last executing test programs: 1m15.476677937s ago: executing program 1 (id=227): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregset(0x4211, r0, 0x1, 0x0) 1m15.281601649s ago: executing program 1 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f00)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x1000000000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x20}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x86c}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2c}]}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m14.75822524s ago: executing program 1 (id=230): creat(&(0x7f0000000100)='./file0\x00', 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="de98eeeefd02c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc301dbcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99372601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a00af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f7d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff297eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e04616f54f15b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea347b9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7ae66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1f69684ffb4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16e343ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d209708000000f0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca6197add1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c63f7871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x80, 0x48000010, 0x6, 0x3, 0xb, 0x2, 0x0, 0x0, 0x90cd28a9adbdfed8, 0x897}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m14.757905008s ago: executing program 3 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='invali', 0x6) 1m14.509115084s ago: executing program 1 (id=233): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x22, 0x0, 0x0, 0x8, 0xfffffff8, 0x5f4, 0x81, 0x6, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m14.47775283s ago: executing program 3 (id=234): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='udp 2049\n', 0x9) 1m13.911821614s ago: executing program 1 (id=238): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) unshare(0x62000000) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 1m13.91150843s ago: executing program 3 (id=240): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'wlc\x00', 0x1, 0x6, 0x3d}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000080)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20048001}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0xc5e, 0x4, 0x1, 0x168c240b, r3}}], 0x20, 0xc005}], 0x1, 0x10) 1m13.756021987s ago: executing program 3 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f0000002180)=""/4105, 0x1009}, {&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f00000005c0)=""/237, 0xed}], 0x3}, 0x40000020) 1m12.383895379s ago: executing program 3 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='invali', 0x6) 1m12.195268923s ago: executing program 3 (id=246): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='udp 2049\n', 0x9) 1m10.355788745s ago: executing program 1 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='2049\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) 56.706944988s ago: executing program 32 (id=246): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='udp 2049\n', 0x9) 55.698838871s ago: executing program 0 (id=266): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) 55.045443637s ago: executing program 33 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='2049\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) 55.036662921s ago: executing program 0 (id=275): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='invalid_u', 0x9) 50.537803116s ago: executing program 0 (id=277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x200000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0x0, 0x200000, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x100000, 0x0, 0x0, r2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000100)={0x1, 0x4, 0x100000, 0x100000, &(0x7f0000100000)=nil, 0x100000, r2}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x0, 0x200000}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x100000, 0x200000}) 48.838016243s ago: executing program 0 (id=287): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0x3, 0x1000, 0x0, 0x0}], 0x1}) 45.175632815s ago: executing program 0 (id=300): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 44.94055834s ago: executing program 0 (id=292): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='udp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') r3 = openat(r2, &(0x7f0000000900)='nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='localhost /tmp 2000000000 0 0 0 0\n', 0x22) r4 = openat(r2, &(0x7f0000000b00)='nfsd.fh/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000c00)="6c6f63616c686f7374203120010000002032303030303030303030202f746d700a", 0x21) mkdir(&(0x7f0000000d00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000e00)=@filename='127.0.0.1:/tmp\x00', &(0x7f0000000f00)='./mnt\x00', &(0x7f0000001000)='nfs\x00', 0x0, &(0x7f0000001100)='port=2049,nolock,v3\x00') openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/file\x00', 0x42, 0x1ff) 29.010304333s ago: executing program 34 (id=292): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='udp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') r3 = openat(r2, &(0x7f0000000900)='nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='localhost /tmp 2000000000 0 0 0 0\n', 0x22) r4 = openat(r2, &(0x7f0000000b00)='nfsd.fh/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000c00)="6c6f63616c686f7374203120010000002032303030303030303030202f746d700a", 0x21) mkdir(&(0x7f0000000d00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000e00)=@filename='127.0.0.1:/tmp\x00', &(0x7f0000000f00)='./mnt\x00', &(0x7f0000001000)='nfs\x00', 0x0, &(0x7f0000001100)='port=2049,nolock,v3\x00') openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/file\x00', 0x42, 0x1ff) 4.915770869s ago: executing program 6 (id=417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="0014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0x3, 0x1000, 0x0, 0x0}], 0x1}) 3.752442758s ago: executing program 5 (id=416): r0 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff000705030200020007058402000200070588058003010705070580030107058a030800010904000105ffffff000705030200020007058402000200070588058003010705070580030107058a030800010904000805ffffff000705030200020007058402000200070588058003010705070580030107058a03080001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/ttusb-dec/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='5-1:1.0\x00', 0x8) close(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_read(r0, 0x3, 0x800, &(0x7f0000000880)=""/2048) (async) syz_usb_ep_write(r0, 0x84, 0x40, &(0x7f0000000700)="aa00080c0000000100070009017700"/64) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/drivers/ttusb-dec/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='5-1:1.0\x00', 0x8) 3.432431063s ago: executing program 2 (id=425): r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) 1.518888363s ago: executing program 6 (id=426): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0xcb9, 0xfffffffe, 0x7, 0x10001, 0xff000000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) 1.515691957s ago: executing program 2 (id=434): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0x3, 0x1000, 0x0, 0x0}], 0x1}) 1.302609812s ago: executing program 5 (id=428): r0 = openat(0xffffff9c, &(0x7f0000000900)='config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='fedcba9876543210\x00', 0x10) 1.295044157s ago: executing program 6 (id=429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20c40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x9000, 0x104000, 0x8}) 1.098545195s ago: executing program 5 (id=431): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000300)={0x0, 0x1, 0x1}, &(0x7f00000001c0)=[{}]) 1.079327168s ago: executing program 4 (id=432): r0 = open(&(0x7f0000000400)='./mount_config/dlm/ocfs2/recover_callbacks\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='1', 0x1) 1.011019322s ago: executing program 5 (id=433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x11e000}) 928.078626ms ago: executing program 4 (id=435): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 855.082363ms ago: executing program 2 (id=436): r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) 848.514511ms ago: executing program 4 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/uac1_legacy.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) 370.210207ms ago: executing program 5 (id=438): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0xcb9, 0xfffffffe, 0x7, 0x10001, 0xff000000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) 369.901941ms ago: executing program 2 (id=439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d01, 0x0, 0x200}]}) 369.782412ms ago: executing program 4 (id=440): r0 = openat(0xffffff9c, &(0x7f0000000900)='config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='fedcba9876543210\x00', 0x10) 363.552444ms ago: executing program 6 (id=446): r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) 314.083264ms ago: executing program 2 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000120)='0-CONFIG=disabled\n', 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') 187.755946ms ago: executing program 4 (id=442): mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mount_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./mount_dlm\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./mount_dlm\x00', &(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) close(r0) mkdir(&(0x7f00000002c0)='./mount_config\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./mount_config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./mount_config/dlm/ocfs2\x00', 0x1ff) r1 = open(&(0x7f0000000400)='./mount_config/dlm/ocfs2/recover_callbacks\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1', 0x1) close(r1) r2 = open(&(0x7f0000000480)='./mount_config/dlm/ocfs2/tcp_port\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='21064', 0x5) 187.477482ms ago: executing program 6 (id=443): r0 = open(&(0x7f0000000400)='./mount_config/dlm/ocfs2/recover_callbacks\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='1', 0x1) 185.998956ms ago: executing program 2 (id=444): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0x3, 0x1000, 0x0, 0x0}], 0x1}) 124.199856ms ago: executing program 5 (id=445): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 371.438µs ago: executing program 6 (id=447): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/uac1_legacy.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) 0s ago: executing program 4 (id=448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x11e000}) kernel console output (not intermixed with test programs): TION: forcing a failure. [ 112.023044][ T4952] name fail_page_alloc, interval 1, probability 100, space 0, times 72 [ 112.023072][ T4952] CPU: 1 UID: 0 PID: 4952 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.023092][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.023102][ T4952] Call Trace: [ 112.023109][ T4952] [ 112.023116][ T4952] dump_stack_lvl+0xe8/0x150 [ 112.023143][ T4952] should_fail_ex+0x467/0x600 [ 112.023181][ T4952] prepare_alloc_pages+0x223/0x650 [ 112.023215][ T4952] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.023248][ T4952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.023280][ T4952] ? __pfx_policy_nodemask+0x10/0x10 [ 112.023309][ T4952] alloc_pages_mpol+0xd4/0x280 [ 112.023331][ T4952] allocate_slab+0x137/0x5e0 [ 112.023356][ T4952] ___slab_alloc+0x16e/0x910 [ 112.023380][ T4952] ? rt_spin_trylock+0x13a/0x2b0 [ 112.023414][ T4952] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.023438][ T4952] ? __alloc_skb+0x1d7/0x7a0 [ 112.023461][ T4952] ? __alloc_skb+0x1d7/0x7a0 [ 112.023490][ T4952] __alloc_skb+0x1d7/0x7a0 [ 112.023517][ T4952] alloc_skb_with_frags+0xc6/0x760 [ 112.023541][ T4952] ? __lock_acquire+0x6df/0x2e40 [ 112.023571][ T4952] sock_alloc_send_pskb+0x884/0x9a0 [ 112.023605][ T4952] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 112.023626][ T4952] ? sock_def_readable+0xae/0x550 [ 112.023656][ T4952] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 112.023689][ T4952] unix_dgram_sendmsg+0x4da/0x17b0 [ 112.023732][ T4952] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 112.023770][ T4952] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 112.023793][ T4952] sock_sendmsg_nosec+0x13a/0x180 [ 112.023816][ T4952] __sys_sendto+0x41e/0x5d0 [ 112.023846][ T4952] ? __pfx___sys_sendto+0x10/0x10 [ 112.023880][ T4952] ? ktime_get+0x1f5/0x220 [ 112.023917][ T4952] ? rcu_is_watching+0x15/0xb0 [ 112.023944][ T4952] __x64_sys_sendto+0xde/0x100 [ 112.023973][ T4952] do_syscall_64+0x17b/0x530 [ 112.023991][ T4952] ? irqentry_exit+0x10f/0x8f0 [ 112.024007][ T4952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.024026][ T4952] ? clear_bhb_loop+0x40/0x90 [ 112.024049][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.024067][ T4952] RIP: 0033:0x7f6a741c7407 [ 112.024084][ T4952] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 112.024099][ T4952] RSP: 002b:00007ffd489c6690 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 112.024117][ T4952] RAX: ffffffffffffffda RBX: 00007f6a74077c80 RCX: 00007f6a741c7407 [ 112.024130][ T4952] RDX: 000000000000008b RSI: 00007ffd489c67d0 RDI: 0000000000000003 [ 112.024142][ T4952] RBP: 00007ffd489c6c00 R08: 0000000000000000 R09: 0000000000000000 [ 112.024153][ T4952] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd489c6c18 [ 112.024172][ T4952] R13: 00007ffd489c67d0 R14: 0000000000000070 R15: 00007ffd489c67d0 [ 112.024199][ T4952] [ 112.027579][ T6028] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 112.027606][ T6028] FAULT_INJECTION: forcing a failure. [ 112.027606][ T6028] name fail_page_alloc, interval 1, probability 100, space 0, times 71 [ 112.027631][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.3.89 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.027652][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.027662][ T6028] Call Trace: [ 112.027669][ T6028] [ 112.027676][ T6028] dump_stack_lvl+0xe8/0x150 [ 112.027704][ T6028] should_fail_ex+0x467/0x600 [ 112.027733][ T6028] prepare_alloc_pages+0x223/0x650 [ 112.027768][ T6028] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.027801][ T6028] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.027834][ T6028] ? __pfx_policy_nodemask+0x10/0x10 [ 112.027853][ T6028] ? __lock_acquire+0x6df/0x2e40 [ 112.027878][ T6028] alloc_pages_mpol+0xd4/0x280 [ 112.027901][ T6028] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.027925][ T6028] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.027948][ T6028] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.027965][ T6028] ? lock_acquire+0x115/0x350 [ 112.028003][ T6028] do_pte_missing+0x835/0x28f0 [ 112.028038][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.028067][ T6028] handle_mm_fault+0xf95/0x28d0 [ 112.028095][ T6028] ? reacquire_held_locks+0x117/0x1a0 [ 112.028115][ T6028] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.028143][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.028178][ T6028] ? lock_vma_under_rcu+0x116/0x500 [ 112.028208][ T6028] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.028230][ T6028] ? lock_vma_under_rcu+0x45a/0x500 [ 112.028278][ T6028] do_user_addr_fault+0xa4d/0x1340 [ 112.028314][ T6028] ? trace_page_fault_user+0x84/0x1e0 [ 112.028341][ T6028] exc_page_fault+0x6a/0xc0 [ 112.028361][ T6028] asm_exc_page_fault+0x26/0x30 [ 112.028379][ T6028] RIP: 0033:0x7fb74464b144 [ 112.028396][ T6028] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 112.028411][ T6028] RSP: 002b:00007ffc12a80520 EFLAGS: 00010246 [ 112.028427][ T6028] RAX: 00007fb7428a5000 RBX: 00007fb7428c56c0 RCX: 00007fb74468dd97 [ 112.028440][ T6028] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fb7428c56c0 [ 112.028452][ T6028] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 112.028463][ T6028] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffc12a80670 [ 112.028476][ T6028] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 112.028505][ T6028] [ 112.028525][ T6028] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 112.028543][ T6028] FAULT_INJECTION: forcing a failure. [ 112.028543][ T6028] name fail_page_alloc, interval 1, probability 100, space 0, times 70 [ 112.029385][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.3.89 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.029408][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.029418][ T6028] Call Trace: [ 112.029424][ T6028] [ 112.029431][ T6028] dump_stack_lvl+0xe8/0x150 [ 112.029458][ T6028] should_fail_ex+0x467/0x600 [ 112.029486][ T6028] prepare_alloc_pages+0x223/0x650 [ 112.029519][ T6028] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.029552][ T6028] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.029583][ T6028] ? __pfx_policy_nodemask+0x10/0x10 [ 112.029601][ T6028] ? __lock_acquire+0x6df/0x2e40 [ 112.029622][ T6028] alloc_pages_mpol+0xd4/0x280 [ 112.029643][ T6028] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.029660][ T6028] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.029678][ T6028] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.029692][ T6028] ? lock_acquire+0x115/0x350 [ 112.029725][ T6028] do_pte_missing+0x835/0x28f0 [ 112.029755][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.029777][ T6028] handle_mm_fault+0xf95/0x28d0 [ 112.029796][ T6028] ? reacquire_held_locks+0x117/0x1a0 [ 112.029811][ T6028] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.029834][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.029854][ T6028] ? lock_vma_under_rcu+0x116/0x500 [ 112.029875][ T6028] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.029891][ T6028] ? lock_vma_under_rcu+0x45a/0x500 [ 112.029929][ T6028] do_user_addr_fault+0xa4d/0x1340 [ 112.029955][ T6028] ? trace_page_fault_user+0x84/0x1e0 [ 112.029975][ T6028] exc_page_fault+0x6a/0xc0 [ 112.029990][ T6028] asm_exc_page_fault+0x26/0x30 [ 112.030003][ T6028] RIP: 0033:0x7fb74464b144 [ 112.030017][ T6028] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 112.030028][ T6028] RSP: 002b:00007ffc12a80520 EFLAGS: 00010246 [ 112.030041][ T6028] RAX: 00007fb7428a5000 RBX: 00007fb7428c56c0 RCX: 00007fb74468dd97 [ 112.030050][ T6028] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fb7428c56c0 [ 112.030059][ T6028] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 112.030067][ T6028] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffc12a80670 [ 112.030075][ T6028] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 112.030097][ T6028] [ 112.030229][ T6030] FAULT_INJECTION: forcing a failure. [ 112.030229][ T6030] name fail_page_alloc, interval 1, probability 100, space 0, times 68 [ 112.030249][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: modprobe Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.030264][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.030271][ T6030] Call Trace: [ 112.030277][ T6030] [ 112.030282][ T6030] dump_stack_lvl+0xe8/0x150 [ 112.030302][ T6030] should_fail_ex+0x467/0x600 [ 112.030323][ T6030] prepare_alloc_pages+0x223/0x650 [ 112.030347][ T6030] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.030372][ T6030] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.030397][ T6030] ? __pfx_policy_nodemask+0x10/0x10 [ 112.030411][ T6030] ? __lock_acquire+0x6df/0x2e40 [ 112.030429][ T6030] alloc_pages_mpol+0xd4/0x280 [ 112.030447][ T6030] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.030464][ T6030] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.030481][ T6030] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.030494][ T6030] ? lock_acquire+0x115/0x350 [ 112.030522][ T6030] do_pte_missing+0x567/0x28f0 [ 112.030548][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.030569][ T6030] handle_mm_fault+0xf95/0x28d0 [ 112.030590][ T6030] ? reacquire_held_locks+0x117/0x1a0 [ 112.030605][ T6030] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.030626][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.030647][ T6030] ? lock_vma_under_rcu+0x116/0x500 [ 112.030672][ T6030] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.030689][ T6030] ? lock_vma_under_rcu+0x45a/0x500 [ 112.030728][ T6030] do_user_addr_fault+0xa4d/0x1340 [ 112.030756][ T6030] ? trace_page_fault_user+0x84/0x1e0 [ 112.030778][ T6030] exc_page_fault+0x6a/0xc0 [ 112.030793][ T6030] asm_exc_page_fault+0x26/0x30 [ 112.030807][ T6030] RIP: 0033:0x7f13b9343ff2 [ 112.030820][ T6030] Code: 0f 60 c0 66 0f 61 c0 66 0f 70 c0 00 48 83 fa 10 72 76 48 83 fa 20 77 12 0f 11 44 17 f0 0f 11 07 c3 0f 11 47 e0 0f 11 47 f0 c3 <0f> 11 07 0f 11 47 10 48 01 d7 48 83 fa 40 76 e7 0f 11 40 20 0f 11 [ 112.030831][ T6030] RSP: 002b:00007ffc2b5fb3b8 EFLAGS: 00010206 [ 112.030844][ T6030] RAX: 00007f13b9049068 RBX: 0000000000000004 RCX: 00007f13b904b6d0 [ 112.030854][ T6030] RDX: 0000000000000f98 RSI: 0000000000000000 RDI: 00007f13b9049068 [ 112.030863][ T6030] RBP: 00007ffc2b5fb780 R08: 00007f13b9049068 R09: 0000000000000003 [ 112.030874][ T6030] R10: 0000000000000812 R11: 00007ffc2b5fb868 R12: 00007ffc2b5fb468 [ 112.030905][ T6030] R13: 00007f13b9318ab0 R14: 00007ffc2b5fb820 R15: 00007f13b904a000 [ 112.030931][ T6030] [ 112.030952][ T6030] FAULT_INJECTION: forcing a failure. [ 112.030952][ T6030] name fail_page_alloc, interval 1, probability 100, space 0, times 67 [ 112.030970][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: modprobe Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.030985][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.030992][ T6030] Call Trace: [ 112.030997][ T6030] [ 112.031002][ T6030] dump_stack_lvl+0xe8/0x150 [ 112.031020][ T6030] should_fail_ex+0x467/0x600 [ 112.031041][ T6030] prepare_alloc_pages+0x223/0x650 [ 112.031065][ T6030] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.031090][ T6030] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.031114][ T6030] ? __pfx_policy_nodemask+0x10/0x10 [ 112.031128][ T6030] ? __lock_acquire+0x6df/0x2e40 [ 112.031146][ T6030] alloc_pages_mpol+0xd4/0x280 [ 112.031169][ T6030] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.031186][ T6030] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.031203][ T6030] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.031215][ T6030] ? lock_acquire+0x115/0x350 [ 112.031250][ T6030] do_pte_missing+0x567/0x28f0 [ 112.031280][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.031302][ T6030] handle_mm_fault+0xf95/0x28d0 [ 112.031324][ T6030] ? reacquire_held_locks+0x117/0x1a0 [ 112.031340][ T6030] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.031367][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.031393][ T6030] ? lock_vma_under_rcu+0x116/0x500 [ 112.031416][ T6030] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.031432][ T6030] ? lock_vma_under_rcu+0x45a/0x500 [ 112.031477][ T6030] do_user_addr_fault+0xa4d/0x1340 [ 112.031503][ T6030] ? trace_page_fault_user+0x84/0x1e0 [ 112.031524][ T6030] exc_page_fault+0x6a/0xc0 [ 112.031539][ T6030] asm_exc_page_fault+0x26/0x30 [ 112.031552][ T6030] RIP: 0033:0x7f13b9343ff2 [ 112.031564][ T6030] Code: 0f 60 c0 66 0f 61 c0 66 0f 70 c0 00 48 83 fa 10 72 76 48 83 fa 20 77 12 0f 11 44 17 f0 0f 11 07 c3 0f 11 47 e0 0f 11 47 f0 c3 <0f> 11 07 0f 11 47 10 48 01 d7 48 83 fa 40 76 e7 0f 11 40 20 0f 11 [ 112.031575][ T6030] RSP: 002b:00007ffc2b5fb3b8 EFLAGS: 00010206 [ 112.031587][ T6030] RAX: 00007f13b9049068 RBX: 0000000000000004 RCX: 00007f13b904b6d0 [ 112.031597][ T6030] RDX: 0000000000000f98 RSI: 0000000000000000 RDI: 00007f13b9049068 [ 112.031606][ T6030] RBP: 00007ffc2b5fb780 R08: 00007f13b9049068 R09: 0000000000000003 [ 112.031615][ T6030] R10: 0000000000000812 R11: 00007ffc2b5fb868 R12: 00007ffc2b5fb468 [ 112.031625][ T6030] R13: 00007f13b9318ab0 R14: 00007ffc2b5fb820 R15: 00007f13b904a000 [ 112.031649][ T6030] [ 112.033301][ T773] FAULT_INJECTION: forcing a failure. [ 112.033301][ T773] name fail_page_alloc, interval 1, probability 100, space 0, times 64 [ 112.033324][ T773] CPU: 1 UID: 0 PID: 773 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.033340][ T773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.033349][ T773] Workqueue: events_unbound nsim_dev_trap_report_work [ 112.033374][ T773] Call Trace: [ 112.033380][ T773] [ 112.033386][ T773] dump_stack_lvl+0xe8/0x150 [ 112.033408][ T773] should_fail_ex+0x467/0x600 [ 112.033434][ T773] prepare_alloc_pages+0x223/0x650 [ 112.033463][ T773] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.033487][ T773] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.033513][ T773] ? __pfx_policy_nodemask+0x10/0x10 [ 112.033536][ T773] alloc_pages_mpol+0xd4/0x280 [ 112.033556][ T773] allocate_slab+0x137/0x5e0 [ 112.033579][ T773] ___slab_alloc+0x16e/0x910 [ 112.033599][ T773] ? rt_spin_trylock+0x13a/0x2b0 [ 112.033624][ T773] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.033655][ T773] ? __alloc_skb+0x1d7/0x7a0 [ 112.033675][ T773] ? __alloc_skb+0x1d7/0x7a0 [ 112.033702][ T773] __alloc_skb+0x1d7/0x7a0 [ 112.033728][ T773] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 112.033765][ T773] ? process_one_work+0x7fd/0x1480 [ 112.033783][ T773] process_one_work+0xaaf/0x1480 [ 112.033818][ T773] ? __pfx_process_one_work+0x10/0x10 [ 112.033833][ T773] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.033861][ T773] ? assign_work+0x3cf/0x5d0 [ 112.033879][ T773] worker_thread+0xb05/0x10d0 [ 112.033912][ T773] kthread+0x388/0x470 [ 112.033932][ T773] ? __pfx_worker_thread+0x10/0x10 [ 112.033945][ T773] ? __pfx_kthread+0x10/0x10 [ 112.033964][ T773] ret_from_fork+0x514/0xb70 [ 112.033987][ T773] ? __pfx_ret_from_fork+0x10/0x10 [ 112.034007][ T773] ? __switch_to+0xc89/0x1420 [ 112.034029][ T773] ? __pfx_kthread+0x10/0x10 [ 112.034052][ T773] ret_from_fork_asm+0x1a/0x30 [ 112.034087][ T773] [ 112.034095][ T773] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 112.034290][ T4952] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 112.034306][ T4952] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 112.034321][ T4952] node 0: slabs: 917, objs: 11004, free: 0 [ 112.034334][ T4952] node 1: slabs: 0, objs: 0, free: 0 [ 112.034807][ T4952] FAULT_INJECTION: forcing a failure. [ 112.034807][ T4952] name fail_page_alloc, interval 1, probability 100, space 0, times 60 [ 112.034830][ T4952] CPU: 1 UID: 0 PID: 4952 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.034847][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.034856][ T4952] Call Trace: [ 112.034862][ T4952] [ 112.034868][ T4952] dump_stack_lvl+0xe8/0x150 [ 112.034890][ T4952] should_fail_ex+0x467/0x600 [ 112.034923][ T4952] prepare_alloc_pages+0x223/0x650 [ 112.034951][ T4952] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.034981][ T4952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.035009][ T4952] ? __pfx_policy_nodemask+0x10/0x10 [ 112.035034][ T4952] alloc_pages_mpol+0xd4/0x280 [ 112.035054][ T4952] allocate_slab+0x137/0x5e0 [ 112.035074][ T4952] ___slab_alloc+0x16e/0x910 [ 112.035094][ T4952] ? rt_spin_trylock+0x13a/0x2b0 [ 112.035120][ T4952] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.035143][ T4952] ? __alloc_skb+0x1d7/0x7a0 [ 112.035174][ T4952] ? __alloc_skb+0x1d7/0x7a0 [ 112.035201][ T4952] __alloc_skb+0x1d7/0x7a0 [ 112.035226][ T4952] alloc_skb_with_frags+0xc6/0x760 [ 112.035254][ T4952] ? lapic_next_event+0x11/0x20 [ 112.035274][ T4952] ? clockevents_program_event+0x491/0x630 [ 112.035301][ T4952] sock_alloc_send_pskb+0x884/0x9a0 [ 112.035336][ T4952] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 112.035354][ T4952] ? register_lock_class+0x31/0x2e0 [ 112.035379][ T4952] ? __lock_acquire+0x6df/0x2e40 [ 112.035402][ T4952] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 112.035432][ T4952] unix_dgram_sendmsg+0x4da/0x17b0 [ 112.035473][ T4952] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.035492][ T4952] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 112.035530][ T4952] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 112.035553][ T4952] sock_sendmsg_nosec+0x13a/0x180 [ 112.035576][ T4952] __sys_sendto+0x41e/0x5d0 [ 112.035603][ T4952] ? rt_spin_unlock+0x163/0x200 [ 112.035628][ T4952] ? __pfx___sys_sendto+0x10/0x10 [ 112.035651][ T4952] ? unix_dgram_connect+0x276/0xba0 [ 112.035681][ T4952] ? __pfx___sys_connect+0x10/0x10 [ 112.035721][ T4952] __x64_sys_sendto+0xde/0x100 [ 112.035749][ T4952] do_syscall_64+0x17b/0x530 [ 112.035767][ T4952] ? irqentry_exit+0x10f/0x8f0 [ 112.035795][ T4952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.035813][ T4952] ? clear_bhb_loop+0x40/0x90 [ 112.035835][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.035854][ T4952] RIP: 0033:0x7f6a741c7407 [ 112.035871][ T4952] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 112.035886][ T4952] RSP: 002b:00007ffd489c6690 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 112.035906][ T4952] RAX: ffffffffffffffda RBX: 00007f6a74077c80 RCX: 00007f6a741c7407 [ 112.035919][ T4952] RDX: 000000000000008b RSI: 00007ffd489c67d0 RDI: 0000000000000003 [ 112.035931][ T4952] RBP: 00007ffd489c6c00 R08: 0000000000000000 R09: 0000000000000000 [ 112.035943][ T4952] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd489c6c18 [ 112.035955][ T4952] R13: 00007ffd489c67d0 R14: 0000000000000070 R15: 00007ffd489c67d0 [ 112.035983][ T4952] [ 112.036324][ T5793] FAULT_INJECTION: forcing a failure. [ 112.036324][ T5793] name fail_page_alloc, interval 1, probability 100, space 0, times 60 [ 112.036349][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.036369][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.036379][ T5793] Call Trace: [ 112.036386][ T5793] [ 112.036392][ T5793] dump_stack_lvl+0xe8/0x150 [ 112.036418][ T5793] should_fail_ex+0x467/0x600 [ 112.036446][ T5793] prepare_alloc_pages+0x223/0x650 [ 112.036480][ T5793] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.036513][ T5793] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.036546][ T5793] ? __pfx_policy_nodemask+0x10/0x10 [ 112.036563][ T5793] ? filemap_get_entry+0x374/0x3f0 [ 112.036590][ T5793] ? try_to_take_rt_mutex+0x842/0xb00 [ 112.036616][ T5793] ? __pfx_filemap_get_entry+0x10/0x10 [ 112.036639][ T5793] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 112.036668][ T5793] alloc_pages_mpol+0xd4/0x280 [ 112.036690][ T5793] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.036712][ T5793] shmem_get_folio_gfp+0x6ee/0x1c40 [ 112.036735][ T5793] ? __lock_acquire+0x6df/0x2e40 [ 112.036773][ T5793] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 112.036807][ T5793] shmem_write_begin+0x166/0x320 [ 112.036847][ T5793] generic_perform_write+0x2ad/0x8b0 [ 112.036878][ T5793] ? __pfx_generic_perform_write+0x10/0x10 [ 112.036899][ T5793] ? rt_spin_unlock+0x163/0x200 [ 112.036922][ T5793] ? mnt_put_write_access_file+0xc6/0x100 [ 112.036948][ T5793] ? file_update_time_flags+0x406/0x4b0 [ 112.036975][ T5793] shmem_file_write_iter+0xfb/0x120 [ 112.036996][ T5793] vfs_write+0x61e/0xbb0 [ 112.037017][ T5793] ? shmem_getattr+0x37b/0x4b0 [ 112.037052][ T5793] ? __pfx_vfs_write+0x10/0x10 [ 112.037075][ T5793] ? do_sys_openat2+0x14e/0x200 [ 112.037123][ T5793] ksys_write+0x156/0x270 [ 112.037147][ T5793] ? __pfx_ksys_write+0x10/0x10 [ 112.037185][ T5793] do_syscall_64+0x17b/0x530 [ 112.037203][ T5793] ? irqentry_exit+0x10f/0x8f0 [ 112.037220][ T5793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.037239][ T5793] ? clear_bhb_loop+0x40/0x90 [ 112.037262][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.037280][ T5793] RIP: 0033:0x7fb2cf08d407 [ 112.037296][ T5793] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 112.037311][ T5793] RSP: 002b:00007ffd6a65e6c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 112.037329][ T5793] RAX: ffffffffffffffda RBX: 00007fb2cef9f880 RCX: 00007fb2cf08d407 [ 112.037343][ T5793] RDX: 0000000000000026 RSI: 000055c9ef193a00 RDI: 0000000000000009 [ 112.037355][ T5793] RBP: 000055c9ef193a00 R08: 0000000000000000 R09: 0000000000000000 [ 112.037365][ T5793] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000026 [ 112.037376][ T5793] R13: 000055c9ef1917a0 R14: 00007fb2cf1d5ea0 R15: 000055c9dcba69dd [ 112.037407][ T5793] [ 112.039472][ T773] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 112.039496][ T773] node 0: slabs: 917, objs: 11004, free: 0 [ 112.039512][ T773] node 1: slabs: 0, objs: 0, free: 0 [ 112.039569][ T773] FAULT_INJECTION: forcing a failure. [ 112.039569][ T773] name fail_page_alloc, interval 1, probability 100, space 0, times 57 [ 112.039594][ T773] CPU: 1 UID: 0 PID: 773 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.039618][ T773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.039630][ T773] Workqueue: events_unbound nsim_dev_trap_report_work [ 112.039661][ T773] Call Trace: [ 112.039667][ T773] [ 112.039674][ T773] dump_stack_lvl+0xe8/0x150 [ 112.039700][ T773] should_fail_ex+0x467/0x600 [ 112.039729][ T773] prepare_alloc_pages+0x223/0x650 [ 112.039764][ T773] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.039798][ T773] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.039832][ T773] ? __pfx_policy_nodemask+0x10/0x10 [ 112.039861][ T773] alloc_pages_mpol+0xd4/0x280 [ 112.039884][ T773] allocate_slab+0x137/0x5e0 [ 112.039910][ T773] ___slab_alloc+0x16e/0x910 [ 112.039934][ T773] ? rt_spin_trylock+0x13a/0x2b0 [ 112.039964][ T773] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.039990][ T773] ? __alloc_skb+0x1d7/0x7a0 [ 112.040013][ T773] ? __alloc_skb+0x1d7/0x7a0 [ 112.040043][ T773] __alloc_skb+0x1d7/0x7a0 [ 112.040072][ T773] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 112.040112][ T773] ? process_one_work+0x7fd/0x1480 [ 112.040133][ T773] process_one_work+0xaaf/0x1480 [ 112.040181][ T773] ? __pfx_process_one_work+0x10/0x10 [ 112.040198][ T773] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.040231][ T773] ? assign_work+0x3cf/0x5d0 [ 112.040256][ T773] worker_thread+0xb05/0x10d0 [ 112.040297][ T773] kthread+0x388/0x470 [ 112.040323][ T773] ? __pfx_worker_thread+0x10/0x10 [ 112.040340][ T773] ? __pfx_kthread+0x10/0x10 [ 112.040367][ T773] ret_from_fork+0x514/0xb70 [ 112.040396][ T773] ? __pfx_ret_from_fork+0x10/0x10 [ 112.040421][ T773] ? __switch_to+0xc89/0x1420 [ 112.040446][ T773] ? __pfx_kthread+0x10/0x10 [ 112.040473][ T773] ret_from_fork_asm+0x1a/0x30 [ 112.040518][ T773] [ 112.044329][ T6028] FAULT_INJECTION: forcing a failure. [ 112.044329][ T6028] name fail_page_alloc, interval 1, probability 100, space 0, times 53 [ 112.044359][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.3.89 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.044380][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.044390][ T6028] Call Trace: [ 112.044398][ T6028] [ 112.044405][ T6028] dump_stack_lvl+0xe8/0x150 [ 112.044434][ T6028] should_fail_ex+0x467/0x600 [ 112.044462][ T6028] prepare_alloc_pages+0x223/0x650 [ 112.044496][ T6028] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.044529][ T6028] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.044562][ T6028] ? __pfx_policy_nodemask+0x10/0x10 [ 112.044581][ T6028] ? __lock_acquire+0x6df/0x2e40 [ 112.044606][ T6028] alloc_pages_mpol+0xd4/0x280 [ 112.044629][ T6028] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.044654][ T6028] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.044675][ T6028] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.044692][ T6028] ? lock_acquire+0x115/0x350 [ 112.044729][ T6028] do_pte_missing+0x835/0x28f0 [ 112.044765][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.044793][ T6028] handle_mm_fault+0xf95/0x28d0 [ 112.044820][ T6028] ? reacquire_held_locks+0x117/0x1a0 [ 112.044841][ T6028] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.044870][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.044898][ T6028] ? lock_vma_under_rcu+0x116/0x500 [ 112.044928][ T6028] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.044950][ T6028] ? lock_vma_under_rcu+0x45a/0x500 [ 112.045001][ T6028] do_user_addr_fault+0xa4d/0x1340 [ 112.045037][ T6028] ? trace_page_fault_user+0x84/0x1e0 [ 112.045065][ T6028] exc_page_fault+0x6a/0xc0 [ 112.045084][ T6028] asm_exc_page_fault+0x26/0x30 [ 112.045103][ T6028] RIP: 0033:0x7fb74464b144 [ 112.045120][ T6028] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 112.045135][ T6028] RSP: 002b:00007ffc12a80520 EFLAGS: 00010246 [ 112.045151][ T6028] RAX: 00007fb7428a5000 RBX: 00007fb7428c56c0 RCX: 00007fb74468dd97 [ 112.045171][ T6028] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fb7428c56c0 [ 112.045184][ T6028] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 112.045195][ T6028] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffc12a80670 [ 112.045207][ T6028] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 112.045235][ T6028] [ 112.045267][ T6028] FAULT_INJECTION: forcing a failure. [ 112.045267][ T6028] name fail_page_alloc, interval 1, probability 100, space 0, times 52 [ 112.045290][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.3.89 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.045310][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.045319][ T6028] Call Trace: [ 112.045325][ T6028] [ 112.045332][ T6028] dump_stack_lvl+0xe8/0x150 [ 112.045357][ T6028] should_fail_ex+0x467/0x600 [ 112.045384][ T6028] prepare_alloc_pages+0x223/0x650 [ 112.045417][ T6028] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.045461][ T6028] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.045494][ T6028] ? __pfx_policy_nodemask+0x10/0x10 [ 112.045514][ T6028] ? __lock_acquire+0x6df/0x2e40 [ 112.045536][ T6028] alloc_pages_mpol+0xd4/0x280 [ 112.045559][ T6028] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.045581][ T6028] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.045603][ T6028] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.045621][ T6028] ? lock_acquire+0x115/0x350 [ 112.045658][ T6028] do_pte_missing+0x835/0x28f0 [ 112.045693][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.045720][ T6028] handle_mm_fault+0xf95/0x28d0 [ 112.045747][ T6028] ? reacquire_held_locks+0x117/0x1a0 [ 112.045767][ T6028] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.045799][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.045826][ T6028] ? lock_vma_under_rcu+0x116/0x500 [ 112.045857][ T6028] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.045879][ T6028] ? lock_vma_under_rcu+0x45a/0x500 [ 112.045929][ T6028] do_user_addr_fault+0xa4d/0x1340 [ 112.045964][ T6028] ? trace_page_fault_user+0x84/0x1e0 [ 112.045992][ T6028] exc_page_fault+0x6a/0xc0 [ 112.046011][ T6028] asm_exc_page_fault+0x26/0x30 [ 112.046027][ T6028] RIP: 0033:0x7fb74464b144 [ 112.046042][ T6028] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 112.046056][ T6028] RSP: 002b:00007ffc12a80520 EFLAGS: 00010246 [ 112.046071][ T6028] RAX: 00007fb7428a5000 RBX: 00007fb7428c56c0 RCX: 00007fb74468dd97 [ 112.046084][ T6028] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fb7428c56c0 [ 112.046096][ T6028] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 112.046108][ T6028] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffc12a80670 [ 112.046119][ T6028] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 112.046147][ T6028] [ 112.046310][ T6030] FAULT_INJECTION: forcing a failure. [ 112.046310][ T6030] name fail_page_alloc, interval 1, probability 100, space 0, times 50 [ 112.046334][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: modprobe Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.046354][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.046364][ T6030] Call Trace: [ 112.046370][ T6030] [ 112.046378][ T6030] dump_stack_lvl+0xe8/0x150 [ 112.046403][ T6030] should_fail_ex+0x467/0x600 [ 112.046430][ T6030] prepare_alloc_pages+0x223/0x650 [ 112.046463][ T6030] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.046496][ T6030] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.046529][ T6030] ? __pfx_policy_nodemask+0x10/0x10 [ 112.046548][ T6030] ? __lock_acquire+0x6df/0x2e40 [ 112.046572][ T6030] alloc_pages_mpol+0xd4/0x280 [ 112.046594][ T6030] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.046616][ T6030] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.046638][ T6030] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.046655][ T6030] ? lock_acquire+0x115/0x350 [ 112.046692][ T6030] do_pte_missing+0x567/0x28f0 [ 112.046729][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.046756][ T6030] handle_mm_fault+0xf95/0x28d0 [ 112.046783][ T6030] ? reacquire_held_locks+0x117/0x1a0 [ 112.046804][ T6030] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.046832][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.046860][ T6030] ? lock_vma_under_rcu+0x116/0x500 [ 112.046890][ T6030] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.046912][ T6030] ? lock_vma_under_rcu+0x45a/0x500 [ 112.046963][ T6030] do_user_addr_fault+0xa4d/0x1340 [ 112.046998][ T6030] ? trace_page_fault_user+0x84/0x1e0 [ 112.047026][ T6030] exc_page_fault+0x6a/0xc0 [ 112.047044][ T6030] asm_exc_page_fault+0x26/0x30 [ 112.047061][ T6030] RIP: 0033:0x7f13b9343ff2 [ 112.047076][ T6030] Code: 0f 60 c0 66 0f 61 c0 66 0f 70 c0 00 48 83 fa 10 72 76 48 83 fa 20 77 12 0f 11 44 17 f0 0f 11 07 c3 0f 11 47 e0 0f 11 47 f0 c3 <0f> 11 07 0f 11 47 10 48 01 d7 48 83 fa 40 76 e7 0f 11 40 20 0f 11 [ 112.047090][ T6030] RSP: 002b:00007ffc2b5fb3b8 EFLAGS: 00010206 [ 112.047106][ T6030] RAX: 00007f13b9049068 RBX: 0000000000000004 RCX: 00007f13b904b6d0 [ 112.047118][ T6030] RDX: 0000000000000f98 RSI: 0000000000000000 RDI: 00007f13b9049068 [ 112.047130][ T6030] RBP: 00007ffc2b5fb780 R08: 00007f13b9049068 R09: 0000000000000003 [ 112.047142][ T6030] R10: 0000000000000812 R11: 00007ffc2b5fb868 R12: 00007ffc2b5fb468 [ 112.047153][ T6030] R13: 00007f13b9318ab0 R14: 00007ffc2b5fb820 R15: 00007f13b904a000 [ 112.047191][ T6030] [ 112.047210][ T6030] FAULT_INJECTION: forcing a failure. [ 112.047210][ T6030] name fail_page_alloc, interval 1, probability 100, space 0, times 49 [ 112.047232][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: modprobe Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.047251][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.047260][ T6030] Call Trace: [ 112.047266][ T6030] [ 112.047273][ T6030] dump_stack_lvl+0xe8/0x150 [ 112.047297][ T6030] should_fail_ex+0x467/0x600 [ 112.047327][ T6030] prepare_alloc_pages+0x223/0x650 [ 112.047361][ T6030] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.047394][ T6030] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.047427][ T6030] ? __pfx_policy_nodemask+0x10/0x10 [ 112.047446][ T6030] ? __lock_acquire+0x6df/0x2e40 [ 112.047469][ T6030] alloc_pages_mpol+0xd4/0x280 [ 112.047492][ T6030] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.047514][ T6030] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.047536][ T6030] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.047553][ T6030] ? lock_acquire+0x115/0x350 [ 112.047590][ T6030] do_pte_missing+0x567/0x28f0 [ 112.047625][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.047653][ T6030] handle_mm_fault+0xf95/0x28d0 [ 112.047679][ T6030] ? reacquire_held_locks+0x117/0x1a0 [ 112.047700][ T6030] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.047728][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.047756][ T6030] ? lock_vma_under_rcu+0x116/0x500 [ 112.047786][ T6030] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.047808][ T6030] ? lock_vma_under_rcu+0x45a/0x500 [ 112.047859][ T6030] do_user_addr_fault+0xa4d/0x1340 [ 112.047893][ T6030] ? trace_page_fault_user+0x84/0x1e0 [ 112.047921][ T6030] exc_page_fault+0x6a/0xc0 [ 112.047939][ T6030] asm_exc_page_fault+0x26/0x30 [ 112.047956][ T6030] RIP: 0033:0x7f13b9343ff2 [ 112.047971][ T6030] Code: 0f 60 c0 66 0f 61 c0 66 0f 70 c0 00 48 83 fa 10 72 76 48 83 fa 20 77 12 0f 11 44 17 f0 0f 11 07 c3 0f 11 47 e0 0f 11 47 f0 c3 <0f> 11 07 0f 11 47 10 48 01 d7 48 83 fa 40 76 e7 0f 11 40 20 0f 11 [ 112.047985][ T6030] RSP: 002b:00007ffc2b5fb3b8 EFLAGS: 00010206 [ 112.047999][ T6030] RAX: 00007f13b9049068 RBX: 0000000000000004 RCX: 00007f13b904b6d0 [ 112.048011][ T6030] RDX: 0000000000000f98 RSI: 0000000000000000 RDI: 00007f13b9049068 [ 112.048023][ T6030] RBP: 00007ffc2b5fb780 R08: 00007f13b9049068 R09: 0000000000000003 [ 112.048035][ T6030] R10: 0000000000000812 R11: 00007ffc2b5fb868 R12: 00007ffc2b5fb468 [ 112.048047][ T6030] R13: 00007f13b9318ab0 R14: 00007ffc2b5fb820 R15: 00007f13b904a000 [ 112.048077][ T6030] [ 112.048916][ T5793] FAULT_INJECTION: forcing a failure. [ 112.048916][ T5793] name fail_page_alloc, interval 1, probability 100, space 0, times 46 [ 112.048943][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.048964][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.048974][ T5793] Call Trace: [ 112.048980][ T5793] [ 112.048987][ T5793] dump_stack_lvl+0xe8/0x150 [ 112.049013][ T5793] should_fail_ex+0x467/0x600 [ 112.049040][ T5793] prepare_alloc_pages+0x223/0x650 [ 112.049074][ T5793] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.049106][ T5793] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.049139][ T5793] ? __pfx_policy_nodemask+0x10/0x10 [ 112.049174][ T5793] alloc_pages_mpol+0xd4/0x280 [ 112.049196][ T5793] allocate_slab+0x137/0x5e0 [ 112.049224][ T5793] ___slab_alloc+0x16e/0x910 [ 112.049247][ T5793] ? rt_spin_trylock+0x13a/0x2b0 [ 112.049276][ T5793] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.049303][ T5793] ? __alloc_skb+0x1d7/0x7a0 [ 112.049325][ T5793] ? __alloc_skb+0x1d7/0x7a0 [ 112.049355][ T5793] __alloc_skb+0x1d7/0x7a0 [ 112.049382][ T5793] netlink_sendmsg+0x5d4/0xb40 [ 112.049409][ T5793] ? __lock_acquire+0x6df/0x2e40 [ 112.049433][ T5793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.049463][ T5793] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 112.049494][ T5793] ? __kernel_text_address+0xd/0x30 [ 112.049520][ T5793] ? unwind_get_return_address+0x4d/0x90 [ 112.049551][ T5793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.049578][ T5793] sock_sendmsg_nosec+0x13a/0x180 [ 112.049601][ T5793] ____sys_sendmsg+0x565/0x870 [ 112.049636][ T5793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.049671][ T5793] ? import_iovec+0x73/0xa0 [ 112.049703][ T5793] ___sys_sendmsg+0x2a5/0x360 [ 112.049734][ T5793] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.049805][ T5793] __x64_sys_sendmsg+0x1b7/0x290 [ 112.049834][ T5793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.049879][ T5793] do_syscall_64+0x17b/0x530 [ 112.049897][ T5793] ? irqentry_exit+0x10f/0x8f0 [ 112.049914][ T5793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.049933][ T5793] ? clear_bhb_loop+0x40/0x90 [ 112.049955][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.049973][ T5793] RIP: 0033:0x7fb2cf08d407 [ 112.049993][ T5793] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 112.050007][ T5793] RSP: 002b:00007ffd6a65ef00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 112.050023][ T5793] RAX: ffffffffffffffda RBX: 00007fb2cef9f880 RCX: 00007fb2cf08d407 [ 112.050036][ T5793] RDX: 0000000000000000 RSI: 00007ffd6a65ef60 RDI: 000000000000000c [ 112.050046][ T5793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.050056][ T5793] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000d3 [ 112.050067][ T5793] R13: 000055c9ef197c90 R14: 0000000000000000 R15: 000055c9ef197a60 [ 112.050094][ T5793] [ 112.050230][ T4952] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 112.050250][ T4952] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 112.050269][ T4952] node 0: slabs: 917, objs: 11004, free: 0 [ 112.050284][ T4952] node 1: slabs: 0, objs: 0, free: 0 [ 112.050783][ T4952] FAULT_INJECTION: forcing a failure. [ 112.050783][ T4952] name fail_page_alloc, interval 1, probability 100, space 0, times 42 [ 112.050808][ T4952] CPU: 1 UID: 0 PID: 4952 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.050828][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.050838][ T4952] Call Trace: [ 112.050845][ T4952] [ 112.050851][ T4952] dump_stack_lvl+0xe8/0x150 [ 112.050898][ T4952] should_fail_ex+0x467/0x600 [ 112.050926][ T4952] prepare_alloc_pages+0x223/0x650 [ 112.050959][ T4952] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.050991][ T4952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.051024][ T4952] ? __pfx_policy_nodemask+0x10/0x10 [ 112.051052][ T4952] alloc_pages_mpol+0xd4/0x280 [ 112.051074][ T4952] allocate_slab+0x137/0x5e0 [ 112.051098][ T4952] ___slab_alloc+0x16e/0x910 [ 112.051122][ T4952] ? rt_spin_trylock+0x13a/0x2b0 [ 112.051151][ T4952] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.051184][ T4952] ? __alloc_skb+0x1d7/0x7a0 [ 112.051206][ T4952] ? __alloc_skb+0x1d7/0x7a0 [ 112.051235][ T4952] __alloc_skb+0x1d7/0x7a0 [ 112.051266][ T4952] alloc_skb_with_frags+0xc6/0x760 [ 112.051301][ T4952] sock_alloc_send_pskb+0x884/0x9a0 [ 112.051336][ T4952] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 112.051354][ T4952] ? register_lock_class+0x31/0x2e0 [ 112.051382][ T4952] ? __lock_acquire+0x6df/0x2e40 [ 112.051404][ T4952] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 112.051435][ T4952] unix_dgram_sendmsg+0x4da/0x17b0 [ 112.051475][ T4952] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.051493][ T4952] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 112.051529][ T4952] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 112.051552][ T4952] sock_sendmsg_nosec+0x13a/0x180 [ 112.051575][ T4952] __sys_sendto+0x41e/0x5d0 [ 112.051601][ T4952] ? rt_spin_unlock+0x163/0x200 [ 112.051626][ T4952] ? __pfx___sys_sendto+0x10/0x10 [ 112.051649][ T4952] ? unix_dgram_connect+0x276/0xba0 [ 112.051682][ T4952] ? __pfx___sys_connect+0x10/0x10 [ 112.051723][ T4952] __x64_sys_sendto+0xde/0x100 [ 112.051751][ T4952] do_syscall_64+0x17b/0x530 [ 112.051769][ T4952] ? irqentry_exit+0x10f/0x8f0 [ 112.051786][ T4952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.051805][ T4952] ? clear_bhb_loop+0x40/0x90 [ 112.051828][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.051845][ T4952] RIP: 0033:0x7f6a741c7407 [ 112.051861][ T4952] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 112.051875][ T4952] RSP: 002b:00007ffd489c6690 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 112.051894][ T4952] RAX: ffffffffffffffda RBX: 00007f6a74077c80 RCX: 00007f6a741c7407 [ 112.051907][ T4952] RDX: 000000000000003d RSI: 00007ffd489c67d0 RDI: 0000000000000003 [ 112.051919][ T4952] RBP: 00007ffd489c6c00 R08: 0000000000000000 R09: 0000000000000000 [ 112.051930][ T4952] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd489c6c18 [ 112.051942][ T4952] R13: 00007ffd489c67d0 R14: 0000000000000022 R15: 00007ffd489c67d0 [ 112.051970][ T4952] [ 112.054915][ C1] FAULT_INJECTION: forcing a failure. [ 112.054915][ C1] name fail_page_alloc, interval 1, probability 100, space 0, times 38 [ 112.054948][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.054971][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.054981][ C1] Call Trace: [ 112.054988][ C1] [ 112.054996][ C1] dump_stack_lvl+0xe8/0x150 [ 112.055026][ C1] should_fail_ex+0x467/0x600 [ 112.055058][ C1] prepare_alloc_pages+0x223/0x650 [ 112.055096][ C1] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.055134][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.055181][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 112.055215][ C1] alloc_pages_mpol+0xd4/0x280 [ 112.055241][ C1] allocate_slab+0x137/0x5e0 [ 112.055263][ C1] ? kfree+0x1c5/0x6c0 [ 112.055292][ C1] ___slab_alloc+0x16e/0x910 [ 112.055319][ C1] ? rt_spin_trylock+0x13a/0x2b0 [ 112.055353][ C1] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.055382][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 112.055408][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 112.055442][ C1] __alloc_skb+0x1d7/0x7a0 [ 112.055474][ C1] wg_packet_send_keepalive+0x65/0x2c0 [ 112.055504][ C1] call_timer_fn+0x192/0x5e0 [ 112.055529][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 112.055554][ C1] ? call_timer_fn+0xd4/0x5e0 [ 112.055577][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 112.055610][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.055631][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 112.055658][ C1] __run_timer_base+0x67b/0x9b0 [ 112.055694][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 112.055721][ C1] ? lock_acquire+0x115/0x350 [ 112.055762][ C1] run_timer_softirq+0xb7/0x170 [ 112.055785][ C1] handle_softirqs+0x1d9/0x6c0 [ 112.055817][ C1] run_ktimerd+0x69/0x100 [ 112.055842][ C1] smpboot_thread_fn+0x57c/0xa80 [ 112.055870][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 112.055903][ C1] kthread+0x388/0x470 [ 112.055931][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 112.055955][ C1] ? __pfx_kthread+0x10/0x10 [ 112.055983][ C1] ret_from_fork+0x514/0xb70 [ 112.056015][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 112.056043][ C1] ? __switch_to+0xc89/0x1420 [ 112.056071][ C1] ? __pfx_kthread+0x10/0x10 [ 112.056101][ C1] ret_from_fork_asm+0x1a/0x30 [ 112.056146][ C1] [ 112.056935][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 112.056958][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 112.056981][ C1] node 0: slabs: 917, objs: 11004, free: 0 [ 112.056998][ C1] node 1: slabs: 0, objs: 0, free: 0 [ 112.057221][ T773] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 112.057240][ T773] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 112.057260][ T773] node 0: slabs: 917, objs: 11004, free: 0 [ 112.057275][ T773] node 1: slabs: 0, objs: 0, free: 0 [ 112.057332][ T773] FAULT_INJECTION: forcing a failure. [ 112.057332][ T773] name fail_page_alloc, interval 1, probability 100, space 0, times 33 [ 112.057356][ T773] CPU: 1 UID: 0 PID: 773 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.057377][ T773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.057388][ T773] Workqueue: events_unbound nsim_dev_trap_report_work [ 112.057419][ T773] Call Trace: [ 112.057426][ T773] [ 112.057433][ T773] dump_stack_lvl+0xe8/0x150 [ 112.057459][ T773] should_fail_ex+0x467/0x600 [ 112.057488][ T773] prepare_alloc_pages+0x223/0x650 [ 112.057522][ T773] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.057556][ T773] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.057590][ T773] ? __pfx_policy_nodemask+0x10/0x10 [ 112.057618][ T773] alloc_pages_mpol+0xd4/0x280 [ 112.057641][ T773] allocate_slab+0x137/0x5e0 [ 112.057667][ T773] ___slab_alloc+0x16e/0x910 [ 112.057691][ T773] ? rt_spin_trylock+0x13a/0x2b0 [ 112.057721][ T773] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.057751][ T773] ? __alloc_skb+0x1d7/0x7a0 [ 112.057773][ T773] ? __alloc_skb+0x1d7/0x7a0 [ 112.057804][ T773] __alloc_skb+0x1d7/0x7a0 [ 112.057833][ T773] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 112.057873][ T773] ? process_one_work+0x7fd/0x1480 [ 112.057894][ T773] process_one_work+0xaaf/0x1480 [ 112.057936][ T773] ? __pfx_process_one_work+0x10/0x10 [ 112.057952][ T773] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.057985][ T773] ? assign_work+0x3cf/0x5d0 [ 112.058010][ T773] worker_thread+0xb05/0x10d0 [ 112.058055][ T773] kthread+0x388/0x470 [ 112.058079][ T773] ? __pfx_worker_thread+0x10/0x10 [ 112.058097][ T773] ? __pfx_kthread+0x10/0x10 [ 112.058123][ T773] ret_from_fork+0x514/0xb70 [ 112.058152][ T773] ? __pfx_ret_from_fork+0x10/0x10 [ 112.058183][ T773] ? __switch_to+0xc89/0x1420 [ 112.058208][ T773] ? __pfx_kthread+0x10/0x10 [ 112.058234][ T773] ret_from_fork_asm+0x1a/0x30 [ 112.058279][ T773] [ 112.058366][ T773] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 112.058384][ T773] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 112.058402][ T773] node 0: slabs: 917, objs: 11004, free: 0 [ 112.058418][ T773] node 1: slabs: 0, objs: 0, free: 0 [ 112.058466][ T773] FAULT_INJECTION: forcing a failure. [ 112.058466][ T773] name fail_page_alloc, interval 1, probability 100, space 0, times 29 [ 112.058489][ T773] CPU: 1 UID: 0 PID: 773 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.058509][ T773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.058520][ T773] Workqueue: events_unbound nsim_dev_trap_report_work [ 112.058547][ T773] Call Trace: [ 112.058554][ T773] [ 112.058561][ T773] dump_stack_lvl+0xe8/0x150 [ 112.058585][ T773] should_fail_ex+0x467/0x600 [ 112.058613][ T773] prepare_alloc_pages+0x223/0x650 [ 112.058648][ T773] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.058681][ T773] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.058714][ T773] ? __pfx_policy_nodemask+0x10/0x10 [ 112.058746][ T773] alloc_pages_mpol+0xd4/0x280 [ 112.058770][ T773] allocate_slab+0x137/0x5e0 [ 112.058795][ T773] ___slab_alloc+0x16e/0x910 [ 112.058819][ T773] ? rt_spin_trylock+0x13a/0x2b0 [ 112.058848][ T773] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.058875][ T773] ? __alloc_skb+0x1d7/0x7a0 [ 112.058896][ T773] ? __alloc_skb+0x1d7/0x7a0 [ 112.058926][ T773] __alloc_skb+0x1d7/0x7a0 [ 112.058955][ T773] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 112.058996][ T773] ? process_one_work+0x7fd/0x1480 [ 112.059016][ T773] process_one_work+0xaaf/0x1480 [ 112.059058][ T773] ? __pfx_process_one_work+0x10/0x10 [ 112.059074][ T773] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.059106][ T773] ? assign_work+0x3cf/0x5d0 [ 112.059131][ T773] worker_thread+0xb05/0x10d0 [ 112.059183][ T773] kthread+0x388/0x470 [ 112.059209][ T773] ? __pfx_worker_thread+0x10/0x10 [ 112.059227][ T773] ? __pfx_kthread+0x10/0x10 [ 112.059253][ T773] ret_from_fork+0x514/0xb70 [ 112.059281][ T773] ? __pfx_ret_from_fork+0x10/0x10 [ 112.059306][ T773] ? __switch_to+0xc89/0x1420 [ 112.059330][ T773] ? __pfx_kthread+0x10/0x10 [ 112.059357][ T773] ret_from_fork_asm+0x1a/0x30 [ 112.059399][ T773] [ 112.059536][ T773] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 112.059642][ T1001] FAULT_INJECTION: forcing a failure. [ 112.059642][ T1001] name fail_page_alloc, interval 1, probability 100, space 0, times 24 [ 112.059666][ T1001] CPU: 1 UID: 0 PID: 1001 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.059686][ T1001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.059697][ T1001] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 112.059728][ T1001] Call Trace: [ 112.059735][ T1001] [ 112.059742][ T1001] dump_stack_lvl+0xe8/0x150 [ 112.059766][ T1001] should_fail_ex+0x467/0x600 [ 112.059794][ T1001] prepare_alloc_pages+0x223/0x650 [ 112.059827][ T1001] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.059860][ T1001] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.059893][ T1001] ? __pfx_policy_nodemask+0x10/0x10 [ 112.059922][ T1001] alloc_pages_mpol+0xd4/0x280 [ 112.059945][ T1001] allocate_slab+0x137/0x5e0 [ 112.059964][ T1001] ? kfree+0x1c5/0x6c0 [ 112.059990][ T1001] ___slab_alloc+0x16e/0x910 [ 112.060012][ T1001] ? rt_spin_trylock+0x13a/0x2b0 [ 112.060036][ T1001] ? skb_clone+0x212/0x3a0 [ 112.060064][ T1001] kmem_cache_alloc_noprof+0xea/0x680 [ 112.060089][ T1001] ? skb_clone+0x212/0x3a0 [ 112.060114][ T1001] ? skb_clone+0x212/0x3a0 [ 112.060148][ T1001] skb_clone+0x212/0x3a0 [ 112.060187][ T1001] batadv_iv_send_outstanding_bat_ogm_packet+0x514/0x740 [ 112.060228][ T1001] ? process_one_work+0x7fd/0x1480 [ 112.060248][ T1001] process_one_work+0xaaf/0x1480 [ 112.060287][ T1001] ? __pfx_process_one_work+0x10/0x10 [ 112.060304][ T1001] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.060335][ T1001] ? assign_work+0x3cf/0x5d0 [ 112.060359][ T1001] worker_thread+0xb05/0x10d0 [ 112.060389][ T1001] ? __kthread_parkme+0x71/0x1f0 [ 112.060420][ T1001] kthread+0x388/0x470 [ 112.060445][ T1001] ? __pfx_worker_thread+0x10/0x10 [ 112.060463][ T1001] ? __pfx_kthread+0x10/0x10 [ 112.060491][ T1001] ret_from_fork+0x514/0xb70 [ 112.060519][ T1001] ? __pfx_ret_from_fork+0x10/0x10 [ 112.060544][ T1001] ? __switch_to+0xc89/0x1420 [ 112.060568][ T1001] ? __pfx_kthread+0x10/0x10 [ 112.060594][ T1001] ret_from_fork_asm+0x1a/0x30 [ 112.060635][ T1001] [ 112.060762][ T6028] FAULT_INJECTION: forcing a failure. [ 112.060762][ T6028] name fail_page_alloc, interval 1, probability 100, space 0, times 23 [ 112.060786][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.3.89 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.060807][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.060817][ T6028] Call Trace: [ 112.060823][ T6028] [ 112.060831][ T6028] dump_stack_lvl+0xe8/0x150 [ 112.060856][ T6028] should_fail_ex+0x467/0x600 [ 112.060882][ T6028] prepare_alloc_pages+0x223/0x650 [ 112.060916][ T6028] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.060949][ T6028] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.060982][ T6028] ? __pfx_policy_nodemask+0x10/0x10 [ 112.061002][ T6028] ? __lock_acquire+0x6df/0x2e40 [ 112.061026][ T6028] alloc_pages_mpol+0xd4/0x280 [ 112.061048][ T6028] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.061071][ T6028] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.061093][ T6028] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.061111][ T6028] ? lock_acquire+0x115/0x350 [ 112.061152][ T6028] do_pte_missing+0x835/0x28f0 [ 112.061195][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.061224][ T6028] handle_mm_fault+0xf95/0x28d0 [ 112.061251][ T6028] ? reacquire_held_locks+0x117/0x1a0 [ 112.061271][ T6028] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.061300][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.061328][ T6028] ? lock_vma_under_rcu+0x116/0x500 [ 112.061359][ T6028] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.061381][ T6028] ? lock_vma_under_rcu+0x45a/0x500 [ 112.061432][ T6028] do_user_addr_fault+0xa4d/0x1340 [ 112.061469][ T6028] ? trace_page_fault_user+0x84/0x1e0 [ 112.061497][ T6028] exc_page_fault+0x6a/0xc0 [ 112.061516][ T6028] asm_exc_page_fault+0x26/0x30 [ 112.061534][ T6028] RIP: 0033:0x7fb74464b144 [ 112.061552][ T6028] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 112.061567][ T6028] RSP: 002b:00007ffc12a80520 EFLAGS: 00010246 [ 112.061583][ T6028] RAX: 00007fb7428a5000 RBX: 00007fb7428c56c0 RCX: 00007fb74468dd97 [ 112.061597][ T6028] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fb7428c56c0 [ 112.061609][ T6028] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 112.061621][ T6028] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffc12a80670 [ 112.061633][ T6028] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 112.061662][ T6028] [ 112.061691][ T6028] FAULT_INJECTION: forcing a failure. [ 112.061691][ T6028] name fail_page_alloc, interval 1, probability 100, space 0, times 22 [ 112.061714][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.3.89 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.061738][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.061748][ T6028] Call Trace: [ 112.061754][ T6028] [ 112.061761][ T6028] dump_stack_lvl+0xe8/0x150 [ 112.061785][ T6028] should_fail_ex+0x467/0x600 [ 112.061812][ T6028] prepare_alloc_pages+0x223/0x650 [ 112.061846][ T6028] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.061880][ T6028] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.061912][ T6028] ? __pfx_policy_nodemask+0x10/0x10 [ 112.061932][ T6028] ? __lock_acquire+0x6df/0x2e40 [ 112.061956][ T6028] alloc_pages_mpol+0xd4/0x280 [ 112.061979][ T6028] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.062000][ T6028] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.062022][ T6028] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.062040][ T6028] ? lock_acquire+0x115/0x350 [ 112.062079][ T6028] do_pte_missing+0x835/0x28f0 [ 112.062114][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.062141][ T6028] handle_mm_fault+0xf95/0x28d0 [ 112.062174][ T6028] ? reacquire_held_locks+0x117/0x1a0 [ 112.062195][ T6028] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.062222][ T6028] ? handle_mm_fault+0xeb/0x28d0 [ 112.062250][ T6028] ? lock_vma_under_rcu+0x116/0x500 [ 112.062281][ T6028] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.062302][ T6028] ? lock_vma_under_rcu+0x45a/0x500 [ 112.062350][ T6028] do_user_addr_fault+0xa4d/0x1340 [ 112.062384][ T6028] ? trace_page_fault_user+0x84/0x1e0 [ 112.062412][ T6028] exc_page_fault+0x6a/0xc0 [ 112.062431][ T6028] asm_exc_page_fault+0x26/0x30 [ 112.062448][ T6028] RIP: 0033:0x7fb74464b144 [ 112.062463][ T6028] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 112.062478][ T6028] RSP: 002b:00007ffc12a80520 EFLAGS: 00010246 [ 112.062494][ T6028] RAX: 00007fb7428a5000 RBX: 00007fb7428c56c0 RCX: 00007fb74468dd97 [ 112.062508][ T6028] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fb7428c56c0 [ 112.062520][ T6028] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 112.062531][ T6028] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffc12a80670 [ 112.062544][ T6028] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 112.062572][ T6028] [ 112.062723][ T1001] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 112.062742][ T1001] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 112.062762][ T1001] node 0: slabs: 917, objs: 11004, free: 0 [ 112.062973][ T6030] FAULT_INJECTION: forcing a failure. [ 112.062973][ T6030] name fail_page_alloc, interval 1, probability 100, space 0, times 20 [ 112.062999][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: modprobe Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.063020][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.063030][ T6030] Call Trace: [ 112.063037][ T6030] [ 112.063045][ T6030] dump_stack_lvl+0xe8/0x150 [ 112.063070][ T6030] should_fail_ex+0x467/0x600 [ 112.063101][ T6030] prepare_alloc_pages+0x223/0x650 [ 112.063134][ T6030] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.063175][ T6030] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.063208][ T6030] ? __pfx_policy_nodemask+0x10/0x10 [ 112.063228][ T6030] ? __lock_acquire+0x6df/0x2e40 [ 112.063252][ T6030] alloc_pages_mpol+0xd4/0x280 [ 112.063275][ T6030] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.063297][ T6030] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.063320][ T6030] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.063338][ T6030] ? lock_acquire+0x115/0x350 [ 112.063375][ T6030] do_pte_missing+0x567/0x28f0 [ 112.063412][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.063440][ T6030] handle_mm_fault+0xf95/0x28d0 [ 112.063468][ T6030] ? reacquire_held_locks+0x117/0x1a0 [ 112.063488][ T6030] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.063517][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.063545][ T6030] ? lock_vma_under_rcu+0x116/0x500 [ 112.063575][ T6030] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.063598][ T6030] ? lock_vma_under_rcu+0x45a/0x500 [ 112.063655][ T6030] do_user_addr_fault+0xa4d/0x1340 [ 112.063688][ T6030] ? trace_page_fault_user+0x84/0x1e0 [ 112.063712][ T6030] exc_page_fault+0x6a/0xc0 [ 112.063729][ T6030] asm_exc_page_fault+0x26/0x30 [ 112.063747][ T6030] RIP: 0033:0x7f13b9343ff2 [ 112.063764][ T6030] Code: 0f 60 c0 66 0f 61 c0 66 0f 70 c0 00 48 83 fa 10 72 76 48 83 fa 20 77 12 0f 11 44 17 f0 0f 11 07 c3 0f 11 47 e0 0f 11 47 f0 c3 <0f> 11 07 0f 11 47 10 48 01 d7 48 83 fa 40 76 e7 0f 11 40 20 0f 11 [ 112.063778][ T6030] RSP: 002b:00007ffc2b5fb3b8 EFLAGS: 00010206 [ 112.063795][ T6030] RAX: 00007f13b9049068 RBX: 0000000000000004 RCX: 00007f13b904b6d0 [ 112.063807][ T6030] RDX: 0000000000000f98 RSI: 0000000000000000 RDI: 00007f13b9049068 [ 112.063819][ T6030] RBP: 00007ffc2b5fb780 R08: 00007f13b9049068 R09: 0000000000000003 [ 112.063832][ T6030] R10: 0000000000000812 R11: 00007ffc2b5fb868 R12: 00007ffc2b5fb468 [ 112.063845][ T6030] R13: 00007f13b9318ab0 R14: 00007ffc2b5fb820 R15: 00007f13b904a000 [ 112.063874][ T6030] [ 112.063971][ T1001] node 1: slabs: 0, objs: 0, free: 0 [ 112.064295][ T773] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 112.064317][ T773] node 0: slabs: 917, objs: 11004, free: 0 [ 112.064333][ T773] node 1: slabs: 0, objs: 0, free: 0 [ 112.064402][ T773] FAULT_INJECTION: forcing a failure. [ 112.064402][ T773] name fail_page_alloc, interval 1, probability 100, space 0, times 17 [ 112.064426][ T773] CPU: 1 UID: 0 PID: 773 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.064446][ T773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.064457][ T773] Workqueue: events_unbound nsim_dev_trap_report_work [ 112.064487][ T773] Call Trace: [ 112.064493][ T773] [ 112.064501][ T773] dump_stack_lvl+0xe8/0x150 [ 112.064526][ T773] should_fail_ex+0x467/0x600 [ 112.064554][ T773] prepare_alloc_pages+0x223/0x650 [ 112.064590][ T773] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.064624][ T773] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.064657][ T773] ? __pfx_policy_nodemask+0x10/0x10 [ 112.064686][ T773] alloc_pages_mpol+0xd4/0x280 [ 112.064709][ T773] allocate_slab+0x137/0x5e0 [ 112.064735][ T773] ___slab_alloc+0x16e/0x910 [ 112.064759][ T773] ? rt_spin_trylock+0x13a/0x2b0 [ 112.064788][ T773] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.064815][ T773] ? __alloc_skb+0x1d7/0x7a0 [ 112.064838][ T773] ? __alloc_skb+0x1d7/0x7a0 [ 112.064867][ T773] __alloc_skb+0x1d7/0x7a0 [ 112.064896][ T773] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 112.064937][ T773] ? process_one_work+0x7fd/0x1480 [ 112.064960][ T773] process_one_work+0xaaf/0x1480 [ 112.065001][ T773] ? __pfx_process_one_work+0x10/0x10 [ 112.065019][ T773] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.065051][ T773] ? assign_work+0x3cf/0x5d0 [ 112.065076][ T773] worker_thread+0xb05/0x10d0 [ 112.065121][ T773] kthread+0x388/0x470 [ 112.065146][ T773] ? __pfx_worker_thread+0x10/0x10 [ 112.065254][ T773] ? __pfx_kthread+0x10/0x10 [ 112.065281][ T773] ret_from_fork+0x514/0xb70 [ 112.065310][ T773] ? __pfx_ret_from_fork+0x10/0x10 [ 112.065335][ T773] ? __switch_to+0xc89/0x1420 [ 112.065360][ T773] ? __pfx_kthread+0x10/0x10 [ 112.065386][ T773] ret_from_fork_asm+0x1a/0x30 [ 112.065429][ T773] [ 112.065548][ T6030] FAULT_INJECTION: forcing a failure. [ 112.065548][ T6030] name fail_page_alloc, interval 