last executing test programs: 7m2.861746995s ago: executing program 3 (id=554): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) pread64$auto(r0, 0x0, 0x800003, 0x270) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xa800, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2b, 0x1, 0x0) ioctl$auto_TCSBRK2(r3, 0x5409, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timerfd_gettime$auto(r1, &(0x7f0000000040)={{0x8, 0x5}, {0x7, 0x79e3}}) madvise$auto(0x0, 0x200007, 0x19) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000100)='\x00\x00\x00\x00\x00\xf2\x1e\xadp@f\x1b\xd9\xfb\xfa?$B\xcer\xec\xb2!\xdb\xd1\xcaA\b6q\xf6\x17[\xac;\xe9\xe5\fp\xef\xec\x1a\vt\xae\x86l\xb5k{\x0f\x9e\na\x02v\xe8/\xe1t\xcd\x9aT\xee\xbb\xb1\x04o\x8e\x13\'b\xc5\xf5\x03\x98\f:\x92T(i2U\x84\xbbW\']~\x8b,\x96\x12\xbb4\xfa\xb3X\x17u\xc2\xa8\x01\x92\xf3\xef^\x16w6\xc8\xb6\xe0Y\x01v\xb8\xe1\xcc\xb8d\x98\xdd4\x0f\x9f9c\xa5\xb9\x8d$&H\'\x9e\x80\xa0', 0x100000001) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 6m59.94030953s ago: executing program 3 (id=561): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xffffffffffffffff, 0x0) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) ioctl$auto(0x3, 0x89e2, 0x91) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x25, 0x1, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x17) write$auto(r0, &(0x7f0000001240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9d\b\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a481, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x2, 0x3fff}, 0x54) prctl$auto(0x1, 0xb4, 0x0, 0x1, 0x2) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = io_uring_setup$auto(0x7, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x14\xa8\x1bk|d\v\x00\x00@\x00\x81\x00\x12\x00\xf6\xf5\x00\xdf\xff\x00', 0x13) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x7, &(0x7f0000000240)="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") sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd021) close_range$auto(r1, r2, 0xfffffffe) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) 6m57.697733788s ago: executing program 3 (id=569): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) pread64$auto(r0, 0x0, 0x800003, 0x270) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xa800, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2b, 0x1, 0x0) ioctl$auto_TCSBRK2(r3, 0x5409, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) timerfd_gettime$auto(r1, &(0x7f0000000040)={{0x8, 0x5}, {0x7, 0x79e3}}) madvise$auto(0x0, 0x200007, 0x19) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000100)='\x00\x00\x00\x00\x00\xf2\x1e\xadp@f\x1b\xd9\xfb\xfa?$B\xcer\xec\xb2!\xdb\xd1\xcaA\b6q\xf6\x17[\xac;\xe9\xe5\fp\xef\xec\x1a\vt\xae\x86l\xb5k{\x0f\x9e\na\x02v\xe8/\xe1t\xcd\x9aT\xee\xbb\xb1\x04o\x8e\x13\'b\xc5\xf5\x03\x98\f:\x92T(i2U\x84\xbbW\']~\x8b,\x96\x12\xbb4\xfa\xb3X\x17u\xc2\xa8\x01\x92\xf3\xef^\x16w6\xc8\xb6\xe0Y\x01v\xb8\xe1\xcc\xb8d\x98\xdd4\x0f\x9f9c\xa5\xb9\x8d$&H\'\x9e\x80\xa0', 0x100000001) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 6m56.231542721s ago: executing program 3 (id=573): ioctl$auto(0x3, 0x9, 0x38) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x0, 0x30, 0x0, 0x568) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r2 = prctl$auto(0x42, 0x1, 0x0, 0x400000000000000, 0x0) mlockall$auto(0x7) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c045119fd000acf6a4e", @ANYBLOB, @ANYRES32=r2, @ANYBLOB="05000f008000000008000c0002000000"], 0x19c}, 0x1, 0x0, 0x0, 0x8014}, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r3, 0x6a, 0x1, 0x0, 0x0) socket(0x1d, 0x1, 0x1) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x420e00, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r6 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r6, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r7, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x5, 0x20000003, 0x3, 0x60, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) 6m55.12255083s ago: executing program 3 (id=577): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1, &(0x7f0000000340)="7b598f00b034423fc0f7fd20d64376bfddaecbb322dc1b0257af35a91e3a3c6f1e3da17e18357e3279ca1e77788dbc5ea2dd12c8f62828f13b0e60a4501a319806730e5a", 0xd880bb7) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x72042, 0x0) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f00000000c0)={"67b005c1c2760bd1eeb6eb479d03912acfb5074ad05689c042577e4d145c43b5", 0x4, 0xfff, 0x7fffffff, 0x9, 0xa00}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x20001, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) socket(0x25, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x17) 6m54.131445671s ago: executing program 3 (id=579): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc642, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000080), 0x80c81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x22, 0x0, 0x9) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, &(0x7f00000000c0), 0x200002, 0x8}, 0x803}, 0xa, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0x1e, 0x8, 0x8000000000000000, 0x0) write$auto(r1, 0x0, 0xfffffdf2) 6m39.063803908s ago: executing program 32 (id=579): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc642, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000080), 0x80c81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x22, 0x0, 0x9) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, &(0x7f00000000c0), 0x200002, 0x8}, 0x803}, 0xa, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0x1e, 0x8, 0x8000000000000000, 0x0) write$auto(r1, 0x0, 0xfffffdf2) 1m18.330173444s ago: executing program 4 (id=1702): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r0, 0xffff, 0x29}, 0x3, 0x8) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) (async) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) fanotify_init$auto(0x6, 0x1) (async) socket(0x2, 0x801, 0x100) (async) ioctl$auto(0x3, 0x894b, 0x38) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) madvise$auto(0x0, 0x2003f0, 0x15) io_uring_setup$auto(0x1, 0x0) (async) close_range$auto(r0, r0, 0x0) 1m17.330229098s ago: executing program 4 (id=1705): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x4) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/ip6_mr_vif\x00', 0x480, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) pread64$auto(r1, &(0x7f0000000040)='-#!=\x00', 0xa86, 0x9) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) mmap$auto(0x0, 0x1, 0xdc, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dynamic_debug/control\x00', 0x8101, 0x0) write$auto(0x3, 0x0, 0x29a) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x10400, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x18, 0x3, 0x2) r2 = socket(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd22, 0x25dfdbff, {}, [@HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r2}]}, 0x1c}}, 0xd4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffdaf, 0x0, 0x1, 0x0, 0x0, 0x24008062}, 0x4000840) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/net/raw6\x00', 0x500, 0x0) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96) write$auto(r1, &(0x7f0000000080)='\x00', 0xfffffffffffffffa) 1m16.107782467s ago: executing program 4 (id=1709): rseq$auto(0x0, 0x40, 0x0, 0x6) r0 = gettid() kill$auto(r0, 0x11) 1m15.601135326s ago: executing program 4 (id=1713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_RESPONSE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x20008800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdedf251f00100000000018f4c36ce7751796ff5cf31cd7465aa372b253ce93d4c57bdf0f86543a4468536363"], 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd700002dcdf2503000000040008001800018014003e00ff01000000000000000000000000000104000800"], 0x34}, 0x1, 0x0, 0x0, 0x1398a0584259c607}, 0x800) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r8, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r9, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) r10 = getpid() process_vm_readv$auto(r10, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) 1m13.850713549s ago: executing program 4 (id=1719): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) r0 = getpid() sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000110c0)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8005}, 0x4044891) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x97f3) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12bc00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/203, 0xcb) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f00000001c0)='\x01\x00\x00\x00\x89\xba\v\x13\xa1\xcfc\xdb\xeen\x00', 0x163fdb7e) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xc6c43, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1f) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7) 1m13.144130028s ago: executing program 4 (id=1722): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, 0x0, 0x10000089) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) 57.940554317s ago: executing program 33 (id=1722): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, 0x0, 0x10000089) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) 9.000757465s ago: executing program 0 (id=1852): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, &(0x7f0000000100)='@+\\!\x00', &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50ca4639", 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0xffffffff, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/9, 0x9) 7.445068029s ago: executing program 1 (id=1856): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001200)='/dev/snd/midiC2D0\x00', 0x1a1801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x7fff, 0x5, "313bf5eb195a060000002af9ffb683dba3931f33828bbfba40f03510bf6b7fe5e2f94ba460d57d448667798d"}, 0x401, 0x8, 0x4, @inferred, @integer={0xdbe, 0x255, 0x8}, "7a9fc199a16a2332eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3a8453d3, 0x80, 0x8, 0x7, 0x1, 0x200, 0x8, 0x401, 0x2, 0x2, 0x2, 0xc28}, 0x0) r1 = socket(0x8, 0x800, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x12}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0x15, 0x1, 0xffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x0, 0x1, 0x0, 0x1, 0x100000001) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r2) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x800, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000) r6 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/name\x00', 0x8e0a00, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r6, &(0x7f0000000180)=""/4125, 0x101d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 7.302986011s ago: executing program 0 (id=1858): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) select$auto(0x8, 0x0, &(0x7f0000000080)={[0x80000001, 0x100000001, 0x9, 0xffffffffffffffff, 0x9, 0x7ff, 0x4816, 0x5, 0x7, 0x9, 0x2, 0x3ff, 0x5, 0xd6, 0x5, 0x2]}, 0x0, 0x0) (rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) (async, rerun: 32) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (rerun: 32) r2 = open(0x0, 0x40000, 0x31) mmap$auto(0xfffdfffffffffffe, 0x9, 0x8000000000000000, 0x571f, r2, 0xb6) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) (async, rerun: 32) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_BROADCAST(r3, 0x1, 0x6, &(0x7f0000000040)='/proc/sys/net/mptcp/blackhole_timeout\x00', &(0x7f00000000c0)=0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0x7, 0x13) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 64) r5 = socket(0x2, 0x80002, 0x73) (rerun: 64) getpeername$auto(r5, 0x0, 0x0) (async) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r6, 0x92106400, r6) (async) r7 = ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f0000000000)={0x1, 0x0, r2}) (async, rerun: 32) r8 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), r2) (async, rerun: 32) r9 = gettid() sendmsg$auto_IPVS_CMD_FLUSH(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x11, 0x1, 0x0, 0x1, [@typed={0xc, 0xeb, 0x0, 0x0, @u64=0x5}, @generic="cb"]}, @IPVS_CMD_ATTR_DAEMON={0xb8, 0x3, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@typed={0x4, 0xae}]}, @generic="53820a5be10da1107b5c6f9061f8081646dce59690bad807672127961215826bd4dcb12393ea9ca2cb5b1e7783d1e9f4ecaa6004", @nested={0x75, 0x6e, 0x0, 0x1, [@nested={0x4, 0x37}, @typed={0x8, 0xe9, 0x0, 0x0, @pid=r9}, @generic="1ce7ba351080e7f0f32c4e6350db06173e3d16006ae7dfb3e2a7c5fc979a9bb21148cae55841cb3bd35ce656efd30ba164d8bebf51a30765e227f5fca5d11b236b30fc01f593dfb9549ebfa948744e1ec10d5db90fbb66666ef9064572", @nested={0x4, 0xad}, @nested={0x4, 0xfb}]}]}]}, 0xe8}}, 0x4000080) (async) read$auto(r4, 0x0, 0xe8) 6.974311673s ago: executing program 2 (id=1859): bpf$auto(0x9, 0x0, 0x9) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x1693a487, 0x40000000000eb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x54) ioperm$auto(0x7, 0x5ad2, 0x8) syz_clone3(0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r1, 0x10000}, 0x10) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x1, 0x0, 0x13) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_BSDCOMPAT(r2, 0x1, 0xe, &(0x7f0000000140)='\x00', 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vivid.0/video4linux/video9/index\x00', 0x0, 0x0) getcwd$auto(&(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/video9/index\x00', 0xa) 6.876023422s ago: executing program 5 (id=1860): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockopt$auto(r1, 0x28, 0x2, 0x0, 0x0) (async, rerun: 32) r2 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r3 = socket(0x15, 0x5, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (rerun: 32) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/cmdline\x00', 0x1, 0x0) (async) ustat$auto(0x801, 0x0) (async, rerun: 32) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0) (async, rerun: 32) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT={0x8, 0x1a, 0x2}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7743}, @BATADV_ATTR_FLAG_BEST={0x4}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0x7}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x9}, @BATADV_ATTR_FLAG_BEST={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) setrlimit$auto(0x5, &(0x7f00000000c0)={0x8000000000000000, 0x7ff}) (async) r4 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) readv$auto(r4, &(0x7f0000000100)={0x0, 0x3}, 0x1) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(r0, r0, 0x9) (async, rerun: 64) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) mlock$auto(0x112, 0x80006) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) mmap$auto(0x4, 0x420809, 0x3, 0x10, r2, 0x2) (async, rerun: 64) r5 = socket(0xa, 0x801, 0x84) getsockopt$auto(r5, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x17d) (async, rerun: 32) socket(0x11, 0x2, 0x2) (rerun: 32) 5.661881496s ago: executing program 1 (id=1861): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/mm/transparent_hugepage/hugepages-32kB/stats/swpout\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/1, 0x1) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x207, 0x7, 0x4002a, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0xf, 0x9, 0x3, 0x1, 0x5, 0x8d, 0xffffffdffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x6, 0xfffffffffffffffd, 0x10001, 0xaa9, 0x7ffffffd, 0x3, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/027/001\x00', 0x20882, 0x0) 5.567184338s ago: executing program 2 (id=1862): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/mm/transparent_hugepage/hugepages-32kB/stats/swpout\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/1, 0x1) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x207, 0x7, 0x4002a, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0xf, 0x9, 0x3, 0x1, 0x5, 0x8d, 0xffffffdffffffffe]}, 0x0) (fail_nth: 1) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x6, 0xfffffffffffffffd, 0x10001, 0xaa9, 0x7ffffffd, 0x3, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/027/001\x00', 0x20882, 0x0) 5.405253174s ago: executing program 0 (id=1863): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto_kernel_debug_fops_orangefs_debugfs(r2, &(0x7f0000000680)="2f132726", 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) msgctl$auto_MSG_INFO(0x10000, 0xc, &(0x7f0000000180)={{0x8, 0xee00, 0xffffffffffffffff, 0x10000, 0x18d6, 0x3, 0x8000}, 0x0, 0x0, 0x2, 0xffffffffffff86e0, 0x447, 0x8, 0x8, 0xff, 0x5, 0x401, @inferred=0xffffffffffffffff, @raw=0x9}) r4 = clone3$auto(&(0x7f0000000280)={0x8, 0x6, 0xca, 0x0, 0x7, 0x1738, 0x4, 0x1cd9, 0x7, 0x80000000, 0x1}, 0xffffffffffffff7f) sendmsg$auto_TIPC_NL_NET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002280)=ANY=[@ANYBLOB="6c110000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="1c003a8018001b800400070004003f800c00aa0006000000000000000800ec00", @ANYRES32=r4, @ANYBLOB="0800a40007000000c7e854da727c9368fa57f3f599a1305dc7b8236c17edca080015800400408000e800058004001c804400db800400b680c8b1c2ec79b225a36196c8267a52f8f5c365eaaddabbd5182139d1afbadd9752b6aa0f71ea6a4c33c1c4ece108003c00", @ANYRES32=r3, @ANYBLOB="08001b00aa88000008002300", @ANYRES32=r0, @ANYBLOB="9400a2001c1a947388eaa902c988361f2f4c3f9c0da6461345f2d346ab496e5c7c2182c0e3d58011c6f175e2bf008acfb63823b4331f89b33073fc8cbf818d355c68d6aae590e05ca32a61dda9013c5dad8753c955c7d0d18c7cdb9c321da28c8f065a7c302d77e3481b37dfcfcbd0bc774f4aa46660497a0f9feb5eef5d4b4974bb9b3ecd"], 0x116c}, 0x1, 0x0, 0x0, 0x140}, 0x41) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendto$auto(0x3, 0x0, 0x8, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x1c) write$auto(0x3, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x0) setresgid$auto(0xee01, 0x0, 0x0) setresgid$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x40000000008000) r5 = userfaultfd$auto(0x1) statx$auto(r5, 0x0, 0x1000, 0x8, 0x0) prctl$auto(0x7, 0x1, 0x0, 0x800000000001, 0x1) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x26, 0x8, 0x40005, 0x7fffffff, 0x0, 0x3, 0x5b71, 0x9, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 5.353108494s ago: executing program 5 (id=1864): mmap$auto(0x1, 0x8, 0x400df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) getsockopt$auto_SO_INCOMING_NAPI_ID(0xffffffffffffffff, 0x3, 0x38, &(0x7f0000000140)='\x00', &(0x7f0000000180)=0xabb) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xfffffffffffffffd, 0x9, 0x83f, 0x2, 0xffff, 0x15f4da0e, 0x3, 0xd08, 0x80000000000c, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x6cd]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mknod$auto(0x0, 0xcb, 0xfffffffa) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) r2 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r2, 0x7, 0x7, 0xffffffffffffffff, 0x18) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) vmsplice$auto(r1, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) socket(0x28, 0x800, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4.629561601s ago: executing program 1 (id=1865): mmap$auto(0xfffffffffffffffe, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy16/netdev:wlan0/stations/08:02:11:00:00:01/rx_fragments\x00', 