last executing test programs: 15.040135653s ago: executing program 0 (id=7094): r0 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0xe0a82, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_to_hsr/proxy_ndp\x00', 0x82002, 0x0) mmap$auto(0x0, 0x800020009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r1, r3, 0x0, 0x1) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) write$auto(r0, 0x0, 0x0) 14.751783892s ago: executing program 0 (id=7097): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/pci/drivers/amd5536udc-pci/remove_id\x00', 0x18b941, 0x0) write$auto(r1, &(0x7f0000000100)='0\x15\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!oc\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xd6\x84\xef\xf5\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xed\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x05\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd?\x13\xe2\xad\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\x00'/213, 0x8) socket(0x1e, 0x6, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000240), 0x400) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 11.774449987s ago: executing program 0 (id=7099): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)=ANY=[@ANYBLOB="a3000000", @ANYRES16=0x0, @ANYBLOB="47582bbd"], 0x44}}, 0x4044000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) ioctl$auto(r0, 0x8946, 0x24) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='\x10\x00', 0x2fb) fcntl$auto_F_OFD_SETLK(r1, 0x25, 0x8001) 11.480115427s ago: executing program 2 (id=7101): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='nfs\x00\"p\x17\x9b\xdd\xb4\xed\xb9\xb0\xc7@\xd0_\xf9\xa1\x17tP\x86\xb1,\x93\x87\xae\x03\x8a\xc4\xb5q\xd4\x8c\xc3\xa2?\xe7\xf4\xb2\xd4\xe1\x93A+\xe9\x8d\xc9\xac9|\xc7\t\xff\'\xaa\xac|\xaa\x85\xa9\xd4j\x12\xca\xfe', 0x6, &(0x7f00000004c0)="77bec3605f85e082fbcf491e2b3b12fde18109d1f64859f820ba86bbb7abcf4c75f53e3ecb7fd57568812ae0e9433c2b0bb0f0c0db3d") ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r1 = socket(0x9, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r5 = socket(0x3, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r5) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x80080) mount$auto(0x0, 0x0, &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x0, 0x0) ioctl$auto_BLKSSZGET(r6, 0x1268, 0x0) sendfile$auto(r2, r2, 0x0, 0x1000200) 11.016679035s ago: executing program 0 (id=7102): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) socket(0x25, 0x1, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x1) r0 = socket(0x2, 0x3, 0xff) setsockopt$auto(r0, 0xff, 0xffffffca, 0x0, 0x7) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xa, 0x1, 0x100) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x5, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0xffffffffffffffff, 0x3, 0x9, 0x4, 0x7, 0x1, 0x9, 0x1, 0x5]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r4, 0x0, 0x200000000003, 0x2f4a3a23) 9.756848575s ago: executing program 0 (id=7104): socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = socket(0x2, 0x1, 0x106) close_range$auto(r0, r1, 0x7) getsockopt$auto(r1, 0x29, 0x4b, 0x0, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) 9.44881444s ago: executing program 3 (id=7106): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) listen$auto(0x3, 0x81) r0 = accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) shutdown$auto(0x200000003, 0x2) dup$auto(0xffffffffffffffff) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 8.539155455s ago: executing program 2 (id=7109): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r5, 0xab04, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="00000005043891ec44d3d7"], 0x28c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x3a) 8.307987759s ago: executing program 3 (id=7110): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r0 = socket(0x25, 0x1, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x1) r1 = socket(0x2, 0x3, 0xff) setsockopt$auto(r1, 0xff, 0xffffffca, 0x0, 0x7) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="83000000", @ANYRES16=0x0, @ANYBLOB="010027bd70f1fddbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x8108}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20008800) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100), 0xfc2}, 0xfffffffffffffffb, &(0x7f0000000180)="e68be305d65a3f75da175d8b086b61434c51a9bf5f5e1bf085d4a95ccff9ac2c1bdebcffe107137beaab70bc2c8e1f672be0e65d19d5fbd9401bb23448000000000000fb3758", 0x4, 0xa506}, 0x800}, 0x8, 0x4008) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xa, 0x1, 0x100) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r4, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x5, 0x0, 0x0, &(0x7f0000000040)={[0xc77, 0x5, 0xb, 0x200, 0x948f, 0x3, 0x15f4da0a, 0xffffffffffffffff, 0x3, 0x9, 0x4, 0x7, 0x1, 0x9, 0x1, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\a\x00\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.\b\x00\x00\x00\x8a\xbbY8@Z5`\xa4\xdc\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xb6\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8$\x959\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x10\\\xab\xee\x8eaBX-9Y\xcdO\xadO6\xa6=\x81\xdeP\xdf\x00\xba]\xf9\v\xb5\xe8u\x1d+\xf2_\x19YK\xfd\x15K\xfb\xd2\x170 \x1c^\xe8\x056\xd3\x81\xcf\x83\x90\xdc\xf5\xa7\x89\xaao\bx\xd9\xb9\x04\xae\xca\x142\xcb\xf6\xd5}\x97\xed\t\xe3\xd8\x92,UrM\xb2r\xeb\xea~', 0x8001) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x6) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x200000000003, 0x2f4a3a23) 7.216842464s ago: executing program 3 (id=7112): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x610082, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) socket(0x22, 0x2, 0x2) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8e482, 0x0) r1 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0xfffffffffffffff6, 0x15f4da0b, 0x801, 0x5, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x21, 0x80000, 0x300) setsockopt$auto(r4, 0x10107, 0x16, 0x0, 0xaf4) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r1) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000001540)=ANY=[@ANYRES8=r0, @ANYRES16=r5, @ANYBLOB="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"], 0x794}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000080) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) pread64$auto(r6, 0x0, 0x100000009, 0xa4000000000002) madvise$auto(0x0, 0x20499d, 0x9) 7.142569315s ago: executing program 2 (id=7113): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/softirqs\x00', 0x84400, 0x0) (async) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/softirqs\x00', 0x84400, 0x0) kill$auto(0x0, 0x12) preadv$auto(r0, &(0x7f0000009180)={&(0x7f0000008180), 0x7}, 0x26, 0x80, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_udc.0/udc/dummy_udc.0/function\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x10}, 0x3) (async) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x10}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x801, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) clone$auto(0x20003b46, 0x100000000000005, 0x0, 0x0, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xfffffffffffffffe, 0x200006, 0x6, 0x40eb1, 0x602, 0xcf05) (async) mmap$auto(0xfffffffffffffffe, 0x200006, 0x6, 0x40eb1, 0x602, 0xcf05) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) (async) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x2, 0xffffffffffffffff, 0x80, 0x8000000008011, r3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(r3, 0x541d, 0xffffffffffffffff) (async) ioctl$auto(r3, 0x541d, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x40, 0xffffffffffffffff, 0x2) 5.776504006s ago: executing program 2 (id=7116): mmap$auto(0x0, 0x20009, 0x4000000000e2, 0xeb1, 0x401, 0x8400) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) bpf$auto(0x6, &(0x7f00000001c0)=@test={r0, 0x10004, 0x0, 0x1000, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14927f, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x40086602, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250a000000080003000000000008000200", @ANYRES32=r4, @ANYBLOB="08000100000022001f5e0bf3e0c57383cdf509247eaf77d5a999af18cf9c7b44b10507b273e94920748a078892c00cf33c5f41113661091e441d276f1d70108210bed988a61f720be640259ff5fc516a6b8dc9dcc6ed09bcf934b74eaf5abcfd60f21b5165660af4af4b80bba2784ea0cc777f45"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) prctl$auto(0x99, 0x1, 0x0, 0x2, 0x4) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x2000000000001ff, 0x7, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) mmap$auto(0x0, 0x8, 0xdf, 0x9b75, 0xffffffffffffffff, 0x8000) msync$auto(0xff, 0x800, 0x10) 4.539669693s ago: executing program 2 (id=7118): mmap$auto(0x0, 0x400004, 0x3ff, 0x9b72, 0x2, 0x8000) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x10b082, 0x0) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x1000, 0x9}, 0x1, 0x9) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)=@bpf_attr_4={0x5, r0, 0x2, r1}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x2) socket(0x2, 0x1, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0x4d) socket(0x5, 0x1, 0x7) bind$auto(0x3, &(0x7f0000000000)=@sco={0x1d, @none}, 0x6c) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r4 = gettid() process_vm_writev$auto(r4, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r6, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) 4.359006059s ago: executing program 3 (id=7119): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='nfs\x00\"p\x17\x9b\xdd\xb4\xed\xb9\xb0\xc7@\xd0_\xf9\xa1\x17tP\x86\xb1,\x93\x87\xae\x03\x8a\xc4\xb5q\xd4\x8c\xc3\xa2?\xe7\xf4\xb2\xd4\xe1\x93A+\xe9\x8d\xc9\xac9|\xc7\t\xff\'\xaa\xac|\xaa\x85\xa9\xd4j\x12\xca\xfe', 0x6, &(0x7f00000004c0)="77bec3605f85e082fbcf491e2b3b12fde18109d1f64859f820ba86bbb7abcf4c75f53e3ecb7fd57568812ae0e9433c2b0bb0f0c0db3d") ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r1 = socket(0x9, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = socket(0x3, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x80080) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x4, 0x8000) ioctl$auto_BLKSSZGET(r5, 0x1268, 0x0) 4.223797986s ago: executing program 1 (id=7120): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1ff}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x3}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x5}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004800) r1 = prctl$auto_PR_SET_MM_START_BRK(0x8, 0x6, 0x0, 0x8, 0x376) r2 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/trap_flow_action_cookie\x00', 0x48100, 0x0) ioctl$auto_VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x7, r2}) r4 = semctl$auto(0x7, 0xca3, 0xfffffffd, 0x21c0000000) capset$auto(&(0x7f00000001c0)={0x3, r4}, &(0x7f0000000200)={0x8, 0x4, 0xffffffff}) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r3) sendmsg$auto_NL80211_CMD_DEL_PMK(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc0, 0x6b}}, @NL80211_ATTR_REG_ALPHA2={0x68, 0x21, "90a584a7a40e55d02e32411f12a80e77a67e806362a7b13c1697b5316cd797ddc78290c1b8d5f0c445b615aaa7abea960688fe18abb0f227bf5ae8369c685b24f90d49b247c074805a2baed1be676f06136790f0bcd10c7bf435c2b2e71430e28c29cb8d"}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xdd}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4090) r6 = ioctl$auto_dma_heap_fops_dma_heap(r1, 0xfffffffffffffffb, &(0x7f0000000400)="161dd86b90348489d77368e9bf008b952fdff550fce8d9e137aebdd4d7b44b504f33c96f6ca75e6601ceaab47f2226e76226a5b82ff8173399192003a5d9cbb4a36e7d80a01450a900f39ff4c1a5aba7872f24967ab7a09445b27f0eb7d9d9ddfce4edfcf7757f2d9f47b2c4441ff33b1f66e9adb157055397c7be7a3da64f2cbb1be2d1ea0a9d32df128f9aa548365610885502eb23112e1a9f9f9775789e6be41b4040a4ed48f749d302c021c3b8c7ad44601dde44cf298e8ba08c4201854428a38c821a339e0b") timer_create$auto(0x6, &(0x7f0000000600)={@sival_int, @inferred=r6, 0x1000, @_sigev_thread={&(0x7f0000000540)=&(0x7f0000000500)=0x7, &(0x7f0000000580)="1cb80cc4b957354783fcaad5a90b23d3d0a0567451055b01216dd6a090f5455238e93fab57b738416bd91167c1ace738c1a6a12eb5cfae74a13d71233913c1bf343168e24e741493042020ab91d8ad9538c50629e7ded3e32bd2eebddb03761ba35e4a62587b8b7416cf"}}, &(0x7f0000000640)=0x8) unshare$auto(0xffffffffffffff44) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000680)={"72bf659db958e3d9afde130173e6d12842c7804a9048e2c97808f459661fe53e", 0x9, 0x1c8, 0x1, 0xffffffff, 0x2, r4}) ptrace$auto_PTRACE_GETREGSET(0x4204, r8, 0xe, 0xa3) io_uring_register$auto(r1, 0x5, &(0x7f0000000700)="64590bc58a2e652f1789b938f3", 0x8) r9 = ioctl$auto_TUNSETGROUP(r1, 0x400454ce, &(0x7f0000000780)=0x2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r9) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/devices/virtual/tty/ptyba/power/runtime_status\x00', 0x3c042, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)=@bpf_attr_0={0x4, 0x9, 0x401, 0x9, 0xffffff7f, r7, 0x5, "0f237825c82d0938bac6909216ddee9e", r11, r10, 0x200, 0x5, 0x4, 0x81, r3, r10}, 0x9c8) r14 = syz_clone(0x0, &(0x7f0000000900)="ef606a1afe", 0x5, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="77b1a6eb7fbc65618e563e199343ba69a7f5617958dcea5b2535a9d8442bb429773b53a8d7ddd3fa26bf6f78c8e82da8246e7190a8e36d32d2e3f7110b62cadec62ded91c7608720aec8e75476ccbcb46ed5941ef409a9b6ec66af373c7804e33fbdb16822216801a9ee6bbde99cdae122c2b2bebdf12ad6c0b20f07dcd0d139dc51b0c90ee59be96eb53201a79d000e643409673ea931ff09be0615d7b69b8d89bee522459e21d01ab20ccd4ecfd450dc095b1d04e31b38efc005adc1522421b88db8437680659aa1180a67fa41") bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000ac0)=@iter_create={0xffffffffffffffff, 0x5}, 0x1000) pwrite64$auto(r6, &(0x7f0000000b80)='},].[.#%()\x94-:$$\x00', 0x1, 0x3) r15 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000c00), r12) sendmsg$auto_IPVS_CMD_NEW_SERVICE(r13, &(0x7f0000002f80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f40)={&(0x7f0000000c40)={0x22e8, r15, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@typed={0x14, 0xad, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0xa6, 0x0, 0x0, @uid}, @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x132, 0x0, 0x0, @fd=r12}]}, @IPVS_CMD_ATTR_SERVICE={0x22a4, 0x1, 0x0, 0x1, [@generic="64f3fb97f8bb5f38a8c200daa5899012f68ae7d9bd90afd29fea31f5599c5a1bc6784120a574cafd2fe328fd05460641aaf87d1cd6a4adff12d2b0e1b7a5bb5c96601ded48543197d1437bafc06b779405148fba7bdbe87d94d1ccc937d5ec09812dac2c146a1d2e1e222cbe6b428e8945fd12f7bc394216226f65127b1fdbe02f4327f651a726260ae22e21bec2cda785e92dc77df8b927b479fbe6fa7f594981567c895852baa573b7130a99878c8fd5dac620604e59799f1cb3d86cc4a74803cde4e508744e00fa21c80a81b391363a7201f39e88c7980d466e", @nested={0x203e, 0x125, 0x0, 0x1, [@generic="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", @nested={0x4, 0x50}, @generic="0b68c7f549c5c81ba2566dd78d8c2ec8fb9e93ec8a8a", @typed={0x8, 0x146, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x11a}, @typed={0x8, 0x105, 0x0, 0x0, @pid=r14}, @typed={0xc, 0x10d, 0x0, 0x0, @u64=0x5}, @generic="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"]}, @typed={0xb, 0x2b, 0x0, 0x0, @str='}}!*[^\x00'}, @generic="2007b47fcb3842f2cab99aabdb7b0a6e622fc2243eebae455552fa0038084ca9311a2438b9c715a2f2572b6b1438da2d3e5f97d85f25a8eae4d2f8f8e10457b575c89734f4a2a274f9584c25b3521b549807d5f414d4b880e9443309542b36cae5c37971a4211da07eef3378a275ed6a2d41124905", @typed={0x103, 0x95, 0x0, 0x0, @binary="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"}]}]}, 0x22e8}, 0x1, 0x0, 0x0, 0xc011}, 0x40901) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002fc0)='/proc/thread-self/net/packet\x00', 0x8000, 0x0) r16 = creat$auto(&(0x7f0000003000)='./file0\x00', 0xf801) ioctl$auto_KVM_CREATE_VM(r16, 0xae01, 0x0) sendfile$auto(0xffffffffffffffff, r13, &(0x7f0000003040)=0x8, 0x10000) mseal$auto(0x1, 0x5, 0x9) 3.764918075s ago: executing program 1 (id=7121): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyrd\x00', 0x4000, 0x0) read$auto(r0, 0x0, 0x42) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000e, 0x0) fsopen$auto(0x0, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x2, 0xc, 0x0, 0x7fb, 0x0}) mmap$auto(0x0, 0x38, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) quotactl_fd$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) setpgid$auto(0x0, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x400) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x1f40) 2.70074164s ago: executing program 1 (id=7122): r0 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0xe0a82, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_to_hsr/proxy_ndp\x00', 0x82002, 0x0) mmap$auto(0x0, 0x800020009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) mmap$auto(0x0, 0xda, 0x1, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r1, r3, 0x0, 0x1) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) write$auto(r0, 0x0, 0x0) 2.436391698s ago: executing program 1 (id=7123): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x5, 0x4020009, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x2085c2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000300)=0x8) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r4) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) pread64$auto(r3, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) 1.312340747s ago: executing program 3 (id=7124): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) madvise$auto(0x8001, 0x6, 0x15) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000000, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x8, 0x8c48, 0x29b, 0x3, 0x21, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) ioctl$auto_tracing_buffers_fops_trace(r1, 0x5220, 0x0) 757.355618ms ago: executing program 1 (id=7125): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) r1 = socket(0x15, 0x5, 0x0) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30008000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000229bd7000ffffdf251300000002000000060000000500050008ec000005001d0004000000050017000d00000005082800120000000500210002000000444b4df203b44ba88acee348b76604eda58e2fd25e1be09b04053a41ce"], 0x44}}, 0x480) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r2, @ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) sendmsg$auto_IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0x800}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x8}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x1000}, @IEEE802154_ATTR_PAN_COORD={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x4000020) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x22, 0x0, 0x10) ptrace$auto_PTRACE_GETFPREGS(0xe, r0, 0x5, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace$auto(0x10, r0, 0x4, 0x7ff) (async) socket(0x15, 0x5, 0x0) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30008000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000229bd7000ffffdf251300000002000000060000000500050008ec000005001d0004000000050017000d00000005082800120000000500210002000000444b4df203b44ba88acee348b76604eda58e2fd25e1be09b04053a41ce"], 0x44}}, 0x480) (async) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r2, @ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) (async) sendmsg$auto_IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0x800}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x8}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x1000}, @IEEE802154_ATTR_PAN_COORD={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x4000020) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) (async) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) (async) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x22, 0x0, 0x10) (async) ptrace$auto_PTRACE_GETFPREGS(0xe, r0, 0x5, 0x8) (async) 350.003294ms ago: executing program 2 (id=7126): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x15, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x5, 0x8000020000008001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) select$auto(0x2, &(0x7f0000000100)={[0x3, 0x7ff, 0x1, 0x8, 0x94c1, 0x0, 0x5, 0x14, 0x9, 0x2, 0x1, 0x7, 0xd11, 0x420, 0x4, 0x27de]}, &(0x7f0000000180)={[0x7fffffffffffffff, 0x586, 0x5, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x7, 0x40, 0x7fffffffffffffff, 0x0, 0x1, 0x5d, 0x8, 0x6]}, &(0x7f0000000200)={[0x96c, 0xb, 0x8000000000000001, 0x7, 0x54bf, 0xf50, 0xcb20, 0x1, 0x8, 0x8000, 0x2, 0x7f, 0x6df, 0x8ad5, 0x2, 0x3]}, &(0x7f0000000040)={0x7fffffff, 0x3}) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x3b, 0x5, 0x8) 324.102792ms ago: executing program 3 (id=7127): mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000001c0), 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = socket(0x1e, 0x4, 0x0) recvfrom$auto(r2, 0x0, 0xc, 0xb21, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5404, &(0x7f0000000000)="a80b418e8458bf8c10d9") r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x400000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r3, 0x80044dfb, &(0x7f00000000c0)="39d6018dd32a9cadf98134cdb76557e98bd2875c70f352535ae6c9e42e2d9fcf58a4ece4650bb617bc02fc0235d346b89a620427abc172933c538908cbbc8fd6b8b80e0f57d1556bbb5d3cbb14a6368e") openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x400203, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r4, 0x0, 0xe) sendto$auto(0x3, 0x0, 0x2000f, 0x13f, 0x0, 0x1c) 212.164187ms ago: executing program 0 (id=7108): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='nfs\x00\"p\x17\x9b\xdd\xb4\xed\xb9\xb0\xc7@\xd0_\xf9\xa1\x17tP\x86\xb1,\x93\x87\xae\x03\x8a\xc4\xb5q\xd4\x8c\xc3\xa2?