1, probability 100, space 0, times 16 [ 112.065571][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: modprobe Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.065591][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.065602][ T6030] Call Trace: [ 112.065609][ T6030] [ 112.065616][ T6030] dump_stack_lvl+0xe8/0x150 [ 112.065641][ T6030] should_fail_ex+0x467/0x600 [ 112.065668][ T6030] prepare_alloc_pages+0x223/0x650 [ 112.065702][ T6030] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.065736][ T6030] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.065769][ T6030] ? __pfx_policy_nodemask+0x10/0x10 [ 112.065788][ T6030] ? __lock_acquire+0x6df/0x2e40 [ 112.065812][ T6030] alloc_pages_mpol+0xd4/0x280 [ 112.065838][ T6030] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 112.065860][ T6030] vma_alloc_folio_noprof+0xe1/0x1e0 [ 112.065883][ T6030] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.065900][ T6030] ? lock_acquire+0x115/0x350 [ 112.065939][ T6030] do_pte_missing+0x567/0x28f0 [ 112.065975][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.066002][ T6030] handle_mm_fault+0xf95/0x28d0 [ 112.066030][ T6030] ? reacquire_held_locks+0x117/0x1a0 [ 112.066050][ T6030] ? lock_vma_under_rcu+0x1d1/0x500 [ 112.066086][ T6030] ? handle_mm_fault+0xeb/0x28d0 [ 112.066122][ T6030] ? lock_vma_under_rcu+0x116/0x500 [ 112.066152][ T6030] ? __pfx_handle_mm_fault+0x10/0x10 [ 112.066181][ T6030] ? lock_vma_under_rcu+0x45a/0x500 [ 112.066233][ T6030] do_user_addr_fault+0xa4d/0x1340 [ 112.066268][ T6030] ? trace_page_fault_user+0x84/0x1e0 [ 112.066296][ T6030] exc_page_fault+0x6a/0xc0 [ 112.066315][ T6030] asm_exc_page_fault+0x26/0x30 [ 112.066333][ T6030] RIP: 0033:0x7f13b9343ff2 [ 112.066349][ T6030] Code: 0f 60 c0 66 0f 61 c0 66 0f 70 c0 00 48 83 fa 10 72 76 48 83 fa 20 77 12 0f 11 44 17 f0 0f 11 07 c3 0f 11 47 e0 0f 11 47 f0 c3 <0f> 11 07 0f 11 47 10 48 01 d7 48 83 fa 40 76 e7 0f 11 40 20 0f 11 [ 112.066365][ T6030] RSP: 002b:00007ffc2b5fb3b8 EFLAGS: 00010206 [ 112.066379][ T6030] RAX: 00007f13b9049068 RBX: 0000000000000004 RCX: 00007f13b904b6d0 [ 112.066392][ T6030] RDX: 0000000000000f98 RSI: 0000000000000000 RDI: 00007f13b9049068 [ 112.066404][ T6030] RBP: 00007ffc2b5fb780 R08: 00007f13b9049068 R09: 0000000000000003 [ 112.066417][ T6030] R10: 0000000000000812 R11: 00007ffc2b5fb868 R12: 00007ffc2b5fb468 [ 112.066429][ T6030] R13: 00007f13b9318ab0 R14: 00007ffc2b5fb820 R15: 00007f13b904a000 [ 112.066460][ T6030] [ 112.067092][ T1532] FAULT_INJECTION: forcing a failure. [ 112.067092][ T1532] name fail_page_alloc, interval 1, probability 100, space 0, times 13 [ 112.067118][ T1532] CPU: 1 UID: 0 PID: 1532 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.067139][ T1532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.067151][ T1532] Workqueue: events_unbound nsim_dev_trap_report_work [ 112.067190][ T1532] Call Trace: [ 112.067197][ T1532] [ 112.067204][ T1532] dump_stack_lvl+0xe8/0x150 [ 112.067229][ T1532] should_fail_ex+0x467/0x600 [ 112.067259][ T1532] prepare_alloc_pages+0x223/0x650 [ 112.067294][ T1532] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.067329][ T1532] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.067362][ T1532] ? __pfx_policy_nodemask+0x10/0x10 [ 112.067392][ T1532] alloc_pages_mpol+0xd4/0x280 [ 112.067416][ T1532] allocate_slab+0x137/0x5e0 [ 112.067441][ T1532] ___slab_alloc+0x16e/0x910 [ 112.067466][ T1532] ? rt_spin_trylock+0x13a/0x2b0 [ 112.067496][ T1532] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.067523][ T1532] ? __alloc_skb+0x1d7/0x7a0 [ 112.067544][ T1532] ? __alloc_skb+0x1d7/0x7a0 [ 112.067575][ T1532] __alloc_skb+0x1d7/0x7a0 [ 112.067603][ T1532] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 112.067641][ T1532] ? process_one_work+0x7fd/0x1480 [ 112.067661][ T1532] process_one_work+0xaaf/0x1480 [ 112.067702][ T1532] ? __pfx_process_one_work+0x10/0x10 [ 112.067720][ T1532] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.067752][ T1532] ? assign_work+0x3cf/0x5d0 [ 112.067777][ T1532] worker_thread+0xb05/0x10d0 [ 112.067821][ T1532] kthread+0x388/0x470 [ 112.067846][ T1532] ? __pfx_worker_thread+0x10/0x10 [ 112.067864][ T1532] ? __pfx_kthread+0x10/0x10 [ 112.067890][ T1532] ret_from_fork+0x514/0xb70 [ 112.067918][ T1532] ? __pfx_ret_from_fork+0x10/0x10 [ 112.067944][ T1532] ? __switch_to+0xc89/0x1420 [ 112.067969][ T1532] ? __pfx_kthread+0x10/0x10 [ 112.067995][ T1532] ret_from_fork_asm+0x1a/0x30 [ 112.068038][ T1532] [ 112.068244][ T4952] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 112.068265][ T4952] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 112.068284][ T4952] node 0: slabs: 917, objs: 11004, free: 0 [ 112.068299][ T4952] node 1: slabs: 0, objs: 0, free: 0 [ 112.068816][ T4952] FAULT_INJECTION: forcing a failure. [ 112.068816][ T4952] name fail_page_alloc, interval 1, probability 100, space 0, times 9 [ 112.068842][ T4952] CPU: 1 UID: 0 PID: 4952 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.068862][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.068873][ T4952] Call Trace: [ 112.068879][ T4952] [ 112.068886][ T4952] dump_stack_lvl+0xe8/0x150 [ 112.068912][ T4952] should_fail_ex+0x467/0x600 [ 112.068939][ T4952] prepare_alloc_pages+0x223/0x650 [ 112.068973][ T4952] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.069006][ T4952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.069038][ T4952] ? __pfx_policy_nodemask+0x10/0x10 [ 112.069067][ T4952] alloc_pages_mpol+0xd4/0x280 [ 112.069089][ T4952] allocate_slab+0x137/0x5e0 [ 112.069112][ T4952] ___slab_alloc+0x16e/0x910 [ 112.069135][ T4952] ? rt_spin_trylock+0x13a/0x2b0 [ 112.069169][ T4952] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.069194][ T4952] ? __alloc_skb+0x1d7/0x7a0 [ 112.069217][ T4952] ? __alloc_skb+0x1d7/0x7a0 [ 112.069248][ T4952] __alloc_skb+0x1d7/0x7a0 [ 112.069275][ T4952] alloc_skb_with_frags+0xc6/0x760 [ 112.069312][ T4952] sock_alloc_send_pskb+0x884/0x9a0 [ 112.069343][ T4952] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 112.069358][ T4952] ? register_lock_class+0x31/0x2e0 [ 112.069381][ T4952] ? __lock_acquire+0x6df/0x2e40 [ 112.069400][ T4952] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 112.069427][ T4952] unix_dgram_sendmsg+0x4da/0x17b0 [ 112.069461][ T4952] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.069478][ T4952] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 112.069509][ T4952] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 112.069529][ T4952] sock_sendmsg_nosec+0x13a/0x180 [ 112.069549][ T4952] __sys_sendto+0x41e/0x5d0 [ 112.069570][ T4952] ? rt_spin_unlock+0x163/0x200 [ 112.069592][ T4952] ? __pfx___sys_sendto+0x10/0x10 [ 112.069611][ T4952] ? unix_dgram_connect+0x276/0xba0 [ 112.069639][ T4952] ? __pfx___sys_connect+0x10/0x10 [ 112.069675][ T4952] __x64_sys_sendto+0xde/0x100 [ 112.069698][ T4952] do_syscall_64+0x17b/0x530 [ 112.069713][ T4952] ? irqentry_exit+0x10f/0x8f0 [ 112.069727][ T4952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.069743][ T4952] ? clear_bhb_loop+0x40/0x90 [ 112.069762][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.069777][ T4952] RIP: 0033:0x7f6a741c7407 [ 112.069791][ T4952] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 112.069804][ T4952] RSP: 002b:00007ffd489c6690 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 112.069819][ T4952] RAX: ffffffffffffffda RBX: 00007f6a74077c80 RCX: 00007f6a741c7407 [ 112.069831][ T4952] RDX: 000000000000003d RSI: 00007ffd489c67d0 RDI: 0000000000000003 [ 112.069841][ T4952] RBP: 00007ffd489c6c00 R08: 0000000000000000 R09: 0000000000000000 [ 112.069851][ T4952] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd489c6c18 [ 112.069861][ T4952] R13: 00007ffd489c67d0 R14: 0000000000000022 R15: 00007ffd489c67d0 [ 112.069885][ T4952] [ 112.070003][ T5793] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0xcc0(GFP_KERNEL) [ 112.070022][ T5793] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 112.070043][ T5793] node 0: slabs: 917, objs: 11004, free: 0 [ 112.070057][ T5793] node 1: slabs: 0, objs: 0, free: 0 [ 112.070125][ T5793] FAULT_INJECTION: forcing a failure. [ 112.070125][ T5793] name fail_page_alloc, interval 1, probability 100, space 0, times 4 [ 112.070149][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.070177][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.070187][ T5793] Call Trace: [ 112.070194][ T5793] [ 112.070201][ T5793] dump_stack_lvl+0xe8/0x150 [ 112.070225][ T5793] should_fail_ex+0x467/0x600 [ 112.070253][ T5793] prepare_alloc_pages+0x223/0x650 [ 112.070286][ T5793] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 112.070328][ T5793] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.070362][ T5793] ? __pfx_policy_nodemask+0x10/0x10 [ 112.070389][ T5793] alloc_pages_mpol+0xd4/0x280 [ 112.070412][ T5793] allocate_slab+0x137/0x5e0 [ 112.070437][ T5793] ___slab_alloc+0x16e/0x910 [ 112.070460][ T5793] ? rt_spin_trylock+0x13a/0x2b0 [ 112.070489][ T5793] kmem_cache_alloc_node_noprof+0x1a2/0x660 [ 112.070515][ T5793] ? __alloc_skb+0x1d7/0x7a0 [ 112.070537][ T5793] ? __alloc_skb+0x1d7/0x7a0 [ 112.070566][ T5793] __alloc_skb+0x1d7/0x7a0 [ 112.070593][ T5793] alloc_skb_with_frags+0xc6/0x760 [ 112.070622][ T5793] ? rcu_is_watching+0x15/0xb0 [ 112.070643][ T5793] ? trace_kmem_cache_alloc+0x29/0xe0 [ 112.070670][ T5793] sock_alloc_send_pskb+0x884/0x9a0 [ 112.070688][ T5793] ? __alloc_skb+0x1d7/0x7a0 [ 112.070726][ T5793] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 112.070750][ T5793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.070781][ T5793] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 112.070811][ T5793] unix_dgram_sendmsg+0x4da/0x17b0 [ 112.070835][ T5793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.070862][ T5793] ? rcu_is_watching+0x15/0xb0 [ 112.070900][ T5793] ? sock_sendmsg_nosec+0xc2/0x180 [ 112.070923][ T5793] ? ____sys_sendmsg+0x69c/0x870 [ 112.070957][ T5793] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 112.070990][ T5793] ? import_iovec+0x73/0xa0 [ 112.071021][ T5793] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 112.071046][ T5793] sock_sendmsg_nosec+0x13a/0x180 [ 112.071069][ T5793] sock_write_iter+0x2e4/0x3f0 [ 112.071090][ T5793] ? __pfx_sock_write_iter+0x10/0x10 [ 112.071117][ T5793] ? bpf_lsm_file_permission+0x9/0x20 [ 112.071143][ T5793] ? security_file_permission+0x68/0x220 [ 112.071178][ T5793] vfs_write+0x61e/0xbb0 [ 112.071208][ T5793] ? __pfx_vfs_write+0x10/0x10 [ 112.071249][ T5793] ksys_write+0x156/0x270 [ 112.071272][ T5793] ? __pfx_ksys_write+0x10/0x10 [ 112.071303][ T5793] do_syscall_64+0x17b/0x530 [ 112.071321][ T5793] ? irqentry_exit+0x10f/0x8f0 [ 112.071338][ T5793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.071357][ T5793] ? clear_bhb_loop+0x40/0x90 [ 112.071379][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.071398][ T5793] RIP: 0033:0x7fb2cf08d407 [ 112.071415][ T5793] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 112.071430][ T5793] RSP: 002b:00007ffd6a65efa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 112.071449][ T5793] RAX: ffffffffffffffda RBX: 00007fb2cef9f880 RCX: 00007fb2cf08d407 [ 112.071463][ T5793] RDX: 0000000000000000 RSI: 00007ffd6a65f047 RDI: 000000000000000a [ 112.071474][ T5793] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 112.071485][ T5793] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fb2cef9f6e8 [ 112.071497][ T5793] R13: 0000000000000000 R14: 0000000000000000 R15: 000055c9ef197a60 [ 112.071525][ T5793] [ 112.080766][ T5793] udevd[5793]: failed to send result of seq 10873 to main daemon: No buffer space available [ 113.148533][ T5599] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 113.477639][ T6045] binder: BINDER_SET_CONTEXT_MGR already set [ 113.477654][ T6045] binder: 6044:6045 ioctl 4018620d 200000000040 returned -16 [ 114.140851][ T5599] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 114.141072][ T5599] Bluetooth: hci2: Injecting HCI hardware error event [ 114.158583][ T5599] Bluetooth: hci2: hardware error 0x00 [ 114.831818][ T6063] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.228251][ T6045] syz.0.94 (6045): drop_caches: 2 [ 115.852036][ T5258] FAULT_INJECTION: forcing a failure. [ 115.852036][ T5258] name failslab, interval 1, probability 1, space 0, times 1 [ 115.852071][ T5258] CPU: 1 UID: 0 PID: 5258 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.852092][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.852104][ T5258] Call Trace: [ 115.852111][ T5258] [ 115.852118][ T5258] dump_stack_lvl+0xe8/0x150 [ 115.852147][ T5258] should_fail_ex+0x467/0x600 [ 115.852176][ T5258] should_failslab+0xa8/0x100 [ 115.852194][ T5258] ? ptlock_alloc+0x20/0x70 [ 115.852221][ T5258] kmem_cache_alloc_noprof+0x9e/0x680 [ 115.852247][ T5258] ? ptlock_alloc+0x20/0x70 [ 115.852280][ T5258] ptlock_alloc+0x20/0x70 [ 115.852304][ T5258] pte_alloc_one+0x7e/0x380 [ 115.852323][ T5258] __pte_alloc+0x25/0x1a0 [ 115.852344][ T5258] copy_pmd_range+0x4eff/0x57f0 [ 115.852373][ T5258] ? __lock_acquire+0x6df/0x2e40 [ 115.852393][ T5258] ? kmem_cache_alloc_noprof+0x358/0x680 [ 115.852442][ T5258] ? __pfx_copy_pmd_range+0x10/0x10 [ 115.852478][ T5258] ? lock_acquire+0x115/0x350 [ 115.852523][ T5258] copy_page_range+0xb40/0x1170 [ 115.852556][ T5258] ? __pfx_copy_page_range+0x10/0x10 [ 115.852580][ T5258] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 115.852600][ T5258] ? lockdep_hardirqs_on+0x7a/0x110 [ 115.852618][ T5258] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 115.852637][ T5258] ? up_write+0x5a/0x190 [ 115.852663][ T5258] dup_mmap+0xf26/0x1d30 [ 115.852708][ T5258] ? __pfx_dup_mmap+0x10/0x10 [ 115.852748][ T5258] ? lock_acquire+0x115/0x350 [ 115.852790][ T5258] copy_mm+0x11a/0x480 [ 115.852818][ T5258] ? copy_process+0xd3c/0x43f0 [ 115.852835][ T5258] copy_process+0x1e7d/0x43f0 [ 115.852862][ T5258] ? copy_process+0xd3c/0x43f0 [ 115.852899][ T5258] ? __pfx_copy_process+0x10/0x10 [ 115.852932][ T5258] kernel_clone+0x2d7/0x940 [ 115.852956][ T5258] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 115.852975][ T5258] ? __pfx_kernel_clone+0x10/0x10 [ 115.853016][ T5258] __x64_sys_clone+0x1b6/0x230 [ 115.853041][ T5258] ? __pfx___x64_sys_clone+0x10/0x10 [ 115.853092][ T5258] do_syscall_64+0x17b/0x530 [ 115.853111][ T5258] ? irqentry_exit+0x10f/0x8f0 [ 115.853128][ T5258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.853148][ T5258] ? clear_bhb_loop+0x40/0x90 [ 115.853172][ T5258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.853190][ T5258] RIP: 0033:0x7f4847e36636 [ 115.853208][ T5258] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 115.853224][ T5258] RSP: 002b:00007fffd33cc9b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 115.853243][ T5258] RAX: ffffffffffffffda RBX: 00007fffd33cc9b8 RCX: 00007f4847e36636 [ 115.853257][ T5258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 115.853269][ T5258] RBP: 00007fffd33ecf00 R08: 0000000000000000 R09: 0000000000000001 [ 115.853280][ T5258] R10: 00007f4847d62a50 R11: 0000000000000246 R12: 00007fffd33ccaf0 [ 115.853293][ T5258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000559e7136aac0 [ 115.853320][ T5258] [ 117.015703][ T5599] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 118.757683][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.914501][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 118.929441][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.929474][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.929511][ T44] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 118.929532][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.979175][ T44] usb 1-1: config 0 descriptor?? [ 119.493070][ T5599] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 119.505423][ T5599] Bluetooth: hci0: Injecting HCI hardware error event [ 119.510726][ T5604] Bluetooth: hci0: hardware error 0x00 [ 119.533917][ T44] usbhid 1-1:0.0: can't add hid device: -32 [ 119.534032][ T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 120.649747][ T6134] program syz.3.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.554388][ T5599] Bluetooth: hci1: status 0x02 [ 121.739840][ T32] usb 1-1: USB disconnect, device number 5 [ 122.373885][ T5604] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 122.412735][ T6159] binder: 6157:6159 ioctl c0306201 200000002580 returned -14 [ 123.694743][ T6175] warning: `syz.0.