0x4a4e02, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycd\x00', 0x422400, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy9\x00', 0x40001, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r0, 0x80045439, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x145003, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r2, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x541b, 0x10000000000402) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) mmap$auto(0xffffffffffffffff, 0x400000, 0xe2, 0x9b72, r3, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) 4.482072354s ago: executing program 2 (id=1866): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) mmap$auto(0x200000, 0x3, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x5, &(0x7f0000000140)={&(0x7f0000000040)=0x0, 0x9, 0x0, {0x81}}, 0x0, 0x8) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x9, "cc00000008f0ffffff000100"}, 0x6b) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r0, &(0x7f0000000240)=""/170, 0xaa) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo$auto(r2, r1, 0x1, 0x0) rt_sigsuspend$auto(0x0, 0x8) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0x78, 0x401, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x48000) mmap$auto(0x10001, 0x4, 0x6, 0x40eb1, 0x401, 0x2ffffffffffc) rseq$auto(0x0, 0x8000, 0x0, 0xffffffc0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) fadvise64$auto(0x0, 0x9, 0x9, 0xb28) 4.270896227s ago: executing program 0 (id=1867): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresuid$auto(0x0, 0x8, 0x8000) shmget$auto(0x8, 0x10563, 0x568d1af2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x2, 0x5c61fa2c, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, 0x0, 0x800) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/audit\x00', 0x4d0500, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) 3.969424471s ago: executing program 1 (id=1868): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xb, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/gro_flush_timeout\x00', 0x88282, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) write$auto(r0, 0x0, 0x4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x11, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0x20000fffffdef) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket(0x29, 0x2, 0x0) select$auto(0xb, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 3.712185669s ago: executing program 0 (id=1869): r0 = eventfd$auto(0x80) mmap$auto(0x6, 0x2000d, 0x0, 0xebe, 0x404, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x60041, 0x0) write$auto_drm_connector_fops_drm_debugfs(r2, &(0x7f0000001240)="b3827964b69f25ba34ba41a7", 0xc) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(0x3, 0x3) eventfd$auto(0x8e) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/001/001\x00', 0x280040, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) read$auto(r0, 0x0, 0xcc9c) write$auto(r0, &(0x7f0000000400)='\'\x00', 0x8) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r0, 0x0, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(r3, &(0x7f0000000040)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r4 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x101040, 0x0) readv$auto(r4, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x5) 3.414308755s ago: executing program 2 (id=1870): r0 = eventfd$auto(0x80) mmap$auto(0x6, 0x2000d, 0x0, 0xebe, 0x404, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x60041, 0x0) write$auto_drm_connector_fops_drm_debugfs(r2, &(0x7f0000001240)="b3827964b69f25ba34ba41a7", 0xc) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(0x3, 0x3) eventfd$auto(0x8e) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/001/001\x00', 0x280040, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) read$auto(r0, 0x0, 0xcc9c) write$auto(r0, &(0x7f0000000400)='\'\x00', 0x8) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r0, 0x0, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(r3, &(0x7f0000000040)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r4 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x101040, 0x0) readv$auto(r4, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x5) 3.177393496s ago: executing program 5 (id=1871): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) clock_getres$auto(0x2, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (rerun: 32) r0 = socket(0x2a, 0x2, 0x0) ioctl$auto(r0, 0x8913, r0) 2.960129624s ago: executing program 1 (id=1872): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (fail_nth: 4) 2.742217401s ago: executing program 0 (id=1873): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto_kernel_debug_fops_orangefs_debugfs(r2, &(0x7f0000000680)="2f132726", 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) msgctl$auto_MSG_INFO(0x10000, 0xc, &(0x7f0000000180)={{0x8, 0xee00, 0xffffffffffffffff, 0x10000, 0x18d6, 0x3, 0x8000}, 0x0, 0x0, 0x2, 0xffffffffffff86e0, 0x447, 0x8, 0x8, 0xff, 0x5, 0x401, @inferred=0xffffffffffffffff, @raw=0x9}) r4 = clone3$auto(&(0x7f0000000280)={0x8, 0x6, 0xca, 0x0, 0x7, 0x1738, 0x4, 0x1cd9, 0x7, 0x80000000, 0x1}, 0xffffffffffffff7f) sendmsg$auto_TIPC_NL_NET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002280)=ANY=[@ANYBLOB="6c110000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="1c003a8018001b800400070004003f800c00aa0006000000000000000800ec00", @ANYRES32=r4, @ANYBLOB="0800a40007000000c7e854da727c9368fa57f3f599a1305dc7b8236c17edca080015800400408000e800058004001c804400db800400b680c8b1c2ec79b225a36196c8267a52f8f5c365eaaddabbd5182139d1afbadd9752b6aa0f71ea6a4c33c1c4ece108003c00", @ANYRES32=r3, @ANYBLOB="08001b00aa88000008002300", @ANYRES32=r0, @ANYBLOB="9400a2001c1a947388eaa902c988361f2f4c3f9c0da6461345f2d346ab496e5c7c2182c0e3d58011c6f175e2bf008acfb63823b4331f89b33073fc8cbf818d355c68d6aae590e05ca32a61dda9013c5dad8753c955c7d0d18c7cdb9c321da28c8f065a7c302d77e3481b37dfcfcbd0bc774f4aa46660497a0f9feb5eef5d4b4974bb9b3ecd"], 0x116c}, 0x1, 0x0, 0x0, 0x140}, 0x41) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendto$auto(0x3, 0x0, 0x8, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x1c) write$auto(0x3, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x0) setresgid$auto(0xee01, 0x0, 0x0) setresgid$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x40000000008000) r5 = userfaultfd$auto(0x1) statx$auto(r5, 0x0, 0x1000, 0x8, 0x0) prctl$auto(0x7, 0x1, 0x0, 0x800000000001, 0x1) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x26, 0x8, 0x40005, 0x7fffffff, 0x0, 0x3, 0x5b71, 0x9, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 1.747032036s ago: executing program 2 (id=1874): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r2, 0x89c1beb01534ff9b, 0x70bd2a, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) pread64$auto(r4, 0x0, 0x6, 0x400) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x200005ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f00000003c0)="cdc576166b8d", 0x7, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r7) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x2}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, "f411c2dd7d780703597f020f1720cb34d2ad"}, @NL80211_ATTR_MESH_ID={0x18, 0x18, "cec00f4dc66cb9390c2b15e619dcdbfd50da1418"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xfc00}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x96) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000140)={0x0, 0x3f, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdc03, {0x4, 0x0, 0xfd}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4) 1.702288916s ago: executing program 5 (id=1875): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x900) 1.66816657s ago: executing program 1 (id=1876): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto_kernel_debug_fops_orangefs_debugfs(r2, &(0x7f0000000680)="2f132726", 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) msgctl$auto_MSG_INFO(0x10000, 0xc, &(0x7f0000000180)={{0x8, 0xee00, 0xffffffffffffffff, 0x10000, 0x18d6, 0x3, 0x8000}, 0x0, 0x0, 0x2, 0xffffffffffff86e0, 0x447, 0x8, 0x8, 0xff, 0x5, 0x401, @inferred=0xffffffffffffffff, @raw=0x9}) r4 = clone3$auto(&(0x7f0000000280)={0x8, 0x6, 0xca, 0x0, 0x7, 0x1738, 0x4, 0x1cd9, 0x7, 0x80000000, 0x1}, 0xffffffffffffff7f) sendmsg$auto_TIPC_NL_NET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002280)=ANY=[@ANYBLOB="6c110000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="1c003a8018001b800400070004003f800c00aa0006000000000000000800ec00", @ANYRES32=r4, @ANYBLOB="0800a40007000000c7e854da727c9368fa57f3f599a1305dc7b8236c17edca080015800400408000e800058004001c804400db800400b680c8b1c2ec79b225a36196c8267a52f8f5c365eaaddabbd5182139d1afbadd9752b6aa0f71ea6a4c33c1c4ece108003c00", @ANYRES32=r3, @ANYBLOB="08001b00aa88000008002300", @ANYRES32=r0, @ANYBLOB="9400a2001c1a947388eaa902c988361f2f4c3f9c0da6461345f2d346ab496e5c7c2182c0e3d58011c6f175e2bf008acfb63823b4331f89b33073fc8cbf818d355c68d6aae590e05ca32a61dda9013c5dad8753c955c7d0d18c7cdb9c321da28c8f065a7c302d77e3481b37dfcfcbd0bc774f4aa46660497a0f9feb5eef5d4b4974bb9b3ecd"], 0x116c}, 0x1, 0x0, 0x0, 0x140}, 0x41) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendto$auto(0x3, 0x0, 0x8, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x1c) write$auto(0x3, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x0) setresgid$auto(0xee01, 0x0, 0x0) setresgid$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x40000000008000) r5 = userfaultfd$auto(0x1) statx$auto(r5, 0x0, 0x1000, 0x8, 0x0) prctl$auto(0x7, 0x1, 0x0, 0x800000000001, 0x1) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x26, 0x8, 0x40005, 0x7fffffff, 0x0, 0x3, 0x5b71, 0x9, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f00000000c0)={{0x1, 0x40, 0x4202, 0x3}, 0x2, 0x0, "72e00d838b24ff6fd5411f4330fd8fa23cf2b9541bbae501c8312f5733753466"}) 1.119771157s ago: executing program 5 (id=1877): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000580)="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", 0x80e) 49.12371ms ago: executing program 2 (id=1878): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) socket(0x11, 0x80003, 0x300) clone3$auto(0x0, 0x9) r0 = socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = ioctl$auto_NS_GET_NSTYPE(r0, 0xb703, 0x0) setsockopt$auto_SO_TIMESTAMP_OLD(r2, 0x8c7, 0x1d, &(0x7f0000000000)='/-\\@\x00', 0xffff) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) open(0x0, 0x22240, 0x154) bpf$auto(0x7, 0x0, 0xa3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) 0s ago: executing program 5 (id=1879): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x406e) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0x55) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) iopl$auto(0x2) iopl$auto(0x1) write$auto_console_fops_tty_io(r1, &(0x7f0000001800)="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", 0xa18) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x44402, 0x0) kernel console output (not intermixed with test programs): d_keyring_to_cred+0xc1/0x140 [ 549.514449][T12291] keyctl_set_reqkey_keyring+0xcf/0x1c0 [ 549.514487][T12291] __do_sys_keyctl+0x6d/0x590 [ 549.514523][T12291] do_syscall_64+0xcd/0xfa0 [ 549.514553][T12291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.514576][T12291] RIP: 0033:0x7fca5a18f6c9 [ 549.514595][T12291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.514618][T12291] RSP: 002b:00007fca5b080038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 549.514639][T12291] RAX: ffffffffffffffda RBX: 00007fca5a3e6360 RCX: 00007fca5a18f6c9 [ 549.514654][T12291] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 549.514668][T12291] RBP: 00007fca5a211f91 R08: 0000000000000008 R09: 0000000000000000 [ 549.514682][T12291] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 549.514696][T12291] R13: 00007fca5a3e63f8 R14: 00007fca5a3e6360 R15: 00007ffc62cfe7d8 [ 549.514726][T12291] [ 550.527411][T12268] kexec: Could not allocate control_code_buffer [ 551.268094][T12313] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1441'. [ 551.711717][T12328] aoe: could not set interface list: too many interfaces [ 552.599884][T12342] FAULT_INJECTION: forcing a failure. [ 552.599884][T12342] name failslab, interval 1, probability 0, space 0, times 0 [ 552.637361][T12342] CPU: 0 UID: 0 PID: 12342 Comm: syz.4.1447 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 552.637428][T12342] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 552.637447][T12342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.637467][T12342] Call Trace: [ 552.637478][T12342] [ 552.637489][T12342] dump_stack_lvl+0x16c/0x1f0 [ 552.637533][T12342] should_fail_ex+0x512/0x640 [ 552.637582][T12342] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 552.637619][T12342] should_failslab+0xc2/0x120 [ 552.637662][T12342] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 552.637692][T12342] ? __pfx___might_resched+0x10/0x10 [ 552.637726][T12342] ? sock_alloc_inode+0x25/0x1c0 [ 552.637771][T12342] ? __pfx_sock_alloc_inode+0x10/0x10 [ 552.637806][T12342] ? sock_alloc_inode+0x25/0x1c0 [ 552.637840][T12342] sock_alloc_inode+0x25/0x1c0 [ 552.637876][T12342] alloc_inode+0x64/0x240 [ 552.637920][T12342] sock_alloc+0x40/0x280 [ 552.637965][T12342] __sock_create+0xc1/0x8d0 [ 552.638016][T12342] __sys_socket+0x14d/0x260 [ 552.638060][T12342] ? __pfx___sys_socket+0x10/0x10 [ 552.638101][T12342] ? xfd_validate_state+0x61/0x180 [ 552.638145][T12342] ? __pfx_do_writev+0x10/0x10 [ 552.638184][T12342] __x64_sys_socket+0x72/0xb0 [ 552.638225][T12342] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.638262][T12342] do_syscall_64+0xcd/0xfa0 [ 552.638304][T12342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.638337][T12342] RIP: 0033:0x7ff42c38f6c9 [ 552.638362][T12342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.638394][T12342] RSP: 002b:00007ff42d301038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 552.638425][T12342] RAX: ffffffffffffffda RBX: 00007ff42c5e5fa0 RCX: 00007ff42c38f6c9 [ 552.638445][T12342] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 552.638463][T12342] RBP: 00007ff42c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 552.638484][T12342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.638503][T12342] R13: 00007ff42c5e6038 R14: 00007ff42c5e5fa0 R15: 00007ffca44eff88 [ 552.638548][T12342] [ 552.638563][T12342] socket: no more sockets [ 555.326769][T12386] random: crng reseeded on system resumption [ 555.668866][T12403] aoe: could not set interface list: too many interfaces [ 555.787458][T12404] FAULT_INJECTION: forcing a failure. [ 555.787458][T12404] name fail_futex, interval 1, probability 0, space 0, times 0 [ 555.843926][T12404] CPU: 0 UID: 0 PID: 12404 Comm: syz.2.1457 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 555.843981][T12404] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 555.843995][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 555.844009][T12404] Call Trace: [ 555.844017][T12404] [ 555.844027][T12404] dump_stack_lvl+0x16c/0x1f0 [ 555.844059][T12404] should_fail_ex+0x512/0x640 [ 555.844095][T12404] ? __lock_acquire+0xb8a/0x1c90 [ 555.844130][T12404] get_futex_key+0x1d0/0x1560 [ 555.844165][T12404] ? __pfx_get_futex_key+0x10/0x10 [ 555.844194][T12404] ? do_raw_spin_lock+0x12c/0x2b0 [ 555.844232][T12404] ? find_held_lock+0x2b/0x80 [ 555.844261][T12404] futex_wait_setup+0x9d/0x550 [ 555.844307][T12404] __futex_wait+0x193/0x2f0 [ 555.844346][T12404] ? __pfx___futex_wait+0x10/0x10 [ 555.844384][T12404] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 555.844410][T12404] ? lockdep_hardirqs_on+0x7c/0x110 [ 555.844441][T12404] ? __pfx_futex_wake_mark+0x10/0x10 [ 555.844482][T12404] ? find_held_lock+0x2b/0x80 [ 555.844509][T12404] ? futex_private_hash_put+0xd5/0x190 [ 555.844541][T12404] futex_wait+0xe8/0x380 [ 555.844578][T12404] ? __pfx_futex_wait+0x10/0x10 [ 555.844634][T12404] ? do_vfs_ioctl+0x128/0x14f0 [ 555.844673][T12404] do_futex+0x229/0x350 [ 555.844706][T12404] ? __pfx_do_futex+0x10/0x10 [ 555.844745][T12404] __x64_sys_futex+0x1e0/0x4c0 [ 555.844782][T12404] ? __pfx___x64_sys_futex+0x10/0x10 [ 555.844829][T12404] do_syscall_64+0xcd/0xfa0 [ 555.844859][T12404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.844883][T12404] RIP: 0033:0x7f573318f6c9 [ 555.844901][T12404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.844925][T12404] RSP: 002b:00007f5733fd00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 555.844947][T12404] RAX: ffffffffffffffda RBX: 00007f57333e6188 RCX: 00007f573318f6c9 [ 555.844962][T12404] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f57333e6188 [ 555.844976][T12404] RBP: 00007f57333e6180 R08: 0000000000000000 R09: 0000000000000000 [ 555.844990][T12404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.845004][T12404] R13: 00007f57333e6218 R14: 00007ffcc4e05990 R15: 00007ffcc4e05a78 [ 555.845035][T12404] [ 556.841737][T12421] futex_wake_op: syz.1.1459 tries to shift op by -2048; fix this program [ 557.110397][T12431] blktrace: Concurrent blktraces are not allowed on loop2 [ 557.574286][T12424] vivid-007: ================= START STATUS ================= [ 557.651420][T12424] vivid-007: Generate PTS: true [ 557.665762][T12424] vivid-007: Generate SCR: true [ 557.674285][T12424] tpg source WxH: 320x240 (Y'CbCr) [ 557.783666][T12424] tpg field: 1 [ 557.792863][T12424] tpg crop: (0,0)/320x240 [ 557.804078][T12424] tpg compose: (0,0)/320x240 [ 557.808777][T12424] tpg colorspace: 8 [ 557.849025][T12424] tpg transfer function: 0/0 [ 557.993708][T12424] tpg Y'CbCr encoding: 0/0 [ 558.054009][T12424] tpg quantization: 0/0 [ 558.067430][T12424] tpg RGB range: 0/2 [ 558.071885][T12424] vivid-007: ================== END STATUS ================== [ 558.337321][T12438] can: request_module (can-proto-3) failed. [ 558.539248][T12450] FAULT_INJECTION: forcing a failure. [ 558.539248][T12450] name fail_futex, interval 1, probability 0, space 0, times 0 [ 558.552733][T12450] CPU: 1 UID: 0 PID: 12450 Comm: syz.0.1466 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 558.552808][T12450] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 558.552829][T12450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 558.552849][T12450] Call Trace: [ 558.552860][T12450] [ 558.552872][T12450] dump_stack_lvl+0x16c/0x1f0 [ 558.552919][T12450] should_fail_ex+0x512/0x640 [ 558.552979][T12450] should_fail_futex+0x4c/0x60 [ 558.553023][T12450] futex_lock_pi_atomic+0x148/0xd50 [ 558.553086][T12450] futex_lock_pi+0x23f/0x7c0 [ 558.553147][T12450] ? __pfx_futex_lock_pi+0x10/0x10 [ 558.553196][T12450] ? preempt_schedule_common+0x44/0xc0 [ 558.553237][T12450] ? preempt_schedule_thunk+0x16/0x30 [ 558.553309][T12450] ? __pfx_try_to_wake_up+0x10/0x10 [ 558.553356][T12450] ? futex_private_hash_put+0xd5/0x190 [ 558.553418][T12450] ? __pfx_futex_wake_mark+0x10/0x10 [ 558.553493][T12450] ? ksys_write+0x190/0x250 [ 558.553538][T12450] do_futex+0x11a/0x350 [ 558.553585][T12450] ? __pfx_do_futex+0x10/0x10 [ 558.553644][T12450] __x64_sys_futex+0x1e0/0x4c0 [ 558.553695][T12450] ? fput+0x9b/0xd0 [ 558.553741][T12450] ? __pfx___x64_sys_futex+0x10/0x10 [ 558.553789][T12450] ? xfd_validate_state+0x61/0x180 [ 