprm+0x420/0x710 [ 401.261680][T12378] do_execveat_common.isra.0+0x1ce/0x610 [ 401.261699][T12378] __x64_sys_execve+0x8e/0xb0 [ 401.261715][T12378] do_syscall_64+0xcd/0x4b0 [ 401.261734][T12378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.261753][T12378] RIP: 0033:0x7fd107d8eec9 [ 401.261766][T12378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.261780][T12378] RSP: 002b:00007fd108bb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 401.261794][T12378] RAX: ffffffffffffffda RBX: 00007fd107fe5fa0 RCX: 00007fd107d8eec9 [ 401.261804][T12378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 401.261813][T12378] RBP: 00007fd107e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 401.261821][T12378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.261830][T12378] R13: 00007fd107fe6038 R14: 00007fd107fe5fa0 R15: 00007ffdd59ab188 [ 401.261849][T12378] [ 401.616770][T12385] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 401.641711][T12385] kvm: kvm [12384]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000077) [ 401.660919][T12360] kexec: Could not allocate control_code_buffer [ 401.723949][T12386] FAULT_INJECTION: forcing a failure. [ 401.723949][T12386] name failslab, interval 1, probability 0, space 0, times 0 [ 401.740775][T12386] CPU: 0 UID: 0 PID: 12386 Comm: syz.2.1154 Tainted: G I syzkaller #0 PREEMPT(full) [ 401.740821][T12386] Tainted: [I]=FIRMWARE_WORKAROUND [ 401.740830][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.740845][T12386] Call Trace: [ 401.740854][T12386] [ 401.740863][T12386] dump_stack_lvl+0x16c/0x1f0 [ 401.740900][T12386] should_fail_ex+0x512/0x640 [ 401.740936][T12386] ? __kmalloc_cache_noprof+0x5f/0x780 [ 401.740965][T12386] should_failslab+0xc2/0x120 [ 401.740999][T12386] __kmalloc_cache_noprof+0x72/0x780 [ 401.741026][T12386] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 401.741066][T12386] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 401.741098][T12386] kvm_uevent_notify_change.part.0+0x93/0x450 [ 401.741132][T12386] ? __pfx_kvm_vm_release+0x10/0x10 [ 401.741156][T12386] kvm_put_kvm+0xe3/0xb00 [ 401.741183][T12386] ? lockdep_hardirqs_on+0x7c/0x110 [ 401.741222][T12386] ? _raw_spin_unlock_irq+0x2e/0x50 [ 401.741251][T12386] ? __pfx_kvm_vm_release+0x10/0x10 [ 401.741277][T12386] kvm_vm_release+0x3c/0x50 [ 401.741302][T12386] __fput+0x402/0xb70 [ 401.741344][T12386] task_work_run+0x14d/0x240 [ 401.741372][T12386] ? __pfx_task_work_run+0x10/0x10 [ 401.741400][T12386] ? __pfx___do_sys_close_range+0x10/0x10 [ 401.741437][T12386] exit_to_user_mode_loop+0xec/0x130 [ 401.741464][T12386] do_syscall_64+0x419/0x4b0 [ 401.741500][T12386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.741527][T12386] RIP: 0033:0x7fd107d8eec9 [ 401.741548][T12386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.741572][T12386] RSP: 002b:00007fd108b92038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 401.741598][T12386] RAX: 0000000000000000 RBX: 00007fd107fe6090 RCX: 00007fd107d8eec9 [ 401.741615][T12386] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 401.741631][T12386] RBP: 00007fd107e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 401.741646][T12386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.741661][T12386] R13: 00007fd107fe6128 R14: 00007fd107fe6090 R15: 00007ffdd59ab188 [ 401.741698][T12386] [ 402.004152][ T53] block nbd13: Receive control failed (result -107) [ 402.291096][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 402.303899][T12401] snd_virmidi snd_virmidi.0: control 61678:131081:32767:yªƒ>oÆ[k<÷:1 is already present [ 403.750211][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1168'. [ 403.792754][T12437] nbd: must specify a size in bytes for the device [ 404.356502][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 404.608343][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 404.885563][T12453] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 405.506919][ T53] block nbd14: Receive control failed (result -107) [ 407.137504][T12516] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 407.193887][T12516] kvm: kvm [12515]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000077) [ 407.303599][T12521] FAULT_INJECTION: forcing a failure. [ 407.303599][T12521] name failslab, interval 1, probability 0, space 0, times 0 [ 407.349656][T12521] CPU: 0 UID: 0 PID: 12521 Comm: syz.3.1184 Tainted: G I syzkaller #0 PREEMPT(full) [ 407.349700][T12521] Tainted: [I]=FIRMWARE_WORKAROUND [ 407.349712][T12521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.349730][T12521] Call Trace: [ 407.349737][T12521] [ 407.349749][T12521] dump_stack_lvl+0x16c/0x1f0 [ 407.349786][T12521] should_fail_ex+0x512/0x640 [ 407.349821][T12521] ? __kmalloc_cache_noprof+0x5f/0x780 [ 407.349852][T12521] should_failslab+0xc2/0x120 [ 407.349889][T12521] __kmalloc_cache_noprof+0x72/0x780 [ 407.349916][T12521] ? kvm_uevent_notify_change.part.0+0x2b2/0x450 [ 407.349968][T12521] ? kvm_uevent_notify_change.part.0+0x2b2/0x450 [ 407.350003][T12521] kvm_uevent_notify_change.part.0+0x2b2/0x450 [ 407.350040][T12521] ? __pfx_kvm_vm_release+0x10/0x10 [ 407.350067][T12521] kvm_put_kvm+0xe3/0xb00 [ 407.350094][T12521] ? lockdep_hardirqs_on+0x7c/0x110 [ 407.350122][T12521] ? _raw_spin_unlock_irq+0x2e/0x50 [ 407.350152][T12521] ? __pfx_kvm_vm_release+0x10/0x10 [ 407.350180][T12521] kvm_vm_release+0x3c/0x50 [ 407.350206][T12521] __fput+0x402/0xb70 [ 407.350249][T12521] task_work_run+0x14d/0x240 [ 407.350278][T12521] ? __pfx_task_work_run+0x10/0x10 [ 407.350306][T12521] ? __pfx___do_sys_close_range+0x10/0x10 [ 407.350343][T12521] exit_to_user_mode_loop+0xec/0x130 [ 407.350369][T12521] do_syscall_64+0x419/0x4b0 [ 407.350397][T12521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.350423][T12521] RIP: 0033:0x7fcc2e98eec9 [ 407.350442][T12521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.350462][T12521] RSP: 002b:00007fcc2f86b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 407.350485][T12521] RAX: 0000000000000000 RBX: 00007fcc2ebe6090 RCX: 00007fcc2e98eec9 [ 407.350501][T12521] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 407.350514][T12521] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 407.350529][T12521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.350542][T12521] R13: 00007fcc2ebe6128 R14: 00007fcc2ebe6090 R15: 00007ffe67f7d7f8 [ 407.350575][T12521] [ 407.683666][T12526] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 407.696805][T12526] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 408.530369][T12552] FAULT_INJECTION: forcing a failure. [ 408.530369][T12552] name failslab, interval 1, probability 0, space 0, times 0 [ 408.562843][T12552] CPU: 0 UID: 0 PID: 12552 Comm: syz.3.1191 Tainted: G I syzkaller #0 PREEMPT(full) [ 408.562886][T12552] Tainted: [I]=FIRMWARE_WORKAROUND [ 408.562896][T12552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.562910][T12552] Call Trace: [ 408.562919][T12552] [ 408.562928][T12552] dump_stack_lvl+0x16c/0x1f0 [ 408.562967][T12552] should_fail_ex+0x512/0x640 [ 408.563000][T12552] ? fs_reclaim_acquire+0xae/0x150 [ 408.563039][T12552] should_failslab+0xc2/0x120 [ 408.563074][T12552] kmem_cache_alloc_noprof+0x75/0x6e0 [ 408.563101][T12552] ? __pfx_map_id_range_down+0x10/0x10 [ 408.563126][T12552] ? security_inode_alloc+0x3b/0x2b0 [ 408.563170][T12552] ? security_inode_alloc+0x3b/0x2b0 [ 408.563206][T12552] security_inode_alloc+0x3b/0x2b0 [ 408.563244][T12552] inode_init_always_gfp+0xce4/0x1030 [ 408.563277][T12552] ? __pfx_mqueue_fill_super+0x10/0x10 [ 408.563308][T12552] alloc_inode+0x86/0x240 [ 408.563343][T12552] new_inode+0x22/0x1c0 [ 408.563380][T12552] ? __pfx_mqueue_fill_super+0x10/0x10 [ 408.563410][T12552] mqueue_get_inode+0x2e/0xdd0 [ 408.563440][T12552] ? sget_fc+0x808/0xc20 [ 408.563470][T12552] ? __pfx_mqueue_fill_super+0x10/0x10 [ 408.563501][T12552] mqueue_fill_super+0x14d/0x260 [ 408.563534][T12552] get_tree_nodev+0xdd/0x190 [ 408.563565][T12552] mqueue_get_tree+0xf1/0x130 [ 408.563598][T12552] vfs_get_tree+0x8b/0x340 [ 408.563631][T12552] fc_mount_longterm+0x1a/0x270 [ 408.563673][T12552] mq_init_ns+0x426/0x620 [ 408.563714][T12552] copy_ipcs+0x2d6/0x550 [ 408.563755][T12552] create_new_namespaces+0x20a/0xa90 [ 408.563788][T12552] ? security_capable+0x7e/0x260 [ 408.563827][T12552] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 408.563863][T12552] ksys_unshare+0x45b/0xa40 [ 408.563898][T12552] ? __pfx_ksys_unshare+0x10/0x10 [ 408.563932][T12552] ? xfd_validate_state+0x61/0x180 [ 408.563965][T12552] __x64_sys_unshare+0x31/0x40 [ 408.563997][T12552] do_syscall_64+0xcd/0x4b0 [ 408.564029][T12552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.564055][T12552] RIP: 0033:0x7fcc2e98eec9 [ 408.564075][T12552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.564099][T12552] RSP: 002b:00007fcc2f86b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 408.564123][T12552] RAX: ffffffffffffffda RBX: 00007fcc2ebe6090 RCX: 00007fcc2e98eec9 [ 408.564140][T12552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 408.564154][T12552] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.564169][T12552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.564184][T12552] R13: 00007fcc2ebe6128 R14: 00007fcc2ebe6090 R15: 00007ffe67f7d7f8 [ 408.564219][T12552] [ 408.647670][T12554] ICMPv6: process `syz.2.1193' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 408.952863][T12554] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 409.278899][T12569] could not allocate digest TFM handle [ 409.313061][ T30] audit: type=1804 audit(4294967298.920:4): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1194" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 409.573958][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 409.929295][T12597] FAULT_INJECTION: forcing a failure. [ 409.929295][T12597] name failslab, interval 1, probability 0, space 0, times 0 [ 409.943389][T12597] CPU: 1 UID: 0 PID: 12597 Comm: syz.2.1202 Tainted: G I syzkaller #0 PREEMPT(full) [ 409.943435][T12597] Tainted: [I]=FIRMWARE_WORKAROUND [ 409.943444][T12597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.943457][T12597] Call Trace: [ 409.943465][T12597] [ 409.943474][T12597] dump_stack_lvl+0x16c/0x1f0 [ 409.943508][T12597] should_fail_ex+0x512/0x640 [ 409.943538][T12597] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 409.943567][T12597] should_failslab+0xc2/0x120 [ 409.943600][T12597] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 409.943628][T12597] ? __d_alloc+0x32/0xae0 [ 409.943660][T12597] ? __pfx_mqueue_fill_super+0x10/0x10 [ 409.943695][T12597] ? __d_alloc+0x32/0xae0 [ 409.943720][T12597] __d_alloc+0x32/0xae0 [ 409.943742][T12597] ? mqueue_get_inode+0x285/0xdd0 [ 409.943769][T12597] ? __pfx_mqueue_fill_super+0x10/0x10 [ 409.943794][T12597] d_make_root+0x3e/0x90 [ 409.943819][T12597] mqueue_fill_super+0x175/0x260 [ 409.943846][T12597] get_tree_nodev+0xdd/0x190 [ 409.943873][T12597] mqueue_get_tree+0xf1/0x130 [ 409.943900][T12597] vfs_get_tree+0x8b/0x340 [ 409.943919][T12597] fc_mount_longterm+0x1a/0x270 [ 409.943955][T12597] mq_init_ns+0x426/0x620 [ 409.943989][T12597] copy_ipcs+0x2d6/0x550 [ 409.944034][T12597] create_new_namespaces+0x20a/0xa90 [ 409.944064][T12597] ? security_capable+0x7e/0x260 [ 409.944099][T12597] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 409.944130][T12597] ksys_unshare+0x45b/0xa40 [ 409.944172][T12597] ? __pfx_ksys_unshare+0x10/0x10 [ 409.944213][T12597] ? xfd_validate_state+0x61/0x180 [ 409.944247][T12597] __x64_sys_unshare+0x31/0x40 [ 409.944285][T12597] do_syscall_64+0xcd/0x4b0 [ 409.944317][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.944341][T12597] RIP: 0033:0x7fd107d8eec9 [ 409.944360][T12597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.944413][T12597] RSP: 002b:00007fd108bb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 409.944447][T12597] RAX: ffffffffffffffda RBX: 00007fd107fe5fa0 RCX: 00007fd107d8eec9 [ 409.944464][T12597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 409.944480][T12597] RBP: 00007fd107e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 409.944497][T12597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.944515][T12597] R13: 00007fd107fe6038 R14: 00007fd107fe5fa0 R15: 00007ffdd59ab188 [ 409.944552][T12597] [ 410.498381][T12603] FAULT_INJECTION: forcing a failure. [ 410.498381][T12603] name failslab, interval 1, probability 0, space 0, times 0 [ 410.530717][T12603] CPU: 1 UID: 0 PID: 12603 Comm: syz.2.1204 Tainted: G I syzkaller #0 PREEMPT(full) [ 410.530758][T12603] Tainted: [I]=FIRMWARE_WORKAROUND [ 410.530768][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.530783][T12603] Call Trace: [ 410.530791][T12603] [ 410.530801][T12603] dump_stack_lvl+0x16c/0x1f0 [ 410.530838][T12603] should_fail_ex+0x512/0x640 [ 410.530872][T12603] ? fs_reclaim_acquire+0xae/0x150 [ 410.530909][T12603] should_failslab+0xc2/0x120 [ 410.530944][T12603] kmem_cache_alloc_noprof+0x75/0x6e0 [ 410.530971][T12603] ? __pfx_map_id_range_down+0x10/0x10 [ 410.530996][T12603] ? security_inode_alloc+0x3b/0x2b0 [ 410.531039][T12603] ? security_inode_alloc+0x3b/0x2b0 [ 410.531073][T12603] security_inode_alloc+0x3b/0x2b0 [ 410.531110][T12603] inode_init_always_gfp+0xce4/0x1030 [ 410.531141][T12603] ? __pfx_mqueue_fill_super+0x10/0x10 [ 410.531169][T12603] alloc_inode+0x86/0x240 [ 410.531203][T12603] new_inode+0x22/0x1c0 [ 410.531237][T12603] ? __pfx_mqueue_fill_super+0x10/0x10 [ 410.531268][T12603] mqueue_get_inode+0x2e/0xdd0 [ 410.531298][T12603] ? sget_fc+0x808/0xc20 [ 410.531325][T12603] ? __pfx_mqueue_fill_super+0x10/0x10 [ 410.531358][T12603] mqueue_fill_super+0x14d/0x260 [ 410.531392][T12603] get_tree_nodev+0xdd/0x190 [ 410.531421][T12603] mqueue_get_tree+0xf1/0x130 [ 410.531452][T12603] vfs_get_tree+0x8b/0x340 [ 410.531475][T12603] fc_mount_longterm+0x1a/0x270 [ 410.531514][T12603] mq_init_ns+0x426/0x620 [ 410.531554][T12603] copy_ipcs+0x2d6/0x550 [ 410.531594][T12603] create_new_namespaces+0x20a/0xa90 [ 410.531627][T12603] ? security_capable+0x7e/0x260 [ 410.531671][T12603] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 410.531709][T12603] ksys_unshare+0x45b/0xa40 [ 410.531745][T12603] ? __pfx_ksys_unshare+0x10/0x10 [ 410.531783][T12603] ? xfd_validate_state+0x61/0x180 [ 410.531818][T12603] __x64_sys_unshare+0x31/0x40 [ 410.531853][T12603] do_syscall_64+0xcd/0x4b0 [ 410.531888][T12603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.531914][T12603] RIP: 0033:0x7fd107d8eec9 [ 410.531935][T12603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.531959][T12603] RSP: 002b:00007fd108b92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 410.531984][T12603] RAX: ffffffffffffffda RBX: 00007fd107fe6090 RCX: 00007fd107d8eec9 [ 410.532002][T12603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 410.532018][T12603] RBP: 00007fd107e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 410.532034][T12603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.532049][T12603] R13: 00007fd107fe6128 R14: 00007fd107fe6090 R15: 00007ffdd59ab188 [ 410.532085][T12603] [ 410.861439][ T53] block nbd15: Receive control failed (result -107) [ 411.061085][T12585] random: crng reseeded on system resumption [ 412.194520][T12633] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 412.311658][T12633] kvm: kvm [12632]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000077) [ 412.418655][T12636] FAULT_INJECTION: forcing a failure. [ 412.418655][T12636] name failslab, interval 1, probability 0, space 0, times 0 [ 412.433698][T12636] CPU: 0 UID: 0 PID: 12636 Comm: syz.2.1213 Tainted: G I syzkaller #0 PREEMPT(full) [ 412.433742][T12636] Tainted: [I]=FIRMWARE_WORKAROUND [ 412.433752][T12636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 412.433768][T12636] Call