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.843383][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.994626][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 123.998412][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.007782][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 124.007811][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.007832][ T10] usb 4-1: Product: syz [ 124.007844][ T10] usb 4-1: Manufacturer: syz [ 124.007856][ T10] usb 4-1: SerialNumber: syz [ 124.068844][ T10] usb 4-1: config 0 descriptor?? [ 124.088991][ T6189] netlink: 'syz.0.144': attribute type 10 has an invalid length. [ 124.108096][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 124.108136][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 124.180334][ T6190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.611485][ T6194] : renamed from bridge_slave_1 (while UP) [ 124.725860][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 124.749833][ T6197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.425859][ T10] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 125.425908][ T10] em28xx 4-1:0.0: board has no eeprom [ 125.713741][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 125.713770][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 125.753993][ T199] em28xx 4-1:0.0: Binding DVB extension [ 125.856609][ T10] usb 4-1: USB disconnect, device number 6 [ 125.858712][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 125.924466][ T199] em28xx 4-1:0.0: Registering input extension [ 125.945295][ T10] em28xx 4-1:0.0: Closing input extension [ 126.124235][ T10] em28xx: Freeing device [ 126.583667][ T44] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.745358][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 126.763310][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.763342][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.763490][ T44] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 126.763513][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.811381][ T44] usb 1-1: config 0 descriptor?? [ 127.340820][ T44] usbhid 1-1:0.0: can't add hid device: -32 [ 127.340941][ T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 127.491931][ T6240] dlm: no local IP address has been set [ 127.491947][ T6240] dlm: cannot start dlm midcomms -107 [ 127.983939][ T44] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 128.136139][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 128.143001][ T44] usb 2-1: not running at top speed; connect to a high speed hub [ 128.158329][ T44] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 128.181187][ T44] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 128.181217][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.181236][ T44] usb 2-1: Product: syz [ 128.181250][ T44] usb 2-1: Manufacturer: syz [ 128.181263][ T44] usb 2-1: SerialNumber: syz [ 128.976252][ T6263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.103031][ T6260] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.380550][ T199] usb 1-1: USB disconnect, device number 6 [ 130.242361][ T6277] Mass Storage Function, version: 2009/09/11 [ 130.242420][ T6277] LUN: removable file: (no medium) [ 130.422330][ T6277] mass_storage.usb0/lun.0: file too small: file0 [ 131.072055][ T5604] block nbd0: Receive control failed (result -32) [ 131.116314][ T6278] block nbd0: shutting down sockets [ 131.843229][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.893003][ T823] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.061409][ T32] usb 1-1: New USB device found, idVendor=1111, idProduct=2222, bcdDevice= 1.00 [ 132.061521][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.262976][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 132.277397][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.277430][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.277717][ T823] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 132.277741][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.381862][ T823] usb 4-1: config 0 descriptor?? [ 132.536785][ T5604] Bluetooth: hci1: command 0x0406 tx timeout [ 132.836453][ T823] usbhid 4-1:0.0: can't add hid device: -32 [ 132.837082][ T823] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 132.952492][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952625][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.380767][ T44] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 133.380784][ T44] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 133.380901][ T44] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 133.380921][ T44] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 133.399176][ T44] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 133.463937][ T10] usb 1-1: USB disconnect, device number 7 [ 133.786582][ T199] usb 2-1: USB disconnect, device number 5 [ 134.361926][ T5749] udevd[5749]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.676262][ T199] usb 4-1: USB disconnect, device number 7 [ 134.818872][ T6313] svc: failed to register lockdv1 RPC service (errno 111). [ 134.819307][ T6313] lockd_up: makesock failed, error=-111 [ 135.601095][ T6313] svc: failed to register nfsdv3 RPC service (errno 512). [ 135.601361][ T6313] svc: failed to register nfsaclv3 RPC service (errno 512). [ 135.601376][ T6313] failed to unregister udp with rpcbind [ 135.602186][ T6313] svc: failed to register nfsdv3 RPC service (errno 97). [ 135.602205][ T6313] svc: failed to register nfsaclv3 RPC service (errno 97). [ 135.602218][ T6313] failed to unregister udp with rpcbind [ 136.342133][ T6336] mass_storage.usb0/lun.0: file too small: file0 [ 136.941045][ T5599] block nbd1: Receive control failed (result -32) [ 136.978820][ T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.992108][ T6338] block nbd1: shutting down sockets [ 137.134233][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 137.139440][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.139472][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.139495][ T32] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 137.139507][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.143329][ T32] usb 4-1: config 0 descriptor?? [ 137.600206][ T6351] input: syz0 as /devices/virtual/input/input9 [ 137.791158][ T32] usbhid 4-1:0.0: can't add hid device: -32 [ 137.791271][ T32] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 138.618502][ T6364] svc: failed to register lockdv1 RPC service (errno 111). [ 139.649197][ T6364] svc: failed to register nfsdv3 RPC service (errno 111). [ 139.655381][ T6364] svc: failed to register nfsaclv3 RPC service (errno 512). [ 139.655406][ T6364] failed to unregister udp with rpcbind [ 139.667548][ T6364] svc: failed to register nfsdv3 RPC service (errno 97). [ 139.667572][ T6364] svc: failed to register nfsaclv3 RPC service (errno 97). [ 139.667584][ T6364] failed to unregister udp with rpcbind [ 139.811580][ T10] usb 4-1: USB disconnect, device number 8 [ 140.215737][ T44] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.383916][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 140.413915][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.413948][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.413983][ T44] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 140.414005][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.491867][ T44] usb 1-1: config 0 descriptor?? [ 140.528711][ T6385] mass_storage.usb0/lun.0: file too small: file0 [ 140.948972][ T6392] fuse: Bad value for 'fd' [ 141.137220][ T44] usbhid 1-1:0.0: can't add hid device: -32 [ 141.137317][ T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 141.176807][ T5599] block nbd3: Receive control failed (result -32) [ 141.179771][ T6388] block nbd3: shutting down sockets [ 141.482672][ T199] IPVS: starting estimator thread 0... [ 141.585300][ T6410] IPVS: using max 11 ests per chain, 26400 per kthread [ 141.902957][ T199] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 142.052959][ T199] usb 4-1: Using ep0 maxpacket: 8 [ 142.056849][ T199] usb 4-1: config 0 has no interfaces? [ 142.056884][ T199] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.056906][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.066281][ T199] usb 4-1: config 0 descriptor?? [ 142.964096][ T44] usb 1-1: USB disconnect, device number 8 [ 144.391489][ T5681] usb 4-1: USB disconnect, device number 9 [ 144.702960][ T199] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.873019][ T199] usb 1-1: Using ep0 maxpacket: 32 [ 144.874815][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.874833][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.874854][ T199] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 144.874865][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.881121][ T199] usb 1-1: config 0 descriptor?? [ 145.341481][ T6434] UDC core: g1: couldn't find an available UDC or it's busy [ 145.570785][ T199] usbhid 1-1:0.0: can't add hid device: -32 [ 145.570898][ T199] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 146.060517][ T32] IPVS: starting estimator thread 0... [ 146.165535][ T6453] IPVS: using max 10 ests per chain, 24000 per kthread [ 146.454163][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.602944][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 146.605031][ T44] usb 2-1: config 0 has no interfaces? [ 146.605066][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.605088][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.613926][ T44] usb 2-1: config 0 descriptor?? [ 147.497086][ T44] usb 1-1: USB disconnect, device number 9 [ 147.657257][ T6467] UDC core: g1: couldn't find an available UDC or it's busy [ 148.185119][ T5681] IPVS: starting estimator thread 0... [ 148.273026][ T6477] IPVS: using max 8 ests per chain, 19200 per kthread [ 148.947425][ T44] usb 2-1: USB disconnect, device number 6 [ 149.103025][ T823] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 149.256558][ T823] usb 1-1: Using ep0 maxpacket: 32 [ 149.259620][ T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.259646][ T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.259672][ T823] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 149.259684][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.266028][ T823] usb 1-1: config 0 descriptor?? [ 149.749622][ T823] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 149.749650][ T823] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 149.929816][ T823] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 149.930088][ T823] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -32 [ 152.031518][ T5681] usb 1-1: USB disconnect, device number 10 [ 153.082945][ T5681] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 153.233036][ T5681] usb 1-1: Using ep0 maxpacket: 8 [ 153.235017][ T5681] usb 1-1: config 0 has no interfaces? [ 153.235052][ T5681] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.235076][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.239176][ T5681] usb 1-1: config 0 descriptor?? [ 155.596787][ T5681] usb 1-1: USB disconnect, device number 11 [ 163.320018][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.324870][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.349885][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.351158][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.351909][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.975026][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.975292][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.975481][ T6519] bridge_slave_0: entered allmulticast mode [ 163.977445][ T6519] bridge_slave_0: entered promiscuous mode [ 163.979795][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.980058][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.980203][ T6519] bridge_slave_1: entered allmulticast mode [ 164.036526][ T6519] bridge_slave_1: entered promiscuous mode [ 164.078195][ T6519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.090765][ T6519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.131023][ T6519] team0: Port device team_slave_0 added [ 164.135868][ T6519] team0: Port device team_slave_1 added [ 164.186415][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.186427][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.186441][ T6519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.188639][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.188650][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.188664][ T6519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.355791][ T6519] hsr_slave_0: entered promiscuous mode [ 164.358058][ T6519] hsr_slave_1: entered promiscuous mode [ 164.359884][ T6519] debugfs: 'hsr0' already exists in 'hsr' [ 164.359910][ T6519] Cannot create hsr debugfs directory [ 164.686296][ T6519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.710305][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.711245][ T6519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.750378][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.751283][ T6519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.786403][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.787332][ T6519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.830437][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.980168][ T6550] UDC core: g1: couldn't find an available UDC or it's busy [ 165.061115][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.076335][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.094548][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.096631][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.097366][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.494142][ T5604] Bluetooth: hci4: command tx timeout [ 165.546013][ T6519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.618094][ T6519] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.638669][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.638938][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.667620][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.667923][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.382675][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.392597][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.401722][ T6552] bridge_slave_0: entered allmulticast mode [ 166.418114][ T6552] bridge_slave_0: entered promiscuous mode [ 166.430473][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.431406][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.432097][ T6552] bridge_slave_1: entered allmulticast mode [ 166.464328][ T6552] bridge_slave_1: entered promiscuous mode [ 166.578197][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.597643][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.679274][ T6552] team0: Port device team_slave_0 added [ 166.685638][ T6552] team0: Port device team_slave_1 added [ 166.697743][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.771458][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.771475][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.771500][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.794693][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.794710][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.794736][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.926931][ T6552] hsr_slave_0: entered promiscuous mode [ 166.928712][ T6552] hsr_slave_1: entered promiscuous mode [ 166.930168][ T6552] debugfs: 'hsr0' already exists in 'hsr' [ 166.930190][ T6552] Cannot create hsr debugfs directory [ 167.183381][ T5604] Bluetooth: hci5: command tx timeout [ 167.555251][ T6519] veth0_vlan: entered promiscuous mode [ 167.576323][ T5604] Bluetooth: hci4: command tx timeout [ 167.662574][ T6519] veth1_vlan: entered promiscuous mode [ 167.707823][ T6552] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.739227][ T6552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.741198][ T6552] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.768794][ T6552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.771341][ T6552] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.803733][ T6552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.805550][ T6552] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.847430][ T6552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.902416][ T6519] veth0_macvtap: entered promiscuous mode [ 167.927439][ T6519] veth1_macvtap: entered promiscuous mode [ 168.004698][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.041338][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.082245][ T1001] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.101918][ T1001] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.119156][ T1001] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.120561][ T1001] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.851830][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.971401][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.972423][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.043869][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.061503][ T1499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.061515][ T1499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.068971][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.069227][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.179211][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.179376][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.253092][ T5604] Bluetooth: hci5: command tx timeout [ 169.658999][ T5604] Bluetooth: hci4: command tx timeout [ 170.267430][ T37] audit: type=1800 audit(1785408228.166:2): pid=6611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.271" name="p_volume_present" dev="configfs" ino=12526 res=0 errno=0 [ 170.430845][ T6618] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 170.579063][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.881640][ T6552] veth0_vlan: entered promiscuous mode [ 170.900611][ T6552] veth1_vlan: entered promiscuous mode [ 170.971706][ T6552] veth0_macvtap: entered promiscuous mode [ 170.985349][ T6552] veth1_macvtap: entered promiscuous mode [ 171.050007][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.081534][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.298385][ T1448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.303249][ T1448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.324720][ T1448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.326373][ T1448] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.342820][ T5604] Bluetooth: hci5: command tx timeout [ 171.415204][ T32] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 