last executing test programs: 6.164302364s ago: executing program 3 (id=962): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebc01, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0xa8441, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(r0, &(0x7f00000000c0)=@in={0x2, 0x4e21, @rand_addr=0xfffffffe}, 0x55) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x103000, 0x0) setreuid$auto(0x8, 0x9d7) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) read$auto_fops_ulong_ro_(0xffffffffffffffff, &(0x7f0000000340)=""/234, 0xea) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) setsockopt$auto_SO_RCVTIMEO_NEW(0xffffffffffffffff, 0xffff, 0x42, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x6e3, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0x0, 0x6, 0x81, 0x6819a}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.760333579s ago: executing program 0 (id=963): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_REGISTER_ENABLE_RINGS(r0, 0xc, &(0x7f0000000080), 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = epoll_create$auto(0x2) epoll_pwait2$auto(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, 0x7ff9}, 0x0, 0x8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01ee696b97a772f4c2255900000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2400c815}, 0x804) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r5, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000026c0)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x4000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x29fb8}, 0x4, 0x0, 0x0, 0xb2d}, 0x7}, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x7, 0x7, 0x11, 0x401, 0x8) getsockopt$auto(r8, 0x0, 0x43, 0x0, 0x0) setsockopt$auto_SO_BUSY_POLL_BUDGET(r7, 0x1, 0x46, &(0x7f0000000400)='\x10\x82\x98?\xdf\x98\xc2\x13UdS\xc4Bi/xR\xa5\xfc\xdau0\x94|\xdf\xc1\xefu_\xd1\xcb\x17\x84\xb5\xe3\xcb\x80O\x04p4\x05\xb8\x84\xf7\x1f\xba\xa9gP\xc0\xda\xec\xc9yt\x8c\x98\xcf\x8b\x9bJg\x1b_\x15;\x88>l\xe69\xd2\xe9\x80\"\x16\x85\x00\xe0$\xe1\xe1#!\xd6^h^\xd7\xc3\xb2\xc2\x98\x1d\x19\xd8\x10\x1e\x93\x7f\xfc\xd36\xed\x93\x00\x86_\xef\x16\xa0\xe0<9g6\x8a*\x8a\xd3\xafP\xd7\xd0]\xd8dw\xa6Q2@\xb0v\x85\xf0\x9c\xe0,\x81?~(X\x9eJ\xec\xd4\x15\xa5\x87Z\xde.\xc6\x8e\xdc\x8e\x80\x1e~Qc#?\xb8\x11\x8e\xff\xbe\xda\x18\xd6W\xa7\xb7\x7f\x02615\x15\aTc.\xd5\x9e\n~\x10\xae>\xd55 x\x9d\xca\x88TH$\xe9\xb87S<\x03\x99\x1cM\x14\xac\x9f\xbf\x00\x00\x00\x00\x00\x00\x94\xee!\xff{%\x11{\xe0\xb2\xc2\xb0\x8d', 0x800) 5.438735137s ago: executing program 1 (id=965): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000c80), 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) r2 = prctl$auto_PR_SET_MM_ARG_START(0x0, 0x8, 0x0, 0x0, 0x1) read$auto_drm_connector_fops_drm_debugfs(r2, &(0x7f0000000240)=""/129, 0x81) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8000000000000001, 0x3, 0xeb1, r3, 0x2000000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x202040, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0x1cb842, 0x0) read$auto(0x3, 0x0, 0x80) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @local}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0x400}, 0x1, 0x0, 0x3, 0x54b}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0x200007, 0x8) 5.173990374s ago: executing program 0 (id=966): mmap$auto(0x0, 0x400008, 0xdf, 0x7f, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x4, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4008010) shutdown$auto(0x200000003, 0x2) unshare$auto(0x40000080) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0x80006, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @broadcast}, 0x6d) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x401006, 0x4015, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.811077789s ago: executing program 3 (id=968): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/xmit_hash_policy\x00', 0x10b062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 4.423447204s ago: executing program 3 (id=969): close_range$auto(0x2, 0x8, 0x0) socket(0x2c, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0100"], 0x18}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x80000000df, 0x9b72, 0x2, 0x8000) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, 0x0, 0x4080, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/cmdline\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x4400, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = gettid() setpriority$auto_PRIO_PROCESS(0x0, r2, 0x3) fadvise64$auto_POSIX_FADV_NORMAL(r0, 0x7, 0xc, 0x0) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYBLOB="00042cbd7000fddbdf252f00000005001300050000000500150085000000050036000400"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) 4.404822463s ago: executing program 1 (id=970): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x29, 0x2, 0x1000) socket(0x10, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x6, 0x20000000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) msgctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000000400)={{0x5bb7, 0xee00, 0x0, 0x0, 0x0, 0x10001}, &(0x7f00000002c0), &(0x7f00000003c0)=0x7, 0x8, 0x70000000000, 0x7fffffff, 0xbb1e, 0x0, 0x6, 0x1, 0x7fff, @raw=0x2, @inferred=0xffffffffffffffff}) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f00000032c0)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$auto(r3, 0x0, 0x3) r4 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/43:288/max_bytes\x00', 0x82942, 0x0) sendfile$auto(r0, r5, 0x0, 0x43f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 4.318383303s ago: executing program 0 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x38, 0x0, 0x0) r2 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000005700), 0x28000, 0x0) read$auto_proc_coredump_filter_operations_base(r2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_SET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0xa74, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4}, @NL80211_ATTR_KEY_DATA={0xe, 0x7, "003a9c9508eacc8ce067"}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_STA_FLAGS={0x12c, 0x11, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @uid}, @nested={0x11e, 0x78, 0x0, 0x1, [@generic="69185a6d42d83ad0f3cbd4f11a3d2496cd684960acd010a943b8f241eab3f46c6de1cde39cdf0b5c15bd8318803cd24e2d279b06eca030a7933cdf6fb5debd78bc1e84baa13cced37946", @generic="5da5d7f03c9bcbb0a4b68b22128ea0928bd56bec387d1fd265a1b4e373a35128d42736a5b31048c8369664434aad53caf071a7143af0c0c0d88f5df86ab276a5c3d3bf0ee89baefd730760560d3eeb2225bd3778e88fc10785f987a43b2c42bca5c460e48689f68ea19d9e8fa0d1db218d445659", @generic="9752b0ac32967ef9ae89c97b790dab857acbd4c430e872c86c35975434885f0c5cad70368db475dc949552401097d0f5cb35331960336b8c473faae1c0116912", @typed={0x4, 0x72}, @nested={0x4, 0x79}, @nested={0x4, 0xca}, @typed={0xf, 0x13f, 0x0, 0x0, @str='/dev/ttyS2\x00'}]}]}, @NL80211_ATTR_MESH_ID={0x13, 0x18, "13ef508501e6378977842884eb0b08"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_IE={0x8d5, 0x2a, "5ec9499378ff006691a868c1ebbb6cb9aae54679a9fedf48f022cc6e6e646a3e24b3db1df3e8781b7fe99f9468fd5e0e395b8dbc1d14c24799d759e7ed13b655cdf2d7d937936d6f3d0c58506b5c2e0d74bef49379ce881eca22a4c69b4962d3572d077b6396c3d275f9d546cda98ec37ab6d99b843b29e90db4e60df2234218ed0404eac2d0b28397aa1fe8f8972d000a0093976d06ec1625e8094e1dc81ac7630949cb2922d2d6824d5f94832c364b9706febe22f37408822955f8212e334e5a114373a78d2741a4859d82f5919a3144a401c1be7b37f8e699d2987abd8f8f332a44ef73d7b979efcd0d2e628e6698e45952637bd1985a0376500c5072ed046675c31ade029b889d0174dfb13d6bd163be751aa42142b858d2931bb557284e878e82268505139dcc09a20940bc9192d92a9f7b4d9b7bb5faef9f7d51e1ba7c92f3fcc98bf18e09040d4bb78cc404f3f198a37b90c3b57ffddd9fe325d648678a94905a342eb2fbc11c4a78edd2ef15e4a0f63e12c8da0d80c9c3c5b775bec9b33a77b22ae233939c835aa9e0b1312bb39c0178f12226bfc282cd45a52f0f1590cb081990f4ab284267a5ae127dada1505998eb68c7b273a75d6eecd9d985216ad79d506ece250b867bd7dec29da741fae08c0e486bbd0fb36df2d21949c523915100ae31f409ec6ec32e67eabbcd275f28f579238d38ede57b154dd8434f7702f71cb2c76a67dc359e75303cd1c71cf8c74d2757459ca972c1593629d842aa8795c814bc467214d1b784d17214b2b4969e02f44f0d3dd008d2950aab40e64f20ec1af0014f81b33e7173c7023decc2fed4982d7148ba9d63a79af254f5de62bc3b2c1b7b90294627659f8a9e9290f34cd10e3a581477a21d8e8ab9dd581014c9bfbdea268ae35af71f5d2cc31584f72441f694c7ed2acd6af66b47bd9707ff1d8b75380b5e9264cc1ad338a1d43d84d4845e81e71813754ae72e40f8745104ce58d5fb822b9a276c7ca33b95689dffd74373228b98b833c06d88ca0205b59545ffcb4edefbef55bad355ea69464acf2425e86db51d0b2fd577114b3005823131a9f31f9cf563ba3a441098790f8fe67d00b53ea63b73e9068a96965e701f222e3b3bf5b57e86412f10434fc7c409874e88568790f43f59ada350fe8e01a3e5deda8e75cb09872c9e1600f79811d9caa9725096c299a9852a8f7ec43af0425337c1ee77300dd1579ed8874c2fbfc741213255d03cbd498219bb8155e2c7e11881cff793406cb143acc098cb756eeaea3e693a0b85a240dd49979daf0d7d9117eb200b828555f62edbb6adf70cc18bf998c00605fcc1de8f426bfdf80fea3bc71865df93b09914d492955f1b13e88a35a4c596e7c35c391af12f425bb1543251394ef59d05bf2b54b61a17697b333069314677bc7105bab1d88719fb1a795cda9b2c3e786261464e977a2624c8dda6d28bc9945ce74e680a18a830ea71fe30f9be1b51240ccc47fa65dd69593306b11a03bb498460738e3aae21e25d988ce79ad84f37877b9ae1ae1ddb0a3bb95c28030ed454b10203f66ca8b363d83be788dbc2c52517012976df239fbfbb95010d3a1a85e945bdccb64319f80eb125726a4ed7e9471217afd21a3a9d8cf369947b78b684c347a17d3dba1541ca430b5bbe0ad759593c5a07557f4fbc5e9fecfa4090eb844e7dca3ff25ad675a802edea244834c4db8296260805f5e1f59c8ba0dd8898279f37a7273c32631c4e3d7424fc54f462afbd72a6b6303a4e5c0670354c569230e3bc8b2f8d954a2162d40182334df4a77f831b036986cbacbfbbd057fe305ff9ae259175d69035c5ba1f9919e2742b60c416878176d487bce4c6520ffe083d313ddcbcc5ff0767eda86b5ee99cf719ce09277f50c9480e040c4ca4e35c0bbfc0bceca587c9b6262f263b403b8e5aac02f3f0a765be30b1b94cdce7cacd06dc7803cb5374127c6aba361e2bb5243c76567a9ec4440de5535d47d5752ef9b9d72d70d707560980be8a9c1bf40d7a5a5244f98f5028aadbd015396255e526677d27ef1bd6048c800ece8099902f4d7851d9fc7e8a9b9791335dc2d7c1b52c467a8994183fdfa821c07636d8636cb85f578fbbe0a4596ae9f2fbe7c4ac5e0e3bbd2f6d345fb284ffc8d7fd6a84024c37779eb26812815e684cf8196e968d7bcb0efbad7c45f993acf2c9a4cfa50b1f17963e8d5ebfa64a692595e1ce07234e8739c2488872c09c6704c917951a8460375733cf439ce819b6217f57239f8f52ce3e918b7b2d3a01a1cf27ff26c601bdf838fe391f4debd660304c53ef18e60e1923405eda3f0f70d7d9e1a3bdda18c48b212d9c10979a6e775ad3146a25ddcf27f7bfdadb11537ebc0636bae0625dc9d1080eb5ec72e805275cc8c655781d10892fa7f6fc934694528f33ee744adec0e82da33ff0444ce3af1fcd89169a9d6968fe3b1fb94b40dfb089410fe7492b040330c29cacc812fae2bf4d6aa06ddfe46ee31bd65c5de113802bbc3ff31f6a68e594166bc83bb531d4bc2676ea65c49237bcc61b7da804dc34def4fa0759bad5b08fea7d44a24dff898de865306f8294b73e36763486fcd8ad8574d255f2037743e9e980ba2f28f1d7b661cf88ca66dbf3683af05a72297e64d7835359a6d2dd4775be15a67e96c1cd4d8fe2cf7ec4321df2e723ca94247c0b25eb6cec09fb5b3a79e856e55cb5e4f794bda8f5cdd92102bd5f0a59d597a1d665023f7253c1d5e8f601e75a2bda9b8dc012835fc3bf698991c5fb5b743b9e2b56830406910677bd8b22979d625277450cdb0fd63f17e49d60306f926457c94d6a55ebb5cbbfd9dfbf79d9e3fd5926330dd117851642e4db31a19aa302d293b86d5b695faee73a37b3ddaa278408bde395641e94d846d2e60d833241ccc8363fa33dc00619b33ce410b845a5193f960f92a1cbbcbc8600503a2403bd244b6fc0ffc4c0c99d27e2ec47f9161b8ef0e5caa96d387eb3003f3572561edf6db428b9aeb3cb548a169e53911ba302dbd192ca5cf1f2e9e6229deb42233a5aa01243b397f25e88db9ddbc85c7f45e370df8ea2a107b97310588295fcc270c9a5f91de9c1ac53c37a2d1079358ca3a641ef4dc355bd26df02a68f1479817c14942d7c6bb5c039496081b7a187cae449474a9ccf78a9731deda01f9bfd"}, @NL80211_ATTR_BEACON_HEAD={0x7, 0xe, "27af99"}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x80}, @NL80211_ATTR_KEY_SEQ={0xfffffd6c, 0xa, "9be7d19f9954eb377c152d6ac8b2"}]}, 0xa74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) socket(0x27, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x4, 0x1) setsockopt$auto(0x7, 0x111, 0x100006, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/udp6\x00', 0x80, 0x0) pread64$auto(r4, 0x0, 0x8202000, 0x2d) ioctl$auto(r3, 0x404064c8, r3) pipe$auto(0x0) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bdi/1:13/stats\x00', 0x505a00, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D3\x00', 0x8a481, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r5, 0x5408, 0x0) 3.694587886s ago: executing program 0 (id=973): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp_tables_matches\x00', 0x2000, 0x0) r1 = fsmount$auto(r0, 0x4, 0x9) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) shmctl$auto_SHM_LOCK(0x0, 0xb, &(0x7f0000000240)={{0x108e, 0xffffffffffffffff, 0xee00, 0x2, 0x7fffffff, 0x5, 0xc}, 0x3, 0xfffffffffffff73c, 0x5, 0x8, @raw=0x5, @raw=0x81, 0x1000, 0x0, &(0x7f00000000c0)="87b8c35cd013ce39d0c3e45d605667688e1e3a6670b4d3021a55b52532f777e764dc9c9b89e4bab7280a4ccdd3ba2fcbd65a088f366d34e2a197981d44b62d15615266c8addd4dfd6c91934ee74a097d7d17bb11964da4111beb146f4377b70ff067df2bffb41ef388a1139763ad294328e0d2f35d2d0c97d4d05830420c2b38464efbd09e361f81b620fa8758f42f520cc57fb57baa088f68ce65754280f584ae9d15a6ce0fcfea76206a15b3", &(0x7f0000000180)="ee45216023274953a51a217eb732d18d9bd253cda8fd9bf918b3f98a5863b00499fbdd47de1868937684b99712fcc938c8c3c92e4342585c39f211351adda5f3a510591689f8c6046d6bfbd9132f15ed25d6bd4b45f44209b808925b41655de067c7d13ab3c1acce8db4254b9e689bc1fb67638487c343908ad145d2297a351b8814be6872c04def03abb4124d500055986c123b857ac6680e60"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x25, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x53, 0x0, 0x9) r4 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000300)={@_si_pad}, 0xf, &(0x7f0000000380)={{0x8000000000000009, 0x6}, {0x40, 0x8}, 0xb6, 0x3bf, 0x5, 0x800e193, 0x1, 0x7, 0x6, 0x7ff, 0x1000000003ff, 0x5321, 0x2, 0x5, 0xc, 0x2}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) memfd_create$auto(0x0, 0x4) r5 = socket(0xa, 0x3, 0x3a) statx$auto(0xffffffffffffff9c, 0x0, 0xfffffffa, 0xbdfc, 0x0) setsockopt$auto(r5, 0x29, 0x14, 0x0, 0x56b) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x6, 0x0, 0x4, 0x800) setsockopt$auto(r5, 0x29, 0x15, 0x0, 0x52b) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)={0x388, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x33e, 0x1, 0x0, 0x1, [@generic="fb41c16665b085e74fb9c61cff5c330156d51aa5444ce1d395795f841129a4e8b21ddd1aba6d9b2f2a5fa72a3174476f00b18d8c57ddb5191b86714e7614408dff1067cbc291f4d9e29b13461875e5ed59d18862f0ba5d4e29e916", @generic="1036ffd0108bdae07536f0fc84cf74a1713fa5d0ab0b4d3231204e71b50c9ca90582368ea383cf396feea228e11c940269316c3f86beb71035680ae6baf7f88235d905642ccb5390e1c68910e1115da650e9ee8b260cc12369b69379598630cf42887c73056c3c7146b8e404189e879c1284d97f189de200271e6be7976143f3d36ad540e323cad68e372f1d96465f9619a825f3a628a7456a831d4a719e81db841b7d59db37fc5230608a5ce13d20714e381b31b8193a50e13a52c4e3fd7d80d6d94c9d91ef861629ab7f68af51bca75a3b25341b", @generic="e0a4da3386af592f49ec93e3ddd86e7f792518ca2b3773c2c372ce770793f78d906ae51ebfbb53a26df18b346a51882792a38d977a79506e0de462fbf6489e34bef1ebc9ab74a9ea36a040a7e4ace499cb500680cb90e2674f94e33ff22f4e2360b96cae4856fedbafc8823544ee923abd0ba9a5d07471ba660caa33a07311831a3fe6c48a33f40eb70230aa81f74b5307916e0490b08653ee3567c523529812e104b94c0d39774b7f50731bc6b1270eb5f6584f10748e8f953430e60db23fa819cd7918ce081d9a3af6fdfc9ffa37d3dfdd5ace19dd11f57820d006fd7a8847fdb984443674d475409cd7d1a768263f721d5563933fa543", @generic="5d01ff3a21168184e7422ff5fb1d01fee5a7e56977f9154983b24d8d7dafdcb6a58acaa72d41230570871eed40e469b08bcd17078942aa101f854de2e063b7e0a8ae73ff199502478a09f0e45621629ded34a8a293f6459d4f192b75c91b0047fe2246c3c8877f7dedc44837eaf6a0648e04ee658057832bfd7c3a82f5bb924bf95f63bd329f5d7dc7f6012d", @generic="c15d76c0dc134608f6c4689b985cb26043206fa2de5a292baf6d8329812309611da1897256b35549ad547df493d5723aeccf00e2bd9de2bd10e6f9191cf06f89684e5ede05edc4d73279ad67f0ba51ea3519d1f1ae75fa21d79f50a77120b34190651ce8f61255e9b3dfe418f50d19cb99aa28e50db40c5db3c0563af06c", @typed={0x8, 0x18, 0x0, 0x0, @u32=0x8}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0x4}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x28, 0x1, 0x0, 0x1, [@nested={0xc, 0x128, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @uid=r3}]}, @typed={0x8, 0x63, 0x0, 0x0, @pid=r4}, @nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x90}]}, @typed={0x8, 0xc2, 0x0, 0x0, @pid}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x1}, 0x2400c044) socket(0x11, 0x800000003, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x20) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3) r8 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r8, 0x454f, 0x5f, 0x0, 0x0, r8, 0x80000001}, 0x6d4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) 3.438318323s ago: executing program 2 (id=974): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) msgsnd$auto(0x5, 0x0, 0x3, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) readv$auto(0x0, 0x0, 0x3) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) mlock$auto(0x3, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) getdents$auto(r0, 0x0, 0x3f1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000340)={'sit0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf251b0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="04000280"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'rose0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pimreg\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000001880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001840)={&(0x7f0000000140)={0x16c8, r3, 0x200, 0x70bd26, 0x1, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0x22c, 0x2, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @u32=0x7fffffff}, @nested={0x21e, 0xb7, 0x0, 0x1, [@generic="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", @generic="f928df924d7948d1e4bdbd0b5bbde8b9", @typed={0x36, 0x47, 0x0, 0x0, @binary="1f8642eb812aa07b97987ab31ed7683c454da5f3711f25c1b6af84fd2d954e605044bc8b33e867955d9c316af079352d9bd6"}, @typed={0xd8, 0x45, 0x0, 0x0, @binary="7d0da8665afd80bc7f3f456edb93d4400ed638def9ca43213288a19dc8ae6652716a95f7558f3102c37bb4dbd4ad67d87f89b414e4c42bf678a2793136270e91f77c1a11f1b09a0394be0b6c9648601ff63323fb9cc929ce2dbcf56e0f445cb2819bd2bc1a94be5d7da59677aaeddaec499c0b3b6c4a84a2b11fb61f4237b9916b5415b59ad3e365f1add4fa3f46378a0a2fe411cea1bca7b65c4451e755224b6f697bd547db8cb74fe16d3edcf4807961aa38c4a1f9ac1a2ac7a4ac7f3e8a31d6b9caecea76e796ba60db2c6c84f8c583c32d85"}]}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x800}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x1403, 0x2, 0x0, 0x1, [@typed={0x8, 0x131, 0x0, 0x0, @str='(@#\x00'}, @nested={0xc, 0xc3, 0x0, 0x1, [@nested={0x4, 0xa1}, @nested={0x4, 0x26}]}, @generic="672c684356a8e1532569fb1b224efa059fd3f648a3c955a0cea3a092ba4fe2e4", @nested={0x10e4, 0x51, 0x0, 0x1, [@nested={0x4, 0x94}, @generic, @typed={0x1004, 0x112, 0x0, 0x0, @binary="6a375a7c1a0d5bc213bb8ddec21acae3cf05d3e4ebd3d3f79978f907278b356c5c77cb183156a7e422b166d722f910a476463f2a54f67ad324c581b50dbfc8d7cbf25574ada1c7856cb94caec9b3bb50d2bea936ddcd8ef27ffc5d1a2fb1b5a15cca7db6c5085d88c5a1eb8b3ecda540226ddbb1a7a1e2741f47f22e753bebc7267a35618d9e060af8f462fd5b0c8d6a9261b3d293245c9d1b2c53e4761039e9a064fca06df32b4b16862774451a611708fb5387f0262f4fd86e58a03de86330cbc37d48107023b1c515f8258b4e030227321f41209e670494563b03cf82ac7c5da2a049111f0ee90e6d4d2423f36ed7f50bc54d33ba4a1fda0a718103a721abbd8192f03071c54cb41f674482e62231864ffb867292afd4f44ae39b70ba96e5f5c1b66de87f91df642fc159261ebf5968f841f4e75e139c5231f6c289a495e26190dafe87d19c114bcfb35ba1565bd413383dd9165fc07da4aef0053f3408d1066d918c9bce7b62edbe4295a439e099b32a6b3a5d7c65a1daacf60ed7ae37211569496768f78250b3fc3b73a7d7e5248bc773e17bb766abb67732ed2f32c558577dd89a684d8437c988b04baafad4666fac965b153bc1e7683c6ff1e31042315ef532f83b57d3764a515d19f3be88df751d56f46f871b9dcbf18c47f5ea85a7cd40f3e10c5ab9a65303da191d32e026f7d37018dec4bbe1f1ab4a2b40ed5675b95cd72bc7d30ebb4ae5faf994efb659f51c2a6eb644057054607587abaf4f66882e304eacdc8dcbf64244e83a43b1de88be16563c8c202499b412a5f1c434d1547209c9b6659c565f6de22b799f69c1e620be88481faae7ca287919f41fc8c60b6db558e67221d439318cb3200a18d7d6da517d5f6ec615dbe6c56a20daa63c117e439c900460875340841808e852ad6754939e5ee3caa71634b1493270aeb016e03c2182423cd2640225fca1eb82981700b4b568f640043327a2dffd5f9c3030ec625c6472c4868854c7aebf8850649f39a6da991eccf3bd3c7fd254de85ae5aab7ee392769113912defe753835518098012860568f8d5d2a7e85129561c808bf473de0b0910d268181f9045a1055e700ce4c851f722e62aa28638e2f71f821d73643adedaf5ca864c8501d5afb27698a76f51ed14e122213245136ae7bf0f81290828764a752f92e6d936995f9c2adc19c03c8301857661d0efe6d39a4a26427811eef90e6c5f06326cfc0017514f1506f427ea9546161e1ccdfc6db6ef0d988d483afdf14d2b449c40ec88df330e3452732afba4a1b2b949030dbc9dcab43d42521a70faf41677c99053a08e44c1e954b9528043c0e18055086530a9bc8905a88c4f84e4592dc276bc4619ddf9505a9c26c0d8c9149e337e639f5df6a965cde8a10fd11c6e7feff9b027a93a021076cd8dfa9bf921488bc41b1e1919dbac95e21b7bd38a9fc15d82f2934cfdbc8b2d214f881accf1780ed80a02a087d26354a3051f1f256d6c3888bc79f66bd794a07467d4c2fa77c1bc12947bec5b567fb68c897baba6ba3425fc4b62454b0db7e2f241e6ec322c66dadd121923efd55586b444871091bccf5c5bca83d58af440436de6c733fe7fc0bf7bb918ac4f7ed97d4555a00478613d58620507401f9578ccafe384c61d15e7e0564231b1bdb088813e1b298f97fa00209c757cad265eb1d4fcca9a3a1ae1bf3ef1e3857269544f2f9eac9fc4a217f9120c08286f488193645726ecbe4bf9341488e0dc20bf1a0bcf9d39b7c5385167dfb7976b87b0a311b9618600f29cc385b3a042e29758eb19f0b2ef103dd7cb864bb1c1bc099cb1f2ac49988471148ed3e8ff62eff3e92ded77907eb4fade5279cdd687ca8bf0ec719dfa7d9f3deb192aa9b85a10587b1a31401e57fa4b540d09efabfae7fe41736000c9128fe4a37b8ddc0e4e75b862cb98ab55d04cf0fc05957ff96d58bb294e45626a7c967e3278e772e294ac7bf40d11b3a8a7c5a229c8050d457d8fc75ec51781ec9742b4e59a83709d7670eeff2e16a2d4d75acf3b4ca7ceb98ddb904de78da1417b9f2a150e5bd00f834817f74ca129e5ebc3a9a67ae8f1abede39cc3b8695623c697350bb83616e00976df5f561a20ac9123dd0c773ed0547569bc54ce4f5d42c8345b66eb0ab1e3c554095164e1530c7cf6fae6b23a4f44f3e271dc1ad46ea9056f53fdb84bdc5316f166c626b79b38991d69ca415149a5467ccdec3988899e50567d0f7d86f83175e5c13456b95a3e094ebbac6b082459df044a5a8b90ffcd18f3f36d9c98ce0ac91401daed08421c44e6198465d910cfa19a7375edf9bafbdeea19e175146e8afc0edf8d8ca2e8678a9cbcec9fb06f2e5b8a175289ad851a7c6abf19ea8518a1c069ea1ede7ca30a6843e96f1ac07fbc00bcbbfcb61108e4bbc48cfca22784e0d2b0ca65a26e41e6c98b31e7e46ab79a9358d30c38900e10ad1ec228673963abc499321b9c35afacc3ca10974910991be7499574d822c904305741f3f35795128626266ddc4f8d796c57cc56660ba7275f727a670338de1ea7b611dca5f12b32c9664bc52c49731a49c9126bf7cb58e47c863ae75a8a0ec125586962fe