last executing test programs: 12.219646981s ago: executing program 0 (id=180): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x103042, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) r1 = socket(0xa, 0x5, 0x0) ioctl$auto(r1, 0x8941, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000280), 0x109201, 0x0) ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0) madvise$auto(0x200003, 0xec, 0x8) 11.934801064s ago: executing program 0 (id=182): r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000000c0)=""/45, 0x2d) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4000810}, 0x90) r2 = socket(0x10, 0x80002, 0x8) close_range$auto(r2, r2, 0x0) splice$auto(r2, 0x0, 0x2, 0x0, 0x3fb, 0x9) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000240), r1) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0xb, 0x1f, '():*\'\\*'}, @IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "d52cdb93f3b93ad9466269eb562d95f041488cc66da25848127294"}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfd}]}, 0x58}, 0x1, 0x0, 0x0, 0x20840}, 0x840) semctl$auto(0x7, 0x2, 0xe44, 0x9) 11.296842243s ago: executing program 0 (id=184): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x24004805) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) lseek$auto(0x3, 0x0, 0x1) ioctl$auto_BLKTRACESTART(r0, 0x1274, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) munmap$auto(0x8000, 0xffffffff) getdents$auto(0xffffffffffffffff, 0x0, 0x18) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x31, 0x7f, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x0, 0x800000007ffffffb, 0x5, 0xffffffff80000003, 0x2, 0x60, 0x401}) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f0000000280)={0x0, 0x10000}, 0x8, 0x0, 0x4, 0xf}, 0xfff}, 0x7, 0xdc) mmap$auto(0x0, 0x20009, 0x10000000000df, 0x4eb2, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) munmap$auto(0x4, 0x0) 10.59653723s ago: executing program 0 (id=189): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) socket(0x11, 0x80003, 0x300) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto(r3, 0x40045431, r2) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x1e00, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010b27bd7000fcdbdf250500000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) open(0x0, 0x22240, 0x154) bpf$auto(0x7, 0x0, 0xa3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f00000000c0)='5', 0x1) 9.909295213s ago: executing program 0 (id=194): madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r0, 0x40044145, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syslog$auto(0x3, 0x0, 0x2001013) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x0, r1, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, 0x0, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x80302, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r3, 0x40045701, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop12\x00', 0x8200, 0x0) fadvise64$auto(r4, 0x4a, 0x400000000000006, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x40000, 0x0) r5 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x0) ioctl$auto_NS_GET_PARENT(r5, 0xb702, 0x0) execveat$auto(r5, 0x0, 0x0, 0x0, 0x11000) ioctl$auto_SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f0000000200)="d6ed362b75b48a09425a5a0ed8625279f9d075372dd32fa8ca2a1b7689552703be0272fd6efce39000da") mmap$auto(0xfffffffffffffffd, 0xc37, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x8, 0x0) 6.52291942s ago: executing program 3 (id=212): r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) execveat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=&(0x7f0000000100)='\x00', &(0x7f00000001c0)=&(0x7f0000000180)='@\x00', 0x3) mmap$auto(0x0, 0x202000d, 0x800, 0xeb1, r0, 0x8000) socketpair$auto(0x5e, 0x80000005, 0x7, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x103800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)=0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_setup$auto(0x7ffe, &(0x7f0000000000)) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0xa0, 0x2000400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) sendfile$auto(r2, r2, 0x0, 0x4000000000001) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r3 = socket(0x2c, 0x3, 0x0) getsockopt$auto_SO_DEBUG(r3, 0x4, 0x1, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.815471112s ago: executing program 3 (id=219): socket(0x9, 0x3, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x2, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fanotify_init$auto(0x200, 0x1) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x98, 0xa38, 0x1, 0x0) mmap$auto(0x9, 0xfffffffffffffffe, 0x100000001db, 0x15, r0, 0x7ffc) madvise$auto(0x100000000002, 0x2000040080000004, 0xe) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x8) mmap$auto(0x0, 0x6000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000000)={0x6}) poll$auto(0x0, 0x7f, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x141000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) 4.515094152s ago: executing program 1 (id=221): r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/netfilter/nf_conntrack_sctp_timeout_shutdown_ack_sent\x00', 0x482200, 0x0) writev$auto(r0, &(0x7f00000005c0)={&(0x7f0000000500)="5c7dfdc1677228966147df61f841e0d181359641ccf5b3bf49f76b88586ff532e6486b74192ed534511ee151350b302154", 0x1}, 0x18f1b602) sendfile$auto(r1, r1, 0x0, 0x7fffe000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x5865, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) io_uring_setup$auto(0x5, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000200)=""/55, 0x37) write$auto_console_fops_tty_io(r3, &(0x7f0000000340)="c80c1b5d399b588143e12632e16841dd73450e32ce65e99407334a998d5a7a5d14d75346a0f32c6924197ec30526fcb61c0b29024ebecfb9b357e5cd53c73d8692e5ae6aff889cf259f55be3697ee2428c633014880178d7f4fbeb2aacfb3a122387d3b9f3711d53b58246c61bfa7121f130194ec2808698195c2cdf9f6979df65efbb516b537ef1a005f87e6396a801ba8ddded61811d2d21c60d4c0d0074182bb38777fd", 0xa5) write$auto_ftrace_event_filter_fops_trace_events(r0, &(0x7f0000000300)="2baf82c1a5bc872318c266c40109c6b2b8e16198d96732ec3515702f77291f", 0x1f) 4.364322704s ago: executing program 1 (id=222): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) read$auto(0x3, 0x0, 0x80) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) 4.174908197s ago: executing program 2 (id=223): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x20009, 0xe2, 0xffffffffffffffff, 0x3fd, 0x7ffd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) 3.782131597s ago: executing program 2 (id=224): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x6f4) socket(0x11, 0x80003, 0x300) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) 3.344471749s ago: executing program 1 (id=225): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x101) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x1, 0x0) r1 = prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_SET_STATION(r2, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES16=r4, @ANYBLOB="10002a007e00020000000400d0000400e20004004100050019010300000019d100000004001d8000000000000000000000e100000000"], 0x48}, 0x1, 0x0, 0x0, 0x20044080}, 0x4000005) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/trace_options\x00', 0x10000, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0xb48, 0x7, 0xa) syz_open_procfs$namespace(0x0, 0x0) fchdir$auto(r0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r5, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r5, 0xc0045405, &(0x7f0000000140)) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) 3.313452129s ago: executing program 2 (id=226): madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r0, 0x40044145, 0x0) madvise$auto(0x0, 0xc, 0x1b) syslog$auto(0x3, 0x0, 0x2001013) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) clock_getres$auto(0x4, &(0x7f0000000340)={0x6, 0x81}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x191000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0x8, 0x5, 0x948b, 0xffffffffffffffff, 0xffffffffffff8000, 0x5, 0x8, 0x67, 0x80000020, 0x1000, 0xc, 0xc, 0x2, 0x8]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) 2.820488475s ago: executing program 1 (id=227): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop2/queue/iostats\x00', 0x20b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 2.618772248s ago: executing program 3 (id=228): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r0, r0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x0, 0x5c5, 0x0, 0x4, 0x0) 2.41101811s ago: executing program 1 (id=229): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_l2tp(0x0, r1) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002cbd7000ffdbdf2502000000060002000400000005000d000200000006001d00010000000800", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="95f7826f340808d940380000000b30bf3bf4d11db289b85b01123cf9f6fcb5822bb8d1ca84b29dc17f7b654479de35d68a5abbe5bdcbd9a14c7eec61", @ANYRES16=r4, @ANYBLOB="1b0026bd7000fddbdf250300000004000800080003800400c88012000100898771f1c19f1779048590828847000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2, 0x80802, 0x0) r6 = socket(0x2b, 0x1, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/fail_over_mac\x00', 0x103b02, 0x0) sendfile$auto(r7, r7, 0x0, 0x8080000001) bind$auto(r5, &(0x7f0000000380)=@llc={0x1a, 0x300, 0x1, 0x80, 0x7, 0x3, @broadcast}, 0x3) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x18, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x80047453, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000894}, 0x40084) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x340000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kcore\x00', 0x40000, 0x0) 2.248150674s ago: executing program 3 (id=230): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x2000000) open(&(0x7f00000001c0)='./file0/file0\x00', 0x169342, 0x20) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2b, 0x1, 0x1) socket(0x29, 0x5, 0x3) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7f8, 0x3, 0x9, 0x9, 0xffffffffffffffff, 0x20010180, 0xa}, 0x10) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2000c800) poll$auto(0x0, 0x7f, 0x9) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) 1.730273952s ago: executing program 2 (id=231): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = socket(0x1e, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video4\x00', 0x80382, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000380), r0) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xc0, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x94, 0x3, 0x0, 0x1, [@generic="dbfbd2a0bcf0ae80075a2e2c53948b39155c52c9fe6f4baf96d2ce3f32503651932d9dc8c9290617358e6c38f86e7982367c2b5760e1de24d3bb34501dd4a7bd4c3a89f619d4ba656dd1007551d5d612ac665d9a355a25e97b9c02f46125a306f727a68c48efc3c9c3b92a49a866eb8072ef0985ff1eda97a23f8411dc07d5fa9dbda82c7e4aa9d0d01d2e5b9ec7ba24"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40090) socket(0xa, 0x80002, 0x73) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x10003, 0x1, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @inferred=0xffffffffffffffff}, 0x3, 0xffffa0df, 0x4, @inferred, @enumerated={0x1, 0x0, "a46799e0f2b0d79459a2ebaf844518eba32d0bc26b3eb16f799217c0792023f5d37a167527363a71dcfbe0bc705114d18dc0ad6c024b6178dd46ad4ea22fb81a", 0x7fffffff, 0x10001}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970aedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) socket(0x2, 0x80805, 0x0) r3 = socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x4008010) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x46, 0x2d, 0x1000000000065f, 0x80000000, 0x40000007, 0x3, 0x20000002, 0x9, 0x1, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x2, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x40000, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3c, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000000c0), 0xa62d5a10f04abeec, 0x0) ioctl$auto_SNAPSHOT_FREE(r4, 0x3305, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000011) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.078532758s ago: executing program 2 (id=232): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x2000000) open(&(0x7f00000001c0)='./file0/file0\x00', 0x169342, 0x20) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2b, 0x1, 0x1) socket(0x29, 0x5, 0x3) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7f8, 0x3, 0x9, 0x9, 0xffffffffffffffff, 0x20010180, 0xa}, 0x10) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2000c800) poll$auto(0x0, 0x7f, 0x9) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) r4 = socket(0x2, 0x1, 0x106) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) 693.377258ms ago: executing program 0 (id=233): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) read$auto(0x3, 0x0, 0x80) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) 498.173477ms ago: executing program 3 (id=234): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) socket(0x1e, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video4\x00', 0x80382, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) socket(0x2, 0x80805, 0x0) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x4008010) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x46, 0x2d, 0x1000000000065f, 0x80000000, 0x40000007, 0x3, 0x20000002, 0x9, 0x1, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x2, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x40000, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3c, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000011) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 327.029703ms ago: executing program 1 (id=235): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000140)='/d\xab\xbd\xb1\xbdQ1\x7fj\x80\xf9j\x88', 0x100000a3d9) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b72", 0x25) r2 = socketpair$auto(0x2, 0x4, 0x8, 0x0) r3 = timerfd_create$auto(0x4, 0x4) mmap$auto(0x2, 0x7, 0x2, 0x17, r3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x7, 0xffffffffffff9817, 0x401, 0x8) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1, 0x7, 0x2817, 0x4, 0x200004, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x7, 0x5, 0x8}, 0x10) bpf$auto(0x15, 0x0, 0x0) unshare$auto(0x40000080) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffb1ee25050000000500060000000000180001801400020073797a5f74756e000000000010000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000802) pwrite64$auto(0xffffffffffffffff, 0x0, 0x7, 0x7) socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000300000010000a800c00018008000100020000", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x33, 0x65f, 0x7fdfffff, 0x7, 0x3, 0x20000002, 0x9, 0x1, 0x9, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x9, 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xff]}, 0x5, 0xd) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0x0, 0x0) close_range$auto(r2, 0xffffffffffffffff, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) 102.406108ms ago: executing program 3 (id=236): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xea8a, 0x8000) timer_create$auto(0x1, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) timer_gettime$auto(0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r0, @ANYBLOB="0800fb00", @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 0s ago: executing program 2 (id=237): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xffffffffffffffff, 0x3fd, 0x7ffd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 384.178610][ T5863] cgroup: Unknown subsys name 'net' [ 384.321763][ T5863] cgroup: Unknown subsys name 'cpuset' [ 384.330847][ T5863] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 385.834528][ T5863] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 388.168569][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.177009][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.188782][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.200042][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.207810][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.232650][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.240767][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.248914][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.258763][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.267517][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.275711][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.283973][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.292162][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.300005][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.318731][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.345151][ T5883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.369634][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.380033][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.388334][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.396234][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.733116][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 389.022035][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.029283][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.036957][ T5872] bridge_slave_0: entered allmulticast mode [ 389.044787][ T5872] bridge_slave_0: entered promiscuous mode [ 389.055560][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 389.077308][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.084718][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.092375][ T5872] bridge_slave_1: entered allmulticast mode [ 389.100889][ T5872] bridge_slave_1: entered promiscuous mode [ 389.129426][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 389.175731][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.213730][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.238647][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 389.286965][ T5872] team0: Port device team_slave_0 added [ 389.305788][ T5872] team0: Port device team_slave_1 added [ 389.414248][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.421624][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.447796][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.480082][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.487259][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.494957][ T5877] bridge_slave_0: entered allmulticast mode [ 389.502464][ T5877] bridge_slave_0: entered promiscuous mode [ 389.510649][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.517611][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.543853][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.559985][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.567124][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.575106][ T5876] bridge_slave_0: entered allmulticast mode [ 389.582627][ T5876] bridge_slave_0: entered promiscuous mode [ 389.590963][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.598036][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.605423][ T5876] bridge_slave_1: entered allmulticast mode [ 389.612657][ T5876] bridge_slave_1: entered promiscuous mode [ 389.619858][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.627070][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.634492][ T5877] bridge_slave_1: entered allmulticast mode [ 389.641805][ T5877] bridge_slave_1: entered promiscuous mode [ 389.734367][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.746746][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.759997][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.769355][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.776636][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.784308][ T5884] bridge_slave_0: entered allmulticast mode [ 389.792216][ T5884] bridge_slave_0: entered promiscuous mode [ 389.803562][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.838004][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.845309][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.853228][ T5884] bridge_slave_1: entered allmulticast mode [ 389.860328][ T5884] bridge_slave_1: entered promiscuous mode [ 389.929383][ T5872] hsr_slave_0: entered promiscuous mode [ 389.935800][ T5872] hsr_slave_1: entered promiscuous mode [ 389.945274][ T5877] team0: Port device team_slave_0 added [ 389.965179][ T5876] team0: Port device team_slave_0 added [ 389.974494][ T5876] team0: Port device team_slave_1 added [ 389.982132][ T5877] team0: Port device team_slave_1 added [ 389.992139][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.041922][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.104033][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.111526][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.138131][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.150181][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.157140][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.183879][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.213959][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.221827][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.247814][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.259481][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.266510][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.293235][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.304677][ T52] Bluetooth: hci0: command tx timeout [ 390.312657][ T5884] team0: Port device team_slave_0 added [ 390.341313][ T5884] team0: Port device team_slave_1 added [ 390.379187][ T52] Bluetooth: hci1: command tx timeout [ 390.379193][ T5148] Bluetooth: hci2: command tx timeout [ 390.424025][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.431144][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.457652][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.468684][ T52] Bluetooth: hci3: command tx timeout [ 390.509190][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.516161][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.542247][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.560440][ T5877] hsr_slave_0: entered promiscuous mode [ 390.566706][ T5877] hsr_slave_1: entered promiscuous mode [ 390.572956][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 390.578787][ T5877] Cannot create hsr debugfs directory [ 390.598026][ T5876] hsr_slave_0: entered promiscuous mode [ 390.604316][ T5876] hsr_slave_1: entered promiscuous mode [ 390.610639][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 390.616368][ T5876] Cannot create hsr debugfs directory [ 390.715466][ T5884] hsr_slave_0: entered promiscuous mode [ 390.721964][ T5884] hsr_slave_1: entered promiscuous mode [ 390.728154][ T5884] debugfs: 'hsr0' already exists in 'hsr' [ 390.734534][ T5884] Cannot create hsr debugfs directory [ 390.991753][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 391.027370][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 391.037585][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 391.058810][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 391.174993][ T5877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 391.195328][ T5877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 391.210839][ T5877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.223785][ T5877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.310585][ T5876] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 391.322245][ T5876] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 391.333512][ T5876] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 391.348140][ T5876] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 391.460257][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.467132][ T5884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 391.480068][ T5884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 391.490475][ T5884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 391.502165][ T5884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 391.581266][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.614858][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.622249][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.662529][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.669734][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.746776][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.772694][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.817064][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.831743][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.873106][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.880374][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.894418][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.921842][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.929057][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.940564][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.964057][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.971275][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.986251][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.993485][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.039926][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.047088][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.059626][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.066751][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.186829][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.380326][ T52] Bluetooth: hci0: command tx timeout [ 392.390098][ T5872] veth0_vlan: entered promiscuous mode [ 392.458790][ T52] Bluetooth: hci2: command tx timeout [ 392.460253][ T5148] Bluetooth: hci1: command tx timeout [ 392.477573][ T5872] veth1_vlan: entered promiscuous mode [ 392.540167][ T5148] Bluetooth: hci3: command tx timeout [ 392.555488][ T5872] veth0_macvtap: entered promiscuous mode [ 392.592544][ T5872] veth1_macvtap: entered promiscuous mode [ 392.633812][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.673229][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.688000][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.726370][ T5893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.736475][ T5893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.768542][ T5893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.787595][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.809539][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.844457][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.854965][ T5913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.870275][ T5913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.917177][ T5913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.926829][ T5913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.982351][ T5884] veth0_vlan: entered promiscuous mode [ 393.009090][ T5876] veth0_vlan: entered promiscuous mode [ 393.035620][ T5884] veth1_vlan: entered promiscuous mode [ 393.044084][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 393.047974][ T5876] veth1_vlan: entered promiscuous mode [ 393.139121][ T5877] veth0_vlan: entered promiscuous mode [ 393.167003][ T5877] veth1_vlan: entered promiscuous mode [ 393.192060][ T5876] veth0_macvtap: entered promiscuous mode [ 393.227706][ T5876] veth1_macvtap: entered promiscuous mode [ 393.247463][ T5884] veth0_macvtap: entered promiscuous mode [ 393.289837][ T5884] veth1_macvtap: entered promiscuous mode [ 393.314504][ T5877] veth0_macvtap: entered promiscuous mode [ 393.327777][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.353770][ T5877] veth1_macvtap: entered promiscuous mode [ 393.375619][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.424065][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.462805][ T5893] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.497003][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.514662][ T5893] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.529998][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.548049][ T3477] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.559353][ T3477] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.583653][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.606075][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.616934][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.666622][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.725308][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.734371][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.841355][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.859051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 393.907854][ T5893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.918917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 393.932278][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.943343][ T5893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.951209][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.020480][ T5893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.049559][ T5893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.325533][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.350973][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.433464][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.435752][ T5913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.449461][ T5913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.458788][ T5148] Bluetooth: hci0: command tx timeout [ 394.471810][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.539531][ T5148] Bluetooth: hci2: command tx timeout [ 394.544997][ T5148] Bluetooth: hci1: command tx timeout [ 394.561174][ T5893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.573736][ T5893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.618631][ T5148] Bluetooth: hci3: command tx timeout [ 394.883472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 394.990920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 395.187721][ T5981] FAULT_INJECTION: forcing a failure. [ 395.187721][ T5981] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 395.204165][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 395.204210][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 395.204229][ T5981] Call Trace: [ 395.204239][ T5981] [ 395.204250][ T5981] dump_stack_lvl+0x16c/0x1f0 [ 395.204293][ T5981] should_fail_ex+0x512/0x640 [ 395.204338][ T5981] should_fail_alloc_page+0xe7/0x130 [ 395.204375][ T5981] prepare_alloc_pages+0x3c2/0x610 [ 395.204417][ T5981] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 395.204447][ T5981] ? __lock_acquire+0x622/0x1c90 [ 395.204492][ T5981] ? __lock_acquire+0x622/0x1c90 [ 395.204533][ T5981] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 395.204578][ T5981] ? is_bpf_text_address+0x8a/0x1a0 [ 395.204615][ T5981] ? bpf_ksym_find+0x124/0x1c0 [ 395.204645][ T5981] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 395.204678][ T5981] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 395.204722][ T5981] ? policy_nodemask+0xea/0x4e0 [ 395.204760][ T5981] alloc_pages_mpol+0x1fb/0x550 [ 395.204798][ T5981] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 395.204845][ T5981] alloc_pages_noprof+0x131/0x390 [ 395.204879][ T5981] __pud_alloc+0x3b/0x6b0 [ 395.204917][ T5981] copy_page_range+0x4650/0x6930 [ 395.204971][ T5981] ? __lock_acquire+0x622/0x1c90 [ 395.205048][ T5981] ? __pfx_copy_page_range+0x10/0x10 [ 395.205092][ T5981] ? mas_store+0x860/0x1030 [ 395.205124][ T5981] ? __pfx___might_resched+0x10/0x10 [ 395.205155][ T5981] ? find_held_lock+0x2b/0x80 [ 395.205188][ T5981] ? __pfx_mas_store+0x10/0x10 [ 395.205220][ T5981] ? __vma_enter_locked+0x163/0x3f0 [ 395.205280][ T5981] dup_mmap+0xe80/0x2280 [ 395.205331][ T5981] ? __pfx_dup_mmap+0x10/0x10 [ 395.205392][ T5981] copy_process+0x3f0c/0x76a0 [ 395.205424][ T5981] ? __pfx___futex_wait+0x10/0x10 [ 395.205478][ T5981] ? __pfx_copy_process+0x10/0x10 [ 395.205509][ T5981] ? futex_private_hash_put+0x176/0x300 [ 395.205548][ T5981] ? futex_private_hash_put+0x18a/0x300 [ 395.205588][ T5981] kernel_clone+0xfc/0x930 [ 395.205623][ T5981] ? __pfx_kernel_clone+0x10/0x10 [ 395.205678][ T5981] __do_sys_clone+0xce/0x120 [ 395.205709][ T5981] ? __pfx___do_sys_clone+0x10/0x10 [ 395.205741][ T5981] ? __sys_sendmsg+0x18c/0x220 [ 395.205786][ T5981] ? xfd_validate_state+0x61/0x180 [ 395.205836][ T5981] do_syscall_64+0xcd/0xfa0 [ 395.205870][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.205898][ T5981] RIP: 0033:0x7ff7f378f6c9 [ 395.205921][ T5981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.205952][ T5981] RSP: 002b:00007ff7f4609fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 395.205984][ T5981] RAX: ffffffffffffffda RBX: 00007ff7f39e5fa0 RCX: 00007ff7f378f6c9 [ 395.206003][ T5981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 395.206019][ T5981] RBP: 00007ff7f3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 395.206036][ T5981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 395.206051][ T5981] R13: 00007ff7f39e6038 R14: 00007ff7f39e5fa0 R15: 00007fff417ebbc8 [ 395.206091][ T5981] [ 395.655475][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'. [ 395.666660][ T5987] ipvlan0: entered promiscuous mode [ 395.672527][ T5987] ipvlan0: entered allmulticast mode [ 395.677845][ T5987] veth0_vlan: entered allmulticast mode [ 395.688640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 395.767860][ T5988] ptrace attach of ""[5991] was attempted by "./syz-executor exec"[5988] [ 395.926396][ T5998] process 'syz.1.11' launched ':,' with NULL argv: empty string added [ 395.979594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 396.068158][ T5996] futex_wake_op: syz.3.10 tries to shift op by -2048; fix this program [ 396.226348][ T5999] nvme_fabrics: unknown parameter or missing value 'û' in ctrl creation request [ 396.520071][ T5996] zswap: compressor 5þÊêœhH÷¶šX^rRO–ת•²WCn#ТڪeBH±VÐÐóãúQ.VÒdl‚…Mð©_ not available [ 396.536043][ T5996] i2c i2c-0: new_device: Missing parameters [ 396.542786][ T5148] Bluetooth: hci0: command tx timeout [ 396.603418][ T6000] i2c i2c-0: new_device: Missing parameters [ 396.618915][ T5148] Bluetooth: hci1: command tx timeout [ 396.625984][ T52] Bluetooth: hci2: command tx timeout [ 396.698615][ T5148] Bluetooth: hci3: command tx timeout [ 396.726606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 396.968773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 396.977084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 397.299149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 397.362251][ T6023] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 397.953009][ T6031] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 398.123146][ T6031] Zero length message leads to an empty skb [ 399.098820][ T6045] futex_wake_op: syz.2.23 tries to shift op by -2048; fix this program [ 399.497267][ T6051] futex_wake_op: syz.3.24 tries to shift op by -2048; fix this program [ 399.743885][ T6035] kexec: Could not allocate control_code_buffer [ 399.878739][ T6045] zswap: compressor 5þÊêœhH÷¶šX^rRO–ת•²WCn#ТڪeBH±VÐÐóãúQ.VÒdl‚…Mð©_ not available [ 399.920283][ T6045] i2c i2c-0: new_device: Missing parameters [ 399.999783][ T6047] i2c i2c-0: new_device: Missing parameters [ 400.019083][ T6052] zswap: compressor 5þÊêœhH÷¶šX^rRO–ת•²WCn#ТڪeBH±VÐÐóãúQ.VÒdl‚…Mð©_ not available [ 400.338933][ T6051] i2c i2c-0: new_device: Missing parameters [ 400.425816][ T6052] i2c i2c-0: new_device: Missing parameters [ 401.046462][ T6072] sd 0:0:1:0: PR command failed: 1026 [ 401.069980][ T6072] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 401.124842][ T6072] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 402.010980][ T6090] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 402.134681][ T6091] i2c i2c-0: new_device: Invalid device name [ 402.604910][ T30] audit: type=1800 audit(1762569198.422:2): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34" name="lu_gp_id" dev="configfs" ino=8908 res=0 errno=0 [ 402.640996][ T6099] FAULT_INJECTION: forcing a failure. [ 402.640996][ T6099] name failslab, interval 1, probability 0, space 0, times 0 [ 402.669488][ T6099] CPU: 0 UID: 0 PID: 6099 Comm: syz.3.36 Not tainted syzkaller #0 PREEMPT(full) [ 402.669509][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 402.669518][ T6099] Call Trace: [ 402.669523][ T6099] [ 402.669529][ T6099] dump_stack_lvl+0x16c/0x1f0 [ 402.669554][ T6099] should_fail_ex+0x512/0x640 [ 402.669575][ T6099] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 402.669593][ T6099] should_failslab+0xc2/0x120 [ 402.669612][ T6099] kmem_cache_alloc_node_noprof+0x78/0x770 [ 402.669626][ T6099] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 402.669645][ T6099] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 402.669658][ T6099] mem_cgroup_css_alloc+0xa8f/0x1e80 [ 402.669678][ T6099] cgroup_apply_control_enable+0x4b0/0xbb0 [ 402.669707][ T6099] cgroup_mkdir+0x5e0/0x1310 [ 402.669723][ T6099] ? __pfx_cgroup_mkdir+0x10/0x10 [ 402.669736][ T6099] kernfs_iop_mkdir+0x111/0x190 [ 402.669756][ T6099] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 402.669771][ T6099] vfs_mkdir+0x593/0x8c0 [ 402.669794][ T6099] do_mkdirat+0x304/0x3e0 [ 402.669810][ T6099] ? __pfx_do_mkdirat+0x10/0x10 [ 402.669827][ T6099] ? getname_flags.part.0+0x1c5/0x550 [ 402.669849][ T6099] __x64_sys_mkdir+0xef/0x140 [ 402.669864][ T6099] do_syscall_64+0xcd/0xfa0 [ 402.669882][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.669895][ T6099] RIP: 0033:0x7ff7f378f6c9 [ 402.669907][ T6099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.669920][ T6099] RSP: 002b:00007ff7f460a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 402.669932][ T6099] RAX: ffffffffffffffda RBX: 00007ff7f39e5fa0 RCX: 00007ff7f378f6c9 [ 402.669941][ T6099] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 402.669949][ T6099] RBP: 00007ff7f3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 402.669966][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.669974][ T6099] R13: 00007ff7f39e6038 R14: 00007ff7f39e5fa0 R15: 00007fff417ebbc8 [ 402.669994][ T6099] [ 405.132993][ T6151] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 