171.451665][ T5604] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 171.451691][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.451715][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 171.451727][ T5604] Workqueue: hci1 hci_rx_work [ 171.451762][ T5604] Call Trace: [ 171.451770][ T5604] [ 171.451778][ T5604] dump_stack_lvl+0xe8/0x150 [ 171.451806][ T5604] sysfs_create_dir_ns+0x271/0x2a0 [ 171.451827][ T5604] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 171.451850][ T5604] ? rt_spin_unlock+0x163/0x200 [ 171.451879][ T5604] kobject_add_internal+0x62c/0xce0 [ 171.451910][ T5604] kobject_add+0x163/0x240 [ 171.451931][ T5604] ? rt_spin_unlock+0x157/0x200 [ 171.451964][ T5604] ? __pfx_kobject_add+0x10/0x10 [ 171.451991][ T5604] ? get_device_parent+0x370/0x3a0 [ 171.452017][ T5604] device_add+0x3fa/0xb80 [ 171.452038][ T5604] hci_conn_add_sysfs+0xd5/0x210 [ 171.452069][ T5604] le_conn_complete_evt+0xfef/0x1580 [ 171.452103][ T5604] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 171.452126][ T5604] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.452146][ T5604] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 171.452167][ T5604] ? rt_mutex_slowunlock+0x219/0x460 [ 171.452194][ T5604] ? skb_pull_data+0xf0/0x200 [ 171.452221][ T5604] hci_le_conn_complete_evt+0x187/0x470 [ 171.452252][ T5604] hci_event_packet+0x67a/0xf10 [ 171.452283][ T5604] ? reacquire_held_locks+0x117/0x1a0 [ 171.452308][ T5604] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 171.452326][ T5604] ? __pfx_hci_event_packet+0x10/0x10 [ 171.452352][ T5604] ? rt_spin_unlock+0x157/0x200 [ 171.452382][ T5604] ? hci_send_to_monitor+0xe2/0x590 [ 171.452406][ T5604] hci_rx_work+0x3ee/0x1020 [ 171.452439][ T5604] ? process_one_work+0x7fd/0x1480 [ 171.452458][ T5604] process_one_work+0xaaf/0x1480 [ 171.452475][ T5604] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 171.452516][ T5604] ? __pfx_process_one_work+0x10/0x10 [ 171.452534][ T5604] ? do_raw_spin_lock+0x12b/0x2f0 [ 171.452565][ T5604] ? assign_work+0x3cf/0x5d0 [ 171.452599][ T5604] worker_thread+0xb05/0x10d0 [ 171.452639][ T5604] kthread+0x388/0x470 [ 171.452665][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 171.452681][ T5604] ? __pfx_kthread+0x10/0x10 [ 171.452705][ T5604] ret_from_fork+0x514/0xb70 [ 171.452735][ T5604] ? __pfx_ret_from_fork+0x10/0x10 [ 171.452762][ T5604] ? __switch_to+0xc89/0x1420 [ 171.452787][ T5604] ? __pfx_kthread+0x10/0x10 [ 171.452814][ T5604] ret_from_fork_asm+0x1a/0x30 [ 171.452854][ T5604] [ 171.484933][ T5604] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 171.484981][ T5604] Bluetooth: hci1: failed to register connection device [ 171.653934][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 171.656745][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.656786][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.656822][ T32] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 171.656845][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.733702][ T5599] Bluetooth: hci4: command tx timeout [ 171.842103][ T32] usb 1-1: config 0 descriptor?? [ 172.431541][ T32] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 172.431579][ T32] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 172.558156][ T32] ft260 0003:0403:6030.0003: failed to retrieve chip version [ 172.558526][ T32] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -32 [ 173.404815][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.404834][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.414056][ T5599] Bluetooth: hci5: command tx timeout [ 173.538001][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.538021][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.979553][ T5599] Bluetooth: Unexpected continuation frame (len 16) [ 174.652431][ T37] audit: type=1800 audit(1785408232.566:3): pid=6660 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.288" name="p_volume_present" dev="configfs" ino=13793 res=0 errno=0 [ 174.711039][ T44] usb 1-1: USB disconnect, device number 12 [ 175.359630][ T5599] Bluetooth: Unexpected continuation frame (len 16) [ 175.554958][ T6680] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 176.439328][ T6701] fuse: Bad value for 'fd' [ 176.824048][ T5681] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 176.985318][ T5681] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 176.985457][ T5681] usb 6-1: config 0 interface 0 has no altsetting 0 [ 176.988914][ T5681] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 176.988944][ T5681] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 176.988962][ T5681] usb 6-1: Product: syz [ 176.988975][ T5681] usb 6-1: Manufacturer: syz [ 176.988989][ T5681] usb 6-1: SerialNumber: syz [ 177.021516][ T5681] usb 6-1: config 0 descriptor?? [ 177.082390][ T5681] usb 6-1: selecting invalid altsetting 0 [ 179.141876][ T32] usb 6-1: USB disconnect, device number 2 [ 180.543106][ T32] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 180.693020][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 180.697659][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.697690][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.697726][ T32] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 180.697747][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.713055][ T32] usb 6-1: config 0 descriptor?? [ 181.130613][ T32] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 181.130649][ T32] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 181.325753][ T32] ft260 0003:0403:6030.0004: failed to retrieve chip version [ 181.325988][ T32] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -5 [ 183.638034][ T5681] usb 6-1: USB disconnect, device number 3 [ 184.383493][ T37] audit: type=1800 audit(1785408242.296:4): pid=6746 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.330" name="UDC" dev="configfs" ino=13979 res=0 errno=0 [ 187.526052][ T4963] udevd[4963]: worker [5793] /devices/virtual/block/loop1 is taking a long time [ 191.150964][ T5604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.163335][ T5604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.166440][ T5604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.167931][ T5604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.168664][ T5604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.804739][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.805183][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.805429][ T6752] bridge_slave_0: entered allmulticast mode [ 191.807312][ T6752] bridge_slave_0: entered promiscuous mode [ 191.812307][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.812582][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.881884][ T6752] bridge_slave_1: entered allmulticast mode [ 191.885365][ T6752] bridge_slave_1: entered promiscuous mode [ 191.935702][ T6752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.941448][ T6752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.992407][ T6752] team0: Port device team_slave_0 added [ 191.998085][ T6752] team0: Port device team_slave_1 added [ 192.037472][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.037483][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.037496][ T6752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.039518][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.039528][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.039541][ T6752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.149482][ T6752] hsr_slave_0: entered promiscuous mode [ 192.151948][ T6752] hsr_slave_1: entered promiscuous mode [ 192.155229][ T6752] debugfs: 'hsr0' already exists in 'hsr' [ 192.155255][ T6752] Cannot create hsr debugfs directory [ 192.469274][ T6752] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 192.500857][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.501849][ T6752] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 192.521378][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.522483][ T6752] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 192.566163][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.567085][ T6752] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 192.606525][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.659999][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.660160][ T6752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.665615][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.665837][ T6752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.734025][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.778076][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.023446][ T6752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.069284][ T6752] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.082380][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.084763][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.106810][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.108080][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.343064][ T5604] Bluetooth: hci6: command tx timeout [ 193.649231][ T6752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.919772][ T6752] veth0_vlan: entered promiscuous mode [ 193.931241][ T6752] veth1_vlan: entered promiscuous mode [ 194.000802][ T6752] veth0_macvtap: entered promiscuous mode [ 194.011363][ T6752] veth1_macvtap: entered promiscuous mode [ 194.036922][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.061575][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.100445][ T773] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.113701][ T773] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.113914][ T773] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.114131][ T773] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.386092][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.386178][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.858813][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.858834][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.978618][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.978640][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.413234][ T5604] Bluetooth: hci6: command tx timeout [ 195.480722][ T6800] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 195.655938][ T5585] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 195.703210][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 195.803216][ T5585] usb 6-1: Using ep0 maxpacket: 32 [ 195.806550][ T5585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.806581][ T5585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.806618][ T5585] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 195.806640][ T5585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.810263][ T5585] usb 6-1: config 0 descriptor?? [ 195.886857][ T9] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 195.886893][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 195.889772][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 195.889802][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 195.889833][ T9] usb 7-1: Product: syz [ 195.889845][ T9] usb 7-1: Manufacturer: syz [ 195.889858][ T9] usb 7-1: SerialNumber: syz [ 195.953584][ T9] usb 7-1: config 0 descriptor?? [ 195.974824][ T9] usb 7-1: selecting invalid altsetting 0 [ 196.400502][ T5585] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 196.400540][ T5585] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 196.515692][ T5585] ft260 0003:0403:6030.0005: failed to retrieve chip version [ 196.516048][ T5585] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -5 [ 197.492878][ T5604] Bluetooth: hci6: command tx timeout [ 198.169581][ T10] usb 7-1: USB disconnect, device number 2 [ 198.932532][ T5585] usb 6-1: USB disconnect, device number 4 [ 199.365570][ T37] audit: type=1800 audit(1785408257.286:5): pid=6826 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.6.333" name="UDC" dev="configfs" ino=14575 res=0 errno=0 [ 199.585483][ T5599] Bluetooth: hci6: command tx timeout [ 199.747358][ T6834] tipc: Started in network mode [ 199.747396][ T6834] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711 [ 199.747446][ T6834] tipc: Enabling of bearer rejected, failed to enable media [ 200.105257][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 200.256536][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 200.256572][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 200.259745][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 200.259848][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 200.259869][ T9] usb 5-1: Product: syz [ 200.259883][ T9] usb 5-1: Manufacturer: syz [ 200.259896][ T9] usb 5-1: SerialNumber: syz [ 200.267998][ T9] usb 5-1: config 0 descriptor?? [ 200.363514][ T9] usb 5-1: selecting invalid altsetting 0 [ 200.399724][ T1567] Bluetooth: hci7: Frame reassembly failed (-84) [ 200.423788][ T1448] Bluetooth: hci7: Frame reassembly failed (-84) [ 200.728016][ T6836] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 200.729998][ T9] usb 5-1: USB disconnect, device number 2 [ 200.757869][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 200.913071][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 200.915042][ T10] usb 7-1: config 0 has no interfaces? [ 200.917345][ T10] usb 7-1: New USB device found, idVendor=2799, idProduct=500a, bcdDevice=e7.b7 [ 200.917372][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.917390][ T10] usb 7-1: Product: syz [ 200.917400][ T10] usb 7-1: Manufacturer: syz [ 200.917407][ T10] usb 7-1: SerialNumber: syz [ 200.920311][ T10] usb 7-1: config 0 descriptor?? [ 201.127926][ T5585] usb 7-1: USB disconnect, device number 3 [ 201.327622][ T6857] process 'syz.4.353' launched '/dev/fd/4' with NULL argv: empty string added [ 201.573133][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 202.376786][ T5599] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 202.609128][ T6861] tipc: Started in network mode [ 202.609158][ T6861] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711 [ 202.609205][ T6861] tipc: Enabling of bearer rejected, failed to enable media [ 203.249406][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 203.442926][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 203.445581][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.445613][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.445644][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 203.445666][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.505635][ T5585] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 203.517493][ T10] usb 5-1: config 0 descriptor?? [ 203.672916][ T5585] usb 6-1: Using ep0 maxpacket: 16 [ 203.675422][ T5585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.675453][ T5585] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 203.675492][ T5585] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 203.675514][ T5585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.694525][ T1448] Bluetooth: hci7: Frame reassembly failed (-84) [ 203.747024][ T5585] usb 6-1: config 0 descriptor?? [ 204.037822][ T10] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 204.037859][ T10] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 204.182425][ T5585] usbhid 6-1:0.0: can't add hid device: -71 [ 204.182550][ T5585] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 204.210825][ T5585] usb 6-1: USB disconnect, device number 5 [ 204.222076][ T10] ft260 0003:0403:6030.0006: failed to retrieve chip version [ 204.222486][ T10] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -5 [ 204.916395][ T5604] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 204.916965][ T5604] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 204.917025][ T5604] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 204.917082][ T5604] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 204.992105][ T5604] Bluetooth: hci1: unexpected event for opcode 0x080c [ 205.125643][ T6900] fuse: Bad value for 'fd' [ 205.652990][ T5599] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 206.044727][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 206.202929][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 206.213558][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.213591][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.213632][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 206.213647][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.278189][ T9] usb 7-1: config 0 descriptor?? [ 206.552722][ T5681] usb 5-1: USB disconnect, device number 3 [ 206.637303][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 206.637379][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 206.699818][ T9] usb 7-1: USB disconnect, device number 4 [ 207.794856][ T32] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 207.945631][ T32] usb 5-1: config 1 interface 0 has no altsetting 2 [ 207.945673][ T32] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 207.945697][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.102954][ T44] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 208.296769][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 208.373655][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.373778][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.373819][ T44] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 208.373842][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.520181][ T44] usb 7-1: config 0 descriptor?? [ 208.590144][ T32] dvbdev: DVB: registering new adapter (DEC2000-t) [ 208.813472][ T32] usb 