56da2a81673ce7f80826c256168fce765d3d8f9cfc956446101ae03efbea7e321fa8663b775c35747c43eedd55cbbef3e7498fc7d3b0b3cc9a52daa1b6faa8574ed873bf9483a062658938b0d9c96c5b43eaf65487ffcbff2a9c6506c887d5174868ca3eb3063183cacbdd15c8becd23d9301389beaa5e7edf45b6994ce765fdf6cece31b91e87956267d931acc192922120f2388dda18ab04d9be7d47bea9cf574c4b470e4de01eeb38b6d54f488a2e747ee03b8cf8f8321d2246ee78b0ab1ab9ae0f8cd649c48a7af7a05f00928d9ac11022ed16730dfb7e910919976ddbb2371a2a70776ac7092c1ec9e2505d8bc4969d1916652a042f826d39b17fd5cba20dab625b5be590017b369fe50265e0a1cfaa4f933ebc0a36554beef7b27c7ad9284002e3a64ef9469a1c97d739e19db981639c49ad53760ae225485e3153840ad03b60812d99d76a68d3ecf80a803cfaa1f31fef8c81bd29ec03da8f2de847f2537460db15bc55855a69a6b4c275f3dd3ba148ce890e92c28297e4d108355a65f1e4fa278a989866c1fb8a9cb3d04c3e0dc56f69a42e0c804f5e45c34a8e37a600ac1d01181b67ba946c635a39345d5a3f85a8d65e60d78da406b5209569320f46163f4a26aad674d5288b8ad8e8cb6b9a75aecc47d200d5935fb364ecfc35b51fa2e3d3b87c167c3c655a954a7f524569d2ad834383a257173dcbe8a479c5c5284161b34981c639de2f3004c2161fdc3b2993acf1cfbeb3ca8067f726f5583836e13176b9ab995ac4cfb846c308e385804fa0755d0d513225b8c34ee816878ee5b32c0395727fc07dfd6f12709d4a4f63b4b7e6bb15f461792af845616d7f92d4cc75862b7479c54fae59f01efb5ea42fe2115d707a0266a03aa8a19e41a71286a2ddc02abf830e0571743a9cc72942af81abcdd83d6532b99c9d40975b289b17808404ec4591710a880e1e8cb6ea7a91f701a400e41b9157fa732ce10f4ba5c30ac45bdc90e4a159821b7dde628c0c40599ffdf58429b5ba8cc2d7713de5c13a68a767ebce68633c6c905f267e8e56d612da71add0281a55fae2a253f44fa992b419bcd123a28d8fcd121b312fa73a44097cedab42b3e45c251ea9b56d31d88a4bb56af5b55a39aa6bdf678ab4901a4958cf48eac7a617ebcee84fb39eba1aa0abbf17df24177e50ef9a13ab74db1d2cfeca922d99a1022db7afeee73c3f58fbc61013cc4c166f98190ffaaa410e4e3d245fb44336aacf113da50b6d99d486e432c6b7ac6ac19c823711e1833cfa287523ec8a13a1ca65334dcfa68d20d1f97e1002d966afa7cd06a694a7c1d356ca8e36701185aa6e7d75e5173c06d4a83deff1d21760566975fafdae35a1d5ed87470bd84d6a6e5267393d5323b239c87ef03a812a968debebb1452875a8be7bf287aad14b96f74fb7c28130daee5d248f03f313f28c148bbc87b9551cd6b14e8e2e3a8b781da8b0469444eea885633fed508353a39881b7890ce7b0f69180d8cb4e3917fd3df58bee985dd0cb64bf69afbc2c2b88c40043e37d456333cf05e423ec4e2e029b827b2ebb1cd73e8c7139035f8db21313f4d380315ebb710506187a828f7201e28b00e1ef001035f0037945306e9b185fdc916f9ec9836914501f55d684a724c5fd9ce6554585faf80acbdfdca12681fd93624762a35f4043d87035ae36f7beee5a1121f7feebf51540652a9604bd9c85fe70bd2bcfd636376578d820004e439162bc0ab0a29e4d7648e7732925cc030ded7c57d8ad78efebdb7c78009c075967fbc0a5874e85bfd1d15992730caebe902769593fd0a0bd91d8d7b687049713d7a8a5e2b7fae5362b21561298f2966708014a09c8afc1cc0a12707f47f0814927c2367115cfbf213376421234f5a103cba559c75a28bdf64af3163fc2979dd959ed1b98de5fe7b7271eae76d8060a00263d100bfcce38096e34ab7e0ddc7b5d56c6d82fa64f0771de36dfa2c537f967b73dc4ab4ccf679aea801dc29e00b685e006f47c3d87193708ce6ac001959c8749dc7cedd5ef59316ed328f7dea734531b9f968ffe1191477c82306cfbbe49c40b05caa93a07f99537248fa34ff5b800d230cd81fbd1db43d00cec5c0be7b7fbad52ff3e42c284228970715d9715b0dfa5d753b0a5a754050fbdd4fa8802756e080fc9c64b1cf64693279ce8c8e31e3368ffa4de3e570da6913a16c7a7591bf769401da0df652f870c18a89e1e714001d65b6883471bd37306d29061b9c91a18d712ade7b63e4468dfae69c9bc064137fa1b5c1b498a03ac536f831932d58a2aede4a9a252337cbe6876acddb1637e27a8d783a44fea76bd6dad22fb02617f14de0d50e516564599f1b6022edbdd35365d432b5c081d9bcc5a5330daefc9897b8523ea71c2a0bae83cecf2570e30983709c40b380aad2ee6a2a8d7888490bb4747ee1fc7edba83964e94fcb3fb6dc02c4f0be6b9a94a3de998b169c011ea0e18dd649f6b4b7e3aef93ef62c2e1b20b7df84a395484c7bc7c2d54504effbd97ad73071eb65304e797de7ff282307fc164c91930c1c537120b87f85233ed867fa331d8bcd0ad158d450b091236c7f69dad5a264bce427eb3a6d0f38cd2c3ea744dee52b34131bf0abe4f824a91fdc122821398b735363cfd16393941dcd66bc5d15e63749cecea4794842b250a1ec9e961d293c6619c376aa7dfbf8845d047cb8729f2e04c5411b781cfdd2c6aec84aaa6d6157e65b4d577790f33c936237ce001dbb70a8685c613e5bf7092f3718ca3e268a0bcc9d0aa58e106eb63cb5d1930bf7519d0080642b69c1a4d27e56400ee110e201ec617f52c61cd2e37c2eaf5d5786913b7338911e5276ab67407c1c86fef1fd1e1ddf364b643befeb064587d3a545975380e44def92b50554c2ff53311b24c09961dc8e54c64190febee417a43cd6993c36bc8becd492f169ca229a58751d4fe5ab7a289585e51f8661d1d7ff14a0059658d90c7a13d17415123e773ca1925420358e985c51a7c237dd394732f2a92dd5f03512c82903ed6220abff49e2ed10342b3f3f990d8ce9af2cd6339c153a2f034a6c7ccbf76c0885da6b61048a1e2927628672784bd54603ee633069c81b984fd35a4f93d572878fd863d64b4db1c38d2541089726755428ac5c8fcb791c612420efd"}, @typed={0x8, 0xa5, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x11a}, @generic="05341c5d8e1d18cf5c129f202b33bb9570bf5024dd407a9b9063d14a44f5120942a37ead4df230b155bf94f1b5431964ad42bc73c59bd428ddd1c0b07a59a16cd184d84b7b9af816c2e75b02a692d9504d6cb506a866fa99d7ae8c38be64", @generic="a536dc78ec4db4ba47d028fcea9539aee9554d44ce92689050e17f213d2144f8565dd11da39a6ea6ad5355d8f944c29e243a63380a8990090f903e97cf078dd4f0c8813e9ce2e1d1b9c401e71c79edbe77257a728f6a4d5a21902b5e37f395d3a7e772e6d43f9ef13ca7", @nested={0x4, 0xa4}]}, @generic="90d4be3e581df7927a4ca88eb15d89258d73df4668f4487fe0f9995df9636acc77451230aaffcf0076a735aef08aebe29dc4ba0a94d79e51e1057f8f802107", @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x5}, @nested={0x7a, 0xb5, 0x0, 0x1, [@nested={0x4, 0x100}, @generic="10e0e9fb0d42d1aec18979bf32e97a05ac48c82fd9addc317a10a69083d67e9b2d121c6fa09876fc27dd3597515e0aec2037eafe1813c50b7d5560cd48f3c84e789524de978583f3326d47b762c13ba93537b3865de8289623418c072e67e207ad6721253232b517906cce6145767921df90"]}, @typed={0x8, 0xb6, 0x0, 0x0, @fd=r0}, @nested={0x110, 0x83, 0x0, 0x1, [@generic="ac8d62f7bd7285b0d77f1b8d78730a60f4324d4db37314c7903107168144c8b8cf31ec928547b0e25004ff7959", @typed={0x15, 0x146, 0x0, 0x0, @str='/dev/v4l-subdev6\x00'}, @nested={0x4, 0x8c}, @nested={0x4, 0xd6}, @generic="5c3d3fbd1b2c7ef9cb5edf3ad256fea706f2bfd8ded060b797e707a7a9aa8f199d46241b095f3285965a1d33255426e67bdfe77ff44e460922c418244279cd086535a5", @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@loopback}, @typed={0x15, 0x6, 0x0, 0x0, @str='/dev/v4l-subdev6\x00'}, @typed={0x50, 0xb2, 0x0, 0x0, @binary="bd02af5736fe4cd3d9183c3b0cb7432e4d756db8eace29fc91da74e46d8b6da801f8d3bf6a737c46df39077c53f20d2d454f8fd01835a0e12024c8d09b82944af1610b52c1b69866c8734d4b"}]}, @nested={0x106, 0xc4, 0x0, 0x1, [@generic="bcde57c204525f5f3895eb720d49f66c13ce633f0bb1c96c7ded37d059b51e9549032bfe17db08dd8edbd0ea861f2089a7f2217c052fc5fa8cb42814440ac2bf7c696c215a461b569bce147b59849cf05ed92ce361085c312b8032b8253854ff17c7004006a4f2846abd692d3a09315596d1c469d344b1d15e7dac39fee21da873a61da4d2f9ee104ffcc00cd63804f88cb63cb0c3e60f678709ba8b89a59baabde464f39571b5a5ac8027c29576766dd448cb448105f787c6930c01b740b9000c5d26224aea64dfd08c15b1f27f9b9e8a17a1914abc9150b1dd319711687329f72b5d6255db958b00ae6817901f1417b82989e68f46f323df1e2a3489f4", @nested={0x4, 0x51}]}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x16c8}, 0x1, 0x0, 0x0, 0x10}, 0x4040804) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev6\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) mlockall$auto(0x7) mremap$auto(0x1000, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) 3.342954877s ago: executing program 1 (id=975): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40181, 0x0) write$auto(0x3, 0x0, 0xfdef) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7ffffffffffffffb, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) unshare$auto(0x21) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x3, &(0x7f00000000c0)=0xffffffffffffffff, 0x3a) init_module$auto(0x0, 0x8, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) rseq$auto(0xfffffffffffffffc, 0x1000, 0x4, 0x5) r1 = geteuid() keyctl$auto(0x1e, r1, r1, 0x0, 0x7) fstat$auto(r0, &(0x7f0000000140)={0x8000, 0x0, 0x9, 0xe9e9, 0xee01, 0xffffffffffffffff, 0x0, 0x8, 0x3, 0x6f7, 0x2, 0xffff, 0x6, 0x1, 0x3, 0xa5f, 0x1}) mmap$auto(0x1, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) r3 = socket(0x2, 0x3, 0xa) getsockopt$auto(r3, 0x0, 0x29, 0x0, 0x0) r4 = syz_clone(0x40280500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x4, 0x8000040006) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r5) r6 = getpgrp(0x0) sendmsg$auto_TASKSTATS_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000200)={{0xf, r1, r2, 0x5, 0x2, 0x3, 0x4}, 0x0, 0x0, 0x85, 0x4, 0x8000000000000000, 0x7, 0x4, 0x1, 0x3, 0x301, @inferred=r4, @inferred=r6}) close_range$auto(0x2, 0xa, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x24000000000001) setgroups$auto(0xe32, 0x0) 3.289568053s ago: executing program 0 (id=976): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000030c0)=""/4087, 0x106a) mmap$auto(0x0, 0xb2, 0xe0, 0x100000010, r0, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x9, 0xeb1, r1, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) 3.085216123s ago: executing program 2 (id=977): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r0, r0, 0xc) socket(0x3, 0x3, 0x200) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) timerfd_create$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x182) socket(0x22, 0x2, 0x4) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) socket(0x12, 0x800, 0x400089) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@batch={0x5, 0x8, 0x8, 0x8, 0x9, r1, 0x1, 0xb512}, 0xa3) bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80240, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000081, 0x400, 0x9}]}) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000300)={0x2}) 2.960475955s ago: executing program 3 (id=978): r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_DEST(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7424}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000080}, 0x200000d0) socket(0x21, 0x800, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) r2 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) socketpair$auto(0x1, 0x4, 0x10010000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r2, 0xb1, &(0x7f0000000280), &(0x7f00000002c0)="56339248772210c7d9c88310b7203954838a9653fbfbe4025f174255b6a2d2bdaec3a151c7b2be974755b13db31d8378ded393a46ffb5459e356d453b20228c8d63723de67dc31176f08ac6b74d0a633163456ea762be21dbec26753c8a1e31857d9693c75", 0x2) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/ns/cgroup\x00', 0x2, 0x0) 2.79879207s ago: executing program 2 (id=979): mmap$auto(0x0, 0x400008, 0xdf, 0x7f, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x4, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4008010) shutdown$auto(0x200000003, 0x2) unshare$auto(0x40000080) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0x80006, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @broadcast}, 0x6d) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x401006, 0x4015, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.221040399s ago: executing program 1 (id=980): mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0xffffffffffffffff, 0x40000000000000a) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) r0 = socket(0x10, 0x2, 0x0) (async) clock_getres$auto(0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/platform/drivers/acpi-wmi/uevent\x00', 0x313400, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b62, 0x4) (async) close_range$auto(r0, r1, 0xfffffffc) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r1) (async) close_range$auto(r4, 0xffffffffffffffff, 0xfff) (async) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x5c9802, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) sysfs$auto(0x2, 0x42, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) (async, rerun: 64) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x2}) (async, rerun: 64) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x101, 0x0}) (async, rerun: 64) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x9, &(0x7f0000000000)={0xc, 0xf1, 0xb0, @raw=0x43}}) (async, rerun: 64) r6 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_TUNSETVNETLE(r6, 0x400454dc, &(0x7f00000001c0)=0x9) (async, rerun: 64) socket(0x10, 0x2, 0x0) (rerun: 64) socketpair$auto(0x2, 0x0, 0xfffffffd, 0x0) (async) r7 = socket(0x6, 0x1, 0x1) setsockopt$auto(r7, 0x6, 0x13, 0x0, 0x40) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x54) close_range$auto(0x2, 0x8, 0x0) 2.034502248s ago: executing program 3 (id=981): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) socket(0xa, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f0, 0x24) eventfd$auto(0x3) socketpair$auto(0x809, 0x2, 0x9, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(0x3, 0x80047456, 0x38) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) ioctl$auto(r3, 0x4bfb, 0x1) mmap$auto(0x4, 0x200006, 0x7, 0x15, 0xffffffffffffffff, 0x300000000000) r4 = socket(0xa, 0x3, 0x3a) r5 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080), 0x109c41, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), r0) write$auto(r5, 0x0, 0x5) setsockopt$auto(r4, 0x29, 0x6, 0x0, 0x56b) 1.830218727s ago: executing program 2 (id=982): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2a, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2b, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x7fff, 0x1a000, 0x80000948b, 0x5, 0x8, 0x400000006, 0x100000000003, 0xc, 0x9, 0x3, 0x6, 0x400005, 0x5]}, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000c80)="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", 0x300) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd6/queue/iosched/writes_starved\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000100)='%\x00', 0x38f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x14) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x156) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x10, 0x2, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) getresgid$auto(0x0, 0x0, 0x0) madvise$auto(0x0, 0x200000003, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) memfd_create$auto(0x0, 0x6) socket(0x10, 0x2, 0x14) 1.644864211s ago: executing program 2 (id=983): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x7ef3837b7e67005, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptybc\x00', 0x80, 0x0) (async) fstat$auto(0x2, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x5402, r0) (async) r2 = userfaultfd$auto(0x1) ioctl$auto_TUNSETOFFLOAD2(r2, 0x400454d0, &(0x7f0000000000)=0x19) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) socket(0x2, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) socket(0xb, 0x0, 0x73) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) (async) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) (async) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1fe, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x2, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x8, 0xdffffffffffffffe]}, 0x0) 1.391611152s ago: executing program 1 (id=984): mmap$auto(0x3fffffffe000, 0x400005, 0x1, 0x3132, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) fsopen$auto(&(0x7f0000000000)='+,%)$\x1e\x00', 0x1) mmap$auto(0x3fffffffe000, 0x400005, 0x7fffffffffffffff, 0x3132, r0, 0x0) 677.931511ms ago: executing program 2 (id=985): sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2000, 0x0) ioctl$auto_MEMISLOCKED(r0, 0x80084d17, 0x0) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000008000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) connect$auto(0x3, 0x0, 0x55) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1, 0x2, 0x7, 0x0) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x12c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x2}, @ETHTOOL_A_RSS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RSS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10001}]}, @ETHTOOL_A_RSS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa00}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x7}, @ETHTOOL_A_RSS_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}]}, @ETHTOOL_A_RSS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdd7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) r3 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) r4 = open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) write$auto(r4, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000140)="8506e23764434357f8ddc088c043178064f3016295bac88d9264c108282f55955236174d8f051535e208cfcf50a1d779239bf384451307c0d1adc19fcc7683abac05caed2e8f7a3a7fcda3e78bbacd6a84e758cc676476160aff59434a8063aabc042359f05fbc5f89d70612a6d1044789d88de3c223a01de7b6c5005850669957584e24388a077ac82acb3b0a2d49ecc6176be6ff11cc6b", 0xa) read$auto_proc_sessionid_operations_base(r4, &(0x7f0000000000)=""/124, 0x7c) open(0x0, 0x22240, 0x155) socket(0x9, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000060) 462.955722ms ago: executing program 1 (id=986): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0x7, 0xdd4, 0x9}, 0x8000000000000002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) read$auto(0x3, 0x0, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) setsockopt$auto_SO_BUSY_POLL(r1, 0xfff, 0x2e, 0x0, 0x10001) sendfile$auto(r1, r1, 0x0, 0x3) landlock_add_rule$auto(r0, 0x2, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x200005, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x80, 0x0, 0x0, 0x400000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach={0xffffffffffffffff}, 0x26) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f0000000240)=""/4096, 0x1000) madvise$auto(0x110c230000, 0x8031ca, 0x9) 219.897396ms ago: executing program 3 (id=987): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000001, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x7, 0x2, 0x9, 0x5, 0x1, 0x7, 0xb3, 0xc, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r1 = socket(0x2, 0x1, 0x0) r2 = getsockopt$auto(r1, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x565) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f0000000000)=""/34, 0x22) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/pm_debug_messages\x00', 0xa0440, 0x0) r5 = socket(0x11, 0x3, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r6 = socket(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) bpf$auto(0x7, &(0x7f0000000000)=@query={@target_ifindex=r7, 0x80000002, 0xc6c3, 0xa24, 0x8000010002, @count=0x42, 0x0, 0x9, 0x9, 0x0, 0x3}, 0xa3) sendmmsg$auto(r5, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/64, 0x40) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r2) sendmsg$auto_NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x1a0, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SAR_SPEC={0x154, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8001}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x8001}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x80000000}, @NL80211_SAR_ATTR_SPECS={0xb4, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4404}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x22e}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3e}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xede8}, @NL80211_SAR_ATTR_SPECS={0x4c, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7f}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x401}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6da}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xa}]}, @NL80211_ATTR_FILS_KEK={0x2d, 0xf2, "f3e73dc66ba0353bf41422499169da2048683e2e7cbfa222b2faf3d8505f00ebb76cbb430f4e541213"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x3}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000004}, 0x49800) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/timestamp_mode\x00', 0x200000, 0x0) sendfile$auto(r3, r3, 0x0, 0x4932462d) 0s ago: executing program 0 (id=988): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x0) (async, rerun: 32) bind$auto(0x3, 0x0, 0x6a) (async, rerun: 32) r0 = io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) write$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000)="4992fe4b6bba19eb5980cd66002210315f4d86ea716c4b5c7caca21eb316564daaa5a3756b10f0922219017c8afefc4570760ffe1bf71443a456a9cdc20572442dabb49f745f2f8fa794aa4adf89a06188720700accfdd64dacc36830d5be75f4a37bd5baa2fc2d1f325dfe862d1d3f3ebb84b37c1804a2127e74d822336ede3be03a08d5bd6dd90c8b452bcd836fcaafbb940e9be1ccbcb6635ed821c869670c911a4a734514a291db2cdd01abdee847073f9a5623036771d5a3cb8a5b3054533d9ff5c6e482583563146b7529fb6e7be54c806d51ed8701734d5f113b6eeb4e50370239e2ebc13a92f", 0xea) (async) socket(0xa, 0x5, 0x0) (async, rerun: 32) shutdown$auto(0x200000003, 0x2) (rerun: 32) kernel console output (not intermixed with test programs): ess accounting resumed [ 183.253770][ T5877] Process accounting resumed [ 183.371589][ T7208] Process accounting resumed [ 184.093355][ T7244] sd 0:0:1:0: PR command failed: 1026 [ 184.099585][ T7244] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 184.142720][ T7244] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 184.437224][ T7251] FAULT_INJECTION: forcing a failure. [ 184.437224][ T7251] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 184.522049][ T7251] CPU: 1 UID: 0 PID: 7251 Comm: syz.0.252 Not tainted syzkaller #0 PREEMPT(full) [ 184.522104][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.522124][ T7251] Call Trace: [ 184.522136][ T7251] [ 184.522151][ T7251] dump_stack_lvl+0x16c/0x1f0 [ 184.522221][ T7251] should_fail_ex+0x512/0x640 [ 184.522294][ T7251] _copy_from_user+0x2e/0xd0 [ 184.522348][ T7251] memdup_user+0x6b/0xe0 [ 184.522387][ T7251] __x64_sys_kexec_load+0x18e/0x230 [ 184.522428][ T7251] do_syscall_64+0xcd/0xfa0 [ 184.522471][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.522504][ T7251] RIP: 0033:0x7fbe26b8f7c9 [ 184.522530][ T7251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.522560][ T7251] RSP: 002b:00007fbe279b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 184.522591][ T7251] RAX: ffffffffffffffda RBX: 00007fbe26de5fa0 RCX: 00007fbe26b8f7c9 [ 184.522611][ T7251] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 184.522629][ T7251] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 184.522648][ T7251] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 184.522666][ T7251] R13: 00007fbe26de6038 R14: 00007fbe26de5fa0 R15: 00007fff20f850f8 [ 184.522709][ T7251] [ 185.190092][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 185.863303][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 186.074334][ T7272] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 186.414065][ T7274] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 187.979220][ T7285] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 