last executing test programs: 9.753752977s ago: executing program 3 (id=328): madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413f) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x40201, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 8.041937397s ago: executing program 3 (id=334): socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4ad00, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x29, 0xa, 0x20080) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000000)={'ip6_vti0\x00'}) pipe$auto(0x0) unshare$auto(0x40000080) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x5, 0x7}, 0x7}, 0xffffffff, 0xb00) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc10c5541, r0) 6.20390758s ago: executing program 3 (id=342): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socket(0x22, 0x80003, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) (async) r1 = socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) (async) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x101) (async) close_range$auto(0x2, r1, 0x0) (async) r2 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r2, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x14, 0x0, 0x4) (async) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x2058a, &(0x7f0000000100)={0x0, 0x4b}, 0x5, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x40100) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x140082, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sg1\x00', 0x10440, 0x0) ioctl$auto_BLKTRACESETUP2(r4, 0xc0481273, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) mmap$auto(0x0, 0x400009, 0xdb, 0x9b72, 0x8000000000000003, 0x8000) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/028/001\x00', 0xa801, 0x0) 5.519733971s ago: executing program 3 (id=345): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x28245100, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) syz_clone3(&(0x7f0000000140)={0x28245100, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x0, 0x0) (async) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20000d95) socketcall$auto_SYS_RECVMSG(0x11, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) fcntl$auto_F_GETFL(r1, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x29, 0xb, 0x10001) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000b, 0x4000000000db, 0xeb1, 0x401, 0x7ffe) r2 = getpid() close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x26, 0x8) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x91f5}, 0x800000001, &(0x7f0000001080)={&(0x7f00000010c0)="837c43558323d5db424689e7e6cb5c40ad091e4374c10000000025", 0x1ffffffff}, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.358092395s ago: executing program 2 (id=347): openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r0, &(0x7f0000000000)='\\@-,@n', 0x60) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x4) close_range$auto(r1, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) write$auto(r3, &(0x7f0000000000)='-\xd3', 0xf5) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00aa33970a0bc870839320d910f5da879b0000", @ANYRES16=r4, @ANYBLOB="000328bd7000fedbdf251b00000008001e000000000008001e0003000000060011000104000008000100010100000800030004000000080001008300000008001500ff070000"], 0x4c}, 0x1, 0x0, 0x0, 0x300040c0}, 0x0) r5 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x6) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x4830) r6 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001fc0)='/sys/kernel/debug/block/nbd13/pm_only\x00', 0x68180, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r6, &(0x7f0000002000)=""/61, 0x3d) mmap$auto(0x8, 0x400008, 0xdf, 0x9b72, 0x2, 0x9) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) shmctl$auto_SHM_INFO(0x2, 0xe, 0x0) sendmsg$auto_NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setfsgid$auto(0x0) statx$auto(r5, 0x0, 0xbc, 0xa0, &(0x7f00000003c0)={0x5, 0x3, 0x7, 0x2, 0x0, 0x0, 0x9, 0x72b4, 0xf65, 0x0, 0x100000000, 0x0, {0x100000001, 0xc2}, {0x401, 0x3ff}, {0x4, 0x1000}, {0x5, 0x67dc}, 0x7c21, 0x0, 0x0, 0x4, 0x31, 0x68000000, 0x9, 0x80, 0xf6a4, 0x6, 0x0, 0x6, [0xfffffffffffffffe, 0x6, 0x7, 0x8001, 0x6e9d, 0x9, 0xe8, 0x1, 0x80000001]}) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0x\x11.\xcd\x00\x00\x92@\x16P', 0x8081) close_range$auto(0x2, 0x8, 0x0) 4.992414874s ago: executing program 2 (id=349): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x2284, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x204880, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x101000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x2}, 0x3, 0x11, 0x3) ioctl$auto_MEMGETOOBSEL(r1, 0x80c84d0a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x81a0ae8c, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x7}]}) 4.685621925s ago: executing program 2 (id=350): unshare$auto(0x40000080) unshare$auto(0x400) lstat$auto(0x0, 0x0) (async) lstat$auto(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ppoll$auto(0x0, 0x2, &(0x7f0000000040)={0x2, 0xfffffffffffffff8}, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/block/nullb0/queue/rq_affinity\x00', 0x4a001, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x55) (async) connect$auto(0x3, &(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x55) ioctl$auto(0x3, 0x800005411, 0x38) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x155802, 0x0) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)="94fc32998660d954e548b4d028ef9b7b6d2ad00edb70dfa1609324dd8bfb66e2a042ad6ee55e4c1d568e388453721127144217d99bb3e0e92479fb24f5ee578556420d86fd5909938dd7cafc2e92c7d7eba4b2e5fa68feb3ca69bddd96f88b6c8b96") (async) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)="94fc32998660d954e548b4d028ef9b7b6d2ad00edb70dfa1609324dd8bfb66e2a042ad6ee55e4c1d568e388453721127144217d99bb3e0e92479fb24f5ee578556420d86fd5909938dd7cafc2e92c7d7eba4b2e5fa68feb3ca69bddd96f88b6c8b96") write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)="12", 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) personality$auto(0xc) seccomp$auto(0x3, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd7\x00', 0x40100, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd7\x00', 0x40100, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) keyctl$auto(0xb, 0xffffffffffffffff, r4, 0x4, 0x7a) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)='1', 0x1) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000446c7c8b4c3c9f2dd83d4ec9e8486070f41635086c16de43cc34637dfa1e181519bb9ea538ab052c78f51c2190406cae6dc88e36a6a28bab8ea972763428d053ad983f88995f90d21b92170326f6c922c36bbe43d701bd17e61864c5cc4fc4dd988faffc80eba8bc5c85d9af7cc6149650aa9a31f8b788d2f613a9", @ANYRES16=0x0, @ANYBLOB="050723bd7000fbdbdf2567000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000446c7c8b4c3c9f2dd83d4ec9e8486070f41635086c16de43cc34637dfa1e181519bb9ea538ab052c78f51c2190406cae6dc88e36a6a28bab8ea972763428d053ad983f88995f90d21b92170326f6c922c36bbe43d701bd17e61864c5cc4fc4dd988faffc80eba8bc5c85d9af7cc6149650aa9a31f8b788d2f613a9", @ANYRES16=0x0, @ANYBLOB="050723bd7000fbdbdf2567000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 4.550276795s ago: executing program 0 (id=351): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x20200, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x776) (async) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r0, &(0x7f0000000400)={&(0x7f00000003c0), 0x40}, 0x6) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20008, 0x1, 0xeb1, r1, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r3 = prctl$auto(0x7, 0x1000000003, 0x0, 0x1, 0xffffffffffffffff) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x2, 0x400004, 0x2, 0x14, r3, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button/parameters/lid_init_state\x00', 0x169882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r1, r5, 0x0, 0x6) (async) r6 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/kvm/preemption_reported\x00', 0xa2540, 0x0) read$auto_stat_fops_per_vm_kvm_main(r6, 0x0, 0x0) (async) socket(0x10, 0x2, 0xc) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x591002, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x82000, 0x0) read$auto_tracing_total_entries_fops_trace(r7, 0x0, 0x0) 3.528825057s ago: executing program 2 (id=352): mmap$auto(0x8000000, 0x1, 0x6, 0x40eb2, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYRES64=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) mmap$auto(0x8000000000000000, 0x1, 0x1, 0x4000000000000eb1, 0xffffffffffffffff, 0xffffffffffffffff) rseq$auto(&(0x7f0000000300)={0xe, 0x0, 0x4, 0x3, 0xffffbfff, 0x2}, 0x8002, 0x0, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) readv$auto(r1, &(0x7f0000000040)={0x0, 0xffff}, 0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) setreuid$auto(0xee01, 0x0) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x0, 0x9) read$auto(r2, 0x0, 0x20) mmap$auto(0x3, 0x80000002, 0x3, 0x15, 0xfffffffffffffffa, 0x80000000001ff) socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0) madvise$auto(0xa, 0x2, 0xa) prctl$auto(0x3a, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) socket(0x1, 0x800, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) semtimedop$auto(0x8000000f, 0x0, 0x3, 0x0) rseq$auto(&(0x7f0000000100)={0xd, 0x401, 0x0, 0x20000006, 0xd}, 0x200, 0x1, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/bInterfaceProtocol\x00', 0x8a801, 0x0) write$auto(r3, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_register$auto_IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000040)="bb6d0a927ee9ae0dd215f77140a6f0148af174f1336d7b", 0xfffffff8) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x391c40, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r4, 0x40095505, 0x0) clone$auto(0x9673, 0xfffffffffffffff9, 0x0, 0x0, 0x0) 3.526114388s ago: executing program 0 (id=360): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) write$auto_mousedev_fops_mousedev(r0, &(0x7f00000000c0)="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", 0x112) (async) write$auto_mousedev_fops_mousedev(r0, &(0x7f00000000c0)="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", 0x112) 3.371514294s ago: executing program 0 (id=353): mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x14, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0xa7}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x802}, 0x4000000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f0000000200)='&&\x00', 0x0, 0x8, 0x0) 2.977668743s ago: executing program 3 (id=354): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x200007, 