558.553837][T12450] ? __pfx_ksys_write+0x10/0x10 [ 558.553888][T12450] do_syscall_64+0xcd/0xfa0 [ 558.553934][T12450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.553969][T12450] RIP: 0033:0x7feee178f6c9 [ 558.553997][T12450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.554032][T12450] RSP: 002b:00007feee2696038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 558.554066][T12450] RAX: ffffffffffffffda RBX: 00007feee19e5fa0 RCX: 00007feee178f6c9 [ 558.554091][T12450] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 558.554112][T12450] RBP: 00007feee1811f91 R08: 0000000000000000 R09: 000000008000fff5 [ 558.554134][T12450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.554155][T12450] R13: 00007feee19e6038 R14: 00007feee19e5fa0 R15: 00007fff44ebac78 [ 558.554202][T12450] [ 560.715475][T12467] FAULT_INJECTION: forcing a failure. [ 560.715475][T12467] name failslab, interval 1, probability 0, space 0, times 0 [ 560.737595][T12467] CPU: 1 UID: 0 PID: 12467 Comm: syz.1.1471 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 560.737678][T12467] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 560.737697][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 560.737716][T12467] Call Trace: [ 560.737726][T12467] [ 560.737746][T12467] dump_stack_lvl+0x16c/0x1f0 [ 560.737787][T12467] should_fail_ex+0x512/0x640 [ 560.737830][T12467] ? __kmalloc_noprof+0xca/0x880 [ 560.737878][T12467] should_failslab+0xc2/0x120 [ 560.737918][T12467] __kmalloc_noprof+0xdd/0x880 [ 560.737967][T12467] ? splice_from_pipe_next+0x1f7/0x5d0 [ 560.737997][T12467] ? copy_splice_read+0x1a8/0xc20 [ 560.738053][T12467] ? copy_splice_read+0x1a8/0xc20 [ 560.738095][T12467] copy_splice_read+0x1a8/0xc20 [ 560.738228][T12467] ? __pfx_pipe_to_null+0x10/0x10 [ 560.738281][T12467] ? __pfx_copy_splice_read+0x10/0x10 [ 560.738325][T12467] ? pipe_unlock+0x4a/0x70 [ 560.738358][T12467] ? __pfx_splice_from_pipe+0x10/0x10 [ 560.738395][T12467] ? find_held_lock+0x2b/0x80 [ 560.738427][T12467] ? __pfx_copy_splice_read+0x10/0x10 [ 560.738471][T12467] do_splice_read+0x285/0x370 [ 560.738520][T12467] splice_direct_to_actor+0x2a1/0xa30 [ 560.738549][T12467] ? __pfx_direct_splice_actor+0x10/0x10 [ 560.738583][T12467] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 560.738621][T12467] do_splice_direct+0x174/0x240 [ 560.738649][T12467] ? __pfx_do_splice_direct+0x10/0x10 [ 560.738676][T12467] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 560.738723][T12467] ? bpf_lsm_file_permission+0x9/0x10 [ 560.738757][T12467] ? security_file_permission+0x71/0x210 [ 560.738788][T12467] ? rw_verify_area+0xcf/0x6c0 [ 560.738816][T12467] do_sendfile+0xb06/0xe50 [ 560.738850][T12467] ? __pfx_do_sendfile+0x10/0x10 [ 560.738878][T12467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 560.738923][T12467] ? __x64_sys_futex+0x1e0/0x4c0 [ 560.738961][T12467] ? __x64_sys_futex+0x1e9/0x4c0 [ 560.739004][T12467] __x64_sys_sendfile64+0x1d8/0x220 [ 560.739044][T12467] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 560.739091][T12467] do_syscall_64+0xcd/0xfa0 [ 560.739127][T12467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.739165][T12467] RIP: 0033:0x7fca5a18f6c9 [ 560.739187][T12467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.739216][T12467] RSP: 002b:00007fca5b104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 560.739244][T12467] RAX: ffffffffffffffda RBX: 00007fca5a3e5fa0 RCX: 00007fca5a18f6c9 [ 560.739263][T12467] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 560.739280][T12467] RBP: 00007fca5a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 560.739299][T12467] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 560.739322][T12467] R13: 00007fca5a3e6038 R14: 00007fca5a3e5fa0 R15: 00007ffc62cfe7d8 [ 560.739359][T12467] [ 560.939264][T12467] ICMPv6: process `syz.1.1471' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 562.125440][T12493] random: crng reseeded on system resumption [ 562.529925][T12504] tipc: Can't bind to reserved service type 1 [ 562.711064][T12508] FAULT_INJECTION: forcing a failure. [ 562.711064][T12508] name failslab, interval 1, probability 0, space 0, times 0 [ 562.786422][T12508] CPU: 1 UID: 0 PID: 12508 Comm: syz.1.1480 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 562.786491][T12508] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 562.786509][T12508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 562.786528][T12508] Call Trace: [ 562.786539][T12508] [ 562.786551][T12508] dump_stack_lvl+0x16c/0x1f0 [ 562.786594][T12508] should_fail_ex+0x512/0x640 [ 562.786640][T12508] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 562.786682][T12508] should_failslab+0xc2/0x120 [ 562.786725][T12508] __kvmalloc_node_noprof+0x141/0x9c0 [ 562.786774][T12508] ? seq_read_iter+0x830/0x12d0 [ 562.786831][T12508] ? seq_read_iter+0x830/0x12d0 [ 562.786878][T12508] seq_read_iter+0x830/0x12d0 [ 562.786953][T12508] seq_read+0x3a3/0x570 [ 562.787003][T12508] ? __pfx_seq_read+0x10/0x10 [ 562.787079][T12508] ? __pfx_seq_read+0x10/0x10 [ 562.787127][T12508] proc_reg_read+0x240/0x330 [ 562.787170][T12508] ? __pfx_proc_reg_read+0x10/0x10 [ 562.787217][T12508] vfs_read+0x1e4/0xcf0 [ 562.787257][T12508] ? __pfx___mutex_lock+0x10/0x10 [ 562.787297][T12508] ? __pfx_vfs_read+0x10/0x10 [ 562.787343][T12508] ? __fget_files+0x20e/0x3c0 [ 562.787387][T12508] ksys_read+0x12a/0x250 [ 562.787421][T12508] ? __pfx_ksys_read+0x10/0x10 [ 562.787473][T12508] do_syscall_64+0xcd/0xfa0 [ 562.787514][T12508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.787548][T12508] RIP: 0033:0x7fca5a18f6c9 [ 562.787572][T12508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.787604][T12508] RSP: 002b:00007fca5b104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.787634][T12508] RAX: ffffffffffffffda RBX: 00007fca5a3e5fa0 RCX: 00007fca5a18f6c9 [ 562.787656][T12508] RDX: 0000000000000093 RSI: 0000200000000040 RDI: 0000000000000003 [ 562.787676][T12508] RBP: 00007fca5b104090 R08: 0000000000000000 R09: 0000000000000000 [ 562.787696][T12508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.787716][T12508] R13: 00007fca5a3e6038 R14: 00007fca5a3e5fa0 R15: 00007ffc62cfe7d8 [ 562.787761][T12508] [ 564.751457][T12530] FAULT_INJECTION: forcing a failure. [ 564.751457][T12530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 564.828014][T12530] CPU: 1 UID: 0 PID: 12530 Comm: syz.4.1485 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 564.828066][T12530] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 564.828080][T12530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 564.828094][T12530] Call Trace: [ 564.828101][T12530] [ 564.828110][T12530] dump_stack_lvl+0x16c/0x1f0 [ 564.828141][T12530] should_fail_ex+0x512/0x640 [ 564.828182][T12530] should_fail_alloc_page+0xe7/0x130 [ 564.828217][T12530] prepare_alloc_pages+0x3c2/0x610 [ 564.828249][T12530] ? find_held_lock+0x2b/0x80 [ 564.828276][T12530] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 564.828303][T12530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 564.828345][T12530] ? mas_next_node+0x7e0/0xf50 [ 564.828380][T12530] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 564.828409][T12530] ? __pfx_mt_validate_nulls+0x10/0x10 [ 564.828454][T12530] ? __lock_acquire+0xb8a/0x1c90 [ 564.828486][T12530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 564.828536][T12530] ? policy_nodemask+0xea/0x4e0 [ 564.828570][T12530] alloc_pages_mpol+0x1fb/0x550 [ 564.828604][T12530] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 564.828645][T12530] folio_alloc_mpol_noprof+0x36/0x2f0 [ 564.828691][T12530] shmem_alloc_folio+0x135/0x160 [ 564.828744][T12530] shmem_alloc_and_add_folio+0x499/0xc20 [ 564.828809][T12530] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 564.828871][T12530] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 564.828915][T12530] shmem_get_folio_gfp+0x67f/0x1610 [ 564.828954][T12530] ? __lock_acquire+0xb8a/0x1c90 [ 564.828999][T12530] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 564.829033][T12530] ? find_held_lock+0x2b/0x80 [ 564.829074][T12530] shmem_fault+0x1fe/0xa30 [ 564.829110][T12530] ? __pfx_shmem_fault+0x10/0x10 [ 564.829150][T12530] ? finish_task_switch.isra.0+0x221/0xc10 [ 564.829198][T12530] ? __pfx_filemap_map_pages+0x10/0x10 [ 564.829228][T12530] __do_fault+0x10d/0x490 [ 564.829264][T12530] ? __pfx_filemap_map_pages+0x10/0x10 [ 564.829292][T12530] do_pte_missing+0x1a6/0x3ba0 [ 564.829341][T12530] ? find_held_lock+0x2b/0x80 [ 564.829374][T12530] ? __handle_mm_fault+0x1529/0x2aa0 [ 564.829427][T12530] __handle_mm_fault+0x1556/0x2aa0 [ 564.829479][T12530] ? mt_find+0x3e2/0xa20 [ 564.829531][T12530] ? __pfx___handle_mm_fault+0x10/0x10 [ 564.829579][T12530] ? __pfx_mt_find+0x10/0x10 [ 564.829642][T12530] ? find_vma+0xbf/0x140 [ 564.829677][T12530] ? __pfx_find_vma+0x10/0x10 [ 564.829718][T12530] handle_mm_fault+0x589/0xd10 [ 564.829767][T12530] ? __pkru_allows_pkey+0x21/0xb0 [ 564.829816][T12530] do_user_addr_fault+0x7a6/0x1370 [ 564.829849][T12530] ? rcu_is_watching+0x12/0xc0 [ 564.829889][T12530] exc_page_fault+0x64/0xc0 [ 564.829926][T12530] asm_exc_page_fault+0x26/0x30 [ 564.829957][T12530] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 564.830009][T12530] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 564.830043][T12530] RSP: 0018:ffffc90003dcfd88 EFLAGS: 00050216 [ 564.830071][T12530] RAX: 00000000000272db RBX: 0000000000000020 RCX: 0000000000000020 [ 564.830092][T12530] RDX: fffff520007b9fc1 RSI: ffffc90003dcfde8 RDI: 0000000000000000 [ 564.830113][T12530] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff520007b9fc0 [ 564.830133][T12530] R10: ffffc90003dcfe07 R11: 0000000000000001 R12: ffffc90003dcfde8 [ 564.830153][T12530] R13: 0000000000000020 R14: 00007ffffffff000 R15: 0000000000000000 [ 564.830197][T12530] _copy_to_user+0xbb/0xd0 [ 564.830251][T12530] __do_sys_ustat+0x1b4/0x1f0 [ 564.830299][T12530] ? __pfx___do_sys_ustat+0x10/0x10 [ 564.830376][T12530] ? rcu_is_watching+0x12/0xc0 [ 564.830415][T12530] do_syscall_64+0xcd/0xfa0 [ 564.830455][T12530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.830487][T12530] RIP: 0033:0x7ff42c38f6c9 [ 564.830521][T12530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.830554][T12530] RSP: 002b:00007ff42d301038 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 564.830584][T12530] RAX: ffffffffffffffda RBX: 00007ff42c5e5fa0 RCX: 00007ff42c38f6c9 [ 564.830606][T12530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 564.830626][T12530] RBP: 00007ff42c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 564.830646][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.830666][T12530] R13: 00007ff42c5e6038 R14: 00007ff42c5e5fa0 R15: 00007ffca44eff88 [ 564.830712][T12530] [ 565.554170][T12541] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1489'. [ 565.790988][T12541] netlink: zone id is out of range [ 565.807153][T12541] netlink: del zone limit has 4 unknown bytes [ 566.287904][T12557] random: crng reseeded on system resumption [ 566.452765][ T30] audit: type=1800 audit(4294967326.160:11): pid=12559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1492" name="discovery_nqn" dev="configfs" ino=38490 res=0 errno=0 [ 566.684765][T12564] FAULT_INJECTION: forcing a failure. [ 566.684765][T12564] name fail_futex, interval 1, probability 0, space 0, times 0 [ 566.698217][T12564] CPU: 0 UID: 0 PID: 12564 Comm: syz.2.1495 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 566.698268][T12564] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 566.698281][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.698329][T12564] Call Trace: [ 566.698336][T12564] [ 566.698345][T12564] dump_stack_lvl+0x16c/0x1f0 [ 566.698378][T12564] should_fail_ex+0x512/0x640 [ 566.698426][T12564] should_fail_futex+0x4c/0x60 [ 566.698457][T12564] futex_lock_pi_atomic+0x101/0xd50 [ 566.698500][T12564] futex_lock_pi+0x23f/0x7c0 [ 566.698605][T12564] ? __pfx_futex_lock_pi+0x10/0x10 [ 566.698648][T12564] ? __lock_acquire+0xb8a/0x1c90 [ 566.698705][T12564] ? find_held_lock+0x2b/0x80 [ 566.698733][T12564] ? __pfx_futex_wake_mark+0x10/0x10 [ 566.698787][T12564] do_futex+0x11a/0x350 [ 566.698820][T12564] ? __pfx_do_futex+0x10/0x10 [ 566.698860][T12564] __x64_sys_futex+0x1e0/0x4c0 [ 566.698897][T12564] ? __pfx___x64_sys_futex+0x10/0x10 [ 566.698941][T12564] do_syscall_64+0xcd/0xfa0 [ 566.698971][T12564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.698995][T12564] RIP: 0033:0x7f573318f6c9 [ 566.699014][T12564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.699038][T12564] RSP: 002b:00007f5734012038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 566.699060][T12564] RAX: ffffffffffffffda RBX: 00007f57333e5fa0 RCX: 00007f573318f6c9 [ 566.699076][T12564] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 566.699089][T12564] RBP: 00007f5733211f91 R08: 0000000000000000 R09: 000000008000fff5 [ 566.699103][T12564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.699117][T12564] R13: 00007f57333e6038 R14: 00007f57333e5fa0 R15: 00007ffcc4e05a78 [ 566.699147][T12564] [ 567.120550][ T1340] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1364 with max blocks 4 with error 117 [ 567.215344][ T1340] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.215344][ T1340] [ 567.392608][ T1340] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1347 with max blocks 24 with error 117 [ 567.463587][ T1340] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.463587][ T1340] [ 567.952312][T12580] futex_wake_op: syz.2.1496 tries to shift op by -2048; fix this program [ 568.158179][T12589] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[12589] [ 568.251041][T12587] zswap: compressor 5hHX^rROתWCn#ТڪeBHVQ.VdlM_ not available [ 568.298889][T12587] i2c i2c-0: new_device: Missing parameters [ 568.799882][T12587] i2c i2c-0: new_device: Missing parameters [ 571.662125][T12648] aoe: could not set interface list: too many interfaces [ 571.948277][T12653] FAULT_INJECTION: forcing a failure. [ 571.948277][T12653] name failslab, interval 1, probability 0, space 0, times 0 [ 571.975773][T12653] CPU: 0 UID: 0 PID: 12653 Comm: syz.1.1514 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 571.975842][T12653] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 571.975859][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 571.975877][T12653] Call Trace: [ 571.975887][T12653] [ 571.975898][T12653] dump_stack_lvl+0x16c/0x1f0 [ 571.975941][T12653] should_fail_ex+0x512/0x640 [ 571.975986][T12653] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 571.976032][T12653] should_failslab+0xc2/0x120 [ 571.976075][T12653] kmem_cache_alloc_noprof+0x75/0x6e0 [ 571.976106][T12653] ? taskstats_exit+0x654/0xbe0 [ 571.976164][T12653] ? taskstats_exit+0x654/0xbe0 [ 571.976211][T12653] ? acct_update_integrals+0x2ce/0x4a0 [ 571.976239][T12653] taskstats_exit+0x654/0xbe0 [ 571.976294][T12653] ? __pfx_taskstats_exit+0x10/0x10 [ 571.976348][T12653] ? exit_signals+0x38e/0xb40 [ 571.976388][T12653] do_exit+0x5dc/0x2bf0 [ 571.976441][T12653] ? __pfx_do_exit+0x10/0x10 [ 571.976484][T12653] ? do_raw_spin_lock+0x12c/0x2b0 [ 571.976531][T12653] ? find_held_lock+0x2b/0x80 [ 571.976570][T12653] do_group_exit+0xd3/0x2a0 [ 571.976615][T12653] get_signal+0x2671/0x26d0 [ 571.976659][T12653] ? do_vfs_ioctl+0x128/0x14f0 [ 571.976707][T12653] ? __pfx_get_signal+0x10/0x10 [ 571.976742][T12653] ? do_futex+0x122/0x350 [ 571.976786][T12653] ? __pfx_do_futex+0x10/0x10 [ 571.976834][T12653] arch_do_signal_or_restart+0x8f/0x790 [ 571.976876][T12653] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 571.976930][T12653] ? xfd_validate_state+0x61/0x180 [ 571.976985][T12653] exit_to_user_mode_loop+0x85/0x130 [ 571.977040][T12653] do_syscall_64+0x426/0xfa0 [ 571.977080][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.977112][T12653] RIP: 0033:0x7fca5a18f6c9 [ 571.977136][T12653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.977166][T12653] RSP: 002b:00007fca5b0c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 571.977195][T12653] RAX: fffffffffffffe00 RBX: 00007fca5a3e6188 RCX: 00007fca5a18f6c9 [ 571.977216][T12653] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fca5a3e6188 [ 571.977235][T12653] RBP: 00007fca5a3e6180 R08: 0000000000000000 R09: 0000000000000000 [ 571.977255][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.977273][T12653] R13: 00007fca5a3e6218 R14: 00007ffc62cfe6f0 R15: 00007ffc62cfe7d8 [ 571.977317][T12653] [ 572.808428][T12661] random: crng reseeded on system resumption [ 573.069682][ T5842] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6 [ 573.690382][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.704067][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.395592][T12662] delete_channel: no stack [ 575.025288][T12700] futex_wake_op: syz.2.1519 tries to shift op by -2048; fix this program [ 575.561542][T12707] ptrace attach of "./syz-executor exec"[5829] was attempted by ""[12707] [ 576.856518][T12721] FAULT_INJECTION: forcing a failure. [ 576.856518][T12721] name failslab, interval 1, probability 0, space 0, times 0 [ 576.869545][T12721] CPU: 1 UID: 0 PID: 12721 Comm: syz.4.1529 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 576.869622][T12721] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 576.869640][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 576.869658][T12721] Call Trace: [ 576.869668][T12721] [ 576.869680][T12721] dump_stack_lvl+0x16c/0x1f0 [ 576.869724][T12721] should_fail_ex+0x512/0x640 [ 576.869772][T12721] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 576.869815][T12721] should_failslab+0xc2/0x120 [ 576.869858][T12721] __kvmalloc_node_noprof+0x141/0x9c0 [ 576.869899][T12721] ? traverse.part.0.constprop.0+0x397/0x650 [ 576.869961][T12721] ? traverse.part.0.constprop.0+0x397/0x650 [ 576.870011][T12721] traverse.part.0.constprop.0+0x397/0x650 [ 576.870075][T12721] seq_read_iter+0x93c/0x12d0 [ 576.870143][T12721] seq_read+0x3a3/0x570 [ 576.870193][T12721] ? __pfx_seq_read+0x10/0x10 [ 576.870252][T12721] ? get_pid_task+0xfc/0x250 [ 576.870313][T12721] ? __pfx_seq_read+0x10/0x10 [ 576.870364][T12721] proc_reg_read+0x240/0x330 [ 576.870408][T12721] ? __pfx_proc_reg_read+0x10/0x10 [ 576.870454][T12721] vfs_read+0x1e4/0xcf0 [ 576.870496][T12721] ? __pfx_vfs_read+0x10/0x10 [ 576.870527][T12721] ? find_held_lock+0x2b/0x80 [ 576.870560][T12721] ? __fget_files+0x204/0x3c0 [ 576.870599][T12721] ? __fget_files+0x20e/0x3c0 [ 576.870764][T12721] ? __fget_files+0x1b0/0x3c0 [ 576.870804][T12721] __x64_sys_pread64+0x1eb/0x250 [ 576.870840][T12721] ? __pfx___x64_sys_pread64+0x10/0x10 [ 576.870886][T12721] do_syscall_64+0xcd/0xfa0 [ 576.870929][T12721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.870962][T12721] RIP: 0033:0x7ff42c38f6c9 [ 576.870989][T12721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.871021][T12721] RSP: 002b:00007ff42d2e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 576.871052][T12721] RAX: ffffffffffffffda RBX: 00007ff42c5e6090 RCX: 00007ff42c38f6c9 [ 576.871074][T12721] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000005 [ 576.871093][T12721] RBP: 