\xe7\xf4\xb2\xd4\xe1\x93A+\xe9\x8d\xc9\xac9|\xc7\t\xff\'\xaa\xac|\xaa\x85\xa9\xd4j\x12\xca\xfe', 0x6, &(0x7f00000004c0)="77bec3605f85e082fbcf491e2b3b12fde18109d1f64859f820ba86bbb7abcf4c75f53e3ecb7fd57568") ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r1 = socket(0x9, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = socket(0x3, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x80080) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x7, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x4, 0x8000) ioctl$auto_BLKSSZGET(r5, 0x1268, 0x0) 0s ago: executing program 1 (id=7128): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x22, 0x2, 0x2) mmap$auto(0x0, 0x2000c, 0xdf, 0x11, 0x40000000000a5, 0x7ffe) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8e482, 0x0) r0 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x21, 0x80000, 0x300) setsockopt$auto(r3, 0x10107, 0x16, 0x0, 0xaf4) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r0) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"/416, @ANYRES16=r4, @ANYBLOB="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"], 0x794}, 0x1, 0x0, 0x0, 0x8000001}, 0x4000080) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) pread64$auto(r5, 0x0, 0x100000009, 0xa4000000000002) madvise$auto(0x0, 0x20499d, 0x9) kernel console output (not intermixed with test programs): ] alloc_inode+0x61/0x240 [ 3318.428927][T15629] sock_alloc+0x40/0x280 [ 3318.428973][T15629] __sock_create+0xc1/0x8d0 [ 3318.429006][T15629] __sys_socket+0x14d/0x260 [ 3318.429036][T15629] ? __pfx___sys_socket+0x10/0x10 [ 3318.429064][T15629] ? ksys_write+0x1ac/0x250 [ 3318.429101][T15629] ? __pfx_ksys_write+0x10/0x10 [ 3318.429156][T15629] __x64_sys_socket+0x72/0xb0 [ 3318.429189][T15629] do_syscall_64+0xcd/0x490 [ 3318.429233][T15629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3318.429266][T15629] RIP: 0033:0x7f388018ebe9 [ 3318.429290][T15629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3318.429322][T15629] RSP: 002b:00007f3881096038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3318.429352][T15629] RAX: ffffffffffffffda RBX: 00007f38803b5fa0 RCX: 00007f388018ebe9 [ 3318.429374][T15629] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 3318.429392][T15629] RBP: 00007f3881096090 R08: 0000000000000000 R09: 0000000000000000 [ 3318.429411][T15629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3318.429429][T15629] R13: 00007f38803b6038 R14: 00007f38803b5fa0 R15: 00007ffdf6b09628 [ 3318.429460][T15629] [ 3318.429475][T15629] socket: no more sockets [ 3319.160306][T15649] FAULT_INJECTION: forcing a failure. [ 3319.160306][T15649] name failslab, interval 1, probability 0, space 0, times 0 [ 3319.209393][T15649] CPU: 0 UID: 0 PID: 15649 Comm: syz.0.6791 Not tainted syzkaller #0 PREEMPT(full) [ 3319.209434][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3319.209452][T15649] Call Trace: [ 3319.209463][T15649] [ 3319.209474][T15649] dump_stack_lvl+0x16c/0x1f0 [ 3319.209517][T15649] should_fail_ex+0x512/0x640 [ 3319.209561][T15649] should_failslab+0xc2/0x120 [ 3319.209602][T15649] __kmalloc_cache_noprof+0x6a/0x3e0 [ 3319.209637][T15649] ? madvise_collapse+0x1a6/0xaa0 [ 3319.209686][T15649] madvise_collapse+0x1a6/0xaa0 [ 3319.209730][T15649] ? rcu_is_watching+0x12/0xc0 [ 3319.209765][T15649] ? rcu_is_watching+0x12/0xc0 [ 3319.209799][T15649] ? __pfx_madvise_collapse+0x10/0x10 [ 3319.209844][T15649] ? rcu_is_watching+0x12/0xc0 [ 3319.209885][T15649] ? lock_release+0x151/0x2f0 [ 3319.209926][T15649] ? bpf_ksym_find+0x124/0x1c0 [ 3319.209957][T15649] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3319.210000][T15649] madvise_vma_behavior+0x10a4/0x2d60 [ 3319.210050][T15649] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 3319.210092][T15649] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 3319.210140][T15649] ? __pfx_mas_prev+0x10/0x10 [ 3319.210187][T15649] ? find_vma_prev+0xda/0x160 [ 3319.210235][T15649] ? __pfx_find_vma_prev+0x10/0x10 [ 3319.210290][T15649] ? kstrtouint+0xdd/0x130 [ 3319.210332][T15649] madvise_walk_vmas+0x31f/0x9c0 [ 3319.210381][T15649] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 3319.210429][T15649] ? rcu_is_watching+0x12/0xc0 [ 3319.210467][T15649] madvise_do_behavior+0x1e2/0x530 [ 3319.210518][T15649] ? __pfx_madvise_do_behavior+0x10/0x10 [ 3319.210566][T15649] ? down_read+0x13d/0x480 [ 3319.210616][T15649] ? preempt_count_add+0x76/0x150 [ 3319.210667][T15649] do_madvise+0x176/0x240 [ 3319.210714][T15649] ? __pfx_do_madvise+0x10/0x10 [ 3319.210759][T15649] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 3319.210807][T15649] ? __fget_files+0x20e/0x3c0 [ 3319.210849][T15649] ? __pfx_ksys_write+0x10/0x10 [ 3319.210898][T15649] __x64_sys_madvise+0xa9/0x110 [ 3319.210944][T15649] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 3319.210996][T15649] do_syscall_64+0xcd/0x490 [ 3319.211040][T15649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3319.211074][T15649] RIP: 0033:0x7f388018ebe9 [ 3319.211098][T15649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3319.211131][T15649] RSP: 002b:00007f3881012038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 3319.211161][T15649] RAX: ffffffffffffffda RBX: 00007f38803b6360 RCX: 00007f388018ebe9 [ 3319.211183][T15649] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 3319.211202][T15649] RBP: 00007f3881012090 R08: 0000000000000000 R09: 0000000000000000 [ 3319.211220][T15649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3319.211239][T15649] R13: 00007f38803b63f8 R14: 00007f38803b6360 R15: 00007ffdf6b09628 [ 3319.211269][T15649] [ 3319.500541][T15647] FAULT_INJECTION: forcing a failure. [ 3319.500541][T15647] name failslab, interval 1, probability 0, space 0, times 0 [ 3319.514141][T15647] CPU: 0 UID: 0 PID: 15647 Comm: syz.3.6792 Not tainted syzkaller #0 PREEMPT(full) [ 3319.514184][T15647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3319.514205][T15647] Call Trace: [ 3319.514215][T15647] [ 3319.514227][T15647] dump_stack_lvl+0x16c/0x1f0 [ 3319.514275][T15647] should_fail_ex+0x512/0x640 [ 3319.514324][T15647] should_failslab+0xc2/0x120 [ 3319.514368][T15647] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3319.514408][T15647] ? getname_flags.part.0+0x4c/0x550 [ 3319.514463][T15647] getname_flags.part.0+0x4c/0x550 [ 3319.514517][T15647] getname_flags+0x93/0xf0 [ 3319.514552][T15647] do_sys_openat2+0xb8/0x1d0 [ 3319.514601][T15647] ? __pfx_do_sys_openat2+0x10/0x10 [ 3319.514654][T15647] ? __fget_files+0x20e/0x3c0 [ 3319.514693][T15647] __x64_sys_openat+0x174/0x210 [ 3319.514743][T15647] ? __pfx___x64_sys_openat+0x10/0x10 [ 3319.514796][T15647] ? ksys_write+0x1ac/0x250 [ 3319.514840][T15647] do_syscall_64+0xcd/0x490 [ 3319.514894][T15647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3319.514927][T15647] RIP: 0033:0x7f198d78ebe9 [ 3319.514952][T15647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3319.514984][T15647] RSP: 002b:00007f198e629038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3319.515014][T15647] RAX: ffffffffffffffda RBX: 00007f198d9b6360 RCX: 00007f198d78ebe9 [ 3319.515037][T15647] RDX: 0000000000080800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 3319.515058][T15647] RBP: 00007f198e629090 R08: 0000000000000000 R09: 0000000000000000 [ 3319.515078][T15647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3319.515099][T15647] R13: 00007f198d9b63f8 R14: 00007f198d9b6360 R15: 00007ffcc39d8f48 [ 3319.515130][T15647] [ 3320.847317][T15658] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+' [ 3321.321621][T15671] FAULT_INJECTION: forcing a failure. [ 3321.321621][T15671] name failslab, interval 1, probability 0, space 0, times 0 [ 3321.334526][T15671] CPU: 0 UID: 0 PID: 15671 Comm: syz.1.6795 Not tainted syzkaller #0 PREEMPT(full) [ 3321.334566][T15671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3321.334584][T15671] Call Trace: [ 3321.334593][T15671] [ 3321.334603][T15671] dump_stack_lvl+0x16c/0x1f0 [ 3321.334646][T15671] should_fail_ex+0x512/0x640 [ 3321.334693][T15671] should_failslab+0xc2/0x120 [ 3321.334738][T15671] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3321.334777][T15671] ? vma_merge_new_range+0x3ae/0xa50 [ 3321.334814][T15671] ? vm_area_alloc+0x1f/0x160 [ 3321.334849][T15671] vm_area_alloc+0x1f/0x160 [ 3321.334882][T15671] __mmap_region+0xf90/0x27b0 [ 3321.334923][T15671] ? __pfx___mmap_region+0x10/0x10 [ 3321.334967][T15671] ? rcu_is_watching+0x12/0xc0 [ 3321.335011][T15671] ? lock_release+0x201/0x2f0 [ 3321.335052][T15671] ? bpf_ksym_find+0x124/0x1c0 [ 3321.335083][T15671] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3321.335123][T15671] ? is_bpf_text_address+0x94/0x1a0 [ 3321.335164][T15671] ? kernel_text_address+0x8d/0x100 [ 3321.335194][T15671] ? __kernel_text_address+0xd/0x40 [ 3321.335256][T15671] ? trace_cap_capable+0x18d/0x200 [ 3321.335292][T15671] ? cap_capable+0xb3/0x250 [ 3321.335327][T15671] mmap_region+0x1ab/0x3f0 [ 3321.335362][T15671] ? __get_unmapped_area+0x267/0x440 [ 3321.335410][T15671] do_mmap+0xa3e/0x1210 [ 3321.335461][T15671] ? __pfx_do_mmap+0x10/0x10 [ 3321.335509][T15671] ? __pfx_down_write_killable+0x10/0x10 [ 3321.335562][T15671] vm_mmap_pgoff+0x29e/0x470 [ 3321.335615][T15671] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3321.335663][T15671] ? __fget_files+0x20e/0x3c0 [ 3321.335704][T15671] ksys_mmap_pgoff+0x7d/0x5c0 [ 3321.335750][T15671] ? __pfx_ksys_write+0x10/0x10 [ 3321.335792][T15671] __x64_sys_mmap+0x125/0x190 [ 3321.335846][T15671] do_syscall_64+0xcd/0x490 [ 3321.335890][T15671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3321.335923][T15671] RIP: 0033:0x7ff24cf8ebe9 [ 3321.335948][T15671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3321.335981][T15671] RSP: 002b:00007ff24b1b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3321.336019][T15671] RAX: ffffffffffffffda RBX: 00007ff24d1b6180 RCX: 00007ff24cf8ebe9 [ 3321.336040][T15671] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 3321.336059][T15671] RBP: 00007ff24b1b4090 R08: 0000000000000401 R09: 0000000000008000 [ 3321.336079][T15671] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 3321.336098][T15671] R13: 00007ff24d1b6218 R14: 00007ff24d1b6180 R15: 00007ffdc914f6e8 [ 3321.336129][T15671] [ 3322.255513][T15683] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3322.282371][T15684] FAULT_INJECTION: forcing a failure. [ 3322.282371][T15684] name failslab, interval 1, probability 0, space 0, times 0 [ 3322.304429][T15684] CPU: 0 UID: 0 PID: 15684 Comm: syz.1.6797 Not tainted syzkaller #0 PREEMPT(full) [ 3322.304469][T15684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3322.304488][T15684] Call Trace: [ 3322.304500][T15684] [ 3322.304511][T15684] dump_stack_lvl+0x16c/0x1f0 [ 3322.304554][T15684] should_fail_ex+0x512/0x640 [ 3322.304603][T15684] should_failslab+0xc2/0x120 [ 3322.304645][T15684] __kvmalloc_node_noprof+0x137/0x620 [ 3322.304684][T15684] ? traverse.part.0.constprop.0+0x392/0x640 [ 3322.304798][T15684] ? traverse.part.0.constprop.0+0x392/0x640 [ 3322.304830][T15684] traverse.part.0.constprop.0+0x392/0x640 [ 3322.304864][T15684] ? rcu_is_watching+0x12/0xc0 [ 3322.304898][T15684] ? lock_release+0x201/0x2f0 [ 3322.304940][T15684] seq_read_iter+0x932/0x12c0 [ 3322.304973][T15684] ? __pfx_aa_file_perm+0x10/0x10 [ 3322.305025][T15684] seq_read+0x3a3/0x570 [ 3322.305056][T15684] ? __pfx_seq_read+0x10/0x10 [ 3322.305094][T15684] ? bpf_lsm_file_permission+0x9/0x10 [ 3322.305142][T15684] ? security_file_permission+0x71/0x210 [ 3322.305186][T15684] ? rw_verify_area+0xcf/0x6c0 [ 3322.305218][T15684] ? __pfx_seq_read+0x10/0x10 [ 3322.305249][T15684] vfs_read+0x1e1/0xcf0 [ 3322.305285][T15684] ? lock_release+0x201/0x2f0 [ 3322.305328][T15684] ? __pfx_vfs_read+0x10/0x10 [ 3322.305363][T15684] ? __fget_files+0x204/0x3c0 [ 3322.305396][T15684] ? rcu_is_watching+0x12/0xc0 [ 3322.305427][T15684] ? lock_release+0x201/0x2f0 [ 3322.305471][T15684] ? __fget_files+0x20e/0x3c0 [ 3322.305503][T15684] ? __fget_files+0x190/0x3c0 [ 3322.305543][T15684] __x64_sys_pread64+0x1eb/0x250 [ 3322.305585][T15684] ? __pfx___x64_sys_pread64+0x10/0x10 [ 3322.305628][T15684] do_syscall_64+0xcd/0x490 [ 3322.305671][T15684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3322.305704][T15684] RIP: 0033:0x7ff24cf8ebe9 [ 3322.305735][T15684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3322.305767][T15684] RSP: 002b:00007ff24b151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 3322.305798][T15684] RAX: ffffffffffffffda RBX: 00007ff24d1b6450 RCX: 00007ff24cf8ebe9 [ 3322.305820][T15684] RDX: 0000000100000009 RSI: 0000000000000000 RDI: 000000000000000b [ 3322.305839][T15684] RBP: 00007ff24b151090 R08: 0000000000000000 R09: 0000000000000000 [ 3322.305859][T15684] R10: 00a4000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 3322.305880][T15684] R13: 00007ff24d1b64e8 R14: 00007ff24d1b6450 R15: 00007ffdc914f6e8 [ 3322.305911][T15684] [ 3322.889794][T15687] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input936 [ 3323.393227][T15692] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3323.719260][T15698] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input937 [ 3323.816297][T15692] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input938 [ 3325.243809][T15714] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3327.718316][T15748] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3328.017279][T15750] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input939 [ 3328.178791][T15754] svc: failed to register nfsdv3 RPC service (errno 111). [ 3328.190194][T15754] svc: failed to register nfsaclv3 RPC service (errno 111). [ 3328.390001][T15753] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input940 [ 3328.587510][ T1625] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 3330.310199][T15786] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3330.655665][T15765] Bluetooth: hci1: command 0x0406 tx timeout [ 3332.092699][T15806] FAULT_INJECTION: forcing a failure. [ 3332.092699][T15806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3332.105995][T15806] CPU: 1 UID: 0 PID: 15806 Comm: syz.3.6821 Not tainted syzkaller #0 PREEMPT(full) [ 3332.106043][T15806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3332.106063][T15806] Call Trace: [ 3332.106074][T15806] [ 3332.106085][T15806] dump_stack_lvl+0x16c/0x1f0 [ 3332.106131][T15806] should_fail_ex+0x512/0x640 [ 3332.106180][T15806] _copy_from_user+0x2e/0xd0 [ 3332.106234][T15806] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 3332.106274][T15806] snd_rawmidi_write+0x26e/0xc10 [ 3332.106312][T15806] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 3332.106347][T15806] ? common_file_perm+0x1a9/0x340 [ 3332.106389][T15806] ? bpf_lsm_file_permission+0x9/0x10 [ 3332.106437][T15806] ? security_file_permission+0x71/0x210 [ 3332.106483][T15806] ? rw_verify_area+0xcf/0x6c0 [ 3332.106516][T15806] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 3332.106549][T15806] vfs_write+0x29d/0x11d0 [ 3332.106589][T15806] ? __pfx_vfs_write+0x10/0x10 [ 3332.106627][T15806] ? __fget_files+0x204/0x3c0 [ 3332.106660][T15806] ? rcu_is_watching+0x12/0xc0 [ 3332.106693][T15806] ? lock_release+0x201/0x2f0 [ 3332.106736][T15806] ? __fget_files+0x20e/0x3c0 [ 3332.106776][T15806] ksys_write+0x1f8/0x250 [ 3332.106813][T15806] ? __pfx_ksys_write+0x10/0x10 [ 3332.106857][T15806] do_syscall_64+0xcd/0x490 [ 3332.106929][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3332.106963][T15806] RIP: 0033:0x7f198d78ebe9 [ 3332.106987][T15806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3332.107019][T15806] RSP: 002b:00007f198e68c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3332.107056][T15806] RAX: ffffffffffffffda RBX: 00007f198d9b6090 RCX: 00007f198d78ebe9 [ 3332.107077][T15806] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000005 [ 3332.107097][T15806] RBP: 00007f198e68c090 R08: 0000000000000000 R09: 0000000000000000 [ 3332.107115][T15806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3332.107132][T15806] R13: 00007f198d9b6128 R14: 00007f198d9b6090 R15: 00007ffcc39d8f48 [ 3332.107162][T15806] [ 3332.320482][ C1] vkms_vblank_simulate: vblank timer overrun [ 