Trace: [ 412.433777][T12636] [ 412.433787][T12636] dump_stack_lvl+0x16c/0x1f0 [ 412.433829][T12636] should_fail_ex+0x512/0x640 [ 412.433863][T12636] ? __kmalloc_cache_noprof+0x5f/0x780 [ 412.433905][T12636] should_failslab+0xc2/0x120 [ 412.433938][T12636] __kmalloc_cache_noprof+0x72/0x780 [ 412.433963][T12636] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 412.434004][T12636] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 412.434057][T12636] kvm_uevent_notify_change.part.0+0x93/0x450 [ 412.434096][T12636] ? __pfx_kvm_vm_release+0x10/0x10 [ 412.434124][T12636] kvm_put_kvm+0xe3/0xb00 [ 412.434152][T12636] ? lockdep_hardirqs_on+0x7c/0x110 [ 412.434182][T12636] ? _raw_spin_unlock_irq+0x2e/0x50 [ 412.434211][T12636] ? __pfx_kvm_vm_release+0x10/0x10 [ 412.434238][T12636] kvm_vm_release+0x3c/0x50 [ 412.434265][T12636] __fput+0x402/0xb70 [ 412.434309][T12636] task_work_run+0x14d/0x240 [ 412.434340][T12636] ? __pfx_task_work_run+0x10/0x10 [ 412.434368][T12636] ? __pfx___do_sys_close_range+0x10/0x10 [ 412.434407][T12636] exit_to_user_mode_loop+0xec/0x130 [ 412.434436][T12636] do_syscall_64+0x419/0x4b0 [ 412.434479][T12636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.434507][T12636] RIP: 0033:0x7fd107d8eec9 [ 412.434529][T12636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.434553][T12636] RSP: 002b:00007fd108b92038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 412.434578][T12636] RAX: 0000000000000000 RBX: 00007fd107fe6090 RCX: 00007fd107d8eec9 [ 412.434594][T12636] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 412.434611][T12636] RBP: 00007fd107e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 412.434626][T12636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.434640][T12636] R13: 00007fd107fe6128 R14: 00007fd107fe6090 R15: 00007ffdd59ab188 [ 412.434672][T12636] [ 413.256725][ T53] block nbd16: Receive control failed (result -107) [ 413.357180][T12641] FAULT_INJECTION: forcing a failure. [ 413.357180][T12641] name failslab, interval 1, probability 0, space 0, times 0 [ 413.406984][T12641] CPU: 1 UID: 0 PID: 12641 Comm: syz.3.1215 Tainted: G I syzkaller #0 PREEMPT(full) [ 413.407028][T12641] Tainted: [I]=FIRMWARE_WORKAROUND [ 413.407038][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.407054][T12641] Call Trace: [ 413.407063][T12641] [ 413.407074][T12641] dump_stack_lvl+0x16c/0x1f0 [ 413.407117][T12641] should_fail_ex+0x512/0x640 [ 413.407153][T12641] ? fs_reclaim_acquire+0xae/0x150 [ 413.407193][T12641] should_failslab+0xc2/0x120 [ 413.407228][T12641] kmem_cache_alloc_noprof+0x75/0x6e0 [ 413.407255][T12641] ? __pfx_map_id_range_down+0x10/0x10 [ 413.407281][T12641] ? security_inode_alloc+0x3b/0x2b0 [ 413.407325][T12641] ? security_inode_alloc+0x3b/0x2b0 [ 413.407360][T12641] security_inode_alloc+0x3b/0x2b0 [ 413.407398][T12641] inode_init_always_gfp+0xce4/0x1030 [ 413.407431][T12641] ? __pfx_mqueue_fill_super+0x10/0x10 [ 413.407463][T12641] alloc_inode+0x86/0x240 [ 413.407499][T12641] new_inode+0x22/0x1c0 [ 413.407536][T12641] ? __pfx_mqueue_fill_super+0x10/0x10 [ 413.407567][T12641] mqueue_get_inode+0x2e/0xdd0 [ 413.407597][T12641] ? sget_fc+0x808/0xc20 [ 413.407628][T12641] ? __pfx_mqueue_fill_super+0x10/0x10 [ 413.407658][T12641] mqueue_fill_super+0x14d/0x260 [ 413.407692][T12641] get_tree_nodev+0xdd/0x190 [ 413.407723][T12641] mqueue_get_tree+0xf1/0x130 [ 413.407756][T12641] vfs_get_tree+0x8b/0x340 [ 413.407780][T12641] fc_mount_longterm+0x1a/0x270 [ 413.407820][T12641] mq_init_ns+0x426/0x620 [ 413.407861][T12641] copy_ipcs+0x2d6/0x550 [ 413.407901][T12641] create_new_namespaces+0x20a/0xa90 [ 413.407935][T12641] ? security_capable+0x7e/0x260 [ 413.407974][T12641] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 413.408011][T12641] ksys_unshare+0x45b/0xa40 [ 413.408049][T12641] ? __pfx_ksys_unshare+0x10/0x10 [ 413.408085][T12641] ? xfd_validate_state+0x61/0x180 [ 413.408129][T12641] __x64_sys_unshare+0x31/0x40 [ 413.408167][T12641] do_syscall_64+0xcd/0x4b0 [ 413.408204][T12641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.408229][T12641] RIP: 0033:0x7fcc2e98eec9 [ 413.408250][T12641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.408275][T12641] RSP: 002b:00007fcc2f88c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 413.408299][T12641] RAX: ffffffffffffffda RBX: 00007fcc2ebe5fa0 RCX: 00007fcc2e98eec9 [ 413.408317][T12641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 413.408333][T12641] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 413.408349][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.408364][T12641] R13: 00007fcc2ebe6038 R14: 00007fcc2ebe5fa0 R15: 00007ffe67f7d7f8 [ 413.408401][T12641] [ 413.810677][T12658] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 414.332807][T12672] netlink: zone id is out of range [ 414.338241][T12672] netlink: zone id is out of range [ 415.506467][T12683] netlink: 'syz.0.1225': attribute type 1 has an invalid length. [ 415.514404][T12683] netlink: 306 bytes leftover after parsing attributes in process `syz.0.1225'. [ 415.560419][T12687] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 415.587335][T12687] netlink: 'syz.2.1227': attribute type 10 has an invalid length. [ 415.595507][T12687] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1227'. [ 415.801840][T12692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1226'. [ 417.276139][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1233'. [ 417.607308][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 418.194177][T12720] kexec: Could not allocate control_code_buffer [ 418.562329][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 418.734934][T12753] delete_channel: no stack [ 418.756165][ T53] block nbd17: Receive control failed (result -107) [ 418.801106][T12748] nbd17: detected capacity change from 0 to 68 [ 418.832464][ T6806] block nbd17: Dead connection, failed to find a fallback [ 418.843255][ T6806] block nbd17: shutting down sockets [ 418.849589][ T6806] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 418.862928][ T6806] Buffer I/O error on dev nbd17, logical block 0, async page read [ 418.875622][ T6806] I/O error, dev nbd17, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 418.888198][ T6806] Buffer I/O error on dev nbd17, logical block 1, async page read [ 418.907139][ T6806] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 418.960068][ T6806] Buffer I/O error on dev nbd17, logical block 0, async page read [ 419.001512][ T6806] I/O error, dev nbd17, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.019207][ T6806] Buffer I/O error on dev nbd17, logical block 1, async page read [ 419.028378][ T6806] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.039146][ T6806] Buffer I/O error on dev nbd17, logical block 0, async page read [ 419.047246][ T6806] I/O error, dev nbd17, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.056634][ T6806] Buffer I/O error on dev nbd17, logical block 1, async page read [ 419.065186][ T6806] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.075261][ T6806] Buffer I/O error on dev nbd17, logical block 0, async page read [ 419.083506][ T6806] I/O error, dev nbd17, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.093083][ T6806] Buffer I/O error on dev nbd17, logical block 1, async page read [ 419.102081][ T6806] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.111806][ T6806] Buffer I/O error on dev nbd17, logical block 0, async page read [ 419.119818][ T6806] I/O error, dev nbd17, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.129137][ T6806] Buffer I/O error on dev nbd17, logical block 1, async page read [ 419.138085][ T6806] ldm_validate_partition_table(): Disk read failed. [ 419.162090][ T6806] Dev nbd17: unable to read RDB block 0 [ 419.170330][ T6806] nbd17: unable to read partition table [ 419.235773][ T6806] ldm_validate_partition_table(): Disk