188.397240][ T7291] Console: switching to colour VGA+ 80x25 [ 188.478517][ T7289] vivid-003: ================= START STATUS ================= [ 188.556848][ T7289] vivid-003: Radio HW Seek Mode: Bounded [ 188.642453][ T7289] vivid-003: Radio Programmable HW Seek: false [ 188.694707][ T7289] vivid-003: RDS Rx I/O Mode: Block I/O [ 188.694771][ T7289] vivid-003: Generate RBDS Instead of RDS: false [ 188.694808][ T7289] vivid-003: RDS Reception: true [ 188.694842][ T7289] vivid-003: RDS Program Type: 0 inactive [ 188.694886][ T7289] vivid-003: RDS PS Name: inactive [ 188.694934][ T7289] vivid-003: RDS Radio Text: inactive [ 188.694975][ T7289] vivid-003: RDS Traffic Announcement: false inactive [ 188.695018][ T7289] vivid-003: RDS Traffic Program: false inactive [ 188.695060][ T7289] vivid-003: RDS Music: false inactive [ 188.695103][ T7289] vivid-003: ================== END STATUS ================== [ 188.890623][ T7295] Console: switching to colour frame buffer device 128x48 [ 189.796780][ T7313] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 191.622939][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 193.067111][ T30] audit: type=1800 audit(1764452457.605:4): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.268" name="version" dev="configfs" ino=15136 res=0 errno=0 [ 193.450277][ T7347] FAULT_INJECTION: forcing a failure. [ 193.450277][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 193.502031][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT(full) [ 193.502073][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.502092][ T7347] Call Trace: [ 193.502102][ T7347] [ 193.502113][ T7347] dump_stack_lvl+0x16c/0x1f0 [ 193.502161][ T7347] should_fail_ex+0x512/0x640 [ 193.502210][ T7347] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 193.502248][ T7347] should_failslab+0xc2/0x120 [ 193.502306][ T7347] kmem_cache_alloc_noprof+0x75/0x6e0 [ 193.502338][ T7347] ? __proc_create+0x2ce/0x8e0 [ 193.502394][ T7347] ? __proc_create+0x2ce/0x8e0 [ 193.502439][ T7347] __proc_create+0x2ce/0x8e0 [ 193.502495][ T7347] ? __pfx___proc_create+0x10/0x10 [ 193.502542][ T7347] ? __lock_acquire+0x622/0x1c90 [ 193.502592][ T7347] proc_create_reg+0x7d/0x180 [ 193.502643][ T7347] proc_create_net_data+0x8e/0x1c0 [ 193.502696][ T7347] ? __pfx_proc_create_net_data+0x10/0x10 [ 193.502760][ T7347] ? __pfx_pfkey_net_init+0x10/0x10 [ 193.502798][ T7347] pfkey_net_init+0xc4/0x100 [ 193.502836][ T7347] ops_init+0x1e2/0x5f0 [ 193.502876][ T7347] setup_net+0x100/0x390 [ 193.502910][ T7347] ? __pfx_setup_net+0x10/0x10 [ 193.502945][ T7347] ? debug_mutex_init+0x37/0x70 [ 193.502985][ T7347] copy_net_ns+0x2f8/0x690 [ 193.503027][ T7347] create_new_namespaces+0x3ea/0xa90 [ 193.503074][ T7347] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 193.503115][ T7347] ksys_unshare+0x45b/0xa40 [ 193.503160][ T7347] ? __pfx_ksys_unshare+0x10/0x10 [ 193.503203][ T7347] ? xfd_validate_state+0x61/0x180 [ 193.503283][ T7347] __x64_sys_unshare+0x31/0x40 [ 193.503334][ T7347] do_syscall_64+0xcd/0xfa0 [ 193.503378][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.503410][ T7347] RIP: 0033:0x7f1887b8f7c9 [ 193.503436][ T7347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.503467][ T7347] RSP: 002b:00007f18889d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 193.503498][ T7347] RAX: ffffffffffffffda RBX: 00007f1887de5fa0 RCX: 00007f1887b8f7c9 [ 193.503518][ T7347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 193.503536][ T7347] RBP: 00007f1887c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.503553][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.503569][ T7347] R13: 00007f1887de6038 R14: 00007f1887de5fa0 R15: 00007ffd79f2e8f8 [ 193.503613][ T7347] [ 194.871580][ T7360] FAULT_INJECTION: forcing a failure. [ 194.871580][ T7360] name failslab, interval 1, probability 0, space 0, times 0 [ 195.104176][ T7360] CPU: 0 UID: 5 PID: 7360 Comm: syz.2.273 Not tainted syzkaller #0 PREEMPT(full) [ 195.104223][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.104244][ T7360] Call Trace: [ 195.104254][ T7360] [ 195.104268][ T7360] dump_stack_lvl+0x16c/0x1f0 [ 195.104315][ T7360] should_fail_ex+0x512/0x640 [ 195.104365][ T7360] ? __kmalloc_noprof+0xca/0x880 [ 195.104410][ T7360] should_failslab+0xc2/0x120 [ 195.104456][ T7360] __kmalloc_noprof+0xdd/0x880 [ 195.104484][ T7360] ? fib_rules_register+0x403/0x500 [ 195.104519][ T7360] ? fib_default_rule_add+0x4f/0x420 [ 195.104560][ T7360] ? fib_default_rule_add+0x4f/0x420 [ 195.104597][ T7360] fib_default_rule_add+0x4f/0x420 [ 195.104638][ T7360] fib4_rules_init+0x7c/0x1c0 [ 195.104689][ T7360] fib_net_init+0x1dc/0x3f0 [ 195.104727][ T7360] ? __pfx___register_sysctl_table+0x10/0x10 [ 195.104780][ T7360] ? __pfx_fib_net_init+0x10/0x10 [ 195.104819][ T7360] ? lockdep_init_map_type+0x5c/0x280 [ 195.104866][ T7360] ? do_init_timer+0xc9/0x110 [ 195.104906][ T7360] ? devinet_init_net+0x5c2/0x910 [ 195.104955][ T7360] ? __pfx_fib_net_init+0x10/0x10 [ 195.105014][ T7360] ops_init+0x1e2/0x5f0 [ 195.105053][ T7360] setup_net+0x100/0x390 [ 195.105087][ T7360] ? __pfx_setup_net+0x10/0x10 [ 195.105134][ T7360] ? debug_mutex_init+0x37/0x70 [ 195.105170][ T7360] copy_net_ns+0x2f8/0x690 [ 195.105207][ T7360] create_new_namespaces+0x3ea/0xa90 [ 195.105255][ T7360] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 195.105299][ T7360] ksys_unshare+0x45b/0xa40 [ 195.105342][ T7360] ? __pfx_ksys_unshare+0x10/0x10 [ 195.105394][ T7360] ? xfd_validate_state+0x61/0x180 [ 195.105453][ T7360] __x64_sys_unshare+0x31/0x40 [ 195.105496][ T7360] do_syscall_64+0xcd/0xfa0 [ 195.105541][ T7360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.105572][ T7360] RIP: 0033:0x7f1887b8f7c9 [ 195.105600][ T7360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.105631][ T7360] RSP: 002b:00007f18889d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 195.105663][ T7360] RAX: ffffffffffffffda RBX: 00007f1887de5fa0 RCX: 00007f1887b8f7c9 [ 195.105684][ T7360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 195.105759][ T7360] RBP: 00007f1887c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 195.105778][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.105797][ T7360] R13: 00007f1887de6038 R14: 00007f1887de5fa0 R15: 00007ffd79f2e8f8 [ 195.105844][ T7360] [ 195.415591][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.447944][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 196.514245][ T7377] netlink: 217 bytes leftover after parsing attributes in process `syz.2.275'. [ 197.115844][ T7389] zswap: compressor not available [ 197.960461][ T7413] netlink: 334 bytes leftover after parsing attributes in process `syz.2.282'. [ 199.186543][ T7430] input: jJǸ-9%vJ86 as /devices/virtual/input/input14 [ 200.414302][ T7436] FAULT_INJECTION: forcing a failure. [ 200.414302][ T7436] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 200.428291][ T7436] CPU: 1 UID: 0 PID: 7436 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(full) [ 200.428333][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.428352][ T7436] Call Trace: [ 200.428364][ T7436] [ 200.428379][ T7436] dump_stack_lvl+0x16c/0x1f0 [ 200.428426][ T7436] should_fail_ex+0x512/0x640 [ 200.428481][ T7436] should_fail_alloc_page+0xe7/0x130 [ 200.428528][ T7436] prepare_alloc_pages+0x3c2/0x610 [ 200.428570][ T7436] ? find_held_lock+0x2b/0x80 [ 200.428605][ T7436] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 200.428641][ T7436] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 200.428678][ T7436] ? is_bpf_text_address+0x94/0x1a0 [ 200.428737][ T7436] ? kernel_text_address+0x8d/0x100 [ 200.428768][ T7436] ? __kernel_text_address+0xd/0x40 [ 200.428794][ T7436] ? unwind_get_return_address+0x59/0xa0 [ 200.428830][ T7436] ? arch_stack_walk+0xa6/0x100 [ 200.428867][ T7436] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 200.428919][ T7436] ? stack_depot_save_flags+0x29/0x9c0 [ 200.428966][ T7436] ? __pfx_stack_trace_save+0x10/0x10 [ 200.429009][ T7436] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.429065][ T7436] ? policy_nodemask+0xea/0x4e0 [ 200.429111][ T7436] alloc_pages_mpol+0x1fb/0x550 [ 200.429166][ T7436] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 200.429215][ T7436] alloc_pages_noprof+0x131/0x390 [ 200.429255][ T7436] kimage_alloc_pages+0x74/0x350 [ 200.429287][ T7436] kimage_alloc_control_pages+0x153/0xa00 [ 200.429326][ T7436] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 200.429366][ T7436] do_kexec_load+0x478/0x8a0 [ 200.429399][ T7436] ? __pfx_do_kexec_load+0x10/0x10 [ 200.429433][ T7436] ? _copy_from_user+0x59/0xd0 [ 200.429481][ T7436] __x64_sys_kexec_load+0x1bf/0x230 [ 200.429515][ T7436] do_syscall_64+0xcd/0xfa0 [ 200.429551][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.429578][ T7436] RIP: 0033:0x7fbe26b8f7c9 [ 200.429602][ T7436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.429629][ T7436] RSP: 002b:00007fbe279b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 200.429655][ T7436] RAX: ffffffffffffffda RBX: 00007fbe26de5fa0 RCX: 00007fbe26b8f7c9 [ 200.429672][ T7436] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 200.429688][ T7436] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.429704][ T7436] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 200.429720][ T7436] R13: 00007fbe26de6038 R14: 00007fbe26de5fa0 R15: 00007fff20f850f8 [ 200.429761][ T7436] [ 200.429781][ T7436] kexec: Could not allocate control_code_buffer [ 201.076714][ T7440] synth uevent: /module/orangefs: unknown uevent action string [ 201.097674][ T7443] sg_read: process 329 (syz.2.288) changed security contexts after opening file descriptor, this is not allowed. [ 201.531375][ T7453] usb usb36: usbfs: interface 0 claimed by hub while 'syz.1.292' sets config #6 [ 202.205219][ T7460] netlink: 504 bytes leftover after parsing attributes in process `syz.0.293'. [ 202.566637][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 202.913186][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 202.961251][ T7469] FAULT_INJECTION: forcing a failure. [ 202.961251][ T7469] name failslab, interval 1, probability 0, space 0, times 0 [ 203.053737][ T7452] ovs_: entered promiscuous mode [ 203.113264][ T7469] CPU: 0 UID: 0 PID: 7469 Comm: syz.3.295 Not tainted syzkaller #0 PREEMPT(full) [ 203.113308][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.113327][ T7469] Call Trace: [ 203.113337][ T7469] [ 203.113350][ T7469] dump_stack_lvl+0x16c/0x1f0 [ 203.113396][ T7469] should_fail_ex+0x512/0x640 [ 203.113446][ T7469] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 203.113487][ T7469] should_failslab+0xc2/0x120 [ 203.113533][ T7469] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 203.113570][ T7469] ? __d_alloc+0x32/0xae0 [ 203.113616][ T7469] ? __d_alloc+0x32/0xae0 [ 203.113651][ T7469] __d_alloc+0x32/0xae0 [ 203.113696][ T7469] ? stack_trace_save+0x8e/0xc0 [ 203.113739][ T7469] d_alloc_parallel+0x111/0x1510 [ 203.113792][ T7469] ? __lock_acquire+0xb8a/0x1c90 [ 203.113847][ T7469] ? __pfx_d_alloc_parallel+0x10/0x10 [ 203.113895][ T7469] ? __lock_acquire+0xb8a/0x1c90 [ 203.113944][ T7469] ? lockdep_init_map_type+0x5c/0x280 [ 203.114005][ T7469] ? lockdep_init_map_type+0x5c/0x280 [ 203.114059][ T7469] __lookup_slow+0x193/0x460 [ 203.114110][ T7469] ? __pfx___lookup_slow+0x10/0x10 [ 203.114186][ T7469] ? lookup_fast+0x156/0x610 [ 203.114214][ T7469] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 203.114264][ T7469] walk_component+0x353/0x5b0 [ 203.114301][ T7469] link_path_walk+0x627/0xe20 [ 203.114349][ T7469] path_openat+0x1b0/0x2cb0 [ 203.114402][ T7469] ? __pfx_path_openat+0x10/0x10 [ 203.114442][ T7469] ? __lock_acquire+0xb8a/0x1c90 [ 203.114490][ T7469] do_filp_open+0x20b/0x470 [ 203.114528][ T7469] ? __pfx_do_filp_open+0x10/0x10 [ 203.114599][ T7469] ? alloc_fd+0x471/0x7d0 [ 203.114654][ T7469] do_sys_openat2+0x11b/0x1d0 [ 203.114715][ T7469] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.114782][ T7469] __x64_sys_openat+0x174/0x210 [ 203.114835][ T7469] ? __pfx___x64_sys_openat+0x10/0x10 [ 203.114904][ T7469] do_syscall_64+0xcd/0xfa0 [ 203.114947][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.114981][ T7469] RIP: 0033:0x7f2fe298f7c9 [ 203.115008][ T7469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.115039][ T7469] RSP: 002b:00007f2fe3898038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.115070][ T7469] RAX: ffffffffffffffda RBX: 00007f2fe2be6090 RCX: 00007f2fe298f7c9 [ 203.115091][ T7469] RDX: 0000000000000401 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 203.115111][ T7469] RBP: 00007f2fe2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 203.115130][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.115149][ T7469] R13: 00007f2fe2be6128 R14: 00007f2fe2be6090 R15: 00007ffd208d8fd8 [ 203.115193][ T7469] [ 203.506937][ T7475] FAULT_INJECTION: forcing a failure. [ 203.506937][ T7475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.524182][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.0.296 Not tainted syzkaller #0 PREEMPT(full) [ 203.524222][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.524260][ T7475] Call Trace: [ 203.524273][ T7475] [ 203.524285][ T7475] dump_stack_lvl+0x16c/0x1f0 [ 203.524330][ T7475] should_fail_ex+0x512/0x640 [ 203.524387][ T7475] _copy_from_user+0x2e/0xd0 [ 203.524444][ T7475] memdup_user+0x6b/0xe0 [ 203.524492][ T7475] __x64_sys_kexec_load+0x18e/0x230 [ 203.524537][ T7475] do_syscall_64+0xcd/0xfa0 [ 203.524582][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.524615][ T7475] RIP: 0033:0x7fbe26b8f7c9 [ 203.524641][ T7475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.524673][ T7475] RSP: 002b:00007fbe279b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 203.524705][ T7475] RAX: ffffffffffffffda RBX: 00007fbe26de5fa0 RCX: 00007fbe26b8f7c9 [ 203.524725][ T7475] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 203.524744][ T7475] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 203.524763][ T7475] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 203.524781][ T7475] R13: 00007fbe26de6038 R14: 00007fbe26de5fa0 R15: 00007fff20f850f8 [ 203.524824][ T7475] [ 204.707619][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.715432][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.776679][ T5839] Bluetooth: hci1: unexpected event 0x04 length: 435 > 10 [ 204.776932][ T5839] Bluetooth: hci1: connection err: -111 [ 205.815764][ T7494] futex_wake_op: syz.0.297 tries to shift op by -2048; fix this program [ 208.514674][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 212.513354][ T7594] FAULT_INJECTION: forcing a failure. [ 212.513354][ T7594] name failslab, interval 1, probability 0, space 0, times 0 [ 212.622400][ T7594] CPU: 1 UID: 0 PID: 7594 Comm: syz.2.324 Not tainted syzkaller #0 PREEMPT(full) [ 212.622445][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.622464][ T7594] Call Trace: [ 212.622476][ T7594] [ 212.622488][ T7594] dump_stack_lvl+0x16c/0x1f0 [ 212.622537][ T7594] should_fail_ex+0x512/0x640 [ 212.622584][ T7594] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 212.622622][ T7594] ? __pfx_filemap_map_pages+0x10/0x10 [ 212.622663][ T7594] should_failslab+0xc2/0x120 [ 212.622708][ T7594] kmem_cache_alloc_noprof+0x75/0x6e0 [ 212.622744][ T7594] ? __anon_vma_prepare+0x344/0x5e0 [ 212.622802][ T7594] ? __pfx_filemap_map_pages+0x10/0x10 [ 212.622833][ T7594] ? __anon_vma_prepare+0x344/0x5e0 [ 212.622882][ T7594] ? __pfx_filemap_map_pages+0x10/0x10 [ 212.622911][ T7594] __anon_vma_prepare+0x344/0x5e0 [ 212.622967][ T7594] ? __pfx_filemap_map_pages+0x10/0x10 [ 212.622997][ T7594] __vmf_anon_prepare+0x11c/0x240 [ 212.623044][ T7594] do_pte_missing+0x8cd/0x3ba0 [ 212.623098][ T7594] ? find_held_lock+0x2b/0x80 [ 212.623134][ T7594] ? __handle_mm_fault+0x1529/0x2aa0 [ 212.623191][ T7594] __handle_mm_fault+0x1556/0x2aa0 [ 212.623255][ T7594] ? __pfx___handle_mm_fault+0x10/0x10 [ 212.623309][ T7594] ? __pte_offset_map_lock+0x174/0x310 [ 212.623351][ T7594] ? find_held_lock+0x2b/0x80 [ 212.623396][ T7594] ? follow_page_pte+0x5cf/0x1390 [ 212.623495][ T7594] handle_mm_fault+0x589/0xd10 [ 212.623561][ T7594] __get_user_pages+0x54e/0x3530 [ 212.623627][ T7594] ? __pfx___get_user_pages+0x10/0x10 [ 212.623698][ T7594] populate_vma_page_range+0x267/0x3f0 [ 212.623753][ T7594] ? __pfx_populate_vma_page_range+0x10/0x10 [ 212.623799][ T7594] ? __pfx_find_vma_intersection+0x10/0x10 [ 212.623844][ T7594] ? do_mmap+0x69c/0x1210 [ 212.623893][ T7594] __mm_populate+0x1d8/0x380 [ 212.623943][ T7594] ? __pfx___mm_populate+0x10/0x10 [ 212.623993][ T7594] ? up_write+0x1b2/0x520 [ 212.624047][ T7594] vm_mmap_pgoff+0x37f/0x470 [ 212.624095][ T7594] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 212.624145][ T7594] ? __fget_files+0x20e/0x3c0 [ 212.624189][ T7594] ksys_mmap_pgoff+0x32c/0x5c0 [ 212.624230][ T7594] ? __pfx_ksys_write+0x10/0x10 [ 212.624273][ T7594] __x64_sys_mmap+0x125/0x190 [ 212.624328][ T7594] do_syscall_64+0xcd/0xfa0 [ 212.624371][ T7594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.624406][ T7594] RIP: 0033:0x7f1887b8f7c9 [ 212.624433][ T7594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.624464][ T7594] RSP: 002b:00007f18889d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 212.624496][ T7594] RAX: ffffffffffffffda RBX: 00007f1887de5fa0 RCX: 00007f1887b8f7c9 [ 212.624518][ T7594] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 212.624536][ T7594] RBP: 00007f1887c13f91 R08: 0000000000000003 R09: 0000000000008000 [ 212.624555][ T7594] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 212.624572][ T7594] R13: 00007f1887de6038 R14: 00007f1887de5fa0 R15: 00007ffd79f2e8f8 [ 212.624616][ T7594] [ 213.692546][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 213.967395][ T7591] Process accounting paused [ 216.359453][ T7643] FAULT_INJECTION: forcing a failure. [ 216.359453][ T7643] name failslab, interval 1, probability 0, space 0, times 0 [ 216.398077][ T7643] CPU: 1 UID: 0 PID: 7643 Comm: syz.0.334 Not tainted syzkaller #0 PREEMPT(full) [ 216.398123][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.398143][ T7643] Call Trace: [ 216.398154][ T7643] [ 216.398168][ T7643] dump_stack_lvl+0x16c/0x1f0 [ 216.398214][ T7643] should_fail_ex+0x512/0x640 [ 216.398263][ T7643] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 216.398319][ T7643] should_failslab+0xc2/0x120 [ 216.398364][ T7643] __kvmalloc_node_noprof+0x141/0x9c0 [ 216.398407][ T7643] ? pidlist_array_load+0x12e/0x9d0 [ 216.398446][ T7643] ? mark_held_locks+0x49/0x80 [ 216.398499][ T7643] ? pidlist_array_load+0x12e/0x9d0 [ 216.398546][ T7643] pidlist_array_load+0x12e/0x9d0 [ 216.398595][ T7643] ? __pfx_pidlist_array_load+0x10/0x10 [ 216.398636][ T7643] ? __pfx___mutex_lock+0x10/0x10 [ 216.398695][ T7643] ? kernfs_root+0xf8/0x2a0 [ 216.398745][ T7643] cgroup_pidlist_start+0x3a3/0x4f0 [ 216.398792][ T7643] ? __pfx_cgroup_seqfile_start+0x10/0x10 [ 216.398839][ T7643] kernfs_seq_start+0x133/0x2a0 [ 216.398875][ T7643] seq_read_iter+0x2c1/0x12d0 [ 216.398947][ T7643] kernfs_fop_read_iter+0x46c/0x610 [ 216.398981][ T7643] ? rw_verify_area+0xcf/0x6c0 [ 216.399018][ T7643] vfs_read+0x8bf/0xcf0 [ 216.399061][ T7643] ? __pfx___mutex_lock+0x10/0x10 [ 216.399104][ T7643] ? __pfx_vfs_read+0x10/0x10 [ 216.399170][ T7643] ksys_read+0x12a/0x250 [ 216.399205][ T7643] ? __pfx_ksys_read+0x10/0x10 [ 216.399255][ T7643] do_syscall_64+0xcd/0xfa0 [ 216.399316][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.399351][ T7643] RIP: 0033:0x7fbe26b8f7c9 [ 216.399378][ T7643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.399408][ T7643] RSP: 002b:00007fbe279b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.399439][ T7643] RAX: ffffffffffffffda RBX: 00007fbe26de5fa0 RCX: 00007fbe26b8f7c9 [ 216.399460][ T7643] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 216.399478][ T7643] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 216.399497][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.399515][ T7643] R13: 00007fbe26de6038 R14: 00007fbe26de5fa0 R15: 00007fff20f850f8 [ 216.399561][ T7643] [ 216.704033][ T7652] [U]  [ 217.066280][ T7628] delete_channel: no stack [ 217.081226][ T7628] delete_channel: no stack [ 217.099153][ T7628] delete_channel: no stack [ 217.119795][ T7628] delete_channel: no stack [ 217.127168][ T7628] delete_channel: no stack [ 217.133466][ T7628] delete_channel: no stack [ 217.139531][ T7628] delete_channel: no stack [ 217.146469][ T7628] delete_channel: no stack [ 217.153205][ T7628] delete_channel: no stack [ 217.159499][ T7628] delete_channel: no stack [ 217.168056][ T7628] delete_channel: no stack [ 217.169357][ T7662] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 217.204554][ T7628] delete_channel: no stack [ 217.273212][ T7628] delete_channel: no stack [ 217.317235][ T7628] delete_channel: no stack [ 217.355829][ T7628] delete_channel: no stack [ 217.375864][ T7628] delete_channel: no stack [ 217.396261][ T7628] delete_channel: no stack [ 217.411825][ T7628] delete_channel: no stack [ 217.422033][ T7628] delete_channel: no stack [ 217.436414][ T7628] delete_channel: no stack [ 217.453367][ T7628] delete_channel: no stack [ 217.459066][ T7628] delete_channel: no stack [ 217.485858][ T7628] delete_channel: no stack [ 217.494662][ T7628] delete_channel: no stack [ 217.509792][ T7628] delete_channel: no stack [ 217.517932][ T7628] delete_channel: no stack [ 217.532905][ T7628] delete_channel: no stack [ 217.552063][ T7628] delete_channel: no stack [ 217.567955][ T7628] delete_channel: no stack [ 217.580921][ T7628] delete_channel: no stack [ 217.595458][ T7671] netlink: 342 bytes leftover after parsing attributes in process `syz.1.340'. [ 217.612754][ T7628] delete_channel: no stack [ 217.620122][ T7628] delete_channel: no stack [ 217.633368][ T7628] delete_channel: no stack [ 217.709490][ T7628] delete_channel: no stack [ 217.782667][ T7628] delete_channel: no stack [ 217.788025][ T7628] delete_channel: no stack [ 217.818040][ T7628] delete_channel: no stack [ 218.095732][ T7628] delete_channel: no stack [ 218.112722][ T7628] delete_channel: no stack [ 218.119694][ T7628] delete_channel: no stack [ 218.164012][ T7628] delete_channel: no stack [ 218.187365][ T7628] delete_channel: no stack [ 218.228545][ T7628] delete_channel: no stack [ 218.251585][ T7628] delete_channel: no stack [ 218.305105][ T7628] delete_channel: no stack [ 218.317592][ T7628] delete_channel: no