3332.390491][T15809] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3332.803645][T15825] FAULT_INJECTION: forcing a failure. [ 3332.803645][T15825] name failslab, interval 1, probability 0, space 0, times 0 [ 3332.874385][T15825] CPU: 1 UID: 0 PID: 15825 Comm: syz.3.6827 Not tainted syzkaller #0 PREEMPT(full) [ 3332.874430][T15825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3332.874450][T15825] Call Trace: [ 3332.874460][T15825] [ 3332.874472][T15825] dump_stack_lvl+0x16c/0x1f0 [ 3332.874514][T15825] should_fail_ex+0x512/0x640 [ 3332.874559][T15825] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 3332.874606][T15825] should_failslab+0xc2/0x120 [ 3332.874648][T15825] __kmalloc_noprof+0xd2/0x510 [ 3332.874688][T15825] tomoyo_realpath_from_path+0xc2/0x6e0 [ 3332.874735][T15825] ? tomoyo_profile+0x47/0x60 [ 3332.874765][T15825] tomoyo_path_number_perm+0x245/0x580 [ 3332.874803][T15825] ? tomoyo_path_number_perm+0x237/0x580 [ 3332.874843][T15825] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3332.874888][T15825] ? preempt_count_add+0x76/0x150 [ 3332.874944][T15825] ? rcu_is_watching+0x12/0xc0 [ 3332.874977][T15825] ? __fget_files+0x204/0x3c0 [ 3332.875010][T15825] ? hook_file_ioctl_common+0x145/0x410 [ 3332.875049][T15825] ? lock_release+0x201/0x2f0 [ 3332.875088][T15825] ? __fget_files+0x20e/0x3c0 [ 3332.875118][T15825] security_file_ioctl+0x9b/0x240 [ 3332.875157][T15825] __x64_sys_ioctl+0xb7/0x210 [ 3332.875205][T15825] do_syscall_64+0xcd/0x490 [ 3332.875259][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3332.875292][T15825] RIP: 0033:0x7f198d78ebe9 [ 3332.875316][T15825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3332.875347][T15825] RSP: 002b:00007f198e6ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3332.875378][T15825] RAX: ffffffffffffffda RBX: 00007f198d9b5fa0 RCX: 00007f198d78ebe9 [ 3332.875405][T15825] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 3332.875426][T15825] RBP: 00007f198e6ad090 R08: 0000000000000000 R09: 0000000000000000 [ 3332.875445][T15825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3332.875465][T15825] R13: 00007f198d9b6038 R14: 00007f198d9b5fa0 R15: 00007ffcc39d8f48 [ 3332.875498][T15825] [ 3333.078576][ C1] vkms_vblank_simulate: vblank timer overrun [ 3333.092304][T15825] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3333.577291][T15833] FAULT_INJECTION: forcing a failure. [ 3333.577291][T15833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3333.618174][T15833] CPU: 1 UID: 0 PID: 15833 Comm: syz.3.6829 Not tainted syzkaller #0 PREEMPT(full) [ 3333.618218][T15833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3333.618238][T15833] Call Trace: [ 3333.618248][T15833] [ 3333.618260][T15833] dump_stack_lvl+0x16c/0x1f0 [ 3333.618305][T15833] should_fail_ex+0x512/0x640 [ 3333.618355][T15833] _copy_to_user+0x32/0xd0 [ 3333.618385][T15833] simple_read_from_buffer+0xcb/0x170 [ 3333.618419][T15833] proc_fail_nth_read+0x197/0x240 [ 3333.618453][T15833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3333.618485][T15833] ? security_file_permission+0x71/0x210 [ 3333.618530][T15833] ? rw_verify_area+0xcf/0x6c0 [ 3333.618562][T15833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3333.618596][T15833] vfs_read+0x1e1/0xcf0 [ 3333.618634][T15833] ? __pfx___mutex_lock+0x10/0x10 [ 3333.618675][T15833] ? __pfx_vfs_read+0x10/0x10 [ 3333.618709][T15833] ? __fget_files+0x204/0x3c0 [ 3333.618743][T15833] ? rcu_is_watching+0x12/0xc0 [ 3333.618779][T15833] ? __fget_files+0x20e/0x3c0 [ 3333.618819][T15833] ksys_read+0x12a/0x250 [ 3333.618856][T15833] ? __pfx_ksys_read+0x10/0x10 [ 3333.618898][T15833] do_syscall_64+0xcd/0x490 [ 3333.618949][T15833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3333.618982][T15833] RIP: 0033:0x7f198d78d5fc [ 3333.619005][T15833] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3333.619035][T15833] RSP: 002b:00007f198e68c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3333.619067][T15833] RAX: ffffffffffffffda RBX: 00007f198d9b6090 RCX: 00007f198d78d5fc [ 3333.619087][T15833] RDX: 000000000000000f RSI: 00007f198e68c0a0 RDI: 0000000000000004 [ 3333.619108][T15833] RBP: 00007f198e68c090 R08: 0000000000000000 R09: 0000000000000000 [ 3333.619128][T15833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3333.619147][T15833] R13: 00007f198d9b6128 R14: 00007f198d9b6090 R15: 00007ffcc39d8f48 [ 3333.619179][T15833] [ 3333.819709][ C1] vkms_vblank_simulate: vblank timer overrun [ 3334.092688][T15840] vivid-003: ================= START STATUS ================= [ 3334.105980][T15840] vivid-003: Radio HW Seek Mode: Bounded [ 3334.124171][T15840] vivid-003: Radio Programmable HW Seek: false [ 3334.148431][T15840] vivid-003: RDS Rx I/O Mode: Block I/O [ 3334.154038][T15840] vivid-003: Generate RBDS Instead of RDS: false [ 3334.266911][T15840] vivid-003: RDS Reception: true [ 3334.335484][T15840] vivid-003: RDS Program Type: 0 inactive [ 3334.370880][T15840] vivid-003: RDS PS Name: inactive [ 3334.385742][T15840] vivid-003: RDS Radio Text: inactive [ 3334.391438][T15840] vivid-003: RDS Traffic Announcement: false inactive [ 3334.399012][T15840] vivid-003: RDS Traffic Program: false inactive [ 3334.406018][T15840] vivid-003: RDS Music: false inactive [ 3334.411571][T15840] vivid-003: ================== END STATUS ================== [ 3334.592859][T15854] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3334.669886][T15854] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input941 [ 3334.897634][T15855] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input942 [ 3335.263500][T15864] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3335.430638][T15871] FAULT_INJECTION: forcing a failure. [ 3335.430638][T15871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3335.466940][T15868] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input943 [ 3335.498269][T15871] CPU: 1 UID: 0 PID: 15871 Comm: syz.0.6840 Not tainted syzkaller #0 PREEMPT(full) [ 3335.498309][T15871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3335.498325][T15871] Call Trace: [ 3335.498344][T15871] [ 3335.498352][T15871] dump_stack_lvl+0x16c/0x1f0 [ 3335.498387][T15871] should_fail_ex+0x512/0x640 [ 3335.498421][T15871] _copy_to_iter+0x29f/0x16f0 [ 3335.498444][T15871] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 3335.498482][T15871] ? __pfx__copy_to_iter+0x10/0x10 [ 3335.498503][T15871] ? __pfx_woken_wake_function+0x10/0x10 [ 3335.498546][T15871] tty_read+0x26f/0x5d0 [ 3335.498577][T15871] ? __pfx_tty_read+0x10/0x10 [ 3335.498608][T15871] ? bpf_lsm_file_permission+0x9/0x10 [ 3335.498642][T15871] ? security_file_permission+0x71/0x210 [ 3335.498674][T15871] ? rw_verify_area+0xcf/0x6c0 [ 3335.498701][T15871] vfs_read+0x8bf/0xcf0 [ 3335.498730][T15871] ? __pfx_vfs_read+0x10/0x10 [ 3335.498758][T15871] ? lock_release+0x201/0x2f0 [ 3335.498796][T15871] ksys_read+0x12a/0x250 [ 3335.498822][T15871] ? __pfx_ksys_read+0x10/0x10 [ 3335.498853][T15871] do_syscall_64+0xcd/0x490 [ 3335.498886][T15871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3335.498917][T15871] RIP: 0033:0x7f388018ebe9 [ 3335.498935][T15871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3335.498959][T15871] RSP: 002b:00007f3881096038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3335.498981][T15871] RAX: ffffffffffffffda RBX: 00007f38803b5fa0 RCX: 00007f388018ebe9 [ 3335.498998][T15871] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3335.499013][T15871] RBP: 00007f3881096090 R08: 0000000000000000 R09: 0000000000000000 [ 3335.499028][T15871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3335.499043][T15871] R13: 00007f38803b6038 R14: 00007f38803b5fa0 R15: 00007ffdf6b09628 [ 3335.499066][T15871] [ 3335.695632][ C1] vkms_vblank_simulate: vblank timer overrun [ 3336.366513][T15880] FAULT_INJECTION: forcing a failure. [ 3336.366513][T15880] name failslab, interval 1, probability 0, space 0, times 0 [ 3336.379572][T15880] CPU: 0 UID: 0 PID: 15880 Comm: syz.1.6842 Not tainted syzkaller #0 PREEMPT(full) [ 3336.379619][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3336.379635][T15880] Call Trace: [ 3336.379643][T15880] [ 3336.379652][T15880] dump_stack_lvl+0x16c/0x1f0 [ 3336.379687][T15880] should_fail_ex+0x512/0x640 [ 3336.379726][T15880] ? kobject_get_path+0xd2/0x2a0 [ 3336.379759][T15880] should_failslab+0xc2/0x120 [ 3336.379792][T15880] __kmalloc_noprof+0xd2/0x510 [ 3336.379825][T15880] kobject_get_path+0xd2/0x2a0 [ 3336.379861][T15880] kobject_uevent_env+0x289/0x1870 [ 3336.379900][T15880] ? __pfx_dev_uevent_name+0x10/0x10 [ 3336.379934][T15880] ? bus_to_subsys+0x131/0x160 [ 3336.379961][T15880] device_add+0x10dd/0x1aa0 [ 3336.379984][T15880] ? __pfx_device_add+0x10/0x10 [ 3336.380007][T15880] ? rcu_is_watching+0x12/0xc0 [ 3336.380043][T15880] ? lockdep_init_map_type+0x5c/0x280 [ 3336.380079][T15880] ? __raw_spin_lock_init+0x3a/0x110 [ 3336.380119][T15880] input_register_device+0x7e8/0x1180 [ 3336.380144][T15880] ? input_ff_create+0x256/0x350 [ 3336.380174][T15880] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 3336.380209][T15880] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3336.380248][T15880] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 3336.380284][T15880] ? rcu_is_watching+0x12/0xc0 [ 3336.380310][T15880] ? __fget_files+0x204/0x3c0 [ 3336.380343][T15880] ? __pfx_uinput_ioctl+0x10/0x10 [ 3336.380374][T15880] __x64_sys_ioctl+0x18b/0x210 [ 3336.380414][T15880] do_syscall_64+0xcd/0x490 [ 3336.380448][T15880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3336.380473][T15880] RIP: 0033:0x7ff24cf8ebe9 [ 3336.380491][T15880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3336.380517][T15880] RSP: 002b:00007ff24b1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3336.380540][T15880] RAX: ffffffffffffffda RBX: 00007ff24d1b5fa0 RCX: 00007ff24cf8ebe9 [ 3336.380557][T15880] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 3336.380572][T15880] RBP: 00007ff24d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 3336.380588][T15880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3336.380603][T15880] R13: 00007ff24d1b6038 R14: 00007ff24d1b5fa0 R15: 00007ffdc914f6e8 [ 3336.380626][T15880] [ 3336.380819][T15880] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input944 [ 3338.248255][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3338.254876][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3338.506782][T15914] FAULT_INJECTION: forcing a failure. [ 3338.506782][T15914] name failslab, interval 1, probability 0, space 0, times 0 [ 3338.519632][T15914] CPU: 1 UID: 0 PID: 15914 Comm: syz.2.6847 Not tainted syzkaller #0 PREEMPT(full) [ 3338.519673][T15914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3338.519693][T15914] Call Trace: [ 3338.519704][T15914] [ 3338.519716][T15914] dump_stack_lvl+0x16c/0x1f0 [ 3338.519762][T15914] should_fail_ex+0x512/0x640 [ 3338.519811][T15914] should_failslab+0xc2/0x120 [ 3338.519854][T15914] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3338.519894][T15914] ? getname_flags.part.0+0x4c/0x550 [ 3338.519946][T15914] getname_flags.part.0+0x4c/0x550 [ 3338.519997][T15914] getname_flags+0x93/0xf0 [ 3338.520031][T15914] do_sys_openat2+0xb8/0x1d0 [ 3338.520081][T15914] ? __pfx_do_sys_openat2+0x10/0x10 [ 3338.520132][T15914] ? __fget_files+0x20e/0x3c0 [ 3338.520171][T15914] __x64_sys_openat+0x174/0x210 [ 3338.520226][T15914] ? __pfx___x64_sys_openat+0x10/0x10 [ 3338.520279][T15914] ? ksys_write+0x1ac/0x250 [ 3338.520323][T15914] do_syscall_64+0xcd/0x490 [ 3338.520367][T15914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3338.520401][T15914] RIP: 0033:0x7f0c2a18ebe9 [ 3338.520426][T15914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3338.520458][T15914] RSP: 002b:00007f0c2b02e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3338.520488][T15914] RAX: ffffffffffffffda RBX: 00007f0c2a3b6270 RCX: 00007f0c2a18ebe9 [ 3338.520509][T15914] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 3338.520529][T15914] RBP: 00007f0c2b02e090 R08: 0000000000000000 R09: 0000000000000000 [ 3338.520548][T15914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3338.520566][T15914] R13: 00007f0c2a3b6308 R14: 00007f0c2a3b6270 R15: 00007ffc75f08978 [ 3338.520596][T15914] [ 3338.700363][ C1] vkms_vblank_simulate: vblank timer overrun [ 3339.152228][T15924] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3339.315182][T15924] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input945 [ 3340.174630][T15941] FAULT_INJECTION: forcing a failure. [ 3340.174630][T15941] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.187440][T15941] CPU: 1 UID: 0 PID: 15941 Comm: syz.2.6852 Not tainted syzkaller #0 PREEMPT(full) [ 3340.187480][T15941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3340.187497][T15941] Call Trace: [ 3340.187508][T15941] [ 3340.187526][T15941] dump_stack_lvl+0x16c/0x1f0 [ 3340.187570][T15941] should_fail_ex+0x512/0x640 [ 3340.187606][T15941] ? trace_parser_get_init+0x30/0xc0 [ 3340.187645][T15941] should_failslab+0xc2/0x120 [ 3340.187677][T15941] __kmalloc_noprof+0xd2/0x510 [ 3340.187708][T15941] trace_parser_get_init+0x30/0xc0 [ 3340.187746][T15941] ftrace_event_write+0x177/0x290 [ 3340.187770][T15941] ? __pfx_ftrace_event_write+0x10/0x10 [ 3340.187795][T15941] ? lock_acquire+0x2cd/0x350 [ 3340.187826][T15941] ? __pfx___might_resched+0x10/0x10 [ 3340.187853][T15941] ? __pfx_ftrace_event_write+0x10/0x10 [ 3340.187877][T15941] vfs_write+0x29d/0x11d0 [ 3340.187906][T15941] ? __pfx___mutex_lock+0x10/0x10 [ 3340.187938][T15941] ? __pfx_vfs_write+0x10/0x10 [ 3340.187965][T15941] ? __fget_files+0x204/0x3c0 [ 3340.187990][T15941] ? rcu_is_watching+0x12/0xc0 [ 3340.188017][T15941] ? __fget_files+0x20e/0x3c0 [ 3340.188046][T15941] ksys_write+0x12a/0x250 [ 3340.188073][T15941] ? __pfx_ksys_write+0x10/0x10 [ 3340.188105][T15941] do_syscall_64+0xcd/0x490 [ 3340.188138][T15941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3340.188163][T15941] RIP: 0033:0x7f0c2a18ebe9 [ 3340.188181][T15941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3340.188206][T15941] RSP: 002b:00007f0c2b02e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3340.188228][T15941] RAX: ffffffffffffffda RBX: 00007f0c2a3b6270 RCX: 00007f0c2a18ebe9 [ 3340.188245][T15941] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 3340.188260][T15941] RBP: 00007f0c2b02e090 R08: 0000000000000000 R09: 0000000000000000 [ 3340.188275][T15941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3340.188290][T15941] R13: 00007f0c2a3b6308 R14: 00007f0c2a3b6270 R15: 00007ffc75f08978 [ 3340.188314][T15941] [ 3340.194631][T15912] ima: policy update failed [ 3340.517184][ T30] audit: type=1802 audit(1755840149.038:193): pid=15912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.6848" res=0 errno=0 [ 3340.793899][T15947] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input946 [ 3341.040384][T15953] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3341.084301][T15951] FAULT_INJECTION: forcing a failure. [ 3341.084301][T15951] name failslab, interval 1, probability 0, space 0, times 0 [ 3341.108041][T15951] CPU: 0 UID: 0 PID: 15951 Comm: syz.1.6853 Not tainted syzkaller #0 PREEMPT(full) [ 3341.108083][T15951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3341.108102][T15951] Call Trace: [ 3341.108113][T15951] [ 3341.108124][T15951] dump_stack_lvl+0x16c/0x1f0 [ 3341.108170][T15951] should_fail_ex+0x512/0x640 [ 3341.108219][T15951] should_failslab+0xc2/0x120 [ 3341.108260][T15951] __kvmalloc_node_noprof+0x137/0x620 [ 3341.108298][T15951] ? __pfx___mutex_lock+0x10/0x10 [ 3341.108342][T15951] ? traverse.part.0.constprop.0+0x392/0x640 [ 3341.108381][T15951] ? traverse.part.0.constprop.0+0x392/0x640 [ 3341.108414][T15951] traverse.part.0.constprop.0+0x392/0x640 [ 3341.108447][T15951] ? rcu_is_watching+0x12/0xc0 [ 3341.108485][T15951] seq_read_iter+0x932/0x12c0 [ 3341.108532][T15951] seq_read+0x3a3/0x570 [ 3341.108562][T15951] ? __pfx_seq_read+0x10/0x10 [ 3341.108593][T15951] ? rcu_is_watching+0x12/0xc0 [ 3341.108627][T15951] ? rcu_is_watching+0x12/0xc0 [ 3341.108659][T15951] ? lock_release+0x201/0x2f0 [ 3341.108705][T15951] ? common_file_perm+0x1a9/0x340 [ 3341.108748][T15951] ? __pfx_seq_read+0x10/0x10 [ 3341.108778][T15951] proc_reg_read+0x23d/0x330 [ 3341.108822][T15951] ? __pfx_proc_reg_read+0x10/0x10 [ 3341.108867][T15951] vfs_read+0x1e1/0xcf0 [ 3341.108903][T15951] ? lock_release+0x201/0x2f0 [ 3341.108948][T15951] ? __pfx_vfs_read+0x10/0x10 [ 3341.108984][T15951] ? __fget_files+0x204/0x3c0 [ 3341.109017][T15951] ? rcu_is_watching+0x12/0xc0 [ 3341.109049][T15951] ? lock_release+0x201/0x2f0 [ 3341.109093][T15951] ? __fget_files+0x20e/0x3c0 [ 3341.109127][T15951] ? __fget_files+0x190/0x3c0 [ 3341.109166][T15951] __x64_sys_pread64+0x1eb/0x250 [ 3341.109207][T15951] ? __pfx___x64_sys_pread64+0x10/0x10 [ 3341.109254][T15951] do_syscall_64+0xcd/0x490 [ 3341.109298][T15951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3341.109331][T15951] RIP: 0033:0x7ff24cf8ebe9 [ 3341.109355][T15951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3341.109388][T15951] RSP: 002b:00007ff24b1b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 3341.109419][T15951] RAX: ffffffffffffffda RBX: 00007ff24d1b6180 RCX: 00007ff24cf8ebe9 [ 3341.109436][T15951] RDX: 0000200000000003 RSI: 0000000000000000 RDI: 000000000000000a [ 3341.109451][T15951] RBP: 00007ff24b1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 3341.109467][T15951] R10: 000000002f4a3a23 R11: 0000000000000246 R12: 0000000000000001 [ 3341.109482][T15951] R13: 00007ff24d1b6218 R14: 00007ff24d1b6180 R15: 00007ffdc914f6e8 [ 3341.109511][T15951] [ 3344.121053][T15998] FAULT_INJECTION: forcing a failure. [ 3344.121053][T15998] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3344.134993][T15998] CPU: 1 UID: 0 PID: 15998 Comm: syz.2.6862 Not tainted syzkaller #0 PREEMPT(full) [ 3344.135036][T15998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3344.135055][T15998] Call Trace: [ 3344.135066][T15998] [ 3344.135078][T15998] dump_stack_lvl+0x16c/0x1f0 [ 3344.135123][T15998] should_fail_ex+0x512/0x640 [ 3344.135172][T15998] should_fail_alloc_page+0xe7/0x130 [ 3344.135218][T15998] prepare_alloc_pages+0x3c2/0x610 [ 3344.135270][T15998] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 3344.135310][T15998] ? __pfx_css_rstat_updated+0x10/0x10 [ 3344.135346][T15998] ? css_rstat_updated+0x1c2/0x510 [ 3344.135392][T15998] ? __pfx_css_rstat_updated+0x10/0x10 [ 3344.135428][T15998] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3344.135469][T15998] ? rcu_is_watching+0x12/0xc0 [ 3344.135502][T15998] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 3344.135561][T15998] ? __mod_zone_page_state+0xcc/0x1a0 [ 3344.135594][T15998] ? lru_gen_update_size+0x543/0xe10 [ 3344.135624][T15998] ? rcu_is_watching+0x12/0xc0 [ 3344.135656][T15998] ? rcu_is_watching+0x12/0xc0 [ 3344.135686][T15998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3344.135736][T15998] ? policy_nodemask+0xea/0x4e0 [ 3344.135780][T15998] alloc_pages_mpol+0x1fb/0x550 [ 3344.135824][T15998] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3344.135873][T15998] folio_alloc_mpol_noprof+0x36/0x2f0 [ 3344.135921][T15998] alloc_migration_target_by_mpol+0x246/0x500 [ 3344.135976][T15998] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 3344.136028][T15998] ? __pfx___might_resched+0x10/0x10 [ 3344.136062][T15998] ? __pfx_queue_folios_pte_range+0x10/0x10 [ 3344.136114][T15998] migrate_pages_batch+0x39c/0x3bd0 [ 3344.136165][T15998] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 3344.136224][T15998] ? __pfx_migrate_pages_batch+0x10/0x10 [ 3344.136278][T15998] ? __pfx_walk_pgd_range+0x10/0x10 [ 3344.136319][T15998] migrate_pages_sync+0x12d/0x8a0 [ 3344.136377][T15998] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 3344.136433][T15998] ? queue_pages_test_walk+0x279/0x410 [ 3344.136481][T15998] ? __pfx_migrate_pages_sync+0x10/0x10 [ 3344.136531][T15998] ? walk_page_test+0x9b/0x180 [ 3344.136572][T15998] ? walk_page_range_mm+0x235/0xb40 [ 3344.136613][T15998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3344.136663][T15998] migrate_pages+0x1b67/0x23b0 [ 3344.136714][T15998] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 3344.136773][T15998] ? __pfx_migrate_pages+0x10/0x10 [ 3344.136822][T15998] ? mas_next_slot+0x12d3/0x21b0 [ 3344.136868][T15998] ? rcu_is_watching+0x12/0xc0 [ 3344.136904][T15998] ? up_write+0x1b2/0x520 [ 3344.136954][T15998] do_mbind+0x6f0/0xf30 [ 3344.137007][T15998] ? __pfx_do_mbind+0x10/0x10 [ 3344.137057][T15998] ? ksys_write+0x190/0x250 [ 3344.137095][T15998] ? lock_release+0x201/0x2f0 [ 3344.137145][T15998] ? __pfx_get_nodes+0x10/0x10 [ 3344.137182][T15998] ? __fget_files+0x20e/0x3c0 [ 3344.137221][T15998] kernel_mbind+0x1e3/0x1f0 [ 3344.137272][T15998] ? __pfx_kernel_mbind+0x10/0x10 [ 3344.137328][T15998] do_syscall_64+0xcd/0x490 [ 3344.137382][T15998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3344.137415][T15998] RIP: 0033:0x7f0c2a18ebe9 [ 3344.137438][T15998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3344.137471][T15998] RSP: 002b:00007f0c2b04f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 3344.137501][T15998] RAX: ffffffffffffffda RBX: 00007f0c2a3b6180 RCX: 00007f0c2a18ebe9 [ 3344.137523][T15998] RDX: 0000000100000000 RSI: 0000000100000004 RDI: 0000000000002000 [ 3344.137542][T15998] RBP: 00007f0c2b04f090 R08: 0000000000000006 R09: 0000000000000002 [ 3344.137561][T15998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3344.137580][T15998] R13: 00007f0c2a3b6218 R14: 00007f0c2a3b6180 R15: 00007ffc75f08978 [ 3344.137610][T15998] [ 3344.506821][ C1] vkms_vblank_simulate: vblank timer overrun [ 3344.693236][T15998] bond0: option all_slaves_active: invalid value () [ 3346.295516][T16027] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3347.938406][T16049] FAULT_INJECTION: forcing a failure. [ 3347.938406][T16049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3347.951838][T16049] CPU: 0 UID: 0 PID: 16049 Comm: syz.1.6873 Not tainted syzkaller #0 PREEMPT(full) [ 3347.951871][T16049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3347.951887][T16049] Call Trace: [ 3347.951894][T16049] [ 3347.951903][T16049] dump_stack_lvl+0x16c/0x1f0 [ 3347.951937][T16049] should_fail_ex+0x512/0x640 [ 3347.951975][T16049] _copy_to_iter+0x463/0x16f0 [ 3347.952000][T16049] ? __pfx__copy_to_iter+0x10/0x10 [ 3347.952025][T16049] ? snd_mixer_oss_proc_read+0x218/0x330 [ 3347.952065][T16049] seq_read_iter+0xcf8/0x12c0 [ 3347.952094][T16049] seq_read+0x3a3/0x570 [ 3347.952115][T16049] ? __pfx_seq_read+0x10/0x10 [ 3347.952137][T16049] ? rcu_is_watching+0x12/0xc0 [ 3347.952163][T16049] ? lock_release+0x201/0x2f0 [ 3347.952198][T16049] ? common_file_perm+0x1a9/0x340 [ 3347.952229][T16049] ? __pfx_seq_read+0x10/0x10 [ 3347.952251][T16049] proc_reg_read+0x23d/0x330 [ 3347.952290][T16049] ? __pfx_proc_reg_read+0x10/0x10 [ 3347.952323][T16049] vfs_read+0x1e1/0xcf0 [ 3347.952351][T16049] ? __pfx___mutex_lock+0x10/0x10 [ 3347.952384][T16049] ? __pfx_vfs_read+0x10/0x10 [ 3347.952410][T16049] ? __fget_files+0x204/0x3c0 [ 3347.952435][T16049] ? rcu_is_watching+0x12/0xc0 [ 3347.952461][T16049] ? __fget_files+0x20e/0x3c0 [ 3347.952490][T16049] ksys_read+0x12a/0x250 [ 3347.952517][T16049] ? __pfx_ksys_read+0x10/0x10 [ 3347.952548][T16049] do_syscall_64+0xcd/0x490 [ 3347.952581][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3347.952606][T16049] RIP: 0033:0x7ff24cf8ebe9 [ 3347.952624][T16049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3347.952648][T16049] RSP: 002b:00007ff24b1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3347.952671][T16049] RAX: ffffffffffffffda RBX: 00007ff24d1b5fa0 RCX: 00007ff24cf8ebe9 [ 3347.952688][T16049] RDX: 0000000000000099 RSI: 0000200000000040 RDI: 0000000000000003 [ 3347.952703][T16049] RBP: 00007ff24b1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3347.952718][T16049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3347.952733][T16049] R13: 00007ff24d1b6038 R14: 00007ff24d1b5fa0 R15: 00007ffdc914f6e8 [ 3347.952756][T16049] [ 3348.645485][T16058] FAULT_INJECTION: forcing a failure. [ 3348.645485][T16058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3348.687001][T16058] CPU: 1 UID: 0 PID: 16058 Comm: syz.2.6876 Not tainted syzkaller #0 PREEMPT(full) [ 3348.687043][T16058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3348.687062][T16058] Call Trace: [ 3348.687074][T16058] [ 3348.687085][T16058] dump_stack_lvl+0x16c/0x1f0 [ 3348.687130][T16058] should_fail_ex+0x512/0x640 [ 3348.687178][T16058] _copy_to_user+0x32/0xd0 [ 3348.687208][T16058] simple_read_from_buffer+0xcb/0x170 [ 3348.687243][T16058] proc_fail_nth_read+0x197/0x240 [ 3348.687277][T16058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3348.687310][T16058] ? security_file_permission+0x71/0x210 [ 3348.687354][T16058] ? rw_verify_area+0xcf/0x6c0 [ 3348.687385][T16058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3348.687418][T16058] vfs_read+0x1e1/0xcf0 [ 3348.687456][T16058] ? __pfx___mutex_lock+0x10/0x10 [ 3348.687499][T16058] ? __pfx_vfs_read+0x10/0x10 [ 3348.687533][T16058] ? __fget_files+0x204/0x3c0 [ 3348.687564][T16058] ? rcu_is_watching+0x12/0xc0 [ 3348.687602][T16058] ? __fget_files+0x20e/0x3c0 [ 3348.687640][T16058] ksys_read+0x12a/0x250 [ 3348.687676][T16058] ? __pfx_ksys_read+0x10/0x10 [ 3348.687717][T16058] do_syscall_64+0xcd/0x490 [ 3348.687761][T16058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3348.687793][T16058] RIP: 0033:0x7f0c2a18d5fc [ 3348.687817][T16058] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3348.687850][T16058] RSP: 002b:00007f0c2b091030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3348.687880][T16058] RAX: ffffffffffffffda RBX: 00007f0c2a3b5fa0 RCX: 00007f0c2a18d5fc [ 3348.687901][T16058] RDX: 000000000000000f RSI: 00007f0c2b0910a0 RDI: 0000000000000004 [ 3348.687921][T16058] RBP: 00007f0c2b091090 R08: 0000000000000000 R09: 0000000000000000 [ 3348.687941][T16058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3348.687967][T16058] R13: 00007f0c2a3b6038 R14: 00007f0c2a3b5fa0 R15: 00007ffc75f08978 [ 3348.687999][T16058] [ 3348.890068][ C1] vkms_vblank_simulate: vblank timer overrun [ 3349.263824][T16070] ptrace attach of "./syz-executor exec"[1976] was attempted by "./syz-executor exec"[16070] [ 3349.856202][T16066] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 3350.147402][T16080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6880'. [ 3350.170987][T16081] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3350.216971][T16080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3350.217016][T16080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3350.276631][T16080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3350.276661][T16080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3350.347972][T16083] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input947 [ 3350.627648][T16081] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input948 [ 3350.893309][T16091] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3350.944352][T16089] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3351.150219][T16089] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input949 [ 3351.470618][T16101] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3351.581400][T16095] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input950 [ 3351.870265][T16102] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input951 [ 3351.966189][T16101] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input952 [ 3352.368105][T16113] FAULT_INJECTION: forcing a failure. [ 3352.368105][T16113] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3352.381569][T16113] CPU: 0 UID: 0 PID: 16113 Comm: syz.3.6888 Not tainted syzkaller #0 PREEMPT(full) [ 3352.381611][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3352.381631][T16113] Call Trace: [ 3352.381642][T16113] [ 3352.381654][T16113] dump_stack_lvl+0x16c/0x1f0 [ 3352.381697][T16113] should_fail_ex+0x512/0x640 [ 3352.381752][T16113] should_fail_alloc_page+0xe7/0x130 [ 3352.381799][T16113] prepare_alloc_pages+0x3c2/0x610 [ 3352.381850][T16113] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 3352.381892][T16113] ? up_write+0x1b2/0x520 [ 3352.381942][T16113] ? process_measurement+0x1e6/0x23e0 [ 3352.381979][T16113] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3352.382029][T16113] ? __pfx_process_measurement+0x10/0x10 [ 3352.382059][T16113] ? tomoyo_check_open_permission+0x20e/0x3c0 [ 3352.382107][T16113] ? rcu_is_watching+0x12/0xc0 [ 3352.382141][T16113] ? unwind_next_frame+0x3f4/0x20a0 [ 3352.382174][T16113] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3352.382225][T16113] ? policy_nodemask+0xea/0x4e0 [ 3352.382269][T16113] alloc_pages_mpol+0x1fb/0x550 [ 3352.382313][T16113] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3352.382357][T16113] ? is_bpf_text_address+0x94/0x1a0 [ 3352.382397][T16113] ? kernel_text_address+0x8d/0x100 [ 3352.382429][T16113] alloc_pages_noprof+0x131/0x390 [ 3352.382473][T16113] __pmd_alloc+0x3b/0x930 [ 3352.382522][T16113] __handle_mm_fault+0xa06/0x2a50 [ 3352.382556][T16113] ? mt_find+0x3ef/0xa30 [ 3352.382598][T16113] ? __pfx___handle_mm_fault+0x10/0x10 [ 3352.382629][T16113] ? __pfx_mt_find+0x10/0x10 [ 3352.382673][T16113] ? __pfx__kstrtoull+0x10/0x10 [ 3352.382721][T16113] ? find_vma+0xbf/0x140 [ 3352.382763][T16113] ? __pfx_find_vma+0x10/0x10 [ 3352.382808][T16113] handle_mm_fault+0x589/0xd10 [ 3352.382842][T16113] ? __bpf_trace_exceptions+0x1/0x40 [ 3352.382890][T16113] do_user_addr_fault+0x7a6/0x1370 [ 3352.382945][T16113] ? rcu_is_watching+0x12/0xc0 [ 3352.382980][T16113] exc_page_fault+0x5c/0xb0 [ 3352.383024][T16113] asm_exc_page_fault+0x26/0x30 [ 3352.383057][T16113] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 3352.383089][T16113] Code: c4 10 e9 14 1f 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 3352.383121][T16113] RSP: 0018:ffffc90017297d70 EFLAGS: 00050202 [ 3352.383148][T16113] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 3352.383167][T16113] RDX: fffff52002e52fbc RSI: 0000000000000000 RDI: ffffc90017297de0 [ 3352.383187][T16113] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52002e52fbc [ 3352.383206][T16113] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 3352.383223][T16113] R13: ffffc90017297de0 R14: 0000000000000000 R15: 0000000000000000 [ 3352.383252][T16113] _copy_from_user+0x98/0xd0 [ 3352.383307][T16113] do_sock_getsockopt+0x3ca/0x440 [ 3352.383360][T16113] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 3352.383409][T16113] ? lock_release+0x201/0x2f0 [ 3352.383460][T16113] __sys_getsockopt+0x123/0x1b0 [ 3352.383505][T16113] __x64_sys_getsockopt+0xbd/0x160 [ 3352.383546][T16113] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 3352.383597][T16113] do_syscall_64+0xcd/0x490 [ 3352.383640][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3352.383673][T16113] RIP: 0033:0x7f198d78ebe9 [ 3352.383697][T16113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3352.383728][T16113] RSP: 002b:00007f198e6ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 3352.383759][T16113] RAX: ffffffffffffffda RBX: 00007f198d9b5fa0 RCX: 00007f198d78ebe9 [ 3352.383781][T16113] RDX: 0000000000000001 RSI: 000000000000006a RDI: 0000000000000003 [ 3352.383800][T16113] RBP: 00007f198e6ad090 R08: 0000000000000000 R09: 0000000000000000 [ 3352.383820][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3352.383839][T16113] R13: 00007f198d9b6038 R14: 00007f198d9b5fa0 R15: 00007ffcc39d8f48 [ 3352.383870][T16113] [ 3353.802351][T16125] __vm_enough_memory: pid: 16125, comm: syz.0.6892, bytes: 4398046511104 not enough memory for the allocation [ 3354.312003][T16145] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3354.439493][T16149] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3354.606365][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6899'. [ 3354.669948][T16149] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input953 [ 3354.795364][T16157] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input954 [ 3354.974621][T16158] mmap: syz.3.6901 (16158) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 3355.117385][T16158] random: crng reseeded on system resumption [ 3355.940338][T16172] FAULT_INJECTION: forcing a failure. [ 3355.940338][T16172] name failslab, interval 1, probability 0, space 0, times 0 [ 3356.009044][T16172] CPU: 0 UID: 0 PID: 16172 Comm: syz.2.6903 Not tainted syzkaller #0 PREEMPT(full) [ 3356.009077][T16172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3356.009092][T16172] Call Trace: [ 3356.009100][T16172] [ 3356.009109][T16172] dump_stack_lvl+0x16c/0x1f0 [ 3356.009142][T16172] should_fail_ex+0x512/0x640 [ 3356.009176][T16172] ? tomoyo_encode2+0x100/0x3e0 [ 3356.009209][T16172] should_failslab+0xc2/0x120 [ 3356.009239][T16172] __kmalloc_noprof+0xd2/0x510 [ 3356.009265][T16172] ? d_absolute_path+0x136/0x1a0 [ 3356.009299][T16172] tomoyo_encode2+0x100/0x3e0 [ 3356.009332][T16172] tomoyo_encode+0x29/0x50 [ 3356.009369][T16172] tomoyo_realpath_from_path+0x18f/0x6e0 [ 3356.009409][T16172] tomoyo_path_number_perm+0x245/0x580 [ 3356.009438][T16172] ? tomoyo_path_number_perm+0x237/0x580 [ 3356.009469][T16172] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3356.009500][T16172] ? __pfx__kstrtoull+0x10/0x10 [ 3356.009540][T16172] ? kstrtouint_from_user+0x13c/0x1d0 [ 3356.009575][T16172] ? rcu_is_watching+0x12/0xc0 [ 3356.009602][T16172] ? from_kuid+0x8d/0xd0 [ 3356.009638][T16172] ? __pfx_from_kuid+0x10/0x10 [ 3356.009673][T16172] ? rcu_is_watching+0x12/0xc0 [ 3356.009699][T16172] tomoyo_path_chown+0x173/0x1b0 [ 3356.009722][T16172] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 3356.009743][T16172] ? __pfx_make_vfsgid+0x10/0x10 [ 3356.009777][T16172] ? from_vfsuid+0xea/0x140 [ 3356.009810][T16172] ? __pfx_from_vfsuid+0x10/0x10 [ 3356.009846][T16172] security_path_chown+0x12a/0x2e0 [ 3356.009876][T16172] chown_common+0x3d3/0x680 [ 3356.009913][T16172] ? __pfx_chown_common+0x10/0x10 [ 3356.009947][T16172] ? __fget_files+0x204/0x3c0 [ 3356.009978][T16172] ? preempt_count_add+0x76/0x150 [ 3356.010015][T16172] ksys_fchown+0x11a/0x190 [ 3356.010051][T16172] __x64_sys_fchown+0x72/0xb0 [ 3356.010087][T16172] do_syscall_64+0xcd/0x490 [ 3356.010121][T16172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3356.010145][T16172] RIP: 0033:0x7f0c2a18ebe9 [ 3356.010163][T16172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3356.010186][T16172] RSP: 002b:00007f0c2b091038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 3356.010209][T16172] RAX: ffffffffffffffda RBX: 00007f0c2a3b5fa0 RCX: 00007f0c2a18ebe9 [ 3356.010225][T16172] RDX: 0000000000000005 RSI: 0000000000000e5a RDI: 0000000000000003 [ 3356.010240][T16172] RBP: 00007f0c2b091090 R08: 0000000000000000 R09: 0000000000000000 [ 3356.010255][T16172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3356.010269][T16172] R13: 00007f0c2a3b6038 R14: 00007f0c2a3b5fa0 R15: 00007ffc75f08978 [ 3356.010293][T16172] [ 3356.014797][T16172] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3356.754501][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6904'. [ 3356.851760][T16183] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3356.997608][T16187] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input955 [ 3357.115076][T16190] FAULT_INJECTION: forcing a failure. [ 3357.115076][T16190] name failslab, interval 1, probability 0, space 0, times 0 [ 3357.293075][T16190] CPU: 0 UID: 0 PID: 16190 Comm: syz.2.6909 Not tainted syzkaller #0 PREEMPT(full) [ 3357.293117][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3357.293137][T16190] Call Trace: [ 3357.293148][T16190] [ 3357.293160][T16190] dump_stack_lvl+0x16c/0x1f0 [ 3357.293204][T16190] should_fail_ex+0x512/0x640 [ 3357.293253][T16190] should_failslab+0xc2/0x120 [ 3357.293302][T16190] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 3357.293340][T16190] ? __alloc_skb+0x2b2/0x380 [ 3357.293381][T16190] __alloc_skb+0x2b2/0x380 [ 3357.293419][T16190] ? __pfx___alloc_skb+0x10/0x10 [ 3357.293467][T16190] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 3357.293513][T16190] netlink_alloc_large_skb+0x69/0x130 [ 3357.293560][T16190] netlink_sendmsg+0x6a1/0xdd0 [ 3357.293606][T16190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3357.293653][T16190] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 3357.293690][T16190] ____sys_sendmsg+0xa98/0xc70 [ 3357.293742][T16190] ? copy_msghdr_from_user+0x10a/0x160 [ 3357.293784][T16190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3357.293839][T16190] ? __pfx__kstrtoull+0x10/0x10 [ 3357.293879][T16190] ? rcu_is_watching+0x12/0xc0 [ 3357.293915][T16190] ___sys_sendmsg+0x134/0x1d0 [ 3357.293957][T16190] ? __pfx____sys_sendmsg+0x10/0x10 [ 3357.294007][T16190] ? rcu_is_watching+0x12/0xc0 [ 3357.294052][T16190] __sys_sendmmsg+0x200/0x420 [ 3357.294097][T16190] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3357.294137][T16190] ? lock_release+0x201/0x2f0 [ 3357.294183][T16190] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3357.294234][T16190] ? fput+0x9b/0xd0 [ 3357.294279][T16190] ? ksys_write+0x1ac/0x250 [ 3357.294316][T16190] ? __pfx_ksys_write+0x10/0x10 [ 3357.294357][T16190] __x64_sys_sendmmsg+0x9c/0x100 [ 3357.294399][T16190] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 3357.294461][T16190] do_syscall_64+0xcd/0x490 [ 3357.294505][T16190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3357.294539][T16190] RIP: 0033:0x7f0c2a18ebe9 [ 3357.294563][T16190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3357.294594][T16190] RSP: 002b:00007f0c2b091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3357.294624][T16190] RAX: ffffffffffffffda RBX: 00007f0c2a3b5fa0 RCX: 00007f0c2a18ebe9 [ 3357.294645][T16190] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 3357.294665][T16190] RBP: 00007f0c2b091090 R08: 0000000000000000 R09: 0000000000000000 [ 3357.294684][T16190] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 3357.294704][T16190] R13: 00007f0c2a3b6038 R14: 00007f0c2a3b5fa0 R15: 00007ffc75f08978 [ 3357.294735][T16190] [ 3357.968155][T16202] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3358.396819][T16205] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input956 [ 3358.478475][T16208] random: crng reseeded on system resumption [ 3358.726773][T16210] input: f as /devices/virtual/input/input957 [ 3358.759346][T16200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3358.768250][T16200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3360.325464][T16236] FAULT_INJECTION: forcing a failure. [ 3360.325464][T16236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3360.339538][T16236] CPU: 0 UID: 0 PID: 16236 Comm: syz.3.6915 Not tainted syzkaller #0 PREEMPT(full) [ 3360.339578][T16236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3360.339614][T16236] Call Trace: [ 3360.339625][T16236] [ 3360.339636][T16236] dump_stack_lvl+0x16c/0x1f0 [ 3360.339680][T16236] should_fail_ex+0x512/0x640 [ 3360.339730][T16236] _copy_to_user+0x32/0xd0 [ 3360.339760][T16236] simple_read_from_buffer+0xcb/0x170 [ 3360.339794][T16236] proc_fail_nth_read+0x197/0x240 [ 3360.339828][T16236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3360.339862][T16236] ? security_file_permission+0x71/0x210 [ 3360.339907][T16236] ? rw_verify_area+0xcf/0x6c0 [ 3360.339939][T16236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3360.339973][T16236] vfs_read+0x1e1/0xcf0 [ 3360.340010][T16236] ? __pfx___mutex_lock+0x10/0x10 [ 3360.340054][T16236] ? __pfx_vfs_read+0x10/0x10 [ 3360.340089][T16236] ? __fget_files+0x204/0x3c0 [ 3360.340122][T16236] ? rcu_is_watching+0x12/0xc0 [ 3360.340159][T16236] ? __fget_files+0x20e/0x3c0 [ 3360.340199][T16236] ksys_read+0x12a/0x250 [ 3360.340235][T16236] ? __pfx_ksys_read+0x10/0x10 [ 3360.340278][T16236] do_syscall_64+0xcd/0x490 [ 3360.340322][T16236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3360.340355][T16236] RIP: 0033:0x7f198d78d5fc [ 3360.340379][T16236] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3360.340411][T16236] RSP: 002b:00007f198e629030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3360.340442][T16236] RAX: ffffffffffffffda RBX: 00007f198d9b6360 RCX: 00007f198d78d5fc [ 3360.340464][T16236] RDX: 000000000000000f RSI: 00007f198e6290a0 RDI: 000000000000000c [ 3360.340484][T16236] RBP: 00007f198e629090 R08: 0000000000000000 R09: 0000000000000000 [ 3360.340504][T16236] R10: 00a4000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 3360.340525][T16236] R13: 00007f198d9b63f8 R14: 00007f198d9b6360 R15: 00007ffcc39d8f48 [ 3360.340557][T16236] [ 3361.550833][T16247] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3361.810732][T16258] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input958 [ 3361.861692][T16254] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6919'. [ 3362.075523][T16265] FAULT_INJECTION: forcing a failure. [ 3362.075523][T16265] name failslab, interval 1, probability 0, space 0, times 0 [ 3362.216122][T16265] CPU: 0 UID: 0 PID: 16265 Comm: syz.0.6920 Not tainted syzkaller #0 PREEMPT(full) [ 3362.216163][T16265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3362.216179][T16265] Call Trace: [ 3362.216189][T16265] [ 3362.216199][T16265] dump_stack_lvl+0x16c/0x1f0 [ 3362.216238][T16265] should_fail_ex+0x512/0x640 [ 3362.216281][T16265] should_failslab+0xc2/0x120 [ 3362.216318][T16265] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3362.216351][T16265] ? rcu_is_watching+0x12/0xc0 [ 3362.216378][T16265] ? mas_alloc_nodes+0x18b/0x8b0 [ 3362.216419][T16265] mas_alloc_nodes+0x18b/0x8b0 [ 3362.216452][T16265] mas_node_count_gfp+0x105/0x130 [ 3362.216484][T16265] mas_preallocate+0x7e0/0xde0 [ 3362.216524][T16265] ? __memcg_slab_post_alloc_hook+0x402/0x960 [ 3362.216566][T16265] ? __pfx_mas_preallocate+0x10/0x10 [ 3362.216612][T16265] ? anon_vma_name+0x81/0x2f0 [ 3362.216654][T16265] __split_vma+0x34a/0x1070 [ 3362.216686][T16265] ? __pfx___split_vma+0x10/0x10 [ 3362.216720][T16265] ? __pfx_mas_prev+0x10/0x10 [ 3362.216759][T16265] vms_gather_munmap_vmas+0x3b1/0x1340 [ 3362.216794][T16265] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 3362.216828][T16265] ? mas_walk+0x6f5/0x980 [ 3362.216863][T16265] __mmap_region+0x436/0x27b0 [ 3362.216897][T16265] ? sched_clock_cpu+0x6c/0x530 [ 3362.216930][T16265] ? __pfx___mmap_region+0x10/0x10 [ 3362.216968][T16265] ? rcu_is_watching+0x12/0xc0 [ 3362.216995][T16265] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 3362.217039][T16265] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 3362.217070][T16265] ? rcu_is_watching+0x12/0xc0 [ 3362.217097][T16265] ? trace_sched_exit_tp+0xd1/0x120 [ 3362.217141][T16265] ? __schedule+0x11a3/0x5de0 [ 3362.217171][T16265] ? arch_stack_walk+0xa6/0x100 [ 3362.217225][T16265] ? trace_cap_capable+0x18d/0x200 [ 3362.217255][T16265] ? cap_capable+0xb3/0x250 [ 3362.217284][T16265] mmap_region+0x1ab/0x3f0 [ 3362.217317][T16265] ? __get_unmapped_area+0x267/0x440 [ 3362.217360][T16265] do_mmap+0xa3e/0x1210 [ 3362.217411][T16265] ? __pfx_do_mmap+0x10/0x10 [ 3362.217452][T16265] ? __pfx_down_write_killable+0x10/0x10 [ 3362.217496][T16265] vm_mmap_pgoff+0x29e/0x470 [ 3362.217538][T16265] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3362.217579][T16265] ? __fget_files+0x20e/0x3c0 [ 3362.217614][T16265] ksys_mmap_pgoff+0x7d/0x5c0 [ 3362.217653][T16265] ? __pfx_ksys_write+0x10/0x10 [ 3362.217688][T16265] __x64_sys_mmap+0x125/0x190 [ 3362.217734][T16265] do_syscall_64+0xcd/0x490 [ 3362.217772][T16265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3362.217800][T16265] RIP: 0033:0x7f388018ebe9 [ 3362.217821][T16265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3362.217848][T16265] RSP: 002b:00007f3881012038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3362.217874][T16265] RAX: ffffffffffffffda RBX: 00007f38803b6360 RCX: 00007f388018ebe9 [ 3362.217893][T16265] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 3362.217911][T16265] RBP: 00007f3881012090 R08: 0000000000000401 R09: 0000000000008000 [ 3362.217928][T16265] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 3362.217945][T16265] R13: 00007f38803b63f8 R14: 00007f38803b6360 R15: 00007ffdf6b09628 [ 3362.217972][T16265] [ 3363.217776][T16273] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3364.430703][T16290] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3364.794389][T16299] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input959 [ 3367.198364][T16332] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3367.493047][T16333] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input960 [ 3367.522175][T16339] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3367.559807][T16340] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input961 [ 3367.711138][T16342] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input962 [ 3370.206513][T16371] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3370.590273][T16377] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input963 [ 3371.734183][T16395] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 3372.153698][T16396] FAULT_INJECTION: forcing a failure. [ 3372.153698][T16396] name failslab, interval 1, probability 0, space 0, times 0 [ 3372.210851][T16396] CPU: 0 UID: 0 PID: 16396 Comm: syz.0.6943 Not tainted syzkaller #0 PREEMPT(full) [ 3372.210900][T16396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3372.210945][T16396] Call Trace: [ 3372.210956][T16396] [ 3372.210969][T16396] dump_stack_lvl+0x16c/0x1f0 [ 3372.211017][T16396] should_fail_ex+0x512/0x640 [ 3372.211069][T16396] should_failslab+0xc2/0x120 [ 3372.211113][T16396] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 3372.211154][T16396] ? __alloc_skb+0x2b2/0x380 [ 3372.211196][T16396] __alloc_skb+0x2b2/0x380 [ 3372.211235][T16396] ? __pfx___alloc_skb+0x10/0x10 [ 3372.211272][T16396] ? ip_dst_mtu_maybe_forward.constprop.0+0x30a/0x6e0 [ 3372.211327][T16396] ? rcu_watching_snap_stopped_since+0x100/0x110 [ 3372.211362][T16396] ? lock_release+0x201/0x2f0 [ 3372.211403][T16396] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3372.211451][T16396] sctp_packet_transmit+0x1ca/0x3040 [ 3372.211509][T16396] ? sctp_outq_flush+0xb4e/0x3350 [ 3372.211567][T16396] ? rcu_is_watching+0x12/0xc0 [ 3372.211598][T16396] ? lock_release+0x201/0x2f0 [ 3372.211641][T16396] sctp_outq_flush+0xb68/0x3350 [ 3372.211688][T16396] ? rcu_is_watching+0x12/0xc0 [ 3372.211722][T16396] ? __pfx_sctp_outq_flush+0x10/0x10 [ 3372.211770][T16396] ? sctp_outq_tail+0x671/0xa30 [ 3372.211814][T16396] ? sctp_sf_do_9_2_prm_shutdown+0xe7/0x150 [ 3372.211864][T16396] sctp_do_sm+0x1792/0x5c80 [ 3372.211915][T16396] ? arch_stack_walk+0xa6/0x100 [ 3372.211948][T16396] ? __pfx_sctp_do_sm+0x10/0x10 [ 3372.212014][T16396] ? rcu_is_watching+0x12/0xc0 [ 3372.212042][T16396] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 3372.212088][T16396] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3372.212123][T16396] sctp_primitive_SHUTDOWN+0x9f/0xd0 [ 3372.212169][T16396] sctp_close+0x3ff/0x940 [ 3372.212205][T16396] ? __pfx_sctp_close+0x10/0x10 [ 3372.212237][T16396] ? lock_acquire+0x2cd/0x350 [ 3372.212273][T16396] ? __pfx___might_resched+0x10/0x10 [ 3372.212304][T16396] ? ip_mc_drop_socket+0x1f/0x280 [ 3372.212344][T16396] ? down_write+0x14d/0x200 [ 3372.212384][T16396] inet_release+0xed/0x200 [ 3372.212411][T16396] inet6_release+0x4f/0x70 [ 3372.212453][T16396] __sock_release+0xb3/0x270 [ 3372.212492][T16396] ? __pfx_sock_close+0x10/0x10 [ 3372.212537][T16396] sock_close+0x1c/0x30 [ 3372.212574][T16396] __fput+0x3ff/0xb70 [ 3372.212618][T16396] task_work_run+0x14d/0x240 [ 3372.212665][T16396] ? __pfx_task_work_run+0x10/0x10 [ 3372.212709][T16396] ? __pfx___do_sys_close_range+0x10/0x10 [ 3372.212747][T16396] exit_to_user_mode_loop+0xeb/0x110 [ 3372.212791][T16396] do_syscall_64+0x3f6/0x490 [ 3372.212830][T16396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3372.212858][T16396] RIP: 0033:0x7f388018ebe9 [ 3372.212879][T16396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3372.212906][T16396] RSP: 002b:00007f3881075038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 3372.212932][T16396] RAX: 0000000000000000 RBX: 00007f38803b6090 RCX: 00007f388018ebe9 [ 3372.212951][T16396] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 3372.212968][T16396] RBP: 00007f3880211e19 R08: 0000000000000000 R09: 0000000000000000 [ 3372.212985][T16396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3372.213002][T16396] R13: 00007f38803b6128 R14: 00007f38803b6090 R15: 00007ffdf6b09628 [ 3372.213030][T16396] [ 3373.856867][T16413] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3373.875773][T16415] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3374.147796][T16415] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input964 [ 3374.306255][T16410] ptrace attach of "./syz-executor exec"[1976] was attempted by "./syz-executor exec"[16410] [ 3375.982219][T16448] FAULT_INJECTION: forcing a failure. [ 3375.982219][T16448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3375.995465][T16448] CPU: 1 UID: 0 PID: 16448 Comm: syz.0.6954 Not tainted syzkaller #0 PREEMPT(full) [ 3375.995507][T16448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3375.995526][T16448] Call Trace: [ 3375.995536][T16448] [ 3375.995551][T16448] dump_stack_lvl+0x16c/0x1f0 [ 3375.995594][T16448] should_fail_ex+0x512/0x640 [ 3375.995642][T16448] _copy_from_user+0x2e/0xd0 [ 3375.995692][T16448] copy_msghdr_from_user+0x98/0x160 [ 3375.995733][T16448] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3375.995778][T16448] ? kfree+0x24f/0x4d0 [ 3375.995805][T16448] ? __pfx__kstrtoull+0x10/0x10 [ 3375.995860][T16448] ___sys_sendmsg+0xfe/0x1d0 [ 3375.995902][T16448] ? __pfx____sys_sendmsg+0x10/0x10 [ 3375.995950][T16448] ? rcu_is_watching+0x12/0xc0 [ 3375.995991][T16448] ? __pfx___might_resched+0x10/0x10 [ 3375.996027][T16448] __sys_sendmmsg+0x200/0x420 [ 3375.996069][T16448] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3375.996110][T16448] ? lock_release+0x201/0x2f0 [ 3375.996158][T16448] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3375.996210][T16448] ? fput+0x9b/0xd0 [ 3375.996254][T16448] ? ksys_write+0x1ac/0x250 [ 3375.996289][T16448] ? __pfx_ksys_write+0x10/0x10 [ 3375.996330][T16448] __x64_sys_sendmmsg+0x9c/0x100 [ 3375.996379][T16448] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 3375.996431][T16448] do_syscall_64+0xcd/0x490 [ 3375.996472][T16448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3375.996505][T16448] RIP: 0033:0x7f388018ebe9 [ 3375.996529][T16448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3375.996560][T16448] RSP: 002b:00007f3881033038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3375.996589][T16448] RAX: ffffffffffffffda RBX: 00007f38803b6270 RCX: 00007f388018ebe9 [ 3375.996610][T16448] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004 [ 3375.996628][T16448] RBP: 00007f3881033090 R08: 0000000000000000 R09: 0000000000000000 [ 3375.996646][T16448] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 3375.996665][T16448] R13: 00007f38803b6308 R14: 00007f38803b6270 R15: 00007ffdf6b09628 [ 3375.996695][T16448] [ 3376.206484][ C1] vkms_vblank_simulate: vblank timer overrun [ 3376.369587][T16437] netlink: 186 bytes leftover after parsing attributes in process `syz.2.6953'. [ 3377.080370][T16469] FAULT_INJECTION: forcing a failure. [ 3377.080370][T16469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3377.107187][T16469] CPU: 1 UID: 0 PID: 16469 Comm: syz.2.6958 Not tainted syzkaller #0 PREEMPT(full) [ 3377.107225][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3377.107240][T16469] Call Trace: [ 3377.107248][T16469] [ 3377.107257][T16469] dump_stack_lvl+0x16c/0x1f0 [ 3377.107292][T16469] should_fail_ex+0x512/0x640 [ 3377.107328][T16469] _copy_to_user+0x32/0xd0 [ 3377.107349][T16469] simple_read_from_buffer+0xcb/0x170 [ 3377.107372][T16469] proc_fail_nth_read+0x197/0x240 [ 3377.107396][T16469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3377.107419][T16469] ? security_file_permission+0x71/0x210 [ 3377.107451][T16469] ? rw_verify_area+0xcf/0x6c0 [ 3377.107481][T16469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3377.107506][T16469] vfs_read+0x1e1/0xcf0 [ 3377.107534][T16469] ? __pfx___mutex_lock+0x10/0x10 [ 3377.107566][T16469] ? __pfx_vfs_read+0x10/0x10 [ 3377.107592][T16469] ? __fget_files+0x204/0x3c0 [ 3377.107617][T16469] ? rcu_is_watching+0x12/0xc0 [ 3377.107645][T16469] ? __fget_files+0x20e/0x3c0 [ 3377.107674][T16469] ksys_read+0x12a/0x250 [ 3377.107700][T16469] ? __pfx_ksys_read+0x10/0x10 [ 3377.107732][T16469] do_syscall_64+0xcd/0x490 [ 3377.107764][T16469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3377.107789][T16469] RIP: 0033:0x7f0c2a18d5fc [ 3377.107807][T16469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3377.107832][T16469] RSP: 002b:00007f0c2b070030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3377.107854][T16469] RAX: ffffffffffffffda RBX: 00007f0c2a3b6090 RCX: 00007f0c2a18d5fc [ 3377.107871][T16469] RDX: 000000000000000f RSI: 00007f0c2b0700a0 RDI: 000000000000000d [ 3377.107886][T16469] RBP: 00007f0c2b070090 R08: 0000000000000000 R09: 0000000000000000 [ 3377.107901][T16469] R10: 000000002f4a3a23 R11: 0000000000000246 R12: 0000000000000001 [ 3377.107916][T16469] R13: 00007f0c2a3b6128 R14: 00007f0c2a3b6090 R15: 00007ffc75f08978 [ 3377.107939][T16469] [ 3377.309902][ C1] vkms_vblank_simulate: vblank timer overrun [ 3378.102208][T16491] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3378.179131][T16484] FAULT_INJECTION: forcing a failure. [ 3378.179131][T16484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3378.295807][T16484] CPU: 1 UID: 0 PID: 16484 Comm: syz.2.6960 Not tainted syzkaller #0 PREEMPT(full) [ 3378.295840][T16484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3378.295855][T16484] Call Trace: [ 3378.295863][T16484] [ 3378.295872][T16484] dump_stack_lvl+0x16c/0x1f0 [ 3378.295906][T16484] should_fail_ex+0x512/0x640 [ 3378.295941][T16484] _copy_to_iter+0x29f/0x16f0 [ 3378.295965][T16484] ? __pfx__copy_to_iter+0x10/0x10 [ 3378.295986][T16484] ? __pfx___schedule+0x10/0x10 [ 3378.296016][T16484] simple_copy_to_iter+0x46/0x90 [ 3378.296040][T16484] __skb_datagram_iter+0x129/0x900 [ 3378.296063][T16484] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 3378.296088][T16484] ? __lock_sock+0x1f4/0x260 [ 3378.296117][T16484] __skb_datagram_iter+0x751/0x900 [ 3378.296140][T16484] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 3378.296167][T16484] skb_copy_datagram_iter+0x40/0x50 [ 3378.296192][T16484] sctp_recvmsg+0x258/0xe30 [ 3378.296230][T16484] ? __pfx_sctp_recvmsg+0x10/0x10 [ 3378.296266][T16484] ? lock_release+0x201/0x2f0 [ 3378.296300][T16484] ? __pfx_sctp_recvmsg+0x10/0x10 [ 3378.296333][T16484] inet_recvmsg+0x46f/0x6a0 [ 3378.296358][T16484] ? __pfx_inet_recvmsg+0x10/0x10 [ 3378.296381][T16484] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 3378.296410][T16484] sock_recvmsg+0x1b2/0x250 [ 3378.296455][T16484] sock_read_iter+0x2b9/0x3b0 [ 3378.296492][T16484] ? __pfx_sock_read_iter+0x10/0x10 [ 3378.296529][T16484] ? lock_release+0x201/0x2f0 [ 3378.296565][T16484] ? bpf_lsm_file_permission+0x9/0x10 [ 3378.296601][T16484] ? security_file_permission+0x71/0x210 [ 3378.296635][T16484] ? rw_verify_area+0xcf/0x6c0 [ 3378.296661][T16484] vfs_read+0xa95/0xcf0 [ 3378.296690][T16484] ? __pfx_vfs_read+0x10/0x10 [ 3378.296717][T16484] ? lock_release+0x201/0x2f0 [ 3378.296754][T16484] ksys_read+0x1f8/0x250 [ 3378.296781][T16484] ? __pfx_ksys_read+0x10/0x10 [ 3378.296812][T16484] do_syscall_64+0xcd/0x490 [ 3378.296850][T16484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3378.296874][T16484] RIP: 0033:0x7f0c2a18ebe9 [ 3378.296892][T16484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3378.296916][T16484] RSP: 002b:00007f0c2b091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3378.296938][T16484] RAX: ffffffffffffffda RBX: 00007f0c2a3b5fa0 RCX: 00007f0c2a18ebe9 [ 3378.296955][T16484] RDX: 0000000000001f40 RSI: 0000000000000000 RDI: 0000000000000003 [ 3378.296970][T16484] RBP: 00007f0c2b091090 R08: 0000000000000000 R09: 0000000000000000 [ 3378.296985][T16484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3378.296999][T16484] R13: 00007f0c2a3b6038 R14: 00007f0c2a3b5fa0 R15: 00007ffc75f08978 [ 3378.297022][T16484] [ 3378.570133][ C1] vkms_vblank_simulate: vblank timer overrun [ 3380.666779][T16525] FAULT_INJECTION: forcing a failure. [ 