5-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 208.980505][ T44] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 208.980576][ T44] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 209.162318][ T44] ft260 0003:0403:6030.0007: failed to retrieve chip version [ 209.162653][ T44] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -5 [ 209.979836][ T32] ttusb_dec_send_command: command bulk message failed: error -110 [ 210.007845][ T5681] usb 5-1: USB disconnect, device number 4 [ 211.534467][ T32] usb 7-1: USB disconnect, device number 5 [ 211.854637][ T5681] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 212.004229][ T5681] usb 6-1: Using ep0 maxpacket: 32 [ 212.008447][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.008481][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.008513][ T5681] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 212.008525][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.012225][ T5681] usb 6-1: config 0 descriptor?? [ 212.263328][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 212.423118][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 212.443039][ T10] usb 5-1: config 0 has no interfaces? [ 212.452150][ T10] usb 5-1: New USB device found, idVendor=2799, idProduct=500a, bcdDevice=e7.b7 [ 212.452168][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.452178][ T10] usb 5-1: Product: syz [ 212.452185][ T10] usb 5-1: Manufacturer: syz [ 212.452192][ T10] usb 5-1: SerialNumber: syz [ 212.511905][ T10] usb 5-1: config 0 descriptor?? [ 212.532650][ T5681] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 212.532685][ T5681] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 212.636469][ T5681] ft260 0003:0403:6030.0008: failed to retrieve chip version [ 212.636703][ T5681] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -5 [ 212.744341][ T32] usb 5-1: USB disconnect, device number 5 [ 214.940655][ T10] usb 6-1: USB disconnect, device number 6 [ 215.296022][ T44] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 215.452892][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 215.455406][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.455438][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.455474][ T44] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 215.455496][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.462206][ T44] usb 7-1: config 0 descriptor?? [ 215.880877][ T44] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 215.880903][ T44] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 216.081897][ T44] ft260 0003:0403:6030.0009: failed to retrieve chip version [ 216.082132][ T44] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -5 [ 216.563077][ T5681] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 216.729657][ T5681] usb 6-1: config 1 interface 0 has no altsetting 2 [ 216.729699][ T5681] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 216.729721][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.061038][ T5681] dvbdev: DVB: registering new adapter (DEC2000-t) [ 217.091254][ T5681] usb 6-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 217.986050][ T5681] ttusb_dec_send_command: command bulk message failed: error -71 [ 218.028243][ T5681] usb 6-1: USB disconnect, device number 7 [ 218.392593][ T823] usb 7-1: USB disconnect, device number 6 [ 219.284782][ T7065] configfs-gadget.g1 gadget.0: Hardware params: access 3, format 2, channels 2, rate 48000 [ 219.370385][ T7065] udc dummy_udc.0: failed to start g1: -19 [ 219.371127][ T7065] UDC core: g1: couldn't find an available UDC or it's busy [ 219.945660][ T7087] ================================================================== [ 219.945671][ T7087] BUG: KASAN: slab-use-after-free in filp_flush+0x31/0x190 [ 219.945687][ T7087] Read of size 8 at addr ffff88803d3ab990 by task syz.6.447/7087 [ 219.945696][ T7087] [ 219.945704][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.6.447 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.945717][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 219.945725][ T7087] Call Trace: [ 219.945729][ T7087] [ 219.945733][ T7087] dump_stack_lvl+0xe8/0x150 [ 219.945749][ T7087] print_address_description+0x55/0x1e0 [ 219.945765][ T7087] ? filp_flush+0x31/0x190 [ 219.945774][ T7087] print_report+0x58/0x70 [ 219.945797][ T7087] kasan_report+0x117/0x150 [ 219.945816][ T7087] ? filp_flush+0x31/0x190 [ 219.945829][ T7087] kasan_check_range+0x264/0x2c0 [ 219.945839][ T7087] filp_flush+0x31/0x190 [ 219.945849][ T7087] filp_close+0x1d/0x40 [ 219.945858][ T7087] gaudio_cleanup+0x54/0xf0 [ 219.945874][ T7087] f_audio_bind+0x4a0/0x630 [ 219.945889][ T7087] ? __pfx_f_audio_bind+0x10/0x10 [ 219.945903][ T7087] ? acm_bind+0x434/0x650 [ 219.945915][ T7087] usb_add_function+0x290/0x930 [ 219.945929][ T7087] configfs_composite_bind+0xde0/0x1410 [ 219.945945][ T7087] ? __pfx_configfs_composite_bind+0x10/0x10 [ 219.945958][ T7087] gadget_bind_driver+0x2ca/0x9e0 [ 219.945970][ T7087] ? __pfx_gadget_bind_driver+0x10/0x10 [ 219.945979][ T7087] really_probe+0x254/0xae0 [ 219.945992][ T7087] __driver_probe_device+0x1e8/0x360 [ 219.946004][ T7087] driver_probe_device+0x4f/0x240 [ 219.946017][ T7087] __driver_attach+0x339/0x600 [ 219.946028][ T7087] bus_for_each_dev+0x23e/0x2c0 [ 219.946044][ T7087] ? __pfx___driver_attach+0x10/0x10 [ 219.946055][ T7087] ? __pfx_bus_for_each_dev+0x10/0x10 [ 219.946073][ T7087] ? rt_spin_unlock+0x163/0x200 [ 219.946087][ T7087] bus_add_driver+0x348/0x670 [ 219.946103][ T7087] driver_register+0x23a/0x320 [ 219.946116][ T7087] usb_gadget_register_driver_owner+0xf9/0x270 [ 219.946133][ T7087] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 219.946145][ T7087] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 219.946157][ T7087] configfs_write_iter+0x33a/0x430 [ 219.946169][ T7087] vfs_write+0x61e/0xbb0 [ 219.946182][ T7087] ? __pfx_vfs_write+0x10/0x10 [ 219.946193][ T7087] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 219.946203][ T7087] ? lockdep_hardirqs_on+0x7a/0x110 [ 219.946213][ T7087] ? mutex_lock_nested+0x152/0x1d0 [ 219.946224][ T7087] ? fdget_pos+0x252/0x320 [ 219.946236][ T7087] ksys_write+0x156/0x270 [ 219.946248][ T7087] ? __pfx_ksys_write+0x10/0x10 [ 219.946260][ T7087] do_syscall_64+0x17b/0x530 [ 219.946270][ T7087] ? irqentry_exit+0x10f/0x8f0 [ 219.946279][ T7087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.946289][ T7087] ? clear_bhb_loop+0x40/0x90 [ 219.946300][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.946310][ T7087] RIP: 0033:0x7f7e2703df99 [ 219.946320][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.946329][ T7087] RSP: 002b:00007f7e25296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.946341][ T7087] RAX: ffffffffffffffda RBX: 00007f7e272c5fa0 RCX: 00007f7e2703df99 [ 219.946349][ T7087] RDX: 000000000000000c RSI: 0000200000000400 RDI: 0000000000000003 [ 219.946355][ T7087] RBP: 00007f7e270d4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 219.946362][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.946368][ T7087] R13: 00007f7e272c6038 R14: 00007f7e272c5fa0 R15: 00007ffee7339878 [ 219.946379][ T7087] [ 219.946384][ T7087] [ 219.946386][ T7087] Allocated by task 7065: [ 219.946391][ T7087] kasan_save_track+0x3e/0x80 [ 219.946405][ T7087] __kasan_slab_alloc+0x6c/0x80 [ 219.946418][ T7087] kmem_cache_alloc_noprof+0x358/0x680 [ 219.946430][ T7087] alloc_empty_file+0x5b/0x1d0 [ 219.946443][ T7087] path_openat+0x8f/0x3850 [ 219.946453][ T7087] do_file_open+0x23e/0x4a0 [ 219.946463][ T7087] filp_open+0x16d/0x1d0 [ 219.946476][ T7087] gaudio_setup+0x11b/0xf10 [ 219.946489][ T7087] f_audio_bind+0x137/0x630 [ 219.946501][ T7087] usb_add_function+0x290/0x930 [ 219.946511][ T7087] configfs_composite_bind+0xde0/0x1410 [ 219.946523][ T7087] gadget_bind_driver+0x2ca/0x9e0 [ 219.946531][ T7087] really_probe+0x254/0xae0 [ 219.946541][ T7087] __driver_probe_device+0x1e8/0x360 [ 219.946551][ T7087] driver_probe_device+0x4f/0x240 [ 219.946562][ T7087] __driver_attach+0x339/0x600 [ 219.946571][ T7087] bus_for_each_dev+0x23e/0x2c0 [ 219.946584][ T7087] bus_add_driver+0x348/0x670 [ 219.946596][ T7087] driver_register+0x23a/0x320 [ 219.946608][ T7087] usb_gadget_register_driver_owner+0xf9/0x270 [ 219.946622][ T7087] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 219.946631][ T7087] configfs_write_iter+0x33a/0x430 [ 219.946640][ T7087] vfs_write+0x61e/0xbb0 [ 219.946657][ T7087] ksys_write+0x156/0x270 [ 219.946667][ T7087] do_syscall_64+0x17b/0x530 [ 219.946675][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.946684][ T7087] [ 219.946687][ T7087] Freed by task 21: [ 219.946692][ T7087] kasan_save_track+0x3e/0x80 [ 219.946704][ T7087] kasan_save_free_info+0x40/0x50 [ 219.946715][ T7087] __kasan_slab_free+0x5c/0x80 [ 219.946728][ T7087] slab_free_after_rcu_debug+0x12a/0x220 [ 219.946739][ T7087] rcu_cpu_kthread+0x950/0x1480 [ 219.946748][ T7087] smpboot_thread_fn+0x57c/0xa80 [ 219.946759][ T7087] kthread+0x388/0x470 [ 219.946770][ T7087] ret_from_fork+0x514/0xb70 [ 219.946782][ T7087] ret_from_fork_asm+0x1a/0x30 [ 219.946795][ T7087] [ 219.946797][ T7087] Last potentially related work creation: [ 219.946808][ T7087] kasan_save_stack+0x3e/0x60 [ 219.946821][ T7087] kasan_record_aux_stack+0xbd/0xd0 [ 219.946832][ T7087] kmem_cache_free+0x513/0x6c0 [ 219.946846][ T7087] task_work_run+0x1d9/0x270 [ 219.946859][ T7087] exit_to_user_mode_loop+0x1fa/0x730 [ 219.946874][ T7087] do_syscall_64+0x33d/0x530 [ 219.946883][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.946893][ T7087] [ 219.946895][ T7087] Second to last potentially related work creation: [ 219.946899][ T7087] kasan_save_stack+0x3e/0x60 [ 219.946911][ T7087] kasan_record_aux_stack+0xbd/0xd0 [ 219.946921][ T7087] task_work_add+0xae/0x420 [ 219.946933][ T7087] __fput_deferred+0x183/0x3e0 [ 219.946941][ T7087] fput_close+0x11f/0x240 [ 219.946948][ T7087] filp_close+0x27/0x40 [ 219.946955][ T7087] gaudio_cleanup+0x54/0xf0 [ 219.946968][ T7087] f_audio_bind+0x4a0/0x630 [ 219.946980][ T7087] usb_add_function+0x290/0x930 [ 219.946990][ T7087] configfs_composite_bind+0xde0/0x1410 [ 219.947001][ T7087] gadget_bind_driver+0x2ca/0x9e0 [ 219.947009][ T7087] really_probe+0x254/0xae0 [ 219.947020][ T7087] __driver_probe_device+0x1e8/0x360 [ 219.947030][ T7087] driver_probe_device+0x4f/0x240 [ 219.947041][ T7087] __driver_attach+0x339/0x600 [ 219.947050][ T7087] bus_for_each_dev+0x23e/0x2c0 [ 219.947063][ T7087] bus_add_driver+0x348/0x670 [ 219.947075][ T7087] driver_register+0x23a/0x320 [ 219.947087][ T7087] usb_gadget_register_driver_owner+0xf9/0x270 [ 219.947101][ T7087] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 219.947110][ T7087] configfs_write_iter+0x33a/0x430 [ 219.947119][ T7087] vfs_write+0x61e/0xbb0 [ 219.947128][ T7087] ksys_write+0x156/0x270 [ 219.947138][ T7087] do_syscall_64+0x17b/0x530 [ 219.947149][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.947158][ T7087] [ 219.947160][ T7087] The buggy address belongs to the object at ffff88803d3ab800 [ 219.947160][ T7087] which belongs to the cache filp of size 408 [ 219.947169][ T7087] The buggy address is located 400 bytes inside of [ 219.947169][ T7087] freed 408-byte region [ffff88803d3ab800, ffff88803d3ab998) [ 219.947179][ T7087] [ 219.947182][ T7087] The buggy address belongs to the physical page: [ 219.947194][ T7087] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3d3aa [ 219.947204][ T7087] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 219.947213][ T7087] memcg:ffff8880434bd301 [ 219.947218][ T7087] flags: 0x80000000000040(head|node=0|zone=1) [ 219.947227][ T7087] page_type: f5(slab) [ 219.947237][ T7087] raw: 0080000000000040 ffff88801c6af780 dead000000000100 dead000000000122 [ 219.947246][ T7087] raw: 0000000000000000 0000000800100010 00000000f5000000 ffff8880434bd301 [ 219.947255][ T7087] head: 0080000000000040 ffff88801c6af780 dead000000000100 dead000000000122 [ 219.947264][ T7087] head: 0000000000000000 0000000800100010 00000000f5000000 ffff8880434bd301 [ 219.947273][ T7087] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 219.947281][ T7087] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 219.947287][ T7087] page dumped because: kasan: bad access detected [ 219.947296][ T7087] page_owner tracks the page as allocated [ 219.947300][ T7087] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4975, tgid 4975 (udevd), ts 30126605054 [ 219.947317][ T7087] post_alloc_hook+0x1f9/0x250 [ 219.947329][ T7087] get_page_from_freelist+0x264c/0x26c0 [ 219.947345][ T7087] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 219.947359][ T7087] allocate_slab+0x7c/0x5e0 [ 219.947368][ T7087] refill_objects+0x2d8/0x350 [ 219.947378][ T7087] __pcs_replace_empty_main+0x330/0x690 [ 219.947387][ T7087] kmem_cache_alloc_noprof+0x455/0x680 [ 219.947399][ T7087] alloc_empty_file+0x5b/0x1d0 [ 219.947412][ T7087] path_openat+0x8f/0x3850 [ 219.947423][ T7087] do_file_open+0x23e/0x4a0 [ 219.947433][ T7087] do_sys_openat2+0x115/0x200 [ 219.947446][ T7087] __x64_sys_openat+0x138/0x170 [ 219.947459][ T7087] do_syscall_64+0x17b/0x530 [ 219.947467][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.947476][ T7087] page_owner free stack trace missing [ 219.947480][ T7087] [ 219.947482][ T7087] Memory state around the buggy address: [ 219.947487][ T7087] ffff88803d3ab880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.947494][ T7087] ffff88803d3ab900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.947500][ T7087] >ffff88803d3ab980: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 219.947505][ T7087] ^ [ 219.947510][ T7087] ffff88803d3aba00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.947517][ T7087] ffff88803d3aba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.947521][ T7087] ================================================================== [ 219.950281][ T7087] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 219.950303][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.6.447 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.950326][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 219.950347][ T7087] Call Trace: [ 219.950355][ T7087] [ 219.950363][ T7087] vpanic+0x56c/0xa60 [ 219.950386][ T7087] ? __pfx_vpanic+0x10/0x10 [ 219.950409][ T7087] panic+0xc5/0xd0 [ 219.950426][ T7087] ? __pfx_panic+0x10/0x10 [ 219.950444][ T7087] ? preempt_schedule_thunk+0x16/0x40 [ 219.950455][ T7087] ? filp_flush+0x31/0x190 [ 219.950465][ T7087] ? preempt_schedule_thunk+0x16/0x40 [ 219.950474][ T7087] ? filp_flush+0x31/0x190 [ 219.950483][ T7087] check_panic_on_warn+0x89/0xb0 [ 219.950497][ T7087] ? filp_flush+0x31/0x190 [ 219.950505][ T7087] end_report+0x73/0x170 [ 219.950515][ T7087] ? filp_flush+0x31/0x190 [ 219.950524][ T7087] kasan_report+0x128/0x150 [ 219.950533][ T7087] ? filp_flush+0x31/0x190 [ 219.950544][ T7087] kasan_check_range+0x264/0x2c0 [ 219.950554][ T7087] filp_flush+0x31/0x190 [ 219.950563][ T7087] filp_close+0x1d/0x40 [ 219.950572][ T7087] gaudio_cleanup+0x54/0xf0 [ 219.950588][ T7087] f_audio_bind+0x4a0/0x630 [ 219.950602][ T7087] ? __pfx_f_audio_bind+0x10/0x10 [ 219.950616][ T7087] ? acm_bind+0x434/0x650 [ 219.950628][ T7087] usb_add_function+0x290/0x930 [ 219.950648][ T7087] configfs_composite_bind+0xde0/0x1410 [ 219.950665][ T7087] ? __pfx_configfs_composite_bind+0x10/0x10 [ 219.950678][ T7087] gadget_bind_driver+0x2ca/0x9e0 [ 219.950691][ T7087] ? __pfx_gadget_bind_driver+0x10/0x10 [ 219.950700][ T7087] really_probe+0x254/0xae0 [ 219.950714][ T7087] __driver_probe_device+0x1e8/0x360 [ 219.950726][ T7087] driver_probe_device+0x4f/0x240 [ 219.950739][ T7087] __driver_attach+0x339/0x600 [ 219.950751][ T7087] bus_for_each_dev+0x23e/0x2c0 [ 219.950766][ T7087] ? __pfx___driver_attach+0x10/0x10 [ 219.950779][ T7087] ? __pfx_bus_for_each_dev+0x10/0x10 [ 219.950795][ T7087] ? rt_spin_unlock+0x163/0x200 [ 219.950808][ T7087] bus_add_driver+0x348/0x670 [ 219.950824][ T7087] driver_register+0x23a/0x320 [ 219.950837][ T7087] usb_gadget_register_driver_owner+0xf9/0x270 [ 219.950854][ T7087] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 219.950865][ T7087] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 219.950876][ T7087] configfs_write_iter+0x33a/0x430 [ 219.950888][ T7087] vfs_write+0x61e/0xbb0 [ 219.950901][ T7087] ? __pfx_vfs_write+0x10/0x10 [ 219.950912][ T7087] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 219.950922][ T7087] ? lockdep_hardirqs_on+0x7a/0x110 [ 219.950932][ T7087] ? mutex_lock_nested+0x152/0x1d0 [ 219.950943][ T7087] ? fdget_pos+0x252/0x320 [ 219.950956][ T7087] ksys_write+0x156/0x270 [ 219.950967][ T7087] ? __pfx_ksys_write+0x10/0x10 [ 219.950982][ T7087] do_syscall_64+0x17b/0x530 [ 219.950991][ T7087] ? irqentry_exit+0x10f/0x8f0 [ 219.951000][ T7087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.951011][ T7087] ? clear_bhb_loop+0x40/0x90 [ 219.951022][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.951032][ T7087] RIP: 0033:0x7f7e2703df99 [ 219.951042][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.951051][ T7087] RSP: 002b:00007f7e25296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.951063][ T7087] RAX: ffffffffffffffda RBX: 00007f7e272c5fa0 RCX: 00007f7e2703df99 [ 219.951071][ T7087] RDX: 000000000000000c RSI: 0000200000000400 RDI: 0000000000000003 [ 219.951078][ T7087] RBP: 00007f7e270d4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 219.951085][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.951092][ T7087] R13: 00007f7e272c6038 R14: 00007f7e272c5fa0 R15: 00007ffee7339878 [ 219.951103][ T7087] [ 219.951507][ T7087] Kernel Offset: disabled