00007ff42d2e0090 R08: 0000000000000000 R09: 0000000000000000 [ 576.871113][T12721] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 576.871133][T12721] R13: 00007ff42c5e6128 R14: 00007ff42c5e6090 R15: 00007ffca44eff88 [ 576.871178][T12721] [ 577.469798][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 577.533652][T12725] netlink: 'syz.2.1528': attribute type 7 has an invalid length. [ 579.326167][T12749] aoe: could not set interface list: too many interfaces [ 579.405354][T12749] FAULT_INJECTION: forcing a failure. [ 579.405354][T12749] name fail_futex, interval 1, probability 0, space 0, times 0 [ 579.491495][T12749] CPU: 0 UID: 0 PID: 12749 Comm: syz.1.1533 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 579.491570][T12749] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 579.491589][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 579.491608][T12749] Call Trace: [ 579.491619][T12749] [ 579.491630][T12749] dump_stack_lvl+0x16c/0x1f0 [ 579.491675][T12749] should_fail_ex+0x512/0x640 [ 579.491731][T12749] get_futex_key+0x1d0/0x1560 [ 579.491779][T12749] ? __pfx_get_futex_key+0x10/0x10 [ 579.491826][T12749] ? __pfx_cec_ioctl+0x10/0x10 [ 579.491870][T12749] futex_wake+0xea/0x530 [ 579.491924][T12749] ? __pfx_futex_wake+0x10/0x10 [ 579.491986][T12749] ? do_vfs_ioctl+0x128/0x14f0 [ 579.492040][T12749] do_futex+0x1e3/0x350 [ 579.492086][T12749] ? __pfx_do_futex+0x10/0x10 [ 579.492132][T12749] ? rcu_is_watching+0x12/0xc0 [ 579.492172][T12749] __x64_sys_futex+0x1e0/0x4c0 [ 579.492224][T12749] ? __pfx___x64_sys_futex+0x10/0x10 [ 579.492288][T12749] do_syscall_64+0xcd/0xfa0 [ 579.492340][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.492374][T12749] RIP: 0033:0x7fca5a18f6c9 [ 579.492399][T12749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.492431][T12749] RSP: 002b:00007fca5b0e30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 579.492461][T12749] RAX: ffffffffffffffda RBX: 00007fca5a3e6098 RCX: 00007fca5a18f6c9 [ 579.492482][T12749] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fca5a3e609c [ 579.492503][T12749] RBP: 00007fca5a3e6090 R08: 00007fca5b105000 R09: 0000000000000000 [ 579.492525][T12749] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 579.492546][T12749] R13: 00007fca5a3e6128 R14: 00007ffc62cfe6f0 R15: 00007ffc62cfe7d8 [ 579.492591][T12749] [ 580.315346][T12768] __vm_enough_memory: pid: 12768, comm: syz.2.1537, bytes: 4398046511104 not enough memory for the allocation [ 581.069929][T12784] binder: 12783:12784 ioctl c018620c 0 returned -22 [ 583.016005][T12811] FAULT_INJECTION: forcing a failure. [ 583.016005][T12811] name fail_futex, interval 1, probability 0, space 0, times 0 [ 583.081252][T12811] CPU: 0 UID: 0 PID: 12811 Comm: syz.0.1547 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 583.081324][T12811] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 583.081343][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 583.081362][T12811] Call Trace: [ 583.081373][T12811] [ 583.081385][T12811] dump_stack_lvl+0x16c/0x1f0 [ 583.081428][T12811] should_fail_ex+0x512/0x640 [ 583.081486][T12811] get_futex_key+0x1d0/0x1560 [ 583.081536][T12811] ? __pfx_get_futex_key+0x10/0x10 [ 583.081583][T12811] ? __lock_acquire+0x622/0x1c90 [ 583.081635][T12811] futex_wake+0xea/0x530 [ 583.081684][T12811] ? futex_wait+0x120/0x380 [ 583.081740][T12811] ? __pfx_futex_wake+0x10/0x10 [ 583.081800][T12811] ? __fget_files+0x204/0x3c0 [ 583.081843][T12811] do_futex+0x1e3/0x350 [ 583.081889][T12811] ? __pfx_do_futex+0x10/0x10 [ 583.081944][T12811] ? fdget+0x187/0x210 [ 583.081976][T12811] ? __sys_sendmsg+0x18c/0x220 [ 583.082013][T12811] __x64_sys_futex+0x1e0/0x4c0 [ 583.082065][T12811] ? __pfx___x64_sys_futex+0x10/0x10 [ 583.082133][T12811] do_syscall_64+0xcd/0xfa0 [ 583.082175][T12811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.082208][T12811] RIP: 0033:0x7feee178f6c9 [ 583.082235][T12811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.082267][T12811] RSP: 002b:00007feee26960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 583.082299][T12811] RAX: ffffffffffffffda RBX: 00007feee19e5fa8 RCX: 00007feee178f6c9 [ 583.082321][T12811] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feee19e5fac [ 583.082342][T12811] RBP: 00007feee19e5fa0 R08: 00007feee2697000 R09: 0000000000000000 [ 583.082363][T12811] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 583.082384][T12811] R13: 00007feee19e6038 R14: 00007fff44ebab90 R15: 00007fff44ebac78 [ 583.082429][T12811] [ 584.342778][ T5842] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 584.986373][T12815] kexec: Could not allocate control_code_buffer [ 585.249420][T12832] zswap: compressor 000 not available [ 585.833724][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 586.412291][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 586.463558][T12870] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 586.963594][T12884] vivid-007: ================= START STATUS ================= [ 586.973471][T12869] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78001 [ 587.049605][T12884] vivid-007: Generate PTS: true [ 587.104566][T12884] vivid-007: Generate SCR: true [ 587.122262][T12869] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 587.129679][T12869] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 587.139152][T12869] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 587.148140][T12869] page dumped because: unmovable page [ 587.153905][T12869] page_owner tracks the page as allocated [ 587.161549][T12869] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 7744, tgid 7740 (syz.1.423), ts 239297985092, free_ts 218184187062 [ 587.179695][T12884] tpg source WxH: 320x240 (Y'CbCr) [ 587.179746][T12884] tpg field: 1 [ 587.179759][T12884] tpg crop: (0,0)/320x240 [ 587.179780][T12884] tpg compose: (0,0)/320x240 [ 587.179802][T12884] tpg colorspace: 8 [ 587.179815][T12884] tpg transfer function: 0/0 [ 587.179831][T12884] tpg Y'CbCr encoding: 0/0 [ 587.179847][T12884] tpg quantization: 0/0 [ 587.179862][T12884] tpg RGB range: 0/2 [ 587.179878][T12884] vivid-007: ================== END STATUS ================== [ 587.229443][T12873] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 587.332761][T12869] post_alloc_hook+0x1c0/0x230 [ 587.351207][T12869] get_page_from_freelist+0x10a3/0x3a30 [ 587.373498][T12869] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 587.403346][T12869] alloc_pages_mpol+0x1fb/0x550 [ 587.485902][T12869] alloc_pages_noprof+0x131/0x390 [ 587.492986][T12869] brd_submit_bio+0x11ce/0x2490 [ 587.539714][T12869] __submit_bio+0x304/0x690 [ 587.560264][T12889] vivid-007: ================= START STATUS ================= [ 587.570006][T12869] submit_bio_noacct_nocheck+0x75c/0xc10 [ 587.603436][T12869] submit_bio_noacct+0x5bd/0x1f60 [ 587.609100][T12889] vivid-007: Generate PTS: true [ 587.622965][T12869] blkdev_direct_IO+0x14e7/0x2100 [ 587.628171][T12869] blkdev_write_iter+0x703/0xe00 [ 587.634069][T12869] vfs_write+0x7d3/0x11d0 [ 587.639600][T12889] vivid-007: Generate SCR: true [ 587.639663][T12869] ksys_write+0x12a/0x250 [ 587.649180][T12889] [ 587.652879][T12869] do_syscall_64+0xcd/0xfa0 [ 587.657448][T12869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.665719][T12889] tpg source WxH: 320x240 (Y'CbCr) [ 587.671288][T12889] tpg field: 1 [ 587.676714][T12889] tpg crop: (0,0)/320x240 [ 587.681529][T12889] tpg compose: (0,0)/320x240 [ 587.689743][T12889] tpg colorspace: 8 [ 587.693866][T12889] tpg transfer function: 0/0 [ 587.698604][T12889] tpg Y'CbCr encoding: 0/0 [ 587.703337][T12889] tpg quantization: 0/0 [ 587.707879][T12889] tpg RGB range: 0/2 [ 587.711931][T12889] vivid-007: ================== END STATUS ================== [ 587.719833][T12869] page last free pid 7467 tgid 7465 stack trace: [ 587.726831][T12869] __free_frozen_pages+0x7df/0x1160 [ 587.732218][T12869] kimage_free+0x23c/0x590 [ 587.736895][T12869] do_kexec_load+0x5c5/0x8a0 [ 587.741559][T12869] __x64_sys_kexec_load+0x1bf/0x230 [ 587.747102][T12869] do_syscall_64+0xcd/0xfa0 [ 587.751673][T12869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.431007][T12900] aoe: could not set interface list: too many interfaces [ 588.717852][T12902] FAULT_INJECTION: forcing a failure. [ 588.717852][T12902] name fail_futex, interval 1, probability 0, space 0, times 0 [ 588.733684][T12902] CPU: 0 UID: 0 PID: 12902 Comm: syz.2.1565 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 588.733753][T12902] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 588.733771][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 588.733789][T12902] Call Trace: [ 588.733799][T12902] [ 588.733811][T12902] dump_stack_lvl+0x16c/0x1f0 [ 588.733854][T12902] should_fail_ex+0x512/0x640 [ 588.733907][T12902] get_futex_key+0x1d0/0x1560 [ 588.733955][T12902] ? __pfx_get_futex_key+0x10/0x10 [ 588.733996][T12902] ? __mutex_trylock_common+0xe9/0x250 [ 588.734054][T12902] futex_wake+0xea/0x530 [ 588.734118][T12902] ? __pfx_futex_wake+0x10/0x10 [ 588.734165][T12902] ? __lock_acquire+0xb8a/0x1c90 [ 588.734229][T12902] do_futex+0x1e3/0x350 [ 588.734273][T12902] ? __pfx_do_futex+0x10/0x10 [ 588.734312][T12902] ? __might_fault+0xe3/0x190 [ 588.734355][T12902] mm_release+0x24e/0x300 [ 588.734392][T12902] do_exit+0x68e/0x2bf0 [ 588.734444][T12902] ? __pfx_do_exit+0x10/0x10 [ 588.734487][T12902] ? do_raw_spin_lock+0x12c/0x2b0 [ 588.734535][T12902] ? find_held_lock+0x2b/0x80 [ 588.734573][T12902] do_group_exit+0xd3/0x2a0 [ 588.734621][T12902] get_signal+0x2671/0x26d0 [ 588.734665][T12902] ? do_vfs_ioctl+0x128/0x14f0 [ 588.734713][T12902] ? __pfx_get_signal+0x10/0x10 [ 588.734747][T12902] ? do_futex+0x122/0x350 [ 588.734791][T12902] ? __pfx_do_futex+0x10/0x10 [ 588.734838][T12902] arch_do_signal_or_restart+0x8f/0x790 [ 588.734879][T12902] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 588.734930][T12902] ? xfd_validate_state+0x61/0x180 [ 588.734985][T12902] exit_to_user_mode_loop+0x85/0x130 [ 588.735036][T12902] do_syscall_64+0x426/0xfa0 [ 588.735077][T12902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.735115][T12902] RIP: 0033:0x7f573318f6c9 [ 588.735141][T12902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.735172][T12902] RSP: 002b:00007f5733fd00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 588.735202][T12902] RAX: fffffffffffffe00 RBX: 00007f57333e6188 RCX: 00007f573318f6c9 [ 588.735224][T12902] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f57333e6188 [ 588.735243][T12902] RBP: 00007f57333e6180 R08: 0000000000000000 R09: 0000000000000000 [ 588.735263][T12902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.735283][T12902] R13: 00007f57333e6218 R14: 00007ffcc4e05990 R15: 00007ffcc4e05a78 [ 588.735327][T12902] [ 589.283067][T12913] futex_wake_op: syz.4.1563 tries to shift op by -2048; fix this program [ 589.334194][T12915] FAULT_INJECTION: forcing a failure. [ 589.334194][T12915] name failslab, interval 1, probability 0, space 0, times 0 [ 589.444246][T12915] CPU: 1 UID: 0 PID: 12915 Comm: syz.0.1567 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 589.444328][T12915] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 589.444347][T12915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.444367][T12915] Call Trace: [ 589.444377][T12915] [ 589.444391][T12915] dump_stack_lvl+0x16c/0x1f0 [ 589.444436][T12915] should_fail_ex+0x512/0x640 [ 589.444486][T12915] ? __kmalloc_cache_noprof+0x5f/0x780 [ 589.444544][T12915] should_failslab+0xc2/0x120 [ 589.444587][T12915] __kmalloc_cache_noprof+0x72/0x780 [ 589.444640][T12915] ? do_raw_spin_unlock+0x172/0x230 [ 589.444690][T12915] ? snd_rawmidi_open+0x3c3/0xbf0 [ 589.444748][T12915] ? snd_rawmidi_open+0x3c3/0xbf0 [ 589.444797][T12915] snd_rawmidi_open+0x3c3/0xbf0 [ 589.444856][T12915] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 589.444918][T12915] ? kobject_get_unless_zero+0x156/0x1e0 [ 589.444967][T12915] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 589.445016][T12915] snd_open+0x22d/0x4c0 [ 589.445057][T12915] ? __pfx_snd_open+0x10/0x10 [ 589.445096][T12915] chrdev_open+0x234/0x6a0 [ 589.445135][T12915] ? __pfx_apparmor_file_open+0x10/0x10 [ 589.445185][T12915] ? __pfx_chrdev_open+0x10/0x10 [ 589.445227][T12915] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 589.445272][T12915] do_dentry_open+0x982/0x1530 [ 589.445320][T12915] ? __pfx_chrdev_open+0x10/0x10 [ 589.445369][T12915] vfs_open+0x82/0x3f0 [ 589.445423][T12915] path_openat+0x1de4/0x2cb0 [ 589.445473][T12915] ? __pfx_path_openat+0x10/0x10 [ 589.445513][T12915] ? __lock_acquire+0xb8a/0x1c90 [ 589.445564][T12915] do_filp_open+0x20b/0x470 [ 589.445601][T12915] ? __pfx_do_filp_open+0x10/0x10 [ 589.445668][T12915] ? alloc_fd+0x471/0x7d0 [ 589.445713][T12915] do_sys_openat2+0x11b/0x1d0 [ 589.445762][T12915] ? __pfx_do_sys_openat2+0x10/0x10 [ 589.445826][T12915] __x64_sys_openat+0x174/0x210 [ 589.445875][T12915] ? __pfx___x64_sys_openat+0x10/0x10 [ 589.445940][T12915] do_syscall_64+0xcd/0xfa0 [ 589.445982][T12915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.446015][T12915] RIP: 0033:0x7feee178f6c9 [ 589.446042][T12915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.446077][T12915] RSP: 002b:00007feee2675038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 589.446109][T12915] RAX: ffffffffffffffda RBX: 00007feee19e6090 RCX: 00007feee178f6c9 [ 589.446130][T12915] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 589.446152][T12915] RBP: 00007feee1811f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.446172][T12915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.446193][T12915] R13: 00007feee19e6128 R14: 00007feee19e6090 R15: 00007fff44ebac78 [ 589.446239][T12915] [ 590.234931][T12921] vivid-007: ================= START STATUS ================= [ 590.263508][T12921] vivid-007: Generate PTS: true [ 590.274803][T12921] vivid-007: Generate SCR: true [ 590.326800][T12921] tpg source WxH: 320x240 (Y'CbCr) [ 590.342356][T12921] tpg field: 1 [ 590.349719][T12921] tpg crop: (0,0)/320x240 [ 590.403689][T12921] tpg compose: (0,0)/320x240 [ 590.425317][T12921] tpg colorspace: 8 [ 590.440119][T12921] tpg transfer function: 0/0 [ 590.460964][T12921] tpg Y'CbCr encoding: 0/0 [ 590.483203][T12921] tpg quantization: 0/0 [ 590.505520][T12921] tpg RGB range: 0/2 [ 590.535453][T12921] vivid-007: ================== END STATUS ================== [ 593.008994][T12963] vivid-007: ================= START STATUS ================= [ 593.089024][T12963] vivid-007: Generate PTS: true [ 593.126623][T12963] vivid-007: Generate SCR: true [ 593.183273][T12963] tpg source WxH: 320x240 (Y'CbCr) [ 593.207734][T12963] tpg field: 1 [ 593.316338][T12963] tpg crop: (0,0)/320x240 [ 593.329647][T12963] tpg compose: (0,0)/320x240 [ 593.345741][T12963] tpg colorspace: 8 [ 593.375809][T12963] tpg transfer function: 0/0 [ 593.408318][T12963] tpg Y'CbCr encoding: 0/0 [ 593.475805][T12963] tpg quantization: 0/0 [ 593.483919][T12963] tpg RGB range: 0/2 [ 593.504125][T12963] vivid-007: ================== END STATUS ================== [ 594.501124][T12990] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 594.623077][T12999] FAULT_INJECTION: forcing a failure. [ 594.623077][T12999] name failslab, interval 1, probability 0, space 0, times 0 [ 594.654462][T12999] CPU: 1 UID: 0 PID: 12999 Comm: syz.0.1590 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 594.654551][T12999] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 594.654571][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 594.654592][T12999] Call Trace: [ 594.654604][T12999] [ 594.654618][T12999] dump_stack_lvl+0x16c/0x1f0 [ 594.654665][T12999] should_fail_ex+0x512/0x640 [ 594.654725][T12999] should_failslab+0xc2/0x120 [ 594.654777][T12999] __kmalloc_cache_noprof+0x72/0x780 [ 594.654835][T12999] ? __pfx___might_resched+0x10/0x10 [ 594.654874][T12999] ? nfc_genl_rcv_nl_event+0xc1/0x2e0 [ 594.654932][T12999] ? nfc_genl_rcv_nl_event+0xc1/0x2e0 [ 594.654981][T12999] nfc_genl_rcv_nl_event+0xc1/0x2e0 [ 594.655035][T12999] notifier_call_chain+0xbc/0x410 [ 594.655080][T12999] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 594.655142][T12999] blocking_notifier_call_chain+0x69/0xa0 [ 594.655196][T12999] netlink_release+0x16cf/0x2080 [ 594.655245][T12999] ? netlink_release+0x1e4/0x2080 [ 594.655284][T12999] ? __pfx_netlink_release+0x10/0x10 [ 594.655326][T12999] ? __pfx_locks_remove_file+0x10/0x10 [ 594.655367][T12999] __sock_release+0xb3/0x270 [ 594.655407][T12999] ? __pfx_sock_close+0x10/0x10 [ 594.655439][T12999] sock_close+0x1c/0x30 [ 594.655472][T12999] __fput+0x402/0xb70 [ 594.655531][T12999] ? _raw_spin_unlock_irq+0x23/0x50 [ 594.655575][T12999] task_work_run+0x150/0x240 [ 594.655633][T12999] ? __pfx_task_work_run+0x10/0x10 [ 594.655691][T12999] ? __pfx___do_sys_close_range+0x10/0x10 [ 594.655740][T12999] exit_to_user_mode_loop+0xec/0x130 [ 594.655797][T12999] do_syscall_64+0x426/0xfa0 [ 594.655843][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.655879][T12999] RIP: 0033:0x7feee178f6c9 [ 594.655907][T12999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.655942][T12999] RSP: 002b:00007feee2675038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 594.655974][T12999] RAX: 0000000000000000 RBX: 00007feee19e6090 RCX: 00007feee178f6c9 [ 594.655996][T12999] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 594.656016][T12999] RBP: 00007feee1811f91 R08: 0000000000000000 R09: 0000000000000000 [ 594.656036][T12999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.656056][T12999] R13: 00007feee19e6128 R14: 00007feee19e6090 R15: 00007fff44ebac78 [ 594.656101][T12999] [ 595.367154][T13002] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1591'. [ 595.474692][T13006] vivid-007: ================= START STATUS ================= [ 595.577541][T13006] vivid-007: Generate PTS: true [ 595.624613][T13006] vivid-007: Generate SCR: true [ 595.666651][T13006] tpg source WxH: 320x240 (Y'CbCr) [ 595.714408][T13006] tpg field: 1 [ 595.717979][T13006] tpg crop: (0,0)/320x240 [ 595.722468][T13006] tpg compose: (0,0)/320x240 [ 595.729596][T13006] tpg colorspace: 8 [ 595.737139][T13006] tpg transfer function: 0/0 [ 595.741989][T13006] tpg Y'CbCr encoding: 0/0 [ 595.746568][T13006] tpg quantization: 0/0 [ 595.751282][T13006] tpg RGB range: 0/2 [ 595.755401][T13006] vivid-007: ================== END STATUS ================== [ 596.123214][T13025] FAULT_INJECTION: forcing a failure. [ 596.123214][T13025] name failslab, interval 1, probability 0, space 0, times 0 [ 596.151718][T13025] CPU: 0 UID: 0 PID: 13025 Comm: syz.0.1598 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 596.151787][T13025] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 596.151806][T13025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 596.151825][T13025] Call Trace: [ 596.151835][T13025] [ 596.151848][T13025] dump_stack_lvl+0x16c/0x1f0 [ 596.151891][T13025] should_fail_ex+0x512/0x640 [ 596.151939][T13025] ? __kmalloc_noprof+0xca/0x880 [ 596.151988][T13025] should_failslab+0xc2/0x120 [ 596.152024][T13025] __kmalloc_noprof+0xdd/0x880 [ 596.152068][T13025] ? kobject_get_path+0xd2/0x2a0 [ 