last executing test programs: 5m45.858871462s ago: executing program 2 (id=1228): socket(0xa, 0x801, 0x84) munmap$auto(0x8000, 0xffffffff) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x1d, 0x802, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)={0x14, r1, 0x305, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/numa_maps\x00', 0x44a80, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) lseek$auto(r3, 0x7ff, 0x1) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) (async) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x4d, 0x0, 0x1}}) (async) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0x0) (async) ioctl$auto(0x3, 0x890b, 0x38) 5m45.053467804s ago: executing program 2 (id=1232): unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r0, 0x0, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mbind$auto(0xf4000000, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) 5m44.366514639s ago: executing program 2 (id=1235): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x8000000000000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYBLOB="000326bd69dbd97f59f712780000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) connect$auto(0x3, 0x0, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r3 = syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(0x4, 0x0, 0xfdef) clone3$auto(&(0x7f0000002c40)={0x6, 0x8, 0x100000001, 0xffff, 0x8, 0xffff, 0x4, 0x4, 0x7f, 0x0, 0x40000000000000}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/mdc800/bind\x00', 0x14b142, 0x0) msgctl$auto_IPC_STAT(0x2, 0x2, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x4, 0x11, 0x400003, 0x581}, 0x0, 0x0, 0x2, 0xa, 0x3, 0x1, 0x80000000000004, 0x1df, 0x3, 0x10, @inferred=r3, @raw=0xb9}) ptrace$auto_PTRACE_SETREGSET(0x4205, 0x0, 0x2, 0x9193) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) 5m42.895531397s ago: executing program 2 (id=1240): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b72, r1) ioctl$auto_SG_GET_TIMEOUT2(r1, 0x2202, &(0x7f0000000140)="02abb2") write$auto_buffer_percent_fops_trace(r1, &(0x7f0000000040)="82b48aa5a56e", 0x6) rseq$auto(&(0x7f00000002c0)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7) ioperm$auto(0x3, 0xe, 0x2000000000000149) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000380), 0x101100, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000088}, 0x20000000) kcmp$auto(0x1, 0x100000001, 0x5, 0x8f0, 0x24000) unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x936355e497c8b7e3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec23\x00', 0x81, 0x0) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r6, 0x805c6103, &(0x7f00000000c0)={"9fe12d0e", 0x7fff, 0xf7, 0x9, 0xf, 0x81, "c5ecb711d49b99d8b740c5d4e1ad4c", "f5aa10bc", "70aef821", "d2ec8d0c", ["604ba6002f799d4a504297d8", "fce426997295082242499c81", "4073ef6d49e2b7c053748fc7", "f757c427ab4969347727842f"]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/kernel/shm_rmid_forced\x00', 0x40, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r9, 0x0, 0x0) r10 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000200)={@_si_pad}, 0x3, &(0x7f0000000280)={{0x2, 0x9}, {0x7fb7, 0xf5}, 0xced342, 0x5, 0x100, 0x3ff, 0x7, 0x3, 0x8, 0x0, 0x9, 0x1, 0x8, 0x2, 0x2657a5a0, 0x100000001}) ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000340)={0x8, @raw=0xffffffff, @inferred=r0, 0x5, 0x4, '\x00', {0x4, 0x8d3, 0x9, 0xee00, 0xffffffffffffffff, 0x6, 0x5, 0x904, {0x608, 0x9}, {0x7fffffff}, {0x7, 0x80000000}, 0x7, 0x8, 0xfffffbff, 0x6, 0x1, 0x1672, 0x9, 0x6, 0x5, 0xa, '\x00', 0x10, 0x2, 0x3, 0xfffc}}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x220, r8, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_REKEY_DATA={0x10d, 0x7a, 0x0, 0x1, [@typed={0x14, 0x32, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x74, 0x0, 0x0, @fd=r9}, @generic="8a46bcb357288c90f4ceb88ad6422d34aae4a5fd79fe654e3653bdd39cc0e4762c079bed49301d98f3b6061421ea37e521c82aff1cc97383f5bf90ddb1ec1e8c80d88d94c9974e279c269eb94f3dcdc61a4d542658bb4a64eed8ca520dd35dcedd0d5163e1e87beaef06b7490d18da84575ff139cdc268cfb533b0a2a5a4fea67b36fa944f8d356646bf3e2004a0fe87385e617f82c30f0c2a69718a8e8a0de982b870b76174416cade7c112e3f2763b498d7e7dea95025e77039499207330ceb588cb600511b8c979e98c1cc1d4ed0861", @nested={0x1c, 0x82, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @pid=r10}, @nested={0x4, 0xd2}, @typed={0xc, 0x2d, 0x0, 0x0, @u64=0x2}]}]}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x9}, @NL80211_ATTR_REG_ALPHA2={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xcf, 0x75, 0x0, 0x1, [@typed={0x8, 0x9b, 0x0, 0x0, @uid=r11}, @typed={0x54, 0x6e, 0x0, 0x0, @binary="d5efde1937fe2ab2d38ea505655f16d8e44af39cf6fd518d1925febbe9d2b29a09cb1ace795868206b1c4b5cdd3d8e2334fe83b8ddf1ee32491e39bd61209feb5611389b1b608072aecf63230b6aab90"}, @nested={0x8, 0x5a, 0x0, 0x1, [@nested={0x4, 0x61}]}, @typed={0x4, 0x10b}, @typed={0x4, 0x4}, @generic="812518a650ded9c3b8fa180eb20790496cc0eb420e89e34f23f2f7cc039dbcf0033adbbbd41c288c57ed24459fd21ecf71516d07062ef338cf49e967202acc10c220151c70ea4a2580aeff6700552c45996c6786621c7bb8bd7907a039edf1"]}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r13 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv6/conf/all/mldv2_unsolicited_report_interval\x00', 0x2000, 0x0) read$auto(r13, 0x0, 0x1ff) sendmsg$auto_GTP_CMD_GETPDP(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040814) 5m40.815370048s ago: executing program 2 (id=1251): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) pread64$auto(r0, 0x0, 0x800000003, 0x1) tkill$auto(0x1, 0x7) 5m38.982973973s ago: executing program 2 (id=1260): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x161342, 0x13d) write$auto(r1, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0b02, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x48802, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000100)='7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00,X\xb9\x0eQ\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xca\x03\xe4\x15\v]\x00\x00\x00\x11\x00'/67, 0x2) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x8, 0x3) 5m38.669077513s ago: executing program 32 (id=1260): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x161342, 0x13d) write$auto(r1, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0b02, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x48802, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000100)='7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00,X\xb9\x0eQ\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xca\x03\xe4\x15\v]\x00\x00\x00\x11\x00'/67, 0x2) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x8, 0x3) 18.338924637s ago: executing program 0 (id=2636): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x73) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpu1/hotplug/state\x00', 0x109100, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) 17.697303839s ago: executing program 0 (id=2638): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x5, 0x4020009, 0xdd, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x2ffffffffffe) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x2085c2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x6, 0x5, 0x0, 0x1, 0xfffffffffffffffc) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x2000009b72, 0x2, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000300)=0x8) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r4) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES64=r4, @ANYRES16=r5], 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x44036) pread64$auto(r3, 0x0, 0x8, 0xffff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) 14.880397437s ago: executing program 0 (id=2644): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x40, 0x1, 0x0, 0x8000000000001, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x10000, 0xcfd, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) socket(0x22, 0x3, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) 13.272467283s ago: executing program 0 (id=2652): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) write$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffff2900", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x2284, 0xffffffffffffffff) 10.864146358s ago: executing program 0 (id=2660): r0 = socket(0x10, 0x800, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_TIMESTAMPING_NEW(r0, 0x6, 0x41, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)=0x2) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)=0x80) socket(0x2, 0x80802, 0x0) r1 = socket(0xa, 0x3, 0x103) ustat$auto(0x801, 0x0) mmap$auto(0x2, 0xfffffffffffffffa, 0x2, 0x8000000000000010, r1, 0x100) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xe1, 0x1000009b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x4000000, 0x802020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x6) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) getrandom$auto(0x0, 0x6000000, 0x3) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0xb) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_settime$auto(r2, 0xffffff00, &(0x7f00000000c0)={{0x4, 0x5}, {0x9, 0x4}}, &(0x7f0000000180)={{0x5, 0x7fff}, {0x36d4, 0xed1f}}) timerfd_create$auto(0x1, 0x7) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x55) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x403, 0x0) 10.430054024s ago: executing program 0 (id=2663): madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/1:3/max_ratio\x00', 0xa041, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyab\x00', 0x88c80, 0x0) ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x8, 0xeb1, r3, 0x8002) socket(0x1a, 0x5, 0x8) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x3, 0x3], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000162bf2e0f7c562c691235555567190a8826fcd0cf756dfacd1464155407bf9b3acb701adf4fefbc1e3c225fda9eb4c4346887eff", @ANYRESOCT=r1, @ANYBLOB="01002dbd7000ffdbdf25020000000800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syslog$auto(0x3, 0x0, 0x5) 5.6253983s ago: executing program 3 (id=2682): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x5ad2, 0x8) (async) modify_ldt$auto(0xc, 0x0, 0x100000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) (async) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) (async) arch_prctl$auto(0x5001, 0x2) (async) umount2$auto(&(0x7f0000000500)='/proc/thread-self/ns/cgroup\x00', 0x8) r1 = clone$auto(0x3, 0x3, &(0x7f0000000080)=0x6d0, &(0x7f00000000c0)=0xa, 0x8) fcntl$auto(0x8000000000000001, 0x7, r1) (async) read$auto(r0, &(0x7f0000000000)='\'-\'\\(%\x00', 0x2) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) 4.728519641s ago: executing program 3 (id=2686): mmap$auto(0x0, 0x40019, 0xdf, 0x9b7f, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) userfaultfd$auto(0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/stat_refresh\x00', 0x101382, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7f, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) ioctl$auto(r0, 0x541c, r1) getxattrat$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000780)={0x9b0a38c, 0xf, 0x7fff}, 0x983) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) write$auto(0x3, 0x0, 0x7fffffff) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x55) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) semget$auto(0x0, 0x13c, 0x203) 4.461252318s ago: executing program 4 (id=2688): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r0, 0x0, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0xc, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x2, 0x3a) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000000)=""/65, 0x41) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) 3.625259437s ago: executing program 3 (id=2690): r0 = socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000006040)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x96}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd4}, 0x20000014) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) syz_clone(0x188000, &(0x7f0000001980)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)="e2e9055f51ec7b1b127b00fa2c2b51a51c6105f9268222871f6397ad5f175233efaa") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) 3.521526302s ago: executing program 4 (id=2691): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x73) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpu1/hotplug/state\x00', 0x109100, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) read$auto(r2, 0x0, 0x20) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) 3.282284493s ago: executing program 4 (id=2692): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) read$auto_lru_gen_rw_fops_vmscan(r0, &(0x7f00000000c0)=""/4096, 0xfffffffffffffe82) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r3, 0x2f}, 0x22) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x8182, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x208080, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 3.07661071s ago: executing program 4 (id=2693): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x15, 0x800, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x7, 0x6, 0xffffffffffffffff, 0xfffffffffffffff9, r0, 0xffffffffffffffff) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) read$auto(0x3, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(0xffffffffffffffff, 0x550c, 0x0) 3.07012086s ago: executing program 3 (id=2694): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x100000000000039, 0x0) (async) fsopen$auto(0x0, 0x1) (async) remap_file_pages$auto(0x6a27, 0xa3, 0x480, 0x201, 0x4) (async) setrlimit$auto(0x9, &(0x7f0000000000)={0xfffffffffffffffc, 0xfffffffffffffffc}) (async) remap_file_pages$auto(0x8, 0x6, 0x0, 0x6, 0x80) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 2.880208474s ago: executing program 1 (id=2696): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88042, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-pass-vlan-input-dev\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) mmap$auto(0x2a2, 0x40000000400008, 0xdf, 0x11, r0, 0x6) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000600)='./file0\x00', 0x22240, 0x1fd) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x10c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@CIFS_GENL_ATTR_SWN_RESOURCE_NAME={0x9, 0xe, '*-:.`'}, @CIFS_GENL_ATTR_SWN_RESOURCE_STATE={0x8, 0xd, 0x10}, @CIFS_GENL_ATTR_SWN_SHARE_NAME_NOTIFY={0x4}, @CIFS_GENL_ATTR_SWN_NOTIFICATION_TYPE={0x8, 0xc, 0x3}, @CIFS_GENL_ATTR_SWN_NET_NAME={0x37, 0x2, '/proc/sys/net/bridge/bridge-nf-pass-vlan-input-dev\x00'}, @CIFS_GENL_ATTR_SWN_IP={0x84, 0x4, @l2tp={0x2, 0x0, @broadcast, 0x3}}, @CIFS_GENL_ATTR_SWN_IP_NOTIFY={0x4}, @CIFS_GENL_ATTR_SWN_DOMAIN_NAME={0x17, 0xb, '/proc/self/oom_adj\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x480, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000540), r2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)={0x11b8, r5, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PACKET={0x12, 0x1, "91540f3ab8469bd19deb0ceb479c"}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x594}, @OVS_PACKET_ATTR_KEY={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x35}]}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x8}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x3}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "f527029b239181c4ddce834dbf38"}, @OVS_PACKET_ATTR_KEY={0x10a9, 0x2, 0x0, 0x1, [@generic="2b7c6a22bcfce1dba5ce66bb50e898efc93630f2ea1b0b8f80e142556b0a07123f3b4a1112aeaf4d04e5c1e3785ab447196616116427802677c65286281424e7bbab932b364c05eca8eb3bd32fd3bd7b9609314eecea38911be335f6fb71d116206b3a46ff9a47cadbba38933f9d86988a209679fd3564a7986413a25a", @typed={0xc, 0x141, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0xc2, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0xc1}, @typed={0x1004, 0x10f, 0x0, 0x0, @binary="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"}, @typed={0xc, 0xc4, 0x0, 0x0, @u64=0x2}]}, @OVS_PACKET_ATTR_KEY={0xa2, 0x2, 0x0, 0x1, [@nested={0x20, 0xfd, 0x0, 0x1, [@typed={0x4, 0x32}, @nested={0x4, 0xc8}, @typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@empty}]}, @generic="dae4e50f964cf0c2dd08ec6342e6f81238ea2a2923a26161f699a89a60517544915b27eb06544b017ab688a07257346c809a8d82ca5cfce1849fa865dff4f380bc308fae969cee4a07d781c15d9e116781817874fd1c701ed455b4ff4bba22600fbe86efda8a", @nested={0x18, 0xb2, 0x0, 0x1, [@nested={0x4, 0x6}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0xde}]}]}]}, 0x11b8}, 0x1, 0x0, 0x0, 0x990}, 0x800) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r6, 0x0, 0x1f40) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_fops_x16_ro_(r7, &(0x7f0000000180)=""/62, 0x3e) r8 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) sendmsg$auto_OVS_DP_CMD_GET(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r8, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x16}, 0x40000) r10 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r10, &(0x7f0000000200)={0x0, 0x7}, 0x3) shmctl$auto_SHM_INFO(0x4, 0xe, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 2.716006038s ago: executing program 3 (id=2697): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/speed\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x4, 0x80003, 0xa, @state_change={0x200, 0x9, 0x3}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x4, 0x2, 0x10, &(0x7f0000000040)=0x7) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x8200000001, 0x0, 0x801, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x2000000000, 0x8000000000000001, 0x3, 0x8000eb1, 0xfffffffffffffffa, 0x80000001) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x9, &(0x7f0000000680)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI+\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\x1e\t\xef\xe4&\x91\x8ey\x97\x00e:\v\xe6\x14\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2\x96\xf97\xe3\x05\xf7\x19\x9f\xb7r\x9b-=\\N\xc7\xc3\xbcg:\xaf\xb1\x1d\xa1\xe4\xb7\xd6\xe4\xb6\x1c\x11LE\xb7\xcb\x1bTD\xa6\v\xf8\xa5\xce%-\x06FVa\xc8\xca\xc5\xea\bF\xc2\x94\xef\nI\xe6\x04\xbe\xe8-d]Q\xfc.5 \xa7@w\xd8\xd9pEW\xe4`\x85;d\t\xd8\x10lT\x88xS{\xb9\x94P\xc3\x1f\x0f\xbc\xcb\xbc\xe9\x85zC\x86\xc976\xf8\xb3\x85lQ\xdd\x9c\xc6\x93mA\x1dH#fr2\xed \x8a\xc5\x8f\x01\x9a\x01I\x95H)rEF\xe2\x00\x11\x18\xfb\xc7N\x02Qn\x92\xa8\x8c\x87\xc4\x1c/\xf4\x15\xa6\xea\xa9A8\x99(\xfds@aq\xbeo&}\x9f`\xc1\xd3\xecYU\x11!