406.286764][ T6157] netlink: 342 bytes leftover after parsing attributes in process `syz.2.47'. [ 406.898978][ T6171] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 409.053408][ T6198] Console: switching to colour VGA+ 80x25 [ 409.165440][ T6198] Console: switching to colour frame buffer device 128x48 [ 409.439919][ T6201] netlink: 342 bytes leftover after parsing attributes in process `syz.1.59'. [ 409.441361][ T6203] syz.3.60 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 409.622051][ T6206] tipc: Can't bind to reserved service type 1 [ 409.934191][ T6214] FAULT_INJECTION: forcing a failure. [ 409.934191][ T6214] name failslab, interval 1, probability 0, space 0, times 0 [ 409.961651][ T6214] CPU: 1 UID: 0 PID: 6214 Comm: syz.2.63 Not tainted syzkaller #0 PREEMPT(full) [ 409.961682][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 409.961695][ T6214] Call Trace: [ 409.961703][ T6214] [ 409.961712][ T6214] dump_stack_lvl+0x16c/0x1f0 [ 409.961744][ T6214] should_fail_ex+0x512/0x640 [ 409.961779][ T6214] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 409.961809][ T6214] should_failslab+0xc2/0x120 [ 409.961841][ T6214] kmem_cache_alloc_noprof+0x75/0x6e0 [ 409.961867][ T6214] ? alloc_empty_file+0x55/0x1e0 [ 409.961906][ T6214] ? alloc_empty_file+0x55/0x1e0 [ 409.961937][ T6214] alloc_empty_file+0x55/0x1e0 [ 409.961972][ T6214] path_openat+0xda/0x2cb0 [ 409.962011][ T6214] ? __pfx_path_openat+0x10/0x10 [ 409.962040][ T6214] ? __lock_acquire+0xb8a/0x1c90 [ 409.962077][ T6214] do_filp_open+0x20b/0x470 [ 409.962105][ T6214] ? __pfx_do_filp_open+0x10/0x10 [ 409.962157][ T6214] ? alloc_fd+0x471/0x7d0 [ 409.962192][ T6214] do_sys_openat2+0x11b/0x1d0 [ 409.962226][ T6214] ? __pfx_do_sys_openat2+0x10/0x10 [ 409.962273][ T6214] ? __fget_files+0x20e/0x3c0 [ 409.962305][ T6214] __x64_sys_openat+0x174/0x210 [ 409.962341][ T6214] ? __pfx___x64_sys_openat+0x10/0x10 [ 409.962375][ T6214] ? ksys_write+0x1ac/0x250 [ 409.962413][ T6214] do_syscall_64+0xcd/0xfa0 [ 409.962446][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.962470][ T6214] RIP: 0033:0x7fa160d8f6c9 [ 409.962490][ T6214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.962512][ T6214] RSP: 002b:00007fa161b6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 409.962536][ T6214] RAX: ffffffffffffffda RBX: 00007fa160fe6090 RCX: 00007fa160d8f6c9 [ 409.962552][ T6214] RDX: 0000000000060742 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 409.962568][ T6214] RBP: 00007fa161b6c090 R08: 0000000000000000 R09: 0000000000000000 [ 409.962582][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.962597][ T6214] R13: 00007fa160fe6128 R14: 00007fa160fe6090 R15: 00007ffc8f940728 [ 409.962631][ T6214] [ 410.176658][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.431484][ T6218] sctp: [Deprecated]: syz.0.64 (pid 6218) Use of int in max_burst socket option deprecated. [ 411.431484][ T6218] Use struct sctp_assoc_value instead [ 411.667398][ T6237] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 412.104114][ T6248] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 415.213154][ T6308] FAULT_INJECTION: forcing a failure. [ 415.213154][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 415.226134][ T6308] CPU: 0 UID: 0 PID: 6308 Comm: syz.2.88 Not tainted syzkaller #0 PREEMPT(full) [ 415.226170][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 415.226187][ T6308] Call Trace: [ 415.226195][ T6308] [ 415.226205][ T6308] dump_stack_lvl+0x16c/0x1f0 [ 415.226243][ T6308] should_fail_ex+0x512/0x640 [ 415.226288][ T6308] should_failslab+0xc2/0x120 [ 415.226324][ T6308] kmem_cache_alloc_noprof+0x75/0x6e0 [ 415.226351][ T6308] ? pcpu_alloc_noprof+0x949/0x14c0 [ 415.226374][ T6308] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 415.226423][ T6308] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 415.226464][ T6308] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 415.226513][ T6308] idr_get_free+0x528/0xa30 [ 415.226553][ T6308] idr_alloc_u32+0x190/0x2f0 [ 415.226584][ T6308] ? __pfx_idr_alloc_u32+0x10/0x10 [ 415.226624][ T6308] ? lock_acquire+0x179/0x350 [ 415.226668][ T6308] idr_alloc_cyclic+0x10b/0x230 [ 415.226698][ T6308] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 415.226725][ T6308] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 415.226763][ T6308] ? lsm_blob_alloc+0x2b/0x90 [ 415.226809][ T6308] map_create+0x143e/0x27e0 [ 415.226866][ T6308] ? __pfx_map_create+0x10/0x10 [ 415.226906][ T6308] ? __might_fault+0xe3/0x190 [ 415.226932][ T6308] ? __might_fault+0xe3/0x190 [ 415.226956][ T6308] ? __might_fault+0x13b/0x190 [ 415.227003][ T6308] __sys_bpf+0x3d9d/0x4980 [ 415.227031][ T6308] ? futex_private_hash_put+0x18a/0x300 [ 415.227075][ T6308] ? __pfx___sys_bpf+0x10/0x10 [ 415.227102][ T6308] ? __pfx_futex_wait+0x10/0x10 [ 415.227163][ T6308] ? do_futex+0x122/0x350 [ 415.227217][ T6308] ? fput+0x9b/0xd0 [ 415.227253][ T6308] ? xfd_validate_state+0x61/0x180 [ 415.227288][ T6308] ? __pfx_ksys_write+0x10/0x10 [ 415.227328][ T6308] __x64_sys_bpf+0x78/0xc0 [ 415.227354][ T6308] ? lockdep_hardirqs_on+0x7c/0x110 [ 415.227384][ T6308] do_syscall_64+0xcd/0xfa0 [ 415.227418][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.227445][ T6308] RIP: 0033:0x7fa160d8f6c9 [ 415.227467][ T6308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.227491][ T6308] RSP: 002b:00007fa161b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.227516][ T6308] RAX: ffffffffffffffda RBX: 00007fa160fe5fa0 RCX: 00007fa160d8f6c9 [ 415.227534][ T6308] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 415.227548][ T6308] RBP: 00007fa160e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 415.227564][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.227579][ T6308] R13: 00007fa160fe6038 R14: 00007fa160fe5fa0 R15: 00007ffc8f940728 [ 415.227615][ T6308] [ 418.010696][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 418.661642][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 419.061121][ T6373] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 419.815442][ T6388] sctp: [Deprecated]: syz.3.106 (pid 6388) Use of int in max_burst socket option deprecated. [ 419.815442][ T6388] Use struct sctp_assoc_value instead [ 422.104227][ T6435] FAULT_INJECTION: forcing a failure. [ 422.104227][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 422.183433][ T6435] CPU: 0 UID: 0 PID: 6435 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(full) [ 422.183459][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 422.183467][ T6435] Call Trace: [ 422.183472][ T6435] [ 422.183479][ T6435] dump_stack_lvl+0x16c/0x1f0 [ 422.183500][ T6435] should_fail_ex+0x512/0x640 [ 422.183522][ T6435] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 422.183541][ T6435] should_failslab+0xc2/0x120 [ 422.183560][ T6435] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 422.183575][ T6435] ? __get_vm_area_node+0x101/0x330 [ 422.183597][ T6435] ? __get_vm_area_node+0x101/0x330 [ 422.183613][ T6435] __get_vm_area_node+0x101/0x330 [ 422.183634][ T6435] __vmalloc_node_range_noprof+0x271/0x1480 [ 422.183653][ T6435] ? kernel_clone+0xfc/0x930 [ 422.183675][ T6435] ? kernel_clone+0xfc/0x930 [ 422.183695][ T6435] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 422.183718][ T6435] ? rcu_is_watching+0x12/0xc0 [ 422.183734][ T6435] ? kernel_clone+0xfc/0x930 [ 422.183749][ T6435] __vmalloc_node_noprof+0xad/0xf0 [ 422.183767][ T6435] ? kernel_clone+0xfc/0x930 [ 422.183790][ T6435] copy_process+0x2c77/0x76a0 [ 422.183807][ T6435] ? __pfx___futex_wait+0x10/0x10 [ 422.183836][ T6435] ? __pfx_copy_process+0x10/0x10 [ 422.183853][ T6435] ? futex_private_hash_put+0x176/0x300 [ 422.183873][ T6435] ? futex_private_hash_put+0x18a/0x300 [ 422.183901][ T6435] kernel_clone+0xfc/0x930 [ 422.183919][ T6435] ? __pfx_kernel_clone+0x10/0x10 [ 422.183946][ T6435] __do_sys_clone+0xce/0x120 [ 422.183963][ T6435] ? __pfx___do_sys_clone+0x10/0x10 [ 422.183990][ T6435] ? xfd_validate_state+0x61/0x180 [ 422.184009][ T6435] ? __pfx_do_writev+0x10/0x10 [ 422.184028][ T6435] do_syscall_64+0xcd/0xfa0 [ 422.184045][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.184065][ T6435] RIP: 0033:0x7f84d378f6c9 [ 422.184078][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.184091][ T6435] RSP: 002b:00007f84d46adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 422.184105][ T6435] RAX: ffffffffffffffda RBX: 00007f84d39e6090 RCX: 00007f84d378f6c9 [ 422.184113][ T6435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.184121][ T6435] RBP: 00007f84d3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 422.184130][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.184138][ T6435] R13: 00007f84d39e6128 R14: 00007f84d39e6090 R15: 00007ffedfa23ee8 [ 422.184157][ T6435] [ 422.184326][ T6435] syz.0.113: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 422.506233][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(full) [ 422.506268][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 422.506283][ T6435] Call Trace: [ 422.506291][ T6435] [ 422.506300][ T6435] dump_stack_lvl+0x16c/0x1f0 [ 422.506342][ T6435] warn_alloc+0x248/0x3a0 [ 422.506369][ T6435] ? __pfx_warn_alloc+0x10/0x10 [ 422.506391][ T6435] ? rcu_is_watching+0x12/0xc0 [ 422.506417][ T6435] ? trace_kmalloc+0x2b/0xd0 [ 422.506449][ T6435] ? __get_vm_area_node+0x101/0x330 [ 422.506485][ T6435] ? __kasan_kmalloc+0x8a/0xb0 [ 422.506517][ T6435] ? __get_vm_area_node+0x208/0x330 [ 422.506556][ T6435] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 422.506604][ T6435] ? kernel_clone+0xfc/0x930 [ 422.506643][ T6435] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 422.506685][ T6435] ? rcu_is_watching+0x12/0xc0 [ 422.506710][ T6435] ? kernel_clone+0xfc/0x930 [ 422.506737][ T6435] __vmalloc_node_noprof+0xad/0xf0 [ 422.506773][ T6435] ? kernel_clone+0xfc/0x930 [ 422.506805][ T6435] copy_process+0x2c77/0x76a0 [ 422.506833][ T6435] ? __pfx___futex_wait+0x10/0x10 [ 422.506886][ T6435] ? __pfx_copy_process+0x10/0x10 [ 422.506916][ T6435] ? futex_private_hash_put+0x176/0x300 [ 422.506952][ T6435] ? futex_private_hash_put+0x18a/0x300 [ 422.506991][ T6435] kernel_clone+0xfc/0x930 [ 422.507025][ T6435] ? __pfx_kernel_clone+0x10/0x10 [ 422.507076][ T6435] __do_sys_clone+0xce/0x120 [ 422.507106][ T6435] ? __pfx___do_sys_clone+0x10/0x10 [ 422.507149][ T6435] ? xfd_validate_state+0x61/0x180 [ 422.507178][ T6435] ? __pfx_do_writev+0x10/0x10 [ 422.507197][ T6435] do_syscall_64+0xcd/0xfa0 [ 422.507216][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.507231][ T6435] RIP: 0033:0x7f84d378f6c9 [ 422.507242][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.507256][ T6435] RSP: 002b:00007f84d46adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 422.507270][ T6435] RAX: ffffffffffffffda RBX: 00007f84d39e6090 RCX: 00007f84d378f6c9 [ 422.507280][ T6435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.507288][ T6435] RBP: 00007f84d3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 422.507296][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.507304][ T6435] R13: 00007f84d39e6128 R14: 00007f84d39e6090 R15: 00007ffedfa23ee8 [ 422.507329][ T6435] [ 422.765211][ T6435] Mem-Info: [ 422.768471][ T6435] active_anon:21665 inactive_anon:0 isolated_anon:0 [ 422.768471][ T6435] active_file:16206 inactive_file:41172 isolated_file:0 [ 422.768471][ T6435] unevictable:768 dirty:780 writeback:896 [ 422.768471][ T6435] slab_reclaimable:10871 slab_unreclaimable:91160 [ 422.768471][ T6435] mapped:39547 shmem:16940 pagetables:1129 [ 422.768471][ T6435] sec_pagetables:0 bounce:0 [ 422.768471][ T6435] kernel_misc_reclaimable:0 [ 422.768471][ T6435] free:1312188 free_pcp:18341 free_cma:0 [ 422.814252][ T6435] Node 0 active_anon:86660kB inactive_anon:0kB active_file:64824kB inactive_file:164496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158132kB dirty:2612kB writeback:3456kB shmem:66224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11524kB pagetables:4364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 422.847086][ T6435] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 422.877536][ T6435] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.909990][ T6435] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 422.916556][ T6435] Node 0 DMA32 free:1345232kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:87160kB inactive_anon:0kB active_file:64824kB inactive_file:164496kB unevictable:1536kB writepending:5872kB zspages:0kB present:3129332kB managed:2545088kB mlocked:0kB bounce:0kB free_pcp:48588kB local_pcp:19420kB free_cma:0kB [ 422.950484][ T6435] lowmem_reserve[]: 0 0 1 1 1 [ 422.955285][ T6435] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 422.985134][ T6435] lowmem_reserve[]: 0 0 0 0 0 [ 422.989859][ T6435] Node 1 Normal free:3888044kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23896kB local_pcp:14744kB free_cma:0kB [ 423.029626][ T6435] lowmem_reserve[]: 0 0 0 0 0 [ 423.034467][ T6435] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 423.161097][ T6435] Node 0 DMA32: 1*4kB (E) 1*8kB (M) 15*16kB (UM) 2*32kB (UE) 1*64kB (E) 3*128kB (UE) 1*256kB (E) 15*512kB (UM) 15*1024kB (UM) 7*2048kB (UME) 318*4096kB (UM) = 1340924kB [ 423.202284][ T6435] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 423.231121][ T6435] Node 1 Normal: 162*4kB (UME) 46*8kB (UE) 3*16kB (UM) 50*32kB (UME) 23*64kB (UME) 7*128kB (UME) 8*256kB (UM) 3*512kB (UE) 3*1024kB (UME) 3*2048kB (UME) 945*4096kB (M) = 3888552kB [ 423.285349][ T6435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.358440][ T6435] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=2 hugepages_size=2048kB [ 423.408666][ T6435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.466199][ T6435] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.518426][ T6435] 75587 total pagecache pages [ 423.524528][ T6435] 2 pages in swap cache [ 423.535129][ T6435] Free swap = 124988kB [ 423.547180][ T6435] Total swap = 124996kB [ 423.558593][ T6435] 2097051 pages RAM [ 423.570716][ T6435] 0 pages HighMem/MovableOnly [ 423.588391][ T6435] 428689 pages reserved [ 423.592733][ T6435] 0 pages cma reserved [ 424.383653][ T6464] futex_wake_op: syz.2.115 tries to shift op by -2048; fix this program [ 424.426173][ T6467] FAULT_INJECTION: forcing a failure. [ 424.426173][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 424.490008][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.1.116 Not tainted syzkaller #0 PREEMPT(full) [ 424.490032][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 424.490041][ T6467] Call Trace: [ 424.490046][ T6467] [ 424.490053][ T6467] dump_stack_lvl+0x16c/0x1f0 [ 424.490075][ T6467] should_fail_ex+0x512/0x640 [ 424.490095][ T6467] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 424.490112][ T6467] should_failslab+0xc2/0x120 [ 424.490132][ T6467] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 424.490145][ T6467] ? __lock_acquire+0xb8a/0x1c90 [ 424.490167][ T6467] ? __d_alloc+0x32/0xae0 [ 424.490185][ T6467] ? __d_alloc+0x32/0xae0 [ 424.490199][ T6467] __d_alloc+0x32/0xae0 [ 424.490216][ T6467] d_alloc_pseudo+0x1c/0xc0 [ 424.490234][ T6467] alloc_file_pseudo+0xcf/0x230 [ 424.490255][ T6467] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 424.490275][ T6467] ? _raw_spin_unlock+0x28/0x50 [ 424.490288][ T6467] ? alloc_fd+0x471/0x7d0 [ 424.490302][ T6467] __anon_inode_getfile+0xe8/0x280 [ 424.490321][ T6467] anon_inode_getfd+0x52/0xb0 [ 424.490338][ T6467] map_create+0x1605/0x27e0 [ 424.490365][ T6467] ? __pfx_map_create+0x10/0x10 [ 424.490384][ T6467] ? __might_fault+0xe3/0x190 [ 424.490397][ T6467] ? __might_fault+0xe3/0x190 [ 424.490409][ T6467] ? __might_fault+0x13b/0x190 [ 424.490428][ T6467] __sys_bpf+0x3d9d/0x4980 [ 424.490441][ T6467] ? futex_private_hash_put+0x18a/0x300 [ 424.490460][ T6467] ? __pfx___sys_bpf+0x10/0x10 [ 424.490475][ T6467] ? __pfx_futex_wake+0x10/0x10 [ 424.490503][ T6467] ? do_futex+0x122/0x350 [ 424.490529][ T6467] ? fput+0x9b/0xd0 [ 424.490547][ T6467] ? xfd_validate_state+0x61/0x180 [ 424.490565][ T6467] ? __pfx_ksys_write+0x10/0x10 [ 424.490582][ T6467] __x64_sys_bpf+0x78/0xc0 [ 424.490596][ T6467] ? lockdep_hardirqs_on+0x7c/0x110 [ 424.490611][ T6467] do_syscall_64+0xcd/0xfa0 [ 424.490628][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.490643][ T6467] RIP: 0033:0x7fdd7258f6c9 [ 424.490655][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.490668][ T6467] RSP: 002b:00007fdd734ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.490681][ T6467] RAX: ffffffffffffffda RBX: 00007fdd727e5fa0 RCX: 00007fdd7258f6c9 [ 424.490690][ T6467] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 424.490698][ T6467] RBP: 00007fdd72611f91 R08: 0000000000000000 R09: 0000000000000000 [ 424.490706][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.490715][ T6467] R13: 00007fdd727e6038 R14: 00007fdd727e5fa0 R15: 00007ffeb9029218 [ 424.490733][ T6467] [ 424.975622][ T6473] zswap: compressor 5þÊêœhH÷¶šX^rRO–ת•²WCn#ТڪeBH±VÐÐóãúQ.VÒdl‚…Mð©_ not available [ 425.619205][ T6464] i2c i2c-0: new_device: Missing parameters [ 425.712657][ T6469] i2c i2c-0: new_device: Missing parameters [ 429.998663][ T6553] random: crng reseeded on system resumption [ 430.564540][ T6560] FAULT_INJECTION: forcing a failure. [ 430.564540][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 430.577338][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT(full) [ 430.577374][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 430.577389][ T6560] Call Trace: [ 430.577398][ T6560] [ 430.577408][ T6560] dump_stack_lvl+0x16c/0x1f0 [ 430.577444][ T6560] should_fail_ex+0x512/0x640 [ 430.577489][ T6560] should_failslab+0xc2/0x120 [ 430.577524][ T6560] kmem_cache_alloc_noprof+0x75/0x6e0 [ 430.577550][ T6560] ? pcpu_alloc_noprof+0x949/0x14c0 [ 430.577575][ T6560] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 430.577623][ T6560] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 430.577663][ T6560] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 430.577710][ T6560] idr_get_free+0x528/0xa30 [ 430.577750][ T6560] idr_alloc_u32+0x190/0x2f0 [ 430.577782][ T6560] ? __pfx_idr_alloc_u32+0x10/0x10 [ 430.577813][ T6560] ? lock_acquire+0x179/0x350 [ 430.577855][ T6560] idr_alloc_cyclic+0x10b/0x230 [ 430.577885][ T6560] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 430.577912][ T6560] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 430.577951][ T6560] ? lsm_blob_alloc+0x2b/0x90 [ 430.577990][ T6560] map_create+0x143e/0x27e0 [ 430.578043][ T6560] ? __pfx_map_create+0x10/0x10 [ 430.578080][ T6560] ? __might_fault+0xe3/0x190 [ 430.578105][ T6560] ? __might_fault+0xe3/0x190 [ 430.578129][ T6560] ? __might_fault+0x13b/0x190 [ 430.578169][ T6560] __sys_bpf+0x3d9d/0x4980 [ 430.578194][ T6560] ? futex_private_hash_put+0x18a/0x300 [ 430.578231][ T6560] ? __pfx___sys_bpf+0x10/0x10 [ 430.578261][ T6560] ? __pfx_futex_wait+0x10/0x10 [ 430.578330][ T6560] ? do_futex+0x122/0x350 [ 430.578384][ T6560] ? fput+0x9b/0xd0 [ 430.578421][ T6560] ? xfd_validate_state+0x61/0x180 [ 430.578456][ T6560] ? __pfx_ksys_write+0x10/0x10 [ 430.578491][ T6560] __x64_sys_bpf+0x78/0xc0 [ 430.578518][ T6560] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.578547][ T6560] do_syscall_64+0xcd/0xfa0 [ 430.578579][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.578605][ T6560] RIP: 0033:0x7ff7f378f6c9 [ 430.578626][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.578651][ T6560] RSP: 002b:00007ff7f460a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.578675][ T6560] RAX: ffffffffffffffda RBX: 00007ff7f39e5fa0 RCX: 00007ff7f378f6c9 [ 430.578692][ T6560] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 430.578708][ T6560] RBP: 00007ff7f3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 430.578723][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.578738][ T6560] R13: 00007ff7f39e6038 R14: 00007ff7f39e5fa0 R15: 00007fff417ebbc8 [ 430.578776][ T6560] [ 430.934415][ T6545] Process accounting resumed [ 431.321940][ T6566] FAULT_INJECTION: forcing a failure. [ 431.321940][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 431.334738][ T6566] CPU: 0 UID: 0 PID: 6566 Comm: syz.2.144 Not tainted syzkaller #0 PREEMPT(full) [ 431.334758][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.334766][ T6566] Call Trace: [ 431.334772][ T6566] [ 431.334778][ T6566] dump_stack_lvl+0x16c/0x1f0 [ 431.334800][ T6566] should_fail_ex+0x512/0x640 [ 431.334821][ T6566] ? __kmalloc_cache_noprof+0x5f/0x780 [ 431.334845][ T6566] should_failslab+0xc2/0x120 [ 431.334864][ T6566] __kmalloc_cache_noprof+0x72/0x780 [ 431.334886][ T6566] ? mem_cgroup_css_online+0x5c/0x640 [ 431.334902][ T6566] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 431.334914][ T6566] ? mem_cgroup_css_online+0x5c/0x640 [ 431.334926][ T6566] mem_cgroup_css_online+0x5c/0x640 [ 431.334939][ T6566] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 431.334952][ T6566] online_css+0xb2/0x350 [ 431.334971][ T6566] cgroup_apply_control_enable+0x702/0xbb0 [ 431.334999][ T6566] cgroup_mkdir+0x5e0/0x1310 [ 431.335015][ T6566] ? __pfx_cgroup_mkdir+0x10/0x10 [ 431.335029][ T6566] kernfs_iop_mkdir+0x111/0x190 [ 431.335047][ T6566] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 431.335062][ T6566] vfs_mkdir+0x593/0x8c0 [ 431.335085][ T6566] do_mkdirat+0x304/0x3e0 [ 431.335102][ T6566] ? __pfx_do_mkdirat+0x10/0x10 [ 431.335119][ T6566] ? getname_flags.part.0+0x1c5/0x550 [ 431.335140][ T6566] __x64_sys_mkdir+0xef/0x140 [ 431.335155][ T6566] do_syscall_64+0xcd/0xfa0 [ 431.335172][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.335187][ T6566] RIP: 0033:0x7fa160d8f6c9 [ 431.335198][ T6566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.335211][ T6566] RSP: 002b:00007fa161b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 431.335225][ T6566] RAX: ffffffffffffffda RBX: 00007fa160fe5fa0 RCX: 00007fa160d8f6c9 [ 431.335235][ T6566] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 431.335243][ T6566] RBP: 00007fa160e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.335252][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.335259][ T6566] R13: 00007fa160fe6038 R14: 00007fa160fe5fa0 R15: 00007ffc8f940728 [ 431.335278][ T6566] [ 432.152043][ T6573] futex_wake_op: syz.2.145 tries to shift op by -2048; fix this program [ 432.969703][ T6573] zswap: compressor 5þÊêœhH÷¶šX^rRO–ת•²WCn#ТڪeBH±VÐÐóãúQ.VÒdl‚…Mð©_ not available [ 433.006815][ T6573] i2c i2c-0: new_device: Missing parameters [ 433.051931][ T6588] FAULT_INJECTION: forcing a failure. [ 433.051931][ T6588] name failslab, interval 1, probability 0, space 0, times 0 [ 433.051996][ T6588] CPU: 1 UID: 0 PID: 6588 Comm: syz.3.149 Not tainted syzkaller #0 PREEMPT(full) [ 433.052026][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.052047][ T6588] Call Trace: [ 433.052055][ T6588] [ 433.052065][ T6588] dump_stack_lvl+0x16c/0x1f0 [ 433.052099][ T6588] should_fail_ex+0x512/0x640 [ 433.052134][ T6588] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 433.052171][ T6588] should_failslab+0xc2/0x120 [ 433.052204][ T6588] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 433.052236][ T6588] ? nvmet_root_discovery_nqn_store+0x5f/0x200 [ 433.052279][ T6588] ? kstrndup+0x6d/0x160 [ 433.052299][ T6588] kstrndup+0x6d/0x160 [ 433.052326][ T6588] nvmet_root_discovery_nqn_store+0x5f/0x200 [ 433.052364][ T6588] configfs_write_iter+0x306/0x4e0 [ 433.052403][ T6588] vfs_write+0x7d3/0x11d0 [ 433.052428][ T6588] ? __pfx_configfs_write_iter+0x10/0x10 [ 433.052460][ T6588] ? __pfx___mutex_lock+0x10/0x10 [ 433.052487][ T6588] ? __pfx_vfs_write+0x10/0x10 [ 433.052533][ T6588] ksys_write+0x12a/0x250 [ 433.052556][ T6588] ? __pfx_ksys_write+0x10/0x10 [ 433.052589][ T6588] do_syscall_64+0xcd/0xfa0 [ 433.052617][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.052638][ T6588] RIP: 0033:0x7ff7f378f6c9 [ 433.052656][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.052676][ T6588] RSP: 002b:00007ff7f460a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.052696][ T6588] RAX: ffffffffffffffda RBX: 00007ff7f39e5fa0 RCX: 00007ff7f378f6c9 [ 433.052711][ T6588] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 433.052724][ T6588] RBP: 00007ff7f460a090 R08: 0000000000000000 R09: 0000000000000000 [ 433.052736][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.052749][ T6588] R13: 00007ff7f39e6038 R14: 00007ff7f39e5fa0 R15: 00007fff417ebbc8 [ 433.052781][ T6588] [ 433.101851][ T6578] i2c i2c-0: new_device: Missing parameters [ 433.890606][ T6576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 433.890832][ T6576] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 433.936562][ T6576] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 433.947717][ T6576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 433.947938][ T6576] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 433.952656][ T6576] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 433.957360][ T6576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 433.957444][ T6576] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 433.958223][ T6576] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 433.960280][ T6576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 433.960358][ T6576] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 433.961037][ T6576] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 434.378594][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 434.479600][ T6595] tty tty1: ldisc open failed (-12), clearing slot 0 [ 434.624141][ T6604] FAULT_INJECTION: forcing a failure. [ 434.624141][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 434.664027][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.0.153 Not tainted syzkaller #0 PREEMPT(full) [ 434.664050][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.664058][ T6604] Call Trace: [ 434.664063][ T6604] [ 434.664069][ T6604] dump_stack_lvl+0x16c/0x1f0 [ 434.664090][ T6604] should_fail_ex+0x512/0x640 [ 434.664120][ T6604] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 434.664137][ T6604] should_failslab+0xc2/0x120 [ 434.664157][ T6604] kmem_cache_alloc_noprof+0x75/0x6e0 [ 434.664172][ T6604] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 434.664185][ T6604] ? acpi_ps_alloc_op+0x29d/0x360 [ 434.664201][ T6604] ? acpi_ps_alloc_op+0x29d/0x360 [ 434.664212][ T6604] acpi_ps_alloc_op+0x29d/0x360 [ 434.664223][ T6604] ? acpi_ut_status_exit+0x103/0x1c0 [ 434.664237][ T6604] acpi_ps_create_op+0x4bd/0xd30 [ 434.664258][ T6604] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 434.664272][ T6604] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 434.664293][ T6604] ? acpi_ut_status_exit+0x103/0x1c0 [ 434.664310][ T6604] acpi_ps_parse_loop+0xf06/0x2470 [ 434.664336][ T6604] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 434.664354][ T6604] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 434.664367][ T6604] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 434.664379][ T6604] ? acpi_ut_create_thread_state+0x6d/0x170 [ 434.664405][ T6604] acpi_ps_parse_aml+0x817/0x1170 [ 434.664429][ T6604] acpi_ps_execute_method+0x5c4/0xe90 [ 434.664447][ T6604] acpi_ns_evaluate+0x98c/0x16d0 [ 434.664466][ T6604] acpi_evaluate_object+0x4ca/0xdf0 [ 434.664489][ T6604] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 434.664508][ T6604] ? __mutex_trylock_common+0xe9/0x250 [ 434.664531][ T6604] acpi_evaluate_integer+0xdd/0x200 [ 434.664547][ T6604] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 434.664572][ T6604] ? __pfx_status_show+0x10/0x10 [ 434.664589][ T6604] status_show+0xa0/0x120 [ 434.664607][ T6604] ? __pfx_status_show+0x10/0x10 [ 434.664630][ T6604] dev_attr_show+0x56/0xe0 [ 434.664651][ T6604] ? __pfx_dev_attr_show+0x10/0x10 [ 434.664668][ T6604] sysfs_kf_seq_show+0x216/0x3e0 [ 434.664692][ T6604] seq_read_iter+0x50e/0x12d0 [ 434.664722][ T6604] kernfs_fop_read_iter+0x46c/0x610 [ 434.664735][ T6604] ? rw_verify_area+0xcf/0x6c0 [ 434.664750][ T6604] vfs_read+0x8bf/0xcf0 [ 434.664767][ T6604] ? __pfx___mutex_lock+0x10/0x10 [ 434.664785][ T6604] ? __pfx_vfs_read+0x10/0x10 [ 434.664812][ T6604] ksys_read+0x12a/0x250 [ 434.664826][ T6604] ? __pfx_ksys_read+0x10/0x10 [ 434.664846][ T6604] do_syscall_64+0xcd/0xfa0 [ 434.664865][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.664880][ T6604] RIP: 0033:0x7f84d378f6c9 [ 434.664891][ T6604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.664904][ T6604] RSP: 002b:00007f84d46cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 434.664918][ T6604] RAX: ffffffffffffffda RBX: 00007f84d39e5fa0 RCX: 00007f84d378f6c9 [ 434.664927][ T6604] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 434.664936][ T6604] RBP: 00007f84d3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.664945][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.664953][ T6604] R13: 00007f84d39e6038 R14: 00007f84d39e5fa0 R15: 00007ffedfa23ee8 [ 434.664973][ T6604] [ 434.665016][ T6604] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 435.979394][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 435.979421][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 435.985449][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 437.175636][ T6619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 437.197487][ T6619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.226844][ T6619] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 437.233253][ T6619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.335300][ T6599] Process accounting resumed [ 437.501750][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 437.611342][ T6647] FAULT_INJECTION: forcing a failure. [ 437.611342][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 437.624054][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.2.166 Not tainted syzkaller #0 PREEMPT(full) [ 437.624089][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.624105][ T6647] Call Trace: [ 437.624114][ T6647] [ 437.624124][ T6647] dump_stack_lvl+0x16c/0x1f0 [ 437.624161][ T6647] should_fail_ex+0x512/0x640 [ 437.624199][ T6647] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 437.624234][ T6647] should_failslab+0xc2/0x120 [ 437.624269][ T6647] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 437.624299][ T6647] ? trace_kmem_cache_alloc+0x28/0xc0 [ 437.624332][ T6647] ? mem_cgroup_css_alloc+0xac2/0x1e80 [ 437.624358][ T6647] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 437.624392][ T6647] ? mem_cgroup_css_alloc+0xac2/0x1e80 [ 437.624418][ T6647] mem_cgroup_css_alloc+0xac2/0x1e80 [ 437.624458][ T6647] cgroup_apply_control_enable+0x4b0/0xbb0 [ 437.624507][ T6647] cgroup_mkdir+0x5e0/0x1310 [ 437.624534][ T6647] ? __pfx_cgroup_mkdir+0x10/0x10 [ 437.624560][ T6647] kernfs_iop_mkdir+0x111/0x190 [ 437.624606][ T6647] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 437.624637][ T6647] vfs_mkdir+0x593/0x8c0 [ 437.624682][ T6647] do_mkdirat+0x304/0x3e0 [ 437.624715][ T6647] ? __pfx_do_mkdirat+0x10/0x10 [ 437.624748][ T6647] ? getname_flags.part.0+0x1c5/0x550 [ 437.624791][ T6647] __x64_sys_mkdir+0xef/0x140 [ 437.624821][ T6647] do_syscall_64+0xcd/0xfa0 [ 437.624853][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.624879][ T6647] RIP: 0033:0x7fa160d8f6c9 [ 437.624901][ T6647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.624925][ T6647] RSP: 002b:00007fa161b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 437.624950][ T6647] RAX: ffffffffffffffda RBX: 00007fa160fe5fa0 RCX: 00007fa160d8f6c9 [ 437.624967][ T6647] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 437.624984][ T6647] RBP: 00007fa160e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 437.624999][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.625014][ T6647] R13: 00007fa160fe6038 R14: 00007fa160fe5fa0 R15: 00007ffc8f940728 [ 437.625054][ T6647] [ 438.114562][ T6654] ptrace attach of ""[6655] was attempted by "./syz-executor exec"[6654] [ 438.806075][ T6662] zswap: compressor 000 not available [ 439.258462][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 439.268454][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 439.274519][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 439.578510][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 440.153783][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.162628][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.092228][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 441.342291][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 441.342300][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 441.342345][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 441.893118][ T6710] FAULT_INJECTION: forcing a failure. [ 441.893118][ T6710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 441.907334][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.3.183 Not tainted syzkaller #0 PREEMPT(full) [ 441.907372][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.907387][ T6710] Call Trace: [ 441.907395][ T6710] [ 441.907405][ T6710] dump_stack_lvl+0x16c/0x1f0 [ 441.907442][ T6710] should_fail_ex+0x512/0x640 [ 441.907497][ T6710] should_fail_alloc_page+0xe7/0x130 [ 441.907539][ T6710] prepare_alloc_pages+0x3c2/0x610 [ 441.907573][ T6710] ? is_bpf_text_address+0x94/0x1a0 [ 441.907615][ T6710] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 441.907644][ T6710] ? arch_stack_walk+0xa6/0x100 [ 441.907684][ T6710] ? stack_trace_save+0x8e/0xc0 [ 441.907713][ T6710] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 441.907740][ T6710] ? rcu_is_watching+0x12/0xc0 [ 441.907778][ T6710] ? kasan_save_track+0x14/0x30 [ 441.907805][ T6710] ? __kasan_slab_alloc+0x89/0x90 [ 441.907837][ T6710] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 441.907862][ T6710] ? __pmd_alloc+0xbf/0x8b0 [ 441.907891][ T6710] ? __handle_mm_fault+0xada/0x2aa0 [ 441.907925][ T6710] ? handle_mm_fault+0x589/0xd10 [ 441.907965][ T6710] ? __get_user_pages+0x54e/0x3530 [ 441.907999][ T6710] ? populate_vma_page_range+0x267/0x3f0 [ 441.908036][ T6710] ? __mm_populate+0x1d8/0x380 [ 441.908072][ T6710] ? vm_mmap_pgoff+0x37f/0x470 [ 441.908102][ T6710] ? ksys_mmap_pgoff+0x7d/0x5c0 [ 441.908132][ T6710] ? __x64_sys_mmap+0x125/0x190 [ 441.908168][ T6710] ? do_syscall_64+0xcd/0xfa0 [ 441.908196][ T6710] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 441.908239][ T6710] ? policy_nodemask+0xea/0x4e0 [ 441.908285][ T6710] alloc_pages_mpol+0x1fb/0x550 [ 441.908320][ T6710] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 441.908360][ T6710] alloc_pages_noprof+0x131/0x390 [ 441.908395][ T6710] pte_alloc_one+0x1e/0x350 [ 441.908426][ T6710] __pte_alloc+0x6d/0x380 [ 441.908469][ T6710] ? __pfx___pte_alloc+0x10/0x10 [ 441.908505][ T6710] ? do_raw_spin_lock+0x12c/0x2b0 [ 441.908550][ T6710] do_pte_missing+0x282c/0x3ba0 [ 441.908593][ T6710] ? do_raw_spin_unlock+0x172/0x230 [ 441.908636][ T6710] ? _raw_spin_unlock+0x28/0x50 [ 441.908664][ T6710] ? __pmd_alloc+0x64f/0x8b0 [ 441.908703][ T6710] __handle_mm_fault+0x1556/0x2aa0 [ 441.908757][ T6710] ? __pfx___handle_mm_fault+0x10/0x10 [ 441.908831][ T6710] handle_mm_fault+0x589/0xd10 [ 441.908878][ T6710] __get_user_pages+0x54e/0x3530 [ 441.908928][ T6710] ? __pfx___get_user_pages+0x10/0x10 [ 441.908973][ T6710] populate_vma_page_range+0x267/0x3f0 [ 441.909010][ T6710] ? __pfx_populate_vma_page_range+0x10/0x10 [ 441.909044][ T6710] ? __pfx_find_vma_intersection+0x10/0x10 [ 441.909079][ T6710] ? do_mmap+0x69c/0x1210 [ 441.909115][ T6710] __mm_populate+0x1d8/0x380 [ 441.909152][ T6710] ? __pfx___mm_populate+0x10/0x10 [ 441.909190][ T6710] ? up_write+0x1b2/0x520 [ 441.909230][ T6710] vm_mmap_pgoff+0x37f/0x470 [ 441.909270][ T6710] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 441.909313][ T6710] ? __x64_sys_futex+0x1e0/0x4c0 [ 441.909348][ T6710] ? __x64_sys_futex+0x1e9/0x4c0 [ 441.909390][ T6710] ksys_mmap_pgoff+0x7d/0x5c0 [ 441.909423][ T6710] ? xfd_validate_state+0x61/0x180 [ 441.909471][ T6710] ? __pfx_ksys_write+0x10/0x10 [ 441.909508][ T6710] __x64_sys_mmap+0x125/0x190 [ 441.909552][ T6710] do_syscall_64+0xcd/0xfa0 [ 441.909588][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.909617][ T6710] RIP: 0033:0x7ff7f378f6c9 [ 441.909640][ T6710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.909665][ T6710] RSP: 002b:00007ff7f460a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 441.909691][ T6710] RAX: ffffffffffffffda RBX: 00007ff7f39e5fa0 RCX: 00007ff7f378f6c9 [ 441.909709][ T6710] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 441.909725][ T6710] RBP: 00007ff7f3811f91 R08: 0000000000000002 R09: 0000000000008000 [ 441.909742][ T6710] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 441.909758][ T6710] R13: 00007ff7f39e6038 R14: 00007ff7f39e5fa0 R15: 00007fff417ebbc8 [ 441.909797][ T6710] [ 442.815663][ T6720] zswap: compressor 000 not available [ 442.850993][ T6724] netlink: 4919 bytes leftover after parsing attributes in process `syz.3.186'. [ 443.033241][ T6720] netlink: 342 bytes leftover after parsing attributes in process `syz.3.186'. [ 443.077513][ T6733] FAULT_INJECTION: forcing a failure. [ 443.077513][ T6733] name failslab, interval 1, probability 0, space 0, times 0 [ 443.112251][ T6733] CPU: 1 UID: 0 PID: 6733 Comm: syz.2.187 Not tainted syzkaller #0 PREEMPT(full) [ 443.112285][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.112299][ T6733] Call Trace: [ 443.112307][ T6733] [ 443.112316][ T6733] dump_stack_lvl+0x16c/0x1f0 [ 443.112351][ T6733] should_fail_ex+0x512/0x640 [ 443.112393][ T6733] should_failslab+0xc2/0x120 [ 443.112426][ T6733] __kmalloc_cache_noprof+0x72/0x780 [ 443.112481][ T6733] ? __task_pid_nr_ns+0x1f5/0x500 [ 443.112515][ T6733] ? proc_thread_self_get_link+0x1c6/0x240 [ 443.112554][ T6733] ? proc_thread_self_get_link+0x1c6/0x240 [ 443.112585][ T6733] proc_thread_self_get_link+0x1c6/0x240 [ 443.112618][ T6733] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 443.112650][ T6733] step_into+0x189e/0x21a0 [ 443.112682][ T6733] ? __pfx_step_into+0x10/0x10 [ 443.112712][ T6733] ? lookup_fast+0x156/0x610 [ 443.112741][ T6733] walk_component+0xfc/0x5b0 [ 443.112768][ T6733] link_path_walk+0x627/0xe20 [ 443.112805][ T6733] path_openat+0x1b0/0x2cb0 [ 443.112845][ T6733] ? __pfx_path_openat+0x10/0x10 [ 443.112875][ T6733] ? __lock_acquire+0xb8a/0x1c90 [ 443.112916][ T6733] do_filp_open+0x20b/0x470 [ 443.112942][ T6733] ? __pfx_do_filp_open+0x10/0x10 [ 443.112994][ T6733] ? alloc_fd+0x471/0x7d0 [ 443.113034][ T6733] do_sys_openat2+0x11b/0x1d0 [ 443.113067][ T6733] ? __pfx_do_sys_openat2+0x10/0x10 [ 443.113116][ T6733] __x64_sys_openat+0x174/0x210 [ 443.113150][ T6733] ? __pfx___x64_sys_openat+0x10/0x10 [ 443.113201][ T6733] do_syscall_64+0xcd/0xfa0 [ 443.113233][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.113258][ T6733] RIP: 0033:0x7fa160d8df10 [ 443.113277][ T6733] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 443.113300][ T6733] RSP: 002b:00007fa161b8cfe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 443.113324][ T6733] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa160d8df10 [ 443.113339][ T6733] RDX: 0000000000000002 RSI: 00007fa160e1224b RDI: 00000000ffffff9c [ 443.113355][ T6733] RBP: 00007fa160e1224b R08: 0000000000000000 R09: 00007fa161b8e000 [ 443.113370][ T6733] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 443.113384][ T6733] R13: 00007fa160fe6038 R14: 00007fa160fe5fa0 R15: 00007ffc8f940728 [ 443.113421][ T6733] [ 443.115858][ T6733] FAULT_INJECTION: forcing a failure. [ 443.115858][ T6733] name failslab, interval 1, probability 0, space 0, times 0 [ 443.370414][ T6733] CPU: 1 UID: 0 PID: 6733 Comm: syz.2.187 Not tainted syzkaller #0 PREEMPT(full) [ 443.370446][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.370460][ T6733] Call Trace: [ 443.370470][ T6733] [ 443.370480][ T6733] dump_stack_lvl+0x16c/0x1f0 [ 443.370514][ T6733] should_fail_ex+0x512/0x640 [ 443.370551][ T6733] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 443.370581][ T6733] should_failslab+0xc2/0x120 [ 443.370613][ T6733] kmem_cache_alloc_noprof+0x75/0x6e0 [ 443.370639][ T6733] ? mas_preallocate+0xe6a/0x11f0 [ 443.370677][ T6733] ? mas_preallocate+0xe6a/0x11f0 [ 443.370705][ T6733] mas_preallocate+0xe6a/0x11f0 [ 443.370742][ T6733] ? __pfx_mas_preallocate+0x10/0x10 [ 443.370781][ T6733] ? vm_area_alloc+0x1f/0x160 [ 443.370821][ T6733] ? lockdep_init_map_type+0x5c/0x280 [ 443.370860][ T6733] __mmap_region+0x117f/0x27a0 [ 443.370891][ T6733] ? __pfx___mmap_region+0x10/0x10 [ 443.370925][ T6733] ? find_held_lock+0x2b/0x80 [ 443.370963][ T6733] ? kernel_text_address+0x8d/0x100 [ 443.371062][ T6733] ? trace_cap_capable+0x18d/0x200 [ 443.371122][ T6733] mmap_region+0x1ab/0x3f0 [ 443.371148][ T6733] ? __get_unmapped_area+0x267/0x440 [ 443.371184][ T6733] do_mmap+0xa3e/0x1210 [ 443.371220][ T6733] ? __pfx_do_mmap+0x10/0x10 [ 443.371252][ T6733] ? __pfx_down_write_killable+0x10/0x10 [ 443.371293][ T6733] vm_mmap_pgoff+0x29e/0x470 [ 443.371332][ T6733] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 443.371366][ T6733] ? __fget_files+0x20e/0x3c0 [ 443.371402][ T6733] ksys_mmap_pgoff+0x7d/0x5c0 [ 443.371432][ T6733] ? __pfx_ksys_write+0x10/0x10 [ 443.371464][ T6733] __x64_sys_mmap+0x125/0x190 [ 443.371505][ T6733] do_syscall_64+0xcd/0xfa0 [ 443.371537][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.371563][ T6733] RIP: 0033:0x7fa160d8f6c9 [ 443.371583][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.371606][ T6733] RSP: 002b:00007fa161b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 443.371629][ T6733] RAX: ffffffffffffffda RBX: 00007fa160fe5fa0 RCX: 00007fa160d8f6c9 [ 443.371647][ T6733] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 443.371662][ T6733] RBP: 00007fa161b8d090 R08: 0000000000000002 R09: 0000000000008000 [ 443.371677][ T6733] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 443.371692][ T6733] R13: 00007fa160fe6038 R14: 00007fa160fe5fa0 R15: 00007ffc8f940728 [ 443.371729][ T6733] [ 443.381917][ T6736] capability: warning: `syz.0.189' uses 32-bit capabilities (legacy support in use) [ 443.840123][ T6746] sctp: [Deprecated]: syz.3.191 (pid 6746) Use of int in max_burst socket option deprecated. [ 443.840123][ T6746] Use struct sctp_assoc_value instead [ 445.460199][ T6777] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 445.466972][ T6777] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 445.886068][ T6792] Invalid ELF header magic: != ELF [ 446.114619][ T6792] nfs4: Unknown parameter '}̬ˆ¤Rá' [ 446.967555][ T6812] nfs: Unknown parameter 't%[K­|ÎpµƒÃljÝÞ¨' [ 447.752205][ T6828] FAULT_INJECTION: forcing a failure. [ 447.752205][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 447.768504][ T6828] CPU: 1 UID: 0 PID: 6828 Comm: syz.1.214 Not tainted syzkaller #0 PREEMPT(full) [ 447.768524][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 447.768532][ T6828] Call Trace: [ 447.768538][ T6828] [ 447.768543][ T6828] dump_stack_lvl+0x16c/0x1f0 [ 447.768565][ T6828] should_fail_ex+0x512/0x640 [ 447.768585][ T6828] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 447.768602][ T6828] should_failslab+0xc2/0x120 [ 447.768620][ T6828] kmem_cache_alloc_noprof+0x75/0x6e0 [ 447.768633][ T6828] ? ptlock_alloc+0x1f/0x70 [ 447.768657][ T6828] ? ptlock_alloc+0x1f/0x70 [ 447.768676][ T6828] ptlock_alloc+0x1f/0x70 [ 447.768696][ T6828] pte_alloc_one+0x84/0x350 [ 447.768712][ T6828] do_pte_missing+0x1acf/0x3ba0 [ 447.768733][ T6828] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 447.768755][ T6828] ? __pmd_alloc+0x64f/0x8b0 [ 447.768774][ T6828] __handle_mm_fault+0x1556/0x2aa0 [ 447.768798][ T6828] ? mt_find+0x3e2/0xa20 [ 447.768815][ T6828] ? __pfx___handle_mm_fault+0x10/0x10 [ 447.768835][ T6828] ? __pfx_mt_find+0x10/0x10 [ 447.768869][ T6828] ? find_vma+0xbf/0x140 [ 447.768884][ T6828] ? __pfx_find_vma+0x10/0x10 [ 447.768902][ T6828] handle_mm_fault+0x589/0xd10 [ 447.768923][ T6828] ? __pkru_allows_pkey+0x11/0xb0 [ 447.768945][ T6828] do_user_addr_fault+0x7a6/0x1370 [ 447.768960][ T6828] ? rcu_is_watching+0x12/0xc0 [ 447.768978][ T6828] exc_page_fault+0x64/0xc0 [ 447.768995][ T6828] asm_exc_page_fault+0x26/0x30 [ 447.769008][ T6828] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 447.769029][ T6828] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 447.769042][ T6828] RSP: 0018:ffffc9000399f4b8 EFLAGS: 00050246 [ 447.769053][ T6828] RAX: 0000000000000001 RBX: 0000000000000038 RCX: 0000000000000008 [ 447.769062][ T6828] RDX: fffff52000733ea6 RSI: 0000000000000038 RDI: ffffc9000399f528 [ 447.769070][ T6828] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52000733ea5 [ 447.769078][ T6828] R10: ffffc9000399f52f R11: 0000000000000001 R12: 0000000000000000 [ 447.769086][ T6828] R13: ffffc9000399f528 R14: ffff8880257ecaf0 R15: 0000000000000000 [ 447.769104][ T6828] _copy_from_user+0x98/0xd0 [ 447.769127][ T6828] kvm_arch_vm_ioctl+0xc3b/0x18b0 [ 447.769144][ T6828] ? register_lock_class+0x41/0x4c0 [ 447.769168][ T6828] ? find_held_lock+0x2b/0x80 [ 447.769182][ T6828] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 447.769197][ T6828] ? ima_match_policy+0x7f9/0x22e0 [ 447.769213][ T6828] ? __lock_acquire+0x622/0x1c90 [ 447.769235][ T6828] ? __lock_acquire+0x622/0x1c90 [ 447.769258][ T6828] ? __lock_acquire+0x622/0x1c90 [ 447.769280][ T6828] ? __lock_acquire+0x622/0x1c90 [ 447.769310][ T6828] ? bpf_ksym_find+0x124/0x1c0 [ 447.769326][ T6828] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 447.769343][ T6828] ? is_bpf_text_address+0x94/0x1a0 [ 447.769361][ T6828] ? kernel_text_address+0x8d/0x100 [ 447.769382][ T6828] ? widen_string+0xdc/0x2d0 [ 447.769401][ T6828] ? __kernel_text_address+0xd/0x40 [ 447.769421][ T6828] ? unwind_get_return_address+0x59/0xa0 [ 447.769435][ T6828] ? arch_stack_walk+0xa6/0x100 [ 447.769457][ T6828] ? stack_trace_save+0x8e/0xc0 [ 447.769472][ T6828] ? __pfx_stack_trace_save+0x10/0x10 [ 447.769487][ T6828] ? stack_depot_save_flags+0x29/0x9c0 [ 447.769508][ T6828] ? __lock_acquire+0xb8a/0x1c90 [ 447.769527][ T6828] ? kasan_save_stack+0x42/0x60 [ 447.769542][ T6828] ? kasan_save_stack+0x33/0x60 [ 447.769556][ T6828] ? kasan_save_track+0x14/0x30 [ 447.769570][ T6828] ? __kasan_save_free_info+0x3b/0x60 [ 447.769590][ T6828] ? __kasan_slab_free+0x5f/0x80 [ 447.769605][ T6828] ? kfree+0x2b8/0x6d0 [ 447.769624][ T6828] ? tomoyo_path_number_perm+0x470/0x580 [ 447.769648][ T6828] kvm_vm_ioctl+0x1a91/0x3fd0 [ 447.769671][ T6828] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 447.769698][ T6828] ? kasan_quarantine_put+0x10a/0x240 [ 447.769713][ T6828] ? lockdep_hardirqs_on+0x7c/0x110 [ 447.769730][ T6828] ? find_held_lock+0x2b/0x80 [ 447.769744][ T6828] ? tomoyo_path_number_perm+0x295/0x580 [ 447.769769][ T6828] ? tomoyo_path_number_perm+0x18d/0x580 [ 447.769791][ T6828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 447.769813][ T6828] ? find_held_lock+0x2b/0x80 [ 447.769831][ T6828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 447.769859][ T6828] ? do_vfs_ioctl+0x128/0x14f0 [ 447.769880][ T6828] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 447.769905][ T6828] ? find_held_lock+0x2b/0x80 [ 447.769918][ T6828] ? hook_file_ioctl_common+0x145/0x410 [ 447.769936][ T6828] ? __fget_files+0x20e/0x3c0 [ 447.769952][ T6828] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 447.769968][ T6828] __x64_sys_ioctl+0x18e/0x210 [ 447.769989][ T6828] do_syscall_64+0xcd/0xfa0 [ 447.770006][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.770019][ T6828] RIP: 0033:0x7fdd7258f6c9 [ 447.770030][ T6828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.770042][ T6828] RSP: 002b:00007fdd734ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.770054][ T6828] RAX: ffffffffffffffda RBX: 00007fdd727e5fa0 RCX: 00007fdd7258f6c9 [ 447.770063][ T6828] RDX: 0000000000000038 RSI: 000000004008ae48 RDI: 0000000000000003 [ 447.770070][ T6828] RBP: 00007fdd734ab090 R08: 0000000000000000 R09: 0000000000000000 [ 447.770078][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.770086][ T6828] R13: 00007fdd727e6038 R14: 00007fdd727e5fa0 R15: 00007ffeb9029218 [ 447.770105][ T6828] [ 448.416081][ T6830] bridge0: port 3(team0) entered blocking state [ 448.433969][ T6830] bridge0: port 3(team0) entered disabled state [ 448.499597][ T6830] team0: entered allmulticast mode [ 448.504774][ T6830] team_slave_0: entered allmulticast mode [ 448.511128][ T6830] team_slave_1: entered allmulticast mode [ 448.529541][ T6830] team0: entered promiscuous mode [ 448.552312][ T6830] team_slave_0: entered promiscuous mode [ 448.559131][ T6830] team_slave_1: entered promiscuous mode [ 448.565907][ T6830] bridge0: port 3(team0) entered blocking state [ 448.572463][ T6830] bridge0: port 3(team0) entered forwarding state [ 449.665417][ T6858] FAULT_INJECTION: forcing a failure. [ 449.665417][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 449.688678][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.2.223 Not tainted syzkaller #0 PREEMPT(full) [ 449.688700][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.688709][ T6858] Call Trace: [ 449.688714][ T6858] [ 449.688721][ T6858] dump_stack_lvl+0x16c/0x1f0 [ 449.688743][ T6858] should_fail_ex+0x512/0x640 [ 449.688764][ T6858] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 449.688784][ T6858] should_failslab+0xc2/0x120 [ 449.688803][ T6858] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 449.688819][ T6858] ? alloc_shrinker_info+0x191/0x470 [ 449.688835][ T6858] ? alloc_shrinker_info+0xef/0x470 [ 449.688853][ T6858] ? alloc_shrinker_info+0x191/0x470 [ 449.688867][ T6858] alloc_shrinker_info+0x191/0x470 [ 449.688888][ T6858] mem_cgroup_css_online+0x217/0x640 [ 449.688901][ T6858] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 449.688914][ T6858] online_css+0xb2/0x350 [ 449.688934][ T6858] cgroup_apply_control_enable+0x702/0xbb0 [ 449.688963][ T6858] cgroup_mkdir+0x5e0/0x1310 [ 449.688979][ T6858] ? __pfx_cgroup_mkdir+0x10/0x10 [ 449.688995][ T6858] kernfs_iop_mkdir+0x111/0x190 [ 449.689026][ T6858] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 449.689054][ T6858] vfs_mkdir+0x593/0x8c0 [ 449.689094][ T6858] do_mkdirat+0x304/0x3e0 [ 449.689120][ T6858] ? __pfx_do_mkdirat+0x10/0x10 [ 449.689138][ T6858] ? getname_flags.part.0+0x1c5/0x550 [ 449.689159][ T6858] __x64_sys_mkdir+0xef/0x140 [ 449.689174][ T6858] do_syscall_64+0xcd/0xfa0 [ 449.689200][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.689220][ T6858] RIP: 0033:0x7fa160d8f6c9 [ 449.689233][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.689246][ T6858] RSP: 002b:00007fa161b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 449.689260][ T6858] RAX: ffffffffffffffda RBX: 00007fa160fe5fa0 RCX: 00007fa160d8f6c9 [ 449.689269][ T6858] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 449.689277][ T6858] RBP: 00007fa160e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 449.689286][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.689294][ T6858] R13: 00007fa160fe6038 R14: 00007fa160fe5fa0 R15: 00007ffc8f940728 [ 449.689314][ T6858] [ 