3380.666779][T16525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3380.718825][T16525] CPU: 0 UID: 0 PID: 16525 Comm: syz.2.6967 Not tainted syzkaller #0 PREEMPT(full) [ 3380.718866][T16525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3380.718885][T16525] Call Trace: [ 3380.718896][T16525] [ 3380.718908][T16525] dump_stack_lvl+0x16c/0x1f0 [ 3380.718953][T16525] should_fail_ex+0x512/0x640 [ 3380.719002][T16525] should_fail_alloc_page+0xe7/0x130 [ 3380.719060][T16525] prepare_alloc_pages+0x3c2/0x610 [ 3380.719109][T16525] ? rcu_is_watching+0x12/0xc0 [ 3380.719143][T16525] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 3380.719194][T16525] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3380.719235][T16525] ? rcu_is_watching+0x12/0xc0 [ 3380.719267][T16525] ? lock_release+0x201/0x2f0 [ 3380.719310][T16525] ? rcu_is_watching+0x12/0xc0 [ 3380.719346][T16525] ? rb_get_reader_page+0x6bb/0x1300 [ 3380.719392][T16525] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3380.719443][T16525] ? policy_nodemask+0xea/0x4e0 [ 3380.719486][T16525] alloc_pages_mpol+0x1fb/0x550 [ 3380.719530][T16525] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3380.719574][T16525] ? do_raw_spin_lock+0x12c/0x2b0 [ 3380.719626][T16525] folio_alloc_mpol_noprof+0x36/0x2f0 [ 3380.719677][T16525] vma_alloc_folio_noprof+0xed/0x1e0 [ 3380.719727][T16525] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 3380.719775][T16525] ? ring_buffer_empty_cpu+0x205/0x3b0 [ 3380.719813][T16525] ? rcu_is_watching+0x12/0xc0 [ 3380.719853][T16525] do_pte_missing+0x2230/0x3ba0 [ 3380.719893][T16525] __handle_mm_fault+0x152a/0x2a50 [ 3380.719932][T16525] ? __pfx___handle_mm_fault+0x10/0x10 [ 3380.719965][T16525] ? vma_start_read+0x2fc/0x870 [ 3380.719997][T16525] ? __pfx_vma_start_read+0x10/0x10 [ 3380.720035][T16525] ? lock_vma_under_rcu+0x1eb/0x530 [ 3380.720069][T16525] ? rcu_is_watching+0x12/0xc0 [ 3380.720106][T16525] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 3380.720146][T16525] handle_mm_fault+0x589/0xd10 [ 3380.720180][T16525] ? __bpf_trace_exceptions+0x1/0x40 [ 3380.720231][T16525] do_user_addr_fault+0x60c/0x1370 [ 3380.720284][T16525] ? rcu_is_watching+0x12/0xc0 [ 3380.720317][T16525] exc_page_fault+0x5c/0xb0 [ 3380.720355][T16525] asm_exc_page_fault+0x26/0x30 [ 3380.720386][T16525] RIP: 0033:0x7f0c2a13c21b [ 3380.720410][T16525] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 3380.720441][T16525] RSP: 002b:00007f0c2b04ce10 EFLAGS: 00010246 [ 3380.720467][T16525] RAX: 00007f0c2b04ef30 RBX: 00007f0c2a387640 RCX: 0000000000000000 [ 3380.720488][T16525] RDX: 00007f0c2b04ef78 RSI: 00007f0c2a1eeca8 RDI: 00007f0c2b04ce30 [ 3380.720510][T16525] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 3380.720530][T16525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3380.720550][T16525] R13: 00007f0c2a3b6218 R14: 00007f0c2a3b6180 R15: 00007ffc75f08978 [ 3380.720582][T16525] [ 3380.720889][T16525] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 3381.238771][T16537] FAULT_INJECTION: forcing a failure. [ 3381.238771][T16537] name failslab, interval 1, probability 0, space 0, times 0 [ 3381.251859][T16537] CPU: 0 UID: 0 PID: 16537 Comm: syz.1.6970 Not tainted syzkaller #0 PREEMPT(full) [ 3381.251900][T16537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3381.251920][T16537] Call Trace: [ 3381.251931][T16537] [ 3381.251943][T16537] dump_stack_lvl+0x16c/0x1f0 [ 3381.251998][T16537] should_fail_ex+0x512/0x640 [ 3381.252046][T16537] should_failslab+0xc2/0x120 [ 3381.252088][T16537] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3381.252127][T16537] ? __pfx_gid_cmp+0x10/0x10 [ 3381.252168][T16537] ? prepare_creds+0x2c/0x7d0 [ 3381.252218][T16537] prepare_creds+0x2c/0x7d0 [ 3381.252267][T16537] set_current_groups+0x15/0xd0 [ 3381.252313][T16537] __do_sys_setgroups+0x3db/0x4e0 [ 3381.252362][T16537] do_syscall_64+0xcd/0x490 [ 3381.252407][T16537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3381.252440][T16537] RIP: 0033:0x7ff24cf8ebe9 [ 3381.252464][T16537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3381.252496][T16537] RSP: 002b:00007ff24b193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 3381.252526][T16537] RAX: ffffffffffffffda RBX: 00007ff24d1b6270 RCX: 00007ff24cf8ebe9 [ 3381.252547][T16537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000e32 [ 3381.252566][T16537] RBP: 00007ff24b193090 R08: 0000000000000000 R09: 0000000000000000 [ 3381.252587][T16537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3381.252607][T16537] R13: 00007ff24d1b6308 R14: 00007ff24d1b6270 R15: 00007ffdc914f6e8 [ 3381.252639][T16537] [ 3382.119940][T16551] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3382.346572][T16552] netlink: 342 bytes leftover after parsing attributes in process `syz.1.6974'. [ 3382.365181][T16551] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input965 [ 3382.646542][T15765] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 3383.408109][T16573] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 3384.541434][T16595] FAULT_INJECTION: forcing a failure. [ 3384.541434][T16595] name failslab, interval 1, probability 0, space 0, times 0 [ 3384.605727][T16595] CPU: 0 UID: 0 PID: 16595 Comm: syz.3.6981 Not tainted syzkaller #0 PREEMPT(full) [ 3384.605772][T16595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3384.605792][T16595] Call Trace: [ 3384.605804][T16595] [ 3384.605817][T16595] dump_stack_lvl+0x16c/0x1f0 [ 3384.605866][T16595] should_fail_ex+0x512/0x640 [ 3384.605917][T16595] should_failslab+0xc2/0x120 [ 3384.605963][T16595] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3384.606004][T16595] ? copy_process+0x400f/0x7690 [ 3384.606058][T16595] copy_process+0x400f/0x7690 [ 3384.606101][T16595] ? preempt_schedule_thunk+0x16/0x30 [ 3384.606155][T16595] ? __pfx_copy_process+0x10/0x10 [ 3384.606199][T16595] ? rcu_is_watching+0x12/0xc0 [ 3384.606233][T16595] ? lock_release+0x201/0x2f0 [ 3384.606279][T16595] ? futex_private_hash_put+0x11c/0x300 [ 3384.606322][T16595] kernel_clone+0xfc/0x930 [ 3384.606365][T16595] ? __pfx_futex_wake+0x10/0x10 [ 3384.606414][T16595] ? __pfx_kernel_clone+0x10/0x10 [ 3384.606468][T16595] ? 0xffffffffff600000 [ 3384.606491][T16595] __do_sys_clone+0xce/0x120 [ 3384.606533][T16595] ? __pfx___do_sys_clone+0x10/0x10 [ 3384.606577][T16595] ? 0xffffffffff600000 [ 3384.606607][T16595] ? xfd_validate_state+0x61/0x180 [ 3384.606658][T16595] ? __pfx_ksys_read+0x10/0x10 [ 3384.606702][T16595] do_syscall_64+0xcd/0x490 [ 3384.606748][T16595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3384.606783][T16595] RIP: 0033:0x7f198d78ebe9 [ 3384.606809][T16595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3384.606844][T16595] RSP: 002b:00007f198e6ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3384.606876][T16595] RAX: ffffffffffffffda RBX: 00007f198d9b5fa0 RCX: 00007f198d78ebe9 [ 3384.606899][T16595] RDX: ffffffffffffffff RSI: 0000000000000005 RDI: 0000000000008001 [ 3384.606920][T16595] RBP: 00007f198d811e19 R08: 0000000000000006 R09: 0000000000000000 [ 3384.606940][T16595] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 3384.606961][T16595] R13: 00007f198d9b6038 R14: 00007f198d9b5fa0 R15: 00007ffcc39d8f48 [ 3384.606987][T16595] ? 0xffffffffff600000 [ 3384.607017][T16595] [ 3385.576326][T16606] FAULT_INJECTION: forcing a failure. [ 3385.576326][T16606] name failslab, interval 1, probability 0, space 0, times 0 [ 3385.590491][T16606] CPU: 0 UID: 0 PID: 16606 Comm: syz.2.6984 Not tainted syzkaller #0 PREEMPT(full) [ 3385.590539][T16606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3385.590561][T16606] Call Trace: [ 3385.590573][T16606] [ 3385.590586][T16606] dump_stack_lvl+0x16c/0x1f0 [ 3385.590635][T16606] should_fail_ex+0x512/0x640 [ 3385.590685][T16606] should_failslab+0xc2/0x120 [ 3385.590725][T16606] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3385.590761][T16606] ? rcu_is_watching+0x12/0xc0 [ 3385.590796][T16606] ? mas_dup_build.constprop.0+0x5f3/0x1740 [ 3385.590845][T16606] mas_dup_build.constprop.0+0x5f3/0x1740 [ 3385.590899][T16606] __mt_dup+0xeb/0x1f0 [ 3385.590948][T16606] ? __pfx___mt_dup+0x10/0x10 [ 3385.590982][T16606] ? rcu_is_watching+0x12/0xc0 [ 3385.591014][T16606] dup_mmap+0x373/0x21d0 [ 3385.591054][T16606] ? do_raw_spin_lock+0x12c/0x2b0 [ 3385.591094][T16606] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 3385.591128][T16606] ? __pfx_dup_mmap+0x10/0x10 [ 3385.591166][T16606] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 3385.591206][T16606] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3385.591238][T16606] ? __pfx___might_resched+0x10/0x10 [ 3385.591263][T16606] ? mm_init+0xd22/0x13a0 [ 3385.591292][T16606] copy_process+0x4081/0x7690 [ 3385.591322][T16606] ? preempt_schedule_thunk+0x16/0x30 [ 3385.591364][T16606] ? __pfx_copy_process+0x10/0x10 [ 3385.591394][T16606] ? rcu_is_watching+0x12/0xc0 [ 3385.591418][T16606] ? lock_release+0x201/0x2f0 [ 3385.591451][T16606] ? futex_private_hash_put+0x11c/0x300 [ 3385.591484][T16606] kernel_clone+0xfc/0x930 [ 3385.591514][T16606] ? __pfx_futex_wake+0x10/0x10 [ 3385.591550][T16606] ? __pfx_kernel_clone+0x10/0x10 [ 3385.591581][T16606] ? __pfx_vfs_writev+0x10/0x10 [ 3385.591614][T16606] ? 0xffffffffff600000 [ 3385.591631][T16606] __do_sys_clone+0xce/0x120 [ 3385.591662][T16606] ? __pfx___do_sys_clone+0x10/0x10 [ 3385.591695][T16606] ? 0xffffffffff600000 [ 3385.591716][T16606] ? xfd_validate_state+0x61/0x180 [ 3385.591753][T16606] ? __pfx_do_writev+0x10/0x10 [ 3385.591782][T16606] do_syscall_64+0xcd/0x490 [ 3385.591816][T16606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3385.591841][T16606] RIP: 0033:0x7f0c2a18ebe9 [ 3385.591860][T16606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3385.591884][T16606] RSP: 002b:00007f0c2b091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3385.591908][T16606] RAX: ffffffffffffffda RBX: 00007f0c2a3b5fa0 RCX: 00007f0c2a18ebe9 [ 3385.591924][T16606] RDX: ffffffffffffffff RSI: 0000000000000005 RDI: 0000000000008001 [ 3385.591955][T16606] RBP: 00007f0c2a211e19 R08: 0000000000000006 R09: 0000000000000000 [ 3385.591971][T16606] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 3385.591986][T16606] R13: 00007f0c2a3b6038 R14: 00007f0c2a3b5fa0 R15: 00007ffc75f08978 [ 3385.592006][T16606] ? 0xffffffffff600000 [ 3385.592026][T16606] [ 3386.241988][T16611] random: crng reseeded on system resumption [ 3386.316950][T16611] syz.3.6985 uses obsolete (PF_INET,SOCK_PACKET) [ 3386.449603][T16614] FAULT_INJECTION: forcing a failure. [ 3386.449603][T16614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3386.462906][T16614] CPU: 1 UID: 0 PID: 16614 Comm: syz.2.6986 Not tainted syzkaller #0 PREEMPT(full) [ 3386.462947][T16614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3386.462967][T16614] Call Trace: [ 3386.462977][T16614] [ 3386.462989][T16614] dump_stack_lvl+0x16c/0x1f0 [ 3386.463034][T16614] should_fail_ex+0x512/0x640 [ 3386.463084][T16614] _copy_to_user+0x32/0xd0 [ 3386.463114][T16614] vivid_radio_rx_read+0x7ce/0xb90 [ 3386.463165][T16614] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 3386.463215][T16614] vivid_radio_read+0x86/0xc0 [ 3386.463254][T16614] v4l2_read+0x226/0x360 [ 3386.463293][T16614] ? __pfx_v4l2_read+0x10/0x10 [ 3386.463333][T16614] vfs_read+0x1e1/0xcf0 [ 3386.463373][T16614] ? __pfx_vfs_read+0x10/0x10 [ 3386.463409][T16614] ? __fget_files+0x204/0x3c0 [ 3386.463443][T16614] ? rcu_is_watching+0x12/0xc0 [ 3386.463502][T16614] ? lock_release+0x201/0x2f0 [ 3386.463548][T16614] ? __fget_files+0x20e/0x3c0 [ 3386.463588][T16614] ksys_read+0x12a/0x250 [ 3386.463632][T16614] ? __pfx_ksys_read+0x10/0x10 [ 3386.463674][T16614] do_syscall_64+0xcd/0x490 [ 3386.463719][T16614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3386.463752][T16614] RIP: 0033:0x7f0c2a18ebe9 [ 3386.463776][T16614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3386.463809][T16614] RSP: 002b:00007f0c2b091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3386.463840][T16614] RAX: ffffffffffffffda RBX: 00007f0c2a3b5fa0 RCX: 00007f0c2a18ebe9 [ 3386.463861][T16614] RDX: 0000000000001000 RSI: 0000200000000100 RDI: 0000000000000003 [ 3386.463881][T16614] RBP: 00007f0c2b091090 R08: 0000000000000000 R09: 0000000000000000 [ 3386.463900][T16614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3386.463919][T16614] R13: 00007f0c2a3b6038 R14: 00007f0c2a3b5fa0 R15: 00007ffc75f08978 [ 3386.463950][T16614] [ 3386.652243][ C1] vkms_vblank_simulate: vblank timer overrun [ 3387.191298][T16619] random: crng reseeded on system resumption [ 3388.737209][T16651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6993'. [ 3388.986654][T16661] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3389.154638][T16668] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3389.299827][T16666] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input966 [ 3389.738251][T16669] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input967 [ 3390.087022][T16675] netlink: 'syz.3.6997': attribute type 97 has an invalid length. [ 3390.196186][T16670] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input968 [ 3390.394781][T16679] delete_channel: no stack [ 3390.520602][T16661] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input969 [ 3390.744651][T16691] FAULT_INJECTION: forcing a failure. [ 3390.744651][T16691] name failslab, interval 1, probability 0, space 0, times 0 [ 3390.803855][T16691] CPU: 0 UID: 0 PID: 16691 Comm: syz.1.7001 Not tainted syzkaller #0 PREEMPT(full) [ 3390.803898][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3390.803915][T16691] Call Trace: [ 3390.803922][T16691] [ 3390.803931][T16691] dump_stack_lvl+0x16c/0x1f0 [ 3390.803964][T16691] should_fail_ex+0x512/0x640 [ 3390.803999][T16691] should_failslab+0xc2/0x120 [ 3390.804031][T16691] __kmalloc_node_noprof+0xd8/0x500 [ 3390.804059][T16691] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3390.804090][T16691] ? alloc_slab_obj_exts+0x41/0xa0 [ 3390.804115][T16691] alloc_slab_obj_exts+0x41/0xa0 [ 3390.804137][T16691] new_slab+0x27d/0x330 [ 3390.804159][T16691] ___slab_alloc+0xcf2/0x1740 [ 3390.804181][T16691] ? do_fanotify_mark+0x270b/0x3600 [ 3390.804224][T16691] ? alloc_ucounts+0xb1/0x440 [ 3390.804257][T16691] ? rcu_is_watching+0x12/0xc0 [ 3390.804283][T16691] ? do_fanotify_mark+0x270b/0x3600 [ 3390.804321][T16691] ? __slab_alloc.constprop.0+0x56/0xb0 [ 3390.804345][T16691] __slab_alloc.constprop.0+0x56/0xb0 [ 3390.804371][T16691] kmem_cache_alloc_noprof+0xef/0x3b0 [ 3390.804400][T16691] ? do_fanotify_mark+0x270b/0x3600 [ 3390.804448][T16691] do_fanotify_mark+0x270b/0x3600 [ 3390.804493][T16691] ? __pfx_do_fanotify_mark+0x10/0x10 [ 3390.804536][T16691] ? ksys_write+0x1ac/0x250 [ 3390.804563][T16691] ? __pfx_ksys_write+0x10/0x10 [ 3390.804593][T16691] __x64_sys_fanotify_mark+0xbd/0x160 [ 3390.804633][T16691] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 3390.804672][T16691] do_syscall_64+0xcd/0x490 [ 3390.804707][T16691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3390.804732][T16691] RIP: 0033:0x7ff24cf8ebe9 [ 3390.804749][T16691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3390.804773][T16691] RSP: 002b:00007ff24b1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 3390.804796][T16691] RAX: ffffffffffffffda RBX: 00007ff24d1b5fa0 RCX: 00007ff24cf8ebe9 [ 3390.804812][T16691] RDX: 0000000000000009 RSI: 0000000000000031 RDI: 0000000000000000 [ 3390.804827][T16691] RBP: 00007ff24b1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3390.804842][T16691] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 3390.804856][T16691] R13: 00007ff24d1b6038 R14: 00007ff24d1b5fa0 R15: 00007ffdc914f6e8 [ 3390.804880][T16691] [ 3391.032636][ C0] vkms_vblank_simulate: vblank timer overrun [ 3391.898390][T16707] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3392.060748][T16708] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input970 [ 3392.224998][T16716] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3394.127058][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7014'. [ 3394.152900][T16744] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3394.339933][T16744] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input971 [ 3394.714092][T16764] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3394.824522][T16765] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input972 [ 3394.936089][T16768] netlink: 342 bytes leftover after parsing attributes in process `syz.0.7021'. [ 3395.128692][T16770] FAULT_INJECTION: forcing a failure. [ 3395.128692][T16770] name failslab, interval 1, probability 0, space 0, times 0 [ 3395.175793][T16770] CPU: 0 UID: 0 PID: 16770 Comm: syz.0.7022 Not tainted syzkaller #0 PREEMPT(full) [ 3395.175840][T16770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3395.175859][T16770] Call Trace: [ 3395.175871][T16770] [ 3395.175883][T16770] dump_stack_lvl+0x16c/0x1f0 [ 3395.175929][T16770] should_fail_ex+0x512/0x640 [ 3395.175976][T16770] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 3395.176024][T16770] should_failslab+0xc2/0x120 [ 3395.176066][T16770] __kmalloc_noprof+0xd2/0x510 [ 3395.176104][T16770] ? rcu_is_watching+0x12/0xc0 [ 3395.176140][T16770] tomoyo_realpath_from_path+0xc2/0x6e0 [ 3395.176190][T16770] ? tomoyo_profile+0x47/0x60 [ 3395.176221][T16770] tomoyo_path_number_perm+0x245/0x580 [ 3395.176260][T16770] ? tomoyo_path_number_perm+0x237/0x580 [ 3395.176300][T16770] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3395.176350][T16770] ? __pfx__kstrtoull+0x10/0x10 [ 3395.176404][T16770] ? kstrtouint_from_user+0x13c/0x1d0 [ 3395.176445][T16770] ? rcu_is_watching+0x12/0xc0 [ 3395.176480][T16770] ? from_kgid+0x8f/0xd0 [ 3395.176528][T16770] ? __pfx_from_kgid+0x10/0x10 [ 3395.176575][T16770] ? rcu_is_watching+0x12/0xc0 [ 3395.176610][T16770] tomoyo_path_chown+0x14b/0x1b0 [ 3395.176639][T16770] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 3395.176669][T16770] ? __pfx_make_vfsgid+0x10/0x10 [ 3395.176715][T16770] ? from_vfsuid+0xea/0x140 [ 3395.176759][T16770] ? __pfx_from_vfsuid+0x10/0x10 [ 3395.176808][T16770] security_path_chown+0x12a/0x2e0 [ 3395.176846][T16770] chown_common+0x3d3/0x680 [ 3395.176896][T16770] ? __pfx_chown_common+0x10/0x10 [ 3395.176942][T16770] ? __fget_files+0x204/0x3c0 [ 3395.176985][T16770] ? preempt_count_add+0x76/0x150 [ 3395.177034][T16770] ksys_fchown+0x11a/0x190 [ 3395.177081][T16770] __x64_sys_fchown+0x72/0xb0 [ 3395.177130][T16770] do_syscall_64+0xcd/0x490 [ 3395.177172][T16770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3395.177204][T16770] RIP: 0033:0x7f388018ebe9 [ 3395.177227][T16770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3395.177259][T16770] RSP: 002b:00007f3881096038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 3395.177289][T16770] RAX: ffffffffffffffda RBX: 00007f38803b5fa0 RCX: 00007f388018ebe9 [ 3395.177311][T16770] RDX: 