\x8a8\xf5B6\xc6\x83\xf1\x93\xaa\x1c\x81`\xbe\xfcO\v<>\r\xcc\xd5C\x93\xe0\xcd\x125K\xb4f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020006, 0x3, 0x7fff, 0xffffffffffffffff, 0x100029000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000003c0)={[0x1ff, 0x7, 0xd, 0x1, 0x800000000000948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001b, 0x7, 0x6d3e, 0x9, 0x2, 0xa]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) madvise$auto(0x200000, 0x20499d, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vivid.0/video4linux/video11/power/runtime_active_time\x00', 0x101000, 0x0) socket(0x2, 0x5, 0x3a) 1.756557426s ago: executing program 1 (id=2699): ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000005c0)={{0xffffffffffffffff, &(0x7f0000000100), 0x101, &(0x7f0000000340), 0x3, &(0x7f0000000440)="4f621839f1f6f2f10f7489395483cc4f7dd0c7317d1ead5786f9fe97deb5c9d0f04b08a2f56e150c49be91d5dd489a79b391243ee22f4a", &(0x7f0000000480)=0x9}, {[0x4, 0xfffffffd, 0x8, 0x7a]}, 0x14, 0x6, &(0x7f00000004c0)="852dd6a7b259d9e7a5eb74ac697cd21ee6065f7f2a9058eed931d9b0c0d805052cd988c92166a90e294d94a568efb6f43e267a720745ddb7a6dd3667d63cf0a0446995e3f0fe3f976d21b67165901c14425fcaeb4f411a50a5a7a3f23e1aae0a582de63d8ce514ba277b9fa21aabb0990ae4611ad972ff8b46770b7191ac4b107c808c7feba9b39a6e7bc8cdeb669a6986f4aec6ab57dae1d81ccf"}) ioctl$auto_RTC_PARAM_SET(r0, 0x40187014, &(0x7f00000001c0)={0xd8de, @svalue=0xe96d, 0x7}) (async) socket(0x2, 0x80000, 0xa) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = bpf$auto(0x5, 0x0, 0x261) mmap$auto(0x0, 0x20805, 0x4000000000df, 0x4000000eb1, 0x401, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0x200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000003c0)=""/212, 0xd4) mmap$auto(0x80, 0x6, 0x4000000000df, 0xeb1, 0x401, 0x7ffe) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000300)="00000000000086b76936299793c41ecd706863efcb6f53d06906d9d521") ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f00000000c0)="c0402e39") (async) write$auto(r2, &(0x7f0000000140)='1\x00\\\xa0\x04t\x9f\xfd)m|E\x19\xf8\xd0\xba]\xb1\xb5\xba\xf3\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x188\x9a }\f\xf6\xdb,\xd0\x03~\x1eS\xe6', 0x5) setsockopt$auto_SO_OOBINLINE(r1, 0x3a06183d, 0xa, &(0x7f0000000680)='#\x00\x00v\x1a\xb0a4\x1f\x96\x8f\xe3!\xf5\x7f\x1a\x13\xcdO\x00\x00\x00\x000\xa2r\xf04\x8f\x97\xdb\nq\x0f\xe6\xf0 JJ\xb9e\x13\xe9x[\xa9@\xf4h%\x0e\xe5\xacZ\x86A\n%\a\x1a\xee\xf4; x\xa1\xf7\x9a\x94i:^3:\xfd\xf2FB\"M{i\x81\xb7\xd88\xcalpS6\xcb\x00\x00\x00\x00\x00\x00\x00\x005\x9far4\xac\xd8lq\x03\xccn\x00\x00\x00\x00\x00\x00\xd4\xdf\xce\xday\xfd\x8e;\xb4\x9b{\xc1Y\xe4\a{\x8f\xc8\xa4\xa1\xdb.\xc15K\xdexop\xd56\x1a6\xeb\xd3\xac\xe5\xa9\x05?\x91\xd9\xdb?\xee\xf1\xf8\xc8\xe6,\x14\xd2p\x90\xa8\x18\x80\xc0Q\r\x9b\xd9\b=\x7f\a\x91\xacE\x11_=\xe7\xd4\xa3\xb8+x\vx\xe9\xe7O\xc6\xf9\xd3\x8d\x7f\x92\xb6M\x84\x0f\x16\xdcx\xa8\xb4\x0e\x84\xfe\x8a\xd3\xe0\xceV\xb1`&\xec\xdc\xc8\n\xc0G\x03:kg\xa1Y\xc7C\xd4\x06\x0e~X\xaf\xcd\x99\x84\xe8\x1cCt\x8c\xc0LkS', 0xfffffff7) (async) prctl$auto_PR_GET_DUMPABLE(0x3, 0x8a, 0x0, 0xfffffffffffffffd, 0xd) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mlock$auto(0xfbe8, 0x4) (async) syz_clone(0x20000, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) munlock$auto(0xffff, 0x1) (async) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47fbff7a) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb2, 0x20000000000, 0x10000000008000) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/power/runtime_status\x00', 0x10102, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1.569399469s ago: executing program 1 (id=2700): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0xfffffffffffffffc) socket(0x11, 0x80003, 0x300) mincore$auto(0x1000, 0x2, 0x0) timer_create$auto(0x0, 0x0, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r0, 0x0, 0x39b8) setsockopt$auto(r0, 0x100, 0x6, 0x0, 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) 1.546558731s ago: executing program 4 (id=2701): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e20, @broadcast}, 0x1d) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) ioctl$auto(0x3, 0x89e1, 0x91) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x29, 0x2d7f, 0xd, 0x2, 0x948b, 0x3, 0xbe, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) ioctl$auto_BINDER_SET_CONTEXT_MGR(r1, 0x40046207, &(0x7f0000000000)="a9fa1a7c483c9ac32a065c885cea578b04240ef9d04db1d430b3fce4f3fca900288b651f5143487a101e7f229fc23cc565f868a2a72c4d7914") 1.183361821s ago: executing program 1 (id=2702): r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pimreg\x00'}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_active\x00', 0x200, 0x0) pread64$auto(r1, 0x0, 0x81, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) ioctl$auto_SIOCSIFHWADDR2(r0, 0x8924, &(0x7f0000000300)="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") sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x1, 0x3, 0x11, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x23, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r2, 0x10e, 0x1, 0x0, 0xe) rseq$auto(&(0x7f0000000040)={0x5, 0x7, 0x80000001, 0x806, 0xffffffff, 0x2}, 0x8004, 0x0, 0x8000006) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x400, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x28, 0xa, 0x1) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/etherd/discover\x00', 0x0, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='\x10\xc8J\x11\xdf\xb5$\xf2\x866\xb9\xcf\xa0\xe8\x8d\x16\xf1\xa4i\x0f\x8e\x00\x85\x97d\xa6\x1f>\xde^\xba \x1an\xa5L\x96\xc8\xe1*\x8b3:\a\xe8fO\xdc\xd5\xf8\x7f\xfd\xb8a\xcev\xe9_\b\x7fN\xdc\xc2D\x8fV\xc9\x9f\xed\x8d5\xacP', 0x9, 0x0) 991.217685ms ago: executing program 1 (id=2703): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r1 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r1, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @multicast1}, 0x55) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004540)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0xd6, 0xffc, 0x0, &(0x7f0000000080)=0x3) nanosleep$auto(0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x1, 0x4020009, 0x4000000000000db, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bbfa6204b202ca29808e75e31412006b427302000000000000004ae96f28029acfad3c8340ca49b490fc4becbcf8d33c3b225cabc57e7d7b3abf11015e517320fee78de3a755bdc326621277190466780da205", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) socketpair$auto(0x1, 0xffffffff, 0x8000000000000000, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x7fffffff, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 515.086414ms ago: executing program 3 (id=2704): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) write$auto(0x3, 0x0, 0x7fffffff) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x2284, r0) 0s ago: executing program 4 (id=2705): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/dev/cdrom/autoclose\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x7, 0x5ad2, 0x8) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r1, 0x1000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7ffffffffffffffb, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x4, &(0x7f0000000300)={&(0x7f0000000240)=0x0, 0x0, 0x0, {0x1}}, 0x0, 0x8) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x1, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) fanotify_mark$auto(0xffffffffffffffff, 0x521, 0x7, 0xffffffffffffffff, 0x0) futex_wait$auto(0x0, 0x6, 0x2, 0x6, 0x0, 0xc3a) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/dev/cdrom/autoclose\x00', 0x202, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioperm$auto(0x7, 0x5ad2, 0x8) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2, 0x0) (async) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r1, 0x1000) (async) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7ffffffffffffffb, 0x0, {0x5}}, 0x0, 0x8) (async) rt_sigaction$auto(0x4, &(0x7f0000000300)={&(0x7f0000000240)=0x0, 0x0, 0x0, {0x1}}, 0x0, 0x8) (async) gettid() (async) rt_sigqueueinfo$auto(r2, 0x1, 0x0) (async) sendfile$auto(r0, r0, 0x0, 0x1) (async) fanotify_mark$auto(0xffffffffffffffff, 0x521, 0x7, 0xffffffffffffffff, 0x0) (async) futex_wait$auto(0x0, 0x6, 0x2, 0x6, 0x0, 0xc3a) (async) kernel console output (not intermixed with test programs): 68][T16123] copy_ipcs+0x383/0x610 [ 515.738481][T16123] ? copy_utsname+0xab/0x470 [ 515.738499][T16123] create_new_namespaces+0x20a/0xa90 [ 515.738513][T16123] ? security_capable+0x7e/0x260 [ 515.738527][T16123] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 515.738542][T16123] ksys_unshare+0x45b/0xa40 [ 515.738560][T16123] ? __pfx_ksys_unshare+0x10/0x10 [ 515.738576][T16123] ? xfd_validate_state+0x61/0x180 [ 515.738596][T16123] __x64_sys_unshare+0x31/0x40 [ 515.738613][T16123] do_syscall_64+0xcd/0x490 [ 515.738641][T16123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.738656][T16123] RIP: 0033:0x7f9450f8ebe9 [ 515.738668][T16123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.738681][T16123] RSP: 002b:00007f9451ea4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 515.738694][T16123] RAX: ffffffffffffffda RBX: 00007f94511b6090 RCX: 00007f9450f8ebe9 [ 515.738703][T16123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 515.738711][T16123] RBP: 00007f9451011e19 R08: 0000000000000000 R09: 0000000000000000 [ 515.738719][T16123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.738726][T16123] R13: 00007f94511b6128 R14: 00007f94511b6090 R15: 00007ffec11bf878 [ 515.738738][T16123] [ 516.498283][T16138] FAULT_INJECTION: forcing a failure. [ 516.498283][T16138] name failslab, interval 1, probability 0, space 0, times 0 [ 516.548353][T16138] CPU: 0 UID: 0 PID: 16138 Comm: syz.4.2016 Tainted: G U syzkaller #0 PREEMPT(full) [ 516.548381][T16138] Tainted: [U]=USER [ 516.548386][T16138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.548395][T16138] Call Trace: [ 516.548400][T16138] [ 516.548406][T16138] dump_stack_lvl+0x16c/0x1f0 [ 516.548427][T16138] should_fail_ex+0x512/0x640 [ 516.548447][T16138] should_failslab+0xc2/0x120 [ 516.548465][T16138] __kmalloc_cache_noprof+0x6a/0x3e0 [ 516.548479][T16138] ? trace_kmalloc+0x2b/0xd0 [ 516.548496][T16138] ? __kvmalloc_node_noprof+0x298/0x620 [ 516.548510][T16138] ? single_open+0x4d/0x1f0 [ 516.548528][T16138] ? single_open_size+0x4e/0x160 [ 516.548554][T16138] ? __pfx_show_stat+0x10/0x10 [ 516.548570][T16138] single_open+0x4d/0x1f0 [ 516.548588][T16138] ? __pfx_show_stat+0x10/0x10 [ 516.548603][T16138] single_open_size+0x6d/0x160 [ 516.548614][T16138] ? __pfx_stat_open+0x10/0x10 [ 516.548629][T16138] proc_reg_open+0x137/0x5f0 [ 516.548645][T16138] do_dentry_open+0x97f/0x1530 [ 516.548661][T16138] ? __pfx_proc_reg_open+0x10/0x10 [ 516.548678][T16138] vfs_open+0x82/0x3f0 [ 516.548696][T16138] path_openat+0x1de4/0x2cb0 [ 516.548714][T16138] ? __pfx_path_openat+0x10/0x10 [ 516.548730][T16138] do_filp_open+0x20b/0x470 [ 516.548744][T16138] ? __pfx_do_filp_open+0x10/0x10 [ 516.548763][T16138] ? alloc_fd+0x471/0x7d0 [ 516.548778][T16138] do_sys_openat2+0x11b/0x1d0 [ 516.548796][T16138] ? __pfx_do_sys_openat2+0x10/0x10 [ 516.548817][T16138] __x64_sys_openat+0x174/0x210 [ 516.548836][T16138] ? __pfx___x64_sys_openat+0x10/0x10 [ 516.548857][T16138] do_syscall_64+0xcd/0x490 [ 516.548874][T16138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.548887][T16138] RIP: 0033:0x7fe5fa58ebe9 [ 516.548898][T16138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.548911][T16138] RSP: 002b:00007fe5fb3f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 516.548924][T16138] RAX: ffffffffffffffda RBX: 00007fe5fa7b6180 RCX: 00007fe5fa58ebe9 [ 516.548933][T16138] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 516.548941][T16138] RBP: 00007fe5fa611e19 R08: 0000000000000000 R09: 0000000000000000 [ 516.548950][T16138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.548958][T16138] R13: 00007fe5fa7b6218 R14: 00007fe5fa7b6180 R15: 00007ffe75e2be68 [ 516.548970][T16138] [ 517.188421][T16144] zswap: compressor not available [ 518.266032][T16180] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 518.282443][T16181] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 518.595462][T16193] FAULT_INJECTION: forcing a failure. [ 518.595462][T16193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.652681][T16193] CPU: 0 UID: 0 PID: 16193 Comm: syz.1.2026 Tainted: G U syzkaller #0 PREEMPT(full) [ 518.652706][T16193] Tainted: [U]=USER [ 518.652711][T16193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.652719][T16193] Call Trace: [ 518.652724][T16193] [ 518.652730][T16193] dump_stack_lvl+0x16c/0x1f0 [ 518.652753][T16193] should_fail_ex+0x512/0x640 [ 518.652776][T16193] _copy_from_user+0x2e/0xd0 [ 518.652796][T16193] copy_msghdr_from_user+0x98/0x160 [ 518.652814][T16193] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 518.652831][T16193] ? __pfx__kstrtoull+0x10/0x10 [ 518.652846][T16193] ? rcu_is_watching+0x12/0xc0 [ 518.652860][T16193] ___sys_sendmsg+0xfe/0x1d0 [ 518.652876][T16193] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.652894][T16193] ? rcu_is_watching+0x12/0xc0 [ 518.652912][T16193] __sys_sendmmsg+0x200/0x420 [ 518.652928][T16193] ? __pfx___sys_sendmmsg+0x10/0x10 [ 518.652944][T16193] ? lock_release+0x201/0x2f0 [ 518.652963][T16193] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 518.652983][T16193] ? fput+0x9b/0xd0 [ 518.653000][T16193] ? ksys_write+0x1ac/0x250 [ 518.653014][T16193] ? __pfx_ksys_write+0x10/0x10 [ 518.653029][T16193] __x64_sys_sendmmsg+0x9c/0x100 [ 518.653045][T16193] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 518.653066][T16193] do_syscall_64+0xcd/0x490 [ 518.653083][T16193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.653096][T16193] RIP: 0033:0x7fc33af8ebe9 [ 518.653107][T16193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.653120][T16193] RSP: 002b:00007fc33bd1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 518.653134][T16193] RAX: ffffffffffffffda RBX: 00007fc33b1b5fa0 RCX: 00007fc33af8ebe9 [ 518.653142][T16193] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 518.653150][T16193] RBP: 00007fc33bd1b090 R08: 0000000000000000 R09: 0000000000000000 [ 518.653158][T16193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.653166][T16193] R13: 00007fc33b1b6038 R14: 00007fc33b1b5fa0 R15: 00007ffc33e9da58 [ 518.653178][T16193] [ 518.875210][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.941550][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'. [ 521.073031][T16284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'. [ 521.143032][T16284] Invalid ELF header magic: != ELF [ 521.503433][T16292] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2040'. [ 525.324477][T16405] FAULT_INJECTION: forcing a failure. [ 525.324477][T16405] name failslab, interval 1, probability 0, space 0, times 0 [ 525.381987][T16405] CPU: 0 UID: 0 PID: 16405 Comm: syz.1.2057 Tainted: G U syzkaller #0 PREEMPT(full) [ 525.382014][T16405] Tainted: [U]=USER [ 525.382019][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.382028][T16405] Call Trace: [ 525.382033][T16405] [ 525.382039][T16405] dump_stack_lvl+0x16c/0x1f0 [ 525.382061][T16405] should_fail_ex+0x512/0x640 [ 525.382081][T16405] should_failslab+0xc2/0x120 [ 525.382099][T16405] __kmalloc_cache_noprof+0x6a/0x3e0 [ 525.382114][T16405] ? __do_sys_memfd_create+0x17b/0x8a0 [ 525.382135][T16405] __do_sys_memfd_create+0x17b/0x8a0 [ 525.382155][T16405] do_syscall_64+0xcd/0x490 [ 525.382172][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.382185][T16405] RIP: 0033:0x7fc33af8ebe9 [ 525.382197][T16405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.382210][T16405] RSP: 002b:00007fc33bd1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 525.382223][T16405] RAX: ffffffffffffffda RBX: 00007fc33b1b5fa0 RCX: 00007fc33af8ebe9 [ 525.382232][T16405] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 525.382240][T16405] RBP: 00007fc33b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 525.382247][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.382255][T16405] R13: 00007fc33b1b6038 R14: 00007fc33b1b5fa0 R15: 00007ffc33e9da58 [ 525.382268][T16405] [ 526.825138][T16432] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 529.032328][T16478] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 529.439531][T16482] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 530.269665][T16499] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 531.327973][T16520] FAULT_INJECTION: forcing a failure. [ 531.327973][T16520] name failslab, interval 1, probability 0, space 0, times 0 [ 531.380190][T16520] CPU: 0 UID: 0 PID: 16520 Comm: syz.4.2081 Tainted: G U syzkaller #0 PREEMPT(full) [ 531.380223][T16520] Tainted: [U]=USER [ 531.380227][T16520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.380235][T16520] Call Trace: [ 531.380241][T16520] [ 531.380246][T16520] dump_stack_lvl+0x16c/0x1f0 [ 531.380267][T16520] should_fail_ex+0x512/0x640 [ 531.380286][T16520] should_failslab+0xc2/0x120 [ 531.380304][T16520] __kmalloc_cache_noprof+0x6a/0x3e0 [ 531.380318][T16520] ? trace_pid_list_alloc+0x27c/0x3f0 [ 531.380335][T16520] ? kasan_save_track+0x14/0x30 [ 531.380350][T16520] trace_pid_list_alloc+0x27c/0x3f0 [ 531.380370][T16520] trace_pid_write+0x10e/0x460 [ 531.380389][T16520] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 531.380406][T16520] ? __pfx_trace_pid_write+0x10/0x10 [ 531.380424][T16520] ? __pfx___mutex_lock+0x10/0x10 [ 531.380439][T16520] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 531.380456][T16520] ? update_last_data+0xb3/0x510 [ 531.380474][T16520] event_pid_write.isra.0+0x3f7/0x7f0 [ 531.380493][T16520] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 531.380509][T16520] ? lock_acquire+0x2cd/0x350 [ 531.380526][T16520] ? __pfx___might_resched+0x10/0x10 [ 531.380541][T16520] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 531.380557][T16520] vfs_writev+0x5df/0xde0 [ 531.380574][T16520] ? __pfx_vfs_writev+0x10/0x10 [ 531.380586][T16520] ? __mutex_lock+0x1c5/0x1060 [ 531.380602][T16520] ? do_writev+0x218/0x340 [ 531.380614][T16520] ? rcu_is_watching+0x12/0xc0 [ 531.380628][T16520] ? __pfx___mutex_lock+0x10/0x10 [ 531.380647][T16520] ? __fget_files+0x20e/0x3c0 [ 531.380663][T16520] ? do_writev+0x132/0x340 [ 531.380675][T16520] do_writev+0x132/0x340 [ 531.380688][T16520] ? __pfx_do_writev+0x10/0x10 [ 531.380703][T16520] do_syscall_64+0xcd/0x490 [ 