stack [ 218.323101][ T7628] delete_channel: no stack [ 218.332058][ T7628] delete_channel: no stack [ 218.341292][ T7628] delete_channel: no stack [ 218.349654][ T7628] delete_channel: no stack [ 218.359221][ T7628] delete_channel: no stack [ 218.403125][ T7628] delete_channel: no stack [ 218.441678][ T7628] delete_channel: no stack [ 218.451667][ T7628] delete_channel: no stack [ 218.493669][ T7628] delete_channel: no stack [ 218.498522][ T7628] delete_channel: no stack [ 218.574507][ T7628] delete_channel: no stack [ 218.612711][ T7628] delete_channel: no stack [ 218.632107][ T7628] delete_channel: no stack [ 218.639416][ T7628] delete_channel: no stack [ 218.658688][ T7628] delete_channel: no stack [ 218.707318][ T7628] delete_channel: no stack [ 218.707917][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 218.713909][ T7628] delete_channel: no stack [ 218.732838][ T7628] delete_channel: no stack [ 218.738014][ T7628] delete_channel: no stack [ 220.141189][ T7715] FAULT_INJECTION: forcing a failure. [ 220.141189][ T7715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.211127][ T7715] CPU: 0 UID: 0 PID: 7715 Comm: syz.0.349 Not tainted syzkaller #0 PREEMPT(full) [ 220.211173][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.211191][ T7715] Call Trace: [ 220.211202][ T7715] [ 220.211215][ T7715] dump_stack_lvl+0x16c/0x1f0 [ 220.211262][ T7715] should_fail_ex+0x512/0x640 [ 220.211320][ T7715] _copy_from_user+0x2e/0xd0 [ 220.211374][ T7715] memdup_user+0x6b/0xe0 [ 220.211411][ T7715] __x64_sys_kexec_load+0x18e/0x230 [ 220.211454][ T7715] do_syscall_64+0xcd/0xfa0 [ 220.211496][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.211529][ T7715] RIP: 0033:0x7fbe26b8f7c9 [ 220.211555][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.211587][ T7715] RSP: 002b:00007fbe279b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 220.211619][ T7715] RAX: ffffffffffffffda RBX: 00007fbe26de5fa0 RCX: 00007fbe26b8f7c9 [ 220.211639][ T7715] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 220.211659][ T7715] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 220.211677][ T7715] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 220.211696][ T7715] R13: 00007fbe26de6038 R14: 00007fbe26de5fa0 R15: 00007fff20f850f8 [ 220.211741][ T7715] [ 220.984096][ T7730] capability: warning: `syz.2.353' uses 32-bit capabilities (legacy support in use) [ 221.303466][ T7732] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 222.880538][ T7759] FAULT_INJECTION: forcing a failure. [ 222.880538][ T7759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.058661][ T7759] CPU: 1 UID: 0 PID: 7759 Comm: syz.0.361 Not tainted syzkaller #0 PREEMPT(full) [ 223.058702][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.058717][ T7759] Call Trace: [ 223.058725][ T7759] [ 223.058734][ T7759] dump_stack_lvl+0x16c/0x1f0 [ 223.058770][ T7759] should_fail_ex+0x512/0x640 [ 223.058812][ T7759] _copy_from_user+0x2e/0xd0 [ 223.058854][ T7759] memdup_user+0x6b/0xe0 [ 223.058882][ T7759] __x64_sys_kexec_load+0x18e/0x230 [ 223.058913][ T7759] do_syscall_64+0xcd/0xfa0 [ 223.058948][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.058972][ T7759] RIP: 0033:0x7fbe26b8f7c9 [ 223.058990][ T7759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.059013][ T7759] RSP: 002b:00007fbe279b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 223.059035][ T7759] RAX: ffffffffffffffda RBX: 00007fbe26de5fa0 RCX: 00007fbe26b8f7c9 [ 223.059051][ T7759] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 223.059065][ T7759] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.059080][ T7759] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 223.059094][ T7759] R13: 00007fbe26de6038 R14: 00007fbe26de5fa0 R15: 00007fff20f850f8 [ 223.059125][ T7759] [ 223.864872][ T7753] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 223.932680][ T7753] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 227.442767][ T7800] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 228.312943][ T7793] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 228.414212][ T7801] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 228.425901][ T7795] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 228.739802][ T7809] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 228.769867][ T7809] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 228.807848][ T7809] syz.3.372 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 231.135252][ T7832] netlink: 178 bytes leftover after parsing attributes in process `syz.0.377'. [ 231.323810][ T7833] netlink: 4248 bytes leftover after parsing attributes in process `syz.0.377'. [ 232.719755][ T7830] netlink: 338 bytes leftover after parsing attributes in process `syz.2.376'. [ 232.807072][ T7835] netlink: 338 bytes leftover after parsing attributes in process `syz.2.376'. [ 232.916478][ T7858] netlink: 334 bytes leftover after parsing attributes in process `syz.3.381'. [ 233.134885][ T7856] netlink: 342 bytes leftover after parsing attributes in process `syz.2.376'. [ 233.468699][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 234.646556][ T7879] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 235.465039][ T7891] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 236.353427][ T7900] FAULT_INJECTION: forcing a failure. [ 236.353427][ T7900] name failslab, interval 1, probability 0, space 0, times 0 [ 236.417908][ T7900] CPU: 1 UID: 0 PID: 7900 Comm: syz.2.388 Not tainted syzkaller #0 PREEMPT(full) [ 236.417958][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.417972][ T7900] Call Trace: [ 236.417980][ T7900] [ 236.417988][ T7900] dump_stack_lvl+0x16c/0x1f0 [ 236.418024][ T7900] should_fail_ex+0x512/0x640 [ 236.418062][ T7900] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 236.418092][ T7900] should_failslab+0xc2/0x120 [ 236.418126][ T7900] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 236.418157][ T7900] ? __d_lookup+0x25c/0x4a0 [ 236.418192][ T7900] ? __d_alloc+0x32/0xae0 [ 236.418229][ T7900] ? __d_alloc+0x32/0xae0 [ 236.418254][ T7900] __d_alloc+0x32/0xae0 [ 236.418286][ T7900] d_alloc+0x4a/0x1e0 [ 236.418316][ T7900] lookup_one_qstr_excl+0x175/0x250 [ 236.418352][ T7900] ? mnt_want_write+0x161/0x450 [ 236.418392][ T7900] filename_create+0x1e7/0x4a0 [ 236.418416][ T7900] ? __pfx_filename_create+0x10/0x10 [ 236.418444][ T7900] ? __might_fault+0xe3/0x190 [ 236.418467][ T7900] ? __might_fault+0xe3/0x190 [ 236.418490][ T7900] ? __might_fault+0x13b/0x190 [ 236.418517][ T7900] do_mknodat+0x18a/0x5d0 [ 236.418546][ T7900] ? __pfx_do_mknodat+0x10/0x10 [ 236.418570][ T7900] ? getname_flags.part.0+0x1c5/0x550 [ 236.418613][ T7900] __x64_sys_mknod+0x87/0xb0 [ 236.418640][ T7900] do_syscall_64+0xcd/0xfa0 [ 236.418672][ T7900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.418696][ T7900] RIP: 0033:0x7f1887b8f7c9 [ 236.418715][ T7900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.418738][ T7900] RSP: 002b:00007f18889b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 236.418760][ T7900] RAX: ffffffffffffffda RBX: 00007f1887de6090 RCX: 00007f1887b8f7c9 [ 236.418775][ T7900] RDX: 0000000000000407 RSI: 0000000000000004 RDI: 0000200000000900 [ 236.418797][ T7900] RBP: 00007f1887c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 236.418812][ T7900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.418826][ T7900] R13: 00007f1887de6128 R14: 00007f1887de6090 R15: 00007ffd79f2e8f8 [ 236.418858][ T7900] [ 237.626620][ T7911] tipc: Started in network mode [ 237.652771][ T7911] tipc: Node identity ffffffff, cluster identity 4711 [ 237.686530][ T7911] tipc: Node number set to 4294967295 [ 240.347507][ T7949] random: crng reseeded on system resumption [ 241.073741][ T7969] random: crng reseeded on system resumption [ 241.245693][ T5839] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 241.773635][ T7981] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k [ 245.062632][ T8032] dump_stack_lvl+0x16c/0x1f0 [ 245.062677][ T8032] should_fail_ex+0x512/0x640 [ 245.062724][ T8032] ? __kmalloc_cache_noprof+0x5f/0x780 [ 245.062760][ T8032] should_failslab+0xc2/0x120 [ 245.062810][ T8032] __kmalloc_cache_noprof+0x72/0x780 [ 245.062835][ T8032] ? do_raw_spin_unlock+0x172/0x230 [ 245.062860][ T8032] ? snd_rawmidi_open+0x3c3/0xbf0 [ 245.062916][ T8032] ? snd_rawmidi_open+0x3c3/0xbf0 [ 245.062966][ T8032] snd_rawmidi_open+0x3c3/0xbf0 [ 245.063022][ T8032] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 245.063144][ T8032] ? kobject_get_unless_zero+0x156/0x1e0 [ 245.063192][ T8032] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 245.063242][ T8032] snd_open+0x22d/0x4c0 [ 245.063282][ T8032] ? __pfx_snd_open+0x10/0x10 [ 245.063320][ T8032] chrdev_open+0x234/0x6a0 [ 245.063358][ T8032] ? __pfx_apparmor_file_open+0x10/0x10 [ 245.063406][ T8032] ? __pfx_chrdev_open+0x10/0x10 [ 245.063448][ T8032] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 245.063492][ T8032] do_dentry_open+0x982/0x1530 [ 245.063531][ T8032] ? __pfx_chrdev_open+0x10/0x10 [ 245.063576][ T8032] vfs_open+0x82/0x3f0 [ 245.063628][ T8032] path_openat+0x1de4/0x2cb0 [ 245.063677][ T8032] ? __pfx_path_openat+0x10/0x10 [ 245.063717][ T8032] ? __lock_acquire+0xb8a/0x1c90 [ 245.063767][ T8032] do_filp_open+0x20b/0x470 [ 245.063803][ T8032] ? __pfx_do_filp_open+0x10/0x10 [ 245.063871][ T8032] ? alloc_fd+0x471/0x7d0 [ 245.063915][ T8032] do_sys_openat2+0x11b/0x1d0 [ 245.063962][ T8032] ? __pfx_do_sys_openat2+0x10/0x10 [ 245.064006][ T8032] ? fput+0x9b/0xd0 [ 245.064058][ T8032] ? __sys_sendmsg+0x18c/0x220 [ 245.064100][ T8032] __x64_sys_openat+0x174/0x210 [ 245.064149][ T8032] ? __pfx___x64_sys_openat+0x10/0x10 [ 245.064213][ T8032] do_syscall_64+0xcd/0xfa0 [ 245.064254][ T8032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.064292][ T8032] RIP: 0033:0x7fa2c8d8f7c9 [ 245.064319][ T8032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.064346][ T8032] RSP: 002b:00007fa2c9bc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.064376][ T8032] RAX: ffffffffffffffda RBX: 00007fa2c8fe5fa0 RCX: 00007fa2c8d8f7c9 [ 245.064395][ T8032] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 245.064412][ T8032] RBP: 00007fa2c8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 245.064429][ T8032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.064445][ T8032] R13: 00007fa2c8fe6038 R14: 00007fa2c8fe5fa0 R15: 00007fff44e4afc8 [ 245.064487][ T8032] [ 245.392409][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.081665][ T8045] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 246.613399][ T8055] FAULT_INJECTION: forcing a failure. [ 246.613399][ T8055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.642664][ T8055] CPU: 0 UID: 0 PID: 8055 Comm: syz.1.420 Not tainted syzkaller #0 PREEMPT(full) [ 246.642714][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.642735][ T8055] Call Trace: [ 246.642745][ T8055] [ 246.642759][ T8055] dump_stack_lvl+0x16c/0x1f0 [ 246.642810][ T8055] should_fail_ex+0x512/0x640 [ 246.642870][ T8055] _copy_from_user+0x2e/0xd0 [ 246.642955][ T8055] memdup_user+0x6b/0xe0 [ 246.642996][ T8055] __x64_sys_kexec_load+0x18e/0x230 [ 246.643039][ T8055] do_syscall_64+0xcd/0xfa0 [ 246.643084][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.643116][ T8055] RIP: 0033:0x7fa2c8d8f7c9 [ 246.643141][ T8055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.643175][ T8055] RSP: 002b:00007fa2c9bc2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 246.643207][ T8055] RAX: ffffffffffffffda RBX: 00007fa2c8fe5fa0 RCX: 00007fa2c8d8f7c9 [ 246.643229][ T8055] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 246.643247][ T8055] RBP: 00007fa2c8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 246.643266][ T8055] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 246.643285][ T8055] R13: 00007fa2c8fe6038 R14: 00007fa2c8fe5fa0 R15: 00007fff44e4afc8 [ 246.643334][ T8055] [ 246.950120][ T8063] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 247.987285][ T8093] netlink: 'syz.2.429': attribute type 11 has an invalid length. [ 248.000799][ T8093] netlink: 'syz.2.429': attribute type 11 has an invalid length. [ 248.010494][ T8093] netlink: 'syz.2.429': attribute type 11 has an invalid length. [ 248.019502][ T8093] netlink: 'syz.2.429': attribute type 11 has an invalid length. [ 248.028344][ T8093] netlink: 'syz.2.429': attribute type 11 has an invalid length. [ 248.490462][ T8097] FAULT_INJECTION: forcing a failure. [ 248.490462][ T8097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 248.564066][ T8097] CPU: 1 UID: 0 PID: 8097 Comm: syz.0.431 Not tainted syzkaller #0 PREEMPT(full) [ 248.564110][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.564128][ T8097] Call Trace: [ 248.564139][ T8097] [ 248.564151][ T8097] dump_stack_lvl+0x16c/0x1f0 [ 248.564200][ T8097] should_fail_ex+0x512/0x640 [ 248.564358][ T8097] should_fail_alloc_page+0xe7/0x130 [ 248.564430][ T8097] prepare_alloc_pages+0x3c2/0x610 [ 248.564474][ T8097] ? find_held_lock+0x2b/0x80 [ 248.564563][ T8097] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 248.564605][ T8097] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.564649][ T8097] ? is_bpf_text_address+0x94/0x1a0 [ 248.564702][ T8097] ? kernel_text_address+0x8d/0x100 [ 248.564734][ T8097] ? __kernel_text_address+0xd/0x40 [ 248.564764][ T8097] ? unwind_get_return_address+0x59/0xa0 [ 248.564798][ T8097] ? arch_stack_walk+0xa6/0x100 [ 248.564838][ T8097] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 248.564889][ T8097] ? stack_depot_save_flags+0x29/0x9c0 [ 248.564947][ T8097] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.565002][ T8097] ? policy_nodemask+0xea/0x4e0 [ 248.565050][ T8097] alloc_pages_mpol+0x1fb/0x550 [ 248.565099][ T8097] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 248.565159][ T8097] alloc_pages_noprof+0x131/0x390 [ 248.565204][ T8097] kimage_alloc_pages+0x74/0x350 [ 248.565239][ T8097] kimage_alloc_control_pages+0x153/0xa00 [ 248.565282][ T8097] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 248.565332][ T8097] do_kexec_load+0x478/0x8a0 [ 248.565371][ T8097] ? __pfx_do_kexec_load+0x10/0x10 [ 248.565424][ T8097] ? _copy_from_user+0x59/0xd0 [ 248.565486][ T8097] __x64_sys_kexec_load+0x1bf/0x230 [ 248.565540][ T8097] do_syscall_64+0xcd/0xfa0 [ 248.565588][ T8097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.565621][ T8097] RIP: 0033:0x7fbe26b8f7c9 [ 248.565650][ T8097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.565682][ T8097] RSP: 002b:00007fbe279b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 248.565714][ T8097] RAX: ffffffffffffffda RBX: 00007fbe26de5fa0 RCX: 00007fbe26b8f7c9 [ 248.565736][ T8097] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 248.565756][ T8097] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 248.565774][ T8097] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 248.565793][ T8097] R13: 00007fbe26de6038 R14: 00007fbe26de5fa0 R15: 00007fff20f850f8 [ 248.565837][ T8097] [ 248.565853][ T8097] kexec: Could not allocate control_code_buffer [ 249.208626][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 251.719758][ T8132] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 256.290976][ T8123] Process accounting resumed [ 257.954612][ T8187] zram: Added device: zram1 [ 258.112825][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 259.455748][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 260.046135][ T8230] FAULT_INJECTION: forcing a failure. [ 260.046135][ T8230] name failslab, interval 1, probability 0, space 0, times 0 [ 260.063785][ T8230] CPU: 0 UID: 0 PID: 8230 Comm: syz.3.457 Not tainted syzkaller #0 PREEMPT(full) [ 260.063829][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.063848][ T8230] Call Trace: [ 260.063859][ T8230] [ 260.063871][ T8230] dump_stack_lvl+0x16c/0x1f0 [ 260.063917][ T8230] should_fail_ex+0x512/0x640 [ 260.063967][ T8230] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 260.064007][ T8230] should_failslab+0xc2/0x120 [ 260.064068][ T8230] kmem_cache_alloc_node_noprof+0x78/0x770 [ 260.064104][ T8230] ? __alloc_skb+0x2b2/0x380 [ 260.064165][ T8230] ? __alloc_skb+0x2b2/0x380 [ 260.064213][ T8230] __alloc_skb+0x2b2/0x380 [ 260.064264][ T8230] ? __pfx___alloc_skb+0x10/0x10 [ 260.064311][ T8230] ? kasan_quarantine_put+0x10a/0x240 [ 260.064349][ T8230] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.064398][ T8230] ? kfree+0x2b8/0x6d0 [ 260.064430][ T8230] mpls_netconf_notify_devconf+0x4a/0x110 [ 260.064476][ T8230] mpls_dev_notify+0x726/0xa20 [ 260.064522][ T8230] notifier_call_chain+0xbc/0x410 [ 260.064565][ T8230] ? __pfx_mpls_dev_notify+0x10/0x10 [ 260.064636][ T8230] call_netdevice_notifiers_info+0xbe/0x140 [ 260.064682][ T8230] unregister_netdevice_many_notify+0xf5c/0x25c0 [ 260.064736][ T8230] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 260.064775][ T8230] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 260.064832][ T8230] ? __fsnotify_parent+0x24b/0xc40 [ 260.064867][ T8230] ? __pfx___mutex_lock+0x10/0x10 [ 260.064918][ T8230] unregister_netdevice_queue+0x305/0x3f0 [ 260.064956][ T8230] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 260.064997][ T8230] ? __pfx_locks_remove_file+0x10/0x10 [ 260.065037][ T8230] ? __pfx_ppp_release+0x10/0x10 [ 260.065081][ T8230] ppp_release+0x209/0x230 [ 260.065125][ T8230] __fput+0x402/0xb70 [ 260.065180][ T8230] task_work_run+0x150/0x240 [ 260.065232][ T8230] ? __pfx_task_work_run+0x10/0x10 [ 260.065284][ T8230] ? __pfx___do_sys_close_range+0x10/0x10 [ 260.065332][ T8230] exit_to_user_mode_loop+0xec/0x130 [ 260.065383][ T8230] do_syscall_64+0x426/0xfa0 [ 260.065426][ T8230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.065459][ T8230] RIP: 0033:0x7f2fe298f7c9 [ 260.065486][ T8230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.065517][ T8230] RSP: 002b:00007f2fe38b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 260.065548][ T8230] RAX: 0000000000000000 RBX: 00007f2fe2be5fa0 RCX: 00007f2fe298f7c9 [ 260.065568][ T8230] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 260.065602][ T8230] RBP: 00007f2fe2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 260.065621][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.065641][ T8230] R13: 00007f2fe2be6038 R14: 00007f2fe2be5fa0 R15: 00007ffd208d8fd8 [ 260.065688][ T8230] [ 260.459964][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 261.641675][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 264.235254][ T8290] random: crng reseeded on system resumption [ 264.301088][ T8292] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 264.318716][ T8290] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 265.043083][ T8303] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 265.157628][ T8318] netlink: 334 bytes leftover after parsing attributes in process `syz.3.476'. [ 265.219938][ T8303] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 265.863427][ T8326] netlink: 25 bytes leftover after parsing attributes in process `syz.3.478'. [ 265.912610][ T8326] nbd: couldn't find device at index 33904 [ 266.012829][ T8327] could not allocate digest TFM handle [ 266.148121][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.156221][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.407982][ T8352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'. [ 267.571507][ T143] Trying to write to read-only block-device sda1 [ 268.795350][ T5839] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 269.350485][ T8395] syz.3.491 (8395): /proc/8391/oom_adj is deprecated, please use /proc/8391/oom_score_adj instead. [ 270.091170][ T8410] openvswitch: netlink: IP tunnel dst address not specified [ 270.487307][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 271.194887][ T8422] FAULT_INJECTION: forcing a failure. [ 271.194887][ T8422] name failslab, interval 1, probability 0, space 0, times 0 [ 271.522414][ T8422] CPU: 0 UID: 0 PID: 8422 Comm: syz.0.497 Not tainted syzkaller #0 PREEMPT(full) [ 271.522460][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.522477][ T8422] Call Trace: [ 271.522488][ T8422] [ 271.522501][ T8422] dump_stack_lvl+0x16c/0x1f0 [ 271.522557][ T8422] should_fail_ex+0x512/0x640 [ 271.522608][ T8422] ? __kmalloc_cache_noprof+0x5f/0x780 [ 271.522645][ T8422] should_failslab+0xc2/0x120 [ 271.522690][ T8422] __kmalloc_cache_noprof+0x72/0x780 [ 271.522724][ T8422] ? percpu_ref_init+0xec/0x410 [ 271.522773][ T8422] ? percpu_ref_init+0xec/0x410 [ 271.522812][ T8422] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 271.522865][ T8422] percpu_ref_init+0xec/0x410 [ 271.522914][ T8422] io_uring_setup+0x4a6/0x20e0 [ 271.522961][ T8422] ? __pfx_io_uring_setup+0x10/0x10 [ 271.522999][ T8422] ? do_futex+0x122/0x350 [ 271.523044][ T8422] ? __pfx_do_futex+0x10/0x10 [ 271.523089][ T8422] ? find_held_lock+0x2b/0x80 [ 271.523143][ T8422] ? xfd_validate_state+0x61/0x180 [ 271.523189][ T8422] ? __pfx___do_sys_close_range+0x10/0x10 [ 271.523236][ T8422] __x64_sys_io_uring_setup+0xc2/0x170 [ 271.523279][ T8422] do_syscall_64+0xcd/0xfa0 [ 271.523322][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.523354][ T8422] RIP: 0033:0x7fbe26b8f7c9 [ 271.523380][ T8422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.523412][ T8422] RSP: 002b:00007fbe27993038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 271.523442][ T8422] RAX: ffffffffffffffda RBX: 00007fbe26de6090 RCX: 00007fbe26b8f7c9 [ 271.523463][ T8422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 271.523481][ T8422] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 271.523501][ T8422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.523519][ T8422] R13: 00007fbe26de6128 R14: 00007fbe26de6090 R15: 00007fff20f850f8 [ 271.523563][ T8422] [ 272.023383][ T8433] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 273.032520][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 273.285836][ T8456] FAULT_INJECTION: forcing a failure. [ 273.285836][ T8456] name failslab, interval 1, probability 0, space 0, times 0 [ 273.315183][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.3.508 Not tainted syzkaller #0 PREEMPT(full) [ 273.315228][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.315247][ T8456] Call Trace: [ 273.315258][ T8456] [ 273.315270][ T8456] dump_stack_lvl+0x16c/0x1f0 [ 273.315316][ T8456] should_fail_ex+0x512/0x640 [ 273.315367][ T8456] ? __kmalloc_cache_noprof+0x5f/0x780 [ 273.315404][ T8456] should_failslab+0xc2/0x120 [ 273.315457][ T8456] __kmalloc_cache_noprof+0x72/0x780 [ 273.315489][ T8456] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.315529][ T8456] ? sctp_endpoint_new+0xfc/0xb20 [ 273.315578][ T8456] ? sctp_endpoint_new+0xfc/0xb20 [ 273.315616][ T8456] ? __pfx___debug_object_init+0x10/0x10 [ 273.315655][ T8456] sctp_endpoint_new+0xfc/0xb20 [ 273.315700][ T8456] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 273.315743][ T8456] ? lockdep_init_map_type+0x5c/0x280 [ 273.315790][ T8456] ? lockdep_init_map_type+0x5c/0x280 [ 273.315842][ T8456] sctp_init_sock+0xe2b/0x12f0 [ 273.315879][ T8456] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 273.315920][ T8456] sctp_v6_init_sock+0x16/0x70 [ 273.315956][ T8456] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 273.315995][ T8456] inet6_create+0xb30/0x12b0 [ 273.316037][ T8456] ? inet6_create+0x7f/0x12b0 [ 273.316082][ T8456] __sock_create+0x338/0x8d0 [ 273.316591][ T8456] inet_ctl_sock_create+0x94/0x230 [ 273.316641][ T8456] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 273.316685][ T8456] ? lockdep_init_map_type+0x5c/0x280 [ 273.316735][ T8456] ? do_init_timer+0xc9/0x110 [ 273.316779][ T8456] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 273.316816][ T8456] sctp_ctrlsock_init+0x40/0xf0 [ 273.316852][ T8456] ops_init+0x1e2/0x5f0 [ 273.316892][ T8456] setup_net+0x100/0x390 [ 273.316926][ T8456] ? __pfx_setup_net+0x10/0x10 [ 273.316963][ T8456] ? debug_mutex_init+0x37/0x70 [ 273.317001][ T8456] copy_net_ns+0x2f8/0x690 [ 273.317977][ T8456] create_new_namespaces+0x3ea/0xa90 [ 273.318067][ T8456] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 273.318114][ T8456] ksys_unshare+0x45b/0xa40 [ 273.318159][ T8456] ? __pfx_ksys_unshare+0x10/0x10 [ 273.318220][ T8456] __x64_sys_unshare+0x31/0x40 [ 273.318342][ T8456] do_syscall_64+0xcd/0xfa0 [ 273.318391][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.318424][ T8456] RIP: 0033:0x7f2fe298f7c9 [ 273.318453][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.318482][ T8456] RSP: 002b:00007f2fe38b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 273.318514][ T8456] RAX: ffffffffffffffda RBX: 00007f2fe2be5fa0 RCX: 00007f2fe298f7c9 [ 273.318537][ T8456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 273.318557][ T8456] RBP: 00007f2fe2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 273.318577][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.318597][ T8456] R13: 00007f2fe2be6038 R14: 00007f2fe2be5fa0 R15: 00007ffd208d8fd8 [ 273.318641][ T8456] [ 273.889232][ T8449] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.897485][ T8449] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.994924][ T8449] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.002184][ T8449] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 274.212410][ T8449] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.855464][ T8476] FAULT_INJECTION: forcing a failure. [ 274.855464][ T8476] name failslab, interval 1, probability 0, space 0, times 0 [ 274.882354][ T30] audit: type=1806 audit(1764460339.387:5): xattr="." res=0 [ 274.882746][ T8476] CPU: 1 UID: 0 PID: 8476 Comm: syz.1.511 Not tainted syzkaller #0 PREEMPT(full) [ 274.882795][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.882818][ T8476] Call Trace: [ 274.882829][ T8476] [ 274.882843][ T8476] dump_stack_lvl+0x16c/0x1f0 [ 274.882899][ T8476] should_fail_ex+0x512/0x640 [ 274.882966][ T8476] should_failslab+0xc2/0x120 [ 274.883021][ T8476] __kmalloc_cache_noprof+0x72/0x780 [ 274.883058][ T8476] ? __kasan_kmalloc+0xaa/0xb0 [ 274.883102][ T8476] ? sctp_auth_shkey_create+0x9e/0x210 [ 274.883157][ T8476] ? sctp_auth_shkey_create+0x9e/0x210 [ 274.883203][ T8476] ? __genradix_ptr+0x148/0x1a0 [ 274.883251][ T8476] sctp_auth_shkey_create+0x9e/0x210 [ 274.883303][ T8476] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 274.883364][ T8476] sctp_association_new+0x19ad/0x2a00 [ 274.883435][ T8476] sctp_unpack_cookie+0x4c7/0xd20 [ 274.883489][ T8476] ? __pfx_sctp_unpack_cookie+0x10/0x10 [ 274.883642][ T8476] ? arch_stack_walk+0xa6/0x100 [ 274.883734][ T8476] sctp_sf_do_5_2_4_dupcook+0x2d5/0x2ed0 [ 274.883816][ T8476] ? __pfx_sctp_sf_do_5_2_4_dupcook+0x10/0x10 [ 274.883878][ T8476] ? sctp_sm_lookup_event+0x15b/0x570 [ 274.883916][ T8476] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 274.883956][ T8476] ? kmem_cache_free+0x2d4/0x6c0 [ 274.883997][ T8476] ? sctp_chunk_put+0x205/0x2c0 [ 274.884031][ T8476] ? sctp_inq_pop+0x5d7/0xf80 [ 274.884080][ T8476] ? sctp_assoc_bh_rcv+0x117/0x6f0 [ 274.884297][ T8476] ? sctp_inq_push+0x1db/0x270 [ 274.884363][ T8476] ? __pfx_sctp_cname+0x10/0x10 [ 274.884404][ T8476] sctp_do_sm+0x181/0x5c80 [ 274.884442][ T8476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.884589][ T8476] ? __pfx_sctp_do_sm+0x10/0x10 [ 274.884685][ T8476] ? ktime_get+0x200/0x310 [ 274.884731][ T8476] ? lockdep_hardirqs_on+0x7c/0x110 [ 274.884788][ T8476] sctp_assoc_bh_rcv+0x392/0x6f0 [ 274.884857][ T8476] sctp_inq_push+0x1db/0x270 [ 274.884915][ T8476] sctp_backlog_rcv+0x169/0x590 [ 274.884956][ T8476] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 274.884992][ T8476] __release_sock+0x3a9/0x450 [ 274.885032][ T8476] ? lockdep_hardirqs_on+0x7c/0x110 [ 274.885086][ T8476] release_sock+0x5a/0x220 [ 274.885124][ T8476] sctp_wait_for_connect+0x1c3/0x5c0 [ 274.885181][ T8476] ? __pfx_sctp_wait_for_connect+0x10/0x10 [ 274.885228][ T8476] ? skb_set_owner_w+0x31f/0x710 [ 274.885285][ T8476] ? __pfx_autoremove_wake_function+0x10/0x10 [ 274.885334][ T8476] ? sctp_datamsg_put+0x58/0x5f0 [ 274.885374][ T8476] ? sctp_primitive_SEND+0x9f/0xd0 [ 274.885437][ T8476] sctp_sendmsg_to_asoc+0x180f/0x1bd0 [ 274.885497][ T8476] ? sctp_assoc_set_primary+0xa1/0x300 [ 274.885554][ T8476] ? sctp_assoc_add_peer+0x252/0x1550 [ 274.885618][ T8476] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 274.885669][ T8476] ? sctp_connect_new_asoc+0x41e/0x770 [ 274.885731][ T8476] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 274.885791][ T8476] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 274.885851][ T8476] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 274.885921][ T8476] sctp_sendmsg+0xe99/0x1e00 [ 274.885992][ T8476] ? __pfx_sctp_sendmsg+0x10/0x10 [ 274.886047][ T8476] ? __pfx___might_resched+0x10/0x10 [ 274.886097][ T8476] ? aa_sk_perm+0x2f4/0xb10 [ 274.886142][ T8476] ? __pfx_aa_sk_perm+0x10/0x10 [ 274.886194][ T8476] ? __pfx_sctp_sendmsg+0x10/0x10 [ 274.886253][ T8476] inet_sendmsg+0x11c/0x140 [ 274.886310][ T8476] ____sys_sendmsg+0x973/0xc70 [ 274.886366][ T8476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.886422][ T8476] ? find_held_lock+0x2b/0x80 [ 274.886479][ T8476] ? futex_unqueue+0x133/0x2c0 [ 274.886539][ T8476] ___sys_sendmsg+0x134/0x1d0 [ 274.886581][ T8476] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.886642][ T8476] ? find_held_lock+0x2b/0x80 [ 274.886710][ T8476] __sys_sendmmsg+0x200/0x420 [ 274.886755][ T8476] ? __pfx___sys_sendmmsg+0x10/0x10 [ 274.886807][ T8476] ? __pfx_do_futex+0x10/0x10 [ 274.886886][ T8476] ? xfd_validate_state+0x61/0x180 [ 274.886962][ T8476] ? __pfx_do_writev+0x10/0x10 [ 274.887012][ T8476] __x64_sys_sendmmsg+0x9c/0x100 [ 274.887052][ T8476] ? lockdep_hardirqs_on+0x7c/0x110 [ 274.887098][ T8476] do_syscall_64+0xcd/0xfa0 [ 274.887151][ T8476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.887190][ T8476] RIP: 0033:0x7fa2c8d8f7c9 [ 274.887225][ T8476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.887263][ T8476] RSP: 002b:00007fa2c9bc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 274.887300][ T8476] RAX: ffffffffffffffda RBX: 00007fa2c8fe5fa0 RCX: 00007fa2c8d8f7c9 [ 274.887324][ T8476] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000003 [ 274.887349][ T8476] RBP: 00007fa2c8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.887372][ T8476] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 274.887395][ T8476] R13: 00007fa2c8fe6038 R14: 00007fa2c8fe5fa0 R15: 00007fff44e4afc8 [ 274.887447][ T8476] [ 275.030617][ T8480] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 275.402717][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 275.903250][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 276.062659][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 276.326289][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 276.518807][ T8399] Process accounting paused [ 278.142902][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 278.845785][ T8530] FAULT_INJECTION: forcing a failure. [ 278.845785][ T8530] name failslab, interval 1, probability 0, space 0, times 0 [ 278.897023][ T8530] CPU: 1 UID: 0 PID: 8530 Comm: syz.1.520 Not tainted syzkaller #0 PREEMPT(full) [ 278.897070][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.897092][ T8530] Call Trace: [ 278.897104][ T8530] [ 278.897117][ T8530] dump_stack_lvl+0x16c/0x1f0 [ 278.897166][ T8530] should_fail_ex+0x512/0x640 [ 278.897220][ T8530] ? __kmalloc_cache_noprof+0x5f/0x780 [ 278.897259][ T8530] should_failslab+0xc2/0x120 [ 278.897307][ T8530] __kmalloc_cache_noprof+0x72/0x780 [ 278.897341][ T8530] ? do_kimage_alloc_init+0x40/0x320 [ 278.897383][ T8530] ? do_kimage_alloc_init+0x40/0x320 [ 278.897416][ T8530] do_kimage_alloc_init+0x40/0x320 [ 278.897450][ T8530] do_kexec_load+0x1fd/0x8a0 [ 278.897491][ T8530] ? __pfx_do_kexec_load+0x10/0x10 [ 278.897534][ T8530] ? _copy_from_user+0x59/0xd0 [ 278.897593][ T8530] __x64_sys_kexec_load+0x1bf/0x230 [ 278.897635][ T8530] do_syscall_64+0xcd/0xfa0 [ 278.897680][ T8530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.897714][ T8530] RIP: 0033:0x7fa2c8d8f7c9 [ 278.897767][ T8530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.897801][ T8530] RSP: 002b:00007fa2c9bc2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 278.897833][ T8530] RAX: ffffffffffffffda RBX: 00007fa2c8fe5fa0 RCX: 00007fa2c8d8f7c9 [ 278.897855][ T8530] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 278.897980][ T8530] RBP: 00007fa2c8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 278.898001][ T8530] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 278.898021][ T8530] R13: 00007fa2c8fe6038 R14: 00007fa2c8fe5fa0 R15: 00007fff44e4afc8 [ 278.898072][ T8530] [ 279.713075][ T8538] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.759478][ T8546] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 280.794212][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.528'. [ 281.677032][ T30] audit: type=1800 audit(1764460346.217:6): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.529" name="file0" dev="tmpfs" ino=699 res=0 errno=0 [ 283.449286][ T8609] FAULT_INJECTION: forcing a failure. [ 283.449286][ T8609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.752801][ T8609] CPU: 1 UID: 0 PID: 8609 Comm: syz.3.533 Not tainted syzkaller #0 PREEMPT(full) [ 283.752855][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.752870][ T8609] Call Trace: [ 283.752878][ T8609] [ 283.752887][ T8609] dump_stack_lvl+0x16c/0x1f0 [ 283.752921][ T8609] should_fail_ex+0x512/0x640 [ 283.752964][ T8609] _copy_from_user+0x2e/0xd0 [ 283.753005][ T8609] memdup_user+0x6b/0xe0 [ 283.753032][ T8609] __x64_sys_kexec_load+0x18e/0x230 [ 283.753064][ T8609] do_syscall_64+0xcd/0xfa0 [ 283.753096][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.753120][ T8609] RIP: 0033:0x7f2fe298f7c9 [ 283.753138][ T8609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.753161][ T8609] RSP: 002b:00007f2fe38b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 283.753184][ T8609] RAX: ffffffffffffffda RBX: 00007f2fe2be5fa0 RCX: 00007f2fe298f7c9 [ 283.753199][ T8609] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 283.753214][ T8609] RBP: 00007f2fe2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 283.753228][ T8609] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 283.753242][ T8609] R13: 00007f2fe2be6038 R14: 00007f2fe2be5fa0 R15: 00007ffd208d8fd8 [ 283.753272][ T8609] [ 283.908613][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.208810][ T8613] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 285.313918][ T8632] FAULT_INJECTION: forcing a failure. [ 285.313918][ T8632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.387150][ T8632] CPU: 0 UID: 0 PID: 8632 Comm: syz.2.539 Not tainted syzkaller #0 PREEMPT(full) [ 285.387195][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.387215][ T8632] Call Trace: [ 285.387225][ T8632] [ 285.387238][ T8632] dump_stack_lvl+0x16c/0x1f0 [ 285.387284][ T8632] should_fail_ex+0x512/0x640 [ 285.387341][ T8632] _copy_from_user+0x2e/0xd0 [ 285.387397][ T8632] memdup_user+0x6b/0xe0 [ 285.387449][ T8632] __x64_sys_kexec_load+0x18e/0x230 [ 285.387493][ T8632] do_syscall_64+0xcd/0xfa0 [ 285.387538][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.387572][ T8632] RIP: 0033:0x7f1887b8f7c9 [ 285.387601][ T8632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.387632][ T8632] RSP: 002b:00007f18889d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 285.387665][ T8632] RAX: ffffffffffffffda RBX: 00007f1887de5fa0 RCX: 00007f1887b8f7c9 [ 285.387686][ T8632] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 285.387704][ T8632] RBP: 00007f1887c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 285.387722][ T8632] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 285.387740][ T8632] R13: 00007f1887de6038 R14: 00007f1887de5fa0 R15: 00007ffd79f2e8f8 [ 285.387783][ T8632] [ 285.903598][ T8644] ubi0: attaching mtd0 [ 285.945339][ T8644] ubi0: scanning is finished [ 285.950345][ T8644] ubi0: empty MTD device detected [ 286.471061][ T8650] Process accounting paused [ 286.628763][ T8636] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 286.652474][ T8644] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 286.663028][ T8644] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 286.676929][ T8644] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 286.684814][ T8644] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 286.724231][ T8648] FAULT_INJECTION: forcing a failure. [ 286.724231][ T8648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.842431][ T8644] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 286.859636][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 286.901331][ T8644] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 286.931305][ T8644] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2726473939 [ 286.992480][ T8644] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 287.015302][ T8648] CPU: 0 UID: 0 PID: 8648 Comm: syz.1.541 Not tainted syzkaller #0 PREEMPT(full) [ 287.015348][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.015368][ T8648] Call Trace: [ 287.015379][ T8648] [ 287.015391][ T8648] dump_stack_lvl+0x16c/0x1f0 [ 287.015435][ T8648] should_fail_ex+0x512/0x640 [ 287.015484][ T8648] should_fail_alloc_page+0xe7/0x130 [ 287.015531][ T8648] prepare_alloc_pages+0x3c2/0x610 [ 287.015583][ T8648] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 287.015618][ T8648] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 287.015673][ T8648] ? __lock_acquire+0x622/0x1c90 [ 287.015726][ T8648] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 287.015761][ T8648] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 287.015804][ T8648] ? look_up_lock_class+0x6b/0x150 [ 287.015851][ T8648] ? is_bpf_text_address+0x8a/0x1a0 [ 287.015905][ T8648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.015962][ T8648] ? policy_nodemask+0xea/0x4e0 [ 287.016009][ T8648] alloc_pages_mpol+0x1fb/0x550 [ 287.016059][ T8648] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 287.016103][ T8648] ? do_raw_spin_lock+0x12c/0x2b0 [ 287.016154][ T8648] ? find_held_lock+0x2b/0x80 [ 287.016207][ T8648] alloc_pages_noprof+0x131/0x390 [ 287.016253][ T8648] __pmd_alloc+0x3b/0x8b0 [ 287.016299][ T8648] ? __pud_alloc+0x51f/0x6b0 [ 287.016346][ T8648] copy_page_range+0x46c5/0x6930 [ 287.016443][ T8648] ? __pfx_copy_page_range+0x10/0x10 [ 287.016499][ T8648] ? mas_store+0x860/0x1030 [ 287.016541][ T8648] ? __pfx___might_resched+0x10/0x10 [ 287.016579][ T8648] ? find_held_lock+0x2b/0x80 [ 287.016612][ T8648] ? __pfx_mas_store+0x10/0x10 [ 287.016654][ T8648] ? __vma_enter_locked+0x163/0x3f0 [ 287.016731][ T8648] dup_mmap+0xe80/0x2280 [ 287.016794][ T8648] ? __pfx_dup_mmap+0x10/0x10 [ 287.016866][ T8648] copy_process+0x3f0c/0x76a0 [ 287.016910][ T8648] ? __pfx___futex_wait+0x10/0x10 [ 287.016956][ T8648] ? __pfx_copy_process+0x10/0x10 [ 287.016996][ T8648] ? find_held_lock+0x2b/0x80 [ 287.017035][ T8648] ? futex_private_hash_put+0xd5/0x190 [ 287.017113][ T8648] kernel_clone+0xfc/0x930 [ 287.017156][ T8648] ? __pfx_kernel_clone+0x10/0x10 [ 287.017223][ T8648] __do_sys_clone+0xce/0x120 [ 287.017262][ T8648] ? __pfx___do_sys_clone+0x10/0x10 [ 287.017325][ T8648] ? syscall_user_dispatch+0x78/0x140 [ 287.017370][ T8648] do_syscall_64+0xcd/0xfa0 [ 287.017416][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.017450][ T8648] RIP: 0033:0x7fa2c8d8f7c9 [ 287.017476][ T8648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.017508][ T8648] RSP: 002b:00007fa2c9ba0fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 287.017539][ T8648] RAX: ffffffffffffffda RBX: 00007fa2c8fe6090 RCX: 00007fa2c8d8f7c9 [ 287.017560][ T8648] RDX: 0000000000000000 RSI: 00002000000021f0 RDI: 0000000008000000 [ 287.017579][ T8648] RBP: 00007fa2c8e13f91 R08: 0000200000000280 R09: 0000200000000280 [ 287.017599][ T8648] R10: 0000200000000240 R11: 0000000000000206 R12: 0000000000000000 [ 287.017617][ T8648] R13: 00007fa2c8fe6128 R14: 00007fa2c8fe6090 R15: 00007fff44e4afc8 [ 287.017663][ T8648] [ 287.379132][ T8646] ubi0: detaching mtd0 [ 287.428078][ T8646] ubi0: mtd0 is detached [ 288.311600][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 289.203483][ T8680] FAULT_INJECTION: forcing a failure. [ 289.203483][ T8680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.313475][ T8680] CPU: 1 UID: 0 PID: 8680 Comm: syz.0.552 Not tainted syzkaller #0 PREEMPT(full) [ 289.313523][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.313542][ T8680] Call Trace: [ 289.313551][ T8680] [ 289.313566][ T8680] dump_stack_lvl+0x16c/0x1f0 [ 289.313612][ T8680] should_fail_ex+0x512/0x640 [ 289.313666][ T8680] _copy_from_user+0x2e/0xd0 [ 289.313720][ T8680] memdup_user+0x6b/0xe0 [ 289.313756][ T8680] __x64_sys_kexec_load+0x18e/0x230 [ 289.313799][ T8680] do_syscall_64+0xcd/0xfa0 [ 289.313843][ T8680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.313874][ T8680] RIP: 0033:0x7fbe26b8f7c9 [ 289.313899][ T8680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.313930][ T8680] RSP: 002b:00007fbe279b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 289.313961][ T8680] RAX: ffffffffffffffda RBX: 00007fbe26de5fa0 RCX: 00007fbe26b8f7c9 [ 289.313981][ T8680] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 289.314000][ T8680] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 289.314019][ T8680] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 289.314037][ T8680] R13: 00007fbe26de6038 R14: 00007fbe26de5fa0 R15: 00007fff20f850f8 [ 289.314072][ T8680] [ 290.453742][ T8697] netlink: 342 bytes leftover after parsing attributes in process `syz.3.557'. [ 290.464279][ T8697] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.499346][ T8697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.507537][ T8697] IPv6: NLM_F_CREATE should be set when creating new route [ 290.515507][ T8697] IPv6: NLM_F_CREATE should be set when creating new route [ 290.624457][ T8700] zswap: compressor 000 not available [ 290.692398][ T8702] sp0: Synchronizing with TNC [ 290.742892][ T8697] netlink: 342 bytes leftover after parsing attributes in process `syz.3.557'. [ 290.795912][ T8697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.343559][ T8717] netlink: 334 bytes leftover after parsing attributes in process `syz.1.559'. [ 292.483146][ T8729] FAULT_INJECTION: forcing a failure. [ 292.483146][ T8729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.712538][ T8729] CPU: 1 UID: 0 PID: 8729 Comm: syz.2.562 Not tainted syzkaller #0 PREEMPT(full) [ 292.712588][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.712611][ T8729] Call Trace: [ 292.712623][ T8729] [ 292.712639][ T8729] dump_stack_lvl+0x16c/0x1f0 [ 292.712690][ T8729] should_fail_ex+0x512/0x640 [ 292.712758][ T8729] _copy_from_user+0x2e/0xd0 [ 292.712834][ T8729] memdup_user+0x6b/0xe0 [ 292.712878][ T8729] __x64_sys_kexec_load+0x18e/0x230 [ 292.712928][ T8729] do_syscall_64+0xcd/0xfa0 [ 292.712988][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.713025][ T8729] RIP: 0033:0x7f1887b8f7c9 [ 292.713054][ T8729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.713091][ T8729] RSP: 002b:00007f18889d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 292.713127][ T8729] RAX: ffffffffffffffda RBX: 00007f1887de5fa0 RCX: 00007f1887b8f7c9 [ 292.713150][ T8729] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 292.713171][ T8729] RBP: 00007f1887c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 292.713192][ T8729] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 292.713212][ T8729] R13: 00007f1887de6038 R14: 00007f1887de5fa0 R15: 00007ffd79f2e8f8 [ 292.713263][ T8729] [ 293.184485][ T8737] futex_wake_op: syz.1.563 tries to shift op by -2048; fix this program [ 293.309915][ T8737] futex_wake_op: syz.1.563 tries to shift op by -2048; fix this program [ 293.814122][ T8752] random: crng reseeded on system resumption [ 294.532771][ T8762] can: request_module (can-proto-5) failed. [ 294.605406][ T8767] netlink: 330 bytes leftover after parsing attributes in process `syz.2.568'. [ 294.615812][ T8767] mac80211_hwsim hwsim8 : renamed from wlan0 (while UP) [ 294.933137][ T8772] FAULT_INJECTION: forcing a failure. [ 294.933137][ T8772] name failslab, interval 1, probability 0, space 0, times 0 [ 294.954955][ T8772] CPU: 1 UID: 7 PID: 8772 Comm: syz.1.571 Not tainted syzkaller #0 PREEMPT(full) [ 294.955130][ T8772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.955153][ T8772] Call Trace: [ 294.955164][ T8772] [ 294.955179][ T8772] dump_stack_lvl+0x16c/0x1f0 [ 294.955230][ T8772] should_fail_ex+0x512/0x640 [ 294.955285][ T8772] ? __kmalloc_noprof+0xca/0x880 [ 294.955322][ T8772] should_failslab+0xc2/0x120 [ 294.955371][ T8772] __kmalloc_noprof+0xdd/0x880 [ 294.955399][ T8772] ? lsm_blob_alloc+0x68/0x90 [ 294.955606][ T8772] ? lsm_blob_alloc+0x68/0x90 [ 294.955644][ T8772] ? __raw_spin_lock_init+0x3a/0x110 [ 294.955710][ T8772] lsm_blob_alloc+0x68/0x90 [ 294.955763][ T8772] security_sb_alloc+0x28/0x230 [ 294.955834][ T8772] alloc_super+0x1eb/0xb60 [ 294.955867][ T8772] ? sget_fc+0xd3/0xc20 [ 294.955909][ T8772] sget_fc+0x116/0xc20 [ 294.955943][ T8772] ? __pfx_set_anon_super_fc+0x10/0x10 [ 294.955977][ T8772] ? __pfx_mqueue_fill_super+0x10/0x10 [ 294.956020][ T8772] get_tree_nodev+0x28/0x190 [ 294.956058][ T8772] mqueue_get_tree+0xf1/0x130 [ 294.956103][ T8772] vfs_get_tree+0x8e/0x340 [ 294.956152][ T8772] fc_mount_longterm+0x1a/0x270 [ 294.956213][ T8772] mq_init_ns+0x426/0x620 [ 294.956267][ T8772] copy_ipcs+0x2d6/0x550 [ 294.956324][ T8772] create_new_namespaces+0x20a/0xa90 [ 294.956383][ T8772] ? security_capable+0x7e/0x260 [ 294.956435][ T8772] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 294.956479][ T8772] ksys_unshare+0x45b/0xa40 [ 294.956520][ T8772] ? __pfx_ksys_unshare+0x10/0x10 [ 294.956563][ T8772] ? xfd_validate_state+0x61/0x180 [ 294.956626][ T8772] __x64_sys_unshare+0x31/0x40 [ 294.956671][ T8772] do_syscall_64+0xcd/0xfa0 [ 294.956714][ T8772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.956911][ T8772] RIP: 0033:0x7fa2c8d8f7c9 [ 294.956939][ T8772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.956972][ T8772] RSP: 002b:00007fa2c9bc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 294.957002][ T8772] RAX: ffffffffffffffda RBX: 00007fa2c8fe5fa0 RCX: 00007fa2c8d8f7c9 [ 294.957034][ T8772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 294.957053][ T8772] RBP: 00007fa2c8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 294.957073][ T8772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.957093][ T8772] R13: 00007fa2c8fe6038 R14: 00007fa2c8fe5fa0 R15: 00007fff44e4afc8 [ 294.957137][ T8772] [ 295.838396][ T8774] netlink: 98 bytes leftover after parsing attributes in process `syz.1.572'. [ 296.774135][ T8786] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 296.836334][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 296.849081][ T8786] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 298.403090][ T8816] zswap: compressor not available [ 299.825769][ T8841] netlink: 342 bytes leftover after parsing attributes in process `syz.0.586'. [ 300.798842][ T8862] FAULT_INJECTION: forcing a failure. [ 300.798842][ T8862] name failslab, interval 1, probability 0, space 0, times 0 [ 300.864845][ T8862] CPU: 0 UID: 0 PID: 8862 Comm: syz.1.593 Not tainted syzkaller #0 PREEMPT(full) [ 300.864894][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.864914][ T8862] Call Trace: [ 300.864926][ T8862] [ 300.864938][ T8862] dump_stack_lvl+0x16c/0x1f0 [ 300.865091][ T8862] should_fail_ex+0x512/0x640 [ 300.865164][ T8862] ? __kmalloc_noprof+0xca/0x880 [ 300.865204][ T8862] should_failslab+0xc2/0x120 [ 300.865252][ T8862] __kmalloc_noprof+0xdd/0x880 [ 300.865284][ T8862] ? sk_prot_alloc+0x1a8/0x2a0 [ 300.865331][ T8862] ? sk_prot_alloc+0x1a8/0x2a0 [ 300.865366][ T8862] sk_prot_alloc+0x1a8/0x2a0 [ 300.865409][ T8862] sk_alloc+0x36/0xc20 [ 300.865463][ T8862] __netlink_create+0x5e/0x2c0 [ 300.865510][ T8862] ? __wake_up+0x3f/0x60 [ 300.865548][ T8862] netlink_create+0x39e/0x620 [ 300.865577][ T8862] ? __pfx_genl_bind+0x10/0x10 [ 300.865613][ T8862] ? __pfx_genl_unbind+0x10/0x10 [ 300.865647][ T8862] ? __pfx_genl_release+0x10/0x10 [ 300.865689][ T8862] __sock_create+0x338/0x8d0 [ 300.865740][ T8862] __sys_socket+0x14d/0x260 [ 300.865785][ T8862] ? __pfx___sys_socket+0x10/0x10 [ 300.865830][ T8862] ? xfd_validate_state+0x61/0x180 [ 300.865889][ T8862] __x64_sys_socket+0x72/0xb0 [ 300.865933][ T8862] ? lockdep_hardirqs_on+0x7c/0x110 [ 300.865975][ T8862] do_syscall_64+0xcd/0xfa0 [ 300.866031][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.866068][ T8862] RIP: 0033:0x7fa2c8d8f7c9 [ 300.866097][ T8862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.866130][ T8862] RSP: 002b:00007fa2c9bc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 300.866160][ T8862] RAX: ffffffffffffffda RBX: 00007fa2c8fe5fa0 RCX: 00007fa2c8d8f7c9 [ 300.866182][ T8862] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 300.866201][ T8862] RBP: 00007fa2c8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 300.866221][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.866240][ T8862] R13: 00007fa2c8fe6038 R14: 00007fa2c8fe5fa0 R15: 00007fff44e4afc8 [ 300.866284][ T8862] [ 301.117457][ T8856] tipc: Started in network mode [ 301.122705][ T8856] tipc: Node identity 7984a858, cluster identity 4711 [ 301.129550][ T8856] tipc: Node number set to 2038736984 [ 301.629502][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 301.818399][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 301.837095][ T8873] zswap: compressor not available [ 301.898288][ T8873] random: crng reseeded on system resumption [ 302.900279][ T8893] FAULT_INJECTION: forcing a failure. [ 302.900279][ T8893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.990183][ T8893] CPU: 1 UID: 0 PID: 8893 Comm: syz.3.599 Not tainted syzkaller #0 PREEMPT(full) [ 302.990229][ T8893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.990259][ T8893] Call Trace: [ 302.990269][ T8893] [ 302.990281][ T8893] dump_stack_lvl+0x16c/0x1f0 [ 302.990330][ T8893] should_fail_ex+0x512/0x640 [ 302.990389][ T8893] should_fail_alloc_page+0xe7/0x130 [ 302.990437][ T8893] prepare_alloc_pages+0x3c2/0x610 [ 302.990483][ T8893] ? rcu_is_watching+0x12/0xc0 [ 302.990524][ T8893] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 302.990562][ T8893] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 302.990603][ T8893] ? is_bpf_text_address+0x94/0x1a0 [ 302.990652][ T8893] ? kernel_text_address+0x8d/0x100 [ 302.990687][ T8893] ? __kernel_text_address+0xd/0x40 [ 302.990716][ T8893] ? unwind_get_return_address+0x59/0xa0 [ 302.990751][ T8893] ? arch_stack_walk+0xa6/0x100 [ 302.990788][ T8893] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 302.990837][ T8893] ? stack_depot_save_flags+0x29/0x9c0 [ 302.990889][ T8893] ? __pfx_stack_trace_save+0x10/0x10 [ 302.990933][ T8893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 302.990990][ T8893] ? policy_nodemask+0xea/0x4e0 [ 302.991038][ T8893] alloc_pages_mpol+0x1fb/0x550 [ 302.991082][ T8893] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 302.991146][ T8893] alloc_pages_noprof+0x131/0x390 [ 302.991192][ T8893] kimage_alloc_pages+0x74/0x350 [ 302.991227][ T8893] kimage_alloc_control_pages+0x153/0xa00 [ 302.991272][ T8893] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 302.991323][ T8893] do_kexec_load+0x478/0x8a0 [ 302.991362][ T8893] ? __pfx_do_kexec_load+0x10/0x10 [ 302.991404][ T8893] ? _copy_from_user+0x59/0xd0 [ 302.991456][ T8893] __x64_sys_kexec_load+0x1bf/0x230 [ 302.991491][ T8893] do_syscall_64+0xcd/0xfa0 [ 302.991528][ T8893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.991555][ T8893] RIP: 0033:0x7f2fe298f7c9 [ 302.991578][ T8893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.991605][ T8893] RSP: 002b:00007f2fe38b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 302.991632][ T8893] RAX: ffffffffffffffda RBX: 00007f2fe2be5fa0 RCX: 00007f2fe298f7c9 [ 302.991650][ T8893] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 302.991666][ T8893] RBP: 00007f2fe2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 302.991682][ T8893] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 302.991698][ T8893] R13: 00007f2fe2be6038 R14: 00007f2fe2be5fa0 R15: 00007ffd208d8fd8 [ 302.991733][ T8893] [ 303.442657][ T8893] kexec: Could not allocate control_code_buffer [ 305.264171][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 306.471788][ T8949] FAULT_INJECTION: forcing a failure. [ 306.471788][ T8949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.549156][ T8949] CPU: 0 UID: 0 PID: 8949 Comm: syz.0.611 Not tainted syzkaller #0 PREEMPT(full) [ 306.549191][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.549205][ T8949] Call Trace: [ 306.549214][ T8949] [ 306.549224][ T8949] dump_stack_lvl+0x16c/0x1f0 [ 306.549259][ T8949] should_fail_ex+0x512/0x640 [ 306.549300][ T8949] should_fail_alloc_page+0xe7/0x130 [ 306.549337][ T8949] prepare_alloc_pages+0x3c2/0x610 [ 306.549370][ T8949] ? rcu_is_watching+0x12/0xc0 [ 306.549399][ T8949] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 306.549427][ T8949] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 306.549457][ T8949] ? is_bpf_text_address+0x94/0x1a0 [ 306.549500][ T8949] ? kernel_text_address+0x8d/0x100 [ 306.549522][ T8949] ? __kernel_text_address+0xd/0x40 [ 306.549544][ T8949] ? unwind_get_return_address+0x59/0xa0 [ 306.549571][ T8949] ? arch_stack_walk+0xa6/0x100 [ 306.549598][ T8949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 306.549637][ T8949] ? stack_depot_save_flags+0x29/0x9c0 [ 306.549676][ T8949] ? __pfx_stack_trace_save+0x10/0x10 [ 306.549709][ T8949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.549755][ T8949] ? policy_nodemask+0xea/0x4e0 [ 306.549791][ T8949] alloc_pages_mpol+0x1fb/0x550 [ 306.549826][ T8949] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 306.549868][ T8949] alloc_pages_noprof+0x131/0x390 [ 306.549902][ T8949] kimage_alloc_pages+0x74/0x350 [ 306.549929][ T8949] kimage_alloc_control_pages+0x153/0xa00 [ 306.549963][ T8949] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 306.549998][ T8949] do_kexec_load+0x478/0x8a0 [ 306.550027][ T8949] ? __pfx_do_kexec_load+0x10/0x10 [ 306.550057][ T8949] ? _copy_from_user+0x59/0xd0 [ 306.550099][ T8949] __x64_sys_kexec_load+0x1bf/0x230 [ 306.550130][ T8949] do_syscall_64+0xcd/0xfa0 [ 306.550162][ T8949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.550187][ T8949] RIP: 0033:0x7fbe26b8f7c9 [ 306.550206][ T8949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.550230][ T8949] RSP: 002b:00007fbe279b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 306.550255][ T8949] RAX: ffffffffffffffda RBX: 00007fbe26de5fa0 RCX: 00007fbe26b8f7c9 [ 306.550273][ T8949] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 306.550288][ T8949] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 306.550302][ T8949] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 306.550317][ T8949] R13: 00007fbe26de6038 R14: 00007fbe26de5fa0 R15: 00007fff20f850f8 [ 306.550349][ T8949] [ 306.550377][ T8949] kexec: Could not allocate control_code_buffer [ 306.966516][ T8948] Process accounting resumed [ 310.797177][ T9020] FAULT_INJECTION: forcing a failure. [ 310.797177][ T9020] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.832500][ T9020] CPU: 0 UID: 0 PID: 9020 Comm: syz.1.622 Not tainted syzkaller #0 PREEMPT(full) [ 310.832545][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.832569][ T9020] Call Trace: [ 310.832580][ T9020] [ 310.832593][ T9020] dump_stack_lvl+0x16c/0x1f0 [ 310.832642][ T9020] should_fail_ex+0x512/0x640 [ 310.832702][ T9020] should_fail_alloc_page+0xe7/0x130 [ 310.832750][ T9020] prepare_alloc_pages+0x3c2/0x610 [ 310.832796][ T9020] ? rcu_is_watching+0x12/0xc0 [ 310.832835][ T9020] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 310.832872][ T9020] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 310.832931][ T9020] ? is_bpf_text_address+0x94/0x1a0 [ 310.832980][ T9020] ? kernel_text_address+0x8d/0x100 [ 310.833011][ T9020] ? __kernel_text_address+0xd/0x40 [ 310.833041][ T9020] ? unwind_get_return_address+0x59/0xa0 [ 310.833077][ T9020] ? arch_stack_walk+0xa6/0x100 [ 310.833113][ T9020] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 310.833177][ T9020] ? stack_depot_save_flags+0x29/0x9c0 [ 310.833228][ T9020] ? __pfx_stack_trace_save+0x10/0x10 [ 310.833271][ T9020] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.833329][ T9020] ? policy_nodemask+0xea/0x4e0 [ 310.833375][ T9020] alloc_pages_mpol+0x1fb/0x550 [ 310.833423][ T9020] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 310.833481][ T9020] alloc_pages_noprof+0x131/0x390 [ 310.833526][ T9020] kimage_alloc_pages+0x74/0x350 [ 310.833563][ T9020] kimage_alloc_control_pages+0x153/0xa00 [ 310.833610][ T9020] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 310.833659][ T9020] do_kexec_load+0x478/0x8a0 [ 310.833700][ T9020] ? __pfx_do_kexec_load+0x10/0x10 [ 310.833740][ T9020] ? _copy_from_user+0x59/0xd0 [ 310.833796][ T9020] __x64_sys_kexec_load+0x1bf/0x230 [ 310.833837][ T9020] do_syscall_64+0xcd/0xfa0 [ 310.833880][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.833915][ T9020] RIP: 0033:0x7fa2c8d8f7c9 [ 310.833942][ T9020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.833974][ T9020] RSP: 002b:00007fa2c9bc2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 310.834004][ T9020] RAX: ffffffffffffffda RBX: 00007fa2c8fe5fa0 RCX: 00007fa2c8d8f7c9 [ 310.834025][ T9020] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 310.834045][ T9020] RBP: 00007fa2c8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 310.834063][ T9020] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 310.834081][ T9020] R13: 00007fa2c8fe6038 R14: 00007fa2c8fe5fa0 R15: 00007fff44e4afc8 [ 310.834133][ T9020] [ 310.834295][ T9020] kexec: Could not allocate control_code_buffer [ 311.627689][ T9030] netlink: 'syz.3.623': attribute type 22 has an invalid length. [ 311.644017][ T9030] netlink: 330 bytes leftover after parsing attributes in process `syz.3.623'. [ 311.777925][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 312.392154][ T9040] netlink: 342 bytes leftover after parsing attributes in process `syz.3.627'. [ 313.454812][ T9041] can: request_module (can-proto-0) failed. [ 314.458004][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 314.973467][ T9068] FAULT_INJECTION: forcing a failure. [ 314.973467][ T9068] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.992386][ T9068] CPU: 0 UID: 0 PID: 9068 Comm: syz.2.631 Not tainted syzkaller #0 PREEMPT(full) [ 314.992429][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.992448][ T9068] Call Trace: [ 314.992458][ T9068] [ 314.992472][ T9068] dump_stack_lvl+0x16c/0x1f0 [ 314.992518][ T9068] should_fail_ex+0x512/0x640 [ 314.992575][ T9068] should_fail_alloc_page+0xe7/0x130 [ 314.992623][ T9068] prepare_alloc_pages+0x3c2/0x610 [ 314.992666][ T9068] ? rcu_is_watching+0x12/0xc0 [ 314.992705][ T9068] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 314.992742][ T9068] ? kasan_save_stack+0x33/0x60 [ 314.992794][ T9068] ? css_rstat_updated+0x1c2/0x510 [ 314.992834][ T9068] ? __pfx_css_rstat_updated+0x10/0x10 [ 314.992886][ T9068] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 314.992939][ T9068] ? __lock_acquire+0x622/0x1c90 [ 314.992989][ T9068] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.993062][ T9068] ? policy_nodemask+0xea/0x4e0 [ 314.993174][ T9068] alloc_pages_mpol+0x1fb/0x550 [ 314.993230][ T9068] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 314.993287][ T9068] folio_alloc_mpol_noprof+0x36/0x2f0 [ 314.993339][ T9068] vma_alloc_folio_noprof+0xed/0x1e0 [ 314.993388][ T9068] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 314.993452][ T9068] do_pte_missing+0x2202/0x3ba0 [ 314.993505][ T9068] ? find_held_lock+0x2b/0x80 [ 314.993550][ T9068] __handle_mm_fault+0x1556/0x2aa0 [ 314.993612][ T9068] ? __pfx___handle_mm_fault+0x10/0x10 [ 314.993666][ T9068] ? __pte_offset_map_lock+0x174/0x310 [ 314.993708][ T9068] ? find_held_lock+0x2b/0x80 [ 314.993755][ T9068] ? follow_page_pte+0x5cf/0x1390 [ 314.993809][ T9068] handle_mm_fault+0x589/0xd10 [ 314.993870][ T9068] __get_user_pages+0x54e/0x3530 [ 314.993936][ T9068] ? __pfx___get_user_pages+0x10/0x10 [ 314.993994][ T9068] populate_vma_page_range+0x267/0x3f0 [ 314.994045][ T9068] ? __pfx_populate_vma_page_range+0x10/0x10 [ 314.994093][ T9068] ? __pfx_find_vma_intersection+0x10/0x10 [ 314.994146][ T9068] ? do_mmap+0x69c/0x1210 [ 314.994194][ T9068] __mm_populate+0x1d8/0x380 [ 314.994241][ T9068] ? __pfx___mm_populate+0x10/0x10 [ 314.994294][ T9068] ? up_write+0x1b2/0x520 [ 314.994349][ T9068] vm_mmap_pgoff+0x37f/0x470 [ 314.994402][ T9068] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 314.994458][ T9068] ? __x64_sys_futex+0x1e0/0x4c0 [ 314.994501][ T9068] ? __x64_sys_futex+0x1e9/0x4c0 [ 314.994554][ T9068] ksys_mmap_pgoff+0x7d/0x5c0 [ 314.994595][ T9068] ? xfd_validate_state+0x61/0x180 [ 314.994676][ T9068] __x64_sys_mmap+0x125/0x190 [ 314.994731][ T9068] do_syscall_64+0xcd/0xfa0 [ 314.994782][ T9068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.994817][ T9068] RIP: 0033:0x7f1887b8f7c9 [ 314.994845][ T9068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.994878][ T9068] RSP: 002b:00007f18889b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 314.994911][ T9068] RAX: ffffffffffffffda RBX: 00007f1887de6090 RCX: 00007f1887b8f7c9 [ 314.994934][ T9068] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 314.994960][ T9068] RBP: 00007f1887c13f91 R08: 0000000000000002 R09: 0000000000008000 [ 314.994980][ T9068] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 314.995001][ T9068] R13: 00007f1887de6128 R14: 00007f1887de6090 R15: 00007ffd79f2e8f8 [ 314.995046][ T9068] [ 316.078186][ T9061] kexec: Could not allocate control_code_buffer [ 316.251405][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 316.299068][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 316.651043][ T9060] Process accounting resumed [ 317.257164][ T9072] syz.0.634 (9072) used greatest stack depth: 19816 bytes left [ 317.715152][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.641'. [ 317.752533][ T9104] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 317.779640][ T9104] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 318.113642][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.642'. [ 320.856769][ T9137] Format for deleting device is "id" (uint). [ 321.025212][ T9137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 321.046904][ T9137] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.072874][ T9137] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.118647][ T9137] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.350022][ T9147] random: crng reseeded on system resumption [ 322.389355][ T9163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.655'. [ 322.467523][ T9163] hsr_slave_0: left promiscuous mode [ 322.475308][ T9163] hsr_slave_1: left promiscuous mode [ 323.022642][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 323.105794][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 323.111919][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 323.182733][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 323.315994][ T9156] kexec: Could not allocate control_code_buffer [ 324.489392][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 325.676190][ T9216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.668'. [ 326.906988][ T9240] netlink: 346 bytes leftover after parsing attributes in process `syz.0.671'. [ 327.599883][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.608860][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.643490][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.674'. [ 327.696845][ T9251] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 327.960482][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 328.535144][ T9267] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 329.971150][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 330.228761][ T9290] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 330.610032][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 332.047441][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'. [ 333.624615][ T9340] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.639864][ T9340] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.699453][ T9340] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.827739][ T9340] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.502627][ T9365] netlink: 342 bytes leftover after parsing attributes in process `syz.0.698'. [ 335.303007][ T9374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.701'. [ 335.666633][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 335.673903][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 335.742383][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 335.916688][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 336.573641][ T9394] FAULT_INJECTION: forcing a failure. [ 336.573641][ T9394] name fail_futex, interval 1, probability 0, space 0, times 0 [ 336.598196][ T9394] CPU: 1 UID: 0 PID: 9394 Comm: syz.1.704 Not tainted syzkaller #0 PREEMPT(full) [ 336.598240][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.598265][ T9394] Call Trace: [ 336.598275][ T9394] [ 336.598287][ T9394] dump_stack_lvl+0x16c/0x1f0 [ 336.598333][ T9394] should_fail_ex+0x512/0x640 [ 336.598387][ T9394] get_futex_key+0x1d0/0x1560 [ 336.598433][ T9394] ? __pfx_get_futex_key+0x10/0x10 [ 336.598488][ T9394] futex_wait_setup+0x9d/0x550 [ 336.598529][ T9394] __futex_wait+0x193/0x2f0 [ 336.598559][ T9394] ? __pfx___futex_wait+0x10/0x10 [ 336.598592][ T9394] ? __pfx_futex_wake_mark+0x10/0x10 [ 336.598642][ T9394] ? futex_hash+0x2c5/0x380 [ 336.598683][ T9394] ? futex_private_hash_put+0xd5/0x190 [ 336.598727][ T9394] futex_wait+0xe8/0x380 [ 336.598755][ T9394] ? __pfx_futex_wait+0x10/0x10 [ 336.598792][ T9394] ? __might_fault+0xe3/0x190 [ 336.598820][ T9394] ? __might_fault+0x13b/0x190 [ 336.598858][ T9394] do_futex+0x229/0x350 [ 336.598900][ T9394] ? __pfx_do_futex+0x10/0x10 [ 336.598943][ T9394] ? __sys_connect+0xe0/0x160 [ 336.598992][ T9394] __x64_sys_futex+0x1e0/0x4c0 [ 336.599041][ T9394] ? __pfx___x64_sys_futex+0x10/0x10 [ 336.599085][ T9394] ? xfd_validate_state+0x61/0x180 [ 336.599127][ T9394] ? __pfx_ksys_write+0x10/0x10 [ 336.599184][ T9394] do_syscall_64+0xcd/0xfa0 [ 336.599227][ T9394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.599258][ T9394] RIP: 0033:0x7fa2c8d8f7c9 [ 336.599284][ T9394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.599314][ T9394] RSP: 002b:00007fa2c9bc20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 336.599344][ T9394] RAX: ffffffffffffffda RBX: 00007fa2c8fe5fa8 RCX: 00007fa2c8d8f7c9 [ 336.599364][ T9394] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa2c8fe5fa8 [ 336.599384][ T9394] RBP: 00007fa2c8fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 336.599404][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.599423][ T9394] R13: 00007fa2c8fe6038 R14: 00007fff44e4aee0 R15: 00007fff44e4afc8 [ 336.599464][ T9394] [ 337.128656][ T9394] svc: failed to register nfsdv3 RPC service (errno 111). [ 337.242487][ T9394] svc: failed to register nfsaclv3 RPC service (errno 111). [ 337.355191][ T9403] Process accounting paused [ 337.614091][ T9413] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 337.674421][ T9414] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 337.979232][ T9418] netlink: 342 bytes leftover after parsing attributes in process `syz.3.708'. [ 338.488540][ T9423] block nbd9: NBD_DISCONNECT [ 338.897024][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.710'. [ 339.792719][ T9442] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 340.960756][ T9459] overlayfs: missing 'lowerdir' [ 341.563272][ T9471] FAULT_INJECTION: forcing a failure. [ 341.563272][ T9471] name fail_futex, interval 1, probability 0, space 0, times 0 [ 341.618643][ T9471] CPU: 0 UID: 0 PID: 9471 Comm: syz.1.721 Not tainted syzkaller #0 PREEMPT(full) [ 341.618679][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.618696][ T9471] Call Trace: [ 341.618704][ T9471] [ 341.618714][ T9471] dump_stack_lvl+0x16c/0x1f0 [ 341.618752][ T9471] should_fail_ex+0x512/0x640 [ 341.618797][ T9471] get_futex_key+0x1d0/0x1560 [ 341.618836][ T9471] ? __pfx_get_futex_key+0x10/0x10 [ 341.618873][ T9471] ? __pick_eevdf+0x30a/0x670 [ 341.618911][ T9471] futex_wait_setup+0x9d/0x550 [ 341.618958][ T9471] __futex_wait+0x193/0x2f0 [ 341.618983][ T9471] ? __pfx___futex_wait+0x10/0x10 [ 341.619004][ T9471] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.619034][ T9471] ? lockdep_hardirqs_on+0x7c/0x110 [ 341.619069][ T9471] ? __pfx_futex_wake_mark+0x10/0x10 [ 341.619116][ T9471] ? find_held_lock+0x2b/0x80 [ 341.619146][ T9471] ? futex_private_hash_put+0xd5/0x190 [ 341.619182][ T9471] futex_wait+0xe8/0x380 [ 341.619205][ T9471] ? __pfx_futex_wait+0x10/0x10 [ 341.619237][ T9471] ? ksys_write+0x190/0x250 [ 341.619271][ T9471] do_futex+0x229/0x350 [ 341.619308][ T9471] ? __pfx_do_futex+0x10/0x10 [ 341.619351][ T9471] __x64_sys_futex+0x1e0/0x4c0 [ 341.619389][ T9471] ? fput+0x9b/0xd0 [ 341.619423][ T9471] ? __pfx___x64_sys_futex+0x10/0x10 [ 341.619457][ T9471] ? ksys_write+0x1ac/0x250 [ 341.619485][ T9471] ? __pfx_ksys_write+0x10/0x10 [ 341.619522][ T9471] do_syscall_64+0xcd/0xfa0 [ 341.619563][ T9471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.619589][ T9471] RIP: 0033:0x7fa2c8d8f7c9 [ 341.619609][ T9471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.619634][ T9471] RSP: 002b:00007fa2c9ba10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 341.619657][ T9471] RAX: ffffffffffffffda RBX: 00007fa2c8fe6098 RCX: 00007fa2c8d8f7c9 [ 341.619675][ T9471] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa2c8fe6098 [ 341.619691][ T9471] RBP: 00007fa2c8fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 341.619707][ T9471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.619724][ T9471] R13: 00007fa2c8fe6128 R14: 00007fff44e4aee0 R15: 00007fff44e4afc8 [ 341.619758][ T9471] [ 342.273354][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 342.304370][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 344.523894][ T9507] FAULT_INJECTION: forcing a failure. [ 344.523894][ T9507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.566996][ T9507] CPU: 1 UID: 0 PID: 9507 Comm: syz.3.728 Not tainted syzkaller #0 PREEMPT(full) [ 344.567049][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.567072][ T9507] Call Trace: [ 344.567084][ T9507] [ 344.567098][ T9507] dump_stack_lvl+0x16c/0x1f0 [ 344.567151][ T9507] should_fail_ex+0x512/0x640 [ 344.567224][ T9507] _copy_from_user+0x2e/0xd0 [ 344.567286][ T9507] memdup_user+0x6b/0xe0 [ 344.567327][ T9507] __x64_sys_kexec_load+0x18e/0x230 [ 344.567373][ T9507] do_syscall_64+0xcd/0xfa0 [ 344.567416][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.567452][ T9507] RIP: 0033:0x7f2fe298f7c9 [ 344.567480][ T9507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.567516][ T9507] RSP: 002b:00007f2fe38b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 344.567561][ T9507] RAX: ffffffffffffffda RBX: 00007f2fe2be5fa0 RCX: 00007f2fe298f7c9 [ 344.567591][ T9507] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 344.567613][ T9507] RBP: 00007f2fe2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 344.567635][ T9507] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 344.567656][ T9507] R13: 00007f2fe2be6038 R14: 00007f2fe2be5fa0 R15: 00007ffd208d8fd8 [ 344.567706][ T9507] [ 345.325096][ T9525] random: crng reseeded on system resumption [ 345.398978][ T9517] zswap: compressor not available [ 345.657870][ T9521] nvme_fcloop: unknown parameter or missing value '7' [ 345.701345][ T9521] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 346.337588][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 346.597402][ T9546] netlink: 342 bytes leftover after parsing attributes in process `syz.0.737'. [ 346.890333][ T9549] FAULT_INJECTION: forcing a failure. [ 346.890333][ T9549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.972497][ T9549] CPU: 1 UID: 0 PID: 9549 Comm: syz.2.739 Not tainted syzkaller #0 PREEMPT(full) [ 346.972551][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.972574][ T9549] Call Trace: [ 346.972586][ T9549] [ 346.972600][ T9549] dump_stack_lvl+0x16c/0x1f0 [ 346.972651][ T9549] should_fail_ex+0x512/0x640 [ 346.972709][ T9549] _copy_from_user+0x2e/0xd0 [ 346.972766][ T9549] memdup_user+0x6b/0xe0 [ 346.972804][ T9549] __x64_sys_kexec_load+0x18e/0x230 [ 346.972849][ T9549] do_syscall_64+0xcd/0xfa0 [ 346.972896][ T9549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.972930][ T9549] RIP: 0033:0x7f1887b8f7c9 [ 346.972959][ T9549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.972993][ T9549] RSP: 002b:00007f18889d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 346.973026][ T9549] RAX: ffffffffffffffda RBX: 00007f1887de5fa0 RCX: 00007f1887b8f7c9 [ 346.973047][ T9549] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 346.973067][ T9549] RBP: 00007f1887c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 346.973086][ T9549] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 346.973105][ T9549] R13: 00007f1887de6038 R14: 00007f1887de5fa0 R15: 00007ffd79f2e8f8 [ 346.973150][ T9549] [ 347.166860][ T9556] Process accounting paused [ 347.290309][ T9560] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 349.405000][ T9581] netlink: 342 bytes leftover after parsing attributes in process `syz.1.747'. [ 349.453671][ T9582] netlink: 334 bytes leftover after parsing attributes in process `syz.0.746'. [ 349.592744][ T9584] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 350.171359][ T9596] zswap: compressor - not available [ 350.641319][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 351.622753][ T9624] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 351.722677][ T9628] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 351.772583][ T9624] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 352.229820][ T9633] netlink: 334 bytes leftover after parsing attributes in process `syz.1.759'. [ 353.906285][ T9652] FAULT_INJECTION: forcing a failure. [ 353.906285][ T9652] name failslab, interval 1, probability 0, space 0, times 0 [ 353.920849][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.0.766 Not tainted syzkaller #0 PREEMPT(full) [ 353.920890][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.920909][ T9652] Call Trace: [ 353.920920][ T9652] [ 353.920932][ T9652] dump_stack_lvl+0x16c/0x1f0 [ 353.920979][ T9652] should_fail_ex+0x512/0x640 [ 353.921030][ T9652] ? __kmalloc_noprof+0xca/0x880 [ 353.921064][ T9652] should_failslab+0xc2/0x120 [ 353.921110][ T9652] __kmalloc_noprof+0xdd/0x880 [ 353.921144][ T9652] ? devlink_fmsg_put_value+0xaa/0x2d0 [ 353.921199][ T9652] ? devlink_fmsg_put_value+0xaa/0x2d0 [ 353.921243][ T9652] devlink_fmsg_put_value+0xaa/0x2d0 [ 353.921292][ T9652] devlink_fmsg_binary_pair_put+0x210/0x4f0 [ 353.921350][ T9652] nsim_dev_dummy_fmsg_put+0xb5/0x1e0 [ 353.921397][ T9652] devlink_health_do_dump+0x243/0x620 [ 353.921463][ T9652] devlink_health_report+0x6c3/0xb00 [ 353.921523][ T9652] ? __pfx_devlink_health_report+0x10/0x10 [ 353.921575][ T9652] ? _copy_from_user+0x59/0xd0 [ 353.921631][ T9652] nsim_dev_health_break_write+0x166/0x210 [ 353.921679][ T9652] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 353.921740][ T9652] full_proxy_write+0x131/0x1a0 [ 353.921789][ T9652] ? __pfx_full_proxy_write+0x10/0x10 [ 353.921830][ T9652] vfs_write+0x2a0/0x11d0 [ 353.921873][ T9652] ? __pfx___mutex_lock+0x10/0x10 [ 353.921917][ T9652] ? __pfx_vfs_write+0x10/0x10 [ 353.921964][ T9652] ? __fget_files+0x20e/0x3c0 [ 353.922010][ T9652] ksys_write+0x12a/0x250 [ 353.922047][ T9652] ? __pfx_ksys_write+0x10/0x10 [ 353.922098][ T9652] do_syscall_64+0xcd/0xfa0 [ 353.922141][ T9652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.922174][ T9652] RIP: 0033:0x7fbe26b8f7c9 [ 353.922205][ T9652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.922235][ T9652] RSP: 002b:00007fbe279b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.922266][ T9652] RAX: ffffffffffffffda RBX: 00007fbe26de5fa0 RCX: 00007fbe26b8f7c9 [ 353.922286][ T9652] RDX: 0000000000000006 RSI: 0000200000005900 RDI: 0000000000000007 [ 353.922306][ T9652] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 353.922325][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.922343][ T9652] R13: 00007fbe26de6038 R14: 00007fbe26de5fa0 R15: 00007fff20f850f8 [ 353.922385][ T9652] [ 354.166576][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.522353][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 357.190289][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 357.644509][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 360.625810][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 360.661374][ T9728] netlink: 334 bytes leftover after parsing attributes in process `syz.1.782'. [ 361.040297][ T9736] FAULT_INJECTION: forcing a failure. [ 361.040297][ T9736] name failslab, interval 1, probability 0, space 0, times 0 [ 361.064827][ T9736] CPU: 0 UID: 0 PID: 9736 Comm: syz.0.784 Not tainted syzkaller #0 PREEMPT(full) [ 361.064860][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.064881][ T9736] Call Trace: [ 361.064889][ T9736] [ 361.064898][ T9736] dump_stack_lvl+0x16c/0x1f0 [ 361.064931][ T9736] should_fail_ex+0x512/0x640 [ 361.064967][ T9736] ? fs_reclaim_acquire+0xae/0x150 [ 361.065002][ T9736] should_failslab+0xc2/0x120 [ 361.065034][ T9736] kmem_cache_alloc_noprof+0x75/0x6e0 [ 361.065058][ T9736] ? __pfx_map_id_range_down+0x10/0x10 [ 361.065079][ T9736] ? security_inode_alloc+0x3b/0x2b0 [ 361.065125][ T9736] ? security_inode_alloc+0x3b/0x2b0 [ 361.065161][ T9736] security_inode_alloc+0x3b/0x2b0 [ 361.065199][ T9736] inode_init_always_gfp+0xce4/0x1030 [ 361.065229][ T9736] alloc_inode+0x86/0x240 [ 361.065263][ T9736] new_inode+0x22/0x1c0 [ 361.065298][ T9736] __debugfs_create_file+0x11c/0x6b0 [ 361.065327][ T9736] debugfs_create_file_full+0x41/0x60 [ 361.065362][ T9736] kvm_dev_ioctl+0x14ca/0x1a80 [ 361.065400][ T9736] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 361.065438][ T9736] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 361.065467][ T9736] __x64_sys_ioctl+0x18e/0x210 [ 361.065511][ T9736] do_syscall_64+0xcd/0xfa0 [ 361.065542][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.065566][ T9736] RIP: 0033:0x7fbe26b8f7c9 [ 361.065585][ T9736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.065608][ T9736] RSP: 002b:00007fbe279b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.065630][ T9736] RAX: ffffffffffffffda RBX: 00007fbe26de5fa0 RCX: 00007fbe26b8f7c9 [ 361.065645][ T9736] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 361.065660][ T9736] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 361.065674][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.065688][ T9736] R13: 00007fbe26de6038 R14: 00007fbe26de5fa0 R15: 00007fff20f850f8 [ 361.065720][ T9736] [ 361.065749][ T9736] debugfs: out of free dentries, can not create file 'mmu_unsync' [ 361.393741][ T9746] program syz.1.786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.090146][ T9752] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 363.146000][ T9766] netlink: 'syz.1.790': attribute type 11 has an invalid length. [ 363.232792][ T9766] netlink: 'syz.1.790': attribute type 11 has an invalid length. [ 363.316843][ T9766] netlink: 'syz.1.790': attribute type 11 has an invalid length. [ 363.476429][ T9766] netlink: 'syz.1.790': attribute type 11 has an invalid length. [ 363.532401][ T9766] netlink: 'syz.1.790': attribute type 11 has an invalid length. [ 364.351726][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 367.732860][ T9815] Process accounting resumed [ 368.467226][ T5839] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 369.303466][ T9818] netlink: set zone limit has 8 unknown bytes [ 369.443472][ T9839] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 369.555759][ T30] audit: type=1800 audit(1764460434.097:7): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.814" name="lu_gp_id" dev="configfs" ino=27613 res=0 errno=0 [ 370.102578][ T9846] netlink: 346 bytes leftover after parsing attributes in process `syz.0.807'. [ 370.542598][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 372.308189][ T9883] netlink: 'syz.3.816': attribute type 23 has an invalid length. [ 372.856253][ T9892] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 373.776648][ T9930] random: crng reseeded on system resumption [ 373.913005][ T9925] zswap: compressor not available [ 374.448376][ T9932] __vm_enough_memory: pid: 9932, comm: syz.0.827, bytes: 4398046511104 not enough memory for the allocation [ 374.962866][ T9943] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 375.172164][ T9951] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 376.203951][ T9962] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 376.601570][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 376.635538][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 376.899337][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 378.659036][T10017] hub 1-0:1.0: USB hub found [ 378.664203][T10017] hub 1-0:1.0: 1 port detected [ 378.716142][T10017] hub 1-0:1.0: USB hub found [ 378.732748][T10017] hub 1-0:1.0: 1 port detected [ 379.679810][T10042] ksmbd: Unknown IPC event: 0, ignore. [ 379.990843][T10050] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 382.327834][T10083] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 382.862488][T10089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.862'. [ 383.914115][T10100] svc: failed to register nfsdv3 RPC service (errno 111). [ 383.953933][T10100] svc: failed to register nfsaclv3 RPC service (errno 111). [ 384.935582][T10111] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 385.223084][T10121] ubi31: attaching mtd0 [ 385.246468][T10121] ubi31: scanning is finished [ 385.291605][T10121] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 385.934077][T10121] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 386.153836][T10138] FAULT_INJECTION: forcing a failure. [ 386.153836][T10138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.216372][T10138] CPU: 0 UID: 0 PID: 10138 Comm: syz.3.873 Not tainted syzkaller #0 PREEMPT(full) [ 386.216420][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.216440][T10138] Call Trace: [ 386.216451][T10138] [ 386.216463][T10138] dump_stack_lvl+0x16c/0x1f0 [ 386.216511][T10138] should_fail_ex+0x512/0x640 [ 386.216566][T10138] _copy_from_user+0x2e/0xd0 [ 386.216618][T10138] memdup_user+0x6b/0xe0 [ 386.216657][T10138] __x64_sys_kexec_load+0x18e/0x230 [ 386.216700][T10138] do_syscall_64+0xcd/0xfa0 [ 386.216744][T10138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.216778][T10138] RIP: 0033:0x7f2fe298f7c9 [ 386.216804][T10138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.216836][T10138] RSP: 002b:00007f2fe38b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 386.216874][T10138] RAX: ffffffffffffffda RBX: 00007f2fe2be5fa0 RCX: 00007f2fe298f7c9 [ 386.216896][T10138] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 386.216915][T10138] RBP: 00007f2fe2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 386.216934][T10138] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 386.216953][T10138] R13: 00007f2fe2be6038 R14: 00007f2fe2be5fa0 R15: 00007ffd208d8fd8 [ 386.216997][T10138] [ 387.444464][T10166] input: jJǸ-9%vJ86 as /devices/virtual/input/input17 [ 387.526957][T10169] usb usb24: usbfs: process 10169 (syz.3.881) did not claim interface 0 before use [ 388.558978][T10188] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 389.029645][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.036690][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.484033][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 392.009394][T10256] FAULT_INJECTION: forcing a failure. [ 392.009394][T10256] name failslab, interval 1, probability 0, space 0, times 0 [ 392.042169][T10256] CPU: 0 UID: 0 PID: 10256 Comm: syz.0.901 Not tainted syzkaller #0 PREEMPT(full) [ 392.042218][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.042237][T10256] Call Trace: [ 392.042254][T10256] [ 392.042266][T10256] dump_stack_lvl+0x16c/0x1f0 [ 392.042313][T10256] should_fail_ex+0x512/0x640 [ 392.042360][T10256] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 392.042416][T10256] should_failslab+0xc2/0x120 [ 392.042460][T10256] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 392.042504][T10256] ? __udp_init+0x37/0x80 [ 392.042553][T10256] ? kmemdup_noprof+0x29/0x60 [ 392.042583][T10256] kmemdup_noprof+0x29/0x60 [ 392.042615][T10256] ? __pfx___udp_init+0x10/0x10 [ 392.042653][T10256] __udp_init+0x37/0x80 [ 392.042694][T10256] ip_vs_protocol_net_init+0x194/0x300 [ 392.042740][T10256] __ip_vs_init+0x239/0x520 [ 392.042768][T10256] ? __pfx___ip_vs_init+0x10/0x10 [ 392.042792][T10256] ops_init+0x1e2/0x5f0 [ 392.042828][T10256] setup_net+0x100/0x390 [ 392.042862][T10256] ? __pfx_setup_net+0x10/0x10 [ 392.042899][T10256] ? debug_mutex_init+0x37/0x70 [ 392.042939][T10256] copy_net_ns+0x2f8/0x690 [ 392.042981][T10256] create_new_namespaces+0x3ea/0xa90 [ 392.043030][T10256] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 392.043074][T10256] ksys_unshare+0x45b/0xa40 [ 392.043119][T10256] ? __pfx_ksys_unshare+0x10/0x10 [ 392.043167][T10256] ? xfd_validate_state+0x61/0x180 [ 392.043226][T10256] __x64_sys_unshare+0x31/0x40 [ 392.043271][T10256] do_syscall_64+0xcd/0xfa0 [ 392.043313][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.043346][T10256] RIP: 0033:0x7fbe26b8f7c9 [ 392.043380][T10256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.043408][T10256] RSP: 002b:00007fbe27993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 392.043435][T10256] RAX: ffffffffffffffda RBX: 00007fbe26de6090 RCX: 00007fbe26b8f7c9 [ 392.043454][T10256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 392.043471][T10256] RBP: 00007fbe26c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 392.043487][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.043504][T10256] R13: 00007fbe26de6128 R14: 00007fbe26de6090 R15: 00007fff20f850f8 [ 392.043541][T10256] [ 393.115092][T10279] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 393.906593][T10288] netlink: 'syz.0.908': attribute type 11 has an invalid length. [ 393.934154][T10288] netlink: 'syz.0.908': attribute type 11 has an invalid length. [ 394.931941][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 395.138832][T10323] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 398.211474][T10349] Process accounting paused [ 398.433044][T10371] netlink: 334 bytes leftover after parsing attributes in process `syz.0.927'. [ 398.620478][T10375] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 398.638471][T10375] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 398.664141][T10375] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 398.702522][T10375] page_type: f5(slab) [ 398.709646][T10375] raw: 00fff00000000040 ffff888140407780 ffffea0001e00180 0000000000000003 [ 398.758875][T10375] raw: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 398.770732][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'. [ 398.796144][T10375] head: 00fff00000000040 ffff888140407780 ffffea0001e00180 0000000000000003 [ 398.832338][T10375] head: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 398.863947][T10375] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 398.892352][T10375] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 398.921879][T10375] page dumped because: unmovable page [ 398.929264][T10375] page_owner tracks the page as allocated [ 398.956999][T10375] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevd), ts 62584105284, free_ts 37219737482 [ 399.012333][T10375] post_alloc_hook+0x1af/0x220 [ 399.017356][T10375] get_page_from_freelist+0x10a3/0x3a30 [ 399.042857][T10375] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 399.050650][T10375] alloc_pages_mpol+0x1fb/0x550 [ 399.070997][T10375] new_slab+0x24a/0x360 [ 399.085341][T10375] ___slab_alloc+0xd79/0x1a50 [ 399.102400][T10375] __slab_alloc.constprop.0+0x63/0x110 [ 399.107990][T10375] kmem_cache_alloc_lru_noprof+0x443/0x6e0 [ 399.132323][T10375] __d_alloc+0x32/0xae0 [ 399.136641][T10375] d_alloc_parallel+0x111/0x1510 [ 399.141664][T10375] __lookup_slow+0x193/0x460 [ 399.172373][T10375] walk_component+0x353/0x5b0 [ 399.177256][T10375] path_lookupat+0x142/0x6d0 [ 399.181924][T10375] filename_lookup+0x224/0x5f0 [ 399.202325][T10375] vfs_statx+0x101/0x3f0 [ 399.206701][T10375] vfs_fstatat+0x7b/0xf0 [ 399.211368][T10375] page last free pid 1 tgid 1 stack trace: [ 399.242294][T10375] __free_frozen_pages+0x7df/0x1160 [ 399.248773][T10375] free_contig_range+0x183/0x4b0 [ 399.269804][T10375] destroy_args+0xb69/0x12e0 [ 399.279931][T10375] debug_vm_pgtable+0x1a32/0x3640 [ 399.300702][T10375] do_one_initcall+0x123/0x6e0 [ 399.311108][T10375] kernel_init_freeable+0x5c8/0x920 [ 399.342386][T10375] kernel_init+0x1c/0x2b0 [ 399.346961][T10375] ret_from_fork+0x675/0x7d0 [ 399.379795][T10375] ret_from_fork_asm+0x1a/0x30 [ 399.706447][T10387] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 399.733119][T10389] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 399.753276][T10387] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 399.814432][T10387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.825990][T10387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.837843][T10387] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 