596.152108][T13025] ? kobject_get_path+0xd2/0x2a0 [ 596.152139][T13025] kobject_get_path+0xd2/0x2a0 [ 596.152179][T13025] input_register_device+0x91b/0x1180 [ 596.152211][T13025] ? input_ff_create+0x256/0x350 [ 596.152252][T13025] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 596.152296][T13025] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 596.152340][T13025] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 596.152388][T13025] ? find_held_lock+0x2b/0x80 [ 596.152445][T13025] ? __pfx_uinput_ioctl+0x10/0x10 [ 596.152487][T13025] __x64_sys_ioctl+0x18e/0x210 [ 596.152530][T13025] do_syscall_64+0xcd/0xfa0 [ 596.152566][T13025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.152595][T13025] RIP: 0033:0x7feee178f6c9 [ 596.152619][T13025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.152654][T13025] RSP: 002b:00007feee2696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.152684][T13025] RAX: ffffffffffffffda RBX: 00007feee19e5fa0 RCX: 00007feee178f6c9 [ 596.152704][T13025] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 596.152723][T13025] RBP: 00007feee1811f91 R08: 0000000000000000 R09: 0000000000000000 [ 596.152742][T13025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.152761][T13025] R13: 00007feee19e6038 R14: 00007feee19e5fa0 R15: 00007fff44ebac78 [ 596.152802][T13025] [ 596.154727][T13025] input: jJǸ;9%vlQ J86 as N/A [ 596.404823][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 597.327680][T13054] vivid-007: ================= START STATUS ================= [ 597.353635][T13054] vivid-007: Generate PTS: true [ 597.383456][T13054] vivid-007: Generate SCR: true [ 597.398136][T13054] tpg source WxH: 320x240 (Y'CbCr) [ 597.471998][T13054] tpg field: 1 [ 597.481281][T13054] tpg crop: (0,0)/320x240 [ 597.502754][T13054] tpg compose: (0,0)/320x240 [ 597.517952][T13054] tpg colorspace: 8 [ 597.531018][T13054] tpg transfer function: 0/0 [ 597.571750][T13054] tpg Y'CbCr encoding: 0/0 [ 597.611081][T13054] tpg quantization: 0/0 [ 597.615803][T13054] tpg RGB range: 0/2 [ 597.620887][T13054] vivid-007: ================== END STATUS ================== [ 598.298599][T13071] futex_wake_op: syz.4.1610 tries to shift op by -2048; fix this program [ 598.307961][T13071] 0x000000000001-0x000000020000 : "" [ 598.418649][T13071] ftl_cs: FTL header corrupt! [ 599.293613][T13085] random: crng reseeded on system resumption [ 599.749755][T13106] aoe: could not set interface list: too many interfaces [ 599.852783][T13113] FAULT_INJECTION: forcing a failure. [ 599.852783][T13113] name fail_futex, interval 1, probability 0, space 0, times 0 [ 599.866052][T13113] CPU: 1 UID: 0 PID: 13113 Comm: syz.1.1619 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 599.866126][T13113] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 599.866146][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 599.866166][T13113] Call Trace: [ 599.866178][T13113] [ 599.866190][T13113] dump_stack_lvl+0x16c/0x1f0 [ 599.866244][T13113] should_fail_ex+0x512/0x640 [ 599.866293][T13113] ? __lock_acquire+0xb8a/0x1c90 [ 599.866341][T13113] get_futex_key+0x1d0/0x1560 [ 599.866389][T13113] ? __pfx_get_futex_key+0x10/0x10 [ 599.866429][T13113] ? do_raw_spin_lock+0x12c/0x2b0 [ 599.866483][T13113] ? find_held_lock+0x2b/0x80 [ 599.866524][T13113] futex_wait_setup+0x9d/0x550 [ 599.866588][T13113] __futex_wait+0x193/0x2f0 [ 599.866642][T13113] ? __pfx___futex_wait+0x10/0x10 [ 599.866692][T13113] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 599.866727][T13113] ? lockdep_hardirqs_on+0x7c/0x110 [ 599.866770][T13113] ? __pfx_futex_wake_mark+0x10/0x10 [ 599.866825][T13113] ? find_held_lock+0x2b/0x80 [ 599.866864][T13113] ? futex_private_hash_put+0xd5/0x190 [ 599.866909][T13113] futex_wait+0xe8/0x380 [ 599.866960][T13113] ? __pfx_futex_wait+0x10/0x10 [ 599.867038][T13113] ? do_vfs_ioctl+0x128/0x14f0 [ 599.867093][T13113] do_futex+0x229/0x350 [ 599.867139][T13113] ? __pfx_do_futex+0x10/0x10 [ 599.867186][T13113] ? find_held_lock+0x2b/0x80 [ 599.867231][T13113] __x64_sys_futex+0x1e0/0x4c0 [ 599.867283][T13113] ? __pfx___x64_sys_futex+0x10/0x10 [ 599.867334][T13113] ? fput+0x9b/0xd0 [ 599.867382][T13113] do_syscall_64+0xcd/0xfa0 [ 599.867424][T13113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.867457][T13113] RIP: 0033:0x7fca5a18f6c9 [ 599.867483][T13113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.867515][T13113] RSP: 002b:00007fca5b0c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 599.867545][T13113] RAX: ffffffffffffffda RBX: 00007fca5a3e6188 RCX: 00007fca5a18f6c9 [ 599.867567][T13113] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fca5a3e6188 [ 599.867587][T13113] RBP: 00007fca5a3e6180 R08: 0000000000000000 R09: 0000000000000000 [ 599.867608][T13113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.867627][T13113] R13: 00007fca5a3e6218 R14: 00007ffc62cfe6f0 R15: 00007ffc62cfe7d8 [ 599.867672][T13113] [ 600.644062][T13125] Invalid ELF header magic: != ELF [ 601.527584][T13138] FAULT_INJECTION: forcing a failure. [ 601.527584][T13138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 601.569997][T13138] CPU: 0 UID: 0 PID: 13138 Comm: syz.1.1624 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 601.570065][T13138] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 601.570083][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 601.570103][T13138] Call Trace: [ 601.570115][T13138] [ 601.570129][T13138] dump_stack_lvl+0x16c/0x1f0 [ 601.570181][T13138] should_fail_ex+0x512/0x640 [ 601.570241][T13138] should_fail_alloc_page+0xe7/0x130 [ 601.570290][T13138] prepare_alloc_pages+0x3c2/0x610 [ 601.570336][T13138] ? rcu_is_watching+0x12/0xc0 [ 601.570377][T13138] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 601.570417][T13138] ? __lock_acquire+0xb8a/0x1c90 [ 601.570482][T13138] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 601.570519][T13138] ? do_raw_spin_lock+0x12c/0x2b0 [ 601.570572][T13138] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 601.570624][T13138] ? find_held_lock+0x2b/0x80 [ 601.570672][T13138] ? __lock_acquire+0xb8a/0x1c90 [ 601.570717][T13138] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 601.570775][T13138] ? policy_nodemask+0xea/0x4e0 [ 601.570822][T13138] alloc_pages_mpol+0x1fb/0x550 [ 601.570870][T13138] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 601.570938][T13138] folio_alloc_mpol_noprof+0x36/0x2f0 [ 601.570993][T13138] shmem_alloc_folio+0x135/0x160 [ 601.571046][T13138] shmem_alloc_and_add_folio+0x499/0xc20 [ 601.571112][T13138] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 601.571172][T13138] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 601.571217][T13138] shmem_get_folio_gfp+0x67f/0x1610 [ 601.571262][T13138] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 601.571299][T13138] ? __pfx_timestamp_truncate+0x10/0x10 [ 601.571345][T13138] shmem_fault+0x1fe/0xa30 [ 601.571382][T13138] ? __pfx_shmem_fault+0x10/0x10 [ 601.571422][T13138] ? __pfx___up_read+0x10/0x10 [ 601.571470][T13138] ? inode_to_bdi+0x9e/0x160 [ 601.571518][T13138] ? __pfx_filemap_map_pages+0x10/0x10 [ 601.571549][T13138] __do_fault+0x10d/0x490 [ 601.571586][T13138] ? __pfx_filemap_map_pages+0x10/0x10 [ 601.571615][T13138] do_pte_missing+0x1a6/0x3ba0 [ 601.571667][T13138] ? find_held_lock+0x2b/0x80 [ 601.571702][T13138] ? __handle_mm_fault+0x1529/0x2aa0 [ 601.571759][T13138] __handle_mm_fault+0x1556/0x2aa0 [ 601.571823][T13138] ? __pfx___handle_mm_fault+0x10/0x10 [ 601.571877][T13138] ? __pte_offset_map_lock+0x174/0x310 [ 601.571928][T13138] ? find_held_lock+0x2b/0x80 [ 601.571975][T13138] ? follow_page_pte+0x5cf/0x1390 [ 601.572029][T13138] handle_mm_fault+0x589/0xd10 [ 601.572090][T13138] __get_user_pages+0x54e/0x3530 [ 601.572149][T13138] ? down_read_killable+0x220/0x4b0 [ 601.572200][T13138] ? __pfx___get_user_pages+0x10/0x10 [ 601.572258][T13138] faultin_page_range+0x338/0x940 [ 601.572314][T13138] madvise_do_behavior+0x34c/0x530 [ 601.572365][T13138] ? __pfx_madvise_do_behavior+0x10/0x10 [ 601.572414][T13138] ? down_read+0x13d/0x480 [ 601.572463][T13138] ? __pfx_vfs_writev+0x10/0x10 [ 601.572495][T13138] ? __mutex_lock+0x1c5/0x1060 [ 601.572547][T13138] do_madvise+0x176/0x240 [ 601.572593][T13138] ? __pfx_do_madvise+0x10/0x10 [ 601.572639][T13138] ? do_futex+0x122/0x350 [ 601.572713][T13138] ? xfd_validate_state+0x61/0x180 [ 601.572758][T13138] ? __pfx_do_writev+0x10/0x10 [ 601.572799][T13138] __x64_sys_madvise+0xa9/0x110 [ 601.572847][T13138] ? lockdep_hardirqs_on+0x7c/0x110 [ 601.572887][T13138] do_syscall_64+0xcd/0xfa0 [ 601.572936][T13138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.572971][T13138] RIP: 0033:0x7fca5a18f6c9 [ 601.573000][T13138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.573034][T13138] RSP: 002b:00007fca5b104038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 601.573067][T13138] RAX: ffffffffffffffda RBX: 00007fca5a3e5fa0 RCX: 00007fca5a18f6c9 [ 601.573090][T13138] RDX: 0000000000000017 RSI: 0000000000100000 RDI: 0000000000000000 [ 601.573111][T13138] RBP: 00007fca5a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 601.573133][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.573154][T13138] R13: 00007fca5a3e6038 R14: 00007fca5a3e5fa0 R15: 00007ffc62cfe7d8 [ 601.573201][T13138] [ 602.771186][T13127] Process accounting resumed [ 603.063024][T13150] futex_wake_op: syz.2.1625 tries to shift op by -2048; fix this program [ 603.280504][T13159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1629'. [ 603.808185][T13168] futex_wake_op: syz.0.1628 tries to shift op by -2048; fix this program [ 604.136326][T13178] FAULT_INJECTION: forcing a failure. [ 604.136326][T13178] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 604.162354][T13178] CPU: 0 UID: 0 PID: 13178 Comm: syz.2.1632 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 604.162426][T13178] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 604.162445][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 604.162465][T13178] Call Trace: [ 604.162476][T13178] [ 604.162489][T13178] dump_stack_lvl+0x16c/0x1f0 [ 604.162534][T13178] should_fail_ex+0x512/0x640 [ 604.162599][T13178] should_fail_alloc_page+0xe7/0x130 [ 604.162648][T13178] prepare_alloc_pages+0x3c2/0x610 [ 604.162697][T13178] ? rcu_is_watching+0x12/0xc0 [ 604.162737][T13178] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 604.162776][T13178] ? __lock_acquire+0xb8a/0x1c90 [ 604.162838][T13178] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 604.162871][T13178] ? do_raw_spin_lock+0x12c/0x2b0 [ 604.162923][T13178] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 604.162974][T13178] ? find_held_lock+0x2b/0x80 [ 604.163021][T13178] ? __lock_acquire+0xb8a/0x1c90 [ 604.163064][T13178] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 604.163125][T13178] ? policy_nodemask+0xea/0x4e0 [ 604.163175][T13178] alloc_pages_mpol+0x1fb/0x550 [ 604.163224][T13178] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 604.163280][T13178] folio_alloc_mpol_noprof+0x36/0x2f0 [ 604.163336][T13178] shmem_alloc_folio+0x135/0x160 [ 604.163387][T13178] shmem_alloc_and_add_folio+0x499/0xc20 [ 604.163454][T13178] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 604.163513][T13178] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 604.163559][T13178] shmem_get_folio_gfp+0x67f/0x1610 [ 604.163613][T13178] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 604.163651][T13178] ? __pfx_timestamp_truncate+0x10/0x10 [ 604.163699][T13178] shmem_fault+0x1fe/0xa30 [ 604.163736][T13178] ? __pfx_shmem_fault+0x10/0x10 [ 604.163779][T13178] ? __pfx___up_read+0x10/0x10 [ 604.163827][T13178] ? inode_to_bdi+0x9e/0x160 [ 604.163875][T13178] ? __pfx_filemap_map_pages+0x10/0x10 [ 604.163906][T13178] __do_fault+0x10d/0x490 [ 604.163945][T13178] ? __pfx_filemap_map_pages+0x10/0x10 [ 604.163975][T13178] do_pte_missing+0x1a6/0x3ba0 [ 604.164028][T13178] ? find_held_lock+0x2b/0x80 [ 604.164064][T13178] ? __handle_mm_fault+0x1529/0x2aa0 [ 604.164122][T13178] __handle_mm_fault+0x1556/0x2aa0 [ 604.164186][T13178] ? __pfx___handle_mm_fault+0x10/0x10 [ 604.164242][T13178] ? __pte_offset_map_lock+0x174/0x310 [ 604.164285][T13178] ? find_held_lock+0x2b/0x80 [ 604.164332][T13178] ? follow_page_pte+0x5cf/0x1390 [ 604.164385][T13178] handle_mm_fault+0x589/0xd10 [ 604.164445][T13178] __get_user_pages+0x54e/0x3530 [ 604.164502][T13178] ? down_read_killable+0x220/0x4b0 [ 604.164552][T13178] ? __pfx___get_user_pages+0x10/0x10 [ 604.164620][T13178] faultin_page_range+0x338/0x940 [ 604.164679][T13178] madvise_do_behavior+0x34c/0x530 [ 604.164733][T13178] ? __pfx_madvise_do_behavior+0x10/0x10 [ 604.164781][T13178] ? down_read+0x13d/0x480 [ 604.164846][T13178] do_madvise+0x176/0x240 [ 604.164891][T13178] ? __pfx_do_madvise+0x10/0x10 [ 604.164939][T13178] ? do_futex+0x122/0x350 [ 604.165008][T13178] ? xfd_validate_state+0x61/0x180 [ 604.165054][T13178] ? __pfx_do_writev+0x10/0x10 [ 604.165094][T13178] __x64_sys_madvise+0xa9/0x110 [ 604.165140][T13178] ? lockdep_hardirqs_on+0x7c/0x110 [ 604.165178][T13178] do_syscall_64+0xcd/0xfa0 [ 604.165221][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.165253][T13178] RIP: 0033:0x7f573318f6c9 [ 604.165279][T13178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.165311][T13178] RSP: 002b:00007f5733ff1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 604.165341][T13178] RAX: ffffffffffffffda RBX: 00007f57333e6090 RCX: 00007f573318f6c9 [ 604.165363][T13178] RDX: 0000000000000017 RSI: 0000000000100000 RDI: 0000000000000000 [ 604.165382][T13178] RBP: 00007f5733211f91 R08: 0000000000000000 R09: 0000000000000000 [ 604.165401][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.165420][T13178] R13: 00007f57333e6128 R14: 00007f57333e6090 R15: 00007ffcc4e05a78 [ 604.165466][T13178] [ 604.168516][T13171] sctp: [Deprecated]: syz.1.1631 (pid 13171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.168516][T13171] Use struct sctp_sack_info instead [ 606.217897][T13213] Invalid ELF header magic: != ELF [ 606.226386][T13224] FAULT_INJECTION: forcing a failure. [ 606.226386][T13224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 606.267908][T13224] CPU: 1 UID: 0 PID: 13224 Comm: syz.0.1645 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 606.267979][T13224] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 606.267999][T13224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 606.268020][T13224] Call Trace: [ 606.268031][T13224] [ 606.268044][T13224] dump_stack_lvl+0x16c/0x1f0 [ 606.268088][T13224] should_fail_ex+0x512/0x640 [ 606.268147][T13224] should_fail_alloc_page+0xe7/0x130 [ 606.268194][T13224] prepare_alloc_pages+0x3c2/0x610 [ 606.268237][T13224] ? rcu_is_watching+0x12/0xc0 [ 606.268277][T13224] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 606.268315][T13224] ? __lock_acquire+0xb8a/0x1c90 [ 606.268386][T13224] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 606.268423][T13224] ? do_raw_spin_lock+0x12c/0x2b0 [ 606.268476][T13224] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 606.268528][T13224] ? find_held_lock+0x2b/0x80 [ 606.268576][T13224] ? __lock_acquire+0xb8a/0x1c90 [ 606.268619][T13224] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 606.268676][T13224] ? policy_nodemask+0xea/0x4e0 [ 606.268724][T13224] alloc_pages_mpol+0x1fb/0x550 [ 606.268781][T13224] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 606.268836][T13224] folio_alloc_mpol_noprof+0x36/0x2f0 [ 606.268889][T13224] shmem_alloc_folio+0x135/0x160 [ 606.268940][T13224] shmem_alloc_and_add_folio+0x499/0xc20 [ 606.269006][T13224] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 606.269064][T13224] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 606.269105][T13224] shmem_get_folio_gfp+0x67f/0x1610 [ 606.269147][T13224] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 606.269183][T13224] ? __pfx_timestamp_truncate+0x10/0x10 [ 606.269228][T13224] shmem_fault+0x1fe/0xa30 [ 606.269264][T13224] ? __pfx_shmem_fault+0x10/0x10 [ 606.269305][T13224] ? __pfx___up_read+0x10/0x10 [ 606.269353][T13224] ? inode_to_bdi+0x9e/0x160 [ 606.269409][T13224] ? __pfx_filemap_map_pages+0x10/0x10 [ 606.269439][T13224] __do_fault+0x10d/0x490 [ 606.269478][T13224] ? __pfx_filemap_map_pages+0x10/0x10 [ 606.269509][T13224] do_pte_missing+0x1a6/0x3ba0 [ 606.269559][T13224] ? find_held_lock+0x2b/0x80 [ 606.269592][T13224] ? __handle_mm_fault+0x1529/0x2aa0 [ 606.269644][T13224] __handle_mm_fault+0x1556/0x2aa0 [ 606.269691][T13224] ? __pfx___handle_mm_fault+0x10/0x10 [ 606.269732][T13224] ? __pte_offset_map_lock+0x174/0x310 [ 606.269762][T13224] ? find_held_lock+0x2b/0x80 [ 606.269795][T13224] ? follow_page_pte+0x5cf/0x1390 [ 606.269833][T13224] handle_mm_fault+0x589/0xd10 [ 606.269877][T13224] __get_user_pages+0x54e/0x3530 [ 606.269919][T13224] ? down_read_killable+0x220/0x4b0 [ 606.269955][T13224] ? __pfx___get_user_pages+0x10/0x10 [ 606.269997][T13224] faultin_page_range+0x338/0x940 [ 606.270038][T13224] madvise_do_behavior+0x34c/0x530 [ 606.270077][T13224] ? __pfx_madvise_do_behavior+0x10/0x10 [ 606.270114][T13224] ? down_read+0x13d/0x480 [ 606.270160][T13224] do_madvise+0x176/0x240 [ 606.270194][T13224] ? __pfx_do_madvise+0x10/0x10 [ 606.270237][T13224] ? do_futex+0x122/0x350 [ 606.270291][T13224] ? __pfx_do_writev+0x10/0x10 [ 606.270320][T13224] __x64_sys_madvise+0xa9/0x110 [ 606.270354][T13224] ? lockdep_hardirqs_on+0x7c/0x110 [ 606.270388][T13224] do_syscall_64+0xcd/0xfa0 [ 606.270420][T13224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.270444][T13224] RIP: 0033:0x7feee178f6c9 [ 606.270464][T13224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.270489][T13224] RSP: 002b:00007feee2696038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 606.270511][T13224] RAX: ffffffffffffffda RBX: 00007feee19e5fa0 RCX: 00007feee178f6c9 [ 606.270527][T13224] RDX: 0000000000000017 RSI: 0000000000100000 RDI: 0000000000000000 [ 606.270542][T13224] RBP: 00007feee1811f91 R08: 0000000000000000 R09: 0000000000000000 [ 606.270557][T13224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.270571][T13224] R13: 00007feee19e6038 R14: 00007feee19e5fa0 R15: 00007fff44ebac78 [ 606.270610][T13224] [ 606.665720][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.987037][T13226] futex_wake_op: syz.1.1644 tries to shift op by -2048; fix this program [ 607.160624][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 608.229165][T13256] netlink: zone id is out of range [ 608.332336][T13256] netlink: zone id is out of range [ 608.337921][T13256] netlink: zone id is out of range [ 608.337939][T13256] netlink: zone id is out of range [ 608.337953][T13256] netlink: zone id is out of range [ 608.337967][T13256] netlink: zone id is out of range [ 608.337981][T13256] netlink: zone id is out of range [ 608.337994][T13256] netlink: zone id is out of range [ 608.338008][T13256] netlink: zone id is out of range [ 608.338022][T13256] netlink: zone id is out of range [ 608.988692][T13269] zswap: compressor not available [ 610.450402][T13307] aoe: could not set interface list: too many interfaces [ 610.550909][T13316] FAULT_INJECTION: forcing a failure. [ 610.550909][T13316] name