531.380720][T16520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.380733][T16520] RIP: 0033:0x7fe5fa58ebe9 [ 531.380744][T16520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.380757][T16520] RSP: 002b:00007fe5fb434038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 531.380770][T16520] RAX: ffffffffffffffda RBX: 00007fe5fa7b5fa0 RCX: 00007fe5fa58ebe9 [ 531.380779][T16520] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 531.380787][T16520] RBP: 00007fe5fa611e19 R08: 0000000000000000 R09: 0000000000000000 [ 531.380796][T16520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.380803][T16520] R13: 00007fe5fa7b6038 R14: 00007fe5fa7b5fa0 R15: 00007ffe75e2be68 [ 531.380816][T16520] [ 531.692992][T16510] Process accounting resumed [ 531.903618][T16532] FAULT_INJECTION: forcing a failure. [ 531.903618][T16532] name fail_futex, interval 1, probability 0, space 0, times 0 [ 531.929034][T16532] CPU: 0 UID: 0 PID: 16532 Comm: syz.1.2091 Tainted: G U syzkaller #0 PREEMPT(full) [ 531.929061][T16532] Tainted: [U]=USER [ 531.929066][T16532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.929074][T16532] Call Trace: [ 531.929079][T16532] [ 531.929085][T16532] dump_stack_lvl+0x16c/0x1f0 [ 531.929110][T16532] should_fail_ex+0x512/0x640 [ 531.929129][T16532] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 531.929150][T16532] get_futex_key+0x1d0/0x1560 [ 531.929176][T16532] ? __pfx_get_futex_key+0x10/0x10 [ 531.929191][T16532] ? lock_release+0x201/0x2f0 [ 531.929211][T16532] futex_wake+0xea/0x530 [ 531.929230][T16532] ? futex_wait+0x120/0x380 [ 531.929248][T16532] ? __pfx_futex_wait+0x10/0x10 [ 531.929266][T16532] ? __pfx_futex_wake+0x10/0x10 [ 531.929285][T16532] ? rcu_is_watching+0x12/0xc0 [ 531.929298][T16532] ? do_raw_spin_lock+0x12c/0x2b0 [ 531.929317][T16532] do_futex+0x1e3/0x350 [ 531.929332][T16532] ? __pfx_do_futex+0x10/0x10 [ 531.929346][T16532] ? _raw_spin_unlock+0x28/0x50 [ 531.929360][T16532] ? do_set_mempolicy+0x220/0x480 [ 531.929377][T16532] __x64_sys_futex+0x1e0/0x4c0 [ 531.929393][T16532] ? __do_sys_close_range+0x278/0x730 [ 531.929409][T16532] ? __pfx___x64_sys_futex+0x10/0x10 [ 531.929425][T16532] ? __pfx___do_sys_close_range+0x10/0x10 [ 531.929441][T16532] do_syscall_64+0xcd/0x490 [ 531.929458][T16532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.929472][T16532] RIP: 0033:0x7fc33af8ebe9 [ 531.929482][T16532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.929495][T16532] RSP: 002b:00007fc33bd1b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 531.929509][T16532] RAX: ffffffffffffffda RBX: 00007fc33b1b5fa8 RCX: 00007fc33af8ebe9 [ 531.929518][T16532] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc33b1b5fac [ 531.929526][T16532] RBP: 00007fc33b1b5fa0 R08: 00007fc33bd1c000 R09: 0000000000000000 [ 531.929535][T16532] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 531.929544][T16532] R13: 00007fc33b1b6038 R14: 00007ffc33e9d970 R15: 00007ffc33e9da58 [ 531.929563][T16532] [ 532.192667][T16532] FAULT_INJECTION: forcing a failure. [ 532.192667][T16532] name failslab, interval 1, probability 0, space 0, times 0 [ 532.205355][T16532] CPU: 0 UID: 0 PID: 16532 Comm: syz.1.2091 Tainted: G U syzkaller #0 PREEMPT(full) [ 532.205379][T16532] Tainted: [U]=USER [ 532.205384][T16532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.205392][T16532] Call Trace: [ 532.205399][T16532] [ 532.205405][T16532] dump_stack_lvl+0x16c/0x1f0 [ 532.205426][T16532] should_fail_ex+0x512/0x640 [ 532.205446][T16532] ? tomoyo_supervisor+0x45b/0x13b0 [ 532.205458][T16532] should_failslab+0xc2/0x120 [ 532.205477][T16532] __kmalloc_noprof+0xd2/0x510 [ 532.205491][T16532] ? tomoyo_profile+0x47/0x60 [ 532.205503][T16532] tomoyo_supervisor+0x45b/0x13b0 [ 532.205516][T16532] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 532.205527][T16532] ? __pfx_vsnprintf+0x10/0x10 [ 532.205546][T16532] ? tomoyo_encode2+0x329/0x3e0 [ 532.205566][T16532] tomoyo_path_number_perm+0x448/0x580 [ 532.205582][T16532] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.205604][T16532] ? rcu_is_watching+0x12/0xc0 [ 532.205617][T16532] ? __fget_files+0x204/0x3c0 [ 532.205630][T16532] ? hook_file_ioctl_common+0x145/0x410 [ 532.205647][T16532] ? __fget_files+0x20e/0x3c0 [ 532.205661][T16532] security_file_ioctl+0x9b/0x240 [ 532.205677][T16532] __x64_sys_ioctl+0xb7/0x210 [ 532.205697][T16532] do_syscall_64+0xcd/0x490 [ 532.205713][T16532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.205726][T16532] RIP: 0033:0x7fc33af8ebe9 [ 532.205737][T16532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.205750][T16532] RSP: 002b:00007fc33bd1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.205763][T16532] RAX: ffffffffffffffda RBX: 00007fc33b1b5fa0 RCX: 00007fc33af8ebe9 [ 532.205772][T16532] RDX: 0010000000000402 RSI: 0000000080045438 RDI: 0000000000000003 [ 532.205780][T16532] RBP: 00007fc33b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 532.205789][T16532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.205797][T16532] R13: 00007fc33b1b6038 R14: 00007fc33b1b5fa0 R15: 00007ffc33e9da58 [ 532.205809][T16532] [ 532.936154][T16540] FAULT_INJECTION: forcing a failure. [ 532.936154][T16540] name failslab, interval 1, probability 0, space 0, times 0 [ 533.005731][T16540] CPU: 0 UID: 0 PID: 16540 Comm: syz.0.2084 Tainted: G U syzkaller #0 PREEMPT(full) [ 533.005756][T16540] Tainted: [U]=USER [ 533.005761][T16540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.005769][T16540] Call Trace: [ 533.005774][T16540] [ 533.005781][T16540] dump_stack_lvl+0x16c/0x1f0 [ 533.005802][T16540] should_fail_ex+0x512/0x640 [ 533.005823][T16540] should_failslab+0xc2/0x120 [ 533.005841][T16540] __kmalloc_cache_noprof+0x6a/0x3e0 [ 533.005854][T16540] ? __do_sys_memfd_create+0x17b/0x8a0 [ 533.005876][T16540] __do_sys_memfd_create+0x17b/0x8a0 [ 533.005897][T16540] do_syscall_64+0xcd/0x490 [ 533.005914][T16540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.005927][T16540] RIP: 0033:0x7f9450f8ebe9 [ 533.005937][T16540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.005950][T16540] RSP: 002b:00007f9451ec5038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 533.005962][T16540] RAX: ffffffffffffffda RBX: 00007f94511b5fa0 RCX: 00007f9450f8ebe9 [ 533.005971][T16540] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 533.005979][T16540] RBP: 00007f9451011e19 R08: 0000000000000000 R09: 0000000000000000 [ 533.005987][T16540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.005994][T16540] R13: 00007f94511b6038 R14: 00007f94511b5fa0 R15: 00007ffec11bf878 [ 533.006006][T16540] [ 533.895271][T16553] FAULT_INJECTION: forcing a failure. [ 533.895271][T16553] name failslab, interval 1, probability 0, space 0, times 0 [ 534.059821][T16553] CPU: 0 UID: 0 PID: 16553 Comm: syz.3.2086 Tainted: G U syzkaller #0 PREEMPT(full) [ 534.059846][T16553] Tainted: [U]=USER [ 534.059851][T16553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.059859][T16553] Call Trace: [ 534.059864][T16553] [ 534.059869][T16553] dump_stack_lvl+0x16c/0x1f0 [ 534.059890][T16553] should_fail_ex+0x512/0x640 [ 534.059909][T16553] should_failslab+0xc2/0x120 [ 534.059927][T16553] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 534.059942][T16553] ? getname_flags.part.0+0x4c/0x550 [ 534.059963][T16553] getname_flags.part.0+0x4c/0x550 [ 534.059981][T16553] ? syscall_user_dispatch+0x78/0x140 [ 534.060002][T16553] getname_flags+0x93/0xf0 [ 534.060015][T16553] __x64_sys_symlink+0x58/0x90 [ 534.060031][T16553] do_syscall_64+0xcd/0x490 [ 534.060054][T16553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.060068][T16553] RIP: 0033:0x7efd5118ebe9 [ 534.060078][T16553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.060091][T16553] RSP: 002b:00007efd51f7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 534.060104][T16553] RAX: ffffffffffffffda RBX: 00007efd513b6180 RCX: 00007efd5118ebe9 [ 534.060114][T16553] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000200000001500 [ 534.060122][T16553] RBP: 00007efd51f7c090 R08: 0000000000000000 R09: 0000000000000000 [ 534.060130][T16553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.060138][T16553] R13: 00007efd513b6218 R14: 00007efd513b6180 R15: 00007ffd10d6cb28 [ 534.060150][T16553] [ 535.545588][ T8594] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 535.792870][T16577] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 537.857119][T16620] FAULT_INJECTION: forcing a failure. [ 537.857119][T16620] name failslab, interval 1, probability 0, space 0, times 0 [ 537.938073][T16620] CPU: 0 UID: 0 PID: 16620 Comm: syz.0.2104 Tainted: G U syzkaller #0 PREEMPT(full) [ 537.938098][T16620] Tainted: [U]=USER [ 537.938103][T16620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.938111][T16620] Call Trace: [ 537.938116][T16620] [ 537.938121][T16620] dump_stack_lvl+0x16c/0x1f0 [ 537.938142][T16620] should_fail_ex+0x512/0x640 [ 537.938162][T16620] should_failslab+0xc2/0x120 [ 537.938179][T16620] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 537.938195][T16620] ? ptlock_alloc+0x1f/0x70 [ 537.938213][T16620] ptlock_alloc+0x1f/0x70 [ 537.938225][T16620] pte_alloc_one+0x82/0x3a0 [ 537.938239][T16620] do_pte_missing+0x1afc/0x3ba0 [ 537.938252][T16620] ? do_raw_spin_unlock+0x172/0x230 [ 537.938273][T16620] ? __pmd_alloc+0x3fb/0x930 [ 537.938291][T16620] __handle_mm_fault+0x152a/0x2a50 [ 537.938305][T16620] ? mt_find+0x3ef/0xa30 [ 537.938323][T16620] ? __pfx___handle_mm_fault+0x10/0x10 [ 537.938335][T16620] ? __pfx_mt_find+0x10/0x10 [ 537.938356][T16620] ? find_vma+0xbf/0x140 [ 537.938372][T16620] ? __pfx_find_vma+0x10/0x10 [ 537.938389][T16620] handle_mm_fault+0x589/0xd10 [ 537.938401][T16620] ? __bpf_trace_exceptions+0x1/0x40 [ 537.938420][T16620] do_user_addr_fault+0x7a6/0x1370 [ 537.938440][T16620] ? rcu_is_watching+0x12/0xc0 [ 537.938454][T16620] exc_page_fault+0x5c/0xb0 [ 537.938469][T16620] asm_exc_page_fault+0x26/0x30 [ 537.938483][T16620] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 537.938497][T16620] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 537.938510][T16620] RSP: 0018:ffffc900182ef7d0 EFLAGS: 00050206 [ 537.938522][T16620] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 537.938530][T16620] RDX: ffffed100f001951 RSI: 0000000000000000 RDI: ffff88807800c9c0 [ 537.938538][T16620] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100f001950 [ 537.938546][T16620] R10: ffff88807800ca83 R11: 0000000000000000 R12: ffffc900182efd60 [ 537.938554][T16620] R13: 00000000000000c4 R14: ffff88807800c9c0 R15: 00007ffffffff000 [ 537.938567][T16620] _copy_from_iter+0x383/0x16f0 [ 537.938588][T16620] ? __alloc_skb+0x200/0x380 [ 537.938603][T16620] ? __pfx__copy_from_iter+0x10/0x10 [ 537.938622][T16620] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 537.938643][T16620] netlink_sendmsg+0x829/0xdd0 [ 537.938660][T16620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.938678][T16620] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 537.938693][T16620] ____sys_sendmsg+0xa98/0xc70 [ 537.938719][T16620] ? copy_msghdr_from_user+0x10a/0x160 [ 537.938735][T16620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.938756][T16620] ? __pfx__kstrtoull+0x10/0x10 [ 537.938771][T16620] ? rcu_is_watching+0x12/0xc0 [ 537.938788][T16620] ___sys_sendmsg+0x134/0x1d0 [ 537.938804][T16620] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.938823][T16620] ? rcu_is_watching+0x12/0xc0 [ 537.938841][T16620] __sys_sendmmsg+0x200/0x420 [ 537.938857][T16620] ? __pfx___sys_sendmmsg+0x10/0x10 [ 537.938872][T16620] ? lock_release+0x201/0x2f0 [ 537.938891][T16620] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 537.938911][T16620] ? fput+0x9b/0xd0 [ 537.938928][T16620] ? ksys_write+0x1ac/0x250 [ 537.938941][T16620] ? __pfx_ksys_write+0x10/0x10 [ 537.938962][T16620] __x64_sys_sendmmsg+0x9c/0x100 [ 537.938978][T16620] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 537.938999][T16620] do_syscall_64+0xcd/0x490 [ 537.939016][T16620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.939028][T16620] RIP: 0033:0x7f9450f8ebe9 [ 537.939038][T16620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.939051][T16620] RSP: 002b:00007f9451ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 537.939063][T16620] RAX: ffffffffffffffda RBX: 00007f94511b5fa0 RCX: 00007f9450f8ebe9 [ 537.939072][T16620] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 537.939080][T16620] RBP: 00007f9451ec5090 R08: 0000000000000000 R09: 0000000000000000 [ 537.939087][T16620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.939095][T16620] R13: 00007f94511b6038 R14: 00007f94511b5fa0 R15: 00007ffec11bf878 [ 537.939108][T16620] [ 539.209928][T16633] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 539.324705][T16643] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 541.469162][T16690] FAULT_INJECTION: forcing a failure. [ 541.469162][T16690] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 541.538425][T16690] CPU: 0 UID: 0 PID: 16690 Comm: syz.4.2118 Tainted: G U syzkaller #0 PREEMPT(full) [ 541.538450][T16690] Tainted: [U]=USER [ 541.538455][T16690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.538464][T16690] Call Trace: [ 541.538468][T16690] [ 541.538473][T16690] dump_stack_lvl+0x16c/0x1f0 [ 541.538495][T16690] should_fail_ex+0x512/0x640 [ 541.538515][T16690] should_fail_alloc_page+0xe7/0x130 [ 541.538534][T16690] prepare_alloc_pages+0x3c2/0x610 [ 541.538553][T16690] ? stack_trace_save+0x8e/0xc0 [ 541.538578][T16690] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 541.538594][T16690] ? rcu_is_watching+0x12/0xc0 [ 541.538608][T16690] ? __update_page_owner_handle+0x395/0x550 [ 541.538623][T16690] ? rcu_is_watching+0x12/0xc0 [ 541.538636][T16690] ? lock_release+0x201/0x2f0 [ 541.538653][T16690] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 541.538668][T16690] ? rcu_is_watching+0x12/0xc0 [ 541.538681][T16690] ? rcu_is_watching+0x12/0xc0 [ 541.538695][T16690] ? rcu_is_watching+0x12/0xc0 [ 541.538708][T16690] ? is_bpf_text_address+0x8a/0x1a0 [ 541.538724][T16690] ? rcu_is_watching+0x12/0xc0 [ 541.538736][T16690] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 541.538755][T16690] ? policy_nodemask+0xea/0x4e0 [ 541.538772][T16690] alloc_pages_mpol+0x1fb/0x550 [ 541.538788][T16690] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 541.538806][T16690] folio_alloc_mpol_noprof+0x36/0x2f0 [ 541.538825][T16690] shmem_alloc_folio+0x135/0x160 [ 541.538846][T16690] shmem_alloc_and_add_folio+0x499/0xc20 [ 541.538862][T16690] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 541.538877][T16690] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 541.538893][T16690] shmem_get_folio_gfp+0x67f/0x1600 [ 541.538908][T16690] ? rcu_is_watching+0x12/0xc0 [ 541.538921][T16690] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 541.538936][T16690] ? filemap_map_pages+0xf58/0x1670 [ 541.538952][T16690] shmem_fault+0x1fe/0xa30 [ 541.538966][T16690] ? __pfx_shmem_fault+0x10/0x10 [ 541.538984][T16690] ? rcu_is_watching+0x12/0xc0 [ 541.538996][T16690] ? __pfx_filemap_map_pages+0x10/0x10 [ 541.539013][T16690] ? __pfx_filemap_map_pages+0x10/0x10 [ 541.539027][T16690] __do_fault+0x10d/0x490 [ 541.539043][T16690] ? __pfx_filemap_map_pages+0x10/0x10 [ 541.539058][T16690] do_pte_missing+0xf50/0x3ba0 [ 541.539071][T16690] ? do_raw_spin_unlock+0x172/0x230 [ 541.539091][T16690] ? __pmd_alloc+0x3fb/0x930 [ 541.539109][T16690] __handle_mm_fault+0x152a/0x2a50 [ 541.539123][T16690] ? mt_find+0x3ef/0xa30 [ 541.539140][T16690] ? __pfx___handle_mm_fault+0x10/0x10 [ 541.539152][T16690] ? __pfx_mt_find+0x10/0x10 [ 541.539172][T16690] ? find_vma+0xbf/0x140 [ 541.539188][T16690] ? __pfx_find_vma+0x10/0x10 [ 541.539204][T16690] handle_mm_fault+0x589/0xd10 [ 541.539217][T16690] ? __bpf_trace_exceptions+0x1/0x40 [ 541.539237][T16690] do_user_addr_fault+0x7a6/0x1370 [ 541.539256][T16690] ? rcu_is_watching+0x12/0xc0 [ 541.539269][T16690] exc_page_fault+0x5c/0xb0 [ 541.539284][T16690] asm_exc_page_fault+0x26/0x30 [ 541.539297][T16690] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 541.539311][T16690] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 541.539323][T16690] RSP: 0018:ffffc9001845f7d0 EFLAGS: 00050206 [ 541.539335][T16690] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 541.539343][T16690] RDX: ffffed100ad9c9b9 RSI: 0000000000000000 RDI: ffff888056ce4d00 [ 541.539352][T16690] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100ad9c9b8 [ 541.539360][T16690] R10: ffff888056ce4dc3 R11: 0000000000000000 R12: ffffc9001845fd60 [ 541.539368][T16690] R13: 00000000000000c4 R14: ffff888056ce4d00 R15: 00007ffffffff000 [ 541.539381][T16690] _copy_from_iter+0x383/0x16f0 [ 541.539406][T16690] ? __alloc_skb+0x200/0x380 [ 541.539422][T16690] ? __pfx__copy_from_iter+0x10/0x10 [ 541.539441][T16690] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 541.539461][T16690] netlink_sendmsg+0x829/0xdd0 [ 541.539479][T16690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.539496][T16690] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 541.539512][T16690] ____sys_sendmsg+0xa98/0xc70 [ 541.539532][T16690] ? copy_msghdr_from_user+0x10a/0x160 [ 541.539548][T16690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.539568][T16690] ? __pfx__kstrtoull+0x10/0x10 [ 541.539583][T16690] ? rcu_is_watching+0x12/0xc0 [ 541.539596][T16690] ___sys_sendmsg+0x134/0x1d0 [ 541.539612][T16690] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.539631][T16690] ? rcu_is_watching+0x12/0xc0 [ 541.539649][T16690] __sys_sendmmsg+0x200/0x420 [ 541.539666][T16690] ? __pfx___sys_sendmmsg+0x10/0x10 [ 541.539681][T16690] ? lock_release+0x201/0x2f0 [ 541.539699][T16690] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 541.539719][T16690] ? fput+0x9b/0xd0 [ 541.539735][T16690] ? ksys_write+0x1ac/0x250 [ 541.539749][T16690] ? __pfx_ksys_write+0x10/0x10 [ 541.539764][T16690] __x64_sys_sendmmsg+0x9c/0x100 [ 541.539779][T16690] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 541.539799][T16690] do_syscall_64+0xcd/0x490 [ 541.539816][T16690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.539828][T16690] RIP: 0033:0x7fe5fa58ebe9 [ 541.539839][T16690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.539851][T16690] RSP: 002b:00007fe5fb434038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 541.539863][T16690] RAX: ffffffffffffffda RBX: 00007fe5fa7b5fa0 RCX: 00007fe5fa58ebe9 [ 541.539871][T16690] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 