read failed. [ 419.263412][ T6806] Dev nbd17: unable to read RDB block 0 [ 419.293949][ T6806] nbd17: unable to read partition table [ 419.541976][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1246'. [ 419.831969][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 420.035225][T12796] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 420.486908][T12781] kexec: Could not allocate control_code_buffer [ 420.820892][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 421.446498][T12829] 0x000200000001-0xa29656a63616329 : "" [ 421.466566][T12829] mtd: partition "" is out of reach -- disabled [ 421.532186][T12829] ftl_cs: FTL header not found. [ 421.642378][T12835] syz.1.1254(12835): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 421.883659][T12839] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 422.219666][T12841] random: crng reseeded on system resumption [ 423.602136][T12857] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1258'. [ 424.330248][T12882] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 424.386075][ T53] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 425.097335][T12901] FAULT_INJECTION: forcing a failure. [ 425.097335][T12901] name failslab, interval 1, probability 0, space 0, times 0 [ 425.127741][T12901] CPU: 0 UID: 0 PID: 12901 Comm: syz.0.1265 Tainted: G I syzkaller #0 PREEMPT(full) [ 425.127785][T12901] Tainted: [I]=FIRMWARE_WORKAROUND [ 425.127796][T12901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 425.127811][T12901] Call Trace: [ 425.127820][T12901] [ 425.127830][T12901] dump_stack_lvl+0x16c/0x1f0 [ 425.127867][T12901] should_fail_ex+0x512/0x640 [ 425.127901][T12901] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 425.127998][T12901] should_failslab+0xc2/0x120 [ 425.128035][T12901] __kvmalloc_node_noprof+0x141/0x9c0 [ 425.128068][T12901] ? trace_kmalloc+0x2b/0xd0 [ 425.128099][T12901] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 425.128129][T12901] ? io_alloc_cache_init+0x38/0x170 [ 425.128169][T12901] ? io_alloc_cache_init+0x38/0x170 [ 425.128202][T12901] io_alloc_cache_init+0x38/0x170 [ 425.128239][T12901] io_rsrc_cache_init+0x40/0x50 [ 425.128272][T12901] io_uring_setup+0x68e/0x20e0 [ 425.128304][T12901] ? __pfx_io_uring_setup+0x10/0x10 [ 425.128332][T12901] ? do_futex+0x122/0x350 [ 425.128368][T12901] ? __pfx_do_futex+0x10/0x10 [ 425.128404][T12901] ? find_held_lock+0x2b/0x80 [ 425.128451][T12901] ? xfd_validate_state+0x61/0x180 [ 425.128473][T12901] ? __pfx___do_sys_close_range+0x10/0x10 [ 425.128511][T12901] __x64_sys_io_uring_setup+0xc2/0x170 [ 425.128542][T12901] do_syscall_64+0xcd/0x4b0 [ 425.128574][T12901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.128599][T12901] RIP: 0033:0x7f73d2f8eec9 [ 425.128620][T12901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.128644][T12901] RSP: 002b:00007f73d11f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 425.128668][T12901] RAX: ffffffffffffffda RBX: 00007f73d31e6180 RCX: 00007f73d2f8eec9 [ 425.128685][T12901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 425.128700][T12901] RBP: 00007f73d3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.128715][T12901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.128731][T12901] R13: 00007f73d31e6218 R14: 00007f73d31e6180 R15: 00007ffef29c8158 [ 425.128767][T12901] [ 425.586099][ T30] audit: type=1800 audit(4294967302.732:5): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1269" name="lu_gp_id" dev="configfs" ino=46733 res=0 errno=0 [ 426.384422][T12926] sctp: [Deprecated]: syz.0.1271 (pid 12926) Use of int in max_burst socket option deprecated. [ 426.384422][T12926] Use struct sctp_assoc_value instead [ 427.229757][T12951] FAULT_INJECTION: forcing a failure. [ 427.229757][T12951] name failslab, interval 1, probability 0, space 0, times 0 [ 427.242904][T12951] CPU: 0 UID: 0 PID: 12951 Comm: syz.2.1277 Tainted: G I syzkaller #0 PREEMPT(full) [ 427.242948][T12951] Tainted: [I]=FIRMWARE_WORKAROUND [ 427.242957][T12951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 427.242972][T12951] Call Trace: [ 427.242980][T12951] [ 427.242990][T12951] dump_stack_lvl+0x16c/0x1f0 [ 427.243026][T12951] should_fail_ex+0x512/0x640 [ 427.243060][T12951] ? fs_reclaim_acquire+0xae/0x150 [ 427.243098][T12951] should_failslab+0xc2/0x120 [ 427.243132][T12951] kmem_cache_alloc_noprof+0x75/0x6e0 [ 427.243160][T12951] ? __pfx_map_id_range_down+0x10/0x10 [ 427.243185][T12951] ? security_inode_alloc+0x3b/0x2b0 [ 427.243230][T12951] ? security_inode_alloc+0x3b/0x2b0 [ 427.243264][T12951] security_inode_alloc+0x3b/0x2b0 [ 427.243302][T12951] inode_init_always_gfp+0xce4/0x1030 [ 427.243335][T12951] ? __pfx_mqueue_fill_super+0x10/0x10 [ 427.243367][T12951] alloc_inode+0x86/0x240 [ 427.243402][T12951] new_inode+0x22/0x1c0 [ 427.243438][T12951] ? __pfx_mqueue_fill_super+0x10/0x10 [ 427.243470][T12951] mqueue_get_inode+0x2e/0xdd0 [ 427.243501][T12951] ? sget_fc+0x808/0xc20 [ 427.243530][T12951] ? __pfx_mqueue_fill_super+0x10/0x10 [ 427.243562][T12951] mqueue_fill_super+0x14d/0x260 [ 427.243595][T12951] get_tree_nodev+0xdd/0x190 [ 427.243625][T12951] mqueue_get_tree+0xf1/0x130 [ 427.243667][T12951] vfs_get_tree+0x8b/0x340 [ 427.243694][T12951] fc_mount_longterm+0x1a/0x270 [ 427.243738][T12951] mq_init_ns+0x426/0x620 [ 427.243778][T12951] copy_ipcs+0x2d6/0x550 [ 427.243818][T12951] create_new_namespaces+0x20a/0xa90 [ 427.243854][T12951] ? security_capable+0x7e/0x260 [ 427.243894][T12951] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 427.243931][T12951] ksys_unshare+0x45b/0xa40 [ 427.243968][T12951] ? __pfx_ksys_unshare+0x10/0x10 [ 427.244007][T12951] ? xfd_validate_state+0x61/0x180 [ 427.244043][T12951] __x64_sys_unshare+0x31/0x40 [ 427.244079][T12951] do_syscall_64+0xcd/0x4b0 [ 427.244113][T12951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.244139][T12951] RIP: 0033:0x7fd107d8eec9 [ 427.244160][T12951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.244183][T12951] RSP: 002b:00007fd108bb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 427.244208][T12951] RAX: ffffffffffffffda RBX: 00007fd107fe5fa0 RCX: 00007fd107d8eec9 [ 427.244227][T12951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 427.244242][T12951] RBP: 00007fd107e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 427.244257][T12951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.244272][T12951] R13: 00007fd107fe6038 R14: 00007fd107fe5fa0 R15: 00007ffdd59ab188 [ 427.244308][T12951] [ 427.515687][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.509096][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 429.666421][T13008] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 429.763639][T13008] kvm: kvm [13007]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000077) [ 429.897886][T13011] FAULT_INJECTION: forcing a failure. [ 429.897886][T13011] name failslab, interval 1, probability 0, space 0, times 0 [ 429.945774][T13011] CPU: 0 UID: 0 PID: 13011 Comm: syz.3.1286 Tainted: G I syzkaller #0 PREEMPT(full) [ 429.945815][T13011] Tainted: [I]=FIRMWARE_WORKAROUND [ 429.945828][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 429.945841][T13011] Call Trace: [ 429.945849][T13011] [ 429.945859][T13011] dump_stack_lvl+0x16c/0x1f0 [ 429.945894][T13011] should_fail_ex+0x512/0x640 [ 429.945929][T13011] ? __kmalloc_cache_noprof+0x5f/0x780 [ 429.945958][T13011] should_failslab+0xc2/0x120 [ 429.945987][T13011] __kmalloc_cache_noprof+0x72/0x780 [ 429.946009][T13011] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 429.946046][T13011] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 429.946079][T13011] kvm_uevent_notify_change.part.0+0x93/0x450 [ 429.946116][T13011] ? __pfx_kvm_vm_release+0x10/0x10 [ 429.946140][T13011] kvm_put_kvm+0xe3/0xb00 [ 429.946165][T13011] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.946194][T13011] ? _raw_spin_unlock_irq+0x2e/0x50 [ 