0000000000000005 RSI: 0000000000000e5a RDI: 0000000000000003 [ 3395.177338][T16770] RBP: 00007f3881096090 R08: 0000000000000000 R09: 0000000000000000 [ 3395.177358][T16770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3395.177378][T16770] R13: 00007f38803b6038 R14: 00007f38803b5fa0 R15: 00007ffdf6b09628 [ 3395.177410][T16770] [ 3395.177484][T16770] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3396.288244][T16790] FAULT_INJECTION: forcing a failure. [ 3396.288244][T16790] name failslab, interval 1, probability 0, space 0, times 0 [ 3396.332837][T16790] CPU: 0 UID: 0 PID: 16790 Comm: syz.2.7026 Not tainted syzkaller #0 PREEMPT(full) [ 3396.332877][T16790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3396.332897][T16790] Call Trace: [ 3396.332907][T16790] [ 3396.332919][T16790] dump_stack_lvl+0x16c/0x1f0 [ 3396.332964][T16790] should_fail_ex+0x512/0x640 [ 3396.333017][T16790] should_failslab+0xc2/0x120 [ 3396.333058][T16790] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3396.333096][T16790] ? trace_kmem_cache_alloc+0x28/0xc0 [ 3396.333141][T16790] ? sk_prot_alloc+0x60/0x2a0 [ 3396.333189][T16790] sk_prot_alloc+0x60/0x2a0 [ 3396.333239][T16790] sk_alloc+0x36/0xc20 [ 3396.333277][T16790] __vsock_create.constprop.0+0x3c/0xbb0 [ 3396.333320][T16790] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3396.333369][T16790] vsock_create+0x139/0x500 [ 3396.333409][T16790] __sock_create+0x338/0x8d0 [ 3396.333440][T16790] __sys_socket+0x14d/0x260 [ 3396.333470][T16790] ? __pfx___sys_socket+0x10/0x10 [ 3396.333500][T16790] ? ksys_write+0x1ac/0x250 [ 3396.333536][T16790] ? __pfx_ksys_write+0x10/0x10 [ 3396.333576][T16790] __x64_sys_socket+0x72/0xb0 [ 3396.333606][T16790] do_syscall_64+0xcd/0x490 [ 3396.333648][T16790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3396.333678][T16790] RIP: 0033:0x7f0c2a18ebe9 [ 3396.333701][T16790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3396.333733][T16790] RSP: 002b:00007f0c2b091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3396.333764][T16790] RAX: ffffffffffffffda RBX: 00007f0c2a3b5fa0 RCX: 00007f0c2a18ebe9 [ 3396.333786][T16790] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 3396.333806][T16790] RBP: 00007f0c2b091090 R08: 0000000000000000 R09: 0000000000000000 [ 3396.333826][T16790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3396.333846][T16790] R13: 00007f0c2a3b6038 R14: 00007f0c2a3b5fa0 R15: 00007ffc75f08978 [ 3396.333877][T16790] [ 3396.333986][T16791] random: crng reseeded on system resumption [ 3396.971716][T16808] [U] - [ 3396.974586][T16808] [U] [ 3396.979169][T16808] [U] S [ 3397.199808][T16806] netlink: 342 bytes leftover after parsing attributes in process `syz.3.7029'. [ 3398.222430][T16836] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3398.339954][T16840] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3398.560794][T16844] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input973 [ 3399.689079][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3399.700536][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3399.716838][T16840] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input974 [ 3400.113371][T16846] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input975 [ 3401.189164][T16875] FAULT_INJECTION: forcing a failure. [ 3401.189164][T16875] name failslab, interval 1, probability 0, space 0, times 0 [ 3401.203440][T16875] CPU: 1 UID: 0 PID: 16875 Comm: syz.0.7040 Not tainted syzkaller #0 PREEMPT(full) [ 3401.203479][T16875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3401.203498][T16875] Call Trace: [ 3401.203509][T16875] [ 3401.203521][T16875] dump_stack_lvl+0x16c/0x1f0 [ 3401.203567][T16875] should_fail_ex+0x512/0x640 [ 3401.203616][T16875] should_failslab+0xc2/0x120 [ 3401.203660][T16875] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3401.203700][T16875] ? alloc_empty_file+0x55/0x1e0 [ 3401.203749][T16875] alloc_empty_file+0x55/0x1e0 [ 3401.203798][T16875] path_openat+0xda/0x2cb0 [ 3401.203834][T16875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3401.203874][T16875] ? __pfx_path_openat+0x10/0x10 [ 3401.203918][T16875] do_filp_open+0x20b/0x470 [ 3401.203957][T16875] ? __pfx_do_filp_open+0x10/0x10 [ 3401.204018][T16875] ? alloc_fd+0x471/0x7d0 [ 3401.204058][T16875] do_sys_openat2+0x11b/0x1d0 [ 3401.204109][T16875] ? __pfx_do_sys_openat2+0x10/0x10 [ 3401.204161][T16875] ? __fget_files+0x20e/0x3c0 [ 3401.204199][T16875] __x64_sys_openat+0x174/0x210 [ 3401.204252][T16875] ? __pfx___x64_sys_openat+0x10/0x10 [ 3401.204304][T16875] ? ksys_write+0x1ac/0x250 [ 3401.204348][T16875] do_syscall_64+0xcd/0x490 [ 3401.204394][T16875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3401.204426][T16875] RIP: 0033:0x7f388018ebe9 [ 3401.204451][T16875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3401.204483][T16875] RSP: 002b:00007f3880ff1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3401.204514][T16875] RAX: ffffffffffffffda RBX: 00007f38803b6450 RCX: 00007f388018ebe9 [ 3401.204534][T16875] RDX: 0000000000080800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 3401.204553][T16875] RBP: 00007f3880ff1090 R08: 0000000000000000 R09: 0000000000000000 [ 3401.204571][T16875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3401.204590][T16875] R13: 00007f38803b64e8 R14: 00007f38803b6450 R15: 00007ffdf6b09628 [ 3401.204621][T16875] [ 3402.439185][T16885] lo: entered allmulticast mode [ 3402.558844][T16889] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3402.846690][T16892] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input976 [ 3402.875852][T16884] lo: left allmulticast mode [ 3403.452373][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7046'. [ 3403.464244][T16902] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input977 [ 3404.065272][T16917] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3405.004908][T16919] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input978 [ 3405.622017][T16920] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input979 [ 3406.714820][T16955] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3406.826646][T16961] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input980 [ 3407.354758][T16962] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input981 [ 3407.538636][T16971] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3407.775033][T16974] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input982 [ 3408.317632][T16975] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input983 [ 3408.476808][T16980] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input984 [ 3408.510810][T16993] FAULT_INJECTION: forcing a failure. [ 3408.510810][T16993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3408.524534][T16993] CPU: 0 UID: 0 PID: 16993 Comm: syz.0.7063 Not tainted syzkaller #0 PREEMPT(full) [ 3408.524574][T16993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3408.524593][T16993] Call Trace: [ 3408.524603][T16993] [ 3408.524615][T16993] dump_stack_lvl+0x16c/0x1f0 [ 3408.524658][T16993] should_fail_ex+0x512/0x640 [ 3408.524706][T16993] _copy_from_user+0x2e/0xd0 [ 3408.524753][T16993] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 3408.524788][T16993] snd_rawmidi_write+0x26e/0xc10 [ 3408.524821][T16993] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 3408.524855][T16993] ? __pfx_default_wake_function+0x10/0x10 [ 3408.524887][T16993] ? bpf_lsm_file_permission+0x9/0x10 [ 3408.524933][T16993] ? security_file_permission+0x71/0x210 [ 3408.524977][T16993] ? rw_verify_area+0xcf/0x6c0 [ 3408.525010][T16993] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 3408.525044][T16993] vfs_write+0x29d/0x11d0 [ 3408.525085][T16993] ? __pfx_vfs_write+0x10/0x10 [ 3408.525121][T16993] ? __fget_files+0x204/0x3c0 [ 3408.525154][T16993] ? rcu_is_watching+0x12/0xc0 [ 3408.525185][T16993] ? lock_release+0x201/0x2f0 [ 3408.525230][T16993] ? __fget_files+0x20e/0x3c0 [ 3408.525271][T16993] ksys_write+0x1f8/0x250 [ 3408.525307][T16993] ? __pfx_ksys_write+0x10/0x10 [ 3408.525359][T16993] do_syscall_64+0xcd/0x490 [ 3408.525404][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3408.525437][T16993] RIP: 0033:0x7f388018ebe9 [ 3408.525461][T16993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3408.525493][T16993] RSP: 002b:00007f3881075038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3408.525527][T16993] RAX: ffffffffffffffda RBX: 00007f38803b6090 RCX: 00007f388018ebe9 [ 3408.525547][T16993] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000005 [ 3408.525568][T16993] RBP: 00007f3881075090 R08: 0000000000000000 R09: 0000000000000000 [ 3408.525588][T16993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3408.525608][T16993] R13: 00007f38803b6128 R14: 00007f38803b6090 R15: 00007ffdf6b09628 [ 3408.525639][T16993] [ 3408.731832][ C0] vkms_vblank_simulate: vblank timer overrun [ 3411.324907][T17035] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 3412.428303][T17050] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3412.582810][T17058] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input985 [ 3412.646221][T17059] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input986 [ 3412.655949][T17056] FAULT_INJECTION: forcing a failure. [ 3412.655949][T17056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3412.656001][T17056] CPU: 0 UID: 0 PID: 17056 Comm: syz.3.7079 Not tainted syzkaller #0 PREEMPT(full) [ 3412.656038][T17056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3412.656057][T17056] Call Trace: [ 3412.656069][T17056] [ 3412.656083][T17056] dump_stack_lvl+0x16c/0x1f0 [ 3412.656138][T17056] should_fail_ex+0x512/0x640 [ 3412.656193][T17056] _copy_from_user+0x2e/0xd0 [ 3412.656252][T17056] kstrtouint_from_user+0xd6/0x1d0 [ 3412.656296][T17056] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 3412.656348][T17056] ? __mutex_trylock_common+0xe9/0x250 [ 3412.656401][T17056] proc_fail_nth_write+0x83/0x220 [ 3412.656440][T17056] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 3412.656480][T17056] ? __pfx___might_resched+0x10/0x10 [ 3412.656519][T17056] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 3412.656556][T17056] vfs_write+0x29d/0x11d0 [ 3412.656600][T17056] ? __pfx___mutex_lock+0x10/0x10 [ 3412.656650][T17056] ? __pfx_vfs_write+0x10/0x10 [ 3412.656689][T17056] ? __fget_files+0x204/0x3c0 [ 3412.656726][T17056] ? rcu_is_watching+0x12/0xc0 [ 3412.656767][T17056] ? __fget_files+0x20e/0x3c0 [ 3412.656809][T17056] ksys_write+0x12a/0x250 [ 3412.656850][T17056] ? __pfx_ksys_write+0x10/0x10 [ 3412.656897][T17056] do_syscall_64+0xcd/0x490 [ 3412.656947][T17056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3412.656983][T17056] RIP: 0033:0x7f198d78d69f [ 3412.657017][T17056] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 3412.657052][T17056] RSP: 002b:00007f198e6ad030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3412.657086][T17056] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f198d78d69f [ 3412.657110][T17056] RDX: 0000000000000001 RSI: 00007f198e6ad0a0 RDI: 0000000000000004 [ 3412.657132][T17056] RBP: 00007f198e6ad090 R08: 0000000000000000 R09: 0000000000000000 [ 3412.657155][T17056] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3412.657176][T17056] R13: 00007f198d9b6038 R14: 00007f198d9b5fa0 R15: 00007ffcc39d8f48 [ 3412.657211][T17056] [ 3414.305280][T17068] ptrace attach of "./syz-executor exec"[1976] was attempted by "./syz-executor exec"[17068] [ 3415.203535][T17096] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3415.510650][T17100] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input987 [ 3415.552398][T17101] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3415.821669][T17096] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input988 [ 3416.181165][T17104] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input989 [ 3416.460207][T17108] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input990 [ 3417.847319][T17138] kernel profiling enabled (shift: 0) [ 3417.985104][T17143] ima: policy update failed [ 3417.990111][ T30] audit: type=1802 audit(1755840226.528:194): pid=17143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.7093" res=0 errno=0 [ 3418.220082][T17149] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3418.369021][T17153] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input991 [ 3418.630537][T17154] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input992 [ 3419.050534][T17138] syz.2.7093: vmalloc error: size 710008832, failed to allocated page array size 1386736, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 3419.114786][T17138] CPU: 1 UID: 0 PID: 17138 Comm: syz.2.7093 Not tainted syzkaller #0 PREEMPT(full) [ 3419.114839][T17138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3419.114861][T17138] Call Trace: [ 3419.114872][T17138] [ 3419.114885][T17138] dump_stack_lvl+0x16c/0x1f0 [ 3419.114935][T17138] warn_alloc+0x248/0x3a0 [ 3419.114979][T17138] ? __pfx_warn_alloc+0x10/0x10 [ 3419.115015][T17138] ? __kasan_kmalloc+0xaa/0xb0 [ 3419.115057][T17138] ? profile_init+0xd5/0x130 [ 3419.115085][T17138] ? __vmalloc_node_noprof+0xad/0xf0 [ 3419.115117][T17138] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 3419.115155][T17138] ? profile_init+0xd5/0x130 [ 3419.115188][T17138] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 3419.115219][T17138] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3419.115259][T17138] ? rcu_is_watching+0x12/0xc0 [ 3419.115293][T17138] ? profile_init+0xd5/0x130 [ 3419.115320][T17138] __vmalloc_node_noprof+0xad/0xf0 [ 3419.115349][T17138] ? profile_init+0xd5/0x130 [ 3419.115381][T17138] ? __pfx_profiling_store+0x10/0x10 [ 3419.115429][T17138] profile_init+0xd5/0x130 [ 3419.115459][T17138] profiling_store+0x7b/0x120 [ 3419.115507][T17138] kobj_attr_store+0x55/0x80 [ 3419.115552][T17138] ? __pfx_kobj_attr_store+0x10/0x10 [ 3419.115593][T17138] sysfs_kf_write+0xef/0x150 [ 3419.115627][T17138] kernfs_fop_write_iter+0x351/0x510 [ 3419.115657][T17138] ? __pfx_sysfs_kf_write+0x10/0x10 [ 3419.115691][T17138] vfs_write+0x7d3/0x11d0 [ 3419.115728][T17138] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 3419.115758][T17138] ? __pfx___mutex_lock+0x10/0x10 [ 3419.115800][T17138] ? __pfx_vfs_write+0x10/0x10 [ 3419.115858][T17138] ksys_write+0x12a/0x250 [ 3419.115892][T17138] ? __pfx_ksys_write+0x10/0x10 [ 3419.115933][T17138] do_syscall_64+0xcd/0x490 [ 3419.115977][T17138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3419.116010][T17138] RIP: 0033:0x7f0c2a18ebe9 [ 3419.116035][T17138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3419.116067][T17138] RSP: 002b:00007f0c2b091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3419.116097][T17138] RAX: ffffffffffffffda RBX: 00007f0c2a3b5fa0 RCX: 00007f0c2a18ebe9 [ 3419.116118][T17138] RDX: 0000000000001000 RSI: 0000200000000040 RDI: 0000000000000005 [ 3419.116137][T17138] RBP: 00007f0c2a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 3419.116157][T17138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3419.116175][T17138] R13: 00007f0c2a3b6038 R14: 00007f0c2a3b5fa0 R15: 00007ffc75f08978 [ 3419.116206][T17138] [ 3419.324198][ C0] vkms_vblank_simulate: vblank timer overrun [ 3419.373380][ C0] vkms_vblank_simulate: vblank timer overrun [ 3419.485815][T17138] Mem-Info: [ 3419.489050][T17138] active_anon:11234 inactive_anon:0 isolated_anon:0 [ 3419.489050][T17138] active_file:24046 inactive_file:45001 isolated_file:0 [ 3419.489050][T17138] unevictable:768 dirty:1732 writeback:933 [ 3419.489050][T17138] slab_reclaimable:14605 slab_unreclaimable:97614 [ 3419.489050][T17138] mapped:35290 shmem:7479 pagetables:1259 [ 3419.489050][T17138] sec_pagetables:0 bounce:0 [ 3419.489050][T17138] kernel_misc_reclaimable:0 [ 3419.489050][T17138] free:1285954 free_pcp:7953 free_cma:0 [ 3419.534878][ C0] vkms_vblank_simulate: vblank timer overrun [ 3419.655336][T17138] Node 0 active_anon:53388kB inactive_anon:0kB active_file:96184kB inactive_file:186592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153440kB dirty:6112kB writeback:3252kB shmem:36584kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:11724kB pagetables:4984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB syzkaller syzkaller login: [ 3419.795694][T17138] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 3419.825674][ C0] vkms_vblank_simulate: vblank timer overrun [ 3419.865753][T17138] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3420.009582][T17138] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 3420.015443][T17138] Node 0 DMA32 free:1199208kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63440kB inactive_anon:0kB active_file:93240kB inactive_file:191800kB unevictable:1536kB writepending:5132kB present:3129332kB managed:2539596kB mlocked:0kB bounce:0kB free_pcp:26448kB local_pcp:4892kB free_cma:0kB [ 3420.089745][ C0] vkms_vblank_simulate: vblank timer overrun [ 3420.299968][T17138] lowmem_reserve[]: 0 0 1 1 1 [ 3420.312224][T17138] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3420.428843][T17138] lowmem_reserve[]: 0 0 0 0 0 [ 3420.439635][T17138] Node 1 Normal free:3905800kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3420.470303][ C0] vkms_vblank_simulate: vblank timer overrun [ 3420.521868][T17138] lowmem_reserve[]: 0 0 0 0 0 [ 3420.531301][T17138] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3420.545565][T17138] Node 0 DMA32: 1*4kB (M) 1*8kB (E) 276*16kB (ME) 341*32kB (ME) 506*64kB (UME) 385*128kB (UME) 214*256kB (UME) 139*512kB (UM) 99*1024kB (UME) 15*2048kB (U) 212*4096kB (UM) = 1223404kB [ 3420.565365][T17138] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 3420.583100][T17138] Node 1 Normal: 170*4kB (UME) 56*8kB (UME) 46*16kB (UME) 236*32kB (UME) 107*64kB (UME) 39*128kB (UME) 16*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 4*2048kB (UME) 944*4096kB (M) = 3905800kB [ 3420.603194][T17138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3420.613732][T17138] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 3420.625751][T17138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3420.642503][T17138] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 3420.652098][T17138] 77654 total pagecache pages [ 3420.715583][T17138] 38 pages in swap cache [ 3420.727068][T17138] Free swap = 124040kB [ 3420.741509][T17138] Total swap = 124996kB [ 3420.751634][T17138] 2097051 pages RAM [ 3420.761804][T17138] 0 pages HighMem/MovableOnly [ 3420.771967][T17138] 430190 pages reserved [ 3420.788377][T17138] 0 pages cma reserved [ 3421.257207][T17171] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3421.602461][T17172] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input993 [ 3421.717370][T17179] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3421.825945][T17176] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input994 [ 3422.722813][T17183] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input995 [ 3423.310994][T17184] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input996 [ 3425.217661][T18614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3425.225128][T18614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3425.234403][T18614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3425.242409][T18614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3425.250303][T18614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3425.700675][T17235] chnl_net:caif_netlink_parms(): no params data found [ 3425.999352][T17235] bridge0: port 1(bridge_slave_0) entered blocking state [ 3426.006802][T17235] bridge0: port 1(bridge_slave_0) entered disabled state [ 3426.014051][T17235] bridge_slave_0: entered allmulticast mode [ 3426.025758][T17235] bridge_slave_0: entered promiscuous mode [ 3426.034561][T17235] bridge0: port 2(bridge_slave_1) entered blocking state [ 3426.041912][T17235] bridge0: port 2(bridge_slave_1) entered disabled state [ 3426.050119][T17235] bridge_slave_1: entered allmulticast mode [ 3426.057104][T17235] bridge_slave_1: entered promiscuous mode [ 3426.171463][T17235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3426.253559][T17235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3426.709933][T17235] team0: Port device team_slave_0 added [ 3426.730913][T17235] team0: Port device team_slave_1 added [ 3426.849330][T17235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3426.857286][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3426.884381][T17235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3426.922817][T17235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3426.955596][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3427.014898][T17235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3427.238736][T17235] hsr_slave_0: entered promiscuous mode [ 3427.260315][T17235] hsr_slave_1: entered promiscuous mode [ 3427.270266][T17271] FAULT_INJECTION: forcing a failure. [ 3427.270266][T17271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3427.294255][T15765] Bluetooth: hci4: command tx timeout [ 3427.317500][T17235] debugfs: 'hsr0' already exists in 'hsr' [ 3427.323305][T17235] Cannot create hsr debugfs directory [ 3427.326596][T17271] CPU: 1 UID: 0 PID: 17271 Comm: syz.1.7115 Not tainted syzkaller #0 PREEMPT(full) [ 3427.326643][T17271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3427.326667][T17271] Call Trace: [ 3427.326679][T17271] [ 3427.326691][T17271] dump_stack_lvl+0x16c/0x1f0 [ 3427.326743][T17271] should_fail_ex+0x512/0x640 [ 3427.326797][T17271] _copy_to_iter+0x29f/0x16f0 [ 3427.326836][T17271] ? __pfx__copy_to_iter+0x10/0x10 [ 3427.326869][T17271] ? __pfx___schedule+0x10/0x10 [ 3427.326917][T17271] simple_copy_to_iter+0x46/0x90 [ 3427.326956][T17271] __skb_datagram_iter+0x129/0x900 [ 3427.326993][T17271] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 3427.327034][T17271] ? __lock_sock+0x1f4/0x260 [ 3427.327080][T17271] __skb_datagram_iter+0x751/0x900 [ 3427.327125][T17271] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 3427.327170][T17271] skb_copy_datagram_iter+0x40/0x50 [ 3427.327208][T17271] sctp_recvmsg+0x258/0xe30 [ 3427.327265][T17271] ? __pfx_sctp_recvmsg+0x10/0x10 [ 3427.327316][T17271] ? lock_release+0x201/0x2f0 [ 3427.327365][T17271] ? __pfx_sctp_recvmsg+0x10/0x10 [ 3427.327416][T17271] inet_recvmsg+0x46f/0x6a0 [ 3427.327452][T17271] ? __pfx_inet_recvmsg+0x10/0x10 [ 3427.327488][T17271] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 3427.327531][T17271] sock_recvmsg+0x1b2/0x250 [ 3427.327589][T17271] sock_read_iter+0x2b9/0x3b0 [ 3427.327653][T17271] ? __pfx_sock_read_iter+0x10/0x10 [ 3427.327709][T17271] ? lock_release+0x201/0x2f0 [ 3427.327759][T17271] ? bpf_lsm_file_permission+0x9/0x10 [ 3427.327814][T17271] ? security_file_permission+0x71/0x210 [ 3427.327865][T17271] ? rw_verify_area+0xcf/0x6c0 [ 3427.327903][T17271] vfs_read+0xa95/0xcf0 [ 3427.327947][T17271] ? __pfx_vfs_read+0x10/0x10 [ 3427.327988][T17271] ? lock_release+0x201/0x2f0 [ 3427.328044][T17271] ksys_read+0x1f8/0x250 [ 3427.328082][T17271] ? __pfx_ksys_read+0x10/0x10 [ 3427.328137][T17271] do_syscall_64+0xcd/0x490 [ 3427.328187][T17271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3427.328224][T17271] RIP: 0033:0x7ff24cf8ebe9 [ 3427.328250][T17271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3427.328285][T17271] RSP: 002b:00007ff24b172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3427.328319][T17271] RAX: ffffffffffffffda RBX: 00007ff24d1b6360 RCX: 00007ff24cf8ebe9 [ 3427.328344][T17271] RDX: 0000000000001f40 RSI: 0000000000000000 RDI: 0000000000000003 [ 3427.328366][T17271] RBP: 00007ff24b172090 R08: 0000000000000000 R09: 0000000000000000 [ 3427.328388][T17271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3427.328411][T17271] R13: 00007ff24d1b63f8 R14: 00007ff24d1b6360 R15: 00007ffdc914f6e8 [ 3427.328446][T17271] [ 3428.343593][T17235] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3428.436887][T17235] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3428.548359][T17235] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3428.656807][T17235] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3428.670687][T17280] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 3428.852753][T17235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3428.911025][T17283] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input997 [ 3428.938908][T17235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3429.021708][T17235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3429.068798][T17235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3429.287711][T17286] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input998 [ 3429.365794][T15765] Bluetooth: hci4: command tx timeout [ 3429.645411][T17235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3429.837190][T17235] 8021q: adding VLAN 0 to HW filter on device team0 [ 3429.906566][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 3429.913813][ T9616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3429.970079][ T9616] bridge0: port 2(bridge_slave_1) entered blocking state [ 3429.977296][ T9616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3430.836949][T17235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3431.087210][T17235] veth0_vlan: entered promiscuous mode [ 3431.175189][T17235] veth1_vlan: entered promiscuous mode [ 3431.286206][T17319] bond0: option all_slaves_active: invalid value () [ 3431.447798][T15765] Bluetooth: hci4: command tx timeout [ 3431.489425][T17235] veth0_macvtap: entered promiscuous mode [ 3431.531866][T17235] veth1_macvtap: entered promiscuous mode [ 3431.656065][T17235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3431.722103][T17235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3431.859493][T16658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3431.896909][T16658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3431.950125][T16658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3432.101435][T16658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3432.435476][T16649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3432.500477][T16649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3432.591376][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3432.620262][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3432.770218][T17339] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 3432.911294][T17336] ================================================================== [ 3432.919448][T17336] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 3432.927403][T17336] Read of size 8 at addr ffff888025a6d800 by task syz.3.7127/17336 [ 3432.935319][T17336] [ 3432.937666][T17336] CPU: 1 UID: 0 PID: 17336 Comm: syz.3.7127 Not tainted syzkaller #0 PREEMPT(full) [ 3432.937702][T17336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3432.937721][T17336] Call Trace: [ 3432.937731][T17336] [ 3432.937742][T17336] dump_stack_lvl+0x116/0x1f0 [ 3432.937798][T17336] print_report+0xcd/0x630 [ 3432.937836][T17336] ? __virt_addr_valid+0x81/0x610 [ 3432.937872][T17336] ? __phys_addr+0xe8/0x180 [ 3432.937908][T17336] ? force_devcd_write+0x312/0x340 [ 3432.937945][T17336] kasan_report+0xe0/0x110 [ 3432.937982][T17336] ? force_devcd_write+0x312/0x340 [ 3432.938024][T17336] force_devcd_write+0x312/0x340 [ 3432.938063][T17336] ? __pfx_force_devcd_write+0x10/0x10 [ 3432.938102][T17336] ? __debugfs_file_get+0x1fe/0x840 [ 3432.938145][T17336] ? __pfx___debugfs_file_get+0x10/0x10 [ 3432.938189][T17336] ? rcu_is_watching+0x12/0xc0 [ 3432.938220][T17336] full_proxy_write+0x12e/0x1a0 [ 3432.938264][T17336] ? __pfx_full_proxy_write+0x10/0x10 [ 3432.938307][T17336] vfs_write+0x29d/0x11d0 [ 3432.938342][T17336] ? __pfx___mutex_lock+0x10/0x10 [ 3432.938379][T17336] ? __pfx_vfs_write+0x10/0x10 [ 3432.938411][T17336] ? __fget_files+0x204/0x3c0 [ 3432.938440][T17336] ? rcu_is_watching+0x12/0xc0 [ 3432.938471][T17336] ? __fget_files+0x20e/0x3c0 [ 3432.938506][T17336] ksys_write+0x12a/0x250 [ 3432.938538][T17336] ? __pfx_ksys_write+0x10/0x10 [ 3432.938575][T17336] do_syscall_64+0xcd/0x490 [ 3432.938614][T17336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3432.938643][T17336] RIP: 0033:0x7f198d78ebe9 [ 3432.938666][T17336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3432.938694][T17336] RSP: 002b:00007f198e68c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3432.938721][T17336] RAX: ffffffffffffffda RBX: 00007f198d9b6090 RCX: 00007f198d78ebe9 [ 3432.938741][T17336] RDX: 000000000000000e RSI: 0000000000000000 RDI: 000000000000000a [ 3432.938766][T17336] RBP: 00007f198d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 3432.938784][T17336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3432.938801][T17336] R13: 00007f198d9b6128 R14: 00007f198d9b6090 R15: 00007ffcc39d8f48 [ 3432.938828][T17336] [ 3432.938837][T17336] [ 3433.160271][T17336] Allocated by task 16649: [ 3433.164701][T17336] kasan_save_stack+0x33/0x60 [ 3433.169417][T17336] kasan_save_track+0x14/0x30 [ 3433.174130][T17336] __kasan_kmalloc+0xaa/0xb0 [ 3433.178748][T17336] __kmalloc_noprof+0x223/0x510 [ 3433.183649][T17336] ieee802_11_parse_elems_full+0x1db/0x3780 [ 3433.189601][T17336] ieee80211_inform_bss+0x10b/0x1140 [ 3433.194934][T17336] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 3433.201209][T17336] cfg80211_inform_bss_data+0x224/0x3bd0 [ 3433.206879][T17336] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 3433.212983][T17336] ieee80211_bss_info_update+0x310/0xab0 [ 3433.218702][T17336] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 3433.224909][T17336] ieee80211_iface_work+0xe2e/0x1360 [ 3433.230303][T17336] cfg80211_wiphy_work+0x2c4/0x580 [ 3433.235448][T17336] process_one_work+0x9cf/0x1b70 [ 3433.241035][T17336] worker_thread+0x6c8/0xf10 [ 3433.245666][T17336] kthread+0x3c5/0x780 [ 3433.249789][T17336] ret_from_fork+0x5d4/0x6f0 [ 3433.254428][T17336] ret_from_fork_asm+0x1a/0x30 [ 3433.259235][T17336] [ 3433.261573][T17336] Freed by task 16649: [ 3433.265663][T17336] kasan_save_stack+0x33/0x60 [ 3433.270380][T17336] kasan_save_track+0x14/0x30 [ 3433.275084][T17336] kasan_save_free_info+0x3b/0x60 [ 3433.280150][T17336] __kasan_slab_free+0x60/0x70 [ 3433.284944][T17336] kfree+0x2b4/0x4d0 [ 3433.288949][T17336] ieee80211_inform_bss+0x77c/0x1140 [ 3433.294276][T17336] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 3433.300565][T17336] cfg80211_inform_bss_data+0x224/0x3bd0 [ 3433.306231][T17336] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 3433.312416][T17336] ieee80211_bss_info_update+0x310/0xab0 [ 3433.318095][T17336] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 3433.324298][T17336] ieee80211_iface_work+0xe2e/0x1360 [ 3433.329702][T17336] cfg80211_wiphy_work+0x2c4/0x580 [ 3433.334849][T17336] process_one_work+0x9cf/0x1b70 [ 3433.339826][T17336] worker_thread+0x6c8/0xf10 [ 3433.344439][T17336] kthread+0x3c5/0x780 [ 3433.348548][T17336] ret_from_fork+0x5d4/0x6f0 [ 3433.353178][T17336] ret_from_fork_asm+0x1a/0x30 [ 3433.358060][T17336] [ 3433.360402][T17336] The buggy address belongs to the object at ffff888025a6d800 [ 3433.360402][T17336] which belongs to the cache kmalloc-1k of size 1024 [ 3433.374742][T17336] The buggy address is located 0 bytes inside of [ 3433.374742][T17336] freed 1024-byte region [ffff888025a6d800, ffff888025a6dc00) [ 3433.388479][T17336] [ 3433.390819][T17336] The buggy address belongs to the physical page: [ 3433.397424][T17336] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25a68 [ 3433.406208][T17336] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3433.414724][T17336] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3433.422732][T17336] page_type: f5(slab) [ 3433.426749][T17336] raw: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 3433.435451][T17336] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 3433.444065][T17336] head: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 3433.452847][T17336] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 3433.461549][T17336] head: 00fff00000000003 ffffea0000969a01 00000000ffffffff 00000000ffffffff [ 3433.470263][T17336] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3433.478952][T17336] page dumped because: kasan: bad access detected [ 3433.485380][T17336] page_owner tracks the page as allocated [ 3433.491106][T17336] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13, tgid 13 (kworker/u8:1), ts 147609861037, free_ts 146835891689 [ 3433.510333][T17336] post_alloc_hook+0x1c0/0x230 [ 3433.515156][T17336] get_page_from_freelist+0x132b/0x38e0 [ 3433.520736][T17336] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 3433.526750][T17336] alloc_pages_mpol+0x1fb/0x550 [ 3433.531639][T17336] new_slab+0x247/0x330 [ 3433.535838][T17336] ___slab_alloc+0xcf2/0x1740 [ 3433.540566][T17336] __slab_alloc.constprop.0+0x56/0xb0 [ 3433.546056][T17336] __kmalloc_noprof+0x2f2/0x510 [ 3433.550940][T17336] ieee802_11_parse_elems_full+0x1db/0x3780 [ 3433.556864][T17336] ieee80211_inform_bss+0x10b/0x1140 [ 3433.562194][T17336] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 3433.568559][T17336] cfg80211_inform_bss_data+0x224/0x3bd0 [ 3433.574235][T17336] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 3433.580338][T17336] ieee80211_bss_info_update+0x310/0xab0 [ 3433.586015][T17336] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 3433.592220][T17336] ieee80211_iface_work+0xe2e/0x1360 [ 3433.597529][T17336] page last free pid 6539 tgid 6523 stack trace: [ 3433.603880][T17336] __free_frozen_pages+0x7d5/0x10f0 [ 3433.609109][T17336] __put_partials+0x165/0x1c0 [ 3433.613815][T17336] qlist_free_all+0x4d/0x120 [ 3433.618521][T17336] kasan_quarantine_reduce+0x195/0x1e0 [ 3433.624104][T17336] __kasan_slab_alloc+0x69/0x90 [ 3433.629000][T17336] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 3433.635019][T17336] __alloc_skb+0x2b2/0x380 [ 3433.639469][T17336] __ip6_append_data+0x2b74/0x4750 [ 3433.644615][T17336] ip6_append_data+0x1bd/0x4c0 [ 3433.649414][T17336] rawv6_sendmsg+0x163d/0x4820 [ 3433.654201][T17336] inet_sendmsg+0x11c/0x140 [ 3433.658817][T17336] ____sys_sendmsg+0x973/0xc70 [ 3433.663625][T17336] ___sys_sendmsg+0x134/0x1d0 [ 3433.668341][T17336] __sys_sendmmsg+0x200/0x420 [ 3433.673050][T17336] __x64_sys_sendmmsg+0x9c/0x100 [ 3433.678032][T17336] do_syscall_64+0xcd/0x490 [ 3433.682575][T17336] [ 3433.684914][T17336] Memory state around the buggy address: [ 3433.690564][T17336] ffff888025a6d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3433.698736][T17336] ffff888025a6d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3433.706827][T17336] >ffff888025a6d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3433.714911][T17336] ^ [ 3433.719023][T17336] ffff888025a6d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3433.727200][T17336] ffff888025a6d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3433.735281][T17336] ================================================================== [ 3433.743461][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3433.797415][T15765] Bluetooth: hci4: command tx timeout [ 3434.126602][T17336] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3434.133958][T17336] CPU: 1 UID: 0 PID: 17336 Comm: syz.3.7127 Not tainted syzkaller #0 PREEMPT(full) [ 3434.143354][T17336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3434.153434][T17336] Call Trace: [ 3434.156732][T17336] [ 3434.159672][T17336] dump_stack_lvl+0x3d/0x1f0 [ 3434.164295][T17336] vpanic+0x6e8/0x7a0 [ 3434.168308][T17336] ? __pfx_vpanic+0x10/0x10 [ 3434.172859][T17336] ? __pfx_vprintk_emit+0x10/0x10 [ 3434.177900][T17336] ? force_devcd_write+0x312/0x340 [ 3434.183036][T17336] panic+0xca/0xd0 [ 3434.186872][T17336] ? __pfx_panic+0x10/0x10 [ 3434.191362][T17336] ? force_devcd_write+0x312/0x340 [ 3434.196500][T17336] ? preempt_schedule_common+0x44/0xc0 [ 3434.201984][T17336] ? preempt_schedule_thunk+0x16/0x30 [ 3434.207511][T17336] check_panic_on_warn+0xab/0xb0 [ 3434.212489][T17336] end_report+0x107/0x170 [ 3434.216886][T17336] kasan_report+0xee/0x110 [ 3434.221355][T17336] ? force_devcd_write+0x312/0x340 [ 3434.226505][T17336] force_devcd_write+0x312/0x340 [ 3434.231471][T17336] ? __pfx_force_devcd_write+0x10/0x10 [ 3434.237223][T17336] ? __debugfs_file_get+0x1fe/0x840 [ 3434.242464][T17336] ? __pfx___debugfs_file_get+0x10/0x10 [ 3434.248145][T17336] ? rcu_is_watching+0x12/0xc0 [ 3434.253025][T17336] full_proxy_write+0x12e/0x1a0 [ 3434.257919][T17336] ? __pfx_full_proxy_write+0x10/0x10 [ 3434.263343][T17336] vfs_write+0x29d/0x11d0 [ 3434.267739][T17336] ? __pfx___mutex_lock+0x10/0x10 [ 3434.272896][T17336] ? __pfx_vfs_write+0x10/0x10 [ 3434.277992][T17336] ? __fget_files+0x204/0x3c0 [ 3434.282697][T17336] ? rcu_is_watching+0x12/0xc0 [ 3434.287493][T17336] ? __fget_files+0x20e/0x3c0 [ 3434.292226][T17336] ksys_write+0x12a/0x250 [ 3434.296622][T17336] ? __pfx_ksys_write+0x10/0x10 [ 3434.301600][T17336] do_syscall_64+0xcd/0x490 [ 3434.306147][T17336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3434.312073][T17336] RIP: 0033:0x7f198d78ebe9 [ 3434.316593][T17336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3434.336354][T17336] RSP: 002b:00007f198e68c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3434.344898][T17336] RAX: ffffffffffffffda RBX: 00007f198d9b6090 RCX: 00007f198d78ebe9 [ 3434.352908][T17336] RDX: 000000000000000e RSI: 0000000000000000 RDI: 000000000000000a [ 3434.360902][T17336] RBP: 00007f198d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 3434.368981][T17336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3434.377117][T17336] R13: 00007f198d9b6128 R14: 00007f198d9b6090 R15: 00007ffcc39d8f48 [ 3434.385114][T17336] [ 3434.388483][T17336] Kernel Offset: disabled [ 3434.392918][T17336] Rebooting in 86400 seconds..