541.539879][T16690] RBP: 00007fe5fb434090 R08: 0000000000000000 R09: 0000000000000000 [ 541.539887][T16690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.539895][T16690] R13: 00007fe5fa7b6038 R14: 00007fe5fa7b5fa0 R15: 00007ffe75e2be68 [ 541.539907][T16690] [ 542.212376][T16692] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 544.374105][T16738] __vm_enough_memory: pid: 16738, comm: syz.0.2128, bytes: 4398046511104 not enough memory for the allocation [ 544.726905][T16746] FAULT_INJECTION: forcing a failure. [ 544.726905][T16746] name failslab, interval 1, probability 0, space 0, times 0 [ 544.783146][T16746] CPU: 0 UID: 0 PID: 16746 Comm: syz.4.2131 Tainted: G U syzkaller #0 PREEMPT(full) [ 544.783171][T16746] Tainted: [U]=USER [ 544.783175][T16746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.783184][T16746] Call Trace: [ 544.783189][T16746] [ 544.783195][T16746] dump_stack_lvl+0x16c/0x1f0 [ 544.783215][T16746] should_fail_ex+0x512/0x640 [ 544.783235][T16746] should_failslab+0xc2/0x120 [ 544.783253][T16746] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 544.783268][T16746] ? skb_clone+0x190/0x3f0 [ 544.783285][T16746] ? netlink_deliver_tap+0x103/0xd30 [ 544.783302][T16746] skb_clone+0x190/0x3f0 [ 544.783317][T16746] netlink_deliver_tap+0xabd/0xd30 [ 544.783337][T16746] netlink_unicast+0x64c/0x870 [ 544.783355][T16746] ? __pfx_netlink_unicast+0x10/0x10 [ 544.783376][T16746] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 544.783395][T16746] netlink_sendmsg+0x8d1/0xdd0 [ 544.783413][T16746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.783430][T16746] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 544.783445][T16746] ____sys_sendmsg+0xa98/0xc70 [ 544.783465][T16746] ? copy_msghdr_from_user+0x10a/0x160 [ 544.783481][T16746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.783500][T16746] ? __pfx__kstrtoull+0x10/0x10 [ 544.783516][T16746] ? rcu_is_watching+0x12/0xc0 [ 544.783530][T16746] ___sys_sendmsg+0x134/0x1d0 [ 544.783546][T16746] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.783565][T16746] ? rcu_is_watching+0x12/0xc0 [ 544.783583][T16746] __sys_sendmmsg+0x200/0x420 [ 544.783599][T16746] ? __pfx___sys_sendmmsg+0x10/0x10 [ 544.783614][T16746] ? lock_release+0x201/0x2f0 [ 544.783633][T16746] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 544.783653][T16746] ? fput+0x9b/0xd0 [ 544.783670][T16746] ? ksys_write+0x1ac/0x250 [ 544.783684][T16746] ? __pfx_ksys_write+0x10/0x10 [ 544.783699][T16746] __x64_sys_sendmmsg+0x9c/0x100 [ 544.783715][T16746] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 544.783735][T16746] do_syscall_64+0xcd/0x490 [ 544.783752][T16746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.783766][T16746] RIP: 0033:0x7fe5fa58ebe9 [ 544.783776][T16746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.783790][T16746] RSP: 002b:00007fe5fb434038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 544.783803][T16746] RAX: ffffffffffffffda RBX: 00007fe5fa7b5fa0 RCX: 00007fe5fa58ebe9 [ 544.783812][T16746] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 544.783820][T16746] RBP: 00007fe5fb434090 R08: 0000000000000000 R09: 0000000000000000 [ 544.783828][T16746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 544.783836][T16746] R13: 00007fe5fa7b6038 R14: 00007fe5fa7b5fa0 R15: 00007ffe75e2be68 [ 544.783848][T16746] [ 546.049987][T16746] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2131'. [ 546.235121][T16760] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 547.220993][T16780] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2140'. [ 547.822175][T16793] [U] [ 547.825089][T16793] [U] [ 547.827791][T16793] [U] [ 547.830704][T16793] [U] [ 547.893813][T16793] [U] [ 547.896632][T16793] [U] [ 547.899327][T16793] [U] [ 547.902024][T16793] [U] [ 547.939958][T16793] [U] [ 547.942686][T16793] [U] [ 547.945386][T16793] [U] [ 547.948158][T16793] [U] [ 547.999117][T16793] [U] [ 548.001837][T16793] [U] [ 548.004533][T16793] [U] [ 548.007304][T16793] [U] [ 548.064616][T16793] [U] [ 548.067427][T16793] [U] [ 548.070222][T16793] [U] [ 548.072987][T16793] [U] [ 548.144277][T16793] [U] [ 548.147097][T16793] [U] [ 548.149803][T16793] [U] [ 548.152487][T16793] [U] [ 548.174142][T16793] [U] [ 548.176872][T16793] [U] [ 548.179567][T16793] [U] [ 548.182247][T16793] [U] [ 548.214542][T16793] [U] [ 548.217356][T16793] [U] [ 548.220310][T16793] [U] [ 548.222997][T16793] [U] [ 548.226867][T16795] bond0: option all_slaves_active: invalid value () [ 548.252010][T16793] [U] [ 548.254746][T16793] [U] [ 548.257426][T16793] [U] [ 548.260277][T16793] [U] [ 548.284158][T16794] bond0: option all_slaves_active: invalid value () [ 548.291423][T16793] [U] [ 548.294104][T16793] [U] [ 548.296773][T16793] [U] [ 548.299451][T16793] [U] [ 548.321730][T16793] [U] [ 548.324484][T16793] [U] [ 548.327296][T16793] [U] [ 548.329978][T16793] [U] [ 548.364915][T16793] [U] [ 548.367630][T16793] [U] [ 548.370305][T16793] [U] [ 548.373061][T16793] [U] [ 548.398385][T16793] [U] [ 548.401108][T16793] [U] [ 548.403979][T16793] [U] [ 548.406656][T16793] [U] [ 548.475412][T16793] [U] [ 548.478167][T16793] [U] [ 548.480857][T16793] [U] [ 548.483557][T16793] [U] [ 548.528390][T16793] [U] [ 549.506378][T16822] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 553.311772][T16910] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 554.328538][T16928] FAULT_INJECTION: forcing a failure. [ 554.328538][T16928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.421546][T16928] CPU: 0 UID: 0 PID: 16928 Comm: syz.0.2163 Tainted: G U syzkaller #0 PREEMPT(full) [ 554.421571][T16928] Tainted: [U]=USER [ 554.421576][T16928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 554.421584][T16928] Call Trace: [ 554.421588][T16928] [ 554.421593][T16928] dump_stack_lvl+0x16c/0x1f0 [ 554.421614][T16928] should_fail_ex+0x512/0x640 [ 554.421635][T16928] _copy_from_user+0x2e/0xd0 [ 554.421654][T16928] kern_select+0xc0/0x1e0 [ 554.421669][T16928] ? __pfx_kern_select+0x10/0x10 [ 554.421683][T16928] ? __pfx_ksys_write+0x10/0x10 [ 554.421699][T16928] __x64_sys_select+0xbd/0x160 [ 554.421712][T16928] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 554.421732][T16928] do_syscall_64+0xcd/0x490 [ 554.421749][T16928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.421762][T16928] RIP: 0033:0x7f9450f8ebe9 [ 554.421773][T16928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.421786][T16928] RSP: 002b:00007f9451ea4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 554.421799][T16928] RAX: ffffffffffffffda RBX: 00007f94511b6090 RCX: 00007f9450f8ebe9 [ 554.421808][T16928] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 554.421816][T16928] RBP: 00007f9451ea4090 R08: 0000200000000280 R09: 0000000000000000 [ 554.421825][T16928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.421832][T16928] R13: 00007f94511b6128 R14: 00007f94511b6090 R15: 00007ffec11bf878 [ 554.421845][T16928] [ 554.580456][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.080157][T16944] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000800 pfn:0x78000 [ 555.093359][ T8594] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 555.133410][T16944] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 555.207660][T16944] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 555.285165][T16944] raw: ffff888078000800 0000000000000000 00000001ffffffff 0000000000000000 [ 555.373379][T16944] page dumped because: unmovable page [ 555.452311][T16944] page_owner tracks the page as allocated [ 555.497300][T16944] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 12250, tgid 12250 (syz-executor), ts 354337729792, free_ts 334296411286 [ 555.612504][T16944] post_alloc_hook+0x1c0/0x230 [ 555.636688][T16944] get_page_from_freelist+0x132b/0x38e0 [ 555.674159][T16944] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 555.700239][T16944] alloc_pages_mpol+0x1fb/0x550 [ 555.731877][T16944] alloc_pages_noprof+0x131/0x390 [ 555.756701][T16944] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 555.788861][T16944] vmalloc_user_noprof+0x9e/0xe0 [ 555.820542][T16944] kcov_ioctl+0x4c/0x730 [ 555.846047][T16944] __x64_sys_ioctl+0x18b/0x210 [ 555.870582][T16944] do_syscall_64+0xcd/0x490 [ 555.898010][T16944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.931788][T16944] page last free pid 10 tgid 10 stack trace: [ 555.966010][T16944] __free_frozen_pages+0x7d5/0x10f0 [ 555.996806][T16944] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 556.027385][T16944] __apply_to_page_range+0xa92/0x1350 [ 556.056793][T16944] kasan_release_vmalloc+0xd1/0xe0 [ 556.072510][T16963] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 556.096235][T16944] purge_vmap_node+0x1c4/0xa30 [ 556.120661][T16944] __purge_vmap_area_lazy+0xa06/0xc60 [ 556.138359][T16944] drain_vmap_area_work+0x27/0x40 [ 556.151862][T16944] process_one_work+0x9cf/0x1b70 [ 556.165632][T16944] worker_thread+0x6c8/0xf10 [ 556.178474][T16944] kthread+0x3c5/0x780 [ 556.189556][T16944] ret_from_fork+0x5d4/0x6f0 [ 556.216323][T16944] ret_from_fork_asm+0x1a/0x30 [ 557.096506][T16997] openvswitch: HfR: Dropping previously announced user features [ 557.138778][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2180'. [ 557.200395][T16997] HfR: left promiscuous mode [ 557.432026][T17005] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 559.582094][T17038] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2191'. [ 559.834322][T17042] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 559.841781][T17042] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 559.890565][T17042] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 559.917803][T17042] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 559.952788][T17042] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 561.873726][ T8594] Bluetooth: hci0: command 0x0c1a tx timeout [ 561.953689][T12394] Bluetooth: hci3: command 0x0c1a tx timeout [ 561.960116][T12265] Bluetooth: hci1: command 0x0c1a tx timeout [ 561.966443][ T8594] Bluetooth: hci2: command 0x040f tx timeout [ 562.717545][T17106] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 562.978105][T17090] Process accounting paused [ 563.082546][T17116] lo: entered allmulticast mode [ 563.183257][T17120] lo: left allmulticast mode [ 563.324116][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.330539][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.761735][T17120] blktrace: Concurrent blktraces are not allowed on loop2 [ 563.953812][ T8594] Bluetooth: hci0: command 0x0c1a tx timeout [ 564.021262][T17137] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2209'. [ 564.190154][T17142] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 566.097046][T17169] __vm_enough_memory: pid: 17169, comm: syz.0.2224, bytes: 4398046511104 not enough memory for the allocation [ 566.114692][T17170] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 567.258499][T17203] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 569.648129][T17208] ptrace attach of "./syz-executor exec"[5854] was attempted by "./syz-executor exec"[17208] [ 570.161954][T17254] FAULT_INJECTION: forcing a failure. [ 570.161954][T17254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.368460][T17254] CPU: 0 UID: 0 PID: 17254 Comm: syz.0.2233 Tainted: G U syzkaller #0 PREEMPT(full) [ 570.368485][T17254] Tainted: [U]=USER [ 570.368490][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.368498][T17254] Call Trace: [ 570.368502][T17254] [ 570.368508][T17254] dump_stack_lvl+0x16c/0x1f0 [ 570.368528][T17254] should_fail_ex+0x512/0x640 [ 570.368548][T17254] _copy_to_user+0x32/0xd0 [ 570.368561][T17254] simple_read_from_buffer+0xcb/0x170 [ 570.368575][T17254] proc_fail_nth_read+0x197/0x240 [ 570.368589][T17254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.368603][T17254] ? security_file_permission+0x71/0x210 [ 570.368621][T17254] ? rw_verify_area+0xcf/0x6c0 [ 570.368634][T17254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.368647][T17254] vfs_read+0x1e1/0xcf0 [ 570.368661][T17254] ? poll_select_finish+0x377/0x6b0 [ 570.368674][T17254] ? __pfx___mutex_lock+0x10/0x10 [ 570.368691][T17254] ? __pfx_vfs_read+0x10/0x10 [ 570.368704][T17254] ? __fget_files+0x204/0x3c0 [ 570.368717][T17254] ? rcu_is_watching+0x12/0xc0 [ 570.368732][T17254] ? __fget_files+0x20e/0x3c0 [ 570.368747][T17254] ksys_read+0x12a/0x250 [ 570.368760][T17254] ? __pfx_ksys_read+0x10/0x10 [ 570.368779][T17254] do_syscall_64+0xcd/0x490 [ 570.368796][T17254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.368810][T17254] RIP: 0033:0x7f9450f8d5fc [ 570.368821][T17254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 570.368834][T17254] RSP: 002b:00007f9451ea4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 570.368848][T17254] RAX: ffffffffffffffda RBX: 00007f94511b6090 RCX: 00007f9450f8d5fc [ 570.368857][T17254] RDX: 000000000000000f RSI: 00007f9451ea40a0 RDI: 000000000000000a [ 570.368865][T17254] RBP: 00007f9451ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 570.368873][T17254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.368880][T17254] R13: 00007f94511b6128 R14: 00007f94511b6090 R15: 00007ffec11bf878 [ 570.368893][T17254] [ 571.576756][T17273] input: f¬ as /devices/virtual/input/input38 [ 575.242456][T17324] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2245'. [ 576.937471][T17369] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input40 [ 577.007467][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2253'. [ 577.423439][T17379] FAULT_INJECTION: forcing a failure. [ 577.423439][T17379] name failslab, interval 1, probability 0, space 0, times 0 [ 577.439326][T17379] CPU: 0 UID: 0 PID: 17379 Comm: syz.3.2255 Tainted: G U syzkaller #0 PREEMPT(full) [ 577.439352][T17379] Tainted: [U]=USER [ 577.439357][T17379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.439366][T17379] Call Trace: [ 577.439371][T17379] [ 577.439378][T17379] dump_stack_lvl+0x16c/0x1f0 [ 577.439398][T17379] should_fail_ex+0x512/0x640 [ 577.439419][T17379] should_failslab+0xc2/0x120 [ 577.439436][T17379] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 577.439452][T17379] ? vfs_read+0x8bf/0xcf0 [ 577.439465][T17379] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 577.439484][T17379] ? acpi_ut_create_internal_object_dbg+0x78/0x3f0 [ 577.439507][T17379] acpi_ut_create_internal_object_dbg+0x78/0x3f0 [ 577.439535][T17379] acpi_ds_create_operand+0x30b/0x880 [ 577.439552][T17379] ? __pfx_acpi_ds_create_operand+0x10/0x10 [ 577.439573][T17379] acpi_ds_create_operands+0x25f/0x440 [ 577.439590][T17379] ? kmem_cache_alloc_noprof+0x1c1/0x3b0 [ 577.439605][T17379] ? __pfx_acpi_ds_create_operands+0x10/0x10 [ 577.439626][T17379] acpi_ds_exec_end_op+0x5ef/0x1460 [ 577.439643][T17379] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 577.439659][T17379] acpi_ps_parse_loop+0x425/0x1d00 [ 577.439677][T17379] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 577.439691][T17379] ? acpi_ns_get_normalized_pathname+0x97/0xd0 [ 577.439711][T17379] ? acpi_ds_call_control_method+0x10f/0x7c0 [ 577.439727][T17379] acpi_ps_parse_aml+0x3c1/0xcb0 [ 577.439745][T17379] acpi_ps_execute_method+0x55a/0xb30 [ 577.439764][T17379] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 577.439783][T17379] acpi_ns_evaluate+0x76c/0xca0 [ 577.439801][T17379] ? kasan_save_track+0x14/0x30 [ 577.439816][T17379] acpi_evaluate_object+0x1fa/0xa90 [ 577.439830][T17379] ? __kvmalloc_node_noprof+0x27b/0x620 [ 577.439847][T17379] ? seq_read_iter+0x826/0x12c0 [ 577.439858][T17379] ? kernfs_fop_read_iter+0x40f/0x5a0 [ 577.439871][T17379] ? do_syscall_64+0xcd/0x490 [ 577.439887][T17379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.439901][T17379] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 577.439915][T17379] ? __mutex_trylock_common+0xe9/0x250 [ 577.439934][T17379] acpi_evaluate_integer+0xdd/0x200 [ 577.439947][T17379] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 577.439963][T17379] ? __pfx_status_show+0x10/0x10 [ 577.439977][T17379] status_show+0xa0/0x120 [ 577.439992][T17379] ? __pfx_status_show+0x10/0x10 [ 577.440006][T17379] ? rcu_is_watching+0x12/0xc0 [ 577.440019][T17379] ? lock_release+0x201/0x2f0 [ 577.440036][T17379] dev_attr_show+0x53/0xe0 [ 577.440056][T17379] ? __pfx_dev_attr_show+0x10/0x10 [ 577.440073][T17379] sysfs_kf_seq_show+0x213/0x3e0 [ 577.440089][T17379] seq_read_iter+0x506/0x12c0 [ 577.440102][T17379] ? __mutex_trylock_common+0xe9/0x250 [ 577.440121][T17379] kernfs_fop_read_iter+0x40f/0x5a0 [ 577.440133][T17379] ? rw_verify_area+0xcf/0x6c0 [ 577.440147][T17379] vfs_read+0x8bf/0xcf0 [ 577.440161][T17379] ? __pfx___mutex_lock+0x10/0x10 [ 577.440178][T17379] ? __pfx_vfs_read+0x10/0x10 [ 577.440197][T17379] ksys_read+0x12a/0x250 [ 577.440211][T17379] ? __pfx_ksys_read+0x10/0x10 [ 577.440227][T17379] do_syscall_64+0xcd/0x490 [ 577.440244][T17379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.440275][T17379] RIP: 0033:0x7efd5118ebe9 [ 577.440290][T17379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.440306][T17379] RSP: 002b:00007efd51fbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 577.440320][T17379] RAX: ffffffffffffffda RBX: 00007efd513b5fa0 RCX: 00007efd5118ebe9 [ 577.440330][T17379] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000006 [ 577.440339][T17379] RBP: 00007efd51211e19 R08: 0000000000000000 R09: 0000000000000000 [ 577.440348][T17379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.440357][T17379] R13: 00007efd513b6038 R14: 00007efd513b5fa0 R15: 00007ffd10d6cb28 [ 577.440371][T17379] [ 577.440452][T17379] ACPI Error: Could not allocate an object descriptor (20250404/dsutils-617) [ 578.177394][T17379] ACPI Error: AE_NO_MEMORY, While creating Arg 0 (20250404/dsutils-732) [ 578.235983][T17379] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 578.288110][T17379] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 578.960895][T17415] blktrace: Concurrent blktraces are not allowed on loop2 [ 582.944248][T17489] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2277'. [ 584.079277][T17498] vhci_hcd: invalid port number 16 [ 584.280285][T17498] vhci_hcd: invalid port number 16 [ 584.719780][T17530] ICMPv6: process `syz.1.2287' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 585.714253][T17549] FAULT_INJECTION: forcing a failure. [ 585.714253][T17549] name failslab, interval 1, probability 