0x8) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f00000002c0)="06a1f7bb16f81b18c75bba10364b2b43efade5a9fef65e8cba91629684e24e9012362e6f7621dda06775d495247bffd802edbe6936a3d60d7197486748a7ca1dbba3263ecc6f5d767c247ba51887180a1ea82a0ba08e579f51b654b5807d910c2cc2b9a2e30234d92ffc6c2dc1fc6c4308f9fa311915ede69fe215eaaccba42e3cbbd8ed8daf77928b11be75e2e7b0f1b21045546b66d819903a254c168adfa0d50bf32a0d86c6274a618b346c5a9f63f5d5b0401c51c88ef282b5d8195626fe0749013c32a20163e61e6c5bc2bffb8ab5adda9eabfa9d55f0406788cacc20867c02743abb7b0ef7fe7871b91661642558035c211261ec", 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0xd00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r2, 0x0, 0xe) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, r3, 0x305, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x206200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram7\x00', 0x6af970bd8aeafe47, 0x0) ioctl$auto_HDIO_GETGEO(r6, 0x301, &(0x7f00000003c0)="a097ac3a533408960b39941b04e7d20c2897ecd48b6c61586266259f4e1617d478e0b24ecc4eed27ee2fb710b1352bbb8c0858c499cca02f1e6d5370e397b95d0ce2f8e855ce0dd8a06f5abf90241e5105d0f7a6f69169fa834c77e62141a1556ee63ce29e9a0844e9134fe77149d5009c7419c2bd4245f65c77c92555fecb6b1e918269d62a7c67ec1902d52fb89c4cc4589acc7dd2c2b86aa5d7bff0958b3ae909a1d5433345216c505bd124e7ed0a175cf02fd8fbc0c79dcc3f7891be51e978184870e62c023dd403e59c8a6be122fdc688ccf1b28be08eb2424d778d7c56e738e6ca425063ded6a40cbfcdf2") fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000000240)="4a0200000000040000000000000000000700924d1b3c5d2e00000000fdd2adc245a4fe3a61af156016d2e122228118b035ab6f7e46cbe922896e7e796fec3370fd6cf2d037d9f213d48b743bd7804490341927d618b20f562edf1261d0", 0x5d) 2.886199682s ago: executing program 1 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbf7, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c840) 2.74326903s ago: executing program 1 (id=356): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000a366622e7b"]) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = pidfd_open$auto(0x1, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x589002, 0x0) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x9, 0xe) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000200)="623ed84450697e3e39794daaec86684c6af24d62973d0d393e0bb7fe240a55", 0x7f) unshare$auto(0x20000000000004) dup2$auto(r2, r2) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/190, 0xbe) madvise$auto(0x2, 0x7fffffffffffffff, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) fdatasync$auto(r1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1200) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdeb) getpgrp(0xffffffffffffffff) 2.17950401s ago: executing program 0 (id=357): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x200007, 0x8) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f00000002c0)="06a1f7bb16f81b18c75bba10364b2b43efade5a9fef65e8cba91629684e24e9012362e6f7621dda06775d495247bffd802edbe6936a3d60d7197486748a7ca1dbba3263ecc6f5d767c247ba51887180a1ea82a0ba08e579f51b654b5807d910c2cc2b9a2e30234d92ffc6c2dc1fc6c4308f9fa311915ede69fe215eaaccba42e3cbbd8ed8daf77928b11be75e2e7b0f1b21045546b66d819903a254c168adfa0d50bf32a0d86c6274a618b346c5a9f63f5d5b0401c51c88ef282b5d8195626fe0749013c32a20163e61e6c5bc2bffb8ab5adda9eabfa9d55f0406788cacc20867c02743abb7b0ef7fe7871b91661642558035c211261ec", 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0xd00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r2, 0x0, 0xe) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, r3, 0x305, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x206200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="08002dbd5f00eddbdf250e0000000500120040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram7\x00', 0x6af970bd8aeafe47, 0x0) ioctl$auto_HDIO_GETGEO(r6, 0x301, &(0x7f00000003c0)="a097ac3a533408960b39941b04e7d20c2897ecd48b6c61586266259f4e1617d478e0b24ecc4eed27ee2fb710b1352bbb8c0858c499cca02f1e6d5370e397b95d0ce2f8e855ce0dd8a06f5abf90241e5105d0f7a6f69169fa834c77e62141a1556ee63ce29e9a0844e9134fe77149d5009c7419c2bd4245f65c77c92555fecb6b1e918269d62a7c67ec1902d52fb89c4cc4589acc7dd2c2b86aa5d7bff0958b3ae909a1d5433345216c505bd124e7ed0a175cf02fd8fbc0c79dcc3f7891be51e978184870e62c023dd403e59c8a6be122fdc688ccf1b28be08eb2424d778d7c56e738e6ca425063ded6a40cbfcdf2") fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000000240)="4a0200000000040000000000000000000700924d1b3c5d2e00000000fdd2adc245a4fe3a61af156016d2e122228118b035ab6f7e46cbe922896e7e796fec3370fd6cf2d037d9", 0x46) 2.017765347s ago: executing program 1 (id=358): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x2284, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x204880, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x101000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x2}, 0x3, 0x11, 0x3) ioctl$auto_MEMGETOOBSEL(r1, 0x80c84d0a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x81a0ae8c, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x7}]}) 1.866179303s ago: executing program 2 (id=359): openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000002880)='**\x00', &(0x7f00000028c0)='\x00', 0x0, 0x2, 0xfffffffffffffffd) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r0, &(0x7f0000000000)='\\@-,@n', 0x60) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r1, &(0x7f0000000680)='g\n\x1e\x9f\xd0\x92l\x98\x92!Fc\x9c?\xado^\x9b\xf4\x9c\xa8\xd2gn\x1a\xd7\x1c\xe8)\xefA\x7f\xc2x\xd0\x18gS\x1c\xca\xb9\x84\x1ec\xd4>\xc2\xfej\t\x89u\xcb(\x95_3\xdfo\xdc\xa5;t\x05q$zmM\xae\xdb\x1f\xeb\xffe\x91\xd5\xd2[\xa5_F\xc4X\xec\xdb\xdc\x01\xc2d\xa1\x8b\xed=\xb0\x88\xa8tl2\x0e\x13mjH,\xcda\xcab.\x03\xe7\xa4z\xcaA\xe2\x99\xd5n\xa0\x8a\x91K_\xf0~\b\v\xd1W\x97\xd9\x8c}\xff4\xff\tAK\xc4\x16\x13,9}-_\x00\x80\xd2\xfc\x98?\'\xaf\xccyRou\xa1\x12\x9fwZ\x1c\f\xcck\xdb-\xd7;\xbf\xbf\xbe\x04*L\x1e\x9c\x8fVb\xb8\xb4\xa2|\x88\x1e\bX\xba_O\x87f.\xc2\xfa\x01R\xefB\xe9\xf4Xc\x98\xe7', 0x98) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x401}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x101}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x83}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x7ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x300040c0}, 0x0) r3 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x6) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x4830) unshare$auto(0x20700) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) shmctl$auto_SHM_INFO(0x2, 0xe, 0x0) setfsgid$auto(0x0) statx$auto(r3, 0x0, 0xbc, 0xa0, &(0x7f00000003c0)={0x5, 0x3, 0x7, 0x2, 0x0, 0x0, 0x9, 0x72b4, 0xf65, 0x0, 0x100000000, 0x0, {0x100000001, 0xc2}, {0x401, 0xffffffff}, {0x4, 0x1000}, {0x5, 0x67dc}, 0x7c21, 0x0, 0x0, 0x4, 0x31, 0x68000000, 0x9, 0x80, 0xf6a4, 0x6, 0x0, 0x6, [0xfffffffffffffffe, 0x6, 0x7, 0x8001, 0x6e9d, 0x9, 0xe8, 0x1, 0x80000001]}) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0x\x113\a\xe7\x91\x92@\x16P', 0x8081) ioctl$auto_VHOST_SET_FEATURES2(r3, 0x4008af00, &(0x7f00000000c0)=0xb91a) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x2000000000005, 0xdf, 0x9972, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clockevents/clockevent1/current_device\x00', 0x20000, 0x0) times$auto(&(0x7f0000000040)={0xc333, 0x100000001, 0x93, 0x48b}) mmap$auto(0x9, 0x3, 0x0, 0x10, r0, 0xd37d) ioctl$auto(0xffffffffffffffff, 0x7, r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe}}) prctl$auto(0x10, 0x2, 0x0, 0x20000004, 0xf) 1.76700087s ago: executing program 1 (id=361): socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x8b35, 0x91) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/maps\x00', 0x2b0841, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) getdents64$auto(r0, &(0x7f00000002c0)={0x1, 0x2, 0x401, 0x2, "13b34a2efbdf8cbcea9bda6461646a5bfac9fb34fee5abeee4edf6a93033abeb26b5c5ba54d83cf75d5f9295b8"}, 0x1) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001040)='/dev/loop13\x00', 0x1cbe03, 0x0) mmap$auto(0x0, 0x810004, 0x4000ffb, 0x8000000008011, r0, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) r2 = ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000040)=0xfffffe01) syz_genetlink_get_family_id$auto_ila(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000001c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) ioctl$auto(0xffffffffffffffff, 0xab03, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x2, 0x0) socket(0xa, 0x1, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r4, r4, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r4, 0x1) unshare$auto(0x80000040000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xd452, r3, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/virtual/bdi/43:224/min_ratio\x00', 0x3e1042, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/4095, 0xfff) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) 1.237837986s ago: executing program 1 (id=362): mmap$auto(0x0, 0xfff, 0x40000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) mq_open$auto(&(0x7f0000000440)='\x12\xe6D\b\x9e\x00\x80\x8d\f/\xd4-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5 1 [ 77.813727][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.822473][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.833118][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.838280][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.850167][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.851651][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.858337][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.864849][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.873490][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.887397][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.887744][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.898451][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.904283][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.910648][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.915814][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.923028][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.931123][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.938534][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.951549][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.380667][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.388765][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.396212][ T5632] bridge_slave_0: entered allmulticast mode [ 79.403283][ T5632] bridge_slave_0: entered promiscuous mode [ 79.437996][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.445252][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.452382][ T5632] bridge_slave_1: entered allmulticast mode [ 79.459555][ T5632] bridge_slave_1: entered promiscuous mode [ 79.466626][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.473732][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.481144][ T5631] bridge_slave_0: entered allmulticast mode [ 79.488167][ T5631] bridge_slave_0: entered promiscuous mode [ 79.530989][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.538298][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.545650][ T5631] bridge_slave_1: entered allmulticast mode [ 79.552671][ T5631] bridge_slave_1: entered promiscuous mode [ 79.608411][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.616159][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.623319][ T5630] bridge_slave_0: entered allmulticast mode [ 79.630500][ T5630] bridge_slave_0: entered promiscuous mode [ 79.640437][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.652751][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.680823][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.688955][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.696475][ T5630] bridge_slave_1: entered allmulticast mode [ 79.703457][ T5630] bridge_slave_1: entered promiscuous mode [ 79.712373][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.723571][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.770154][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.777866][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.785052][ T5626] bridge_slave_0: entered allmulticast mode [ 79.792133][ T5626] bridge_slave_0: entered promiscuous mode [ 79.827497][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.835043][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.842199][ T5626] bridge_slave_1: entered allmulticast mode [ 79.849333][ T5626] bridge_slave_1: entered promiscuous mode [ 79.858864][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.870244][ T5632] team0: Port device team_slave_0 added [ 79.878029][ T5631] team0: Port device team_slave_0 added [ 79.894699][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.905767][ T5632] team0: Port device team_slave_1 added [ 79.913254][ T5631] team0: Port device team_slave_1 added [ 79.958883][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.999364][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.010431][ T5630] team0: Port device team_slave_0 added [ 80.015057][ T5641] Bluetooth: hci2: command tx timeout [ 80.016114][ T5634] Bluetooth: hci0: command tx timeout [ 80.022016][ T5628] Bluetooth: hci1: command tx timeout [ 80.027767][ T5635] Bluetooth: hci3: command tx timeout [ 80.038420][ T5630] team0: Port device team_slave_1 added [ 80.045634][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.052665][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.078846][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.090981][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.098469][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.124662][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.158158][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.165361][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.191407][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.203006][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.210242][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.236418][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.289576][ T5626] team0: Port device team_slave_0 added [ 80.296129][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.303108][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.329580][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.343143][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.350180][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.376762][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.400347][ T5626] team0: Port device team_slave_1 added [ 80.466269][ T5631] hsr_slave_0: entered promiscuous mode [ 80.472595][ T5631] hsr_slave_1: entered promiscuous mode [ 80.500576][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.507897][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.533868][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.546403][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.553359][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.579291][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.605554][ T5632] hsr_slave_0: entered promiscuous mode [ 80.611752][ T5632] hsr_slave_1: entered promiscuous mode [ 80.618056][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 80.623833][ T5632] Cannot create hsr debugfs directory [ 80.652743][ T5630] hsr_slave_0: entered promiscuous mode [ 80.659214][ T5630] hsr_slave_1: entered promiscuous mode [ 80.665479][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 80.671206][ T5630] Cannot create hsr debugfs directory [ 80.799044][ T5626] hsr_slave_0: entered promiscuous mode [ 80.805517][ T5626] hsr_slave_1: entered promiscuous mode [ 80.811529][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 80.817766][ T5626] Cannot create hsr debugfs directory [ 81.152727][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.167072][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.176443][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.188348][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.196495][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.205886][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.213938][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.223547][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.296951][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.312380][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.326492][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.337255][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.345691][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.356300][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.364880][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.375971][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.467833][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.480400][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.488685][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.498931][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.506946][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.518410][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.526449][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.536567][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.657498][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.672064][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.681878][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.689952][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.699622][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.707500][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.716883][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.731201][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.740246][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.779911][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.808759][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.816209][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.846341][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.853519][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.906733][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.957063][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.990892][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.030381][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.037599][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.051025][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.078637][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.085839][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.094410][ T5635] Bluetooth: hci2: command tx timeout [ 82.100162][ T5634] Bluetooth: hci1: command tx timeout [ 82.100201][ T5628] Bluetooth: hci0: command tx timeout [ 82.112087][ T5641] Bluetooth: hci3: command tx timeout [ 82.122789][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.129897][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.178858][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.186058][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.207197][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.275583][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.310344][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.317575][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.358149][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.365360][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.789439][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.948913][ T5631] veth0_vlan: entered promiscuous mode [ 82.988457][ T5631] veth1_vlan: entered promiscuous mode [ 83.133016][ T5631] veth0_macvtap: entered promiscuous mode [ 83.171628][ T5631] veth1_macvtap: entered promiscuous mode [ 83.232769][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.279900][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.336382][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.355884][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.376978][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.392779][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.412076][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.441463][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.521167][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.593888][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.608676][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.669811][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.678215][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.678318][ T5632] veth0_vlan: entered promiscuous mode [ 83.719945][ T5632] veth1_vlan: entered promiscuous mode [ 83.736783][ T5630] veth0_vlan: entered promiscuous mode [ 83.756616][ T5626] veth0_vlan: entered promiscuous mode [ 83.770903][ T5630] veth1_vlan: entered promiscuous mode [ 83.795794][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.815595][ T5626] veth1_vlan: entered promiscuous mode [ 83.837393][ T5630] veth0_macvtap: entered promiscuous mode [ 83.867433][ T5630] veth1_macvtap: entered promiscuous mode [ 83.888490][ T5632] veth0_macvtap: entered promiscuous mode [ 83.922812][ T5632] veth1_macvtap: entered promiscuous mode [ 83.957003][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.982027][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.989803][ T5626] veth0_macvtap: entered promiscuous mode [ 84.001842][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.028946][ T5626] veth1_macvtap: entered promiscuous mode [ 84.043341][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.049708][ T5782] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.052974][ T1102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.082785][ T1102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.105294][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.136650][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.145850][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.165454][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.174236][ T5628] Bluetooth: hci3: command tx timeout [ 84.177339][ T5634] Bluetooth: hci0: command tx timeout [ 84.179686][ T5641] Bluetooth: hci1: command tx timeout [ 84.185043][ T5635] Bluetooth: hci2: command tx timeout [ 84.193132][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.228429][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.238335][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.311311][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.383016][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.391897][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.429855][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.441681][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.598862][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.608251][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.669123][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.678758][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.775367][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.797649][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.820973][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.829581][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.871136][ T5789] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 84.919639][ T769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.953241][ T769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.009644][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.051774][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.432672][ T5804] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 86.181886][ T5802] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 86.181886][ T5802] program syz.0.1 not setting count and/or reply_len properly [ 86.257313][ T5628] Bluetooth: hci2: command tx timeout [ 86.257781][ T5634] Bluetooth: hci1: command tx timeout [ 86.262756][ T5628] Bluetooth: hci3: command tx timeout [ 86.273879][ T5641] Bluetooth: hci0: command tx timeout [ 86.429242][ T5817] random: crng reseeded on system resumption [ 87.117676][ T5814] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 87.117676][ T5814] program syz.3.7 not setting count and/or reply_len properly [ 87.881318][ T5823] mmap: syz.0.10 (5823) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.271560][ T5838] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 89.271560][ T5838] program syz.3.13 not setting count and/or reply_len properly [ 90.138710][ T5855] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 90.138710][ T5855] program syz.1.15 not setting count and/or reply_len properly [ 90.402376][ T5861] netlink: zone id is out of range [ 90.423260][ T5861] netlink: zone id is out of range [ 90.435638][ T5861] netlink: zone id is out of range [ 90.445690][ T5861] netlink: zone id is out of range [ 90.463128][ T5861] netlink: zone id is out of range [ 90.479316][ T5861] netlink: zone id is out of range [ 90.500959][ T5861] netlink: zone id is out of range [ 90.522573][ T5861] netlink: zone id is out of range [ 90.548926][ T5861] netlink: zone id is out of range [ 90.560593][ T5861] netlink: zone id is out of range [ 90.727490][ T5878] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.114313][ T5865] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 91.114313][ T5865] program syz.2.18 not setting count and/or reply_len properly [ 91.686955][ T5907] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.868976][ T1574] cfg80211: failed to load regulatory.db [ 92.337106][ T22] MTRR: CPU 1: Writing MSR 202 to 10003:0 failed [ 92.343590][ T19] MTRR: CPU 0: Writing MSR 202 to 10003:0 failed [ 92.512636][ T30] audit: type=1800 audit(1779241837.883:2): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.24" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 93.473039][ T5947] zswap: compressor not available [ 93.952296][ T5943] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 93.952296][ T5943] program syz.1.27 not setting count and/or reply_len properly [ 94.608722][ T5628] block nbd0: Receive control failed (result -32) [ 94.995967][ T5978] Zero length message leads to an empty skb [ 95.115390][ T5968] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 95.115390][ T5968] program syz.0.31 not setting count and/or reply_len properly [ 95.518753][ T5983] FAULT_INJECTION: forcing a failure. [ 95.518753][ T5983] name failslab, interval 1, probability 0, space 0, times 0 [ 95.594160][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(full) [ 95.594198][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.594217][ T5983] Call Trace: [ 95.594226][ T5983] [ 95.594236][ T5983] dump_stack_lvl+0x100/0x190 [ 95.594274][ T5983] should_fail_ex.cold+0x5/0xa [ 95.594308][ T5983] should_failslab+0xc2/0x120 [ 95.594341][ T5983] __kmalloc_cache_noprof+0x7a/0x6f0 [ 95.594380][ T5983] ? alloc_fs_context+0x57/0xf40 [ 95.594417][ T5983] ? __get_fs_type+0x12c/0x170 [ 95.594460][ T5983] alloc_fs_context+0x57/0xf40 [ 95.594498][ T5983] ? __get_fs_type+0x12c/0x170 [ 95.594539][ T5983] fs_context_for_submount+0x26/0xc0 [ 95.594579][ T5983] trace_automount+0x47/0xa0 [ 95.594614][ T5983] __traverse_mounts+0x1b9/0x8a0 [ 95.594659][ T5983] step_into_slowpath+0xb7e/0xf90 [ 95.594687][ T5983] ? __d_lookup+0x25c/0x4a0 [ 95.594712][ T5983] ? __d_lookup+0x25c/0x4a0 [ 95.594743][ T5983] ? __pfx_step_into_slowpath+0x10/0x10 [ 95.594774][ T5983] ? __d_lookup+0x266/0x4a0 [ 95.594805][ T5983] ? lookup_fast+0x2da/0x600 [ 95.594830][ T5983] ? inode_permission+0x374/0x620 [ 95.594876][ T5983] link_path_walk+0xf28/0x1cc0 [ 95.594916][ T5983] path_openat+0x1be/0x31a0 [ 95.594947][ T5983] ? kasan_save_stack+0x3f/0x50 [ 95.594973][ T5983] ? kasan_save_stack+0x30/0x50 [ 95.594998][ T5983] ? kasan_save_track+0x14/0x30 [ 95.595032][ T5983] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 95.595084][ T5983] ? __pfx_path_openat+0x10/0x10 [ 95.595133][ T5983] do_file_open+0x20e/0x430 [ 95.595171][ T5983] ? __pfx_do_file_open+0x10/0x10 [ 95.595232][ T5983] ? alloc_fd+0x476/0x790 [ 95.595268][ T5983] ? do_getname+0x191/0x390 [ 95.595311][ T5983] do_sys_openat2+0x10d/0x1e0 [ 95.595353][ T5983] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.595406][ T5983] __x64_sys_openat+0x12d/0x210 [ 95.595449][ T5983] ? __pfx___x64_sys_openat+0x10/0x10 [ 95.595486][ T5983] ? ksys_write+0x1ac/0x250 [ 95.595520][ T5983] ? rcu_is_watching+0x12/0xc0 [ 95.595561][ T5983] do_syscall_64+0x10b/0xf80 [ 95.595603][ T5983] ? clear_bhb_loop+0x40/0x90 [ 95.595639][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.595669][ T5983] RIP: 0033:0x7f04b3d9ce59 [ 95.595693][ T5983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.595720][ T5983] RSP: 002b:00007f04b4bd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 95.595747][ T5983] RAX: ffffffffffffffda RBX: 00007f04b4015fa0 RCX: 00007f04b3d9ce59 [ 95.595766][ T5983] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 95.595784][ T5983] RBP: 00007f04b3e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 95.595800][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.595817][ T5983] R13: 00007f04b4016038 R14: 00007f04b4015fa0 R15: 00007fff73a22d68 [ 95.595854][ T5983] [ 95.989066][ T5973] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 95.989066][ T5973] program syz.3.33 not setting count and/or reply_len properly [ 99.158282][ T6024] syz.2.44 (6024) used greatest stack depth: 18008 bytes left [ 99.509643][ T6018] process 'syz.0.42' launched './file0' with NULL argv: empty string added [ 100.382933][ T5628] block nbd1: Receive control failed (result -32) [ 103.318973][ T6083] netlink: 342 bytes leftover after parsing attributes in process `syz.1.54'. [ 103.688289][ T6087] ======================================================= [ 103.688289][ T6087] WARNING: The mand mount option has been deprecated and [ 103.688289][ T6087] and is ignored by this kernel. Remove the mand [ 103.688289][ T6087] option from the mount to silence this warning. [ 103.688289][ T6087] ======================================================= [ 104.291300][ T6079] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 104.291300][ T6079] program syz.3.55 not setting count and/or reply_len properly [ 104.375333][ T6094] zswap: compressor not available [ 106.062688][ T6110] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 106.062688][ T6110] program syz.3.60 not setting count and/or reply_len properly [ 106.589378][ T6128] zswap: compressor not available [ 106.608525][ T6138] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.132333][ T6084] block nbd2: Receive control failed (result -32) [ 107.955281][ T6152] zswap: compressor not available [ 109.226313][ T6169] FAULT_INJECTION: forcing a failure. [ 109.226313][ T6169] name failslab, interval 1, probability 0, space 0, times 0 [ 109.252319][ T6169] CPU: 0 UID: 8 PID: 6169 Comm: syz.2.69 Not tainted syzkaller #0 PREEMPT(full) [ 109.252341][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.252351][ T6169] Call Trace: [ 109.252356][ T6169] [ 109.252362][ T6169] dump_stack_lvl+0x100/0x190 [ 109.252384][ T6169] should_fail_ex.cold+0x5/0xa [ 109.252404][ T6169] should_failslab+0xc2/0x120 [ 109.252423][ T6169] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 109.252447][ T6169] ? sock_alloc_inode+0x26/0x290 [ 109.252469][ T6169] ? __pfx_sock_alloc_inode+0x10/0x10 [ 109.252489][ T6169] sock_alloc_inode+0x26/0x290 [ 109.252509][ T6169] ? __pfx_sock_alloc_inode+0x10/0x10 [ 109.252528][ T6169] alloc_inode+0x68/0x250 [ 109.252552][ T6169] sock_alloc+0x44/0x280 [ 109.252569][ T6169] ? security_socket_create+0x7f/0x250 [ 109.252593][ T6169] __sock_create+0xc2/0x860 [ 109.252618][ T6169] __sys_socket+0x14d/0x260 [ 109.252640][ T6169] ? __pfx___sys_socket+0x10/0x10 [ 109.252662][ T6169] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 109.252682][ T6169] __x64_sys_socket+0x72/0xb0 [ 109.252694][ T6169] ? lockdep_hardirqs_on+0x78/0x100 [ 109.252718][ T6169] do_syscall_64+0x10b/0xf80 [ 109.252738][ T6169] ? clear_bhb_loop+0x40/0x90 [ 109.252757][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.252772][ T6169] RIP: 0033:0x7f04b3d9ce59 [ 109.252791][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.252805][ T6169] RSP: 002b:00007f04b4bb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 