429.946225][T13011] ? __pfx_kvm_vm_release+0x10/0x10 [ 429.946252][T13011] kvm_vm_release+0x3c/0x50 [ 429.946278][T13011] __fput+0x402/0xb70 [ 429.946321][T13011] task_work_run+0x14d/0x240 [ 429.946350][T13011] ? __pfx_task_work_run+0x10/0x10 [ 429.946377][T13011] ? __pfx___do_sys_close_range+0x10/0x10 [ 429.946414][T13011] exit_to_user_mode_loop+0xec/0x130 [ 429.946442][T13011] do_syscall_64+0x419/0x4b0 [ 429.946485][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.946511][T13011] RIP: 0033:0x7fcc2e98eec9 [ 429.946532][T13011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.946556][T13011] RSP: 002b:00007fcc2f86b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 429.946581][T13011] RAX: 0000000000000000 RBX: 00007fcc2ebe6090 RCX: 00007fcc2e98eec9 [ 429.946598][T13011] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 429.946614][T13011] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 429.946629][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.946644][T13011] R13: 00007fcc2ebe6128 R14: 00007fcc2ebe6090 R15: 00007ffe67f7d7f8 [ 429.946678][T13011] [ 430.170225][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.766637][T13017] random: crng reseeded on system resumption [ 432.909936][T13064] FAULT_INJECTION: forcing a failure. [ 432.909936][T13064] name fail_futex, interval 1, probability 0, space 0, times 0 [ 432.976528][T13064] CPU: 1 UID: 0 PID: 13064 Comm: syz.3.1296 Tainted: G I syzkaller #0 PREEMPT(full) [ 432.976566][T13064] Tainted: [I]=FIRMWARE_WORKAROUND [ 432.976571][T13064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.976580][T13064] Call Trace: [ 432.976585][T13064] [ 432.976591][T13064] dump_stack_lvl+0x16c/0x1f0 [ 432.976613][T13064] should_fail_ex+0x512/0x640 [ 432.976636][T13064] get_futex_key+0x1d0/0x1560 [ 432.976659][T13064] ? __pfx_get_futex_key+0x10/0x10 [ 432.976677][T13064] ? __mutex_trylock_common+0xe9/0x250 [ 432.976704][T13064] futex_wake+0xea/0x530 [ 432.976719][T13064] ? __pfx_futex_wake+0x10/0x10 [ 432.976741][T13064] do_futex+0x1e3/0x350 [ 432.976761][T13064] ? __pfx_do_futex+0x10/0x10 [ 432.976779][T13064] ? __might_fault+0xe3/0x190 [ 432.976798][T13064] mm_release+0x24e/0x300 [ 432.976817][T13064] do_exit+0x68e/0x2bf0 [ 432.976833][T13064] ? __pfx_do_exit+0x10/0x10 [ 432.976844][T13064] ? do_raw_spin_lock+0x12c/0x2b0 [ 432.976858][T13064] ? find_held_lock+0x2b/0x80 [ 432.976877][T13064] do_group_exit+0xd3/0x2a0 [ 432.976890][T13064] get_signal+0x2671/0x26d0 [ 432.976916][T13064] ? __pfx_get_signal+0x10/0x10 [ 432.976933][T13064] ? do_futex+0x122/0x350 [ 432.976952][T13064] ? __pfx_do_futex+0x10/0x10 [ 432.976973][T13064] arch_do_signal_or_restart+0x8f/0x790 [ 432.976994][T13064] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 432.977024][T13064] exit_to_user_mode_loop+0x85/0x130 [ 432.977039][T13064] do_syscall_64+0x419/0x4b0 [ 432.977058][T13064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.977072][T13064] RIP: 0033:0x7fcc2e98eec9 [ 432.977085][T13064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.977099][T13064] RSP: 002b:00007fcc2f84a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 432.977112][T13064] RAX: fffffffffffffe00 RBX: 00007fcc2ebe6188 RCX: 00007fcc2e98eec9 [ 432.977121][T13064] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcc2ebe6188 [ 432.977130][T13064] RBP: 00007fcc2ebe6180 R08: 0000000000000000 R09: 0000000000000000 [ 432.977138][T13064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.977146][T13064] R13: 00007fcc2ebe6218 R14: 00007ffe67f7d710 R15: 00007ffe67f7d7f8 [ 432.977164][T13064] [ 433.747580][ T53] block nbd18: Receive control failed (result -107) [ 434.217278][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 434.608625][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 435.146090][T13115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 435.200702][T13096] random: crng reseeded on system resumption [ 436.006308][ T53] block nbd19: Receive control failed (result -107) [ 436.219084][T13102] random: crng reseeded on system resumption [ 436.338464][ T53] block nbd20: Receive control failed (result -107) [ 436.779548][ T53] block nbd21: Receive control failed (result -107) [ 437.040694][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 437.548957][T13171] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 437.664322][T13171] kvm: kvm [13170]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000077) [ 437.702001][T13171] FAULT_INJECTION: forcing a failure. [ 437.702001][T13171] name failslab, interval 1, probability 0, space 0, times 0 [ 437.754187][T13171] CPU: 0 UID: 0 PID: 13171 Comm: syz.3.1323 Tainted: G I syzkaller #0 PREEMPT(full) [ 437.754214][T13171] Tainted: [I]=FIRMWARE_WORKAROUND [ 437.754220][T13171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 437.754228][T13171] Call Trace: [ 437.754234][T13171] [ 437.754241][T13171] dump_stack_lvl+0x16c/0x1f0 [ 437.754264][T13171] should_fail_ex+0x512/0x640 [ 437.754283][T13171] ? __kmalloc_cache_noprof+0x5f/0x780 [ 437.754301][T13171] should_failslab+0xc2/0x120 [ 437.754321][T13171] __kmalloc_cache_noprof+0x72/0x780 [ 437.754335][T13171] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 437.754358][T13171] ? kvm_uevent_notify_change.part.0+0x93/0x450 [ 437.754375][T13171] kvm_uevent_notify_change.part.0+0x93/0x450 [ 437.754395][T13171] ? __pfx_kvm_vm_release+0x10/0x10 [ 437.754409][T13171] kvm_put_kvm+0xe3/0xb00 [ 437.754423][T13171] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.754439][T13171] ? _raw_spin_unlock_irq+0x2e/0x50 [ 437.754455][T13171] ? __pfx_kvm_vm_release+0x10/0x10 [ 437.754469][T13171] kvm_vm_release+0x3c/0x50 [ 437.754484][T13171] __fput+0x402/0xb70 [ 437.754507][T13171] task_work_run+0x14d/0x240 [ 437.754523][T13171] ? __pfx_task_work_run+0x10/0x10 [ 437.754537][T13171] ? __pfx___do_sys_close_range+0x10/0x10 [ 437.754558][T13171] exit_to_user_mode_loop+0xec/0x130 [ 437.754573][T13171] do_syscall_64+0x419/0x4b0 [ 437.754592][T13171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.754606][T13171] RIP: 0033:0x7fcc2e98eec9 [ 437.754618][T13171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.754631][T13171] RSP: 002b:00007fcc2f88c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 437.754645][T13171] RAX: 0000000000000000 RBX: 00007fcc2ebe5fa0 RCX: 00007fcc2e98eec9 [ 437.754654][T13171] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 437.754671][T13171] RBP: 00007fcc2ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 437.754679][T13171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.754687][T13171] R13: 00007fcc2ebe6038 R14: 00007fcc2ebe5fa0 R15: 00007ffe67f7d7f8 [ 437.754706][T13171] [ 438.519735][T13161] random: crng reseeded on system resumption [ 439.077746][ T53] block nbd22: Receive control failed (result -107) [ 439.503332][T13213] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 440.216035][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.222488][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.347962][T13227] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 441.971152][T13265] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 441.995709][T13267] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 442.375996][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 442.453271][ T53] block nbd23: Receive control failed (result -107) [ 442.664584][T13289] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1349'. [ 443.160794][T13297] vhci_hcd: invalid port number 16 [ 443.165948][T13297] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 443.214794][T13302] Invalid ELF header magic: != ELF [ 443.426656][T13304] block nbd24: Unsupported socket: should be TCP or UNIX. [ 443.525227][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 443.651728][T13292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1350'. [ 443.710492][T13292] bond0: entered allmulticast mode [ 