0, space 0, times 0 [ 585.784202][T17549] CPU: 0 UID: 0 PID: 17549 Comm: syz.3.2291 Tainted: G U syzkaller #0 PREEMPT(full) [ 585.784229][T17549] Tainted: [U]=USER [ 585.784234][T17549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.784243][T17549] Call Trace: [ 585.784249][T17549] [ 585.784254][T17549] dump_stack_lvl+0x16c/0x1f0 [ 585.784276][T17549] should_fail_ex+0x512/0x640 [ 585.784297][T17549] should_failslab+0xc2/0x120 [ 585.784315][T17549] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 585.784331][T17549] ? security_file_alloc+0x34/0x2b0 [ 585.784351][T17549] security_file_alloc+0x34/0x2b0 [ 585.784368][T17549] init_file+0x93/0x4c0 [ 585.784386][T17549] alloc_empty_file+0x73/0x1e0 [ 585.784403][T17549] dentry_open+0x46/0xd0 [ 585.784422][T17549] pidfs_alloc_file+0x18f/0x290 [ 585.784435][T17549] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 585.784449][T17549] pidfd_prepare+0x129/0x200 [ 585.784466][T17549] __x64_sys_pidfd_open+0x105/0x1a0 [ 585.784485][T17549] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 585.784504][T17549] ? rcu_is_watching+0x12/0xc0 [ 585.784518][T17549] do_syscall_64+0xcd/0x490 [ 585.784535][T17549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.784549][T17549] RIP: 0033:0x7efd5118ebe9 [ 585.784560][T17549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.784573][T17549] RSP: 002b:00007efd51fbe038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 585.784586][T17549] RAX: ffffffffffffffda RBX: 00007efd513b5fa0 RCX: 00007efd5118ebe9 [ 585.784595][T17549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 585.784603][T17549] RBP: 00007efd51211e19 R08: 0000000000000000 R09: 0000000000000000 [ 585.784612][T17549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.784620][T17549] R13: 00007efd513b6038 R14: 00007efd513b5fa0 R15: 00007ffd10d6cb28 [ 585.784632][T17549] [ 586.180583][T17559] random: crng reseeded on system resumption [ 586.374082][T17562] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 586.481005][T17562] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 587.057760][T12265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 587.069427][T12265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 587.078610][T12265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 587.086299][T12265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 587.094249][T12265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 587.468669][T17572] chnl_net:caif_netlink_parms(): no params data found [ 587.625720][T17572] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.632864][T17572] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.684344][T17572] bridge_slave_0: entered allmulticast mode [ 587.719337][T17572] bridge_slave_0: entered promiscuous mode [ 587.744591][T17572] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.780993][T17572] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.805740][T17572] bridge_slave_1: entered allmulticast mode [ 587.832800][T17572] bridge_slave_1: entered promiscuous mode [ 588.000037][T17572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.052861][T17572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.122250][T17605] FAULT_INJECTION: forcing a failure. [ 588.122250][T17605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.179956][T17572] team0: Port device team_slave_0 added [ 588.194844][T17605] CPU: 0 UID: 0 PID: 17605 Comm: syz.0.2299 Tainted: G U syzkaller #0 PREEMPT(full) [ 588.194869][T17605] Tainted: [U]=USER [ 588.194874][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.194882][T17605] Call Trace: [ 588.194887][T17605] [ 588.194893][T17605] dump_stack_lvl+0x16c/0x1f0 [ 588.194913][T17605] should_fail_ex+0x512/0x640 [ 588.194933][T17605] _copy_from_user+0x2e/0xd0 [ 588.194954][T17605] core_sys_select+0x35b/0xc10 [ 588.194971][T17605] ? __pfx_core_sys_select+0x10/0x10 [ 588.194986][T17605] ? proc_fail_nth_write+0x9f/0x220 [ 588.195005][T17605] ? __fget_files+0x204/0x3c0 [ 588.195019][T17605] ? rcu_is_watching+0x12/0xc0 [ 588.195033][T17605] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 588.195052][T17605] kern_select+0x15d/0x1e0 [ 588.195065][T17605] ? __pfx_kern_select+0x10/0x10 [ 588.195079][T17605] ? __pfx_ksys_write+0x10/0x10 [ 588.195096][T17605] __x64_sys_select+0xbd/0x160 [ 588.195109][T17605] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 588.195130][T17605] do_syscall_64+0xcd/0x490 [ 588.195148][T17605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.195162][T17605] RIP: 0033:0x7f9450f8ebe9 [ 588.195172][T17605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.195185][T17605] RSP: 002b:00007f9451e41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 588.195199][T17605] RAX: ffffffffffffffda RBX: 00007f94511b6360 RCX: 00007f9450f8ebe9 [ 588.195208][T17605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 588.195217][T17605] RBP: 00007f9451e41090 R08: 0000000000000000 R09: 0000000000000000 [ 588.195225][T17605] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 588.195234][T17605] R13: 00007f94511b63f8 R14: 00007f94511b6360 R15: 00007ffec11bf878 [ 588.195247][T17605] [ 588.395793][T17572] team0: Port device team_slave_1 added [ 588.684604][T17572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.691939][T17572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.831246][T17572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.884924][T17572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.891932][T17572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.932532][T17613] Invalid ELF header magic: != ELF [ 589.058485][T17572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.144804][ T9246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.155736][T12265] Bluetooth: hci0: command tx timeout [ 589.346037][ T9246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.406180][T17572] hsr_slave_0: entered promiscuous mode [ 589.434273][T17572] hsr_slave_1: entered promiscuous mode [ 589.523267][ T9246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.701413][ T9246] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.943771][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 590.370380][ T9246] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.736982][ T9246] bridge_slave_0: left allmulticast mode [ 590.777750][ T9246] bridge_slave_0: left promiscuous mode [ 590.815078][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.235631][T12265] Bluetooth: hci0: command tx timeout [ 591.294312][ T9246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.327612][ T9246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.370648][ T9246] bond0 (unregistering): Released all slaves [ 591.656781][T17572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 591.766132][T17572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 591.829010][T17572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 591.881924][T17572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 591.928479][ T9246] veth0_macvtap: left promiscuous mode [ 591.966120][ T9246] veth1_vlan: left promiscuous mode [ 591.995833][ T9246] veth0_vlan: left promiscuous mode [ 592.367278][ T9246] team0 (unregistering): Port device team_slave_1 removed [ 592.417352][ T9246] team0 (unregistering): Port device team_slave_0 removed [ 592.782407][T17572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.867641][T17572] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.920754][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.928116][ T8596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.030132][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.038006][ T8613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.313935][T12265] Bluetooth: hci0: command tx timeout [ 593.628111][T17572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.745716][T17572] veth0_vlan: entered promiscuous mode [ 593.791074][T17706] Process accounting resumed [ 593.802382][T17572] veth1_vlan: entered promiscuous mode [ 593.862130][T17572] veth0_macvtap: entered promiscuous mode [ 593.977264][T17572] veth1_macvtap: entered promiscuous mode [ 594.040227][T17572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.098149][T17572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.144785][ T9246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.247747][ T9246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.295202][ T9246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.339454][ T9246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.468738][ T9246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.554306][ T9246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.669024][ T9255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.740264][ T9255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.393671][T12265] Bluetooth: hci0: command tx timeout [ 596.780160][T17821] ptrace attach of "./syz-executor exec"[12263] was attempted by "./syz-executor exec"[17821] [ 597.346468][T17829] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2325'. [ 599.986897][T17879] MTRR 2 not used [ 604.146640][T17976] FAULT_INJECTION: forcing a failure. [ 604.146640][T17976] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 604.236025][T17976] CPU: 0 UID: 0 PID: 17976 Comm: syz.4.2359 Tainted: G U syzkaller #0 PREEMPT(full) [ 604.236059][T17976] Tainted: [U]=USER [ 604.236064][T17976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.236074][T17976] Call Trace: [ 604.236080][T17976] [ 604.236087][T17976] dump_stack_lvl+0x16c/0x1f0 [ 604.236109][T17976] should_fail_ex+0x512/0x640 [ 604.236130][T17976] should_fail_alloc_page+0xe7/0x130 [ 604.236150][T17976] prepare_alloc_pages+0x3c2/0x610 [ 604.236171][T17976] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 604.236188][T17976] ? rcu_is_watching+0x12/0xc0 [ 604.236202][T17976] ? is_bpf_text_address+0x8a/0x1a0 [ 604.236218][T17976] ? rcu_is_watching+0x12/0xc0 [ 604.236231][T17976] ? lock_release+0x201/0x2f0 [ 604.236251][T17976] ? bpf_ksym_find+0x124/0x1c0 [ 604.236263][T17976] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 604.236279][T17976] ? is_bpf_text_address+0x94/0x1a0 [ 604.236297][T17976] ? __kernel_text_address+0xd/0x40 [ 604.236310][T17976] ? unwind_get_return_address+0x59/0xa0 [ 604.236329][T17976] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 604.236348][T17976] ? policy_nodemask+0xea/0x4e0 [ 604.236366][T17976] alloc_pages_mpol+0x1fb/0x550 [ 604.236386][T17976] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 604.236402][T17976] ? kasan_save_stack+0x33/0x60 [ 604.236415][T17976] ? __kasan_kmalloc+0xaa/0xb0 [ 604.236429][T17976] ? __get_vm_area_node+0x101/0x330 [ 604.236451][T17976] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 604.236463][T17976] ? __vmalloc_node_noprof+0xad/0xf0 [ 604.236475][T17976] ? n_tty_open+0x1a/0x170 [ 604.236493][T17976] ? tty_ldisc_open+0x9f/0x120 [ 604.236509][T17976] alloc_pages_noprof+0x131/0x390 [ 604.236530][T17976] get_free_pages_noprof+0x10/0xb0 [ 604.236549][T17976] kasan_populate_vmalloc+0x89/0x1f0 [ 604.236566][T17976] alloc_vmap_area+0x959/0x29c0 [ 604.236587][T17976] ? __pfx_alloc_vmap_area+0x10/0x10 [ 604.236607][T17976] __get_vm_area_node+0x1ca/0x330 [ 604.236627][T17976] __vmalloc_node_range_noprof+0x271/0x14b0 [ 604.236639][T17976] ? n_tty_open+0x1a/0x170 [ 604.236657][T17976] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 604.236676][T17976] ? rcu_is_watching+0x12/0xc0 [ 604.236690][T17976] ? n_tty_open+0x1a/0x170 [ 604.236709][T17976] ? __debug_object_init+0x2de/0x3d0 [ 604.236724][T17976] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 604.236739][T17976] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 604.236758][T17976] ? do_raw_spin_lock+0x12c/0x2b0 [ 604.236777][T17976] ? n_tty_open+0x1a/0x170 [ 604.236795][T17976] __vmalloc_node_noprof+0xad/0xf0 [ 604.236807][T17976] ? n_tty_open+0x1a/0x170 [ 604.236825][T17976] ? __pfx_n_tty_open+0x10/0x10 [ 604.236844][T17976] n_tty_open+0x1a/0x170 [ 604.236863][T17976] ? __pfx_n_tty_open+0x10/0x10 [ 604.236881][T17976] tty_ldisc_open+0x9f/0x120 [ 604.236895][T17976] tty_ldisc_setup+0x40/0x100 [ 604.236911][T17976] tty_init_dev.part.0+0x1ec/0x500 [ 604.236929][T17976] tty_init_dev+0x60/0x80 [ 604.236946][T17976] ? __pfx_ptmx_open+0x10/0x10 [ 604.236960][T17976] ptmx_open+0x10d/0x360 [ 604.236974][T17976] ? __pfx_ptmx_open+0x10/0x10 [ 604.236987][T17976] chrdev_open+0x231/0x6a0 [ 604.237004][T17976] ? __pfx_apparmor_file_open+0x10/0x10 [ 604.237019][T17976] ? __pfx_chrdev_open+0x10/0x10 [ 604.237046][T17976] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 604.237065][T17976] do_dentry_open+0x97f/0x1530 [ 604.237082][T17976] ? __pfx_chrdev_open+0x10/0x10 [ 604.237100][T17976] vfs_open+0x82/0x3f0 [ 604.237120][T17976] path_openat+0x1de4/0x2cb0 [ 604.237138][T17976] ? __pfx_path_openat+0x10/0x10 [ 604.237154][T17976] do_filp_open+0x20b/0x470 [ 604.237169][T17976] ? __pfx_do_filp_open+0x10/0x10 [ 604.237189][T17976] ? alloc_fd+0x471/0x7d0 [ 604.237204][T17976] do_sys_openat2+0x11b/0x1d0 [ 604.237223][T17976] ? __pfx_do_sys_openat2+0x10/0x10 [ 604.237245][T17976] __x64_sys_openat+0x174/0x210 [ 604.237264][T17976] ? __pfx___x64_sys_openat+0x10/0x10 [ 604.237287][T17976] do_syscall_64+0xcd/0x490 [ 604.237305][T17976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.237319][T17976] RIP: 0033:0x7fe5fa58ebe9 [ 604.237330][T17976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.237345][T17976] RSP: 002b:00007fe5fb413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 604.237358][T17976] RAX: ffffffffffffffda RBX: 00007fe5fa7b6090 RCX: 00007fe5fa58ebe9 [ 604.237368][T17976] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 604.237378][T17976] RBP: 00007fe5fa611e19 R08: 0000000000000000 R09: 0000000000000000 [ 604.237387][T17976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.237395][T17976] R13: 00007fe5fa7b6128 R14: 00007fe5fa7b6090 R15: 00007ffe75e2be68 [ 604.237409][T17976] [ 605.560900][T17976] warn_alloc: 3 callbacks suppressed [ 605.560915][T17976] syz.4.2359: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 605.644433][T17976] CPU: 0 UID: 0 PID: 17976 Comm: syz.4.2359 Tainted: G U syzkaller #0 PREEMPT(full) [ 605.644459][T17976] Tainted: [U]=USER [ 605.644464][T17976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.644472][T17976] Call Trace: [ 605.644478][T17976] [ 605.644485][T17976] dump_stack_lvl+0x16c/0x1f0 [ 605.644506][T17976] warn_alloc+0x248/0x3a0 [ 605.644524][T17976] ? __pfx_warn_alloc+0x10/0x10 [ 605.644539][T17976] ? kfree+0x2b4/0x4d0 [ 605.644553][T17976] ? __get_vm_area_node+0x208/0x330 [ 605.644574][T17976] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 605.644588][T17976] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 605.644608][T17976] ? rcu_is_watching+0x12/0xc0 [ 605.644623][T17976] ? n_tty_open+0x1a/0x170 [ 605.644643][T17976] ? __debug_object_init+0x2de/0x3d0 [ 605.644659][T17976] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 605.644673][T17976] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 605.644693][T17976] ? do_raw_spin_lock+0x12c/0x2b0 [ 605.644712][T17976] ? n_tty_open+0x1a/0x170 [ 605.644731][T17976] __vmalloc_node_noprof+0xad/0xf0 [ 605.644742][T17976] ? n_tty_open+0x1a/0x170 [ 605.644761][T17976] ? __pfx_n_tty_open+0x10/0x10 [ 605.644780][T17976] n_tty_open+0x1a/0x170 [ 605.644799][T17976] ? __pfx_n_tty_open+0x10/0x10 [ 605.644817][T17976] tty_ldisc_open+0x9f/0x120 [ 605.644909][T17976] tty_ldisc_setup+0x40/0x100 [ 605.645000][T17976] tty_init_dev.part.0+0x1ec/0x500 [ 605.645022][T17976] tty_init_dev+0x60/0x80 [ 605.645041][T17976] ? __pfx_ptmx_open+0x10/0x10 [ 605.645055][T17976] ptmx_open+0x10d/0x360 [ 605.645068][T17976] ? __pfx_ptmx_open+0x10/0x10 [ 605.645082][T17976] chrdev_open+0x231/0x6a0 [ 605.645099][T17976] ? __pfx_apparmor_file_open+0x10/0x10 [ 605.645119][T17976] ? __pfx_chrdev_open+0x10/0x10 [ 605.645135][T17976] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 605.645156][T17976] do_dentry_open+0x97f/0x1530 [ 605.645172][T17976] ? __pfx_chrdev_open+0x10/0x10 [ 605.645193][T17976] vfs_open+0x82/0x3f0 [ 605.645214][T17976] path_openat+0x1de4/0x2cb0 [ 605.645232][T17976] ? __pfx_path_openat+0x10/0x10 [ 605.645248][T17976] do_filp_open+0x20b/0x470 [ 605.645263][T17976] ? __pfx_do_filp_open+0x10/0x10 [ 605.645284][T17976] ? alloc_fd+0x471/0x7d0 [ 605.645299][T17976] do_sys_openat2+0x11b/0x1d0 [ 605.645317][T17976] ? __pfx_do_sys_openat2+0x10/0x10 [ 605.645339][T17976] __x64_sys_openat+0x174/0x210 [ 605.645358][T17976] ? __pfx___x64_sys_openat+0x10/0x10 [ 605.645393][T17976] do_syscall_64+0xcd/0x490 [ 605.645411][T17976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.645426][T17976] RIP: 0033:0x7fe5fa58ebe9 [ 605.645438][T17976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.645452][T17976] RSP: 002b:00007fe5fb413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 605.645467][T17976] RAX: ffffffffffffffda RBX: 00007fe5fa7b6090 RCX: 00007fe5fa58ebe9 [ 605.645476][T17976] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 605.645486][T17976] RBP: 00007fe5fa611e19 R08: 0000000000000000 R09: 0000000000000000 [ 605.645495][T17976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.645503][T17976] R13: 00007fe5fa7b6128 R14: 00007fe5fa7b6090 R15: 00007ffe75e2be68 [ 605.645516][T17976] [ 605.645553][T17976] Mem-Info: [ 606.117754][T18001] ======================================================= [ 606.117754][T18001] WARNING: The mand mount option has been deprecated and [ 606.117754][T18001] and is ignored by this kernel. Remove the mand [ 606.117754][T18001] option from the mount to silence this warning. [ 606.117754][T18001] ======================================================= [ 606.443829][T17976] active_anon:11719 inactive_anon:7540 isolated_anon:0 [ 606.443829][T17976] active_file:14665 inactive_file:46409 isolated_file:0 [ 606.443829][T17976] unevictable:768 dirty:769 writeback:0 [ 606.443829][T17976] slab_reclaimable:12333 slab_unreclaimable:97552 [ 606.443829][T17976] mapped:25821 shmem:1493 pagetables:1808 [ 606.443829][T17976] sec_pagetables:0 bounce:0 [ 606.443829][T17976] kernel_misc_reclaimable:0 [ 606.443829][T17976] free:1283130 free_pcp:29136 free_cma:0 [ 606.545873][T18006] vhci_hcd: invalid port number 21 [ 606.551184][T17976] Node 0 active_anon:48592kB inactive_anon:30108kB active_file:58656kB inactive_file:185504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103284kB