109.252821][ T6169] RAX: ffffffffffffffda RBX: 00007f04b4016090 RCX: 00007f04b3d9ce59 [ 109.252831][ T6169] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 109.252840][ T6169] RBP: 00007f04b3e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 109.252849][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.252857][ T6169] R13: 00007f04b4016128 R14: 00007f04b4016090 R15: 00007fff73a22d68 [ 109.252876][ T6169] [ 109.252898][ T6169] net_ratelimit: 49 callbacks suppressed [ 109.252907][ T6169] socket: no more sockets [ 109.669455][ T6173] vhci_hcd vhci_hcd.0: invalid port number 0 [ 109.738372][ T6169] random: crng reseeded on system resumption [ 112.157044][ T6084] block nbd3: Receive control failed (result -32) [ 112.631621][ T6223] zswap: compressor not available [ 113.053859][ T30] audit: type=1800 audit(1779241858.423:3): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.80" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 113.662518][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.82'. [ 115.178668][ T6261] random: crng reseeded on system resumption [ 117.165089][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 117.261301][ T6292] zswap: compressor not available [ 117.305204][ T6303] random: crng reseeded on system resumption [ 117.338644][ T6303] FAULT_INJECTION: forcing a failure. [ 117.338644][ T6303] name failslab, interval 1, probability 0, space 0, times 0 [ 117.393732][ T6303] CPU: 1 UID: 0 PID: 6303 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) [ 117.393772][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.393793][ T6303] Call Trace: [ 117.393802][ T6303] [ 117.393814][ T6303] dump_stack_lvl+0x100/0x190 [ 117.393865][ T6303] should_fail_ex.cold+0x5/0xa [ 117.393903][ T6303] should_failslab+0xc2/0x120 [ 117.393936][ T6303] __kmalloc_cache_noprof+0x7a/0x6f0 [ 117.393978][ T6303] ? memory_bm_create+0x14d/0xba0 [ 117.394016][ T6303] memory_bm_create+0x14d/0xba0 [ 117.394076][ T6303] create_basic_memory_bitmaps+0xbd/0x350 [ 117.394123][ T6303] snapshot_open+0x230/0x2a0 [ 117.394163][ T6303] ? __pfx_snapshot_open+0x10/0x10 [ 117.394206][ T6303] misc_open+0x26d/0x450 [ 117.394243][ T6303] ? __pfx_misc_open+0x10/0x10 [ 117.394278][ T6303] chrdev_open+0x234/0x6a0 [ 117.394313][ T6303] ? __pfx_apparmor_file_open+0x10/0x10 [ 117.394342][ T6303] ? __pfx_chrdev_open+0x10/0x10 [ 117.394379][ T6303] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 117.394424][ T6303] do_dentry_open+0x6d8/0x1660 [ 117.394457][ T6303] ? __pfx_chrdev_open+0x10/0x10 [ 117.394501][ T6303] vfs_open+0x82/0x3f0 [ 117.394546][ T6303] path_openat+0x208c/0x31a0 [ 117.394594][ T6303] ? __pfx_path_openat+0x10/0x10 [ 117.394643][ T6303] do_file_open+0x20e/0x430 [ 117.394682][ T6303] ? __pfx_do_file_open+0x10/0x10 [ 117.394744][ T6303] ? alloc_fd+0x476/0x790 [ 117.394781][ T6303] ? do_getname+0x191/0x390 [ 117.394825][ T6303] do_sys_openat2+0x10d/0x1e0 [ 117.394866][ T6303] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.394922][ T6303] __x64_sys_openat+0x12d/0x210 [ 117.394965][ T6303] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.395006][ T6303] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 117.395040][ T6303] ? rcu_is_watching+0x12/0xc0 [ 117.395084][ T6303] do_syscall_64+0x10b/0xf80 [ 117.395126][ T6303] ? clear_bhb_loop+0x40/0x90 [ 117.395161][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.395189][ T6303] RIP: 0033:0x7f7102d9ce59 [ 117.395219][ T6303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.395246][ T6303] RSP: 002b:00007f7103cc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.395274][ T6303] RAX: ffffffffffffffda RBX: 00007f7103016090 RCX: 00007f7102d9ce59 [ 117.395294][ T6303] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 117.395312][ T6303] RBP: 00007f7102e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 117.395329][ T6303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.395346][ T6303] R13: 00007f7103016128 R14: 00007f7103016090 R15: 00007fff91615928 [ 117.395385][ T6303] [ 121.122971][ T6336] random: crng reseeded on system resumption [ 121.597826][ T6325] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 121.597826][ T6325] program syz.1.96 not setting count and/or reply_len properly [ 123.059358][ T6355] random: crng reseeded on system resumption [ 123.074609][ T6355] FAULT_INJECTION: forcing a failure. [ 123.074609][ T6355] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 123.097050][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.3.104 Not tainted syzkaller #0 PREEMPT(full) [ 123.097085][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.097100][ T6355] Call Trace: [ 123.097108][ T6355] [ 123.097118][ T6355] dump_stack_lvl+0x100/0x190 [ 123.097153][ T6355] should_fail_ex.cold+0x5/0xa [ 123.097182][ T6355] ? prepare_alloc_pages+0x16d/0x5f0 [ 123.097218][ T6355] should_fail_alloc_page+0xeb/0x140 [ 123.097251][ T6355] prepare_alloc_pages+0x1f0/0x5f0 [ 123.097288][ T6355] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 123.097340][ T6355] ? stack_trace_save+0x8e/0xc0 [ 123.097377][ T6355] ? __pfx_stack_trace_save+0x10/0x10 [ 123.097410][ T6355] ? arch_stack_walk+0xa6/0xf0 [ 123.097441][ T6355] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.097487][ T6355] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.097541][ T6355] ? kasan_save_stack+0x30/0x50 [ 123.097566][ T6355] ? kasan_save_track+0x14/0x30 [ 123.097591][ T6355] ? __kasan_kmalloc+0xaa/0xb0 [ 123.097615][ T6355] ? memory_bm_create+0x14d/0xba0 [ 123.097654][ T6355] ? do_syscall_64+0x10b/0xf80 [ 123.097693][ T6355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.097726][ T6355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.097767][ T6355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.097808][ T6355] ? policy_nodemask+0xed/0x4f0 [ 123.097846][ T6355] alloc_pages_mpol+0x1fb/0x540 [ 123.097881][ T6355] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 123.097925][ T6355] alloc_pages_noprof+0x1a/0x160 [ 123.097962][ T6355] get_zeroed_page_noprof+0x18/0xb0 [ 123.097996][ T6355] get_image_page+0x18/0x1a0 [ 123.098031][ T6355] memory_bm_create+0x432/0xba0 [ 123.098082][ T6355] create_basic_memory_bitmaps+0xbd/0x350 [ 123.098125][ T6355] snapshot_open+0x230/0x2a0 [ 123.098165][ T6355] ? __pfx_snapshot_open+0x10/0x10 [ 123.098205][ T6355] misc_open+0x26d/0x450 [ 123.098241][ T6355] ? __pfx_misc_open+0x10/0x10 [ 123.098273][ T6355] chrdev_open+0x234/0x6a0 [ 123.098308][ T6355] ? __pfx_apparmor_file_open+0x10/0x10 [ 123.098336][ T6355] ? __pfx_chrdev_open+0x10/0x10 [ 123.098373][ T6355] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 123.098418][ T6355] do_dentry_open+0x6d8/0x1660 [ 123.098451][ T6355] ? __pfx_chrdev_open+0x10/0x10 [ 123.098495][ T6355] vfs_open+0x82/0x3f0 [ 123.098547][ T6355] path_openat+0x208c/0x31a0 [ 123.098593][ T6355] ? __pfx_path_openat+0x10/0x10 [ 123.098639][ T6355] do_file_open+0x20e/0x430 [ 123.098672][ T6355] ? __pfx_do_file_open+0x10/0x10 [ 123.098728][ T6355] ? alloc_fd+0x476/0x790 [ 123.098762][ T6355] ? do_getname+0x191/0x390 [ 123.098798][ T6355] do_sys_openat2+0x10d/0x1e0 [ 123.098829][ T6355] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.098881][ T6355] __x64_sys_openat+0x12d/0x210 [ 123.098922][ T6355] ? __pfx___x64_sys_openat+0x10/0x10 [ 123.098962][ T6355] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 123.098997][ T6355] ? rcu_is_watching+0x12/0xc0 [ 123.099034][ T6355] do_syscall_64+0x10b/0xf80 [ 123.099074][ T6355] ? clear_bhb_loop+0x40/0x90 [ 123.099108][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.099137][ T6355] RIP: 0033:0x7f7102d9ce59 [ 123.099162][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.099189][ T6355] RSP: 002b:00007f7103cc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.099216][ T6355] RAX: ffffffffffffffda RBX: 00007f7103016090 RCX: 00007f7102d9ce59 [ 123.099235][ T6355] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 123.099253][ T6355] RBP: 00007f7102e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 123.099270][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.099285][ T6355] R13: 00007f7103016128 R14: 00007f7103016090 R15: 00007fff91615928 [ 123.099323][ T6355] [ 123.949313][ T6346] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 123.949313][ T6346] program syz.2.101 not setting count and/or reply_len properly [ 125.020551][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.107'. [ 126.569403][ T6084] block nbd4: Receive control failed (result -32) [ 127.210870][ T30] audit: type=1800 audit(1779241872.583:4): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.113" name="trace_marker" dev="tracefs" ino=598 res=0 errno=0 [ 127.444769][ T30] audit: type=1800 audit(1779241872.813:5): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.114" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 127.878744][ T6410] netlink: 330 bytes leftover after parsing attributes in process `syz.1.115'. [ 127.899932][ T6410] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 128.467939][ T6084] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 128.482713][ T6419] vivid-008: ================= START STATUS ================= [ 128.513224][ T6419] vivid-008: ================== END STATUS ================== [ 128.660767][ T6420] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 128.708463][ T6420] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 128.777078][ T6412] NFSD: Failed to start, no listeners configured. [ 130.659125][ T6084] Bluetooth: hci3: command 0x2016 tx timeout [ 132.161689][ T6457] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 132.161689][ T6457] program syz.2.126 not setting count and/or reply_len properly [ 132.242089][ T6114] block nbd5: Receive control failed (result -32) [ 132.648003][ T6488] random: crng reseeded on system resumption [ 132.705765][ T6488] FAULT_INJECTION: forcing a failure. [ 132.705765][ T6488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.734454][ T6114] Bluetooth: hci3: command 0x2016 tx timeout [ 132.818276][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.829240][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.842118][ T6488] CPU: 1 UID: 0 PID: 6488 Comm: syz.3.130 Not tainted syzkaller #0 PREEMPT(full) [ 132.842156][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.842171][ T6488] Call Trace: [ 132.842181][ T6488] [ 132.842192][ T6488] dump_stack_lvl+0x100/0x190 [ 132.842227][ T6488] should_fail_ex.cold+0x5/0xa [ 132.842258][ T6488] ? prepare_alloc_pages+0x16d/0x5f0 [ 132.842295][ T6488] should_fail_alloc_page+0xeb/0x140 [ 132.842331][ T6488] prepare_alloc_pages+0x1f0/0x5f0 [ 132.842371][ T6488] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 132.842418][ T6488] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 132.842474][ T6488] ? stack_trace_save+0x8e/0xc0 [ 132.842511][ T6488] ? __pfx_stack_trace_save+0x10/0x10 [ 132.842548][ T6488] ? arch_stack_walk+0xa6/0xf0 [ 132.842584][ T6488] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.842630][ T6488] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.842675][ T6488] ? kasan_save_stack+0x30/0x50 [ 132.842700][ T6488] ? kasan_save_track+0x14/0x30 [ 132.842722][ T6488] ? __kasan_kmalloc+0xaa/0xb0 [ 132.842747][ T6488] ? memory_bm_create+0x14d/0xba0 [ 132.842788][ T6488] ? do_syscall_64+0x10b/0xf80 [ 132.842824][ T6488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.842852][ T6488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.842889][ T6488] ? policy_nodemask+0xed/0x4f0 [ 132.842923][ T6488] alloc_pages_mpol+0x1fb/0x540 [ 132.842956][ T6488] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 132.842989][ T6488] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 132.843028][ T6488] alloc_pages_noprof+0x1a/0x160 [ 132.843065][ T6488] get_zeroed_page_noprof+0x18/0xb0 [ 132.843098][ T6488] get_image_page+0x18/0x1a0 [ 132.843132][ T6488] alloc_rtree_node+0x3c/0xb0 [ 132.843167][ T6488] memory_bm_create+0x65e/0xba0 [ 132.843223][ T6488] create_basic_memory_bitmaps+0xbd/0x350 [ 132.843269][ T6488] snapshot_open+0x230/0x2a0 [ 132.843307][ T6488] ? __pfx_snapshot_open+0x10/0x10 [ 132.843353][ T6488] misc_open+0x26d/0x450 [ 132.843413][ T6488] ? __pfx_misc_open+0x10/0x10 [ 132.843447][ T6488] chrdev_open+0x234/0x6a0 [ 132.843488][ T6488] ? __pfx_apparmor_file_open+0x10/0x10 [ 132.843516][ T6488] ? __pfx_chrdev_open+0x10/0x10 [ 132.843550][ T6488] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 132.843591][ T6488] do_dentry_open+0x6d8/0x1660 [ 132.843621][ T6488] ? __pfx_chrdev_open+0x10/0x10 [ 132.843662][ T6488] vfs_open+0x82/0x3f0 [ 132.843703][ T6488] path_openat+0x208c/0x31a0 [ 132.843747][ T6488] ? __pfx_path_openat+0x10/0x10 [ 132.843793][ T6488] do_file_open+0x20e/0x430 [ 132.843828][ T6488] ? __pfx_do_file_open+0x10/0x10 [ 132.843885][ T6488] ? alloc_fd+0x476/0x790 [ 132.843920][ T6488] ? do_getname+0x191/0x390 [ 132.843962][ T6488] do_sys_openat2+0x10d/0x1e0 [ 132.843999][ T6488] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.844046][ T6488] __x64_sys_openat+0x12d/0x210 [ 132.844085][ T6488] ? __pfx___x64_sys_openat+0x10/0x10 [ 132.844123][ T6488] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 132.844154][ T6488] ? rcu_is_watching+0x12/0xc0 [ 132.844186][ T6488] do_syscall_64+0x10b/0xf80 [ 132.844223][ T6488] ? clear_bhb_loop+0x40/0x90 [ 132.844255][ T6488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.844281][ T6488] RIP: 0033:0x7f7102d9ce59 [ 132.844304][ T6488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.844330][ T6488] RSP: 002b:00007f7103cc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.844357][ T6488] RAX: ffffffffffffffda RBX: 00007f7103016090 RCX: 00007f7102d9ce59 [ 132.844375][ T6488] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 132.844393][ T6488] RBP: 00007f7102e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 132.844409][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.844425][ T6488] R13: 00007f7103016128 R14: 00007f7103016090 R15: 00007fff91615928 [ 132.844471][ T6488] [ 135.018887][ T6503] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 135.018887][ T6503] program syz.0.135 not setting count and/or reply_len properly [ 135.867472][ T30] audit: type=1800 audit(1779241881.243:6): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.139" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 136.698179][ T6530] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 136.698179][ T6530] program syz.1.140 not setting count and/or reply_len properly [ 138.377996][ T6084] block nbd6: Receive control failed (result -32) [ 139.338189][ T6563] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 139.338189][ T6563] program syz.1.146 not setting count and/or reply_len properly [ 139.504640][ T6557] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 139.504640][ T6557] program syz.2.144 not setting count and/or reply_len properly [ 139.794734][ T6583] FAULT_INJECTION: forcing a failure. [ 139.794734][ T6583] name failslab, interval 1, probability 0, space 0, times 0 [ 139.833355][ T6583] CPU: 1 UID: 0 PID: 6583 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(full) [ 139.833396][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.833413][ T6583] Call Trace: [ 139.833423][ T6583] [ 139.833434][ T6583] dump_stack_lvl+0x100/0x190 [ 139.833474][ T6583] should_fail_ex.cold+0x5/0xa [ 139.833511][ T6583] should_failslab+0xc2/0x120 [ 139.833545][ T6583] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 139.833587][ T6583] ? __kernfs_new_node+0xd2/0x9f0 [ 139.833625][ T6583] __kernfs_new_node+0xd2/0x9f0 [ 139.833661][ T6583] ? __pfx___kernfs_new_node+0x10/0x10 [ 139.833701][ T6583] ? find_held_lock+0x2b/0x80 [ 139.833736][ T6583] ? kernfs_root+0xee/0x2a0 [ 139.833764][ T6583] ? kernfs_root+0xee/0x2a0 [ 139.833803][ T6583] kernfs_new_node+0x11b/0x1a0 [ 139.833842][ T6583] __kernfs_create_file+0x53/0x350 [ 139.833887][ T6583] sysfs_add_file_mode_ns+0x207/0x3c0 [ 139.833925][ T6583] sysfs_merge_group+0x194/0x340 [ 139.833959][ T6583] ? __pfx_sysfs_merge_group+0x10/0x10 [ 139.833992][ T6583] ? bus_add_device+0x368/0x6b0 [ 139.834019][ T6583] ? __pfx_bus_add_device+0x10/0x10 [ 139.834042][ T6583] ? __pfx_dev_add_physical_location+0x10/0x10 [ 139.834093][ T6583] dpm_sysfs_add+0x237/0x280 [ 139.834132][ T6583] device_add+0x9ef/0x1950 [ 139.834172][ T6583] ? __pfx_device_add+0x10/0x10 [ 139.834209][ T6583] ? lockdep_init_map_type+0x5c/0x250 [ 139.834238][ T6583] ? __init_waitqueue_head+0xca/0x150 [ 139.834277][ T6583] netdev_register_kobject+0x1a9/0x3d0 [ 139.834322][ T6583] register_netdevice+0x151c/0x24b0 [ 139.834366][ T6583] ? __pfx_register_netdevice+0x10/0x10 [ 139.834406][ T6583] ? net_generic+0xea/0x2a0 [ 139.834458][ T6583] ppp_dev_configure+0x986/0xcb0 [ 139.834509][ T6583] ppp_ioctl+0x9d7/0x27c0 [ 139.834538][ T6583] ? find_held_lock+0x2b/0x80 [ 139.834573][ T6583] ? __pfx_ppp_ioctl+0x10/0x10 [ 139.834606][ T6583] ? __fget_files+0x21f/0x3d0 [ 139.834644][ T6583] ? __pfx_ppp_ioctl+0x10/0x10 [ 139.834673][ T6583] __x64_sys_ioctl+0x18e/0x210 [ 139.834706][ T6583] do_syscall_64+0x10b/0xf80 [ 139.834747][ T6583] ? clear_bhb_loop+0x40/0x90 [ 139.834782][ T6583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.834811][ T6583] RIP: 0033:0x7f7102d9ce59 [ 139.834836][ T6583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.834862][ T6583] RSP: 002b:00007f7103ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.834889][ T6583] RAX: ffffffffffffffda RBX: 00007f7103015fa0 RCX: 00007f7102d9ce59 [ 139.834907][ T6583] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 139.834925][ T6583] RBP: 00007f7102e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 139.834941][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.834958][ T6583] R13: 00007f7103016038 R14: 00007f7103015fa0 R15: 00007fff91615928 [ 139.834995][ T6583] [ 140.326420][ T6084] block nbd7: Receive control failed (result -32) [ 140.449157][ T6594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 140.474195][ T6594] bridge_slave_1: left allmulticast mode [ 140.483587][ T6594] bridge_slave_1: left promiscuous mode [ 140.491639][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.510758][ T6594] bridge_slave_0: left allmulticast mode [ 140.519187][ T6594] bridge_slave_0: left promiscuous mode [ 140.545068][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.089410][ T6084] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 141.758313][ T6619] netlink: 330 bytes leftover after parsing attributes in process `syz.2.156'. [ 141.913011][ T6623] batman_adv: Routing algorithm '7' is not supported [ 142.065144][ T6627] random: crng reseeded on system resumption [ 144.426166][ T6677] netlink: 338 bytes leftover after parsing attributes in process `syz.0.170'. [ 144.501745][ T6681] netlink: 338 bytes leftover after parsing attributes in process `syz.0.170'. [ 147.903814][ T6749] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 147.903814][ T6749] program syz.2.187 not setting count and/or reply_len properly [ 148.233243][ T6766] NFSD: Failed to start, no listeners configured. [ 149.246724][ T6761] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 149.246724][ T6761] program syz.0.189 not setting count and/or reply_len properly [ 149.578442][ T6794] Setting dangerous option i915.mitigations - tainting kernel [ 151.136644][ T6822] netlink: 342 bytes leftover after parsing attributes in process `syz.2.204'. [ 151.796522][ T6818] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 151.796522][ T6818] program syz.0.203 not setting count and/or reply_len properly [ 154.196537][ T30] audit: type=1326 audit(1779241899.563:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.211" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04b3d9ce59 code=0x0 [ 155.396010][ T6882] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 155.414696][ T6114] block nbd8: Receive control failed (result -32) [ 156.076071][ T6880] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 156.076071][ T6880] program syz.0.215 not setting count and/or reply_len properly [ 158.387602][ T6950] netlink: 342 bytes leftover after parsing attributes in process `syz.0.229'. [ 158.879158][ T6970] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 158.887178][ T6970] netlink: 33 bytes leftover after parsing attributes in process `syz.2.234'. [ 159.059670][ T6961] FAULT_INJECTION: forcing a failure. [ 159.059670][ T6961] name failslab, interval 1, probability 0, space 0, times 0 [ 159.076092][ T6961] CPU: 0 UID: 0 PID: 6961 Comm: syz.1.232 Tainted: G U syzkaller #0 PREEMPT(full) [ 159.076131][ T6961] Tainted: [U]=USER [ 159.076139][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.076155][ T6961] Call Trace: [ 159.076162][ T6961] [ 159.076172][ T6961] dump_stack_lvl+0x100/0x190 [ 159.076210][ T6961] should_fail_ex.cold+0x5/0xa [ 159.076244][ T6961] ? unregister_netdevice_many_notify+0x903/0x24f0 [ 159.076279][ T6961] should_failslab+0xc2/0x120 [ 159.076310][ T6961] __kmalloc_noprof+0xe0/0x850 [ 159.076341][ T6961] unregister_netdevice_many_notify+0x903/0x24f0 [ 159.076378][ T6961] ? rcu_is_watching+0x12/0xc0 [ 159.076414][ T6961] ? __mutex_lock+0x26d/0x1b10 [ 159.076442][ T6961] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 159.076481][ T6961] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.076525][ T6961] ? __pfx___mutex_lock+0x10/0x10 [ 159.076561][ T6961] unregister_netdevice_queue+0x30b/0x3c0 [ 