fail_futex, interval 1, probability 0, space 0, times 0 [ 610.750356][T13316] CPU: 0 UID: 0 PID: 13316 Comm: syz.0.1664 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 610.750432][T13316] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 610.750454][T13316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 610.750490][T13316] Call Trace: [ 610.750502][T13316] [ 610.750516][T13316] dump_stack_lvl+0x16c/0x1f0 [ 610.750562][T13316] should_fail_ex+0x512/0x640 [ 610.750619][T13316] get_futex_key+0x1d0/0x1560 [ 610.750675][T13316] ? __pfx_get_futex_key+0x10/0x10 [ 610.750727][T13316] ? __pfx_cec_ioctl+0x10/0x10 [ 610.750772][T13316] futex_wake+0xea/0x530 [ 610.750830][T13316] ? __pfx_futex_wake+0x10/0x10 [ 610.750894][T13316] ? do_vfs_ioctl+0x128/0x14f0 [ 610.750961][T13316] do_futex+0x1e3/0x350 [ 610.751010][T13316] ? __pfx_do_futex+0x10/0x10 [ 610.751059][T13316] ? find_held_lock+0x2b/0x80 [ 610.751100][T13316] __x64_sys_futex+0x1e0/0x4c0 [ 610.751154][T13316] ? __pfx___x64_sys_futex+0x10/0x10 [ 610.751206][T13316] ? fput+0x9b/0xd0 [ 610.751258][T13316] do_syscall_64+0xcd/0xfa0 [ 610.751301][T13316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.751340][T13316] RIP: 0033:0x7feee178f6c9 [ 610.751367][T13316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.751400][T13316] RSP: 002b:00007feee26540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 610.751431][T13316] RAX: ffffffffffffffda RBX: 00007feee19e6188 RCX: 00007feee178f6c9 [ 610.751452][T13316] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feee19e618c [ 610.751472][T13316] RBP: 00007feee19e6180 R08: 00007feee2697000 R09: 0000000000000000 [ 610.751494][T13316] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 610.751516][T13316] R13: 00007feee19e6218 R14: 00007fff44ebab90 R15: 00007fff44ebac78 [ 610.751561][T13316] [ 611.019248][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 611.426218][T13323] FAULT_INJECTION: forcing a failure. [ 611.426218][T13323] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 611.472588][T13323] CPU: 0 UID: 0 PID: 13323 Comm: syz.2.1667 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 611.472658][T13323] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 611.472677][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 611.472697][T13323] Call Trace: [ 611.472709][T13323] [ 611.472722][T13323] dump_stack_lvl+0x16c/0x1f0 [ 611.472766][T13323] should_fail_ex+0x512/0x640 [ 611.472819][T13323] should_fail_alloc_page+0xe7/0x130 [ 611.472876][T13323] prepare_alloc_pages+0x3c2/0x610 [ 611.472918][T13323] ? rcu_is_watching+0x12/0xc0 [ 611.472956][T13323] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 611.472994][T13323] ? __lock_acquire+0xb8a/0x1c90 [ 611.473053][T13323] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 611.473089][T13323] ? do_raw_spin_lock+0x12c/0x2b0 [ 611.473138][T13323] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 611.473190][T13323] ? find_held_lock+0x2b/0x80 [ 611.473236][T13323] ? __lock_acquire+0xb8a/0x1c90 [ 611.473277][T13323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 611.473335][T13323] ? policy_nodemask+0xea/0x4e0 [ 611.473382][T13323] alloc_pages_mpol+0x1fb/0x550 [ 611.473429][T13323] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 611.473486][T13323] folio_alloc_mpol_noprof+0x36/0x2f0 [ 611.473538][T13323] shmem_alloc_folio+0x135/0x160 [ 611.473588][T13323] shmem_alloc_and_add_folio+0x499/0xc20 [ 611.473654][T13323] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 611.473714][T13323] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 611.473759][T13323] shmem_get_folio_gfp+0x67f/0x1610 [ 611.473801][T13323] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 611.473835][T13323] ? filemap_map_pages+0xe01/0x1b70 [ 611.473883][T13323] shmem_fault+0x1fe/0xa30 [ 611.473919][T13323] ? __pfx_shmem_fault+0x10/0x10 [ 611.473959][T13323] ? __pfx_filemap_map_pages+0x10/0x10 [ 611.474003][T13323] ? __pfx_filemap_map_pages+0x10/0x10 [ 611.474032][T13323] __do_fault+0x10d/0x490 [ 611.474070][T13323] ? __pfx_filemap_map_pages+0x10/0x10 [ 611.474098][T13323] do_pte_missing+0xf4a/0x3ba0 [ 611.474149][T13323] ? find_held_lock+0x2b/0x80 [ 611.474182][T13323] ? __handle_mm_fault+0x1529/0x2aa0 [ 611.474239][T13323] __handle_mm_fault+0x1556/0x2aa0 [ 611.474303][T13323] ? __pfx___handle_mm_fault+0x10/0x10 [ 611.474356][T13323] ? __pte_offset_map_lock+0x174/0x310 [ 611.474398][T13323] ? find_held_lock+0x2b/0x80 [ 611.474444][T13323] ? follow_page_pte+0x5cf/0x1390 [ 611.474498][T13323] handle_mm_fault+0x589/0xd10 [ 611.474557][T13323] __get_user_pages+0x54e/0x3530 [ 611.474624][T13323] ? __pfx___get_user_pages+0x10/0x10 [ 611.474680][T13323] populate_vma_page_range+0x267/0x3f0 [ 611.474730][T13323] ? __pfx_populate_vma_page_range+0x10/0x10 [ 611.474777][T13323] ? __pfx_find_vma_intersection+0x10/0x10 [ 611.474820][T13323] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 611.474869][T13323] __mm_populate+0x1d8/0x380 [ 611.474917][T13323] ? __pfx___mm_populate+0x10/0x10 [ 611.474967][T13323] ? up_write+0x1b2/0x520 [ 611.475020][T13323] do_mlock+0x441/0x800 [ 611.475052][T13323] ? __fget_files+0x20e/0x3c0 [ 611.475086][T13323] ? __pfx_do_mlock+0x10/0x10 [ 611.475121][T13323] ? fput+0x9b/0xd0 [ 611.475166][T13323] ? ksys_write+0x1ac/0x250 [ 611.475200][T13323] ? __pfx_ksys_write+0x10/0x10 [ 611.475244][T13323] __x64_sys_mlock+0x59/0x80 [ 611.475277][T13323] do_syscall_64+0xcd/0xfa0 [ 611.475319][T13323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.475352][T13323] RIP: 0033:0x7f573318f6c9 [ 611.475379][T13323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.475411][T13323] RSP: 002b:00007f5734012038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 611.475442][T13323] RAX: ffffffffffffffda RBX: 00007f57333e5fa0 RCX: 00007f573318f6c9 [ 611.475464][T13323] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 0000000000000005 [ 611.475484][T13323] RBP: 00007f5734012090 R08: 0000000000000000 R09: 0000000000000000 [ 611.475505][T13323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.475526][T13323] R13: 00007f57333e6038 R14: 00007f57333e5fa0 R15: 00007ffcc4e05a78 [ 611.475571][T13323] [ 612.722191][T13341] FAULT_INJECTION: forcing a failure. [ 612.722191][T13341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.763190][T13341] CPU: 0 UID: 0 PID: 13341 Comm: syz.0.1673 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 612.763261][T13341] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 612.763279][T13341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 612.763299][T13341] Call Trace: [ 612.763310][T13341] [ 612.763323][T13341] dump_stack_lvl+0x16c/0x1f0 [ 612.763366][T13341] should_fail_ex+0x512/0x640 [ 612.763422][T13341] _copy_to_user+0x32/0xd0 [ 612.763475][T13341] simple_read_from_buffer+0xcb/0x170 [ 612.763529][T13341] proc_fail_nth_read+0x197/0x240 [ 612.763565][T13341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.763608][T13341] ? rw_verify_area+0xcf/0x6c0 [ 612.763638][T13341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.763674][T13341] vfs_read+0x1e4/0xcf0 [ 612.763714][T13341] ? __pfx___mutex_lock+0x10/0x10 [ 612.763757][T13341] ? __pfx_vfs_read+0x10/0x10 [ 612.763803][T13341] ? __fget_files+0x20e/0x3c0 [ 612.763849][T13341] ksys_read+0x12a/0x250 [ 612.763884][T13341] ? __pfx_ksys_read+0x10/0x10 [ 612.763933][T13341] do_syscall_64+0xcd/0xfa0 [ 612.763974][T13341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.764015][T13341] RIP: 0033:0x7feee178e0dc [ 612.764042][T13341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 612.764075][T13341] RSP: 002b:00007feee2696030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 612.764106][T13341] RAX: ffffffffffffffda RBX: 00007feee19e5fa0 RCX: 00007feee178e0dc [ 612.764129][T13341] RDX: 000000000000000f RSI: 00007feee26960a0 RDI: 0000000000000004 [ 612.764149][T13341] RBP: 00007feee2696090 R08: 0000000000000000 R09: 0000000000000000 [ 612.764170][T13341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.764191][T13341] R13: 00007feee19e6038 R14: 00007feee19e5fa0 R15: 00007fff44ebac78 [ 612.764237][T13341] [ 612.956132][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.321869][T13386] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1684'. [ 616.163028][T13391] zswap: compressor 000 not available [ 616.516712][T13408] Invalid ELF header magic: != ELF [ 616.541320][T13411] cifs: Unknown parameter ' p"jR1' [ 619.173450][T13430] Invalid ELF header magic: != ELF [ 619.287172][T13439] futex_wake_op: syz.1.1697 tries to shift op by -2048; fix this program [ 623.570820][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 624.594441][T13521] futex_wake_op: syz.1.1712 tries to shift op by -2048; fix this program [ 624.611580][T13515] random: crng reseeded on system resumption [ 625.691951][T13532] netlink: 290 bytes leftover after parsing attributes in process `syz.0.1720'. [ 628.693496][T13559] aoe: could not set interface list: too many interfaces [ 633.906080][T13602] syz.2.1736 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 635.163751][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.175403][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.242048][T13618] aoe: could not set interface list: too many interfaces [ 636.885183][T13647] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 636.885183][T13647] M' is too long [ 636.896844][T13647] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 636.896844][T13647] W ' is too long [ 637.735295][T13656] futex_wake_op: syz.2.1742 tries to shift op by -2048; fix this program [ 639.929511][ T2980] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 921 with max blocks 1 with error 117 [ 639.959200][ T2980] EXT4-fs (sda1): This should not happen!! Data will be lost [ 639.959200][ T2980] [ 640.229411][T13677] bridge0: port 3(veth0_to_bridge) entered blocking state [ 640.249285][T13677] bridge0: port 3(veth0_to_bridge) entered disabled state [ 640.267647][T13677] veth0_to_bridge: entered allmulticast mode [ 640.372816][T13677] veth0_to_bridge: entered promiscuous mode [ 640.450650][T13677] bridge0: port 3(veth0_to_bridge) entered blocking state [ 640.458039][T13677] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 640.845629][T13685] binder: 13684:13685 ioctl 400c620e 0 returned -22 [ 640.876392][ T8644] Process accounting paused [ 641.655668][T13693] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 641.671664][T13693] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 641.680627][T13693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 641.700233][T13693] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 641.714189][T13693] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 642.132910][T13702] usb usb36: usbfs: process 13702 (syz.0.1757) did not claim interface 0 before use [ 642.425878][T13692] chnl_net:caif_netlink_parms(): no params data found [ 642.959721][T13712] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 643.801035][T13693] Bluetooth: hci1: command tx timeout [ 644.044510][T13692] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.152867][T13692] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.162160][T13692] bridge_slave_0: entered allmulticast mode [ 644.175937][T13692] bridge_slave_0: entered promiscuous mode [ 644.360274][T13692] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.391499][T13692] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.399310][T13692] bridge_slave_1: entered allmulticast mode [ 644.433292][T13692] bridge_slave_1: entered promiscuous mode [ 644.927146][T13692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.073853][T13692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.607299][T13692] team0: Port device team_slave_0 added [ 645.715123][T13692] team0: Port device team_slave_1 added [ 645.882664][T13693] Bluetooth: hci1: command tx timeout [ 646.155073][T13692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.186403][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.247334][T13728] FAULT_INJECTION: forcing a failure. [ 646.247334][T13728] name failslab, interval 1, probability 0, space 0, times 0 [ 646.260954][T13692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.292583][T13728] CPU: 1 UID: 0 PID: 13728 Comm: syz.2.1762 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 646.292652][T13728] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 646.292671][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 646.292691][T13728] Call Trace: [ 646.292701][T13728] [ 646.292714][T13728] dump_stack_lvl+0x16c/0x1f0 [ 646.292767][T13728] should_fail_ex+0x512/0x640 [ 646.292814][T13728] ? fs_reclaim_acquire+0xae/0x150 [ 646.292861][T13728] should_failslab+0xc2/0x120 [ 646.292904][T13728] __kmalloc_noprof+0xdd/0x880 [ 646.292955][T13728] ? tomoyo_encode2+0x100/0x3e0 [ 646.292998][T13728] ? tomoyo_encode2+0x100/0x3e0 [ 646.293032][T13728] tomoyo_encode2+0x100/0x3e0 [ 646.293075][T13728] tomoyo_encode+0x29/0x50 [ 646.293109][T13728] tomoyo_realpath_from_path+0x18f/0x6e0 [ 646.293159][T13728] tomoyo_path_number_perm+0x245/0x580 [ 646.293208][T13728] ? tomoyo_path_number_perm+0x237/0x580 [ 646.293263][T13728] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 646.293332][T13728] ? find_held_lock+0x2b/0x80 [ 646.293411][T13728] ? find_held_lock+0x2b/0x80 [ 646.293442][T13728] ? hook_file_ioctl_common+0x145/0x410 [ 646.293485][T13728] ? __fget_files+0x20e/0x3c0 [ 646.293525][T13728] security_file_ioctl+0x9b/0x240 [ 646.293559][T13728] __x64_sys_ioctl+0xb7/0x210 [ 646.293612][T13728] do_syscall_64+0xcd/0xfa0 [ 646.293655][T13728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.293688][T13728] RIP: 0033:0x7f573318f6c9 [ 646.293710][T13728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.293739][T13728] RSP: 002b:00007f5734012038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 646.293761][T13728] RAX: ffffffffffffffda RBX: 00007f57333e5fa0 RCX: 00007f573318f6c9 [ 646.293778][T13728] RDX: 00002000000001c0 RSI: fffffffffffffd02 RDI: 0000000000000003 [ 646.293793][T13728] RBP: 00007f5734012090 R08: 0000000000000000 R09: 0000000000000000 [ 646.293808][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.293822][T13728] R13: 00007f57333e6038 R14: 00007f57333e5fa0 R15: 00007ffcc4e05a78 [ 646.293854][T13728] [ 646.298674][T13728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 646.533649][T13692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.540720][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.652274][T13692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.991248][T13692] hsr_slave_0: entered promiscuous mode [ 647.035934][T13692] hsr_slave_1: entered promiscuous mode [ 647.883310][T13753] ima: policy update failed [ 647.903161][ T30] audit: type=1802 audit(4294967301.917:12): pid=13753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1767" res=0 errno=0 [ 647.977685][T13693] Bluetooth: hci1: command tx timeout [ 648.157618][T13764] Unable to find swap-space signature [ 648.207605][T13692] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 648.740730][T13692] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 648.857612][T13692] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 648.935214][T13692] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 649.386866][T13692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.471111][T13692] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.492200][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.499421][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.540069][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.547288][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.044399][T13693] Bluetooth: hci1: command tx timeout [ 651.030859][T13692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.608097][T13692] veth0_vlan: entered promiscuous mode [ 653.708455][T13692] veth1_vlan: entered promiscuous mode [ 654.004602][T13692] veth0_macvtap: entered promiscuous mode [ 654.028019][T13692] veth1_macvtap: entered promiscuous mode [ 654.200666][T13692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.230810][T13840] futex_wake_op: syz.1.1780 tries to shift op by -2048; fix this program [ 654.292288][T13692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.381709][ T2980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.437110][ T2980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.445884][ T2980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.512533][ T2980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.554653][T13847] random: crng reseeded on system resumption [ 654.793073][ T30] audit: type=1800 audit(4294967308.814:13): pid=13848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1782" name="discovery_nqn" dev="configfs" ino=45979 res=0 errno=0 [ 655.498645][T13850] phram: not enough arguments [ 656.248587][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.256479][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.264225][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.467557][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.597806][T13890] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1787'. [ 661.693102][T13887] ICMPv6: process `syz.2.1788' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 661.713044][T13892] FAULT_INJECTION: forcing a failure. [ 661.713044][T13892] name failslab, interval 1, probability 0, space 0, times 0 [ 661.762751][T13892] CPU: 1 UID: 0 PID: 13892 Comm: syz.2.1788 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 661.762825][T13892] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 661.762845][T13892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 661.762865][T13892] Call Trace: [ 661.762877][T13892] [ 661.762892][T13892] dump_stack_lvl+0x16c/0x1f0 [ 661.762938][T13892] should_fail_ex+0x512/0x640 [ 661.762986][T13892] ? __kmalloc_noprof+0xca/0x880 [ 661.763039][T13892] should_failslab+0xc2/0x120 [ 661.763084][T13892] __kmalloc_noprof+0xdd/0x880 [ 661.763142][T13892] ? splice_from_pipe_next+0x1f7/0x5d0 [ 661.763176][T13892] ? copy_splice_read+0x1a8/0xc20 [ 661.763237][T13892] ? copy_splice_read+0x1a8/0xc20 [ 661.763288][T13892] copy_splice_read+0x1a8/0xc20 [ 661.763342][T13892] ? __pfx_pipe_to_null+0x10/0x10 [ 661.763387][T13892] ? __pfx_copy_splice_read+0x10/0x10 [ 661.763438][T13892] ? pipe_unlock+0x4a/0x70 [ 661.763478][T13892] ? __pfx_splice_from_pipe+0x10/0x10 [ 661.763527][T13892] ? direct_splice_actor+0x1ef/0x6c0 [ 661.763564][T13892] ? __pfx_copy_splice_read+0x10/0x10 [ 661.763617][T13892] do_splice_read+0x285/0x370 [ 661.763677][T13892] splice_direct_to_actor+0x2a1/0xa30 [ 661.763714][T13892] ? __pfx_direct_splice_actor+0x10/0x10 [ 661.763756][T13892] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 661.763802][T13892] do_splice_direct+0x174/0x240 [ 661.763835][T13892] ? __pfx_do_splice_direct+0x10/0x10 [ 661.763870][T13892] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 661.763928][T13892] ? bpf_lsm_file_permission+0x9/0x10 [ 661.763966][T13892] ? security_file_permission+0x71/0x210 [ 661.764004][T13892] ? rw_verify_area+0xcf/0x6c0 [ 