dirty:3072kB writeback:0kB shmem:6048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13520kB pagetables:7168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 606.686879][T17976] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 606.809778][T17976] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.985500][T17976] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 607.012072][T17976] Node 0 DMA32 free:1248656kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48548kB inactive_anon:50336kB active_file:57412kB inactive_file:185432kB unevictable:1536kB writepending:3124kB present:3129332kB managed:2539596kB mlocked:0kB bounce:0kB free_pcp:53832kB local_pcp:53832kB free_cma:0kB [ 607.140111][T17976] lowmem_reserve[]: 0 0 1 1 1 [ 607.166321][T17976] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1244kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 607.251054][T17976] lowmem_reserve[]: 0 0 0 0 0 [ 607.264674][T17976] Node 1 Normal free:3868488kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:38196kB local_pcp:38196kB free_cma:0kB [ 607.351578][T17976] lowmem_reserve[]: 0 0 0 0 0 [ 607.366078][T17976] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 607.400528][T17976] Node 0 DMA32: 1438*4kB (UM) 524*8kB (ME) 1144*16kB (UM) 1256*32kB (UME) 1493*64kB (UME) 896*128kB (UME) 643*256kB (UME) 363*512kB (UM) 203*1024kB (UME) 3*2048kB (UM) 99*4096kB (UM) = 1248664kB [ 607.454705][T17976] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 607.486782][T17976] Node 1 Normal: 199*4kB (UME) 21*8kB (UM) 25*16kB (UME) 143*32kB (UME) 105*64kB (UME) 30*128kB (UME) 13*256kB (UME) 7*512kB (UM) 3*1024kB (UE) 2*2048kB (ME) 937*4096kB (M) = 3868532kB [ 607.539999][T17976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.578414][T17976] Node 0 hugepages_total=5 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 607.603948][T17976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.635579][T17976] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 607.654169][T17976] 66887 total pagecache pages [ 607.664580][T17976] 64 pages in swap cache [ 607.669020][T17976] Free swap = 118172kB [ 607.683462][T17976] Total swap = 124996kB [ 607.694095][T17976] 2097051 pages RAM [ 607.703173][T17976] 0 pages HighMem/MovableOnly [ 607.714302][T17976] 430190 pages reserved [ 607.734360][T17976] 0 pages cma reserved [ 607.745665][T17976] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 607.766731][T17997] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 607.781220][T17995] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 607.800831][T18017] tty tty12: ldisc open failed (-12), clearing slot 11 [ 608.490853][T18053] bond0: option all_slaves_active: invalid value () [ 608.557433][T18047] bond0: option all_slaves_active: invalid value () [ 609.151516][T18075] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 609.914934][T18087] CIFS: VFS: Invalid SecurityFlags: [ 610.662487][T18120] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 610.903454][T18123] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 611.737494][T18143] FAULT_INJECTION: forcing a failure. [ 611.737494][T18143] name failslab, interval 1, probability 0, space 0, times 0 [ 611.911118][T18143] CPU: 0 UID: 0 PID: 18143 Comm: syz.4.2388 Tainted: G U syzkaller #0 PREEMPT(full) [ 611.911144][T18143] Tainted: [U]=USER [ 611.911149][T18143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.911157][T18143] Call Trace: [ 611.911163][T18143] [ 611.911169][T18143] dump_stack_lvl+0x16c/0x1f0 [ 611.911190][T18143] should_fail_ex+0x512/0x640 [ 611.911210][T18143] should_failslab+0xc2/0x120 [ 611.911228][T18143] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 611.911246][T18143] ? xfrm4_net_init+0x9e/0x1c0 [ 611.911262][T18143] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 611.911279][T18143] ? __pfx_xfrm4_net_init+0x10/0x10 [ 611.911295][T18143] kmemdup_noprof+0x29/0x60 [ 611.911311][T18143] xfrm4_net_init+0x9e/0x1c0 [ 611.911327][T18143] ? __pfx_xfrm4_net_init+0x10/0x10 [ 611.911342][T18143] ops_init+0x1df/0x5f0 [ 611.911361][T18143] setup_net+0x10f/0x380 [ 611.911385][T18143] ? lockdep_init_map_type+0x5c/0x280 [ 611.911405][T18143] ? __pfx_setup_net+0x10/0x10 [ 611.911423][T18143] ? debug_mutex_init+0x37/0x70 [ 611.911438][T18143] copy_net_ns+0x2a6/0x5f0 [ 611.911458][T18143] create_new_namespaces+0x3ea/0xa90 [ 611.911476][T18143] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 611.911492][T18143] ksys_unshare+0x45b/0xa40 [ 611.911509][T18143] ? __pfx_ksys_unshare+0x10/0x10 [ 611.911526][T18143] ? xfd_validate_state+0x61/0x180 [ 611.911547][T18143] __x64_sys_unshare+0x31/0x40 [ 611.911564][T18143] do_syscall_64+0xcd/0x490 [ 611.911581][T18143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.911594][T18143] RIP: 0033:0x7fe5fa58ebe9 [ 611.911605][T18143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.911618][T18143] RSP: 002b:00007fe5fb3f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 611.911635][T18143] RAX: ffffffffffffffda RBX: 00007fe5fa7b6180 RCX: 00007fe5fa58ebe9 [ 611.911645][T18143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 611.911654][T18143] RBP: 00007fe5fa611e19 R08: 0000000000000000 R09: 0000000000000000 [ 611.911663][T18143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.911671][T18143] R13: 00007fe5fa7b6218 R14: 00007fe5fa7b6180 R15: 00007ffe75e2be68 [ 611.911684][T18143] [ 613.500187][T18167] random: crng reseeded on system resumption [ 613.941297][ T8594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 613.950581][ T8594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 613.960593][ T8594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 613.970719][ T8594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 613.979578][ T8594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 614.246511][T18188] chnl_net:caif_netlink_parms(): no params data found [ 614.333445][T18188] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.351202][T18188] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.369632][T18188] bridge_slave_0: entered allmulticast mode [ 614.384545][T18188] bridge_slave_0: entered promiscuous mode [ 614.404394][T18188] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.422125][T18188] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.442511][T18188] bridge_slave_1: entered allmulticast mode [ 614.461600][T18188] bridge_slave_1: entered promiscuous mode [ 614.520106][T18188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.554597][T18188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.618242][T18188] team0: Port device team_slave_0 added [ 614.638923][T18188] team0: Port device team_slave_1 added [ 614.672104][T18188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.689186][T18188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.747973][T18188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.775906][T18188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.793341][T18188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.839272][T18213] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 614.852437][T18188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.914597][T18188] hsr_slave_0: entered promiscuous mode [ 614.928739][T18188] hsr_slave_1: entered promiscuous mode [ 614.946025][T18188] debugfs: 'hsr0' already exists in 'hsr' [ 614.958951][T18188] Cannot create hsr debugfs directory [ 615.012599][T18216] FAULT_INJECTION: forcing a failure. [ 615.012599][T18216] name failslab, interval 1, probability 0, space 0, times 0 [ 615.041136][T18216] CPU: 0 UID: 0 PID: 18216 Comm: syz.0.2400 Tainted: G U syzkaller #0 PREEMPT(full) [ 615.041160][T18216] Tainted: [U]=USER [ 615.041165][T18216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 615.041173][T18216] Call Trace: [ 615.041178][T18216] [ 615.041183][T18216] dump_stack_lvl+0x16c/0x1f0 [ 615.041204][T18216] should_fail_ex+0x512/0x640 [ 615.041224][T18216] should_failslab+0xc2/0x120 [ 615.041243][T18216] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 615.041259][T18216] ? security_inode_alloc+0x3b/0x2b0 [ 615.041275][T18216] security_inode_alloc+0x3b/0x2b0 [ 615.041290][T18216] inode_init_always_gfp+0xce4/0x1030 [ 615.041306][T18216] alloc_inode+0x86/0x240 [ 615.041324][T18216] sock_alloc+0x40/0x280 [ 615.041343][T18216] __sock_create+0xc1/0x8d0 [ 615.041356][T18216] __sys_socket+0x14d/0x260 [ 615.041369][T18216] ? __pfx___sys_socket+0x10/0x10 [ 615.041381][T18216] ? xfd_validate_state+0x61/0x180 [ 615.041400][T18216] ? __pfx___do_sys_prctl+0x10/0x10 [ 615.041422][T18216] __x64_sys_socket+0x72/0xb0 [ 615.041435][T18216] do_syscall_64+0xcd/0x490 [ 615.041452][T18216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.041466][T18216] RIP: 0033:0x7f9450f8ebe9 [ 615.041477][T18216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.041491][T18216] RSP: 002b:00007f9451ea4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 615.041504][T18216] RAX: ffffffffffffffda RBX: 00007f94511b6090 RCX: 00007f9450f8ebe9 [ 615.041514][T18216] RDX: 000000000000003a RSI: 0000000000000002 RDI: 000000000000000a [ 615.041522][T18216] RBP: 00007f9451011e19 R08: 0000000000000000 R09: 0000000000000000 [ 615.041531][T18216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.041539][T18216] R13: 00007f94511b6128 R14: 00007f94511b6090 R15: 00007ffec11bf878 [ 615.041552][T18216] [ 615.041566][T18216] socket: no more sockets [ 615.334339][T18188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.387972][T18226] ptrace attach of "./syz-executor exec"[18225] was attempted by "./syz-executor exec"[18226] [ 615.403379][T18188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.437443][T18215] ptrace attach of "./syz-executor exec"[18225] was attempted by "./syz-executor exec"[18215] [ 615.458291][T18188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.488449][T18188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.589607][T18188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 615.620229][T18188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 615.671807][T18188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 615.704200][T18188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 615.718540][T18230] FAULT_INJECTION: forcing a failure. [ 615.718540][T18230] name failslab, interval 1, probability 0, space 0, times 0 [ 615.775856][T18230] CPU: 0 UID: 1 PID: 18230 Comm: syz.3.2402 Tainted: G U syzkaller #0 PREEMPT(full) [ 615.775881][T18230] Tainted: [U]=USER [ 615.775886][T18230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 615.775896][T18230] Call Trace: [ 615.775901][T18230] [ 615.775908][T18230] dump_stack_lvl+0x16c/0x1f0 [ 615.775930][T18230] should_fail_ex+0x512/0x640 [ 615.775950][T18230] ? trace_parser_get_init+0x30/0xc0 [ 615.775971][T18230] should_failslab+0xc2/0x120 [ 615.775989][T18230] __kmalloc_noprof+0xd2/0x510 [ 615.776004][T18230] ? __pfx___might_resched+0x10/0x10 [ 615.776019][T18230] trace_parser_get_init+0x30/0xc0 [ 615.776038][T18230] trace_pid_write+0xef/0x460 [ 615.776057][T18230] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 615.776075][T18230] ? __pfx_trace_pid_write+0x10/0x10 [ 615.776093][T18230] ? __pfx___mutex_lock+0x10/0x10 [ 615.776109][T18230] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 615.776130][T18230] event_pid_write.isra.0+0x1e4/0x7f0 [ 615.776148][T18230] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 615.776165][T18230] ? lock_acquire+0x2cd/0x350 [ 615.776181][T18230] ? __pfx___might_resched+0x10/0x10 [ 615.776195][T18230] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 615.776213][T18230] vfs_write+0x29d/0x11d0 [ 615.776239][T18230] ? __pfx___mutex_lock+0x10/0x10 [ 615.776260][T18230] ? __pfx_vfs_write+0x10/0x10 [ 615.776275][T18230] ? __fget_files+0x204/0x3c0 [ 615.776290][T18230] ? rcu_is_watching+0x12/0xc0 [ 615.776305][T18230] ? __fget_files+0x20e/0x3c0 [ 615.776322][T18230] ksys_write+0x12a/0x250 [ 615.776336][T18230] ? __pfx_ksys_write+0x10/0x10 [ 615.776353][T18230] do_syscall_64+0xcd/0x490 [ 615.776370][T18230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.776384][T18230] RIP: 0033:0x7f7f70f8ebe9 [ 615.776395][T18230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.776408][T18230] RSP: 002b:00007f7f71e5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 615.776421][T18230] RAX: ffffffffffffffda RBX: 00007f7f711b5fa0 RCX: 00007f7f70f8ebe9 [ 615.776431][T18230] RDX: 000000000000fdf3 RSI: 0000000000000000 RDI: 0000000000000003 [ 615.776439][T18230] RBP: 00007f7f71011e19 R08: 0000000000000000 R09: 0000000000000000 [ 615.776447][T18230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.776455][T18230] R13: 00007f7f711b6038 R14: 00007f7f711b5fa0 R15: 00007ffddb5c3278 [ 615.776468][T18230] [ 616.315095][ T8594] Bluetooth: hci4: command tx timeout [ 616.881096][T18188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.957868][T18188] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.010964][T16243] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.018384][T16243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.087442][T16243] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.094561][T16243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.140523][T18188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.206629][T18188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.535862][T18188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.629860][T18188] veth0_vlan: entered promiscuous mode [ 617.687662][T18188] veth1_vlan: entered promiscuous mode [ 617.769889][T18188] veth0_macvtap: entered promiscuous mode [ 617.814765][T18188] veth1_macvtap: entered promiscuous mode [ 617.851549][T18188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.888711][T18188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.936238][T16243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.971441][T16243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.016250][T16243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.074587][T16243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.234904][T16243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.242845][T16243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.354158][ T8594] Bluetooth: hci4: command tx timeout [ 618.385013][T16243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.434006][T16243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.434955][ T8594] Bluetooth: hci4: command tx timeout [ 621.212250][T18334] random: crng reseeded on system resumption [ 622.513755][ T8594] Bluetooth: hci4: command tx timeout [ 623.230807][T18382] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 624.655920][T18403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2437'. [ 624.758009][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.764650][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.474720][T18441] FAULT_INJECTION: forcing a failure. [ 626.474720][T18441] name failslab, interval 1, probability 0, space 0, times 0 [ 626.555141][T18441] CPU: 0 UID: 0 PID: 18441 Comm: syz.3.2445 Tainted: G U syzkaller #0 PREEMPT(full) [ 626.555165][T18441] Tainted: [U]=USER [ 626.555170][T18441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.555178][T18441] Call Trace: [ 626.555183][T18441] [ 626.555189][T18441] dump_stack_lvl+0x16c/0x1f0 [ 626.555209][T18441] should_fail_ex+0x512/0x640 [ 626.555230][T18441] ? mempool_init_node+0x305/0x6e0 [ 626.555250][T18441] should_failslab+0xc2/0x120 [ 626.555267][T18441] __kmalloc_noprof+0xd2/0x510 [ 626.555284][T18441] ? __pfx_mempool_kmalloc+0x10/0x10 [ 626.555301][T18441] mempool_init_node+0x305/0x6e0 [ 626.555321][T18441] ? __pfx_mempool_kmalloc+0x10/0x10 [ 626.555339][T18441] ? __pfx_mempool_kfree+0x10/0x10 [ 626.555357][T18441] mempool_init_noprof+0x3a/0x50 [ 626.555383][T18441] do_fanotify_mark+0x2db2/0x3600 [ 626.555407][T18441] ? __pfx_do_fanotify_mark+0x10/0x10 [ 626.555427][T18441] ? __x64_sys_futex+0x1e9/0x4c0 [ 626.555446][T18441] ? xfd_validate_state+0x61/0x180 [ 626.555465][T18441] ? __pfx_ksys_write+0x10/0x10 [ 626.555481][T18441] __x64_sys_fanotify_mark+0xbd/0x160 [ 626.555501][T18441] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 626.555525][T18441] do_syscall_64+0xcd/0x490 [ 626.555543][T18441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.555558][T18441] RIP: 0033:0x7f7f70f8ebe9 [ 626.555568][T18441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.555582][T18441] RSP: 002b:00007f7f71e5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 626.555596][T18441] RAX: ffffffffffffffda RBX: 00007f7f711b5fa0 RCX: 00007f7f70f8ebe9 [ 626.555605][T18441] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000 [ 626.555613][T18441] RBP: 00007f7f71011e19 R08: 0000000000000000 R09: 0000000000000000 [ 626.555622][T18441] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 626.555630][T18441] R13: 00007f7f711b6038 R14: 00007f7f711b5fa0 R15: 00007ffddb5c3278 [ 626.555642][T18441] [ 627.770685][T18462] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 628.866027][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 628.978419][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 629.086063][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 629.123500][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 629.169155][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 629.237786][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 629.302967][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 629.370154][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 629.413070][T18510] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 629.447140][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 630.568125][T18536] FAULT_INJECTION: forcing a failure. [ 630.568125][T18536] name failslab, interval 1, probability 0, space 0, times 0 [ 630.622118][T12265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 630.629834][T12265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 630.641330][T12265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 630.650785][T12265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 630.659958][T12265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 630.689022][T18536] CPU: 0 UID: 0 PID: 18536 Comm: syz.1.2464 Tainted: G U syzkaller #0 PREEMPT(full) [ 630.689047][T18536] Tainted: [U]=USER [ 