400.082660][T10403] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 400.593025][T10410] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 400.817499][T10414] netlink: 334 bytes leftover after parsing attributes in process `syz.2.938'. [ 401.744098][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 401.822555][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 401.829052][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 401.902346][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 403.992350][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 405.249933][T10491] random: crng reseeded on system resumption [ 406.401541][T10513] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 407.844307][T10540] program syz.3.962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.520217][T10554] random: crng reseeded on system resumption [ 413.705224][ C1] ------------[ cut here ]------------ [ 413.711621][ C1] WARNING: CPU: 1 PID: 10603 at net/mptcp/subflow.c:1519 subflow_data_ready+0x40b/0x7c0 [ 413.722283][ C1] Modules linked in: [ 413.727414][ C1] CPU: 1 UID: 0 PID: 10603 Comm: syz.1.975 Not tainted syzkaller #0 PREEMPT(full) [ 413.737666][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.748802][ C1] RIP: 0010:subflow_data_ready+0x40b/0x7c0 [ 413.755017][ C1] Code: 89 ee e8 a8 cb 72 f6 40 84 ed 75 21 e8 be d0 72 f6 44 89 fe bf 07 00 00 00 e8 f1 cb 72 f6 41 83 ff 07 74 09 e8 a6 d0 72 f6 90 <0f> 0b 90 e8 9d d0 72 f6 48 89 df e8 e5 ad ff ff 31 ff 89 c5 89 c6 [ 413.777099][ C1] RSP: 0018:ffffc90000a08550 EFLAGS: 00010246 [ 413.783305][ C1] RAX: 0000000000000000 RBX: ffff888025ca5940 RCX: ffffffff8b4986df [ 413.791591][ C1] RDX: ffff8880283e5ac0 RSI: ffffffff8b4986ea RDI: 0000000000000005 [ 413.799837][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 413.807914][ C1] R10: 0000000000000004 R11: 00000028000000f0 R12: ffff888041b18c00 [ 413.816028][ C1] R13: 1ffff920001410aa R14: ffff88805c6f1c00 R15: 0000000000000004 [ 413.824141][ C1] FS: 0000000000000000(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000 [ 413.833381][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.840046][ C1] CR2: 0000001b31103a98 CR3: 000000003156c000 CR4: 00000000003526f0 [ 413.848142][ C1] Call Trace: [ 413.851472][ C1] [ 413.854610][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 413.860341][ C1] ? skb_release_data+0x79a/0x9e0 [ 413.865558][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 413.871656][ C1] tcp_data_ready+0x110/0x550 [ 413.876538][ C1] tcp_data_queue+0x1aa6/0x5000 [ 413.881667][ C1] ? tcp_urg+0x10f/0xb80 [ 413.886419][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 413.891795][ C1] ? tcp_parse_options+0x11c0/0x1250 [ 413.897500][ C1] tcp_rcv_state_process+0xfb6/0x6490 [ 413.903009][ C1] ? lock_acquire+0x179/0x350 [ 413.907872][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 413.913827][ C1] ? sk_filter_trim_cap+0x11a/0xd90 [ 413.919270][ C1] ? lock_acquire+0x179/0x350 [ 413.924337][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 413.929668][ C1] ? tcp_v4_do_rcv+0x68e/0x10a0 [ 413.934740][ C1] tcp_v4_do_rcv+0x68e/0x10a0 [ 413.939508][ C1] tcp_v4_rcv+0x3077/0x4db0 [ 413.944265][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 413.949216][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 413.955103][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 413.960046][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 413.965555][ C1] ip_local_deliver_finish+0x3f2/0x720 [ 413.971091][ C1] ip_local_deliver+0x18e/0x1f0 [ 413.976306][ C1] ip_rcv+0x2e0/0x600 [ 413.980408][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 413.985111][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 413.991091][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 413.997778][ C1] ? lock_acquire+0x179/0x350 [ 414.002768][ C1] ? process_backlog+0x3e7/0x15e0 [ 414.007975][ C1] __netif_receive_skb+0x1d/0x160 [ 414.013146][ C1] process_backlog+0x439/0x15e0 [ 414.018106][ C1] __napi_poll.constprop.0+0xba/0x550 [ 414.023603][ C1] ? skb_defer_free_flush+0x149/0x280 [ 414.029049][ C1] net_rx_action+0x97f/0xef0 [ 414.034016][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 414.039306][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 414.044638][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 414.050036][ C1] ? sched_clock+0x38/0x60 [ 414.054596][ C1] ? sched_clock_cpu+0x6c/0x530 [ 414.059547][ C1] ? mark_held_locks+0x49/0x80 [ 414.064542][ C1] handle_softirqs+0x219/0x8e0 [ 414.069377][ C1] ? handle_edge_irq+0x196/0x9e0 [ 414.074432][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 414.079817][ C1] __irq_exit_rcu+0x109/0x170 [ 414.084700][ C1] irq_exit_rcu+0x9/0x30 [ 414.089108][ C1] common_interrupt+0xbf/0xe0 [ 414.094217][ C1] [ 414.097291][ C1] [ 414.100266][ C1] asm_common_interrupt+0x26/0x40 [ 414.105501][ C1] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 414.111393][ C1] Code: df 55 65 48 8b 2d ac 32 42 08 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 cf 1f 2a f6 e8 ea 5a 65 f6 fb bf 01 00 00 00 af 99 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 bd aa 29 [ 414.131483][ C1] RSP: 0018:ffffc900194d6718 EFLAGS: 00000202 [ 414.137682][ C1] RAX: 0000000000022e61 RBX: ffffed100507cb58 RCX: 0000000000000006 [ 414.145804][ C1] RDX: 0000000000000000 RSI: ffffffff8da29682 RDI: 0000000000000001 [ 414.153977][ C1] RBP: ffff8880283e5ac0 R08: 0000000000000001 R09: 0000000000000001 [ 414.162412][ C1] R10: ffffffff908253d7 R11: 0000000000000001 R12: 0000000000000000 [ 414.170540][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.178857][ C1] ? preempt_schedule_irq+0x46/0x90 [ 414.184226][ C1] irqentry_exit+0x36/0x90 [ 414.189079][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.195300][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 414.200603][ C1] Code: dd 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 00 ea 0e 0f 82 74 02 00 00 8b 35 fa 30 ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 dc 08 12 0f 85 c7 02 00 00 48 83 c4 [ 414.220610][ C1] RSP: 0018:ffffc900194d67e0 EFLAGS: 00000206 [ 414.226801][ C1] RAX: 0000000000000046 RBX: ffffffff8e58a2e0 RCX: ffffffff93adf660 [ 414.234907][ C1] RDX: 0000000000000000 RSI: ffffffff8da03cd1 RDI: ffffffff8bf07940 [ 414.242983][ C1] RBP: 0000000000000000 R08: ce141928764d200e R09: 0000000000000000 [ 414.251103][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 414.259195][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.267320][ C1] ? fs_reclaim_acquire+0xae/0x150 [ 414.272565][ C1] fs_reclaim_acquire+0xca/0x150 [ 414.277669][ C1] ? fs_reclaim_acquire+0xae/0x150 [ 414.282891][ C1] prepare_alloc_pages+0x162/0x610 [ 414.288069][ C1] ? rcu_is_watching+0x12/0xc0 [ 414.292967][ C1] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 414.298934][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 414.304025][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 414.310716][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 414.315897][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 414.321387][ C1] ? find_held_lock+0x2b/0x80 [ 414.326382][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 414.331415][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 414.337639][ C1] ? policy_nodemask+0xea/0x4e0 [ 414.342625][ C1] alloc_pages_mpol+0x1fb/0x550 [ 414.347727][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 414.353252][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 414.358796][ C1] shmem_alloc_folio+0x135/0x160 [ 414.363870][ C1] shmem_alloc_and_add_folio+0x494/0xc20 [ 414.369633][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 414.375998][ C1] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 414.381966][ C1] shmem_get_folio_gfp+0x67f/0x1610 [ 414.388243][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 414.393349][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 414.399147][ C1] shmem_write_begin+0x160/0x300 [ 414.404383][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 414.409944][ C1] ? timestamp_truncate+0x21e/0x2d0 [ 414.415502][ C1] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 414.422568][ C1] generic_perform_write+0x3c4/0x900 [ 414.428038][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 414.434006][ C1] ? inode_needs_update_time.part.0+0x191/0x270 [ 414.440514][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 414.446441][ C1] shmem_file_write_iter+0x10e/0x140 [ 414.451907][ C1] __kernel_write_iter+0x31a/0xb10 [ 414.457163][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 414.462952][ C1] ? __up_read+0x1f8/0x750 [ 414.467509][ C1] ? dump_user_range+0x756/0xb70 [ 414.472657][ C1] ? dump_user_range+0x467/0xb70 [ 414.477845][ C1] dump_user_range+0x413/0xb70 [ 414.482739][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 414.488160][ C1] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 414.494548][ C1] ? __pfx_writenote+0x10/0x10 [ 414.499666][ C1] elf_core_dump+0x29c3/0x3c00 [ 414.504749][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 414.510021][ C1] ? kasan_save_stack+0x33/0x60 [ 414.515007][ C1] ? kasan_save_track+0x14/0x30 [ 414.520201][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 414.525189][ C1] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 414.530843][ C1] ? vfs_coredump+0x1ddc/0x5670 [ 414.536072][ C1] ? arch_do_signal_or_restart+0x8f/0x790 [ 414.541951][ C1] ? irqentry_exit_to_user_mode+0x176/0x310 [ 414.547972][ C1] ? asm_exc_page_fault+0x26/0x30 [ 414.553104][ C1] ? 0xffffffffff600000 [ 414.557382][ C1] ? vfs_coredump+0x2b9f/0x5670 [ 414.562344][ C1] vfs_coredump+0x2b9f/0x5670 [ 414.567104][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 414.572236][ C1] ? __lock_acquire+0x622/0x1c90 [ 414.577260][ C1] ? lock_acquire+0x179/0x350 [ 414.582044][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 414.587457][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 414.592352][ C1] ? unwind_get_return_address+0x59/0xa0 [ 414.598042][ C1] ? arch_stack_walk+0xa6/0x100 [ 414.603010][ C1] ? stack_trace_save+0x8e/0xc0 [ 414.607922][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 414.613503][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 414.619311][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 414.624484][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 414.630360][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 414.636598][ C1] ? rcu_is_watching+0x12/0xc0 [ 414.641469][ C1] get_signal+0x22e1/0x26d0 [ 414.646331][ C1] ? __pfx_get_signal+0x10/0x10 [ 414.651292][ C1] ? force_sig_fault+0xc4/0x100 [ 414.656490][ C1] arch_do_signal_or_restart+0x8f/0x790 [ 414.662125][ C1] ? find_held_lock+0x2b/0x80 [ 414.666932][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 414.673521][ C1] irqentry_exit_to_user_mode+0x176/0x310 [ 414.679437][ C1] asm_exc_page_fault+0x26/0x30 [ 414.684509][ C1] RIP: 0033:0x7fa2c8c4f6b7 [ 414.689169][ C1] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 414.709660][ C1] RSP: 002b:00007fa2c9b610e0 EFLAGS: 00010202 [ 414.715849][ C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0003ffff00000000 [ 414.723978][ C1] RDX: 00007fa2c9b61100 RSI: 00007fa2c9b61230 RDI: 000000000000000b [ 414.732101][ C1] RBP: 00007fa2c8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 414.740213][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 414.748826][ C1] R13: 00007fa2c8fe6218 R14: 00007fa2c8fe6180 R15: 00007fff44e4afc8 [ 414.757294][ C1] [ 414.760646][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 414.768326][ C1] CPU: 1 UID: 0 PID: 10603 Comm: syz.1.975 Not tainted syzkaller #0 PREEMPT(full) [ 414.778128][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.788929][ C1] Call Trace: [ 414.792421][ C1] [ 414.795989][ C1] dump_stack_lvl+0x3d/0x1f0 [ 414.800740][ C1] vpanic+0x640/0x6f0 [ 414.804890][ C1] ? subflow_data_ready+0x40b/0x7c0 [ 414.810341][ C1] panic+0xca/0xd0 [ 414.814410][ C1] ? __pfx_panic+0x10/0x10 [ 414.818905][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 414.824068][ C1] check_panic_on_warn+0xab/0xb0 [ 414.829053][ C1] __warn+0xf6/0x3c0 [ 414.833003][ C1] ? subflow_data_ready+0x40b/0x7c0 [ 414.838473][ C1] report_bug+0x3c3/0x580 [ 414.843069][ C1] ? subflow_data_ready+0x40b/0x7c0 [ 414.848518][ C1] handle_bug+0x184/0x210 [ 414.853243][ C1] exc_invalid_op+0x17/0x50 [ 414.858267][ C1] asm_exc_invalid_op+0x1a/0x20 [ 414.863375][ C1] RIP: 0010:subflow_data_ready+0x40b/0x7c0 [ 414.869261][ C1] Code: 89 ee e8 a8 cb 72 f6 40 84 ed 75 21 e8 be d0 72 f6 44 89 fe bf 07 00 00 00 e8 f1 cb 72 f6 41 83 ff 07 74 09 e8 a6 d0 72 f6 90 <0f> 0b 90 e8 9d d0 72 f6 48 89 df e8 e5 ad ff ff 31 ff 89 c5 89 c6 [ 414.889277][ C1] RSP: 0018:ffffc90000a08550 EFLAGS: 00010246 [ 414.895512][ C1] RAX: 0000000000000000 RBX: ffff888025ca5940 RCX: ffffffff8b4986df [ 414.903604][ C1] RDX: ffff8880283e5ac0 RSI: ffffffff8b4986ea RDI: 0000000000000005 [ 414.911603][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 414.919797][ C1] R10: 0000000000000004 R11: 00000028000000f0 R12: ffff888041b18c00 [ 414.927884][ C1] R13: 1ffff920001410aa R14: ffff88805c6f1c00 R15: 0000000000000004 [ 414.936040][ C1] ? subflow_data_ready+0x3ff/0x7c0 [ 414.941467][ C1] ? subflow_data_ready+0x40a/0x7c0 [ 414.946816][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 414.952424][ C1] ? skb_release_data+0x79a/0x9e0 [ 414.957501][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 414.963463][ C1] tcp_data_ready+0x110/0x550 [ 414.968188][ C1] tcp_data_queue+0x1aa6/0x5000 [ 414.973200][ C1] ? tcp_urg+0x10f/0xb80 [ 414.977610][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 414.982968][ C1] ? tcp_parse_options+0x11c0/0x1250 [ 414.988446][ C1] tcp_rcv_state_process+0xfb6/0x6490 [ 414.993886][ C1] ? lock_acquire+0x179/0x350 [ 414.998728][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 415.004788][ C1] ? sk_filter_trim_cap+0x11a/0xd90 [ 415.010122][ C1] ? lock_acquire+0x179/0x350 [ 415.015030][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 415.020235][ C1] ? tcp_v4_do_rcv+0x68e/0x10a0 [ 415.025177][ C1] tcp_v4_do_rcv+0x68e/0x10a0 [ 415.029929][ C1] tcp_v4_rcv+0x3077/0x4db0 [ 415.034507][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 415.039433][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 415.044960][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 415.049877][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 415.055482][ C1] ip_local_deliver_finish+0x3f2/0x720 [ 415.061019][ C1] ip_local_deliver+0x18e/0x1f0 [ 415.065925][ C1] ip_rcv+0x2e0/0x600 [ 415.069973][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 415.074506][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 415.080472][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 415.086933][ C1] ? lock_acquire+0x179/0x350 [ 415.091741][ C1] ? process_backlog+0x3e7/0x15e0 [ 415.096801][ C1] __netif_receive_skb+0x1d/0x160 [ 415.101869][ C1] process_backlog+0x439/0x15e0 [ 415.106770][ C1] __napi_poll.constprop.0+0xba/0x550 [ 415.112197][ C1] ? skb_defer_free_flush+0x149/0x280 [ 415.117708][ C1] net_rx_action+0x97f/0xef0 [ 415.122456][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 415.127891][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 415.132910][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 415.138318][ C1] ? sched_clock+0x38/0x60 [ 415.142770][ C1] ? sched_clock_cpu+0x6c/0x530 [ 415.147757][ C1] ? mark_held_locks+0x49/0x80 [ 415.152559][ C1] handle_softirqs+0x219/0x8e0 [ 415.157359][ C1] ? handle_edge_irq+0x196/0x9e0 [ 415.162424][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 415.167745][ C1] __irq_exit_rcu+0x109/0x170 [ 415.172447][ C1] irq_exit_rcu+0x9/0x30 [ 415.176733][ C1] common_interrupt+0xbf/0xe0 [ 415.181714][ C1] [ 415.184679][ C1] [ 415.188158][ C1] asm_common_interrupt+0x26/0x40 [ 415.193420][ C1] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 415.199348][ C1] Code: df 55 65 48 8b 2d ac 32 42 08 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 cf 1f 2a f6 e8 ea 5a 65 f6 fb bf 01 00 00 00 af 99 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 bd aa 29 [ 415.218997][ C1] RSP: 0018:ffffc900194d6718 EFLAGS: 00000202 [ 415.225100][ C1] RAX: 0000000000022e61 RBX: ffffed100507cb58 RCX: 0000000000000006 [ 415.233193][ C1] RDX: 0000000000000000 RSI: ffffffff8da29682 RDI: 0000000000000001 [ 415.241375][ C1] RBP: ffff8880283e5ac0 R08: 0000000000000001 R09: 0000000000000001 [ 415.249544][ C1] R10: ffffffff908253d7 R11: 0000000000000001 R12: 0000000000000000 [ 415.257540][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.265558][ C1] ? preempt_schedule_irq+0x46/0x90 [ 415.270897][ C1] irqentry_exit+0x36/0x90 [ 415.275346][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.281360][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 415.286615][ C1] Code: dd 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 00 ea 0e 0f 82 74 02 00 00 8b 35 fa 30 ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 dc 08 12 0f 85 c7 02 00 00 48 83 c4 [ 415.306450][ C1] RSP: 0018:ffffc900194d67e0 EFLAGS: 00000206 [ 415.312640][ C1] RAX: 0000000000000046 RBX: ffffffff8e58a2e0 RCX: ffffffff93adf660 [ 415.320766][ C1] RDX: 0000000000000000 RSI: ffffffff8da03cd1 RDI: ffffffff8bf07940 [ 415.329589][ C1] RBP: 0000000000000000 R08: ce141928764d200e R09: 0000000000000000 [ 415.340568][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 415.349915][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.358993][ C1] ? fs_reclaim_acquire+0xae/0x150 [ 415.364895][ C1] fs_reclaim_acquire+0xca/0x150 [ 415.370084][ C1] ? fs_reclaim_acquire+0xae/0x150 [ 415.376062][ C1] prepare_alloc_pages+0x162/0x610 [ 415.381517][ C1] ? rcu_is_watching+0x12/0xc0 [ 415.386427][ C1] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 415.392639][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 415.397842][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 415.404588][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 415.409686][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 415.415119][ C1] ? find_held_lock+0x2b/0x80 [ 415.419896][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 415.424892][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 415.430859][ C1] ? policy_nodemask+0xea/0x4e0 [ 415.435876][ C1] alloc_pages_mpol+0x1fb/0x550 [ 415.440790][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 415.446301][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 415.451722][ C1] shmem_alloc_folio+0x135/0x160 [ 415.456706][ C1] shmem_alloc_and_add_folio+0x494/0xc20 [ 415.462425][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 415.468701][ C1] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 415.474663][ C1] shmem_get_folio_gfp+0x67f/0x1610 [ 415.479990][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 415.485058][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 415.490730][ C1] shmem_write_begin+0x160/0x300 [ 415.496088][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 415.501682][ C1] ? timestamp_truncate+0x21e/0x2d0 [ 415.507274][ C1] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 415.514450][ C1] generic_perform_write+0x3c4/0x900 [ 415.520033][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 415.527168][ C1] ? inode_needs_update_time.part.0+0x191/0x270 [ 415.533861][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 415.540396][ C1] shmem_file_write_iter+0x10e/0x140 [ 415.545755][ C1] __kernel_write_iter+0x31a/0xb10 [ 415.550921][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 415.557718][ C1] ? __up_read+0x1f8/0x750 [ 415.562741][ C1] ? dump_user_range+0x756/0xb70 [ 415.567983][ C1] ? dump_user_range+0x467/0xb70 [ 415.573105][ C1] dump_user_range+0x413/0xb70 [ 415.578183][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 415.583535][ C1] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 415.590239][ C1] ? __pfx_writenote+0x10/0x10 [ 415.595172][ C1] elf_core_dump+0x29c3/0x3c00 [ 415.600018][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 415.605169][ C1] ? kasan_save_stack+0x33/0x60 [ 415.610182][ C1] ? kasan_save_track+0x14/0x30 [ 415.615187][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 415.620044][ C1] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 415.625725][ C1] ? vfs_coredump+0x1ddc/0x5670 [ 415.630611][ C1] ? arch_do_signal_or_restart+0x8f/0x790 [ 415.636466][ C1] ? irqentry_exit_to_user_mode+0x176/0x310 [ 415.642582][ C1] ? asm_exc_page_fault+0x26/0x30 [ 415.647649][ C1] ? 0xffffffffff600000 [ 415.651898][ C1] ? vfs_coredump+0x2b9f/0x5670 [ 415.656816][ C1] vfs_coredump+0x2b9f/0x5670 [ 415.661602][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 415.666758][ C1] ? __lock_acquire+0x622/0x1c90 [ 415.671751][ C1] ? lock_acquire+0x179/0x350 [ 415.676485][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 415.681723][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 415.686897][ C1] ? unwind_get_return_address+0x59/0xa0 [ 415.692700][ C1] ? arch_stack_walk+0xa6/0x100 [ 415.697724][ C1] ? stack_trace_save+0x8e/0xc0 [ 415.702714][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 415.708133][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 415.713739][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 415.718894][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 415.724872][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 415.730991][ C1] ? rcu_is_watching+0x12/0xc0 [ 415.736055][ C1] get_signal+0x22e1/0x26d0 [ 415.740639][ C1] ? __pfx_get_signal+0x10/0x10 [ 415.745611][ C1] ? force_sig_fault+0xc4/0x100 [ 415.750597][ C1] arch_do_signal_or_restart+0x8f/0x790 [ 415.756589][ C1] ? find_held_lock+0x2b/0x80 [ 415.761662][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 415.772924][ C1] irqentry_exit_to_user_mode+0x176/0x310 [ 415.778880][ C1] asm_exc_page_fault+0x26/0x30 [ 415.783948][ C1] RIP: 0033:0x7fa2c8c4f6b7 [ 415.788422][ C1] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 415.808261][ C1] RSP: 002b:00007fa2c9b610e0 EFLAGS: 00010202 [ 415.814378][ C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0003ffff00000000 [ 415.822391][ C1] RDX: 00007fa2c9b61100 RSI: 00007fa2c9b61230 RDI: 000000000000000b [ 415.830438][ C1] RBP: 00007fa2c8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 415.838465][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 415.846649][ C1] R13: 00007fa2c8fe6218 R14: 00007fa2c8fe6180 R15: 00007fff44e4afc8 [ 415.854757][ C1] [ 415.858307][ C1] Kernel Offset: disabled [ 415.862650][ C1] Rebooting in 86400 seconds..