661.764040][T13892] do_sendfile+0xb06/0xe50 [ 661.764081][T13892] ? __pfx_do_sendfile+0x10/0x10 [ 661.764131][T13892] ? handle_mm_fault+0x2ab/0xd10 [ 661.764187][T13892] ? __x64_sys_futex+0x1e0/0x4c0 [ 661.764231][T13892] ? __x64_sys_futex+0x1e9/0x4c0 [ 661.764281][T13892] __x64_sys_sendfile64+0x1d8/0x220 [ 661.764327][T13892] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 661.764385][T13892] do_syscall_64+0xcd/0xfa0 [ 661.764428][T13892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.764463][T13892] RIP: 0033:0x7f573318f6c9 [ 661.764491][T13892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.764525][T13892] RSP: 002b:00007f5733ff1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 661.764557][T13892] RAX: ffffffffffffffda RBX: 00007f57333e6090 RCX: 00007f573318f6c9 [ 661.764579][T13892] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 661.764599][T13892] RBP: 00007f5733211f91 R08: 0000000000000000 R09: 0000000000000000 [ 661.764620][T13892] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 661.764641][T13892] R13: 00007f57333e6128 R14: 00007f57333e6090 R15: 00007ffcc4e05a78 [ 661.764686][T13892] [ 662.060662][ C1] hrtimer: interrupt took 290761679 ns [ 662.851675][T13902] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[13902] [ 663.013799][T13906] Invalid ELF header magic: != ELF [ 664.675810][T13923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1795'. [ 666.808116][T13942] aoe: could not set interface list: too many interfaces [ 671.061852][ T60] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 7 with max blocks 8 with error 117 [ 671.110459][ T60] EXT4-fs (sda1): This should not happen!! Data will be lost [ 671.110459][ T60] [ 671.447165][T14007] futex_wake_op: syz.0.1811 tries to shift op by -2048; fix this program [ 671.500918][T14010] FAULT_INJECTION: forcing a failure. [ 671.500918][T14010] name failslab, interval 1, probability 0, space 0, times 0 [ 671.533323][T14010] CPU: 1 UID: 0 PID: 14010 Comm: syz.5.1813 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 671.533402][T14010] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 671.533422][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 671.533443][T14010] Call Trace: [ 671.533454][T14010] [ 671.533468][T14010] dump_stack_lvl+0x16c/0x1f0 [ 671.533513][T14010] should_fail_ex+0x512/0x640 [ 671.533563][T14010] ? __kmalloc_cache_noprof+0x5f/0x780 [ 671.533621][T14010] should_failslab+0xc2/0x120 [ 671.533665][T14010] __kmalloc_cache_noprof+0x72/0x780 [ 671.533720][T14010] ? alloc_tty_struct+0x96/0x8c0 [ 671.533767][T14010] ? alloc_tty_struct+0x96/0x8c0 [ 671.533804][T14010] alloc_tty_struct+0x96/0x8c0 [ 671.533845][T14010] ? __pfx_alloc_tty_struct+0x10/0x10 [ 671.533908][T14010] tty_init_dev.part.0+0x1e/0x500 [ 671.533953][T14010] tty_open+0xa4f/0xf90 [ 671.533999][T14010] ? __pfx_tty_open+0x10/0x10 [ 671.534038][T14010] ? chrdev_open+0x58c/0x6a0 [ 671.534084][T14010] ? __pfx_tty_open+0x10/0x10 [ 671.534123][T14010] chrdev_open+0x234/0x6a0 [ 671.534165][T14010] ? __pfx_chrdev_open+0x10/0x10 [ 671.534208][T14010] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 671.534254][T14010] do_dentry_open+0x982/0x1530 [ 671.534293][T14010] ? __pfx_chrdev_open+0x10/0x10 [ 671.534341][T14010] vfs_open+0x82/0x3f0 [ 671.534392][T14010] path_openat+0x1de4/0x2cb0 [ 671.534442][T14010] ? __pfx_path_openat+0x10/0x10 [ 671.534481][T14010] ? __lock_acquire+0xb8a/0x1c90 [ 671.534532][T14010] do_filp_open+0x20b/0x470 [ 671.534569][T14010] ? __pfx_do_filp_open+0x10/0x10 [ 671.534635][T14010] ? alloc_fd+0x471/0x7d0 [ 671.534676][T14010] do_sys_openat2+0x11b/0x1d0 [ 671.534724][T14010] ? __pfx_do_sys_openat2+0x10/0x10 [ 671.534792][T14010] __x64_sys_openat+0x174/0x210 [ 671.534841][T14010] ? __pfx___x64_sys_openat+0x10/0x10 [ 671.534915][T14010] do_syscall_64+0xcd/0xfa0 [ 671.534959][T14010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.534994][T14010] RIP: 0033:0x7fbce4f8f6c9 [ 671.535022][T14010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.535055][T14010] RSP: 002b:00007fbce5e2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 671.535087][T14010] RAX: ffffffffffffffda RBX: 00007fbce51e5fa0 RCX: 00007fbce4f8f6c9 [ 671.535110][T14010] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 671.535132][T14010] RBP: 00007fbce5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 671.535153][T14010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.535174][T14010] R13: 00007fbce51e6038 R14: 00007fbce51e5fa0 R15: 00007ffecdb08cc8 [ 671.535220][T14010] [ 672.042045][T14017] FAULT_INJECTION: forcing a failure. [ 672.042045][T14017] name fail_futex, interval 1, probability 0, space 0, times 0 [ 672.055383][T14017] CPU: 1 UID: 0 PID: 14017 Comm: syz.2.1815 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 672.055436][T14017] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 672.055450][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 672.055465][T14017] Call Trace: [ 672.055473][T14017] [ 672.055482][T14017] dump_stack_lvl+0x16c/0x1f0 [ 672.055515][T14017] should_fail_ex+0x512/0x640 [ 672.055556][T14017] get_futex_key+0x1d0/0x1560 [ 672.055588][T14017] ? tcp_release_cb+0x272/0x4f0 [ 672.055612][T14017] ? __pfx_get_futex_key+0x10/0x10 [ 672.055647][T14017] ? __lock_acquire+0xb8a/0x1c90 [ 672.055688][T14017] futex_wake+0xea/0x530 [ 672.055726][T14017] ? reacquire_held_locks+0xcd/0x1f0 [ 672.055759][T14017] ? __pfx_futex_wake+0x10/0x10 [ 672.055800][T14017] ? find_held_lock+0x2b/0x80 [ 672.055828][T14017] ? mptcp_bind+0x159/0x1e0 [ 672.055867][T14017] do_futex+0x1e3/0x350 [ 672.055900][T14017] ? __pfx_do_futex+0x10/0x10 [ 672.055933][T14017] ? __sys_bind+0x1c5/0x260 [ 672.055971][T14017] __x64_sys_futex+0x1e0/0x4c0 [ 672.056009][T14017] ? __pfx___x64_sys_futex+0x10/0x10 [ 672.056042][T14017] ? xfd_validate_state+0x61/0x180 [ 672.056084][T14017] ? __pfx_do_writev+0x10/0x10 [ 672.056118][T14017] do_syscall_64+0xcd/0xfa0 [ 672.056149][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.056173][T14017] RIP: 0033:0x7f573318f6c9 [ 672.056192][T14017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.056215][T14017] RSP: 002b:00007f57340120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 672.056238][T14017] RAX: ffffffffffffffda RBX: 00007f57333e5fa8 RCX: 00007f573318f6c9 [ 672.056254][T14017] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f57333e5fac [ 672.056269][T14017] RBP: 00007f57333e5fa0 R08: 00007f5734013000 R09: 0000000000000000 [ 672.056284][T14017] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 672.056300][T14017] R13: 00007f57333e6038 R14: 00007ffcc4e05990 R15: 00007ffcc4e05a78 [ 672.056331][T14017] [ 672.576079][T13995] delete_channel: no stack [ 672.691221][T14019] futex_wake_op: syz.2.1817 tries to shift op by -2048; fix this program [ 674.019193][T14045] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[14045] [ 676.049706][T14063] FAULT_INJECTION: forcing a failure. [ 676.049706][T14063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.068936][T14063] CPU: 0 UID: 0 PID: 14063 Comm: syz.1.1823 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 676.069006][T14063] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 676.069026][T14063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 676.069047][T14063] Call Trace: [ 676.069058][T14063] [ 676.069071][T14063] dump_stack_lvl+0x16c/0x1f0 [ 676.069112][T14063] should_fail_ex+0x512/0x640 [ 676.069154][T14063] _copy_to_user+0x32/0xd0 [ 676.069194][T14063] simple_read_from_buffer+0xcb/0x170 [ 676.069235][T14063] proc_fail_nth_read+0x197/0x240 [ 676.069263][T14063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 676.069291][T14063] ? rw_verify_area+0xcf/0x6c0 [ 676.069312][T14063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 676.069337][T14063] vfs_read+0x1e4/0xcf0 [ 676.069366][T14063] ? __pfx___mutex_lock+0x10/0x10 [ 676.069397][T14063] ? __pfx_vfs_read+0x10/0x10 [ 676.069437][T14063] ? __fget_files+0x20e/0x3c0 [ 676.069470][T14063] ksys_read+0x12a/0x250 [ 676.069495][T14063] ? __pfx_ksys_read+0x10/0x10 [ 676.069528][T14063] do_syscall_64+0xcd/0xfa0 [ 676.069558][T14063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.069582][T14063] RIP: 0033:0x7fca5a18e0dc [ 676.069601][T14063] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 676.069624][T14063] RSP: 002b:00007fca5b0e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 676.069648][T14063] RAX: ffffffffffffffda RBX: 00007fca5a3e6090 RCX: 00007fca5a18e0dc [ 676.069671][T14063] RDX: 000000000000000f RSI: 00007fca5b0e30a0 RDI: 0000000000000006 [ 676.069690][T14063] RBP: 00007fca5b0e3090 R08: 0000000000000000 R09: 0000000000000000 [ 676.069709][T14063] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 676.069731][T14063] R13: 00007fca5a3e6128 R14: 00007fca5a3e6090 R15: 00007ffc62cfe7d8 [ 676.069763][T14063] [ 677.454746][T13546] Process accounting resumed [ 677.571401][T14076] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 678.459901][T14084] random: crng reseeded on system resumption [ 678.758657][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.872968][T14091] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 679.056145][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.239988][T13693] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 679.747776][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.876112][T14096] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 680.441936][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.949318][ T60] bridge_slave_1: left allmulticast mode [ 680.981877][ T60] bridge_slave_1: left promiscuous mode [ 681.001315][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.048697][T14107] FAULT_INJECTION: forcing a failure. [ 681.048697][T14107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 681.090473][T14107] CPU: 1 UID: 0 PID: 14107 Comm: syz.0.1834 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 681.090541][T14107] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 681.090560][T14107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 681.090580][T14107] Call Trace: [ 681.090592][T14107] [ 681.090604][T14107] dump_stack_lvl+0x16c/0x1f0 [ 681.090647][T14107] should_fail_ex+0x512/0x640 [ 681.090701][T14107] should_fail_alloc_page+0xe7/0x130 [ 681.090747][T14107] prepare_alloc_pages+0x3c2/0x610 [ 681.090796][T14107] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 681.090836][T14107] ? stack_trace_save+0x8e/0xc0 [ 681.090873][T14107] ? __pfx_stack_trace_save+0x10/0x10 [ 681.090932][T14107] ? do_raw_spin_lock+0x12c/0x2b0 [ 681.090985][T14107] ? stack_depot_save_flags+0x29/0x9c0 [ 681.091035][T14107] ? find_held_lock+0x2b/0x80 [ 681.091070][T14107] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 681.091095][T14107] ? __kasan_kmalloc+0xaa/0xb0 [ 681.091121][T14107] ? copy_splice_read+0x1a8/0xc20 [ 681.091158][T14107] ? splice_direct_to_actor+0x2a1/0xa30 [ 681.091179][T14107] ? do_splice_direct+0x174/0x240 [ 681.091206][T14107] ? do_sendfile+0xb06/0xe50 [ 681.091228][T14107] ? __x64_sys_sendfile64+0x1d8/0x220 [ 681.091258][T14107] ? do_syscall_64+0xcd/0xfa0 [ 681.091285][T14107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.091331][T14107] alloc_pages_bulk_noprof+0x71c/0x1410 [ 681.091366][T14107] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 681.091398][T14107] ? splice_from_pipe_next+0x1f7/0x5d0 [ 681.091421][T14107] ? copy_splice_read+0x1a8/0xc20 [ 681.091465][T14107] copy_splice_read+0x1e1/0xc20 [ 681.091504][T14107] ? __pfx_pipe_to_null+0x10/0x10 [ 681.091536][T14107] ? __pfx_copy_splice_read+0x10/0x10 [ 681.091573][T14107] ? pipe_unlock+0x4a/0x70 [ 681.091599][T14107] ? __pfx_splice_from_pipe+0x10/0x10 [ 681.091631][T14107] ? find_held_lock+0x2b/0x80 [ 681.091656][T14107] ? __pfx_copy_splice_read+0x10/0x10 [ 681.091694][T14107] do_splice_read+0x285/0x370 [ 681.091735][T14107] splice_direct_to_actor+0x2a1/0xa30 [ 681.091760][T14107] ? __pfx_direct_splice_actor+0x10/0x10 [ 681.091789][T14107] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 681.091821][T14107] do_splice_direct+0x174/0x240 [ 681.091845][T14107] ? __pfx_do_splice_direct+0x10/0x10 [ 681.091869][T14107] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 681.091910][T14107] ? bpf_lsm_file_permission+0x9/0x10 [ 681.091937][T14107] ? security_file_permission+0x71/0x210 [ 681.091964][T14107] ? rw_verify_area+0xcf/0x6c0 [ 681.091988][T14107] do_sendfile+0xb06/0xe50 [ 681.092018][T14107] ? __pfx_do_sendfile+0x10/0x10 [ 681.092041][T14107] ? handle_mm_fault+0x2ab/0xd10 [ 681.092081][T14107] ? __x64_sys_futex+0x1e0/0x4c0 [ 681.092113][T14107] ? __x64_sys_futex+0x1e9/0x4c0 [ 681.092148][T14107] __x64_sys_sendfile64+0x1d8/0x220 [ 681.092181][T14107] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 681.092228][T14107] do_syscall_64+0xcd/0xfa0 [ 681.092259][T14107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.092284][T14107] RIP: 0033:0x7feee178f6c9 [ 681.092303][T14107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.092327][T14107] RSP: 002b:00007feee2654038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 681.092350][T14107] RAX: ffffffffffffffda RBX: 00007feee19e6180 RCX: 00007feee178f6c9 [ 681.092366][T14107] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 681.092381][T14107] RBP: 00007feee1811f91 R08: 0000000000000000 R09: 0000000000000000 [ 681.092396][T14107] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 681.092412][T14107] R13: 00007feee19e6218 R14: 00007feee19e6180 R15: 00007fff44ebac78 [ 681.092443][T14107] [ 681.117776][ T60] bridge_slave_0: left allmulticast mode [ 681.117805][ T60] bridge_slave_0: left promiscuous mode [ 681.117999][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.326232][T14105] ICMPv6: process `syz.0.1834' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 681.772039][T14128] ICMPv6: process `syz.0.1837' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 682.691665][T14138] netlink: 'syz.0.1839': attribute type 1 has an invalid length. [ 682.691705][T14138] netlink: 'syz.0.1839': attribute type 1 has an invalid length. [ 682.691721][T14138] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1839'. [ 682.691738][T14138] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1839'. [ 683.060224][T14118] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 683.134652][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.207107][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.225762][ T60] bond0 (unregistering): Released all slaves [ 684.216532][T14166] FAULT_INJECTION: forcing a failure. [ 684.216532][T14166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 684.300970][T14166] CPU: 0 UID: 0 PID: 14166 Comm: syz.5.1843 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 684.301043][T14166] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 684.301064][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 684.301083][T14166] Call Trace: [ 684.301094][T14166] [ 684.301106][T14166] dump_stack_lvl+0x16c/0x1f0 [ 684.301151][T14166] should_fail_ex+0x512/0x640 [ 684.301210][T14166] should_fail_alloc_page+0xe7/0x130 [ 684.301259][T14166] prepare_alloc_pages+0x3c2/0x610 [ 684.301303][T14166] ? rcu_is_watching+0x12/0xc0 [ 684.301343][T14166] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 684.301385][T14166] ? rcu_is_watching+0x12/0xc0 [ 684.301420][T14166] ? trace_mm_page_alloc+0x11f/0x1a0 [ 684.301466][T14166] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 684.301505][T14166] ? __pfx_stack_trace_save+0x10/0x10 [ 684.301545][T14166] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 684.301578][T14166] ? stack_depot_save_flags+0x29/0x9c0 [ 684.301643][T14166] ? alloc_vmap_area+0x648/0x29e0 [ 684.301683][T14166] ? __vmalloc_node_range_noprof+0x271/0x1480 [ 684.301732][T14166] ? xt_alloc_table_info+0x43/0xa0 [ 684.301769][T14166] ? do_ip6t_set_ctl+0x498/0xa70 [ 684.301817][T14166] ? nf_setsockopt+0x8d/0xf0 [ 684.301852][T14166] ? ipv6_setsockopt+0x135/0x170 [ 684.301905][T14166] ? do_sock_setsockopt+0xf3/0x1d0 [ 684.301941][T14166] ? __sys_setsockopt+0x120/0x1a0 [ 684.301991][T14166] ? __x64_sys_setsockopt+0xbd/0x160 [ 684.302056][T14166] alloc_pages_bulk_noprof+0x71c/0x1410 [ 684.302091][T14166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 684.302149][T14166] ? policy_nodemask+0xea/0x4e0 [ 684.302197][T14166] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 684.302234][T14166] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 684.302298][T14166] kasan_populate_vmalloc+0x112/0x2d0 [ 684.302335][T14166] ? alloc_vmap_area+0x8b5/0x29e0 [ 684.302371][T14166] alloc_vmap_area+0x960/0x29e0 [ 684.302413][T14166] ? __pfx_alloc_vmap_area+0x10/0x10 [ 684.302452][T14166] __get_vm_area_node+0x1ca/0x330 [ 684.302490][T14166] __vmalloc_node_range_noprof+0x271/0x1480 [ 684.302526][T14166] ? xt_alloc_table_info+0x43/0xa0 [ 684.302554][T14166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 684.302596][T14166] ? policy_nodemask+0xea/0x4e0 [ 684.302630][T14166] ? xt_alloc_table_info+0x43/0xa0 [ 684.302667][T14166] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 684.302707][T14166] ? ___kmalloc_large_node+0xed/0x160 [ 684.302745][T14166] __kvmalloc_node_noprof+0x431/0x9c0 [ 684.302774][T14166] ? xt_alloc_table_info+0x43/0xa0 [ 684.302803][T14166] ? copy_from_sockptr_offset+0xed/0x1b0 [ 684.302838][T14166] ? xt_alloc_table_info+0x43/0xa0 [ 684.302872][T14166] ? xt_alloc_table_info+0x43/0xa0 [ 684.302908][T14166] xt_alloc_table_info+0x43/0xa0 [ 684.302939][T14166] do_ip6t_set_ctl+0x498/0xa70 [ 684.302976][T14166] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 684.303010][T14166] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 684.303050][T14166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 684.303095][T14166] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 684.303135][T14166] nf_setsockopt+0x8d/0xf0 [ 684.303177][T14166] ipv6_setsockopt+0x135/0x170 [ 684.303225][T14166] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 684.303265][T14166] do_sock_setsockopt+0xf3/0x1d0 [ 684.303298][T14166] __sys_setsockopt+0x120/0x1a0 [ 684.303343][T14166] __x64_sys_setsockopt+0xbd/0x160 [ 684.303395][T14166] ? do_syscall_64+0x91/0xfa0 [ 684.303436][T14166] ? lockdep_hardirqs_on+0x7c/0x110 [ 684.303473][T14166] do_syscall_64+0xcd/0xfa0 [ 684.303503][T14166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.303528][T14166] RIP: 0033:0x7fbce4f8f6c9 [ 684.303547][T14166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.303571][T14166] RSP: 002b:00007fbce5e2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 684.303594][T14166] RAX: ffffffffffffffda RBX: 00007fbce51e5fa0 RCX: 00007fbce4f8f6c9 [ 684.303611][T14166] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 684.303625][T14166] RBP: 00007fbce5011f91 R08: 00000000420b5bf1 R09: 0000000000000000 [ 684.303643][T14166] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 684.303658][T14166] R13: 00007fbce51e6038 R14: 00007fbce51e5fa0 R15: 00007ffecdb08cc8 [ 684.303690][T14166] [ 684.854437][T14166] warn_alloc: 1 callbacks suppressed [ 684.854464][T14166] syz.5.1843: vmalloc error: size 536870911, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 