443.722914][T13317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1356'. [ 443.726769][T13292] bond_slave_0: entered allmulticast mode [ 443.753152][T13292] bond_slave_1: entered allmulticast mode [ 444.158387][T13313] random: crng reseeded on system resumption [ 444.446015][T13340] Invalid ELF header magic: != ELF [ 446.199929][T13369] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1369'. [ 446.268450][T13351] bonding: no command found in bonding_masters - use +ifname or -ifname [ 446.312802][T13370] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 446.987294][T13379] FAULT_INJECTION: forcing a failure. [ 446.987294][T13379] name failslab, interval 1, probability 0, space 0, times 0 [ 447.006640][T13379] CPU: 0 UID: 0 PID: 13379 Comm: syz.2.1371 Tainted: G I syzkaller #0 PREEMPT(full) [ 447.006680][T13379] Tainted: [I]=FIRMWARE_WORKAROUND [ 447.006689][T13379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 447.006704][T13379] Call Trace: [ 447.006712][T13379] [ 447.006722][T13379] dump_stack_lvl+0x16c/0x1f0 [ 447.006758][T13379] should_fail_ex+0x512/0x640 [ 447.006791][T13379] ? fs_reclaim_acquire+0xae/0x150 [ 447.006828][T13379] should_failslab+0xc2/0x120 [ 447.006862][T13379] __kmalloc_noprof+0xdd/0x880 [ 447.006885][T13379] ? lockdep_init_map_type+0x5c/0x280 [ 447.006923][T13379] ? tomoyo_open_control+0x51f/0xa30 [ 447.006970][T13379] ? tomoyo_open_control+0x51f/0xa30 [ 447.007001][T13379] tomoyo_open_control+0x51f/0xa30 [ 447.007041][T13379] do_dentry_open+0x97f/0x1530 [ 447.007077][T13379] ? __pfx_tomoyo_open+0x10/0x10 [ 447.007112][T13379] vfs_open+0x82/0x3f0 [ 447.007153][T13379] path_openat+0x1de4/0x2cb0 [ 447.007194][T13379] ? __pfx_path_openat+0x10/0x10 [ 447.007232][T13379] do_filp_open+0x20b/0x470 [ 447.007260][T13379] ? __pfx_do_filp_open+0x10/0x10 [ 447.007316][T13379] ? alloc_fd+0x471/0x7d0 [ 447.007352][T13379] do_sys_openat2+0x11b/0x1d0 [ 447.007390][T13379] ? __pfx_do_sys_openat2+0x10/0x10 [ 447.007442][T13379] __x64_sys_openat+0x174/0x210 [ 447.007480][T13379] ? __pfx___x64_sys_openat+0x10/0x10 [ 447.007533][T13379] do_syscall_64+0xcd/0x4b0 [ 447.007566][T13379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.007592][T13379] RIP: 0033:0x7fd107d8eec9 [ 447.007613][T13379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.007638][T13379] RSP: 002b:00007fd108bb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 447.007663][T13379] RAX: ffffffffffffffda RBX: 00007fd107fe5fa0 RCX: 00007fd107d8eec9 [ 447.007681][T13379] RDX: 00000000000c0802 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 447.007697][T13379] RBP: 00007fd107e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 447.007713][T13379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.007727][T13379] R13: 00007fd107fe6038 R14: 00007fd107fe5fa0 R15: 00007ffdd59ab188 [ 447.007760][T13379] [ 447.236419][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.725715][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 447.858112][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 448.341310][T13387] random: crng reseeded on system resumption [ 448.716788][T13383] random: crng reseeded on system resumption [ 449.412105][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'. [ 449.422153][T13408] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 450.160445][T13431] netlink: 'syz.3.1381': attribute type 33 has an invalid length. [ 450.175232][T13431] netlink: 322 bytes leftover after parsing attributes in process `syz.3.1381'. [ 452.646537][T13483] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 452.673058][T13482] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 453.506542][T13516] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1393'. [ 454.606371][T13535] random: crng reseeded on system resumption [ 456.386057][T13548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1408'. [ 456.606773][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 456.973924][T13556] random: crng reseeded on system resumption [ 457.192208][T13548] team0: Port device team_slave_1 removed [ 457.598798][T13560] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 457.723299][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'. [ 458.781683][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 458.862938][T13583] Invalid ELF header magic: != ELF [ 458.881102][T13583] delete_channel: no stack [ 459.408530][T13563] kexec: Could not allocate control_code_buffer [ 459.722487][T13607] FAULT_INJECTION: forcing a failure. [ 459.722487][T13607] name failslab, interval 1, probability 0, space 0, times 0 [ 459.790873][T13607] CPU: 0 UID: 0 PID: 13607 Comm: syz.0.1421 Tainted: G I syzkaller #0 PREEMPT(full) [ 459.790916][T13607] Tainted: [I]=FIRMWARE_WORKAROUND [ 459.790923][T13607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.790932][T13607] Call Trace: [ 459.790937][T13607] [ 459.790943][T13607] dump_stack_lvl+0x16c/0x1f0 [ 459.790966][T13607] should_fail_ex+0x512/0x640 [ 459.790988][T13607] ? fs_reclaim_acquire+0xae/0x150 [ 459.791010][T13607] should_failslab+0xc2/0x120 [ 459.791030][T13607] __kmalloc_noprof+0xdd/0x880 [ 459.791045][T13607] ? tomoyo_encode2+0x100/0x3e0 [ 459.791063][T13607] ? tomoyo_encode2+0x100/0x3e0 [ 459.791077][T13607] tomoyo_encode2+0x100/0x3e0 [ 459.791094][T13607] tomoyo_encode+0x29/0x50 [ 459.791108][T13607] tomoyo_realpath_from_path+0x18f/0x6e0 [ 459.791128][T13607] tomoyo_path_number_perm+0x245/0x580 [ 459.791150][T13607] ? tomoyo_path_number_perm+0x237/0x580 [ 459.791171][T13607] ? __pfx_find_held_lock+0x4/0x10 [ 459.791188][T13607] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 459.791209][T13607] ? finish_task_switch.isra.0+0x21c/0xc10 [ 459.791244][T13607] ? find_held_lock+0x2b/0x80 [ 459.791260][T13607] ? hook_file_ioctl_common+0x145/0x410 [ 459.791278][T13607] ? __fget_files+0x20e/0x3c0 [ 459.791296][T13607] security_file_ioctl+0x9b/0x240 [ 459.791310][T13607] __x64_sys_ioctl+0xb7/0x210 [ 459.791333][T13607] do_syscall_64+0xcd/0x4b0 [ 459.791351][T13607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.791366][T13607] RIP: 0033:0x7f73d2f8eec9 [ 459.791378][T13607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.791391][T13607] RSP: 002b:00007f73d3d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.791405][T13607] RAX: ffffffffffffffda RBX: 00007f73d31e5fa0 RCX: 00007f73d2f8eec9 [ 459.791423][T13607] RDX: 0000000000000000 RSI: 00000000c0185500 RDI: 0000000000000007 [ 459.791432][T13607] RBP: 00007f73d3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.791441][T13607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.791449][T13607] R13: 00007f73d31e6038 R14: 00007f73d31e5fa0 R15: 00007ffef29c8158 [ 459.791468][T13607] [ 459.791484][T13607] ERROR: Out of memory at tomoyo_realpath_from_path. [ 460.339066][T13616] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 460.443405][T13616] kvm: kvm [13615]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000077) [ 460.518595][T13616] FAULT_INJECTION: forcing a failure. [ 460.518595][T13616] name failslab, interval 1, probability 0, space 0, times 0 [ 460.616157][T13616] CPU: 1 UID: 0 PID: 13616 Comm: syz.0.1424 Tainted: G I syzkaller #0 PREEMPT(full) [ 460.616198][T13616] Tainted: [I]=FIRMWARE_WORKAROUND [ 460.616207][T13616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 460.616221][T13616] Call Trace: [ 460.616230][T13616] [ 460.616241][T13616] dump_stack_lvl+0x16c/0x1f0 [ 460.616276][T13616] should_fail_ex+0x512/0x640 [ 460.616307][T13616] ? __kmalloc_cache_noprof+0x5f/0x780 [ 460.616337][T13616] should_failslab+0xc2/0x120 [ 460.616380][T13616] __kmalloc_cache_noprof+0x72/0x780 [ 460.616404][T13616] ? kvm_uevent_notify_change.part.0+0x2b2/0x450 [ 460.616441][T13616] ? kvm_uevent_notify_change.part.0+0x2b2/0x450 [ 460.616470][T13616] kvm_uevent_notify_change.part.0+0x2b2/0x450 [ 460.616504][T13616] ? __pfx_kvm_vm_release+0x10/0x10 [ 460.616529][T13616] kvm_put_kvm+0xe3/0xb00 [ 460.616553][T13616] ? lockdep_hardirqs_on+0x7c/0x110 [ 460.616581][T13616] ? _raw_spin_unlock_irq+0x2e/0x50 [ 460.616610][T13616] ? __pfx_kvm_vm_release+0x10/0x10 [ 460.616633][T13616] kvm_vm_release+0x3c/0x50 [ 460.616658][T13616] __fput+0x402/0xb70 [ 460.616700][T13616] task_work_run+0x14d/0x240 [ 460.616729][T13616] ? __pfx_task_work_run+0x10/0x10 [ 460.616757][T13616] ? __pfx___do_sys_close_range+0x10/0x10 [ 460.616792][T13616] exit_to_user_mode_loop+0xec/0x130 [ 460.616818][T13616] do_syscall_64+0x419/0x4b0 [ 460.616849][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.616874][T13616] RIP: 0033:0x7f73d2f8eec9 [ 460.616895][T13616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.616919][T13616] RSP: 002b:00007f73d3d61038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 460.616943][T13616] RAX: 0000000000000000 RBX: 00007f73d31e5fa0 RCX: 00007f73d2f8eec9 [ 460.616962][T13616] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 460.616978][T13616] RBP: 00007f73d3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 460.617000][T13616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.617014][T13616] R13: 00007f73d31e6038 R14: 00007f73d31e5fa0 R15: 00007ffef29c8158 [ 460.617047][T13616] [ 460.849795][T13621] [ 460.852138][T13621] ====================================================== [ 460.859130][T13621] WARNING: possible circular locking dependency detected [ 460.866128][T13621] syzkaller #0 Tainted: G I [ 460.872089][T13621] ------------------------------------------------------ [ 460.879093][T13621] syz.2.1423/13621 is trying to acquire lock: [ 460.885134][T13621] ffff888075157878 (&vma_lock->rw_sema){++++}-{4:4}, at: hugetlb_vma_lock_read+0xac/0x130 [ 460.895054][T13621] [ 460.895054][T13621] but task is already holding lock: [ 460.902397][T13621] ffff888020ea2578 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x302/0x2f40 [ 460.912760][T13621] [ 460.912760][T13621] which lock already depends on the new lock. [ 460.912760][T13621] [ 460.923144][T13621] [ 460.923144][T13621] the existing dependency chain (in reverse order) is: [ 460.932140][T13621] [ 460.932140][T13621] -> #8 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}: [ 460.940984][T13621] __mutex_lock+0x193/0x1060 [ 460.946084][T13621] hugetlb_fault+0x302/0x2f40 [ 460.951355][T13621] handle_mm_fault+0xbfa/0xd10 [ 460.956621][T13621] do_user_addr_fault+0x7a6/0x1370 [ 460.962233][T13621] exc_page_fault+0x5c/0xb0 [ 460.967240][T13621] asm_exc_page_fault+0x26/0x30 [ 460.972594][T13621] rep_movs_alternative+0x4a/0x90 [ 460.978144][T13621] _copy_from_iter+0x383/0x1720 [ 460.983509][T13621] mptcp_sendmsg+0x1050/0x1ec0 [ 460.988773][T13621] inet_sendmsg+0x11c/0x140 [ 460.993777][T13621] sock_write_iter+0x509/0x610 [ 460.999064][T13621] vfs_write+0x7d3/0x11d0 [ 461.003896][T13621] ksys_write+0x1f8/0x250 [ 461.008728][T13621] do_syscall_64+0xcd/0x4b0 [ 461.013765][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.020168][T13621] [ 461.020168][T13621] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 461.027790][T13621] lock_sock_nested+0x41/0xf0 [ 461.032998][T13621] inet_shutdown+0x67/0x440 [ 461.038007][T13621] nbd_mark_nsock_dead+0xae/0x5d0 [ 461.043538][T13621] recv_work+0x671/0xa80 [ 461.048285][T13621] process_one_work+0x9cc/0x1b70 [ 461.053735][T13621] worker_thread+0x6c8/0xf10 [ 461.058849][T13621] kthread+0x3c5/0x780 [ 461.063419][T13621] ret_from_fork+0x56a/0x730 [ 461.068512][T13621] ret_from_fork_asm+0x1a/0x30 [ 461.073780][T13621] [ 461.073780][T13621] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 461.081401][T13621] __mutex_lock+0x193/0x1060 [ 461.086495][T13621] nbd_queue_rq+0x423/0x12d0 [ 461.091609][T13621] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 461.097655][T13621] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 461.104488][T13621] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 461.110980][T13621] blk_mq_run_hw_queue+0x239/0x670 [ 461.116618][T13621] blk_mq_dispatch_list+0x514/0x1310 [ 461.122402][T13621] blk_mq_flush_plug_list+0x130/0x600 [ 461.128276][T13621] __blk_flush_plug+0x2c4/0x4b0 [ 461.133627][T13621] __submit_bio+0x545/0x690 [ 461.138626][T13621] submit_bio_noacct_nocheck+0x53d/0xc10 [ 461.144776][T13621] submit_bio_noacct+0xbbb/0x1f60 [ 461.150324][T13621] block_read_full_folio+0x34e/0x850 [ 461.156130][T13621] filemap_read_folio+0xc8/0x2a0 [ 461.161577][T13621] do_read_cache_folio+0x263/0x5c0 [ 461.167193][T13621] read_part_sector+0xd4/0x370 [ 461.172463][T13621] adfspart_check_ICS+0x93/0x940 [ 461.177912][T13621] bdev_disk_changed+0x723/0x1520 [ 461.183442][T13621] blkdev_get_whole+0x187/0x290 [ 461.188801][T13621] bdev_open+0x2c7/0xe40 [ 461.193560][T13621] blkdev_open+0x34e/0x4f0 [ 461.198477][T13621] do_dentry_open+0x97f/0x1530 [ 461.203756][T13621] vfs_open+0x82/0x3f0 [ 461.208343][T13621] path_openat+0x1de4/0x2cb0 [ 461.213442][T13621] do_filp_open+0x20b/0x470 [ 461.218448][T13621] do_sys_openat2+0x11b/0x1d0 [ 461.223630][T13621] __x64_sys_openat+0x174/0x210 [ 461.228996][T13621] do_syscall_64+0xcd/0x4b0 [ 461.234027][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.240435][T13621] [ 461.240435][T13621] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 461.247627][T13621] __mutex_lock+0x193/0x1060 [ 461.252854][T13621] nbd_queue_rq+0xbd/0x12d0 [ 461.257865][T13621] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 461.263959][T13621] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 461.270891][T13621] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 461.277387][T13621] blk_mq_run_hw_queue+0x239/0x670 [ 461.283028][T13621] blk_mq_dispatch_list+0x514/0x1310 [ 461.288817][T13621] blk_mq_flush_plug_list+0x130/0x600 [ 461.294696][T13621] __blk_flush_plug+0x2c4/0x4b0 [ 461.300053][T13621] __submit_bio+0x545/0x690 [ 461.305077][T13621] submit_bio_noacct_nocheck+0x53d/0xc10 [ 461.311221][T13621] submit_bio_noacct+0xbbb/0x1f60 [ 461.316787][T13621] block_read_full_folio+0x34e/0x850 [ 461.322601][T13621] filemap_read_folio+0xc8/0x2a0 [ 461.328043][T13621] do_read_cache_folio+0x263/0x5c0 [ 461.333660][T13621] read_part_sector+0xd4/0x370 [ 461.338938][T13621] adfspart_check_ICS+0x93/0x940 [ 461.344399][T13621] bdev_disk_changed+0x723/0x1520 [ 461.349948][T13621] blkdev_get_whole+0x187/0x290 [ 461.355311][T13621] bdev_open+0x2c7/0xe40 [ 461.360057][T13621] blkdev_open+0x34e/0x4f0 [ 461.364976][T13621] do_dentry_open+0x97f/0x1530 [ 461.370247][T13621] vfs_open+0x82/0x3f0 [ 461.374820][T13621] path_openat+0x1de4/0x2cb0 [ 461.379907][T13621] do_filp_open+0x20b/0x470 [ 461.384910][T13621] do_sys_openat2+0x11b/0x1d0 [ 461.390113][T13621] __x64_sys_openat+0x174/0x210 [ 461.395471][T13621] do_syscall_64+0xcd/0x4b0 [ 461.400475][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.406873][T13621] [ 461.406873][T13621] -> #4 (set->srcu){.+.