159.076599][ T6961] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 159.076634][ T6961] ? __pfx_locks_remove_file+0x10/0x10 [ 159.076677][ T6961] ppp_release+0x125/0x150 [ 159.076717][ T6961] ? __pfx_ppp_release+0x10/0x10 [ 159.076752][ T6961] __fput+0x3ff/0xb50 [ 159.076795][ T6961] task_work_run+0x150/0x240 [ 159.076823][ T6961] ? __pfx_task_work_run+0x10/0x10 [ 159.076852][ T6961] ? rcu_is_watching+0x12/0xc0 [ 159.076887][ T6961] exit_to_user_mode_loop+0x107/0x4f0 [ 159.076913][ T6961] ? rcu_is_watching+0x12/0xc0 [ 159.076948][ T6961] do_syscall_64+0x6f2/0xf80 [ 159.076986][ T6961] ? clear_bhb_loop+0x40/0x90 [ 159.077019][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.077047][ T6961] RIP: 0033:0x7f0f26d9ce59 [ 159.077070][ T6961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.077105][ T6961] RSP: 002b:00007f0f27d1b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 159.077133][ T6961] RAX: 0000000000000000 RBX: 00007f0f27015fa0 RCX: 00007f0f26d9ce59 [ 159.077150][ T6961] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 159.077166][ T6961] RBP: 00007f0f26e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 159.077182][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.077198][ T6961] R13: 00007f0f27016038 R14: 00007f0f27015fa0 R15: 00007ffe192bfea8 [ 159.077234][ T6961] [ 159.471033][ T6989] block nbd0: shutting down sockets [ 159.800526][ T6995] ICMPv6: process `syz.3.240' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 160.244348][ T7006] random: crng reseeded on system resumption [ 161.773306][ T7039] vivid-008: ================= START STATUS ================= [ 161.809433][ T7039] vivid-008: ================== END STATUS ================== [ 162.191548][ T7049] netlink: 'syz.3.252': attribute type 2 has an invalid length. [ 163.417895][ T30] audit: type=1800 audit(1779241908.793:8): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.259" name="dbroot" dev="configfs" ino=15927 res=0 errno=0 [ 165.584333][ T7121] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 165.584333][ T7121] program syz.1.270 not setting count and/or reply_len properly [ 166.621885][ T6114] block nbd0: Receive control failed (result -32) [ 166.817339][ T7148] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 170.149430][ T7195] ovs_?: entered promiscuous mode [ 170.485636][ T6114] block nbd9: Receive control failed (result -32) [ 170.902098][ T7221] netlink: zone id is out of range [ 170.914768][ T7221] netlink: zone id is out of range [ 170.927387][ T7221] netlink: zone id is out of range [ 170.951723][ T7221] netlink: zone id is out of range [ 170.982169][ T7221] netlink: zone id is out of range [ 170.998962][ T7221] netlink: zone id is out of range [ 171.013198][ T7221] netlink: zone id is out of range [ 171.036537][ T7221] netlink: zone id is out of range [ 171.055353][ T7221] netlink: zone id is out of range [ 171.065856][ T7221] netlink: zone id is out of range [ 171.763282][ T6114] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 171.799803][ T7234] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 172.050707][ T7243] usbcore.quirks: string doesn't fit in 127 chars. [ 173.071892][ T7265] smpboot: CPU 1 is now offline [ 173.776092][ T7262] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 173.776092][ T7262] program syz.0.297 not setting count and/or reply_len properly [ 173.833088][ T7281] netlink: 25 bytes leftover after parsing attributes in process `syz.2.302'. [ 174.284602][ T7271] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 174.284602][ T7271] program syz.3.298 not setting count and/or reply_len properly [ 175.967217][ T7317] FAULT_INJECTION: forcing a failure. [ 175.967217][ T7317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 176.042671][ T7317] CPU: 0 UID: 0 PID: 7317 Comm: syz.0.310 Tainted: G U syzkaller #0 PREEMPT(full) [ 176.042697][ T7317] Tainted: [U]=USER [ 176.042702][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.042715][ T7317] Call Trace: [ 176.042720][ T7317] [ 176.042726][ T7317] dump_stack_lvl+0x100/0x190 [ 176.042748][ T7317] should_fail_ex.cold+0x5/0xa [ 176.042764][ T7317] ? prepare_alloc_pages+0x16d/0x5f0 [ 176.042786][ T7317] should_fail_alloc_page+0xeb/0x140 [ 176.042805][ T7317] prepare_alloc_pages+0x1f0/0x5f0 [ 176.042826][ T7317] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 176.042858][ T7317] ? __lock_acquire+0x4a5/0x2630 [ 176.042874][ T7317] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 176.042900][ T7317] ? __lock_acquire+0x4a5/0x2630 [ 176.042913][ T7317] ? __lock_acquire+0x4a5/0x2630 [ 176.042926][ T7317] ? css_rstat_updated+0x1ce/0x5a0 [ 176.042954][ T7317] ? lock_acquire+0x1b1/0x370 [ 176.042967][ T7317] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.042989][ T7317] ? policy_nodemask+0xed/0x4f0 [ 176.043007][ T7317] alloc_pages_mpol+0x1fb/0x540 [ 176.043025][ T7317] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 176.043047][ T7317] ? __lock_acquire+0x4a5/0x2630 [ 176.043062][ T7317] folio_alloc_mpol_noprof+0x36/0x260 [ 176.043083][ T7317] vma_alloc_folio_noprof+0xed/0x1d0 [ 176.043102][ T7317] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 176.043127][ T7317] do_anonymous_page+0xb46/0x2050 [ 176.043149][ T7317] ? rcu_read_unlock+0x2d/0xb0 [ 176.043174][ T7317] __handle_mm_fault+0x1d2c/0x2a00 [ 176.043198][ T7317] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 176.043217][ T7317] ? __pfx___handle_mm_fault+0x10/0x10 [ 176.043239][ T7317] ? pte_offset_map_lock+0x174/0x320 [ 176.043256][ T7317] ? find_held_lock+0x2b/0x80 [ 176.043280][ T7317] ? follow_page_pte+0x4d0/0x13f0 [ 176.043301][ T7317] handle_mm_fault+0x36d/0xa20 [ 176.043325][ T7317] __get_user_pages+0x1178/0x32a0 [ 176.043350][ T7317] ? __pfx___get_user_pages+0x10/0x10 [ 176.043373][ T7317] populate_vma_page_range+0x267/0x3f0 [ 176.043394][ T7317] ? __pfx_populate_vma_page_range+0x10/0x10 [ 176.043412][ T7317] ? __pfx_find_vma_intersection+0x10/0x10 [ 176.043430][ T7317] ? do_mmap+0x93f/0x12f0 [ 176.043449][ T7317] __mm_populate+0x107/0x3a0 [ 176.043469][ T7317] ? __pfx___mm_populate+0x10/0x10 [ 176.043488][ T7317] ? up_write+0x28c/0x4f0 [ 176.043506][ T7317] vm_mmap_pgoff+0x37f/0x470 [ 176.043527][ T7317] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 176.043546][ T7317] ? do_futex+0x192/0x350 [ 176.043569][ T7317] ? __pfx_do_futex+0x10/0x10 [ 176.043585][ T7317] ? fdget+0x18b/0x210 [ 176.043604][ T7317] ksys_mmap_pgoff+0xe4/0x610 [ 176.043622][ T7317] ? __x64_sys_futex+0x358/0x4d0 [ 176.043639][ T7317] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 176.043657][ T7317] ? xfd_validate_state+0x129/0x190 [ 176.043677][ T7317] __x64_sys_mmap+0x125/0x190 [ 176.043695][ T7317] do_syscall_64+0x10b/0xf80 [ 176.043718][ T7317] ? clear_bhb_loop+0x40/0x90 [ 176.043736][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.043751][ T7317] RIP: 0033:0x7fc43d39ce59 [ 176.043764][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.043777][ T7317] RSP: 002b:00007fc43e2a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 176.043792][ T7317] RAX: ffffffffffffffda RBX: 00007fc43d615fa0 RCX: 00007fc43d39ce59 [ 176.043801][ T7317] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 176.043810][ T7317] RBP: 00007fc43d432d6f R08: 0000000000000002 R09: 0000000000008000 [ 176.043818][ T7317] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 176.043826][ T7317] R13: 00007fc43d616038 R14: 00007fc43d615fa0 R15: 00007fffe8eef338 [ 176.043845][ T7317] [ 177.226649][ T6114] block nbd10: Receive control failed (result -32) [ 178.012975][ T6114] block nbd11: Receive control failed (result -32) [ 178.685011][ T7337] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 178.685011][ T7337] program syz.0.314 not setting count and/or reply_len properly [ 179.300218][ T7377] futex_wake_op: syz.3.323 tries to shift op by -2048; fix this program [ 179.349232][ T7377] futex_wake_op: syz.3.323 tries to shift op by -2048; fix this program [ 181.119537][ T7413] FAULT_INJECTION: forcing a failure. [ 181.119537][ T7413] name failslab, interval 1, probability 0, space 0, times 0 [ 181.191363][ T7413] CPU: 0 UID: 0 PID: 7413 Comm: syz.0.330 Tainted: G U syzkaller #0 PREEMPT(full) [ 181.191390][ T7413] Tainted: [U]=USER [ 181.191396][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.191405][ T7413] Call Trace: [ 181.191411][ T7413] [ 181.191417][ T7413] dump_stack_lvl+0x100/0x190 [ 181.191439][ T7413] should_fail_ex.cold+0x5/0xa [ 181.191459][ T7413] should_failslab+0xc2/0x120 [ 181.191477][ T7413] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 181.191501][ T7413] ? __d_alloc+0x34/0xa40 [ 181.191524][ T7413] __d_alloc+0x34/0xa40 [ 181.191545][ T7413] d_alloc_parallel+0x111/0x14e0 [ 181.191565][ T7413] ? find_held_lock+0x2b/0x80 [ 181.191584][ T7413] ? __d_lookup+0x25c/0x4a0 [ 181.191598][ T7413] ? __pfx_d_alloc_parallel+0x10/0x10 [ 181.191615][ T7413] ? __d_lookup+0x266/0x4a0 [ 181.191634][ T7413] lookup_open.isra.0+0x57c/0x11b0 [ 181.191653][ T7413] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 181.191679][ T7413] ? mnt_get_write_access+0x1e9/0x2f0 [ 181.191704][ T7413] path_openat+0xa98/0x31a0 [ 181.191729][ T7413] ? __pfx_path_openat+0x10/0x10 [ 181.191753][ T7413] do_file_open+0x20e/0x430 [ 181.191773][ T7413] ? __pfx_do_file_open+0x10/0x10 [ 181.191804][ T7413] ? alloc_fd+0x476/0x790 [ 181.191823][ T7413] ? do_getname+0x191/0x390 [ 181.191846][ T7413] do_sys_openat2+0x10d/0x1e0 [ 181.191872][ T7413] ? __pfx_do_sys_openat2+0x10/0x10 [ 181.191900][ T7413] __x64_sys_openat+0x12d/0x210 [ 181.191923][ T7413] ? __pfx___x64_sys_openat+0x10/0x10 [ 181.191945][ T7413] ? ksys_write+0x1ac/0x250 [ 181.191965][ T7413] ? rcu_is_watching+0x12/0xc0 [ 181.191986][ T7413] do_syscall_64+0x10b/0xf80 [ 181.192008][ T7413] ? clear_bhb_loop+0x40/0x90 [ 181.192026][ T7413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.192040][ T7413] RIP: 0033:0x7fc43d39ce59 [ 181.192054][ T7413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.192067][ T7413] RSP: 002b:00007fc43e2a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.192081][ T7413] RAX: ffffffffffffffda RBX: 00007fc43d615fa0 RCX: 00007fc43d39ce59 [ 181.192091][ T7413] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 181.192105][ T7413] RBP: 00007fc43d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 181.192114][ T7413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.192123][ T7413] R13: 00007fc43d616038 R14: 00007fc43d615fa0 R15: 00007fffe8eef338 [ 181.192142][ T7413] [ 181.854576][ T7419] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 181.854576][ T7419] program syz.2.331 not setting count and/or reply_len properly [ 182.151876][ T7434] net_ratelimit: 47 callbacks suppressed [ 182.151892][ T7434] netlink: zone id is out of range [ 182.204316][ T7434] netlink: zone id is out of range [ 182.248043][ T7434] netlink: zone id is out of range [ 182.320458][ T7434] netlink: zone id is out of range [ 182.377076][ T7434] netlink: zone id is out of range [ 182.434113][ T7434] netlink: zone id is out of range [ 182.497864][ T7434] netlink: zone id is out of range [ 182.557755][ T7434] netlink: zone id is out of range [ 182.588152][ T7434] netlink: zone id is out of range [ 182.689666][ T7434] netlink: zone id is out of range [ 184.504353][ T7466] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 184.504353][ T7466] program syz.0.341 not setting count and/or reply_len properly [ 184.848569][ T7476] sg_write: data in/out 262108/22 bytes for SCSI command 0x61-- guessing data in; [ 184.848569][ T7476] program syz.1.343 not setting count and/or reply_len properly [ 185.248302][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 187.131659][ T7520] zswap: compressor not available [ 188.108826][ T7541] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 188.108826][ T7541] program syz.3.354 not setting count and/or reply_len properly [ 188.556628][ T7552] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 188.654589][ T30] audit: type=1800 audit(1779243982.114:9): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.361" name="dbroot" dev="configfs" ino=19299 res=0 errno=0 [ 188.688392][ T7552] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 189.307441][ T7556] sg_write: data in/out 262108/22 bytes for SCSI command 0x61-- guessing data in; [ 189.307441][ T7556] program syz.0.357 not setting count and/or reply_len properly [ 190.348126][ T7572] ================================================================== [ 190.356211][ T7572] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 190.364182][ T7572] Read of size 8 at addr ffff8880232a3800 by task syz.3.364/7572 [ 190.371872][ T7572] [ 190.374179][ T7572] CPU: 0 UID: 0 PID: 7572 Comm: syz.3.364 Tainted: G U syzkaller #0 PREEMPT(full) [ 190.374198][ T7572] Tainted: [U]=USER [ 190.374203][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.374212][ T7572] Call Trace: [ 190.374218][ T7572] [ 190.374224][ T7572] dump_stack_lvl+0x100/0x190 [ 190.374241][ T7572] print_report+0x13d/0x4b0 [ 190.374261][ T7572] ? __virt_addr_valid+0x239/0x430 [ 190.374284][ T7572] ? cache_seq_start_rcu+0x3fe/0x420 [ 190.374297][ T7572] kasan_report+0xdf/0x1d0 [ 190.374318][ T7572] ? cache_seq_start_rcu+0x3fe/0x420 [ 190.374334][ T7572] cache_seq_start_rcu+0x3fe/0x420 [ 190.374350][ T7572] seq_read_iter+0x2c1/0x1270 [ 190.374369][ T7572] seq_read+0x33b/0x4c0 [ 190.374383][ T7572] ? __pfx_seq_read+0x10/0x10 [ 190.374398][ T7572] ? lock_acquire+0x1b1/0x370 [ 190.374414][ T7572] ? __pfx_seq_read+0x10/0x10 [ 190.374428][ T7572] proc_reg_read+0x240/0x330 [ 190.374444][ T7572] ? __pfx_proc_reg_read+0x10/0x10 [ 190.374461][ T7572] vfs_read+0x1e4/0xb30 [ 190.374477][ T7572] ? __pfx_vfs_read+0x10/0x10 [ 190.374491][ T7572] ? __fget_files+0x215/0x3d0 [ 190.374509][ T7572] ? __fget_files+0x21f/0x3d0 [ 190.374526][ T7572] ksys_read+0x12a/0x250 [ 190.374541][ T7572] ? __pfx_ksys_read+0x10/0x10 [ 190.374556][ T7572] ? rcu_is_watching+0x12/0xc0 [ 190.374573][ T7572] do_syscall_64+0x10b/0xf80 [ 190.374595][ T7572] ? clear_bhb_loop+0x40/0x90 [ 190.374610][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.374624][ T7572] RIP: 0033:0x7f7102d9ce59 [ 190.374636][ T7572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.374649][ T7572] RSP: 002b:00007f7103ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.374662][ T7572] RAX: ffffffffffffffda RBX: 00007f7103015fa0 RCX: 00007f7102d9ce59 [ 190.374672][ T7572] RDX: 00000000000000a3 RSI: 00002000000000c0 RDI: 0000000000000045 [ 190.374680][ T7572] RBP: 00007f7102e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 190.374688][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.374696][ T7572] R13: 00007f7103016038 R14: 00007f7103015fa0 R15: 00007fff91615928 [ 190.374709][ T7572] [ 190.374714][ T7572] [ 190.595873][ T7572] Allocated by task 5632: [ 190.600188][ T7572] kasan_save_stack+0x30/0x50 [ 190.604847][ T7572] kasan_save_track+0x14/0x30 [ 190.609501][ T7572] __kasan_kmalloc+0xaa/0xb0 [ 190.614066][ T7572] __kmalloc_noprof+0x301/0x850 [ 190.618894][ T7572] cache_create_net+0xa2/0x1f0 [ 190.623633][ T7572] nfsd_export_init+0x62/0x250 [ 190.628379][ T7572] nfsd_net_init+0x69/0x3e0 [ 190.632866][ T7572] ops_init+0x1e2/0x5f0 [ 190.637005][ T7572] setup_net+0x118/0x3a0 [ 190.641229][ T7572] copy_net_ns+0x46f/0x7c0 [ 190.645631][ T7572] create_new_namespaces+0x3ea/0xac0 [ 190.650898][ T7572] unshare_nsproxy_namespaces+0xf2/0x220 [ 190.656509][ T7572] ksys_unshare+0x438/0xab0 [ 190.660994][ T7572] __x64_sys_unshare+0x31/0x40 [ 190.665741][ T7572] do_syscall_64+0x10b/0xf80 [ 190.670318][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.676187][ T7572] [ 190.678488][ T7572] The buggy address belongs to the object at ffff8880232a3000 [ 190.678488][ T7572] which belongs to the cache kmalloc-2k of size 2048 [ 190.692515][ T7572] The buggy address is located 0 bytes to the right of [ 190.692515][ T7572] allocated 2048-byte region [ffff8880232a3000, ffff8880232a3800) [ 190.707066][ T7572] [ 190.709378][ T7572] The buggy address belongs to the physical page: [ 190.715766][ T7572] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880232a5000 pfn:0x232a0 [ 190.725809][ T7572] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 190.734284][ T7572] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 190.742772][ T7572] page_type: f5(slab) [ 190.746731][ T7572] raw: 00fff00000000240 ffff88813fe34000 ffffea0001f31210 ffffea0001fd2210 [ 190.755296][ T7572] raw: ffff8880232a5000 0000000800080004 00000000f5000000 0000000000000000 [ 190.763855][ T7572] head: 00fff00000000240 ffff88813fe34000 ffffea0001f31210 ffffea0001fd2210 [ 190.772501][ T7572] head: ffff8880232a5000 0000000800080004 00000000f5000000 0000000000000000 [ 190.781147][ T7572] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 190.789793][ T7572] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 190.798608][ T7572] page dumped because: kasan: bad access detected [ 190.805008][ T7572] page_owner tracks the page as allocated [ 190.810698][ T7572] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3425244948, free_ts 0 [ 190.830293][ T7572] post_alloc_hook+0xfd/0x120 [ 190.834958][ T7572] get_page_from_freelist+0x11a6/0x33b0 [ 190.840487][ T7572] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 190.846363][ T7572] new_slab+0xa6/0x6c0 [ 190.850418][ T7572] refill_objects+0x277/0x420 [ 190.855079][ T7572] __pcs_replace_empty_main+0x375/0x650 [ 190.860609][ T7572] __kmalloc_cache_noprof+0x493/0x6f0 [ 190.865963][ T7572] acpi_ds_create_walk_state+0x95/0x300 [ 190.871491][ T7572] acpi_ps_execute_method+0x2c1/0xe90 [ 190.876845][ T7572] acpi_ns_evaluate+0x640/0x1670 [ 190.881763][ T7572] acpi_evaluate_object+0x420/0xe00 [ 190.886940][ T7572] acpi_evaluate_integer+0xdf/0x220 [ 190.892121][ T7572] acpi_bus_get_status+0x1a1/0x430 [ 190.897210][ T7572] acpi_bus_attach+0xe5/0xbc0 [ 190.901868][ T7572] acpi_dev_for_one_check+0x97/0xd0 [ 190.907041][ T7572] device_for_each_child+0x11e/0x1a0 [ 190.912302][ T7572] page_owner free stack trace missing [ 190.917642][ T7572] [ 190.919943][ T7572] Memory state around the buggy address: [ 190.925544][ T7572] ffff8880232a3700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.933581][ T7572] ffff8880232a3780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.941618][ T7572] >ffff8880232a3800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 190.949651][ T7572] ^ [ 190.953690][ T7572] ffff8880232a3880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 190.961732][ T7572] ffff8880232a3900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 190.969764][ T7572] ================================================================== [ 191.067844][ T7590] capability: warning: `syz.1.366' uses 32-bit capabilities (legacy support in use) [ 191.726020][ T7572] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 191.733239][ T7572] CPU: 0 UID: 0 PID: 7572 Comm: syz.3.364 Tainted: G U syzkaller #0 PREEMPT(full) [ 191.744000][ T7572] Tainted: [U]=USER [ 191.747781][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.757814][ T7572] Call Trace: [ 191.761073][ T7572] [ 191.763984][ T7572] dump_stack_lvl+0x100/0x190 [ 191.768644][ T7572] vpanic+0x552/0x970 [ 191.772610][ T7572] ? __pfx_vpanic+0x10/0x10 [ 191.777091][ T7572] ? mark_held_locks+0x40/0x70 [ 191.781833][ T7572] ? cache_seq_start_rcu+0x3fe/0x420 [ 191.787120][ T7572] panic+0xd1/0xe0 [ 191.790830][ T7572] ? __pfx_panic+0x10/0x10 [ 191.795224][ T7572] ? cache_seq_start_rcu+0x3fe/0x420 [ 191.800486][ T7572] ? preempt_schedule_common+0x42/0xc0 [ 191.805933][ T7572] ? check_panic_on_warn+0x1f/0x90 [ 191.811024][ T7572] check_panic_on_warn.cold+0x19/0x34 [ 191.816377][ T7572] end_report.part.0+0x3a/0x90 [ 191.821131][ T7572] kasan_report.cold+0xe/0x18 [ 191.825797][ T7572] ? cache_seq_start_rcu+0x3fe/0x420 [ 191.831064][ T7572] cache_seq_start_rcu+0x3fe/0x420 [ 191.836164][ T7572] seq_read_iter+0x2c1/0x1270 [ 191.840829][ T7572] seq_read+0x33b/0x4c0 [ 191.844965][ T7572] ? __pfx_seq_read+0x10/0x10 [ 191.849625][ T7572] ? lock_acquire+0x1b1/0x370 [ 191.854284][ T7572] ? __pfx_seq_read+0x10/0x10 [ 191.858942][ T7572] proc_reg_read+0x240/0x330 [ 191.863516][ T7572] ? __pfx_proc_reg_read+0x10/0x10 [ 191.868610][ T7572] vfs_read+0x1e4/0xb30 [ 191.872748][ T7572] ? __pfx_vfs_read+0x10/0x10 [ 191.877406][ T7572] ? __fget_files+0x215/0x3d0 [ 191.882067][ T7572] ? __fget_files+0x21f/0x3d0 [ 191.886727][ T7572] ksys_read+0x12a/0x250 [ 191.890953][ T7572] ? __pfx_ksys_read+0x10/0x10 [ 191.895698][ T7572] ? rcu_is_watching+0x12/0xc0 [ 191.900443][ T7572] do_syscall_64+0x10b/0xf80 [ 191.905023][ T7572] ? clear_bhb_loop+0x40/0x90 [ 191.909682][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.915554][ T7572] RIP: 0033:0x7f7102d9ce59 [ 191.919947][ T7572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.939534][ T7572] RSP: 002b:00007f7103ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.947928][ T7572] RAX: ffffffffffffffda RBX: 00007f7103015fa0 RCX: 00007f7102d9ce59 [ 191.955881][ T7572] RDX: 00000000000000a3 RSI: 00002000000000c0 RDI: 0000000000000045 [ 191.963830][ T7572] RBP: 00007f7102e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 191.971779][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.979727][ T7572] R13: 00007f7103016038 R14: 00007f7103015fa0 R15: 00007fff91615928 [ 191.987710][ T7572] [ 191.990789][ T7572] Kernel Offset: disabled [ 191.995110][ T7572] Rebooting in 86400 seconds..