684.875851][T14166] CPU: 1 UID: 0 PID: 14166 Comm: syz.5.1843 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 684.875927][T14166] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 684.875947][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 684.875967][T14166] Call Trace: [ 684.875978][T14166] [ 684.875992][T14166] dump_stack_lvl+0x16c/0x1f0 [ 684.876045][T14166] warn_alloc+0x248/0x3a0 [ 684.876081][T14166] ? __pfx_warn_alloc+0x10/0x10 [ 684.876116][T14166] ? kfree+0x2b8/0x6d0 [ 684.876162][T14166] ? __get_vm_area_node+0x2cd/0x330 [ 684.876214][T14166] ? __get_vm_area_node+0x2cd/0x330 [ 684.876257][T14166] ? __get_vm_area_node+0x208/0x330 [ 684.876311][T14166] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 684.876361][T14166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 684.876419][T14166] ? policy_nodemask+0xea/0x4e0 [ 684.876464][T14166] ? xt_alloc_table_info+0x43/0xa0 [ 684.876515][T14166] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 684.876570][T14166] ? ___kmalloc_large_node+0xed/0x160 [ 684.876631][T14166] __kvmalloc_node_noprof+0x431/0x9c0 [ 684.876671][T14166] ? xt_alloc_table_info+0x43/0xa0 [ 684.876709][T14166] ? copy_from_sockptr_offset+0xed/0x1b0 [ 684.876759][T14166] ? xt_alloc_table_info+0x43/0xa0 [ 684.876807][T14166] ? xt_alloc_table_info+0x43/0xa0 [ 684.876843][T14166] xt_alloc_table_info+0x43/0xa0 [ 684.876888][T14166] do_ip6t_set_ctl+0x498/0xa70 [ 684.876937][T14166] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 684.876984][T14166] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 684.877040][T14166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 684.877104][T14166] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 684.877150][T14166] nf_setsockopt+0x8d/0xf0 [ 684.877193][T14166] ipv6_setsockopt+0x135/0x170 [ 684.877238][T14166] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 684.877282][T14166] do_sock_setsockopt+0xf3/0x1d0 [ 684.877337][T14166] __sys_setsockopt+0x120/0x1a0 [ 684.877397][T14166] __x64_sys_setsockopt+0xbd/0x160 [ 684.877446][T14166] ? do_syscall_64+0x91/0xfa0 [ 684.877484][T14166] ? lockdep_hardirqs_on+0x7c/0x110 [ 684.877522][T14166] do_syscall_64+0xcd/0xfa0 [ 684.877563][T14166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.877596][T14166] RIP: 0033:0x7fbce4f8f6c9 [ 684.877629][T14166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.877664][T14166] RSP: 002b:00007fbce5e2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 684.877696][T14166] RAX: ffffffffffffffda RBX: 00007fbce51e5fa0 RCX: 00007fbce4f8f6c9 [ 684.877719][T14166] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 684.877739][T14166] RBP: 00007fbce5011f91 R08: 00000000420b5bf1 R09: 0000000000000000 [ 684.877761][T14166] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 684.877782][T14166] R13: 00007fbce51e6038 R14: 00007fbce51e5fa0 R15: 00007ffecdb08cc8 [ 684.877828][T14166] [ 684.879671][T14166] Mem-Info: [ 685.191834][T14166] active_anon:21959 inactive_anon:1157 isolated_anon:0 [ 685.191834][T14166] active_file:11590 inactive_file:66328 isolated_file:0 [ 685.191834][T14166] unevictable:768 dirty:780 writeback:0 [ 685.191834][T14166] slab_reclaimable:12445 slab_unreclaimable:99538 [ 685.191834][T14166] mapped:35589 shmem:6214 pagetables:1505 [ 685.191834][T14166] sec_pagetables:0 bounce:0 [ 685.191834][T14166] kernel_misc_reclaimable:0 [ 685.191834][T14166] free:1279607 free_pcp:12029 free_cma:0 [ 685.319861][ T60] hsr_slave_0: left promiscuous mode [ 685.326270][ T60] hsr_slave_1: left promiscuous mode [ 685.345719][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.356549][T14166] Node 0 active_anon:88700kB inactive_anon:4588kB active_file:46360kB inactive_file:265160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143336kB dirty:3120kB writeback:0kB shmem:24244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:47104kB kernel_stack:11800kB pagetables:5768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 685.398855][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.431684][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.450392][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.553918][T14166] Node 1 active_anon:36kB inactive_anon:40kB active_file:0kB inactive_file:152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 685.601009][ T60] veth1_macvtap: left promiscuous mode [ 685.606979][T14166] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 685.642796][ T60] veth1_vlan: left promiscuous mode [ 685.651299][ T60] veth0_vlan: left promiscuous mode [ 685.682523][T14166] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 685.705677][T14166] Node 0 DMA32 free:1198688kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91836kB inactive_anon:4588kB active_file:46360kB inactive_file:265160kB unevictable:1536kB writepending:3124kB zspages:0kB present:3129332kB managed:2545088kB mlocked:0kB bounce:0kB free_pcp:40388kB local_pcp:19732kB free_cma:0kB [ 685.755241][T14166] lowmem_reserve[]: 0 0 1 1 1 [ 685.764767][T14166] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 685.885265][T14166] lowmem_reserve[]: 0 0 0 0 0 [ 685.890112][T14166] Node 1 Normal free:3905220kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:40kB active_file:0kB inactive_file:152kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3384kB local_pcp:192kB free_cma:0kB [ 685.960417][T14166] lowmem_reserve[]: 0 0 0 0 0 [ 685.967010][T14166] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 686.014975][T14166] Node 0 DMA32: 1535*4kB (UE) 777*8kB (UM) 1880*16kB (UME) 1591*32kB (UME) 1102*64kB (UME) 587*128kB (UME) 352*256kB (UM) 197*512kB (UME) 79*1024kB (UME) 4*2048kB (UM) 165*4096kB (UM) = 1194916kB [ 686.034518][T14166] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 686.046763][T14166] Node 1 Normal: 135*4kB (UME) 25*8kB (UME) 28*16kB (UME) 213*32kB (UME) 102*64kB (UME) 38*128kB (UME) 17*256kB (UME) 11*512kB (UME) 5*1024kB (UM) 2*2048kB (ME) 944*4096kB (M) = 3905220kB [ 686.076619][T14166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.092100][T14166] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 686.101797][T14166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.134501][T14166] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 686.191742][T14166] 87462 total pagecache pages [ 686.206646][T14166] 0 pages in swap cache [ 686.217844][T14166] Free swap = 124996kB [ 686.312356][T14166] Total swap = 124996kB [ 686.324031][T14166] 2097051 pages RAM [ 686.332269][T14166] 0 pages HighMem/MovableOnly [ 686.342242][T14166] 428689 pages reserved [ 686.346421][T14166] 0 pages cma reserved [ 686.919865][ T60] team0 (unregistering): Port device team_slave_1 removed [ 686.984911][ T60] team0 (unregistering): Port device team_slave_0 removed [ 687.225395][T14173] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1844'. [ 688.749794][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 689.432575][T14207] random: crng reseeded on system resumption [ 690.207458][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1853'. [ 690.232461][T14222] netlink: 13 bytes leftover after parsing attributes in process `syz.5.1853'. [ 690.741572][T14232] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 691.546231][T14237] can: request_module (can-proto-0) failed. [ 693.396549][T14292] FAULT_INJECTION: forcing a failure. [ 693.396549][T14292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.416649][T14292] CPU: 1 UID: 0 PID: 14292 Comm: syz.2.1862 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 693.416765][T14292] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 693.416784][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 693.416804][T14292] Call Trace: [ 693.416815][T14292] [ 693.416828][T14292] dump_stack_lvl+0x16c/0x1f0 [ 693.416871][T14292] should_fail_ex+0x512/0x640 [ 693.416926][T14292] _copy_from_user+0x2e/0xd0 [ 693.416978][T14292] core_sys_select+0x35b/0xc20 [ 693.417021][T14292] ? __pfx_core_sys_select+0x10/0x10 [ 693.417061][T14292] ? proc_fail_nth_write+0x9f/0x220 [ 693.417132][T14292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 693.417185][T14292] kern_select+0x15d/0x1e0 [ 693.417217][T14292] ? __pfx_kern_select+0x10/0x10 [ 693.417254][T14292] ? __pfx_ksys_write+0x10/0x10 [ 693.417296][T14292] __x64_sys_select+0xbd/0x160 [ 693.417326][T14292] ? do_syscall_64+0x91/0xfa0 [ 693.417362][T14292] ? lockdep_hardirqs_on+0x7c/0x110 [ 693.417399][T14292] do_syscall_64+0xcd/0xfa0 [ 693.417441][T14292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.417473][T14292] RIP: 0033:0x7f573318f6c9 [ 693.417498][T14292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.417529][T14292] RSP: 002b:00007f5734012038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 693.417560][T14292] RAX: ffffffffffffffda RBX: 00007f57333e5fa0 RCX: 00007f573318f6c9 [ 693.417582][T14292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000f [ 693.417601][T14292] RBP: 00007f5734012090 R08: 0000000000000000 R09: 0000000000000000 [ 693.417620][T14292] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 693.417640][T14292] R13: 00007f57333e6038 R14: 00007f57333e5fa0 R15: 00007ffcc4e05a78 [ 693.417685][T14292] [ 694.713265][T14320] hugetlbfs: syz.0.1867 (14320): Using mlock ulimits for SHM_HUGETLB is obsolete [ 696.089541][T14344] FAULT_INJECTION: forcing a failure. [ 696.089541][T14344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.156794][T14344] CPU: 1 UID: 0 PID: 14344 Comm: syz.1.1872 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 696.156846][T14344] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 696.156860][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 696.156874][T14344] Call Trace: [ 696.156882][T14344] [ 696.156892][T14344] dump_stack_lvl+0x16c/0x1f0 [ 696.156938][T14344] should_fail_ex+0x512/0x640 [ 696.156996][T14344] _copy_to_iter+0x29f/0x1710 [ 696.157055][T14344] ? __pfx__copy_to_iter+0x10/0x10 [ 696.157110][T14344] ? __up_read+0x1f8/0x750 [ 696.157152][T14344] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 696.157186][T14344] ? mm_access+0x22d/0x2e0 [ 696.157217][T14344] copy_page_to_iter+0x12a/0x1e0 [ 696.157259][T14344] process_vm_rw_core.constprop.0+0x5ad/0x970 [ 696.157303][T14344] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 696.157348][T14344] ? iovec_from_user+0xbb/0x140 [ 696.157373][T14344] process_vm_rw+0x216/0x2c0 [ 696.157401][T14344] ? __pfx_process_vm_rw+0x10/0x10 [ 696.157433][T14344] ? ksys_write+0x190/0x250 [ 696.157485][T14344] ? ksys_write+0x1ac/0x250 [ 696.157510][T14344] ? __pfx_ksys_write+0x10/0x10 [ 696.157538][T14344] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 696.157567][T14344] ? do_syscall_64+0x91/0xfa0 [ 696.157605][T14344] ? lockdep_hardirqs_on+0x7c/0x110 [ 696.157643][T14344] do_syscall_64+0xcd/0xfa0 [ 696.157683][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.157708][T14344] RIP: 0033:0x7fca5a18f6c9 [ 696.157727][T14344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.157759][T14344] RSP: 002b:00007fca5b0e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 696.157781][T14344] RAX: ffffffffffffffda RBX: 00007fca5a3e6090 RCX: 00007fca5a18f6c9 [ 696.157797][T14344] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000723 [ 696.157812][T14344] RBP: 00007fca5b0e3090 R08: 000000000000000a R09: 0000000000000000 [ 696.157826][T14344] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 696.157841][T14344] R13: 00007fca5a3e6128 R14: 00007fca5a3e6090 R15: 00007ffc62cfe7d8 [ 696.157872][T14344] [ 696.632567][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.639388][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.513813][T14357] netlink: 'syz.2.1874': attribute type 1 has an invalid length. [ 699.005837][T14371] ================================================================== [ 699.005853][T14371] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 699.005888][T14371] Write of size 8 at addr ffffc900036294e0 by task syz.5.1879/14371 [ 699.005909][T14371] [ 699.005923][T14371] CPU: 0 UID: 0 PID: 14371 Comm: syz.5.1879 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 699.005972][T14371] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 699.005987][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 699.006003][T14371] Call Trace: [ 699.006012][T14371] [ 699.006021][T14371] dump_stack_lvl+0x116/0x1f0 [ 699.006051][T14371] print_report+0xcd/0x630 [ 699.006088][T14371] ? __virt_addr_valid+0x81/0x610 [ 699.006122][T14371] ? sys_imageblit+0x1a6f/0x1e60 [ 699.006148][T14371] kasan_report+0xe0/0x110 [ 699.006187][T14371] ? sys_imageblit+0x1a6f/0x1e60 [ 699.006218][T14371] sys_imageblit+0x1a6f/0x1e60 [ 699.006249][T14371] ? __pfx_sys_imageblit+0x10/0x10 [ 699.006276][T14371] ? __pfx__prb_read_valid+0x10/0x10 [ 699.006313][T14371] ? find_held_lock+0x2b/0x80 [ 699.006337][T14371] ? up+0xcb/0x140 [ 699.006366][T14371] ? do_raw_spin_unlock+0x172/0x230 [ 699.006408][T14371] ? prb_read_valid+0x78/0xa0 [ 699.006444][T14371] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 699.006472][T14371] soft_cursor+0x524/0xa10 [ 699.006511][T14371] ? fb_get_color_depth+0x120/0x250 [ 699.006548][T14371] bit_cursor+0xe8c/0x17e0 [ 699.006588][T14371] ? __pfx_bit_cursor+0x10/0x10 [ 699.006629][T14371] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 699.006670][T14371] ? get_color+0x1da/0x450 [ 699.006701][T14371] ? __pfx_bit_cursor+0x10/0x10 [ 699.006736][T14371] fbcon_cursor+0x40c/0x5a0 [ 699.006768][T14371] ? do_blank_screen+0x591/0x5a0 [ 699.006808][T14371] set_cursor+0x1db/0x250 [ 699.006845][T14371] con_write+0x89/0xb0 [ 699.006870][T14371] n_tty_write+0x41e/0x11e0 [ 699.006909][T14371] ? __pfx_n_tty_write+0x10/0x10 [ 699.006940][T14371] ? trace_kmalloc+0x2b/0xd0 [ 699.006971][T14371] ? __pfx_woken_wake_function+0x10/0x10 [ 699.007010][T14371] ? kfree+0x252/0x6d0 [ 699.007047][T14371] ? __pfx_n_tty_write+0x10/0x10 [ 699.007079][T14371] file_tty_write.constprop.0+0x503/0x9b0 [ 699.007111][T14371] redirected_tty_write+0xd4/0x150 [ 699.007137][T14371] vfs_write+0x7d3/0x11d0 [ 699.007162][T14371] ? __pfx_redirected_tty_write+0x10/0x10 [ 699.007197][T14371] ? __pfx_vfs_write+0x10/0x10 [ 699.007221][T14371] ? find_held_lock+0x2b/0x80 [ 699.007254][T14371] ksys_write+0x12a/0x250 [ 699.007279][T14371] ? __pfx_ksys_write+0x10/0x10 [ 699.007309][T14371] do_syscall_64+0xcd/0xfa0 [ 699.007338][T14371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.007363][T14371] RIP: 0033:0x7fbce4f8f6c9 [ 699.007382][T14371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.007406][T14371] RSP: 002b:00007fbce5e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 699.007429][T14371] RAX: ffffffffffffffda RBX: 00007fbce51e6090 RCX: 00007fbce4f8f6c9 [ 699.007446][T14371] RDX: 0000000000000a18 RSI: 0000200000001800 RDI: 0000000000000005 [ 699.007461][T14371] RBP: 00007fbce5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 699.007476][T14371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.007491][T14371] R13: 00007fbce51e6128 R14: 00007fbce51e6090 R15: 00007ffecdb08cc8 [ 699.007515][T14371] [ 699.007524][T14371] [ 699.007531][T14371] The buggy address belongs to a 3-page vmalloc region starting at 0xffffc9000362a000 allocated at n_tty_open+0x1a/0x170 [ 699.007576][T14371] Memory state around the buggy address: [ 699.007589][T14371] ffffc90003629380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 699.007606][T14371] ffffc90003629400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 699.007624][T14371] >ffffc90003629480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 699.007637][T14371] ^ [ 699.007652][T14371] ffffc90003629500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 699.007669][T14371] ffffc90003629580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 699.007682][T14371] ================================================================== [ 699.007696][T14371] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 699.007714][T14371] CPU: 0 UID: 0 PID: 14371 Comm: syz.5.1879 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 699.007762][T14371] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 699.007775][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 699.007790][T14371] Call Trace: [ 699.007798][T14371] [ 699.007807][T14371] dump_stack_lvl+0x3d/0x1f0 [ 699.007836][T14371] vpanic+0x640/0x6f0 [ 699.007872][T14371] panic+0xca/0xd0 [ 699.007904][T14371] ? __pfx_panic+0x10/0x10 [ 699.007944][T14371] check_panic_on_warn+0xab/0xb0 [ 699.007982][T14371] end_report+0x107/0x170 [ 699.008013][T14371] kasan_report+0xee/0x110 [ 699.008044][T14371] ? sys_imageblit+0x1a6f/0x1e60 [ 699.008076][T14371] sys_imageblit+0x1a6f/0x1e60 [ 699.008107][T14371] ? __pfx_sys_imageblit+0x10/0x10 [ 699.008134][T14371] ? __pfx__prb_read_valid+0x10/0x10 [ 699.008169][T14371] ? find_held_lock+0x2b/0x80 [ 699.008201][T14371] ? up+0xcb/0x140 [ 699.008231][T14371] ? do_raw_spin_unlock+0x172/0x230 [ 699.008273][T14371] ? prb_read_valid+0x78/0xa0 [ 699.008309][T14371] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 699.008337][T14371] soft_cursor+0x524/0xa10 [ 699.008395][T14371] ? fb_get_color_depth+0x120/0x250 [ 699.008444][T14371] bit_cursor+0xe8c/0x17e0 [ 699.008497][T14371] ? __pfx_bit_cursor+0x10/0x10 [ 699.008553][T14371] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 699.008601][T14371] ? get_color+0x1da/0x450 [ 699.008632][T14371] ? __pfx_bit_cursor+0x10/0x10 [ 699.008668][T14371] fbcon_cursor+0x40c/0x5a0 [ 699.008701][T14371] ? do_blank_screen+0x591/0x5a0 [ 699.008741][T14371] set_cursor+0x1db/0x250 [ 699.008778][T14371] con_write+0x89/0xb0 [ 699.008804][T14371] n_tty_write+0x41e/0x11e0 [ 699.008842][T14371] ? __pfx_n_tty_write+0x10/0x10 [ 699.008874][T14371] ? trace_kmalloc+0x2b/0xd0 [ 699.008904][T14371] ? __pfx_woken_wake_function+0x10/0x10 [ 699.008944][T14371] ? kfree+0x252/0x6d0 [ 699.008983][T14371] ? __pfx_n_tty_write+0x10/0x10 [ 699.009028][T14371] file_tty_write.constprop.0+0x503/0x9b0 [ 699.009071][T14371] redirected_tty_write+0xd4/0x150 [ 699.009108][T14371] vfs_write+0x7d3/0x11d0 [ 699.009164][T14371] ? __pfx_redirected_tty_write+0x10/0x10 [ 699.009199][T14371] ? __pfx_vfs_write+0x10/0x10 [ 699.009224][T14371] ? find_held_lock+0x2b/0x80 [ 699.009258][T14371] ksys_write+0x12a/0x250 [ 699.009284][T14371] ? __pfx_ksys_write+0x10/0x10 [ 699.009315][T14371] do_syscall_64+0xcd/0xfa0 [ 699.009344][T14371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.009368][T14371] RIP: 0033:0x7fbce4f8f6c9 [ 699.009389][T14371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.009413][T14371] RSP: 002b:00007fbce5e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 699.009435][T14371] RAX: ffffffffffffffda RBX: 00007fbce51e6090 RCX: 00007fbce4f8f6c9 [ 699.009452][T14371] RDX: 0000000000000a18 RSI: 0000200000001800 RDI: 0000000000000005 [ 699.009468][T14371] RBP: 00007fbce5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 699.009484][T14371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.009500][T14371] R13: 00007fbce51e6128 R14: 00007fbce51e6090 R15: 00007ffecdb08cc8 [ 699.009524][T14371] [ 699.009802][T14371] Kernel Offset: disabled