630.689053][T18536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.689062][T18536] Call Trace: [ 630.689067][T18536] [ 630.689072][T18536] dump_stack_lvl+0x16c/0x1f0 [ 630.689094][T18536] should_fail_ex+0x512/0x640 [ 630.689116][T18536] should_failslab+0xc2/0x120 [ 630.689134][T18536] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 630.689150][T18536] ? __kernfs_new_node+0xd2/0x8e0 [ 630.689168][T18536] __kernfs_new_node+0xd2/0x8e0 [ 630.689184][T18536] ? rcu_is_watching+0x12/0xc0 [ 630.689198][T18536] ? __pfx___kernfs_new_node+0x10/0x10 [ 630.689214][T18536] ? __pfx___might_resched+0x10/0x10 [ 630.689229][T18536] ? rcu_is_watching+0x12/0xc0 [ 630.689241][T18536] ? kernfs_root+0xee/0x2a0 [ 630.689256][T18536] ? rcu_is_watching+0x12/0xc0 [ 630.689268][T18536] ? lock_release+0x201/0x2f0 [ 630.689286][T18536] kernfs_new_node+0x13c/0x1e0 [ 630.689305][T18536] __kernfs_create_file+0x53/0x350 [ 630.689319][T18536] sysfs_add_file_mode_ns+0x207/0x3c0 [ 630.689336][T18536] internal_create_group+0x578/0xf30 [ 630.689354][T18536] ? __pfx_internal_create_group+0x10/0x10 [ 630.689372][T18536] ? kernfs_create_link+0x1bd/0x240 [ 630.689385][T18536] internal_create_groups+0x9d/0x150 [ 630.689403][T18536] device_add+0x731/0x1aa0 [ 630.689416][T18536] ? __pfx_device_add+0x10/0x10 [ 630.689428][T18536] ? rcu_is_watching+0x12/0xc0 [ 630.689440][T18536] ? lockdep_init_map_type+0x5c/0x280 [ 630.689457][T18536] ? __raw_spin_lock_init+0x3a/0x110 [ 630.689476][T18536] input_register_device+0x7e8/0x1180 [ 630.689490][T18536] ? input_ff_create+0x256/0x350 [ 630.689506][T18536] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 630.689523][T18536] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 630.689543][T18536] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 630.689561][T18536] ? rcu_is_watching+0x12/0xc0 [ 630.689574][T18536] ? __fget_files+0x204/0x3c0 [ 630.689591][T18536] ? __pfx_uinput_ioctl+0x10/0x10 [ 630.689607][T18536] __x64_sys_ioctl+0x18b/0x210 [ 630.689626][T18536] do_syscall_64+0xcd/0x490 [ 630.689644][T18536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.689658][T18536] RIP: 0033:0x7f824b98ebe9 [ 630.689670][T18536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.689683][T18536] RSP: 002b:00007f824c77e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.689697][T18536] RAX: ffffffffffffffda RBX: 00007f824bbb5fa0 RCX: 00007f824b98ebe9 [ 630.689706][T18536] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 630.689714][T18536] RBP: 00007f824ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 630.689723][T18536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.689731][T18536] R13: 00007f824bbb6038 R14: 00007f824bbb5fa0 R15: 00007ffd125729f8 [ 630.689745][T18536] [ 631.041290][T18541] __nla_validate_parse: 24 callbacks suppressed [ 631.041305][T18541] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2465'. [ 631.058499][T18541] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2465'. [ 631.983167][T18537] chnl_net:caif_netlink_parms(): no params data found [ 632.245576][T18537] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.252893][T18537] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.314622][T18537] bridge_slave_0: entered allmulticast mode [ 632.341529][T18537] bridge_slave_0: entered promiscuous mode [ 632.582063][T18537] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.591666][T18537] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.601294][T18537] bridge_slave_1: entered allmulticast mode [ 632.609367][T18537] bridge_slave_1: entered promiscuous mode [ 632.662233][T18537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.674529][T12265] Bluetooth: hci3: command tx timeout [ 632.732978][T18537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.790269][T18537] team0: Port device team_slave_0 added [ 632.805941][T18537] team0: Port device team_slave_1 added [ 632.860833][T18581] could not allocate digest TFM handle  [ 632.914622][T18537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.930236][T18537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.030947][T18537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.054520][T18537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.070718][T18537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.156984][T18537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.295590][T18537] hsr_slave_0: entered promiscuous mode [ 633.309030][T18537] hsr_slave_1: entered promiscuous mode [ 633.326463][T18537] debugfs: 'hsr0' already exists in 'hsr' [ 633.339799][T18537] Cannot create hsr debugfs directory [ 633.612777][T18537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.688058][T18537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.761841][T18537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.827942][T18537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.941609][T18537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 633.963310][T18537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 633.986704][T18537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 634.008885][T18537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 634.111003][T18537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.140859][T18537] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.159345][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.166601][ T8596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.210145][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.217379][ T8596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.527797][T18537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.566680][T18577] random: crng reseeded on system resumption [ 634.608532][T18537] veth0_vlan: entered promiscuous mode [ 634.638703][T18537] veth1_vlan: entered promiscuous mode [ 634.657952][T18624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.700377][T18537] veth0_macvtap: entered promiscuous mode [ 634.734442][T18537] veth1_macvtap: entered promiscuous mode [ 634.742758][T18624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.755511][T12265] Bluetooth: hci3: command tx timeout [ 634.783390][T18537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.816129][T18537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.874372][T16243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.904978][T16243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.946829][T16243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.984524][T16243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.106644][T16269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.143885][T16269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.179366][ T8596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.242180][ T8596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.391051][T18639] netlink: 62 bytes leftover after parsing attributes in process `syz.4.2482'. [ 636.048091][T18658] netlink: 'syz.0.2486': attribute type 1 has an invalid length. [ 636.063665][T18652] FAULT_INJECTION: forcing a failure. [ 636.063665][T18652] name failslab, interval 1, probability 0, space 0, times 0 [ 636.121907][T18652] CPU: 0 UID: 0 PID: 18652 Comm: syz.1.2485 Tainted: G U syzkaller #0 PREEMPT(full) [ 636.121932][T18652] Tainted: [U]=USER [ 636.121937][T18652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.121945][T18652] Call Trace: [ 636.121950][T18652] [ 636.121956][T18652] dump_stack_lvl+0x16c/0x1f0 [ 636.121976][T18652] should_fail_ex+0x512/0x640 [ 636.121997][T18652] should_failslab+0xc2/0x120 [ 636.122015][T18652] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 636.122030][T18652] ? __pfx_acct_collect+0x10/0x10 [ 636.122050][T18652] ? taskstats_exit+0x654/0xbe0 [ 636.122069][T18652] taskstats_exit+0x654/0xbe0 [ 636.122086][T18652] ? do_exit+0x2db/0x2bf0 [ 636.122104][T18652] ? __pfx_taskstats_exit+0x10/0x10 [ 636.122121][T18652] ? lock_release+0x201/0x2f0 [ 636.122138][T18652] ? preempt_count_add+0x76/0x150 [ 636.122157][T18652] do_exit+0x5dc/0x2bf0 [ 636.122175][T18652] ? __pfx_do_exit+0x10/0x10 [ 636.122192][T18652] ? do_raw_spin_lock+0x12c/0x2b0 [ 636.122211][T18652] ? get_signal+0x8f5/0x26d0 [ 636.122225][T18652] ? rcu_is_watching+0x12/0xc0 [ 636.122239][T18652] do_group_exit+0xd3/0x2a0 [ 636.122257][T18652] get_signal+0x2673/0x26d0 [ 636.122272][T18652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 636.122291][T18652] ? is_valid_madvise+0x34/0xd0 [ 636.122308][T18652] ? __pfx_get_signal+0x10/0x10 [ 636.122323][T18652] ? do_futex+0x122/0x350 [ 636.122339][T18652] ? __pfx_do_futex+0x10/0x10 [ 636.122354][T18652] arch_do_signal_or_restart+0x8f/0x790 [ 636.122372][T18652] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 636.122391][T18652] ? xfd_validate_state+0x61/0x180 [ 636.122409][T18652] ? __pfx_ksys_write+0x10/0x10 [ 636.122426][T18652] exit_to_user_mode_loop+0x84/0x110 [ 636.122445][T18652] do_syscall_64+0x3f6/0x490 [ 636.122463][T18652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.122486][T18652] RIP: 0033:0x7f824b98ebe9 [ 636.122497][T18652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.122510][T18652] RSP: 002b:00007f824c77e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 636.122524][T18652] RAX: fffffffffffffe00 RBX: 00007f824bbb5fa8 RCX: 00007f824b98ebe9 [ 636.122533][T18652] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f824bbb5fa8 [ 636.122542][T18652] RBP: 00007f824bbb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 636.122550][T18652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.122558][T18652] R13: 00007f824bbb6038 R14: 00007ffd12572910 R15: 00007ffd125729f8 [ 636.122571][T18652] [ 636.833785][T12265] Bluetooth: hci3: command tx timeout [ 637.437438][T18693] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2492'. [ 637.496842][T18696] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 637.521638][T18697] FAULT_INJECTION: forcing a failure. [ 637.521638][T18697] name failslab, interval 1, probability 0, space 0, times 0 [ 637.592933][T18697] CPU: 0 UID: 0 PID: 18697 Comm: syz.4.2493 Tainted: G U syzkaller #0 PREEMPT(full) [ 637.592959][T18697] Tainted: [U]=USER [ 637.592964][T18697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.592974][T18697] Call Trace: [ 637.592979][T18697] [ 637.592984][T18697] dump_stack_lvl+0x16c/0x1f0 [ 637.593007][T18697] should_fail_ex+0x512/0x640 [ 637.593028][T18697] should_failslab+0xc2/0x120 [ 637.593047][T18697] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 637.593063][T18697] ? security_inode_alloc+0x3b/0x2b0 [ 637.593081][T18697] security_inode_alloc+0x3b/0x2b0 [ 637.593097][T18697] inode_init_always_gfp+0xce4/0x1030 [ 637.593113][T18697] alloc_inode+0x86/0x240 [ 637.593139][T18697] alloc_anon_inode+0x28/0x3e0 [ 637.593156][T18697] anon_inode_make_secure_inode+0x31/0x140 [ 637.593174][T18697] __anon_inode_getfile+0x1cf/0x280 [ 637.593192][T18697] new_userfaultfd+0x25e/0x3d0 [ 637.593212][T18697] __x64_sys_userfaultfd+0x4b/0xb0 [ 637.593225][T18697] do_syscall_64+0xcd/0x490 [ 637.593242][T18697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.593256][T18697] RIP: 0033:0x7fe5fa58ebe9 [ 637.593266][T18697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.593280][T18697] RSP: 002b:00007fe5fb413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 637.593294][T18697] RAX: ffffffffffffffda RBX: 00007fe5fa7b6090 RCX: 00007fe5fa58ebe9 [ 637.593303][T18697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 637.593311][T18697] RBP: 00007fe5fa611e19 R08: 0000000000000000 R09: 0000000000000000 [ 637.593320][T18697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.593328][T18697] R13: 00007fe5fa7b6128 R14: 00007fe5fa7b6090 R15: 00007ffe75e2be68 [ 637.593340][T18697] [ 638.542537][T18716] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2501'. [ 638.580899][T18716] IPv6: NLM_F_CREATE should be specified when creating new route [ 638.610696][T18716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 638.618120][T18716] IPv6: NLM_F_CREATE should be set when creating new route [ 638.625689][T18716] IPv6: NLM_F_CREATE should be set when creating new route [ 638.737291][T18694] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 638.759168][T18716] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2501'. [ 638.917689][T12265] Bluetooth: hci3: command tx timeout [ 640.247848][T16274] macvlan0: left allmulticast mode [ 640.253009][T16274] veth1_vlan: left allmulticast mode [ 640.321616][T16274] macvlan0: left promiscuous mode [ 640.357738][T16274] bridge0: port 3(macvlan0) entered disabled state [ 640.405394][T16274] bridge_slave_1: left allmulticast mode [ 640.413921][T16274] bridge_slave_1: left promiscuous mode [ 640.450613][T16274] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.500383][T16274] bridge_slave_0: left allmulticast mode [ 640.530105][T16274] bridge_slave_0: left promiscuous mode [ 640.565266][T16274] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.271002][T16274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.321873][T16274] bond0 (unregistering): Released all slaves [ 641.784913][T18787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2513'. [ 641.889968][T18780] netlink: 'syz.3.2511': attribute type 1 has an invalid length. [ 641.942301][T18781] tipc: Can't bind to reserved service type 1 [ 642.245656][T18799] binder: 18797:18799 ioctl 400c620e 0 returned -22 [ 642.290337][T16274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.343631][T16274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.400121][T16274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.447050][T16274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.484914][T16274] veth1_vlan: left promiscuous mode [ 642.510174][T16274] veth0_vlan: left promiscuous mode [ 642.871049][T16274] team0 (unregistering): Port device team_slave_1 removed [ 642.927131][T16274] team0 (unregistering): Port device team_slave_0 removed [ 643.103380][T18820] __vm_enough_memory: pid: 18820, comm: syz.4.2520, bytes: 4398046511104 not enough memory for the allocation [ 643.339414][T18825] FAULT_INJECTION: forcing a failure. [ 643.339414][T18825] name failslab, interval 1, probability 0, space 0, times 0 [ 643.482718][T18825] CPU: 0 UID: 0 PID: 18825 Comm: syz.0.2521 Tainted: G U syzkaller #0 PREEMPT(full) [ 643.482744][T18825] Tainted: [U]=USER [ 643.482750][T18825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 643.482759][T18825] Call Trace: [ 643.482765][T18825] [ 643.482770][T18825] dump_stack_lvl+0x16c/0x1f0 [ 643.482792][T18825] should_fail_ex+0x512/0x640 [ 643.482811][T18825] should_failslab+0xc2/0x120 [ 643.482830][T18825] __kmalloc_cache_noprof+0x6a/0x3e0 [ 643.482851][T18825] ? __debugfs_file_get+0x2ad/0x840 [ 643.482873][T18825] __debugfs_file_get+0x2ad/0x840 [ 643.482892][T18825] ? __pfx___debugfs_file_get+0x10/0x10 [ 643.482911][T18825] ? __pfx_apparmor_file_open+0x10/0x10 [ 643.482925][T18825] ? path_get+0x61/0x80 [ 643.482941][T18825] ? rcu_is_watching+0x12/0xc0 [ 643.482956][T18825] full_proxy_open_short+0x4b/0x180 [ 643.482970][T18825] do_dentry_open+0x97f/0x1530 [ 643.482986][T18825] ? __pfx_full_proxy_open_short+0x10/0x10 [ 643.483001][T18825] vfs_open+0x82/0x3f0 [ 643.483019][T18825] path_openat+0x1de4/0x2cb0 [ 643.483037][T18825] ? __pfx_path_openat+0x10/0x10 [ 643.483053][T18825] do_filp_open+0x20b/0x470 [ 643.483068][T18825] ? __pfx_do_filp_open+0x10/0x10 [ 643.483088][T18825] ? alloc_fd+0x471/0x7d0 [ 643.483104][T18825] do_sys_openat2+0x11b/0x1d0 [ 643.483123][T18825] ? __pfx_do_sys_openat2+0x10/0x10 [ 643.483144][T18825] __x64_sys_openat+0x174/0x210 [ 643.483164][T18825] ? __pfx___x64_sys_openat+0x10/0x10 [ 643.483186][T18825] do_syscall_64+0xcd/0x490 [ 643.483203][T18825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.483218][T18825] RIP: 0033:0x7f4d2078ebe9 [ 643.483229][T18825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.483243][T18825] RSP: 002b:00007f4d1e9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 643.483258][T18825] RAX: ffffffffffffffda RBX: 00007f4d209b6090 RCX: 00007f4d2078ebe9 [ 643.483267][T18825] RDX: 0000000000080000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 643.483276][T18825] RBP: 00007f4d20811e19 R08: 0000000000000000 R09: 0000000000000000 [ 643.483284][T18825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.483292][T18825] R13: 00007f4d209b6128 R14: 00007f4d209b6090 R15: 00007ffcf6e888e8 [ 643.483305][T18825] [ 644.068499][ T30] audit: type=1800 audit(1843104529.830:26): pid=18833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2523" name="discovery_nqn" dev="configfs" ino=72247 res=0 errno=0 [ 644.215291][T18839] bridge0: port 3(team0) entered blocking state [ 644.224616][T18839] bridge0: port 3(team0) entered disabled state [ 644.241561][T18839] team0: entered allmulticast mode [ 644.260004][T18839] team_slave_0: entered allmulticast mode [ 644.291070][T18839] team_slave_1: entered allmulticast mode [ 644.322413][T18839] team0: entered promiscuous mode [ 644.373796][T18839] team_slave_0: entered promiscuous mode [ 644.379679][T18839] team_slave_1: entered promiscuous mode [ 644.420698][T18839] bridge0: port 3(team0) entered blocking state [ 644.427180][T18839] bridge0: port 3(team0) entered forwarding state [ 644.476210][T18846] nbd: must specify at least one socket [ 645.572462][T18874] netlink: 'syz.4.2532': attribute type 1 has an invalid length. [ 645.785694][T18874] netlink: zone id is out of range [ 645.898347][T18874] netlink: zone id is out of range [ 646.035818][T18874] netlink: zone id is out of range [ 646.182559][T18874] netlink: zone id is out of range [ 646.237377][T18874] netlink: zone id is out of range [ 646.242604][T18874] netlink: zone id is out of range [ 646.402707][T18874] netlink: zone id is out of range [ 646.482076][T18874] netlink: zone id is out of range [ 646.569814][T18874] netlink: zone id is out of range [ 646.670771][T18874] netlink: zone id is out of range [ 647.088892][T12265] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 650.268284][T18957] FAULT_INJECTION: forcing a failure. [ 650.268284][T18957] name failslab, interval 1, probability 0, space 0, times 0 [ 650.395274][T18957] CPU: 0 UID: 0 PID: 18957 Comm: syz.1.2548 Tainted: G U syzkaller #0 PREEMPT(full) [ 650.395314][T18957] Tainted: [U]=USER [ 650.395319][T18957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 650.395329][T18957] Call Trace: [ 650.395334][T18957] [ 650.395340][T18957] dump_stack_lvl+0x16c/0x1f0 [ 650.395362][T18957] should_fail_ex+0x512/0x640 [ 650.395383][T18957] should_failslab+0xc2/0x120 [ 650.395402][T18957] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 650.395418][T18957] ? security_file_alloc+0x34/0x2b0 [ 650.395444][T18957] security_file_alloc+0x34/0x2b0 [ 650.395466][T18957] init_file+0x93/0x4c0 [ 650.395485][T18957] alloc_empty_file+0x73/0x1e0 [ 650.395504][T18957] alloc_file_pseudo+0x13a/0x230 [ 650.395522][T18957] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 650.395540][T18957] ? security_inode_init_security_anon+0x79/0x240 [ 650.395558][T18957] __anon_inode_getfile+0xe8/0x280 [ 650.395575][T18957] new_userfaultfd+0x25e/0x3d0 [ 650.395594][T18957] __x64_sys_userfaultfd+0x4b/0xb0 [ 650.395607][T18957] do_syscall_64+0xcd/0x490 [ 650.395624][T18957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.395638][T18957] RIP: 0033:0x7f824b98ebe9 [ 650.395649][T18957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.395663][T18957] RSP: 002b:00007f824c77e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 650.395676][T18957] RAX: ffffffffffffffda RBX: 00007f824bbb5fa0 RCX: 00007f824b98ebe9 [ 650.395685][T18957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 650.395693][T18957] RBP: 00007f824ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 650.395701][T18957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.395709][T18957] R13: 00007f824bbb6038 R14: 00007f824bbb5fa0 R15: 00007ffd125729f8 [ 650.395721][T18957] [ 651.455961][T18960] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163f829 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 651.471460][T18960] Call Trace: [ 651.474743][T18960] [ 651.477762][T18960] mce_cpu_restart+0x98/0xb0 [ 651.482348][T18960] ? __pfx_mce_cpu_restart+0x10/0x10 [ 651.487719][T18960] smp_call_function_many_cond+0x122a/0x1600 [ 651.493687][T18960] ? __pfx_mce_cpu_restart+0x10/0x10 [ 651.498984][T18960] ? rcu_is_watching+0x12/0xc0 [ 651.503758][T18960] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 651.510230][T18960] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 651.516651][T18960] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 651.522979][T18960] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 651.529065][T18960] ? rcu_is_watching+0x12/0xc0 [ 651.533930][T18960] ? rcu_is_watching+0x12/0xc0 [ 651.538696][T18960] ? __pfx_mce_cpu_restart+0x10/0x10 [ 651.543975][T18960] on_each_cpu_cond_mask+0x40/0x90 [ 651.549274][T18960] set_bank+0x240/0x3a0 [ 651.553439][T18960] ? __pfx_set_bank+0x10/0x10 [ 651.558205][T18960] ? rcu_is_watching+0x12/0xc0 [ 651.563002][T18960] ? sysfs_file_kobj+0xe4/0x290 [ 651.567995][T18960] ? rcu_is_watching+0x12/0xc0 [ 651.572870][T18960] ? __pfx_set_bank+0x10/0x10 [ 651.577562][T18960] dev_attr_store+0x58/0x80 [ 651.582063][T18960] ? __pfx_dev_attr_store+0x10/0x10 [ 651.587254][T18960] sysfs_kf_write+0xef/0x150 [ 651.592039][T18960] kernfs_fop_write_iter+0x351/0x510 [ 651.597443][T18960] ? __pfx_sysfs_kf_write+0x10/0x10 [ 651.602741][T18960] vfs_write+0x7d3/0x11d0 [ 651.607071][T18960] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 651.612864][T18960] ? __pfx___mutex_lock+0x10/0x10 [ 651.617878][T18960] ? __pfx_vfs_write+0x10/0x10 [ 651.622639][T18960] ksys_write+0x12a/0x250 [ 651.627042][T18960] ? __pfx_ksys_write+0x10/0x10 [ 651.631876][T18960] do_syscall_64+0xcd/0x490 [ 651.636398][T18960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.642375][T18960] RIP: 0033:0x7f824b98ebe9 [ 651.646787][T18960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.666470][T18960] RSP: 002b:00007f824c75d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 651.675132][T18960] RAX: ffffffffffffffda RBX: 00007f824bbb6090 RCX: 00007f824b98ebe9 [ 651.683091][T18960] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000002 [ 651.691064][T18960] RBP: 00007f824ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 651.699123][T18960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.707088][T18960] R13: 00007f824bbb6128 R14: 00007f824bbb6090 R15: 00007ffd125729f8 [ 651.715309][T18960] [ 653.006653][T18990] netlink: 'syz.0.2554': attribute type 11 has an invalid length. [ 653.049317][T18990] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2554'. [ 653.103426][T18991] netlink: 'syz.0.2554': attribute type 11 has an invalid length. [ 653.156340][T18991] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2554'. [ 654.565298][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2561'. [ 655.166387][T19054] netlink: 'syz.4.2565': attribute type 1 has an invalid length. [ 655.279040][T19059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2565'. [ 655.789043][T19059] team0 (unregistering): Port device team_slave_0 removed [ 655.901081][T19059] team0 (unregistering): Port device team_slave_1 removed [ 661.552180][T19173] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 661.576643][T19173] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 661.608700][T19173] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 661.635266][T19173] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 661.679233][T19173] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 661.700477][T19173] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 661.758355][T19173] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 661.808090][T19173] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 661.827114][T19173] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 661.855142][T19173] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 662.047659][T19184] blktrace: Concurrent blktraces are not allowed on ram7 [ 662.064263][T19187] usb usb2: usbfs: process 19187 (syz.4.2586) did not claim interface 0 before use [ 663.209622][T19206] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2590'. [ 663.492834][T19218] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2593'. [ 663.554258][T12265] Bluetooth: hci2: command 0x040f tx timeout [ 663.634417][T12265] Bluetooth: hci0: command 0x0c1a tx timeout [ 663.713655][T12265] Bluetooth: hci4: command 0x0c1a tx timeout [ 663.873731][T12265] Bluetooth: hci3: command 0x0c1a tx timeout [ 664.524565][T19236] CIFS: VFS: Invalid SecurityFlags: [ 665.715058][T12265] Bluetooth: hci0: command 0x0c1a tx timeout [ 665.794038][T12265] Bluetooth: hci4: command 0x0c1a tx timeout [ 665.953802][T12265] Bluetooth: hci3: command 0x0c1a tx timeout [ 666.317924][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'. [ 666.632089][T19285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2603'. [ 666.755497][T19285] veth0_macvtap: left promiscuous mode [ 667.198512][T19296] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2606'. [ 667.252928][T19296] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2606'. [ 667.793650][T12265] Bluetooth: hci0: command 0x0c1a tx timeout [ 667.873724][T12265] Bluetooth: hci4: command 0x0c1a tx timeout [ 667.932041][T19313] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 668.033677][T12265] Bluetooth: hci3: command 0x0c1a tx timeout [ 669.014919][T19334] kafs: addr_prefs: Too many elements in string [ 670.968711][T19385] vivid-003: ================= START STATUS ================= [ 670.994908][T19385] vivid-003: Radio HW Seek Mode: Bounded [ 671.016254][T19385] vivid-003: Radio Programmable HW Seek: false [ 671.037689][T19385] vivid-003: RDS Rx I/O Mode: Block I/O [ 671.076700][T19385] vivid-003: Generate RBDS Instead of RDS: false [ 671.101330][T19385] vivid-003: RDS Reception: true [ 671.120605][T19385] vivid-003: RDS Program Type: 0 inactive [ 671.145595][T19385] vivid-003: RDS PS Name: inactive [ 671.180776][T19385] vivid-003: RDS Radio Text: inactive [ 671.225034][T19385] vivid-003: RDS Traffic Announcement: false inactive [ 671.261072][T19385] vivid-003: RDS Traffic Program: false inactive [ 671.290378][T19385] vivid-003: RDS Music: false inactive [ 671.308678][T19385] vivid-003: ================== END STATUS ================== [ 671.554655][ T30] audit: type=1800 audit(1843104557.560:27): pid=19402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2626" name="features" dev="configfs" ino=74932 res=0 errno=0 [ 671.984899][T19414] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 672.149396][T19415] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 673.230252][ T30] audit: type=1804 audit(1843104559.230:28): pid=19426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2633" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 676.469364][T19461] bond0: option all_slaves_active: invalid value () [ 676.638330][T19465] svc: failed to register nfsdv3 RPC service (errno 111). [ 676.647086][T19466] mkiss: ax0: crc mode is auto. [ 676.709888][T19465] svc: failed to register nfsaclv3 RPC service (errno 111). [ 677.183123][T19474] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 678.313239][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'. [ 678.404595][T19499] qrtr: Invalid version 20 [ 679.954140][T19520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2653'. [ 680.215096][T19531] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 680.657211][T19533] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 680.760958][T19539] svc: failed to register nfsdv3 RPC service (errno 111). [ 680.818321][T19540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2657'. [ 680.918277][T19539] svc: failed to register nfsaclv3 RPC service (errno 111). [ 680.964090][T19540] ipvlan1: entered promiscuous mode [ 681.042855][T19540] ipvlan1: entered allmulticast mode [ 681.072974][T19540] veth0_vlan: entered allmulticast mode [ 681.475364][T19542] net_ratelimit: 96 callbacks suppressed [ 681.475388][T19542] netlink: zone id is out of range [ 681.622882][T19542] netlink: zone id is out of range [ 681.693651][T19542] netlink: zone id is out of range [ 681.698810][T19542] netlink: zone id is out of range [ 681.872277][T19542] netlink: zone id is out of range [ 681.949760][T19542] netlink: zone id is out of range [ 682.030467][T19542] netlink: zone id is out of range [ 682.093154][T19542] netlink: zone id is out of range [ 682.157946][T19542] netlink: zone id is out of range [ 682.212931][T19542] netlink: zone id is out of range [ 682.777487][T19577] blktrace: Concurrent blktraces are not allowed on ram7 [ 684.752881][T19618] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 686.196058][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.203469][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.289031][T19675] netlink: 'syz.1.2684': attribute type 1 has an invalid length. [ 687.595648][T19653] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 687.939898][T19690] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 689.593024][T19736] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2696'. [ 692.168116][T16274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.223994][T16274] bond0 (unregistering): Released all slaves [ 692.484200][T19788] ------------[ cut here ]------------ [ 692.489697][T19788] WARNING: CPU: 0 PID: 19788 at kernel/trace/trace.c:8594 tracing_buffers_mmap_close+0xdd/0x130 [ 692.500638][T19788] Modules linked in: [ 692.504973][T19788] CPU: 0 UID: 0 PID: 19788 Comm: syz.4.2705 Tainted: G U syzkaller #0 PREEMPT(full) [ 692.516597][T19788] Tainted: [U]=USER [ 692.520386][T19788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 692.530787][T19788] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 692.537370][T19788] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 bb 60 00 eb 87 e8 5a [ 692.558048][T19788] RSP: 0018:ffffc9000426f818 EFLAGS: 00010293 [ 692.564505][T19788] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfaae9 [ 692.572565][T19788] RDX: ffff888033810000 RSI: ffffffff81bfaafc RDI: 0000000000000005 [ 692.580882][T19788] RBP: ffff88805d214a48 R08: 0000000000000005 R09: 0000000000000000 [ 692.588969][T19788] R10: 00000000ffffffed R11: 0000000000000000 R12: dffffc0000000000 [ 692.598171][T19788] R13: 0000200000ffc000 R14: 0000000000000000 R15: ffffffff81bfaa20 [ 692.607099][T19788] FS: 00007fe5fb4346c0(0000) GS:ffff8881246c3000(0000) knlGS:0000000000000000 [ 692.616608][T19788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.623379][T19788] CR2: 00007fe5fb412f98 CR3: 000000008fd10000 CR4: 00000000003526f0 [ 692.631575][T19788] Call Trace: [ 692.635057][T19788] [ 692.637974][T19788] __mmap_region+0x6be/0x27b0 [ 692.642709][T19788] ? rcu_is_watching+0x12/0xc0 [ 692.647889][T19788] ? __pfx___mmap_region+0x10/0x10 [ 692.653171][T19788] ? rcu_is_watching+0x12/0xc0 [ 692.658260][T19788] ? rcu_is_watching+0x12/0xc0 [ 692.663122][T19788] ? trace_sched_exit_tp+0xd1/0x120 [ 692.668414][T19788] ? __schedule+0x11a3/0x5de0 [ 692.673298][T19788] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 692.679717][T19788] ? is_bpf_text_address+0x94/0x1a0 [ 692.685062][T19788] ? __kernel_text_address+0xd/0x40 [ 692.690261][T19788] ? __pfx___schedule+0x10/0x10 [ 692.695390][T19788] ? futex_private_hash_put+0x112/0x300 [ 692.701027][T19788] ? rcu_is_watching+0x12/0xc0 [ 692.706508][T19788] mmap_region+0x32b/0x3f0 [ 692.711145][T19788] do_mmap+0xa3e/0x1210 [ 692.715642][T19788] ? __pfx_do_mmap+0x10/0x10 [ 692.720515][T19788] ? __pfx_down_write_killable+0x10/0x10 [ 692.726408][T19788] vm_mmap_pgoff+0x29e/0x470 [ 692.731131][T19788] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 692.736574][T19788] ? lock_release+0x201/0x2f0 [ 692.741484][T19788] ? __fget_files+0x20e/0x3c0 [ 692.746226][T19788] ksys_mmap_pgoff+0x32c/0x5c0 [ 692.751366][T19788] __x64_sys_mmap+0x125/0x190 [ 692.756550][T19788] do_syscall_64+0xcd/0x490 [ 692.761106][T19788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.767225][T19788] RIP: 0033:0x7fe5fa58ebe9 [ 692.772005][T19788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.792833][T19788] RSP: 002b:00007fe5fb434038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 692.801555][T19788] RAX: ffffffffffffffda RBX: 00007fe5fa7b5fa0 RCX: 00007fe5fa58ebe9 [ 692.810548][T19788] RDX: 0000000002000000 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 692.818714][T19788] RBP: 00007fe5fa611e19 R08: 0000000000000004 R09: 0000000000001000 [ 692.827469][T19788] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 692.835504][T19788] R13: 00007fe5fa7b6038 R14: 00007fe5fa7b5fa0 R15: 00007ffe75e2be68 [ 692.843687][T19788] [ 692.846792][T19788] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 692.854254][T19788] CPU: 0 UID: 0 PID: 19788 Comm: syz.4.2705 Tainted: G U syzkaller #0 PREEMPT(full) [ 692.865526][T19788] Tainted: [U]=USER [ 692.869750][T19788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 692.880075][T19788] Call Trace: [ 692.883340][T19788] [ 692.886283][T19788] dump_stack_lvl+0x3d/0x1f0 [ 692.890877][T19788] vpanic+0x6e8/0x7a0 [ 692.894941][T19788] ? __pfx_vpanic+0x10/0x10 [ 692.899447][T19788] ? tracing_buffers_mmap_close+0xdd/0x130 [ 692.905238][T19788] panic+0xca/0xd0 [ 692.909056][T19788] ? __pfx_panic+0x10/0x10 [ 692.913744][T19788] ? check_panic_on_warn+0x1f/0xb0 [ 692.919236][T19788] check_panic_on_warn+0xab/0xb0 [ 692.924531][T19788] __warn+0xf6/0x3c0 [ 692.928525][T19788] ? tracing_buffers_mmap_close+0xdd/0x130 [ 692.934710][T19788] report_bug+0x3c3/0x580 [ 692.939352][T19788] ? tracing_buffers_mmap_close+0xdd/0x130 [ 692.945732][T19788] handle_bug+0x184/0x210 [ 692.950442][T19788] exc_invalid_op+0x17/0x50 [ 692.955075][T19788] asm_exc_invalid_op+0x1a/0x20 [ 692.960106][T19788] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 692.966533][T19788] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 bb 60 00 eb 87 e8 5a [ 692.987630][T19788] RSP: 0018:ffffc9000426f818 EFLAGS: 00010293 [ 692.993893][T19788] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfaae9 [ 693.002124][T19788] RDX: ffff888033810000 RSI: ffffffff81bfaafc RDI: 0000000000000005 [ 693.010442][T19788] RBP: ffff88805d214a48 R08: 0000000000000005 R09: 0000000000000000 [ 693.018762][T19788] R10: 00000000ffffffed R11: 0000000000000000 R12: dffffc0000000000 [ 693.026939][T19788] R13: 0000200000ffc000 R14: 0000000000000000 R15: ffffffff81bfaa20 [ 693.035205][T19788] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 693.041740][T19788] ? tracing_buffers_mmap_close+0xc9/0x130 [ 693.047727][T19788] ? tracing_buffers_mmap_close+0xdc/0x130 [ 693.053643][T19788] ? tracing_buffers_mmap_close+0xdc/0x130 [ 693.059474][T19788] __mmap_region+0x6be/0x27b0 [ 693.064241][T19788] ? rcu_is_watching+0x12/0xc0 [ 693.069175][T19788] ? __pfx___mmap_region+0x10/0x10 [ 693.074655][T19788] ? rcu_is_watching+0x12/0xc0 [ 693.079627][T19788] ? rcu_is_watching+0x12/0xc0 [ 693.084490][T19788] ? trace_sched_exit_tp+0xd1/0x120 [ 693.089689][T19788] ? __schedule+0x11a3/0x5de0 [ 693.094374][T19788] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 693.100695][T19788] ? is_bpf_text_address+0x94/0x1a0 [ 693.105980][T19788] ? __kernel_text_address+0xd/0x40 [ 693.111179][T19788] ? __pfx___schedule+0x10/0x10 [ 693.116207][T19788] ? futex_private_hash_put+0x112/0x300 [ 693.122026][T19788] ? rcu_is_watching+0x12/0xc0 [ 693.126811][T19788] mmap_region+0x32b/0x3f0 [ 693.131414][T19788] do_mmap+0xa3e/0x1210 [ 693.135755][T19788] ? __pfx_do_mmap+0x10/0x10 [ 693.140550][T19788] ? __pfx_down_write_killable+0x10/0x10 [ 693.146199][T19788] vm_mmap_pgoff+0x29e/0x470 [ 693.150881][T19788] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 693.156068][T19788] ? lock_release+0x201/0x2f0 [ 693.160781][T19788] ? __fget_files+0x20e/0x3c0 [ 693.165540][T19788] ksys_mmap_pgoff+0x32c/0x5c0 [ 693.170796][T19788] __x64_sys_mmap+0x125/0x190 [ 693.175576][T19788] do_syscall_64+0xcd/0x490 [ 693.180222][T19788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.186207][T19788] RIP: 0033:0x7fe5fa58ebe9 [ 693.190980][T19788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.210720][T19788] RSP: 002b:00007fe5fb434038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 693.219143][T19788] RAX: ffffffffffffffda RBX: 00007fe5fa7b5fa0 RCX: 00007fe5fa58ebe9 [ 693.227290][T19788] RDX: 0000000002000000 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 693.235266][T19788] RBP: 00007fe5fa611e19 R08: 0000000000000004 R09: 0000000000001000 [ 693.243441][T19788] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 693.251680][T19788] R13: 00007fe5fa7b6038 R14: 00007fe5fa7b5fa0 R15: 00007ffe75e2be68 [ 693.259746][T19788] [ 693.263010][T19788] Kernel Offset: disabled [ 693.267322][T19788] Rebooting in 86400 seconds..