450.036036][ T6860] FAULT_INJECTION: forcing a failure. [ 450.036036][ T6860] name failslab, interval 1, probability 0, space 0, times 0 [ 450.053173][ T6860] CPU: 0 UID: 0 PID: 6860 Comm: syz.2.224 Not tainted syzkaller #0 PREEMPT(full) [ 450.053202][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.053210][ T6860] Call Trace: [ 450.053216][ T6860] [ 450.053222][ T6860] dump_stack_lvl+0x16c/0x1f0 [ 450.053244][ T6860] should_fail_ex+0x512/0x640 [ 450.053265][ T6860] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 450.053285][ T6860] should_failslab+0xc2/0x120 [ 450.053304][ T6860] __kvmalloc_node_noprof+0x141/0x9c0 [ 450.053322][ T6860] ? alloc_shrinker_info+0xef/0x470 [ 450.053342][ T6860] ? alloc_shrinker_info+0xef/0x470 [ 450.053358][ T6860] alloc_shrinker_info+0xef/0x470 [ 450.053378][ T6860] mem_cgroup_css_online+0x217/0x640 [ 450.053391][ T6860] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 450.053404][ T6860] online_css+0xb2/0x350 [ 450.053423][ T6860] cgroup_apply_control_enable+0x702/0xbb0 [ 450.053452][ T6860] cgroup_mkdir+0x5e0/0x1310 [ 450.053468][ T6860] ? __pfx_cgroup_mkdir+0x10/0x10 [ 450.053481][ T6860] kernfs_iop_mkdir+0x111/0x190 [ 450.053500][ T6860] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 450.053515][ T6860] vfs_mkdir+0x593/0x8c0 [ 450.053538][ T6860] do_mkdirat+0x304/0x3e0 [ 450.053555][ T6860] ? __pfx_do_mkdirat+0x10/0x10 [ 450.053571][ T6860] ? getname_flags.part.0+0x1c5/0x550 [ 450.053614][ T6860] __x64_sys_mkdir+0xef/0x140 [ 450.053644][ T6860] do_syscall_64+0xcd/0xfa0 [ 450.053677][ T6860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.053706][ T6860] RIP: 0033:0x7fa160d8f6c9 [ 450.053729][ T6860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.053755][ T6860] RSP: 002b:00007fa161b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 450.053786][ T6860] RAX: ffffffffffffffda RBX: 00007fa160fe5fa0 RCX: 00007fa160d8f6c9 [ 450.053803][ T6860] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 450.053819][ T6860] RBP: 00007fa160e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 450.053836][ T6860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.053852][ T6860] R13: 00007fa160fe6038 R14: 00007fa160fe5fa0 R15: 00007ffc8f940728 [ 450.053893][ T6860] [ 451.592695][ T6882] FAULT_INJECTION: forcing a failure. [ 451.592695][ T6882] name failslab, interval 1, probability 0, space 0, times 0 [ 451.605392][ T6882] CPU: 1 UID: 0 PID: 6882 Comm: syz.3.230 Not tainted syzkaller #0 PREEMPT(full) [ 451.605413][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.605422][ T6882] Call Trace: [ 451.605429][ T6882] [ 451.605435][ T6882] dump_stack_lvl+0x16c/0x1f0 [ 451.605457][ T6882] should_fail_ex+0x512/0x640 [ 451.605480][ T6882] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 451.605497][ T6882] should_failslab+0xc2/0x120 [ 451.605515][ T6882] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 451.605530][ T6882] ? __lock_acquire+0xb8a/0x1c90 [ 451.605548][ T6882] ? __d_alloc+0x32/0xae0 [ 451.605566][ T6882] ? __d_alloc+0x32/0xae0 [ 451.605580][ T6882] __d_alloc+0x32/0xae0 [ 451.605597][ T6882] d_alloc_pseudo+0x1c/0xc0 [ 451.605615][ T6882] alloc_file_pseudo+0xcf/0x230 [ 451.605636][ T6882] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 451.605655][ T6882] ? _raw_spin_unlock+0x28/0x50 [ 451.605669][ T6882] ? alloc_fd+0x471/0x7d0 [ 451.605683][ T6882] __anon_inode_getfile+0xe8/0x280 [ 451.605702][ T6882] anon_inode_getfd+0x52/0xb0 [ 451.605720][ T6882] map_create+0x1605/0x27e0 [ 451.605747][ T6882] ? __pfx_map_create+0x10/0x10 [ 451.605767][ T6882] ? __might_fault+0xe3/0x190 [ 451.605780][ T6882] ? __might_fault+0xe3/0x190 [ 451.605792][ T6882] ? __might_fault+0x13b/0x190 [ 451.605812][ T6882] __sys_bpf+0x3d9d/0x4980 [ 451.605825][ T6882] ? futex_private_hash_put+0x18a/0x300 [ 451.605844][ T6882] ? __pfx___sys_bpf+0x10/0x10 [ 451.605859][ T6882] ? __pfx_futex_wake+0x10/0x10 [ 451.605887][ T6882] ? do_futex+0x122/0x350 [ 451.605914][ T6882] ? fput+0x9b/0xd0 [ 451.605931][ T6882] ? xfd_validate_state+0x61/0x180 [ 451.605949][ T6882] ? __pfx_ksys_write+0x10/0x10 [ 451.605967][ T6882] __x64_sys_bpf+0x78/0xc0 [ 451.605980][ T6882] ? lockdep_hardirqs_on+0x7c/0x110 [ 451.605995][ T6882] do_syscall_64+0xcd/0xfa0 [ 451.606012][ T6882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.606026][ T6882] RIP: 0033:0x7ff7f378f6c9 [ 451.606039][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.606051][ T6882] RSP: 002b:00007ff7f460a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.606064][ T6882] RAX: ffffffffffffffda RBX: 00007ff7f39e5fa0 RCX: 00007ff7f378f6c9 [ 451.606073][ T6882] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 451.606081][ T6882] RBP: 00007ff7f3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 451.606090][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.606098][ T6882] R13: 00007ff7f39e6038 R14: 00007ff7f39e5fa0 R15: 00007fff417ebbc8 [ 451.606117][ T6882] [ 452.195283][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.231'. [ 452.270374][ T6886] hsr_slave_0 (unregistering): left promiscuous mode [ 452.360390][ T6888] FAULT_INJECTION: forcing a failure. [ 452.360390][ T6888] name failslab, interval 1, probability 0, space 0, times 0 [ 452.373053][ T6888] CPU: 1 UID: 0 PID: 6888 Comm: syz.2.232 Not tainted syzkaller #0 PREEMPT(full) [ 452.373075][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.373084][ T6888] Call Trace: [ 452.373089][ T6888] [ 452.373095][ T6888] dump_stack_lvl+0x16c/0x1f0 [ 452.373117][ T6888] should_fail_ex+0x512/0x640 [ 452.373142][ T6888] should_failslab+0xc2/0x120 [ 452.373161][ T6888] kmem_cache_alloc_noprof+0x75/0x6e0 [ 452.373175][ T6888] ? pcpu_alloc_noprof+0x949/0x14c0 [ 452.373189][ T6888] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 452.373223][ T6888] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 452.373245][ T6888] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 452.373270][ T6888] idr_get_free+0x528/0xa30 [ 452.373291][ T6888] idr_alloc_u32+0x190/0x2f0 [ 452.373308][ T6888] ? __pfx_idr_alloc_u32+0x10/0x10 [ 452.373325][ T6888] ? lock_acquire+0x179/0x350 [ 452.373347][ T6888] idr_alloc_cyclic+0x10b/0x230 [ 452.373362][ T6888] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 452.373376][ T6888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 452.373396][ T6888] ? lsm_blob_alloc+0x2b/0x90 [ 452.373417][ T6888] map_create+0x143e/0x27e0 [ 452.373448][ T6888] ? __pfx_map_create+0x10/0x10 [ 452.373467][ T6888] ? __might_fault+0xe3/0x190 [ 452.373480][ T6888] ? __might_fault+0xe3/0x190 [ 452.373492][ T6888] ? __might_fault+0x13b/0x190 [ 452.373511][ T6888] __sys_bpf+0x3d9d/0x4980 [ 452.373524][ T6888] ? futex_private_hash_put+0x18a/0x300 [ 452.373543][ T6888] ? __pfx___sys_bpf+0x10/0x10 [ 452.373556][ T6888] ? __pfx_futex_wait+0x10/0x10 [ 452.373587][ T6888] ? do_futex+0x122/0x350 [ 452.373613][ T6888] ? fput+0x9b/0xd0 [ 452.373632][ T6888] ? xfd_validate_state+0x61/0x180 [ 452.373649][ T6888] ? __pfx_ksys_write+0x10/0x10 [ 452.373667][ T6888] __x64_sys_bpf+0x78/0xc0 [ 452.373680][ T6888] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.373696][ T6888] do_syscall_64+0xcd/0xfa0 [ 452.373713][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.373727][ T6888] RIP: 0033:0x7fa160d8f6c9 [ 452.373739][ T6888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.373752][ T6888] RSP: 002b:00007fa161b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.373765][ T6888] RAX: ffffffffffffffda RBX: 00007fa160fe5fa0 RCX: 00007fa160d8f6c9 [ 452.373774][ T6888] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 452.373786][ T6888] RBP: 00007fa160e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 452.373794][ T6888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.373802][ T6888] R13: 00007fa160fe6038 R14: 00007fa160fe5fa0 R15: 00007ffc8f940728 [ 452.373820][ T6888] [ 453.325702][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.3.234'. [ 453.501150][ T6898] hsr_slave_0 (unregistering): left promiscuous mode [ 453.748779][ T5920] ================================================================== [ 453.748797][ T5920] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 453.748832][ T5920] Write of size 8 at addr ffffc900037990c0 by task kworker/0:3/5920 [ 453.748853][ T5920] [ 453.748865][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 453.748895][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.748911][ T5920] Workqueue: events_power_efficient fb_flashcursor [ 453.748944][ T5920] Call Trace: [ 453.748952][ T5920] [ 453.748961][ T5920] dump_stack_lvl+0x116/0x1f0 [ 453.748991][ T5920] print_report+0xcd/0x630 [ 453.749023][ T5920] ? __virt_addr_valid+0x81/0x610 [ 453.749056][ T5920] ? sys_imageblit+0x1a6f/0x1e60 [ 453.749083][ T5920] kasan_report+0xe0/0x110 [ 453.749114][ T5920] ? sys_imageblit+0x1a6f/0x1e60 [ 453.749146][ T5920] sys_imageblit+0x1a6f/0x1e60 [ 453.749178][ T5920] ? __pfx_sys_imageblit+0x10/0x10 [ 453.749220][ T5920] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 453.749256][ T5920] soft_cursor+0x524/0xa10 [ 453.749298][ T5920] bit_cursor+0xe8c/0x17e0 [ 453.749337][ T5920] ? __pfx_bit_cursor+0x10/0x10 [ 453.749379][ T5920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.749420][ T5920] ? get_color+0x1da/0x450 [ 453.749450][ T5920] ? __pfx_bit_cursor+0x10/0x10 [ 453.749486][ T5920] fb_flashcursor+0x310/0x400 [ 453.749519][ T5920] process_one_work+0x9cf/0x1b70 [ 453.749563][ T5920] ? __pfx_process_one_work+0x10/0x10 [ 453.749604][ T5920] ? assign_work+0x1a0/0x250 [ 453.749640][ T5920] worker_thread+0x6c8/0xf10 [ 453.749681][ T5920] ? __kthread_parkme+0x19e/0x250 [ 453.749711][ T5920] ? __pfx_worker_thread+0x10/0x10 [ 453.749748][ T5920] kthread+0x3c5/0x780 [ 453.749782][ T5920] ? __pfx_kthread+0x10/0x10 [ 453.749817][ T5920] ? rcu_is_watching+0x12/0xc0 [ 453.749843][ T5920] ? __pfx_kthread+0x10/0x10 [ 453.749876][ T5920] ret_from_fork+0x675/0x7d0 [ 453.749909][ T5920] ? __pfx_kthread+0x10/0x10 [ 453.749943][ T5920] ret_from_fork_asm+0x1a/0x30 [ 453.749984][ T5920] [ 453.749992][ T5920] [ 453.749999][ T5920] The buggy address belongs to a vmalloc virtual mapping [ 453.750016][ T5920] Memory state around the buggy address: [ 453.750030][ T5920] ffffc90003798f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 453.750047][ T5920] ffffc90003799000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 453.750065][ T5920] >ffffc90003799080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 453.750077][ T5920] ^ [ 453.750090][ T5920] ffffc90003799100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 453.750107][ T5920] ffffc90003799180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 453.750121][ T5920] ================================================================== [ 453.750135][ T5920] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 453.750149][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 453.750179][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.750195][ T5920] Workqueue: events_power_efficient fb_flashcursor [ 453.750226][ T5920] Call Trace: [ 453.750240][ T5920] [ 453.750249][ T5920] dump_stack_lvl+0x3d/0x1f0 [ 453.750278][ T5920] vpanic+0x640/0x6f0 [ 453.750313][ T5920] panic+0xca/0xd0 [ 453.750346][ T5920] ? __pfx_panic+0x10/0x10 [ 453.750384][ T5920] ? check_panic_on_warn+0x1f/0xb0 [ 453.750421][ T5920] check_panic_on_warn+0xab/0xb0 [ 453.750457][ T5920] end_report+0x107/0x170 [ 453.750488][ T5920] kasan_report+0xee/0x110 [ 453.750519][ T5920] ? sys_imageblit+0x1a6f/0x1e60 [ 453.750551][ T5920] sys_imageblit+0x1a6f/0x1e60 [ 453.750584][ T5920] ? __pfx_sys_imageblit+0x10/0x10 [ 453.750627][ T5920] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 453.750655][ T5920] soft_cursor+0x524/0xa10 [ 453.750698][ T5920] bit_cursor+0xe8c/0x17e0 [ 453.750737][ T5920] ? __pfx_bit_cursor+0x10/0x10 [ 453.750779][ T5920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.750818][ T5920] ? get_color+0x1da/0x450 [ 453.750849][ T5920] ? __pfx_bit_cursor+0x10/0x10 [ 453.750885][ T5920] fb_flashcursor+0x310/0x400 [ 453.750917][ T5920] process_one_work+0x9cf/0x1b70 [ 453.750959][ T5920] ? __pfx_process_one_work+0x10/0x10 [ 453.750995][ T5920] ? assign_work+0x1a0/0x250 [ 453.751028][ T5920] worker_thread+0x6c8/0xf10 [ 453.751066][ T5920] ? __kthread_parkme+0x19e/0x250 [ 453.751094][ T5920] ? __pfx_worker_thread+0x10/0x10 [ 453.751130][ T5920] kthread+0x3c5/0x780 [ 453.751163][ T5920] ? __pfx_kthread+0x10/0x10 [ 453.751198][ T5920] ? rcu_is_watching+0x12/0xc0 [ 453.751223][ T5920] ? __pfx_kthread+0x10/0x10 [ 453.751264][ T5920] ret_from_fork+0x675/0x7d0 [ 453.751298][ T5920] ? __pfx_kthread+0x10/0x10 [ 453.751333][ T5920] ret_from_fork_asm+0x1a/0x30 [ 453.751374][ T5920] [ 453.751675][ T5920] Kernel Offset: disabled