+}-{0:0}: [ 461.413983][T13621] __synchronize_srcu+0xa1/0x290 [ 461.419509][T13621] blk_mq_quiesce_queue+0x149/0x1b0 [ 461.425235][T13621] elevator_switch+0x17d/0x810 [ 461.430515][T13621] elevator_change+0x391/0x5d0 [ 461.435790][T13621] elevator_set_default+0x2e9/0x380 [ 461.441514][T13621] blk_register_queue+0x384/0x4e0 [ 461.447061][T13621] __add_disk+0x74a/0xf00 [ 461.451890][T13621] add_disk_fwnode+0x13f/0x5d0 [ 461.457159][T13621] nbd_dev_add+0x783/0xbb0 [ 461.462079][T13621] nbd_init+0x181/0x320 [ 461.466736][T13621] do_one_initcall+0x120/0x6e0 [ 461.472027][T13621] kernel_init_freeable+0x5c2/0x910 [ 461.477744][T13621] kernel_init+0x1c/0x2b0 [ 461.482579][T13621] ret_from_fork+0x56a/0x730 [ 461.487668][T13621] ret_from_fork_asm+0x1a/0x30 [ 461.492934][T13621] [ 461.492934][T13621] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 461.500731][T13621] __mutex_lock+0x193/0x1060 [ 461.505825][T13621] elevator_change+0x17d/0x5d0 [ 461.511093][T13621] elv_iosched_store+0x315/0x3c0 [ 461.516535][T13621] queue_attr_store+0x268/0x310 [ 461.521898][T13621] sysfs_kf_write+0xf2/0x150 [ 461.527004][T13621] kernfs_fop_write_iter+0x3af/0x570 [ 461.532789][T13621] vfs_write+0x7d3/0x11d0 [ 461.537661][T13621] ksys_write+0x12a/0x250 [ 461.542492][T13621] do_syscall_64+0xcd/0x4b0 [ 461.547499][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.553896][T13621] [ 461.553896][T13621] -> #2 (&q->q_usage_counter(io)#62){++++}-{0:0}: [ 461.562489][T13621] blk_alloc_queue+0x619/0x760 [ 461.567805][T13621] blk_mq_alloc_queue+0x172/0x280 [ 461.573365][T13621] __blk_mq_alloc_disk+0x29/0x120 [ 461.578928][T13621] nbd_dev_add+0x492/0xbb0 [ 461.583876][T13621] nbd_init+0x181/0x320 [ 461.588546][T13621] do_one_initcall+0x120/0x6e0 [ 461.593827][T13621] kernel_init_freeable+0x5c2/0x910 [ 461.599547][T13621] kernel_init+0x1c/0x2b0 [ 461.604397][T13621] ret_from_fork+0x56a/0x730 [ 461.609498][T13621] ret_from_fork_asm+0x1a/0x30 [ 461.614783][T13621] [ 461.614783][T13621] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 461.621985][T13621] fs_reclaim_acquire+0x102/0x150 [ 461.627532][T13621] prepare_alloc_pages+0x162/0x610 [ 461.633157][T13621] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 461.639564][T13621] alloc_pages_mpol+0x1fb/0x550 [ 461.644936][T13621] alloc_pages_noprof+0x131/0x390 [ 461.650479][T13621] __pmd_alloc+0x3b/0x8b0 [ 461.655328][T13621] huge_pte_alloc+0x41d/0x5b0 [ 461.660515][T13621] hugetlb_fault+0x373/0x2f40 [ 461.665704][T13621] handle_mm_fault+0xbfa/0xd10 [ 461.670980][T13621] do_user_addr_fault+0x7a6/0x1370 [ 461.676607][T13621] exc_page_fault+0x5c/0xb0 [ 461.681627][T13621] asm_exc_page_fault+0x26/0x30 [ 461.686989][T13621] rep_movs_alternative+0x30/0x90 [ 461.692537][T13621] _copy_from_user+0x98/0xd0 [ 461.697648][T13621] copy_msghdr_from_user+0x98/0x160 [ 461.703368][T13621] ___sys_recvmsg+0xdb/0x1a0 [ 461.708481][T13621] do_recvmmsg+0x2fe/0x750 [ 461.713452][T13621] __x64_sys_recvmmsg+0x22a/0x280 [ 461.719013][T13621] do_syscall_64+0xcd/0x4b0 [ 461.724030][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.730436][T13621] [ 461.730436][T13621] -> #0 (&vma_lock->rw_sema){++++}-{4:4}: [ 461.738337][T13621] __lock_acquire+0x12a6/0x1ce0 [ 461.743709][T13621] lock_acquire+0x179/0x350 [ 461.748732][T13621] down_read+0x9b/0x480 [ 461.753403][T13621] hugetlb_vma_lock_read+0xac/0x130 [ 461.759121][T13621] hugetlb_fault+0x30a/0x2f40 [ 461.764316][T13621] handle_mm_fault+0xbfa/0xd10 [ 461.769590][T13621] do_user_addr_fault+0x7a6/0x1370 [ 461.775217][T13621] exc_page_fault+0x5c/0xb0 [ 461.780242][T13621] asm_exc_page_fault+0x26/0x30 [ 461.785607][T13621] rep_movs_alternative+0x33/0x90 [ 461.791148][T13621] _copy_to_iter+0x383/0x1710 [ 461.796344][T13621] seq_read_iter+0xd02/0x12d0 [ 461.801532][T13621] kernfs_fop_read_iter+0x46c/0x610 [ 461.807241][T13621] vfs_read+0x8bf/0xcf0 [ 461.811915][T13621] ksys_read+0x12a/0x250 [ 461.816673][T13621] do_syscall_64+0xcd/0x4b0 [ 461.821692][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.828096][T13621] [ 461.828096][T13621] other info that might help us debug this: [ 461.828096][T13621] [ 461.838308][T13621] Chain exists of: [ 461.838308][T13621] &vma_lock->rw_sema --> sk_lock-AF_INET --> &hugetlb_fault_mutex_table[i] [ 461.838308][T13621] [ 461.852815][T13621] Possible unsafe locking scenario: [ 461.852815][T13621] [ 461.860276][T13621] CPU0 CPU1 [ 461.865624][T13621] ---- ---- [ 461.870978][T13621] lock(&hugetlb_fault_mutex_table[i]); [ 461.876603][T13621] lock(sk_lock-AF_INET); [ 461.883636][T13621] lock(&hugetlb_fault_mutex_table[i]); [ 461.891776][T13621] rlock(&vma_lock->rw_sema); [ 461.896533][T13621] [ 461.896533][T13621] *** DEADLOCK *** [ 461.896533][T13621] [ 461.904658][T13621] 4 locks held by syz.2.1423/13621: [ 461.909842][T13621] #0: ffff88807f2a10b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 461.918895][T13621] #1: ffff88807c6770a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 461.927766][T13621] #2: ffff88807cc1a220 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6e0 [ 461.937682][T13621] #3: ffff888020ea2578 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x302/0x2f40 [ 461.948469][T13621] [ 461.948469][T13621] stack backtrace: [ 461.954349][T13621] CPU: 1 UID: 0 PID: 13621 Comm: syz.2.1423 Tainted: G I syzkaller #0 PREEMPT(full) [ 461.954380][T13621] Tainted: [I]=FIRMWARE_WORKAROUND [ 461.954387][T13621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 461.954400][T13621] Call Trace: [ 461.954408][T13621] [ 461.954417][T13621] dump_stack_lvl+0x116/0x1f0 [ 461.954442][T13621] print_circular_bug+0x275/0x350 [ 461.954472][T13621] check_noncircular+0x14c/0x170 [ 461.954504][T13621] __lock_acquire+0x12a6/0x1ce0 [ 461.954538][T13621] lock_acquire+0x179/0x350 [ 461.954565][T13621] ? hugetlb_vma_lock_read+0xac/0x130 [ 461.954594][T13621] ? __pfx___might_resched+0x10/0x10 [ 461.954620][T13621] down_read+0x9b/0x480 [ 461.954645][T13621] ? hugetlb_vma_lock_read+0xac/0x130 [ 461.954672][T13621] ? __pfx_down_read+0x10/0x10 [ 461.954696][T13621] ? find_held_lock+0x2b/0x80 [ 461.954718][T13621] ? mt_find+0x749/0xa20 [ 461.954743][T13621] hugetlb_vma_lock_read+0xac/0x130 [ 461.954771][T13621] hugetlb_fault+0x30a/0x2f40 [ 461.954793][T13621] ? __pfx_hugetlb_fault+0x10/0x10 [ 461.954819][T13621] ? find_vma+0xbf/0x140 [ 461.954842][T13621] ? __pfx_find_vma+0x10/0x10 [ 461.954867][T13621] handle_mm_fault+0xbfa/0xd10 [ 461.954886][T13621] ? trace_raw_output_exceptions+0x141/0x150 [ 461.954909][T13621] do_user_addr_fault+0x7a6/0x1370 [ 461.954932][T13621] ? rcu_is_watching+0x12/0xc0 [ 461.954957][T13621] exc_page_fault+0x5c/0xb0 [ 461.954979][T13621] asm_exc_page_fault+0x26/0x30 [ 461.954999][T13621] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 461.955030][T13621] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 23 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 461.955050][T13621] RSP: 0018:ffffc900023cfae8 EFLAGS: 00050246 [ 461.955066][T13621] RAX: 0a6e776f6e6b6e75 RBX: 0000000000000008 RCX: 0000000000000008 [ 461.955078][T13621] RDX: ffffed100f9bdc01 RSI: ffff88807cdee000 RDI: 0000000000000000 [ 461.955092][T13621] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100f9bdc00 [ 461.955104][T13621] R10: ffff88807cdee007 R11: 0000000000000000 R12: ffffc900023cfda0 [ 461.955116][T13621] R13: 0000000000000008 R14: ffff88807cdee000 R15: 00007ffffffff000 [ 461.955136][T13621] _copy_to_iter+0x383/0x1710 [ 461.955167][T13621] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 461.955192][T13621] ? __pfx__copy_to_iter+0x10/0x10 [ 461.955220][T13621] ? kernfs_seq_stop+0xcd/0x120 [ 461.955246][T13621] ? kernfs_put_active+0x86/0xe0 [ 461.955276][T13621] seq_read_iter+0xd02/0x12d0 [ 461.955299][T13621] kernfs_fop_read_iter+0x46c/0x610 [ 461.955320][T13621] ? rw_verify_area+0xcf/0x6c0 [ 461.955341][T13621] vfs_read+0x8bf/0xcf0 [ 461.955364][T13621] ? __pfx___mutex_lock+0x10/0x10 [ 461.955386][T13621] ? __pfx_vfs_read+0x10/0x10 [ 461.955416][T13621] ksys_read+0x12a/0x250 [ 461.955436][T13621] ? __pfx_ksys_read+0x10/0x10 [ 461.955461][T13621] do_syscall_64+0xcd/0x4b0 [ 461.955486][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.955506][T13621] RIP: 0033:0x7fd107d8eec9 [ 461.955522][T13621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.955540][T13621] RSP: 002b:00007fd108b71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.955558][T13621] RAX: ffffffffffffffda RBX: 00007fd107fe6180 RCX: 00007fd107d8eec9 [ 461.955571][T13621] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000005 [ 461.955583][T13621] RBP: 00007fd107e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 461.955596][T13621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.955607][T13621] R13: 00007fd107fe6218 R14: 00007fd107fe6180 R15: 00007ffdd59ab188 [ 461.955627][T13621] [ 462.324075][T13624] openvswitch: netlink: nsh attribute has 14 unknown bytes.